last executing test programs: 8m31.854620604s ago: executing program 4 (id=846): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000500)={&(0x7f00000003c0)=""/181, 0x208000, 0x1000, 0x80000000, 0x4}, 0x20) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x385a, 0x0, 0x2, 0x115a}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xf000, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x3881, 0x10005009, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x4e52ba9def4ca6b0, 0x3, 0x0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x13, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 8m23.464563844s ago: executing program 4 (id=857): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r0, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 8m17.362292936s ago: executing program 4 (id=862): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d007241301"], 0x0) ptrace$cont(0x7, r0, 0x6, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x2d6}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000880)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0}}) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x40044160, 0x3) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000c80)={0x0, 0xb, 0x1, [0x9, 0x6, 0x7, 0x2, 0x7], [0x9, 0x6, 0x1, 0x8, 0x333f, 0xff, 0xe, 0x6, 0x1, 0xe, 0x6c48, 0x401, 0x32c, 0x80, 0x9, 0x9, 0x8, 0x7fffffffffffffff, 0x9, 0x5175, 0xb, 0xb, 0x2, 0x3, 0x8000, 0x1, 0x8001, 0x6, 0x7fff, 0x5, 0x401, 0x101, 0x7f, 0x1000000000, 0x5, 0x7, 0x4, 0x8, 0x9, 0x80, 0x140000, 0x0, 0x8000000000000000, 0x8, 0x6, 0x0, 0xf, 0xe8, 0x200, 0x9, 0xfffffffffffffff1, 0x0, 0x8000, 0x9, 0xffffffffffffffff, 0x0, 0x5, 0x7e, 0x4, 0x280000000000, 0xc7c, 0x8, 0x1, 0x2, 0x401, 0x5, 0x7, 0x9, 0x80, 0x200, 0x10, 0x7, 0x9, 0x9, 0x0, 0x7, 0x3ff, 0x0, 0xcc, 0x3ff, 0x5, 0xfffffffffffffffc, 0x6, 0x8, 0xa, 0x81, 0x9, 0x9980, 0x8, 0x4, 0x3, 0x2, 0x695000000, 0x4d8, 0x1, 0x5, 0x100, 0x7fff, 0xd646, 0x58b9, 0x9, 0x7fffffff, 0x5, 0x6, 0xfff, 0x9, 0x8000000000000001, 0x8000000000000001, 0xca, 0x7, 0x33, 0x2, 0x0, 0x4, 0x80, 0x2, 0x33b, 0x7, 0x0, 0x4, 0x3ff]}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f00000010c0)={0x1, 0x2, {0xff, @usage=0x7fffffff, r4, 0xa9, 0xf926, 0x9, 0xb4, 0x6d2, 0x20, @usage=0x5, 0x3, 0x5f762e67, [0x200, 0x400, 0x5, 0x2, 0x1000, 0xee71]}, {0x1000, @usage=0x1ff, 0x0, 0x9, 0x7, 0xffffffffffffff63, 0x0, 0xfffffffffffffff0, 0x9, @struct={0x1, 0x7}, 0xa, 0x7, [0x8fe, 0x39, 0x3, 0x400, 0x6, 0x3]}, {0x0, @usage=0x7fffffff, r7, 0xff, 0xf, 0x80000001, 0x7b, 0x28a5dafa, 0x880, @usage=0x3, 0x10000, 0x1, [0x0, 0x5d3, 0x8000, 0x0, 0x9]}, {0x40, 0x0, 0x10001}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001740)={r4, 0x3, 0x0, [0xeb, 0x490d, 0x800, 0x3, 0x2800000000000], [0x3, 0x6, 0x2d1f6412, 0x4, 0x3, 0x4, 0x0, 0x10, 0x9, 0xda, 0xfffffffffffffffb, 0xfdb, 0x4, 0x174c, 0x8001, 0x18, 0x1, 0xd, 0x6b, 0x1, 0x9, 0x8, 0x1, 0xb, 0x5, 0x2, 0x7f, 0x6, 0xf7, 0x101, 0x7fffffff, 0x2, 0x8000000000000001, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x0, 0x1d, 0x5, 0x7, 0x100000001, 0x6dbda25d, 0x8, 0x6, 0x3, 0x52e3, 0xab1d, 0x5, 0x4, 0x2, 0x8b0, 0xf, 0xfffffffffffffffa, 0x1, 0x2, 0xbe8, 0x7fff, 0x167e, 0xa9, 0x0, 0x101, 0x7, 0xfffffffffffffff9, 0x6, 0x5, 0x7, 0x3ff, 0xffffffff, 0x1, 0x4, 0xffffffffffffffff, 0x8, 0xca1, 0x7ff, 0x3a12e9c0, 0xa18, 0x1ff, 0x1, 0x6, 0x2, 0x3, 0x40, 0x1, 0x3, 0x73f0, 0x6, 0x8000000000000000, 0x0, 0x8, 0x3b, 0x8, 0x9, 0x5, 0x100000001, 0x2, 0x4, 0xffff, 0x1, 0x2, 0x807, 0x7, 0x9, 0x9, 0x4, 0x8, 0x100, 0x6, 0x2, 0xb41, 0xffffffffffffffff, 0xe, 0xb, 0x7, 0x8, 0xe, 0xfffffffffffffff9, 0xbe, 0x8]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/dynamic_debug/control\x00', 0x1, 0x0) write(r8, &(0x7f0000000380)='file f_subset.cZ+p\n', 0x13) sched_rr_get_interval(0x0, &(0x7f0000000640)) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x9, &(0x7f00000003c0)=ANY=[@ANYBLOB="91ea18", @ANYRES32, @ANYBLOB="00000000a7b500008510000004000000185000001000000000000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x37c9, 0x4d, &(0x7f0000000080)=""/77, 0x41100, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x4}, 0x8, 0x10, 0x0, 0xffffffffffffffcb, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000180)=[{0x0, 0x3, 0x4, 0x8}, {0x0, 0x4, 0xf, 0x2}], 0x10, 0x1}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f0000000280)=""/202, 0xca, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001700)={r9, 0x0, 0x25, 0x1, @val=@target_btf_id=r10}, 0x14) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000001b80)={r5, 0x8, 0x1, [0x2, 0xf, 0xb, 0x3, 0x3ff], [0x2, 0x8, 0xa2, 0x8001, 0x5f, 0xf3dd, 0x0, 0xb376, 0x9, 0x8, 0x7, 0x6, 0xc, 0x3409, 0x5842, 0xa4, 0x9, 0x6, 0x5, 0x10001, 0x1ff, 0x1, 0x7fffffff, 0x5531, 0x3, 0x30000, 0x8000000000000001, 0x10000, 0x4f7a987b, 0x2, 0x7fff, 0xffffffff, 0x0, 0x7, 0x1, 0x4, 0x6, 0x5, 0xf92, 0x5, 0x226d, 0x10, 0x1000000000000000, 0x8, 0x81, 0x81, 0x9, 0x6e7, 0x3, 0x7, 0x7f, 0xfffffffffffffff9, 0xfff, 0x9, 0x5, 0x10000, 0x4, 0x2, 0x6, 0x835, 0xfffffffffffffffa, 0x7da78a35, 0xc6c1, 0x5, 0x3, 0xe, 0x1, 0xe13, 0x9, 0x1, 0x8, 0x1ed, 0xfffffffffffffff0, 0x9, 0x5a4eefcb, 0x3, 0x40, 0x0, 0x34, 0xb, 0x6, 0x0, 0xfffffffffffffffe, 0x5, 0xff, 0x3, 0xffffffffffffffba, 0xfffffffffffffffb, 0x80000001, 0x1, 0x80, 0xfffffffffffffffa, 0x3, 0x9, 0x80000000000000, 0x5d, 0x8, 0xab, 0x10001, 0x4, 0x4, 0x7, 0x400, 0x8, 0x9, 0x6, 0x5, 0x94, 0xb74d, 0x200, 0x8001, 0x8000, 0xf7, 0x101, 0x0, 0x6, 0x100, 0x7, 0xb13, 0x4]}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000400)='./debug/dynamic_debug/control\x00', &(0x7f0000000440), &(0x7f0000000480)='./debug/dynamic_debug/control\x00', 0x1e, 0x2) 8m12.73326391s ago: executing program 4 (id=871): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000140)=0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='1', 0x1) 8m8.58954317s ago: executing program 4 (id=874): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = dup(0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc01000000800000000000000000000014000300736974300000000000"], 0x50}}, 0x0) r5 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_io_timeout/times\x00', 0x1, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)='9', 0x1}], 0x1) syz_ublk_setup_queues(r2, r1, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b03, 0x2, 0x1, 0x2aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x67dd, 0x2000, 0x4003bfff, 0x1002b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 8m6.842460767s ago: executing program 4 (id=877): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @loopback, 0xfffffffc}]}, &(0x7f0000000380)=0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000001140)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES16=r3, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000005c00)=""/241, 0xf1}], 0x7}}], 0x1, 0x0, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) write(r5, &(0x7f0000000380), 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r10, &(0x7f0000000200)='1', 0x1) r11 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r11, &(0x7f0000000280)='0', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000c80000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) 7m51.008875471s ago: executing program 32 (id=877): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @loopback, 0xfffffffc}]}, &(0x7f0000000380)=0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000001140)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES16=r3, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000005c00)=""/241, 0xf1}], 0x7}}], 0x1, 0x0, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) write(r5, &(0x7f0000000380), 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r10, &(0x7f0000000200)='1', 0x1) r11 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r11, &(0x7f0000000280)='0', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000c80000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) 2m54.532240842s ago: executing program 1 (id=1248): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000980)=0x0) syz_io_uring_submit(0x0, r0, r1, &(0x7f00000004c0)=@IORING_OP_SYMLINKAT={0x26, 0x54, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00'}) socket$tipc(0x1e, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local}) personality(0x4100001) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_dev$radio(0x0, 0x0, 0x2) ppoll(0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xc5a, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x4000000, 0x0, 0x0, 0x8000000, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2m51.029914322s ago: executing program 1 (id=1255): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f00000002c0)=0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x2, 0x0, 0x0, @msi={0xd2ef, 0x0, 0x20}}]}) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000800)={0x1, 0x1}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0xc, 0x1, 0x2, 0x1, 0x4}) r3 = socket(0x840000000002, 0x3, 0x100) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0xc0104d03, &(0x7f0000000900)) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000300)=0x7) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000480)={0x5, 0x1, {r5}, {r6}, 0x7e48, 0x1}) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000180)='exofs\x00', 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r7}, 0xc) bpf$BPF_LINK_CREATE_XDP(0x9, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000340), 0xe1ce, r8, 0x0, 0xa0028000}, 0x38) 2m46.493677681s ago: executing program 1 (id=1262): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket(0x1, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x7ffffffe, 0x25dfdbfe, {0x0, 0x0, 0x600, 0x0, 0x60, 0x2000}, [@IFLA_MASTER={0x8, 0x3}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1', 0x1) 2m44.93552354s ago: executing program 0 (id=1263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0x7000, 0x100000}) close(r2) 2m43.263960623s ago: executing program 1 (id=1265): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000140)=0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x7ffffffe, 0x25dfdbfe, {0x0, 0x0, 0x600, r7, 0x60, 0x2000}, [@IFLA_MASTER={0x8, 0x3, r5}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r8, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r9, &(0x7f00000001c0)='1', 0x1) 2m43.148285563s ago: executing program 0 (id=1267): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x800, 0x20000002, 0x202}, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000980)=0x0) syz_io_uring_submit(0x0, r0, r1, &(0x7f00000004c0)=@IORING_OP_SYMLINKAT={0x26, 0x54, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00'}) socket$tipc(0x1e, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local}) personality(0x4100001) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) dup2(r7, r6) ppoll(&(0x7f0000000140)=[{r5, 0x8002}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xc5a, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x4000000, 0x0, 0x0, 0x8000000, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) accept4(r2, &(0x7f0000000300)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000380)=0x80, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'bond0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x4a, 0x9, 0x38, 0x5, 0xa, 0xc, 0x7, 0x5, 0x3, 0xe0, 0x68, 0x2, 0x9, 0x3, 0x2, 0xc, [0x7, 0x10000]}}) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffcd9) close_range(r2, 0xffffffffffffffff, 0x0) 2m40.384125318s ago: executing program 1 (id=1268): mknod(0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000002540)=ANY=[@ANYBLOB="00222200000096231b26e53f07eb0000002a900683749e821dab8b9236599b000400009385900eb7cd8e24bfd641e2ddfe32893394ccccdc"], 0x0}, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x2) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002280)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff2}, {0xb, 0xffe0}, {0x2f08349bae656056, 0xfff2}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9}}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, 0x0, 0x0, 0x114a, 0x0) linkat(r4, &(0x7f0000002380)='./dev/mapper/control\x00', r5, &(0x7f00000023c0)='./file0\x00', 0x400) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) io_destroy(r6) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) 2m37.026296103s ago: executing program 0 (id=1272): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0xcd0}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b1a, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0xe8, 0x180, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) syz_extract_tcp_res$synack(&(0x7f0000000240)={0x41424344}, 0x1, 0x0) getpid() syz_emit_ethernet(0x86, &(0x7f0000000380)={@link_local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x50, 0x2f, 0x0, @remote, @local, {[@fragment={0x0, 0x0, 0x12, 0x1, 0x0, 0x5, 0x65}], {{0x0, 0x22eb, r2, 0x41424344, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, {[@nop, @exp_fastopen={0xfe, 0x11, 0xf989, "5a7abcb0d00a739c1421e50c34"}, @exp_fastopen={0xfe, 0x10, 0xf989, "8dd4e74d7811399fd28f06be"}, @md5sig={0x13, 0x12, "a52e68c2e85870a9649259c68f1f2fe9"}]}}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa0100fd, @local}, {{0x0, 0x4001, r2, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}, 0x0) 2m36.180557304s ago: executing program 0 (id=1273): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000980)=0x0) syz_io_uring_submit(0x0, r0, r1, &(0x7f00000004c0)=@IORING_OP_SYMLINKAT={0x26, 0x54, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00'}) socket$tipc(0x1e, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local}) personality(0x4100001) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_dev$radio(0x0, 0x0, 0x2) ppoll(0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xc5a, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x4000000, 0x0, 0x0, 0x8000000, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2m35.441992665s ago: executing program 2 (id=1275): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000140)=0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x7ffffffe, 0x25dfdbfe, {0x0, 0x0, 0x600, r7, 0x60, 0x2000}, [@IFLA_MASTER={0x8, 0x3, r5}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r8, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r9, &(0x7f00000001c0)='1', 0x1) 2m34.377972015s ago: executing program 1 (id=1276): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x800, 0x20000002, 0x202}, 0x0, &(0x7f0000000040), &(0x7f0000000980)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) personality(0x4100001) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000f1ff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) dup2(r4, r3) ppoll(&(0x7f0000000140)=[{r2, 0x8002}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xc5a, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x4000000, 0x0, 0x0, 0x8000000, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'bond0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x4a, 0x9, 0x38, 0x5, 0xa, 0xc, 0x7, 0x5, 0x3, 0xe0, 0x68, 0x2, 0x9, 0x3, 0x2, 0xc, [0x7, 0x10000]}}) close_range(r0, 0xffffffffffffffff, 0x0) 2m32.60914937s ago: executing program 0 (id=1277): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000140)=0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='1', 0x1) 2m31.085751201s ago: executing program 0 (id=1279): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000000)) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x1}, {}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffc00}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffa, 0x2, 0x10000000, 0x8, 0x3}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f00000000c0)={@loopback, @multicast1, 0x0, "c6c001000000b5dc4e305886d95f080400764f8d0e5a4358ea21274f844a69e9", 0x9, 0x200}, 0x3c) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000180)) 2m29.991134704s ago: executing program 2 (id=1280): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000140)=0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x7ffffffe, 0x25dfdbfe, {0x0, 0x0, 0x600, 0x0, 0x60, 0x2000}, [@IFLA_MASTER={0x8, 0x3, r6}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r8, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r9, &(0x7f00000001c0)='1', 0x1) 2m24.969751689s ago: executing program 2 (id=1282): mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x808810, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$inet(0x2, 0x2, 0x4) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) read(0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00h\x00', @ANYRES32], 0x20}}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9}, 0x38) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 2m23.516687456s ago: executing program 2 (id=1284): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) 2m22.452024206s ago: executing program 2 (id=1286): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0xc0d4a325ddcaa5ed, 0x70bd29, 0x25dfdbfe, {0x2, 0x80, 0x80, 0x4, 0xff, 0x0, 0x0, 0xf, 0x4}, [@FRA_SRC={0x8, 0x2, @empty}]}, 0x24}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mysys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) pread64(r3, &(0x7f0000000440)=""/246, 0xf6, 0x12) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060086dd0000100007007f0000017f0000013a004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendfile(r6, r4, &(0x7f0000000080)=0x7ff, 0x9) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x10001}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008005}, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r4, 0x80186e84, &(0x7f0000000040)={&(0x7f0000000000)=[{0xe08, 0x8001, 0x2}], 0x1, 0x10, 0x2}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000980)={0x4, 0x3e0, 0x200, @empty, 'vlan0\x00'}) close_range(r0, r0, 0x6) 2m20.744152544s ago: executing program 2 (id=1287): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x800, 0x20000002, 0x202}, 0x0, &(0x7f0000000040), &(0x7f0000000980)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) personality(0x4100001) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000f1ff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) dup2(r4, r3) ppoll(&(0x7f0000000140)=[{r2, 0x8002}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xc5a, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x4000000, 0x0, 0x0, 0x8000000, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'bond0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x4a, 0x9, 0x38, 0x5, 0xa, 0xc, 0x7, 0x5, 0x3, 0xe0, 0x68, 0x2, 0x9, 0x3, 0x2, 0xc, [0x7, 0x10000]}}) close_range(r0, 0xffffffffffffffff, 0x0) 2m18.202522017s ago: executing program 33 (id=1276): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x800, 0x20000002, 0x202}, 0x0, &(0x7f0000000040), &(0x7f0000000980)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) personality(0x4100001) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000f1ff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) dup2(r4, r3) ppoll(&(0x7f0000000140)=[{r2, 0x8002}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xc5a, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x4000000, 0x0, 0x0, 0x8000000, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'bond0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x4a, 0x9, 0x38, 0x5, 0xa, 0xc, 0x7, 0x5, 0x3, 0xe0, 0x68, 0x2, 0x9, 0x3, 0x2, 0xc, [0x7, 0x10000]}}) close_range(r0, 0xffffffffffffffff, 0x0) 2m17.803172693s ago: executing program 3 (id=1291): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000140)=0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r6, 0x0, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r7, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r8, &(0x7f00000001c0)='1', 0x1) 2m15.566646829s ago: executing program 34 (id=1279): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000000)) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x1}, {}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffc00}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffa, 0x2, 0x10000000, 0x8, 0x3}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f00000000c0)={@loopback, @multicast1, 0x0, "c6c001000000b5dc4e305886d95f080400764f8d0e5a4358ea21274f844a69e9", 0x9, 0x200}, 0x3c) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000180)) 2m15.351867141s ago: executing program 3 (id=1293): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket(0x11, 0x2, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x24}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100020008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m12.333802742s ago: executing program 3 (id=1294): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003400)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x6a001, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r6, 0x3b71, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x9, 0x4}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006a00), r7) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000006b80)={&(0x7f0000000240)={0x30, r8, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x24000880) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)={0xfffffffd, 0x5, 0x30ba3a5f, 0x7}) 2m10.126365139s ago: executing program 3 (id=1295): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf5) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x11, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x8, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xff}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x1, 0x54, '\x00', 0xff}, {0x2, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0x5}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 2m9.29517745s ago: executing program 3 (id=1296): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x6, 0x7fffffff, 0x1fc, 0x70}, 0x5, 0x5, 0x0, 0x2, 0x0, 0x1}}) 2m9.033878585s ago: executing program 3 (id=1297): r0 = socket(0x200000000000011, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000180)={0x6, 0x4, 0x1fd, 0x7d, 0xd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x0, 0x2, 0x0, 0x2, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x49, 0xfe}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={r5, 0x8002}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000002340)={r5, 0xfff, "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"}, &(0x7f0000001280)=0x1007) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x20f, 0x8, 0x1, r8}, &(0x7f00000001c0)=0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket(0x1e, 0x800, 0x8) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44750611", @ANYRES16=r10, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffff00000800030000000000080001"], 0x44}}, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) r12 = dup(r11) write$UHID_INPUT(r12, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0xb6b) 2m4.706640931s ago: executing program 35 (id=1287): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x800, 0x20000002, 0x202}, 0x0, &(0x7f0000000040), &(0x7f0000000980)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) personality(0x4100001) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000f1ff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) dup2(r4, r3) ppoll(&(0x7f0000000140)=[{r2, 0x8002}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xc5a, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x4000000, 0x0, 0x0, 0x8000000, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'bond0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x4a, 0x9, 0x38, 0x5, 0xa, 0xc, 0x7, 0x5, 0x3, 0xe0, 0x68, 0x2, 0x9, 0x3, 0x2, 0xc, [0x7, 0x10000]}}) close_range(r0, 0xffffffffffffffff, 0x0) 2m1.038406254s ago: executing program 5 (id=899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x14) 2m0.801871769s ago: executing program 5 (id=1299): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x800, 0x20000002, 0x202}, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000980)=0x0) syz_io_uring_submit(0x0, r0, r1, &(0x7f00000004c0)=@IORING_OP_SYMLINKAT={0x26, 0x54, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00'}) socket$tipc(0x1e, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local}) personality(0x4100001) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[], 0x50) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) dup2(r7, r6) ppoll(&(0x7f0000000140)=[{r5, 0x8002}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xc5a, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x4000000, 0x0, 0x0, 0x8000000, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) accept4(r2, &(0x7f0000000300)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000380)=0x80, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'bond0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x4a, 0x9, 0x38, 0x5, 0xa, 0xc, 0x7, 0x5, 0x3, 0xe0, 0x68, 0x2, 0x9, 0x3, 0x2, 0xc, [0x7, 0x10000]}}) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffcd9) close_range(r2, 0xffffffffffffffff, 0x0) 1m53.283737919s ago: executing program 6 (id=1290): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000140)=0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket(0x1, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x7ffffffe, 0x25dfdbfe, {0x0, 0x0, 0x600, 0x0, 0x60, 0x2000}, [@IFLA_MASTER={0x8, 0x3}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1', 0x1) 1m53.162753155s ago: executing program 36 (id=1297): r0 = socket(0x200000000000011, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000180)={0x6, 0x4, 0x1fd, 0x7d, 0xd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x0, 0x2, 0x0, 0x2, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x49, 0xfe}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={r5, 0x8002}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000002340)={r5, 0xfff, "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"}, &(0x7f0000001280)=0x1007) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x20f, 0x8, 0x1, r8}, &(0x7f00000001c0)=0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket(0x1e, 0x800, 0x8) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44750611", @ANYRES16=r10, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffff00000800030000000000080001"], 0x44}}, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) r12 = dup(r11) write$UHID_INPUT(r12, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0xb6b) 1m50.732751552s ago: executing program 6 (id=1301): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000140)=0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket(0x1, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x7ffffffe, 0x25dfdbfe, {0x0, 0x0, 0x600, 0x0, 0x60, 0x2000}, [@IFLA_MASTER={0x8, 0x3}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1', 0x1) 1m47.063804768s ago: executing program 6 (id=1303): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x800, 0x20000002, 0x202}, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000980)=0x0) syz_io_uring_submit(0x0, r0, r1, &(0x7f00000004c0)=@IORING_OP_SYMLINKAT={0x26, 0x54, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00'}) socket$tipc(0x1e, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local}) personality(0x4100001) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000f1ff00"/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) dup2(r7, r6) ppoll(&(0x7f0000000140)=[{r5, 0x8002}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xc5a, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x4000000, 0x0, 0x0, 0x8000000, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) accept4(r2, &(0x7f0000000300)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000380)=0x80, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'bond0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x4a, 0x9, 0x38, 0x5, 0xa, 0xc, 0x7, 0x5, 0x3, 0xe0, 0x68, 0x2, 0x9, 0x3, 0x2, 0xc, [0x7, 0x10000]}}) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffcd9) close_range(r2, 0xffffffffffffffff, 0x0) 1m45.621905111s ago: executing program 37 (id=1299): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x800, 0x20000002, 0x202}, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000980)=0x0) syz_io_uring_submit(0x0, r0, r1, &(0x7f00000004c0)=@IORING_OP_SYMLINKAT={0x26, 0x54, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00'}) socket$tipc(0x1e, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local}) personality(0x4100001) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[], 0x50) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) dup2(r7, r6) ppoll(&(0x7f0000000140)=[{r5, 0x8002}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xc5a, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x4000000, 0x0, 0x0, 0x8000000, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) accept4(r2, &(0x7f0000000300)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000380)=0x80, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'bond0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x4a, 0x9, 0x38, 0x5, 0xa, 0xc, 0x7, 0x5, 0x3, 0xe0, 0x68, 0x2, 0x9, 0x3, 0x2, 0xc, [0x7, 0x10000]}}) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffcd9) close_range(r2, 0xffffffffffffffff, 0x0) 1m35.723293462s ago: executing program 8 (id=1308): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000140)=0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x401, 0x7ffffffe, 0x25dfdbfe, {0x0, 0x0, 0x600, r7, 0x60, 0x2000}}, 0x20}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r8, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r9, &(0x7f00000001c0)='1', 0x1) 1m31.145910393s ago: executing program 38 (id=1303): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x800, 0x20000002, 0x202}, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000980)=0x0) syz_io_uring_submit(0x0, r0, r1, &(0x7f00000004c0)=@IORING_OP_SYMLINKAT={0x26, 0x54, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00'}) socket$tipc(0x1e, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local}) personality(0x4100001) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000f1ff00"/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) dup2(r7, r6) ppoll(&(0x7f0000000140)=[{r5, 0x8002}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xc5a, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x4000000, 0x0, 0x0, 0x8000000, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) accept4(r2, &(0x7f0000000300)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000380)=0x80, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'bond0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x4a, 0x9, 0x38, 0x5, 0xa, 0xc, 0x7, 0x5, 0x3, 0xe0, 0x68, 0x2, 0x9, 0x3, 0x2, 0xc, [0x7, 0x10000]}}) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffcd9) close_range(r2, 0xffffffffffffffff, 0x0) 1m30.871134738s ago: executing program 8 (id=1311): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800000, 0x13, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002cc0)) r4 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) 1m27.238095241s ago: executing program 8 (id=1314): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000140)=0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xd, 0x0, 0x480c5}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r7, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r8, &(0x7f00000001c0)='1', 0x1) 1m23.317107274s ago: executing program 8 (id=1316): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000140)=0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x7ffffffe, 0x25dfdbfe, {0x0, 0x0, 0x600, r8, 0x60, 0x2000}, [@IFLA_MASTER={0x8, 0x3, r6}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r9, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r10, &(0x7f00000001c0)='1', 0x1) 1m17.620269887s ago: executing program 8 (id=1318): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000140)=0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket(0x1, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xd, 0x0, 0x480c5}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1', 0x1) 1m15.273960696s ago: executing program 8 (id=1319): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x800, 0x20000002, 0x202}, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000980)=0x0) syz_io_uring_submit(0x0, r0, r1, &(0x7f00000004c0)=@IORING_OP_SYMLINKAT={0x26, 0x54, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00'}) socket$tipc(0x1e, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local}) personality(0x4100001) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000f1ff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) dup2(r7, r6) ppoll(&(0x7f0000000140)=[{r5, 0x8002}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xc5a, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x4000000, 0x0, 0x0, 0x8000000, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) accept4(r2, &(0x7f0000000300)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000380)=0x80, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'bond0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x4a, 0x9, 0x38, 0x5, 0xa, 0xc, 0x7, 0x5, 0x3, 0xe0, 0x68, 0x2, 0x9, 0x3, 0x2, 0xc, [0x7, 0x10000]}}) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffcd9) close_range(r2, 0xffffffffffffffff, 0x0) 1m0.170930323s ago: executing program 39 (id=1319): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x800, 0x20000002, 0x202}, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000980)=0x0) syz_io_uring_submit(0x0, r0, r1, &(0x7f00000004c0)=@IORING_OP_SYMLINKAT={0x26, 0x54, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00'}) socket$tipc(0x1e, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local}) personality(0x4100001) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000f1ff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) dup2(r7, r6) ppoll(&(0x7f0000000140)=[{r5, 0x8002}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xc5a, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x4000000, 0x0, 0x0, 0x8000000, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) accept4(r2, &(0x7f0000000300)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000380)=0x80, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'bond0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x4a, 0x9, 0x38, 0x5, 0xa, 0xc, 0x7, 0x5, 0x3, 0xe0, 0x68, 0x2, 0x9, 0x3, 0x2, 0xc, [0x7, 0x10000]}}) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffcd9) close_range(r2, 0xffffffffffffffff, 0x0) 53.752834003s ago: executing program 7 (id=1328): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000300)=0x20, 0x4) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40002100, 0x0) write$binfmt_misc(r1, &(0x7f0000000300), 0x6) 53.029708409s ago: executing program 7 (id=1329): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='1', 0x1) 49.477420841s ago: executing program 7 (id=1331): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='1', 0x1) 46.818443825s ago: executing program 7 (id=1332): ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000002"], 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r3, 0x0, 0x5b) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) iopl(0x3) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x122240, 0x10b, 0x3}, 0x18) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x4, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 42.023536303s ago: executing program 7 (id=1333): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c00078018000180080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100230100003402000006000000080001009e56c33e0a696c4751da86596792c3e08b530ec58bb413572c6661b1bf1d02cc1dd740bd017e163829182103c7acfdd230a9912221d4637ab6b5c3f92be141b3fc0ee2e7993166abd21375e563c5ae3669f494789efbb2a850d0a5ef0c5530de509f", @ANYRES32=0x0, @ANYBLOB="08000300ffffffff"], 0x24}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x400, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0xa, 0xffff}, {0xfff1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x20004055) r6 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x2, 0x94) mmap$qrtrtun(&(0x7f0000551000/0x1000)=nil, 0x1000, 0x0, 0x100010, r6, 0x10) r7 = socket$inet(0x2, 0x1, 0x4) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000600)={0x8, 0x4, {0x0, @struct={0x0, 0x200}, 0x0, 0x1, 0xa, 0x69, 0x9, 0x380000000, 0x10, @usage=0x8, 0x8, 0x1, [0x9, 0x4, 0x8, 0x1, 0x9, 0x8]}, {0xfffffffffffffffe, @struct={0x5, 0xfffffff7}, 0x0, 0xffffffffffffffff, 0x2, 0x8000000000000001, 0x9, 0x9, 0x40, @usage=0x1, 0x9, 0x8, [0x31, 0x8, 0x0, 0x59, 0x4, 0x7bcf]}, {0x2, @usage=0xa, 0x0, 0x7f, 0x1, 0x1, 0x0, 0x9, 0x442, @usage=0x5, 0x8000, 0x3, [0x7fff, 0x6, 0x9, 0x6, 0x5, 0xd]}, {0x6, 0x800, 0x7}}) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000001000)={{r5}, 0x0, 0x12, @inherit={0x78, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000000000000060000000000000006000000000000000000000000000000220000000000000000000000000000000e0000000000000007000000000000000300000000000000000000000000009b3700000000000000030000000000000032b500e5ffffffff0600"/120]}, @devid=r9}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r8, 0x40045542, 0x0) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x5, 0x9, 0x6, 0x0, 0x7f]}, &(0x7f0000000140)=0x54) r10 = socket$kcm(0x2, 0x200000000000001, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000000c0)='9\x00\x00\x00', 0x4}], 0x1) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r11) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r12, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) setsockopt$sock_attach_bpf(r10, 0x1, 0x50, &(0x7f0000000100), 0x48) 38.406887847s ago: executing program 7 (id=1335): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c) listen(r0, 0x5) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1ff, 0xf803, 0x5, 0x0, 0x1}, 0x14) socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff038}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x5d) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0x15) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000080)=0x2) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd616a14000000000000000000000000000000ffffac1414aaff0200000000000000000000000000018100907800"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xeb8, 0x30, 0xb, 0x0, 0x0, {}, [{0xea4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe58, 0x2, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0x2e6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0xb51d, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0xff, 0x7, 0x5, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x2, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x8b52, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x26f3, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x48, 0xea20}, {0x8, 0x8, 0x9, 0x27, 0x9ea8, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x4}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x883, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x8, 0x0, 0x4}, {0x5, 0x3, 0xa, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x40000002}, {0x8001, 0x87, 0x4, 0x1ff, 0x3, 0x4}, {0x6, 0x9c4, 0x8b7f, 0x11, 0x3, 0x7}, {0x8, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x391, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x3b, 0x1ff, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0x1, 0x6}, {0x2, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x7ff, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0xffffffff, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x2009, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x6, 0xfffffff1, 0x2f2c, 0x400, 0x1, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xffffbffa, 0x736b}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x2004, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0x33, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x80, 0x6}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x12}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0xc2e0, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0xb}, {0x9, 0x0, 0x9, 0x2, 0x5}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x6}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x804, 0x4c, 0x7, 0x0, 0x0, 0x9}, {0x6, 0xdfff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x200, 0x81}, {0x970, 0x100, 0xb3eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x1000002, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x6, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x1, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffffb, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0xe0f3, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0x5, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x7ffffffe}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0xaa7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8e, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {}, {0xfffffffffffffffd, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}], 0x2}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb8}}, 0x0) 32.413744879s ago: executing program 9 (id=1337): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000140)=0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x7ffffffe, 0x25dfdbfe, {0x0, 0x0, 0x600, r7, 0x60, 0x2000}, [@IFLA_MASTER={0x8, 0x3, r5}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r8, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r9, &(0x7f00000001c0)='1', 0x1) 28.113358618s ago: executing program 9 (id=1338): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x1, 0x7fffffff, 0x3}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f00000002c0)=0xe273, 0x4) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x1}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000280)={r4, 0x5, 0x401}, 0x8) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x77359400}, {0x0, 0x9}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r5, 0x701, 0x0, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000085}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000aac000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b68001280500001800e000100636f6e6e6c696d69740000003c0002800800024000000001080001400007000d080001400000000308000267c97a6f00080001400000000808000140000004010800024000000000140001800c000100636f756e746572000400028008000340000001"], 0xd4}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) timer_gettime(r2, &(0x7f0000000300)) r9 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0xffff, 0x7, 0x99, 0x80000000}, {0x1000, 0xf2, 0x9}, {0x0, 0x5, 0x7f, 0x6}, {0x8, 0x9, 0x7, 0xb3a8}, {0x7, 0x6, 0x6, 0x4}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@delqdisc={0x24, 0x25, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x2}, {0x7, 0xc}, {0x7, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 27.284648021s ago: executing program 9 (id=1339): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/220, 0xdc}, 0x5}], 0x1, 0x60010000, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)=0x40) r1 = socket(0xa, 0x6, 0x39) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x141) sendmsg$nl_route(r0, 0x0, 0x2004c080) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x6}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdir(&(0x7f0000000240)='./file1\x00', 0x8) lseek(0xffffffffffffffff, 0x5, 0x4) r3 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r3, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00000c9000/0x4000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000140)='net/llc/core\x00') 22.69061111s ago: executing program 40 (id=1335): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c) listen(r0, 0x5) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1ff, 0xf803, 0x5, 0x0, 0x1}, 0x14) socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff038}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x5d) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0x15) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000080)=0x2) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd616a14000000000000000000000000000000ffffac1414aaff0200000000000000000000000000018100907800"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xeb8, 0x30, 0xb, 0x0, 0x0, {}, [{0xea4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe58, 0x2, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0x2e6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0xb51d, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0xff, 0x7, 0x5, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x2, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x8b52, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x26f3, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x48, 0xea20}, {0x8, 0x8, 0x9, 0x27, 0x9ea8, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x4}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x883, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x8, 0x0, 0x4}, {0x5, 0x3, 0xa, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x40000002}, {0x8001, 0x87, 0x4, 0x1ff, 0x3, 0x4}, {0x6, 0x9c4, 0x8b7f, 0x11, 0x3, 0x7}, {0x8, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x391, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x3b, 0x1ff, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0x1, 0x6}, {0x2, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x7ff, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0xffffffff, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x2009, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x6, 0xfffffff1, 0x2f2c, 0x400, 0x1, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xffffbffa, 0x736b}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x2004, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0x33, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x80, 0x6}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x12}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0xc2e0, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0xb}, {0x9, 0x0, 0x9, 0x2, 0x5}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x6}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x804, 0x4c, 0x7, 0x0, 0x0, 0x9}, {0x6, 0xdfff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x200, 0x81}, {0x970, 0x100, 0xb3eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x1000002, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x6, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x1, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffffb, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0xe0f3, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0x5, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x7ffffffe}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0xaa7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8e, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {}, {0xfffffffffffffffd, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}], 0x2}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb8}}, 0x0) 22.110963317s ago: executing program 9 (id=1341): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x25, 0x2, @thr={0x0, 0x0}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) unlink(0x0) sendmmsg$unix(r0, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000000000a62800000001040000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x8001}}], 0x2, 0x80) r2 = io_uring_setup(0x3a5c, &(0x7f0000000140)={0x0, 0xc95e, 0x0, 0x2, 0xaa}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x4d, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x10}, {0x0, 0xfe, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_getoverrun(r4) inotify_add_watch(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x40) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) mmap(&(0x7f0000231000/0x3000)=nil, 0x3000, 0x2000002, 0x53, r2, 0xf2f24000) 16.692666822s ago: executing program 9 (id=1342): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x60800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x1, 0x0) listen(r2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) recvmsg$can_raw(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000002c0)=""/222, 0xde}], 0x1}, 0x10000) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{0x0, 0x24}], 0x1}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x8000000000001f8, 0x0, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @local}, &(0x7f0000000280)=0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000380)={&(0x7f0000000040), 0x6e, &(0x7f00000018c0)=[{&(0x7f00000000c0)=""/36, 0x24}, {&(0x7f0000000140)=""/26, 0x1a}, {&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f00000003c0)=""/234, 0xea}, {&(0x7f00000004c0)=""/79, 0x4f}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/172, 0xac}, {&(0x7f0000001880)=""/3, 0x3}], 0x8, &(0x7f0000000540)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}, 0x10043) 15.420740341s ago: executing program 9 (id=1343): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe8d, 0x0, 0x0, 0x0, 0x400000}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x8}], 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}}, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4db}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}}, 0x200040c0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x140001, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001e00)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xe, 0x9}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8849}, 0x408c4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x3b, &(0x7f0000000040)={0x0}}, 0x4000040) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) 0s ago: executing program 41 (id=1343): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe8d, 0x0, 0x0, 0x0, 0x400000}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x8}], 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}}, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4db}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}}, 0x200040c0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x140001, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001e00)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xe, 0x9}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8849}, 0x408c4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x3b, &(0x7f0000000040)={0x0}}, 0x4000040) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) kernel console output (not intermixed with test programs): LAN 0 to HW filter on device netdevsim3 [ 686.302303][ T30] audit: type=1400 audit(1786938840.873:459): avc: denied { write } for pid=10926 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 686.582521][T10938] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 686.661570][ T30] audit: type=1400 audit(1786938841.183:460): avc: denied { bind } for pid=10939 comm="syz.2.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 686.693700][T10938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 686.728169][T10622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.858622][ T36] Bluetooth: Error in BCSP hdr checksum [ 686.912093][T10622] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.927964][ T30] audit: type=1400 audit(1786938841.233:461): avc: denied { listen } for pid=10939 comm="syz.2.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 686.949369][ T5705] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 687.034077][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.041146][ T5828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.115908][ T76] Bluetooth: Error in BCSP hdr checksum [ 687.209635][ T5705] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 688.509192][ T30] audit: type=1400 audit(1786938841.423:462): avc: denied { connect } for pid=10939 comm="syz.2.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 688.702044][T10803] Bluetooth: hci5: command 0x1003 tx timeout [ 688.709710][ T5596] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 688.786704][ T5705] usb 2-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 688.824268][ T12] Bluetooth: Error in BCSP hdr checksum [ 688.834959][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.842076][ T5828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.068354][ T7089] Bluetooth: Error in BCSP hdr checksum [ 689.101641][ T5705] usb 2-1: config 0 interface 0 has no altsetting 0 [ 689.132515][ T30] audit: type=1400 audit(1786938841.423:463): avc: denied { write } for pid=10939 comm="syz.2.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 689.220594][T10954] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 689.232214][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 689.315815][ T12] Bluetooth: Error in BCSP hdr checksum [ 689.334198][ T5705] usb 2-1: Product: syz [ 689.385892][ T5705] usb 2-1: Manufacturer: syz [ 689.525710][ T5705] usb 2-1: SerialNumber: syz [ 689.585507][ T30] audit: type=1400 audit(1786938841.513:464): avc: denied { read } for pid=10939 comm="syz.2.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 689.661440][ T5705] usb 2-1: config 0 descriptor?? [ 689.950557][ T5705] usb 2-1: can't set config #0, error -71 [ 692.341461][ T5705] usb 2-1: USB disconnect, device number 62 [ 696.175309][ T30] audit: type=1400 audit(1786938850.813:465): avc: denied { write } for pid=10944 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.396707][T10986] IPVS: Unknown mcast interface: lo [ 696.435445][T10976] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 696.519345][ T30] audit: type=1400 audit(1786938851.003:466): avc: denied { write } for pid=10982 comm="syz.1.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 696.634877][T10803] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 696.643664][T10803] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 696.679597][T10803] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 696.687491][T10803] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 696.706555][T10803] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 696.894949][ T30] audit: type=1400 audit(1786938851.033:467): avc: denied { setopt } for pid=10982 comm="syz.1.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 697.153379][T10999] random: crng reseeded on system resumption [ 697.189389][ T30] audit: type=1400 audit(1786938851.233:468): avc: denied { write } for pid=10987 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 697.302308][ T9915] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 697.637977][ T9915] usb 2-1: Using ep0 maxpacket: 16 [ 697.762083][ T30] audit: type=1400 audit(1786938851.763:469): avc: denied { name_connect } for pid=10983 comm="syz.3.1194" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 697.830765][ T9915] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 697.868395][T11008] smc: net device ip6_vti0 applied user defined pnetid SYZ2 [ 697.906461][ T9915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.995942][ T30] audit: type=1400 audit(1786938851.793:470): avc: denied { write } for pid=10997 comm="syz.2.1197" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 698.094867][ T9915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.196278][ T9915] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 698.312352][ T5705] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 698.349190][ T30] audit: type=1400 audit(1786938851.793:471): avc: denied { open } for pid=10997 comm="syz.2.1197" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 698.390553][ T9915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.464232][ T9915] usb 2-1: config 0 descriptor?? [ 698.553139][ T5705] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 698.684571][ T5705] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 698.752095][T10803] Bluetooth: hci5: command tx timeout [ 698.836916][ T5705] usb 1-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 698.930393][ T30] audit: type=1400 audit(1786938853.563:472): avc: denied { create } for pid=11029 comm="syz.2.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 698.966453][ T5705] usb 1-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 698.990264][T11030] binder: 11029:11030 ioctl 40046205 0 returned -22 [ 699.030861][ T9915] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0037/input/input58 [ 699.123083][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 699.138357][T11033] binder: 11029:11033 ioctl c028660f 200000000100 returned -22 [ 699.158385][ T30] audit: type=1400 audit(1786938853.743:473): avc: denied { write } for pid=11007 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 699.211694][ T9915] microsoft 0003:045E:07DA.0037: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 699.442689][ T5705] usb 1-1: SerialNumber: syz [ 699.520562][ T5705] usb 1-1: can't set config #253, error -71 [ 699.616376][T11040] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 699.668132][ T9915] usb 2-1: USB disconnect, device number 63 [ 699.683915][ T5705] usb 1-1: USB disconnect, device number 60 [ 699.900163][ T30] audit: type=1400 audit(1786938854.533:474): avc: denied { write } for pid=11041 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 699.964861][T11036] fido_id[11036]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 701.021827][T10803] Bluetooth: hci5: command tx timeout [ 702.067791][ T30] audit: type=1400 audit(1786938856.493:475): avc: denied { mount } for pid=11045 comm="syz.0.1201" name="/" dev="pstore" ino=3693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 702.422106][ T5705] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 703.072042][ T5596] Bluetooth: hci5: command tx timeout [ 703.804884][T11058] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 704.000625][ T30] audit: type=1400 audit(1786938856.633:476): avc: denied { bind } for pid=11045 comm="syz.0.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 704.052675][ T5705] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 704.151590][ T5705] usb 4-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 704.238524][T11059] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 704.899846][ T30] audit: type=1400 audit(1786938858.663:477): avc: denied { append } for pid=11062 comm="syz.0.1204" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 705.211345][ T5596] Bluetooth: hci5: command tx timeout [ 705.517580][ T5705] usb 4-1: config 0 interface 0 has no altsetting 0 [ 706.045934][ T5705] usb 4-1: string descriptor 0 read error: -71 [ 706.305510][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 706.322647][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1205'. [ 706.414352][ T12] bridge_slave_1: left allmulticast mode [ 706.434557][ T30] audit: type=1400 audit(1786938858.713:478): avc: denied { read } for pid=11062 comm="syz.0.1204" name="usbmon7" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 706.458598][ T5705] usb 4-1: config 0 descriptor?? [ 706.506608][ T12] bridge_slave_1: left promiscuous mode [ 706.535591][ T5705] usb 4-1: can't set config #0, error -71 [ 706.560447][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.620198][ T5705] usb 4-1: USB disconnect, device number 59 [ 707.618088][ T12] bridge_slave_0: left allmulticast mode [ 707.898538][ T12] bridge_slave_0: left promiscuous mode [ 707.904216][ T30] audit: type=1400 audit(1786938858.713:479): avc: denied { open } for pid=11062 comm="syz.0.1204" path="/dev/usbmon7" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 707.956394][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.064443][T11083] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 708.189198][ T30] audit: type=1400 audit(1786938858.773:480): avc: denied { create } for pid=11062 comm="syz.0.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 708.262044][ T5705] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 708.724900][ T5705] usb 4-1: not running at top speed; connect to a high speed hub [ 709.923787][ T30] audit: type=1400 audit(1786938858.783:481): avc: denied { bind } for pid=11062 comm="syz.0.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 709.946354][ T5705] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 710.275674][ T5705] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 710.483458][ T5705] usb 4-1: can't read configurations, error -71 [ 710.766814][ T30] audit: type=1400 audit(1786938858.803:482): avc: denied { write } for pid=11062 comm="syz.0.1204" path="socket:[54568]" dev="sockfs" ino=54568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 712.515889][ T30] audit: type=1400 audit(1786938859.813:483): avc: denied { name_bind } for pid=11062 comm="syz.0.1204" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 712.706455][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1210'. [ 712.845833][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.546673][ T30] audit: type=1400 audit(1786938862.713:484): avc: denied { write } for pid=11052 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 714.552545][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 714.634563][ T12] bond0 (unregistering): Released all slaves [ 714.650571][ T30] audit: type=1400 audit(1786938865.083:485): avc: denied { write } for pid=11090 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 714.689134][T11072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.720194][T11072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.756303][T11072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.784724][T11072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.074943][ T12] hsr_slave_0: left promiscuous mode [ 715.768465][ T12] hsr_slave_1: left promiscuous mode [ 715.867722][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.942045][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.563180][ T6090] Bluetooth: Error in BCSP hdr checksum [ 717.822180][ T83] Bluetooth: Error in BCSP hdr checksum [ 717.886541][ T9] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 718.098837][T11126] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 718.109351][ T83] Bluetooth: Error in BCSP hdr checksum [ 718.335398][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 718.568993][ T8994] Bluetooth: Error in BCSP hdr checksum [ 718.579910][ T9] usb 3-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 718.788477][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 718.827223][ T6090] Bluetooth: Error in BCSP hdr checksum [ 718.900993][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 719.040664][ T9] usb 3-1: Product: syz [ 719.084174][ T9] usb 3-1: Manufacturer: syz [ 719.165991][ T9] usb 3-1: SerialNumber: syz [ 719.219903][ T9] usb 3-1: config 0 descriptor?? [ 719.312924][ T5596] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 719.568894][ T9] usb 3-1: can't set config #0, error -71 [ 719.702051][ T9] usb 3-1: USB disconnect, device number 59 [ 719.769265][ T30] audit: type=1400 audit(1786938874.403:486): avc: denied { mount } for pid=11137 comm="syz.2.1216" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 719.895214][ T12] team0 (unregistering): Port device team_slave_1 removed [ 720.014189][ T12] team0 (unregistering): Port device team_slave_0 removed [ 720.245504][ T30] audit: type=1400 audit(1786938874.513:487): avc: denied { bind } for pid=11137 comm="syz.2.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 720.271830][T11139] dlm: no locking on control device [ 720.701725][ T30] audit: type=1400 audit(1786938874.513:488): avc: denied { listen } for pid=11137 comm="syz.2.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 721.115101][ T30] audit: type=1400 audit(1786938874.553:489): avc: denied { accept } for pid=11137 comm="syz.2.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 721.250278][T11143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 721.525865][ T30] audit: type=1400 audit(1786938874.553:490): avc: denied { write } for pid=11137 comm="syz.2.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 721.989674][ T8994] Bluetooth: Error in BCSP hdr checksum [ 722.002053][ T9915] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 723.019189][ T30] audit: type=1400 audit(1786938874.553:491): avc: denied { read } for pid=11137 comm="syz.2.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 723.624782][ T951] Bluetooth: Error in BCSP hdr checksum [ 723.713729][T10803] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 723.720063][ T6947] Bluetooth: hci2: command 0x1003 tx timeout [ 723.852048][ T9] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 724.040684][ T9915] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 724.401690][ T83] Bluetooth: Error in BCSP hdr checksum [ 725.061664][T10989] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.075438][ T9915] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 725.393835][ T5596] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 725.689994][ T30] audit: type=1400 audit(1786938875.523:492): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 725.941812][T10989] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.976031][ T9915] usb 1-1: can't read configurations, error -71 [ 726.050956][T10989] bridge_slave_0: entered allmulticast mode [ 726.102915][T11162] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 726.139841][T10989] bridge_slave_0: entered promiscuous mode [ 726.210769][ T30] audit: type=1400 audit(1786938880.843:493): avc: denied { name_bind } for pid=11170 comm="syz.0.1223" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 726.375210][T10989] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.481368][T10989] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.626495][T10989] bridge_slave_1: entered allmulticast mode [ 727.889968][T10989] bridge_slave_1: entered promiscuous mode [ 727.997338][ T30] audit: type=1400 audit(1786938882.633:494): avc: denied { create } for pid=11182 comm="syz.2.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 728.122073][ T5705] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 728.194282][T10989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.297825][T11185] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 728.325640][ T30] audit: type=1400 audit(1786938882.683:495): avc: denied { listen } for pid=11182 comm="syz.2.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 728.349247][T10989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.595834][ T5705] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 728.632004][ T187] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 728.666664][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.726193][ T30] audit: type=1400 audit(1786938883.343:496): avc: denied { connect } for pid=11182 comm="syz.2.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 728.753233][ T5705] usb 4-1: Product: syz [ 728.776682][T10989] team0: Port device team_slave_0 added [ 728.788430][ T5705] usb 4-1: Manufacturer: syz [ 728.820346][ T5705] usb 4-1: SerialNumber: syz [ 728.853718][T10989] team0: Port device team_slave_1 added [ 728.873644][ T187] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 728.963852][ T187] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 728.971787][ T30] audit: type=1400 audit(1786938883.353:497): avc: denied { accept } for pid=11182 comm="syz.2.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 729.076026][ T187] usb 1-1: can't read configurations, error -71 [ 729.174462][T10989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.223321][ T30] audit: type=1400 audit(1786938883.483:498): avc: denied { write } for pid=11163 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 729.248317][T10989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.373293][ T5705] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 729.466717][ T30] audit: type=1400 audit(1786938883.753:499): avc: denied { ioctl } for pid=11196 comm="syz.1.1228" path="socket:[55085]" dev="sockfs" ino=55085 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 729.535047][T10989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.633400][T11207] dlm: non-version read from control device 57 [ 729.661025][T10989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.698125][T10989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.764840][ T30] audit: type=1400 audit(1786938883.843:500): avc: denied { firmware_load } for pid=5705 comm="kworker/0:3" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 730.600412][ T5705] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 731.343683][ T5705] ath9k_htc: Failed to initialize the device [ 731.380073][T10989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.404127][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1233'. [ 731.429736][ T30] audit: type=1400 audit(1786938883.973:501): avc: denied { write } for pid=11198 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.503651][T11213] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 731.747005][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 732.782058][ T5705] usb 4-1: ath9k_htc: USB layer deinitialized [ 733.061701][ T30] audit: type=1400 audit(1786938883.993:502): avc: denied { connect } for pid=11199 comm="syz.2.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 733.234695][ T30] audit: type=1400 audit(1786938887.803:503): avc: denied { setopt } for pid=11227 comm="syz.2.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 733.407452][ T9] usb 4-1: USB disconnect, device number 62 [ 735.026090][T10989] hsr_slave_0: entered promiscuous mode [ 735.076873][T10989] hsr_slave_1: entered promiscuous mode [ 735.174973][T10989] debugfs: 'hsr0' already exists in 'hsr' [ 735.200346][T10989] Cannot create hsr debugfs directory [ 735.243884][T11240] input: syz1 as /devices/virtual/input/input59 [ 735.292274][ T83] Bluetooth: Error in BCSP hdr checksum [ 735.385269][ T9] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 735.392991][ T5705] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 735.651318][ T951] Bluetooth: Error in BCSP hdr checksum [ 735.806266][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 735.815505][ T5705] usb 2-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice= 2.6d [ 735.879344][ T9] usb 4-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 735.899920][ T5705] usb 2-1: config 4 has an invalid interface number: 122 but max is 0 [ 735.973229][ T5705] usb 2-1: config 4 has no interface number 0 [ 735.984247][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 736.022024][ T187] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 736.119237][ T5705] usb 2-1: too many endpoints for config 4 interface 122 altsetting 16: 59, using maximum allowed: 30 [ 736.206298][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 736.556148][ T5828] Bluetooth: Error in BCSP hdr checksum [ 736.579900][ T9] usb 4-1: Product: syz [ 736.592920][ T5705] usb 2-1: config 4 interface 122 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 59 [ 736.649065][ T9] usb 4-1: Manufacturer: syz [ 736.697361][ T9] usb 4-1: SerialNumber: syz [ 736.732000][ T187] usb 3-1: Using ep0 maxpacket: 32 [ 736.747591][ T9] usb 4-1: config 0 descriptor?? [ 736.753003][ T5705] usb 2-1: config 4 interface 122 has no altsetting 0 [ 736.781092][ T187] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 736.827955][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.836160][ T9915] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 736.895609][ T187] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 736.922469][ T5705] usb 2-1: Product: syz [ 736.950105][ T187] usb 3-1: config 0 has no interface number 0 [ 736.957791][ T7089] Bluetooth: Error in BCSP hdr checksum [ 736.963466][ T5828] Bluetooth: Error in BCSP hdr checksum [ 736.970946][ T5705] usb 2-1: Manufacturer: syz [ 736.985765][ T9] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 737.019706][ T5705] usb 2-1: SerialNumber: syz [ 737.039033][ T187] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 737.072649][T10806] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 737.078833][T10803] Bluetooth: hci2: command 0x1003 tx timeout [ 737.118974][ T9915] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 737.184447][ T9] usb 4-1: USB disconnect, device number 63 [ 737.196755][ T187] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 737.212374][ T9915] usb 1-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 737.242061][T11111] udevd[11111]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 737.275609][ T83] Bluetooth: Error in BCSP hdr checksum [ 737.326662][ T187] usb 3-1: config 0 interface 85 has no altsetting 0 [ 737.344025][ T9915] usb 1-1: config 0 interface 0 has no altsetting 0 [ 737.364134][T11237] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 737.415619][ T30] audit: type=1400 audit(1786938892.053:504): avc: denied { write } for pid=11245 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 737.455974][ T187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.469716][ T9915] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 737.514466][ T5705] gspca_main: mars-2.14.0 probing 093a:050f [ 737.533023][ T5828] Bluetooth: Error in BCSP hdr checksum [ 737.541400][ T187] usb 3-1: Product: syz [ 737.551863][ T9915] usb 1-1: Product: syz [ 737.587970][ T187] usb 3-1: Manufacturer: syz [ 737.601639][ T9915] usb 1-1: Manufacturer: syz [ 737.637447][ T187] usb 3-1: SerialNumber: syz [ 737.648052][ T9915] usb 1-1: SerialNumber: syz [ 737.652984][ T5705] usb 2-1: USB disconnect, device number 65 [ 737.689796][ T187] usb 3-1: config 0 descriptor?? [ 737.718333][ T9915] usb 1-1: config 0 descriptor?? [ 737.792332][ T30] audit: type=1400 audit(1786938892.423:505): avc: denied { write } for pid=11262 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 737.843338][ T5828] Bluetooth: Error in BCSP hdr checksum [ 737.950730][T10989] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 737.986476][T10806] Bluetooth: hci6: command 0x1003 tx timeout [ 737.994010][ T5596] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 738.065510][ T9915] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 738.292977][ T30] audit: type=1400 audit(1786938892.743:506): avc: denied { read } for pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 738.364232][T10989] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 738.375731][T11267] FAULT_INJECTION: forcing a failure. [ 738.375731][T11267] name failslab, interval 1, probability 0, space 0, times 0 [ 738.524008][ T9915] usb 1-1: USB disconnect, device number 65 [ 738.732769][T10989] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 738.787942][T11111] udevd[11111]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 738.822582][T11267] CPU: 0 UID: 0 PID: 11267 Comm: syz.3.1241 Tainted: G L syzkaller #0 PREEMPT(full) [ 738.822603][T11267] Tainted: [L]=SOFTLOCKUP [ 738.822607][T11267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 738.822614][T11267] Call Trace: [ 738.822618][T11267] [ 738.822623][T11267] dump_stack_lvl+0x100/0x190 [ 738.822642][T11267] should_fail_ex.cold+0x5/0xa [ 738.822658][T11267] should_failslab+0xc2/0x120 [ 738.822679][T11267] __kmalloc_cache_noprof+0x91/0x6c0 [ 738.822691][T11267] ? net_generic+0xea/0x2a0 [ 738.822708][T11267] ? ip_set_create+0x342/0x1510 [ 738.822731][T11267] ip_set_create+0x342/0x1510 [ 738.822751][T11267] ? trace_contention_end+0x126/0x160 [ 738.822768][T11267] ? __pfx_ip_set_create+0x10/0x10 [ 738.822796][T11267] ? find_held_lock+0x2b/0x80 [ 738.822810][T11267] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 738.822832][T11267] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 738.822848][T11267] ? skb_release_data+0x6ca/0x8e0 [ 738.822865][T11267] ? __lock_acquire+0x49f/0x1a40 [ 738.822891][T11267] ? avc_has_perm_noaudit+0x145/0x3b0 [ 738.822909][T11267] netlink_rcv_skb+0x159/0x420 [ 738.822922][T11267] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 738.822940][T11267] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 738.822959][T11267] ? ns_capable+0xd2/0xf0 [ 738.822975][T11267] nfnetlink_rcv+0x1b3/0x440 [ 738.822992][T11267] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 738.823008][T11267] ? netlink_deliver_tap+0x1ae/0xcc0 [ 738.823022][T11267] netlink_unicast+0x585/0x850 [ 738.823038][T11267] ? __pfx_netlink_unicast+0x10/0x10 [ 738.823055][T11267] netlink_sendmsg+0x8b0/0xda0 [ 738.823070][T11267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 738.823084][T11267] ? selinux_socket_sendmsg+0x198/0x2f0 [ 738.823103][T11267] ____sys_sendmsg+0xa4d/0xbe0 [ 738.823114][T11267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 738.823128][T11267] ? __pfx_____sys_sendmsg+0x10/0x10 [ 738.823145][T11267] ___sys_sendmsg+0x190/0x1e0 [ 738.823159][T11267] ? __pfx____sys_sendmsg+0x10/0x10 [ 738.823169][T11267] ? __lock_acquire+0x49f/0x1a40 [ 738.823184][T11267] ? get_pid_task+0x106/0x250 [ 738.823210][T11267] __sys_sendmsg+0x160/0x210 [ 738.823227][T11267] ? __pfx___sys_sendmsg+0x10/0x10 [ 738.823250][T11267] do_syscall_64+0x115/0x870 [ 738.823264][T11267] ? clear_bhb_loop+0x70/0xc0 [ 738.823278][T11267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.823290][T11267] RIP: 0033:0x7ffbddf9e0d9 [ 738.823300][T11267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.823311][T11267] RSP: 002b:00007ffbdeee7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 738.823323][T11267] RAX: ffffffffffffffda RBX: 00007ffbde225fa0 RCX: 00007ffbddf9e0d9 [ 738.823331][T11267] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 738.823337][T11267] RBP: 00007ffbdeee7090 R08: 0000000000000000 R09: 0000000000000000 [ 738.823344][T11267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.823351][T11267] R13: 00007ffbde226038 R14: 00007ffbde225fa0 R15: 00007ffde6061c28 [ 738.823365][T11267] [ 739.474748][ T30] audit: type=1400 audit(1786938893.773:507): avc: denied { write } for pid=11270 comm="syz.1.1242" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 739.527243][ T30] audit: type=1400 audit(1786938893.773:508): avc: denied { ioctl } for pid=11270 comm="syz.1.1242" path="/271/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 739.844208][T10989] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 739.879881][T10989] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 741.222513][ T30] audit: type=1400 audit(1786938895.823:509): avc: denied { read write } for pid=11281 comm="syz.0.1244" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 741.267468][T11284] Bluetooth: MGMT ver 1.23 [ 741.313857][ T30] audit: type=1400 audit(1786938895.823:510): avc: denied { open } for pid=11281 comm="syz.0.1244" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 741.393005][ T30] audit: type=1400 audit(1786938895.833:511): avc: denied { ioctl } for pid=11281 comm="syz.0.1244" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 741.837235][ T187] appletouch 3-1:0.85: Failed to request geyser raw mode [ 741.845458][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.853307][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 741.864255][ T30] audit: type=1400 audit(1786938895.843:512): avc: denied { setopt } for pid=11281 comm="syz.0.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 741.886832][ T187] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 741.922905][ T30] audit: type=1400 audit(1786938895.843:513): avc: denied { read } for pid=11281 comm="syz.0.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 741.984918][ T187] usb 3-1: USB disconnect, device number 60 [ 742.181553][T10989] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 742.501493][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 742.501504][ T30] audit: type=1400 audit(1786938897.133:515): avc: denied { create } for pid=11289 comm="syz.3.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 742.561446][T11294] xt_hashlimit: size too large, truncated to 1048576 [ 742.636868][T10989] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 742.668770][ T30] audit: type=1400 audit(1786938897.173:516): avc: denied { setopt } for pid=11289 comm="syz.3.1246" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 742.718327][T10989] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 742.729593][T11297] Bluetooth: ISO socket layer initialized [ 742.905881][ T30] audit: type=1400 audit(1786938897.263:517): avc: denied { write } for pid=11286 comm="syz.1.1245" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 743.279204][ T30] audit: type=1400 audit(1786938897.303:518): avc: denied { connect } for pid=11289 comm="syz.3.1246" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 743.547366][T11316] netlink: 'syz.2.1247': attribute type 1 has an invalid length. [ 743.555264][T11316] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1247'. [ 743.860680][ T30] audit: type=1400 audit(1786938897.333:519): avc: denied { write } for pid=11289 comm="syz.3.1246" laddr=fe80::13 lport=60 faddr=fe80::d fport=259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 744.228101][ T76] Bluetooth: Error in BCSP hdr checksum [ 744.244514][ T30] audit: type=1400 audit(1786938898.493:520): avc: denied { write } for pid=11288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 744.277936][ T5705] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 744.383921][T10989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.483920][ T5828] Bluetooth: Error in BCSP hdr checksum [ 744.505156][ T5705] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 744.524956][T10989] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.558634][ T30] audit: type=1400 audit(1786938899.053:521): avc: denied { write } for pid=11324 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 744.607685][ T5705] usb 2-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 744.687789][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.694915][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.724783][ T5705] usb 2-1: config 0 interface 0 has no altsetting 0 [ 744.746344][ T12] Bluetooth: Error in BCSP hdr checksum [ 744.801750][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 745.112083][ T7089] Bluetooth: Error in BCSP hdr checksum [ 745.160190][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.167308][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.194543][ T5705] usb 2-1: Product: syz [ 745.226617][ T5705] usb 2-1: Manufacturer: syz [ 745.272215][ T6090] Bluetooth: Error in BCSP hdr checksum [ 745.283010][ T5705] usb 2-1: SerialNumber: syz [ 745.386775][ T5705] usb 2-1: config 0 descriptor?? [ 745.534705][ T8994] Bluetooth: Error in BCSP hdr checksum [ 745.993289][ T5705] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 746.033755][ T5596] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 746.039988][T10806] Bluetooth: hci2: command 0x1003 tx timeout [ 746.146439][ T5705] usb 2-1: USB disconnect, device number 66 [ 746.522930][ T12] Bluetooth: Error in BCSP hdr checksum [ 746.563465][T11111] udevd[11111]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 746.663538][ T187] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 747.088075][T11352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 747.122985][ T5828] Bluetooth: Error in BCSP hdr checksum [ 747.273497][ T187] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 747.308340][ T30] audit: type=1400 audit(1786938901.943:522): avc: denied { write } for pid=11332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 747.365678][T11361] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 747.380140][ T187] usb 1-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 747.391267][ T6090] Bluetooth: Error in BCSP hdr checksum [ 747.483065][ T187] usb 1-1: config 0 interface 0 has no altsetting 0 [ 747.593421][ T30] audit: type=1400 audit(1786938902.053:523): avc: denied { create } for pid=11357 comm="syz.3.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 747.627815][ T187] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 747.646363][ T12] Bluetooth: Error in BCSP hdr checksum [ 747.709571][ T187] usb 1-1: Product: syz [ 747.810309][ T187] usb 1-1: Manufacturer: syz [ 747.916411][ T187] usb 1-1: SerialNumber: syz [ 747.930161][ T76] Bluetooth: Error in BCSP hdr checksum [ 748.007483][ T30] audit: type=1400 audit(1786938902.053:524): avc: denied { bind } for pid=11357 comm="syz.3.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 748.106752][ T187] usb 1-1: config 0 descriptor?? [ 748.169174][ T5828] Bluetooth: Error in BCSP hdr checksum [ 748.182013][ T5705] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 748.210118][ T5596] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 748.216475][T10803] Bluetooth: hci2: command 0x1003 tx timeout [ 748.410674][ T83] Bluetooth: Error in BCSP hdr checksum [ 748.422553][ T12] Bluetooth: Error in BCSP hdr checksum [ 748.567200][ T5705] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 749.796086][ T30] audit: type=1400 audit(1786938902.433:525): avc: denied { write } for pid=11366 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 749.879190][T10806] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 749.885559][ T5596] Bluetooth: hci6: command 0x1003 tx timeout [ 749.945811][ T1114] Bluetooth: Error in BCSP hdr checksum [ 749.958746][ T5705] usb 4-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 749.975708][ T187] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 750.282504][ T8994] Bluetooth: Error in BCSP hdr checksum [ 750.437268][ T5705] usb 4-1: config 0 interface 0 has no altsetting 0 [ 750.488525][ T187] usb 1-1: USB disconnect, device number 66 [ 750.646315][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 750.679133][T11111] udevd[11111]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 750.787605][T11380] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 750.796986][ T8994] Bluetooth: Error in BCSP hdr checksum [ 750.949580][ T5705] usb 4-1: Product: syz [ 750.981879][T10989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.152834][ T5705] usb 4-1: Manufacturer: syz [ 751.157544][ T5705] usb 4-1: SerialNumber: syz [ 751.594814][ T5705] usb 4-1: config 0 descriptor?? [ 751.703525][ T5705] usb 4-1: can't set config #0, error -71 [ 752.073705][ T5705] usb 4-1: USB disconnect, device number 64 [ 754.522877][T11391] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 755.342048][ T5705] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 755.680436][ T8994] Bluetooth: Error in BCSP hdr checksum [ 756.349282][T11405] netlink: 'syz.2.1266': attribute type 1 has an invalid length. [ 756.816362][ T951] Bluetooth: Error in BCSP hdr checksum [ 756.899987][ T6947] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 756.932460][ T6947] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 756.944762][ T6947] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 756.963105][ T6947] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 756.975263][ T5705] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 756.991689][ T6947] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 756.998797][T10803] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 757.541295][ T5705] usb 4-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 757.567807][ T76] Bluetooth: Error in BCSP hdr checksum [ 757.573508][ T12] Bluetooth: Error in BCSP hdr checksum [ 757.593829][T11417] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 757.663433][ T5705] usb 4-1: config 0 interface 0 has no altsetting 0 [ 757.712585][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 757.777398][ T5705] usb 4-1: Product: syz [ 757.826992][ T9915] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 757.849155][ T5785] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 757.883750][ T5705] usb 4-1: Manufacturer: syz [ 757.908646][ T5705] usb 4-1: SerialNumber: syz [ 757.922806][ T5828] Bluetooth: Error in BCSP hdr checksum [ 757.928470][ T1114] Bluetooth: Error in BCSP hdr checksum [ 758.015377][ T5705] usb 4-1: config 0 descriptor?? [ 758.087044][ T5785] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 758.106225][ T9915] usb 3-1: Using ep0 maxpacket: 16 [ 758.123368][ T5705] usb 4-1: can't set config #0, error -71 [ 758.163323][ T9915] usb 3-1: device descriptor read/all, error -71 [ 758.205103][ T5785] usb 1-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 758.230451][ T5705] usb 4-1: USB disconnect, device number 65 [ 758.350200][ T5785] usb 1-1: config 0 interface 0 has no altsetting 0 [ 758.367679][ T12] Bluetooth: Error in BCSP hdr checksum [ 758.450848][ T5785] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 758.502021][ T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 758.547513][ T5785] usb 1-1: Product: syz [ 758.563453][ T5785] usb 1-1: Manufacturer: syz [ 758.596586][ T5785] usb 1-1: SerialNumber: syz [ 758.656206][ T12] Bluetooth: Error in BCSP hdr checksum [ 758.669236][ T5785] usb 1-1: config 0 descriptor?? [ 758.737400][ T12] Bluetooth: Error in BCSP hdr checksum [ 758.748721][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 758.782441][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 758.892166][ T9915] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 758.899809][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.921440][T10806] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 758.933325][ T5785] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 759.032720][ T12] Bluetooth: Error in BCSP hdr checksum [ 759.040208][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.073485][ T5596] Bluetooth: hci7: command tx timeout [ 759.097250][ T5785] usb 1-1: USB disconnect, device number 67 [ 759.142321][ T9915] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 759.200116][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 759.264293][ T9915] usb 3-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 759.308016][ T6090] Bluetooth: Error in BCSP hdr checksum [ 759.518348][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.567424][ T6090] Bluetooth: Error in BCSP hdr checksum [ 759.573179][ T9915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 759.601615][T11111] udevd[11111]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 759.632667][ T9] usb 2-1: config 0 descriptor?? [ 759.646984][ T9915] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 759.759178][ T9915] usb 3-1: Product: syz [ 759.799053][ T9915] usb 3-1: Manufacturer: syz [ 759.828176][ T5828] Bluetooth: Error in BCSP hdr checksum [ 759.854995][ T9915] usb 3-1: SerialNumber: syz [ 759.895883][ T9915] usb 3-1: config 0 descriptor?? [ 760.276445][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0038/input/input61 [ 760.326968][ T76] Bluetooth: Error in BCSP hdr checksum [ 760.432292][ T5596] Bluetooth: hci2: command 0x1003 tx timeout [ 760.468537][T11415] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 761.158919][ T5596] Bluetooth: hci7: command tx timeout [ 761.168211][ T12] Bluetooth: Error in BCSP hdr checksum [ 761.409811][ T9915] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 761.568686][ T9] microsoft 0003:045E:07DA.0038: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 761.606511][T11446] ip_tables: iptables: counters copy to user failed while replacing table [ 761.654765][ T30] audit: type=1400 audit(1786938916.243:526): avc: denied { ioctl } for pid=11445 comm="syz.0.1272" path="socket:[56320]" dev="sockfs" ino=56320 ioctlcmd=0x8b1a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 761.716685][ T9915] usb 3-1: USB disconnect, device number 62 [ 761.769877][ T9] usb 2-1: USB disconnect, device number 67 [ 761.878046][T11111] udevd[11111]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 761.919391][T11437] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 762.011218][ T1114] bridge_slave_1: left allmulticast mode [ 762.080455][ T1114] bridge_slave_1: left promiscuous mode [ 762.139378][T11447] fido_id[11447]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 762.182772][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.334421][ T1114] bridge_slave_0: left allmulticast mode [ 762.716441][ T6039] Bluetooth: Error in BCSP hdr checksum [ 762.852019][ T9] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 763.232206][ T5596] Bluetooth: hci7: command tx timeout [ 763.660168][ T1114] bridge_slave_0: left promiscuous mode [ 763.779752][ T76] Bluetooth: Error in BCSP hdr checksum [ 763.820217][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.851441][ T83] Bluetooth: Error in BCSP hdr checksum [ 763.953908][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 764.279804][T11415] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 764.291244][ T5596] Bluetooth: hci2: command 0x1003 tx timeout [ 765.235040][ T6039] Bluetooth: Error in BCSP hdr checksum [ 765.243982][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 765.321199][T11415] Bluetooth: hci7: command tx timeout [ 765.415768][ T9] usb 1-1: can't read configurations, error -71 [ 765.722124][ T12] Bluetooth: Error in BCSP hdr checksum [ 765.787953][T10691] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 765.937329][T11472] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 765.947991][ T6039] Bluetooth: Error in BCSP hdr checksum [ 766.172092][T10691] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 766.327919][T11479] Invalid ELF header type: 3 != 1 [ 766.341500][ T30] audit: type=1400 audit(1786938920.963:527): avc: denied { module_load } for pid=11476 comm="syz.3.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 766.408252][ T83] Bluetooth: Error in BCSP hdr checksum [ 766.415814][T10691] usb 2-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 766.538164][T10691] usb 2-1: config 0 interface 0 has no altsetting 0 [ 766.662204][ T8994] Bluetooth: Error in BCSP hdr checksum [ 767.047988][ T30] audit: type=1400 audit(1786938921.433:528): avc: denied { create } for pid=11476 comm="syz.3.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 767.081456][ T6039] Bluetooth: Error in BCSP hdr checksum [ 767.095002][T10691] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 767.249759][ T6039] Bluetooth: Error in BCSP hdr checksum [ 767.267765][T10691] usb 2-1: Product: syz [ 767.378518][T10691] usb 2-1: Manufacturer: syz [ 767.393091][ T5596] Bluetooth: hci5: command 0x1003 tx timeout [ 767.399984][T11415] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 767.512917][ T6039] Bluetooth: Error in BCSP hdr checksum [ 767.973152][T10691] usb 2-1: SerialNumber: syz [ 767.974818][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.976460][ T30] audit: type=1400 audit(1786938921.433:529): avc: denied { setopt } for pid=11476 comm="syz.3.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 767.976484][ T30] audit: type=1400 audit(1786938921.623:530): avc: denied { write } for pid=11476 comm="syz.3.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 767.976505][ T30] audit: type=1400 audit(1786938921.623:531): avc: denied { connect } for pid=11476 comm="syz.3.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 767.976525][ T30] audit: type=1400 audit(1786938921.683:532): avc: denied { shutdown } for pid=11476 comm="syz.3.1278" lport=46548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 767.976548][ T30] audit: type=1400 audit(1786938922.563:533): avc: denied { write } for pid=11454 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.992290][T10691] usb 2-1: config 0 descriptor?? [ 768.012279][ T951] Bluetooth: Error in BCSP hdr checksum [ 768.045681][ T951] Bluetooth: Error in BCSP hdr checksum [ 768.064146][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 768.093574][ T1114] bond0 (unregistering): Released all slaves [ 768.394688][ T1114] hsr_slave_0: left promiscuous mode [ 768.397630][ T1114] hsr_slave_1: left promiscuous mode [ 768.398491][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.403980][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.413869][T10691] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 769.795925][ T30] audit: type=1400 audit(1786938924.323:534): avc: denied { write } for pid=11494 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 770.473692][T10691] usb 2-1: USB disconnect, device number 68 [ 770.633552][T11111] udevd[11111]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 770.856345][T11500] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 771.618273][ T1114] team0 (unregistering): Port device team_slave_1 removed [ 771.693724][ T1114] team0 (unregistering): Port device team_slave_0 removed [ 773.255263][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 773.257318][T11504] batadv_slave_1: entered promiscuous mode [ 773.257748][T11505] batadv_slave_1: left promiscuous mode [ 773.343221][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1282'. [ 774.783728][ T30] audit: type=1400 audit(1786938929.413:535): avc: denied { bind } for pid=11518 comm="syz.2.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 774.796118][ T30] audit: type=1400 audit(1786938929.433:536): avc: denied { wake_alarm } for pid=11518 comm="syz.2.1284" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 775.711293][T11525] syz.3.1285 uses obsolete (PF_INET,SOCK_PACKET) [ 777.347438][ T30] audit: type=1400 audit(1786938931.983:537): avc: denied { view } for pid=11522 comm="syz.3.1285" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 777.351544][T11529] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 777.388215][ T30] audit: type=1400 audit(1786938932.023:538): avc: denied { create } for pid=11522 comm="syz.3.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 777.388244][ T30] audit: type=1400 audit(1786938932.023:539): avc: denied { write } for pid=11522 comm="syz.3.1285" path="socket:[56823]" dev="sockfs" ino=56823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 777.610965][T11410] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.616910][T11410] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.617068][T11410] bridge_slave_0: entered allmulticast mode [ 777.618103][T11410] bridge_slave_0: entered promiscuous mode [ 777.625811][T11410] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.626036][T11410] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.626180][T11410] bridge_slave_1: entered allmulticast mode [ 777.742151][T11410] bridge_slave_1: entered promiscuous mode [ 777.846277][T11410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 777.857634][T11410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.941654][T11410] team0: Port device team_slave_0 added [ 777.966057][T11410] team0: Port device team_slave_1 added [ 778.203760][T11410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.203773][T11410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 778.203788][T11410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 778.210768][T11410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 778.210779][T11410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 778.210798][T11410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 778.213098][ T9915] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 778.234342][ T30] audit: type=1400 audit(1786938932.873:540): avc: denied { write } for pid=11523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 778.335246][T11410] hsr_slave_0: entered promiscuous mode [ 778.336525][T11410] hsr_slave_1: entered promiscuous mode [ 778.337262][T11410] debugfs: 'hsr0' already exists in 'hsr' [ 778.337274][T11410] Cannot create hsr debugfs directory [ 778.372915][ T9915] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 778.374961][ T9915] usb 3-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 778.374978][ T9915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 778.378197][ T9915] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 778.378210][ T9915] usb 3-1: Product: syz [ 778.378219][ T9915] usb 3-1: Manufacturer: syz [ 778.378227][ T9915] usb 3-1: SerialNumber: syz [ 778.379513][ T9915] usb 3-1: config 0 descriptor?? [ 778.501827][ T9915] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 778.515121][ T30] audit: type=1400 audit(1786938933.153:541): avc: denied { write } for pid=11548 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 778.645622][T11111] udevd[11111]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 778.710865][ T9915] usb 3-1: USB disconnect, device number 63 [ 778.774870][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6 [ 780.169818][T11552] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 781.870944][ T5596] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 781.876914][ T5596] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 781.877769][ T5596] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 781.878651][ T5596] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 781.879223][ T5596] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 782.597601][T11564] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 783.434870][T11415] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 783.439243][T11415] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 783.439881][T11415] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 783.440779][T11415] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 783.441366][T11415] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 783.574294][ T30] audit: type=1400 audit(1786938938.203:542): avc: denied { write } for pid=11558 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 783.952323][T11415] Bluetooth: hci2: command tx timeout [ 784.111461][ T30] audit: type=1400 audit(1786938938.743:543): avc: denied { write } for pid=11590 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 784.550646][T11410] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 784.568509][T11410] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 784.619062][T11410] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 784.638645][T11410] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 784.641511][T11410] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 784.687503][T11410] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 784.760409][T11410] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 784.771827][T11410] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 785.480770][T11410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.552229][T11415] Bluetooth: hci0: command tx timeout [ 785.664981][T11410] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.705508][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.705575][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.774460][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.774508][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.045052][T11415] Bluetooth: hci2: command tx timeout [ 786.334229][ T30] audit: type=1400 audit(1786938940.963:544): avc: denied { write } for pid=11602 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 787.640982][T11415] Bluetooth: hci0: command tx timeout [ 788.112287][T11415] Bluetooth: hci2: command tx timeout [ 788.236103][T11562] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.236311][T11562] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.236491][T11562] bridge_slave_0: entered allmulticast mode [ 788.237566][T11562] bridge_slave_0: entered promiscuous mode [ 788.316960][T11410] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 788.316976][T11410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 788.330212][ T30] audit: type=1400 audit(1786938942.963:545): avc: denied { write } for pid=11636 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 788.551575][T11562] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.551784][T11562] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.552132][T11562] bridge_slave_1: entered allmulticast mode [ 788.553216][T11562] bridge_slave_1: entered promiscuous mode [ 788.607671][T11637] kvm: apic: phys broadcast and lowest prio [ 788.723702][T11562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 788.746533][T11562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 789.045050][T11562] team0: Port device team_slave_0 added [ 789.048526][T11562] team0: Port device team_slave_1 added [ 789.720756][T11415] Bluetooth: hci0: command tx timeout [ 789.984615][T11562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 789.984628][T11562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 789.984643][T11562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 789.986410][T11562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 789.986419][T11562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 789.986434][T11562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.195803][T11415] Bluetooth: hci2: command tx timeout [ 790.452346][T11582] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.452567][T11582] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.452766][T11582] bridge_slave_0: entered allmulticast mode [ 790.453863][T11582] bridge_slave_0: entered promiscuous mode [ 790.458106][T11582] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.458360][T11582] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.458513][T11582] bridge_slave_1: entered allmulticast mode [ 790.468643][T11582] bridge_slave_1: entered promiscuous mode [ 790.586850][ T30] audit: type=1400 audit(1786938945.223:546): avc: denied { getopt } for pid=11651 comm="syz.3.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 790.686414][T11562] hsr_slave_0: entered promiscuous mode [ 790.699641][T11562] hsr_slave_1: entered promiscuous mode [ 790.700475][T11562] debugfs: 'hsr0' already exists in 'hsr' [ 790.700488][T11562] Cannot create hsr debugfs directory [ 790.708340][T11582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.719588][T11582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.125333][T11582] team0: Port device team_slave_0 added [ 791.387119][T11582] team0: Port device team_slave_1 added [ 791.513731][T11582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.513743][T11582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.513848][T11582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.520142][T11582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.520153][T11582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.520169][T11582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.731811][ T30] audit: type=1400 audit(1786938946.363:547): avc: denied { write } for pid=11653 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 791.768885][T11582] hsr_slave_0: entered promiscuous mode [ 791.770170][T11582] hsr_slave_1: entered promiscuous mode [ 791.770959][T11582] debugfs: 'hsr0' already exists in 'hsr' [ 791.770971][T11582] Cannot create hsr debugfs directory [ 791.792112][T11415] Bluetooth: hci0: command tx timeout [ 791.868802][T11410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.045092][ T30] audit: type=1400 audit(1786938946.683:548): avc: denied { write } for pid=11673 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 792.519923][T11562] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 792.538876][T11562] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 792.540845][T11562] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 792.592489][T11562] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 792.593720][T11562] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 792.601672][T11562] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 792.641190][T11562] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 792.668795][T11562] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 793.379919][T11410] veth0_vlan: entered promiscuous mode [ 793.498306][T11410] veth1_vlan: entered promiscuous mode [ 793.510266][T11582] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 793.531692][T11582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 793.540889][T11582] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 793.786454][T11582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 793.846140][T11582] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 794.078292][T11582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 794.079597][T11582] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 794.089033][ T30] audit: type=1400 audit(1786938948.723:549): avc: denied { write } for pid=11677 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 794.140388][T11582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 794.430302][T11410] veth0_macvtap: entered promiscuous mode [ 794.637768][T11410] veth1_macvtap: entered promiscuous mode [ 794.659893][ T5596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 794.662444][ T5596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 794.663061][ T5596] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 794.663950][ T5596] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 794.664536][ T5596] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 794.731487][ T30] audit: type=1400 audit(1786938949.363:550): avc: denied { write } for pid=11704 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 795.018260][T11562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.040532][T11410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.139525][T11562] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.171391][T11410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 795.259544][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.259595][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.262929][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.262973][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.273513][ T83] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.275976][ T83] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.277794][ T83] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.278204][ T83] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.735752][T11582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.942685][ T951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.942700][ T951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.987760][T11582] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.339747][ T6039] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.339794][ T6039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.621001][ T951] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.621049][ T951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.762724][ T5596] Bluetooth: hci3: command tx timeout [ 796.781594][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.781608][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.893673][ T30] audit: type=1400 audit(1786938951.533:551): avc: denied { mounton } for pid=11410 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 797.474954][ T30] audit: type=1400 audit(1786938952.113:552): avc: denied { write } for pid=11710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 798.745998][ T30] audit: type=1400 audit(1786938953.383:553): avc: denied { write } for pid=11741 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 798.832135][ T5596] Bluetooth: hci3: command tx timeout [ 798.861966][ T9] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 799.092170][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 799.100020][ T9] usb 6-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 799.100039][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 799.131822][ T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 799.131841][ T9] usb 6-1: Product: syz [ 799.131851][ T9] usb 6-1: Manufacturer: syz [ 799.131860][ T9] usb 6-1: SerialNumber: syz [ 799.142877][ T9] usb 6-1: config 0 descriptor?? [ 799.670123][ T9] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 799.698023][ T9] usb 6-1: USB disconnect, device number 2 [ 799.750663][T11111] udevd[11111]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 800.169885][T11562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.414522][T11582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.415238][T11705] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.415440][T11705] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.415634][T11705] bridge_slave_0: entered allmulticast mode [ 800.416802][T11705] bridge_slave_0: entered promiscuous mode [ 800.420343][T11705] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.420544][T11705] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.420688][T11705] bridge_slave_1: entered allmulticast mode [ 800.421765][T11705] bridge_slave_1: entered promiscuous mode [ 800.517525][T11705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.526852][T11705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.639971][T11705] team0: Port device team_slave_0 added [ 800.669379][T11705] team0: Port device team_slave_1 added [ 800.808918][T11705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.808931][T11705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.808946][T11705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.811407][T11705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.811417][T11705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.811432][T11705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.913136][ T5596] Bluetooth: hci3: command tx timeout [ 800.989328][T11705] hsr_slave_0: entered promiscuous mode [ 800.998296][T11705] hsr_slave_1: entered promiscuous mode [ 800.999181][T11705] debugfs: 'hsr0' already exists in 'hsr' [ 800.999194][T11705] Cannot create hsr debugfs directory [ 801.753562][T11562] veth0_vlan: entered promiscuous mode [ 801.766842][T11562] veth1_vlan: entered promiscuous mode [ 802.050349][T11562] veth0_macvtap: entered promiscuous mode [ 802.095293][T11582] veth0_vlan: entered promiscuous mode [ 802.121555][T11562] veth1_macvtap: entered promiscuous mode [ 802.140694][T11582] veth1_vlan: entered promiscuous mode [ 802.267732][T11582] veth0_macvtap: entered promiscuous mode [ 802.289240][T11562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 802.339674][T11562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 802.341268][T11582] veth1_macvtap: entered promiscuous mode [ 802.502693][ T6039] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.502729][ T6039] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.502756][ T6039] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.502784][ T6039] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.569980][T11705] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 802.583126][T11705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 802.599681][T11582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 802.639137][T11705] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 802.643489][T11705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 802.649066][T11582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 802.711623][ T6039] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.720660][T11705] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 802.725308][T11705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 802.812545][ T6039] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.831409][T11705] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 802.836900][T11705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 802.930144][ T951] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.935069][ T951] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.992224][ T5596] Bluetooth: hci3: command tx timeout [ 803.234377][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.234517][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.754560][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.754576][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.857900][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.857916][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.330941][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.330956][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.698947][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.698962][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.947632][T11705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.059727][T11705] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.134584][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.134631][ T5828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.137657][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.137697][ T5828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.620849][ T30] audit: type=1400 audit(1786938961.253:554): avc: denied { create } for pid=11781 comm="syz.7.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 807.253196][T11705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 807.253213][T11705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 808.699139][T11415] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 808.704705][T11415] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 808.859054][T11415] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 809.064316][T11415] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 809.064913][T11415] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 810.956735][T11791] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 811.292841][T11800] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 811.318773][T11415] Bluetooth: hci5: command tx timeout [ 811.727492][ T9] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 811.907745][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 811.911297][ T9] usb 7-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 811.911321][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 811.935157][ T9] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 811.935178][ T9] usb 7-1: Product: syz [ 811.935187][ T9] usb 7-1: Manufacturer: syz [ 811.935196][ T9] usb 7-1: SerialNumber: syz [ 811.936612][ T9] usb 7-1: config 0 descriptor?? [ 812.520999][T11705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 812.625405][ T9] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 812.654525][ T9] usb 7-1: USB disconnect, device number 2 [ 812.722981][T11111] udevd[11111]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 813.403650][T11415] Bluetooth: hci5: command tx timeout [ 813.490278][ T30] audit: type=1400 audit(1786938968.103:555): avc: denied { write } for pid=11825 comm="syz.7.1306" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 813.535212][ T5596] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 813.537946][ T5596] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 813.538605][ T5596] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 813.545930][ T5596] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 813.547072][ T5596] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 814.848848][T11705] veth0_vlan: entered promiscuous mode [ 815.471251][ T30] audit: type=1400 audit(1786938970.103:556): avc: denied { ioctl } for pid=11825 comm="syz.7.1306" path="socket:[59845]" dev="sockfs" ino=59845 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 815.471983][ T5596] Bluetooth: hci5: command tx timeout [ 815.743829][ T5596] Bluetooth: hci6: command tx timeout [ 815.746694][T11705] veth1_vlan: entered promiscuous mode [ 816.091666][T11790] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.091874][T11790] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.092231][T11790] bridge_slave_0: entered allmulticast mode [ 816.093355][T11790] bridge_slave_0: entered promiscuous mode [ 816.292887][T11790] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.293098][T11790] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.293321][T11790] bridge_slave_1: entered allmulticast mode [ 816.294457][T11790] bridge_slave_1: entered promiscuous mode [ 816.374076][T11705] veth0_macvtap: entered promiscuous mode [ 816.576884][T11705] veth1_macvtap: entered promiscuous mode [ 816.706393][T11790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.939788][T11790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.001736][ T30] audit: type=1400 audit(1786938971.633:557): avc: denied { write } for pid=11849 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 817.170780][T11790] team0: Port device team_slave_0 added [ 817.189815][T11790] team0: Port device team_slave_1 added [ 817.202787][T11705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.552016][ T5596] Bluetooth: hci5: command tx timeout [ 817.798507][ T5596] Bluetooth: hci6: command tx timeout [ 817.890626][ T30] audit: type=1400 audit(1786938972.523:558): avc: denied { write } for pid=11861 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 818.108273][T11790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.108287][T11790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.108301][T11790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.109913][T11790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.109921][T11790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.109936][T11790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.152342][T11705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 818.491265][ T5898] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.491942][ T5898] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.492777][ T5898] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.493134][ T5898] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.527730][T11790] hsr_slave_0: entered promiscuous mode [ 818.529013][T11790] hsr_slave_1: entered promiscuous mode [ 818.529777][T11790] debugfs: 'hsr0' already exists in 'hsr' [ 818.529789][T11790] Cannot create hsr debugfs directory [ 819.874396][ T5596] Bluetooth: hci6: command tx timeout [ 821.550602][ T951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.550617][ T951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.590846][ T30] audit: type=1400 audit(1786938976.223:559): avc: denied { write } for pid=11863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 821.622528][ T187] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 821.811077][ T187] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 821.817809][ T187] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 821.817829][ T187] usb 8-1: config 0 has no interface number 0 [ 821.817991][ T187] usb 8-1: config 0 interface 41 has no altsetting 0 [ 821.828121][ T187] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.828137][ T187] usb 8-1: Product: syz [ 821.828146][ T187] usb 8-1: Manufacturer: syz [ 821.828154][ T187] usb 8-1: SerialNumber: syz [ 821.829534][ T187] usb 8-1: config 0 descriptor?? [ 821.890694][ T951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.890709][ T951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.953131][T11415] Bluetooth: hci6: command tx timeout [ 821.984736][ T30] audit: type=1400 audit(1786938976.623:560): avc: denied { write } for pid=11881 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 822.290939][T11875] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1307'. [ 822.583344][ T187] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -71 [ 822.681995][ T187] usb 8-1: USB disconnect, device number 2 [ 824.162961][T11827] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.163170][T11827] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.163388][T11827] bridge_slave_0: entered allmulticast mode [ 824.169850][T11827] bridge_slave_0: entered promiscuous mode [ 825.118572][T11827] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.118791][T11827] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.119017][T11827] bridge_slave_1: entered allmulticast mode [ 825.120258][T11827] bridge_slave_1: entered promiscuous mode [ 825.890238][T11894] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 825.904523][T11790] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 825.929482][T11790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 825.946763][T11790] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 826.096101][T11790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 826.097100][T11790] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 826.847022][T11790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 826.848292][T11790] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 827.067477][T11790] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 827.322064][ T30] audit: type=1400 audit(1786938981.953:561): avc: denied { setopt } for pid=11897 comm="syz.7.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 827.323029][T11899] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1309'. [ 827.385582][T11827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.446781][T11827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.651576][T11827] team0: Port device team_slave_0 added [ 827.757098][T11827] team0: Port device team_slave_1 added [ 827.792343][ T30] audit: type=1400 audit(1786938982.423:562): avc: denied { write } for pid=11885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 830.176730][T11827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 830.176745][T11827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.176762][T11827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.385755][ T5596] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 830.417345][ T5596] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 830.418777][ T5596] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 830.428380][ T5596] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 830.428983][ T5596] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 830.558423][ T30] audit: type=1400 audit(1786938985.193:563): avc: denied { write } for pid=11922 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 830.617901][T11920] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 830.689836][T11827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 830.689849][T11827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.689865][T11827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 830.690481][T11919] all: renamed from lo (while UP) [ 831.168164][T11827] hsr_slave_0: entered promiscuous mode [ 831.211308][T11827] hsr_slave_1: entered promiscuous mode [ 831.219379][T11827] debugfs: 'hsr0' already exists in 'hsr' [ 831.219395][T11827] Cannot create hsr debugfs directory [ 831.224989][T11790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.512692][T11415] Bluetooth: hci2: command tx timeout [ 833.853024][T11790] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.602382][T11415] Bluetooth: hci2: command tx timeout [ 834.689299][T11936] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 835.744861][ T5898] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.744908][ T5898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 836.675023][T11415] Bluetooth: hci2: command tx timeout [ 836.799745][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.799796][ T5828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.772114][T11415] Bluetooth: hci2: command tx timeout [ 840.304148][T11955] all: renamed from lo (while UP) [ 841.137063][T10691] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 841.174699][ T30] audit: type=1400 audit(1786938995.813:564): avc: denied { write } for pid=11932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 841.293528][T10691] usb 8-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 841.484368][T10691] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.484480][T10691] usb 8-1: Product: syz [ 841.484490][T10691] usb 8-1: Manufacturer: syz [ 841.484500][T10691] usb 8-1: SerialNumber: syz [ 841.906096][T10691] usb 8-1: config 0 descriptor?? [ 842.410128][T11974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.410521][T11974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.449047][ T30] audit: type=1400 audit(1786938997.083:565): avc: denied { append } for pid=11964 comm="syz.7.1317" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 842.659546][T11971] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 843.235916][ T30] audit: type=1400 audit(1786938997.873:566): avc: denied { write } for pid=11975 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 844.670066][T10691] peak_usb 8-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 844.670087][T10691] peak_usb 8-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 845.710866][T10691] peak_usb 8-1:0.0: probe with driver peak_usb failed with error -71 [ 846.370010][T10691] usb 8-1: USB disconnect, device number 3 [ 846.881993][ T5785] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 847.053561][ T5785] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 847.059100][ T5785] usb 9-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 847.059210][ T5785] usb 9-1: config 0 interface 0 has no altsetting 0 [ 847.071623][ T5785] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 847.071639][ T5785] usb 9-1: Product: syz [ 847.071648][ T5785] usb 9-1: Manufacturer: syz [ 847.071657][ T5785] usb 9-1: SerialNumber: syz [ 847.074438][ T5785] usb 9-1: config 0 descriptor?? [ 847.264594][ T5785] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 847.272805][T11984] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 847.526095][T11961] udevd[11961]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 847.602146][T10691] usb 9-1: USB disconnect, device number 2 [ 851.215848][T11790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.985207][ T30] audit: type=1400 audit(1786939006.623:567): avc: denied { write } for pid=11987 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 852.301210][ T30] audit: type=1400 audit(1786939006.933:568): avc: denied { unmount } for pid=11582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 852.471842][ T30] audit: type=1400 audit(1786939007.103:569): avc: denied { create } for pid=12019 comm="syz.7.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 852.474462][ T30] audit: type=1400 audit(1786939007.113:570): avc: denied { setopt } for pid=12019 comm="syz.7.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 852.476287][ T30] audit: type=1400 audit(1786939007.113:571): avc: denied { write } for pid=12017 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 852.568836][T11827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 852.585989][T11827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 852.689430][T11827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 852.726001][T11827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 852.728821][T11827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 852.750155][T11827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 852.751257][T11923] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.751474][T11923] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.751680][T11923] bridge_slave_0: entered allmulticast mode [ 852.753958][T11923] bridge_slave_0: entered promiscuous mode [ 852.758823][T11923] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.759038][T11923] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.759194][T11923] bridge_slave_1: entered allmulticast mode [ 852.772491][T11923] bridge_slave_1: entered promiscuous mode [ 852.787538][T11827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 852.813663][T11827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 853.029882][T11923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 853.096247][T11923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.423664][T11923] team0: Port device team_slave_0 added [ 853.444074][T11923] team0: Port device team_slave_1 added [ 853.746195][T11923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 853.746208][T11923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.746223][T11923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 853.747858][T11923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 853.747866][T11923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.747880][T11923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 854.008588][T11790] veth0_vlan: entered promiscuous mode [ 854.340820][T11923] hsr_slave_0: entered promiscuous mode [ 854.342380][T11923] hsr_slave_1: entered promiscuous mode [ 854.343183][T11923] debugfs: 'hsr0' already exists in 'hsr' [ 854.343195][T11923] Cannot create hsr debugfs directory [ 854.354740][T11790] veth1_vlan: entered promiscuous mode [ 854.401923][ T30] audit: type=1400 audit(1786939009.033:572): avc: denied { write } for pid=12029 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 854.858936][T11827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.158359][ T30] audit: type=1400 audit(1786939009.793:573): avc: denied { write } for pid=12051 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 855.204437][T11790] veth0_macvtap: entered promiscuous mode [ 855.458390][T11827] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.044923][ T951] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.044970][ T951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 856.067919][T11790] veth1_macvtap: entered promiscuous mode [ 856.154491][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.154538][ T5828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.549379][T11790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 856.881391][T11790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.912461][ T187] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 857.001182][ T5828] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.001320][ T5828] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.001341][ T5828] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.001361][ T5828] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.201928][ T187] usb 8-1: not running at top speed; connect to a high speed hub [ 857.201949][ T187] usb 8-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 857.206350][ T187] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 857.206380][ T187] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.212033][ T187] gspca_main: spca501-2.14.0 probing 0000:0000 [ 857.733551][ T187] gspca_spca501: reg write: error -110 [ 857.733565][ T187] spca501 8-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 857.733603][ T187] spca501 8-1:1.0: probe with driver spca501 failed with error -22 [ 857.735213][ T187] uvcvideo 8-1:1.0: Found UVC 1.00 device (0000:0000) [ 857.820196][ T187] uvcvideo 8-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 857.821936][ T187] uvcvideo 8-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 857.821960][ T187] uvcvideo 8-1:1.1: Failed to initialize the device (-5). [ 857.822253][ T187] uvcvideo 8-1:1.0: probe with driver uvcvideo failed with error -5 [ 858.233740][T11923] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.233777][T11923] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 858.593610][ T9915] usb 8-1: USB disconnect, device number 4 [ 858.667374][T11923] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.667397][T11923] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 859.007441][ T5596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 859.009616][ T5596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 859.010218][ T5596] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 859.011116][ T5596] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 859.011724][ T5596] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 859.729124][T11923] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.729150][T11923] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 859.829541][ T6039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.829557][ T6039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.416284][T11923] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.416309][T11923] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 860.707144][ T30] audit: type=1400 audit(1786939015.343:574): avc: denied { write } for pid=12059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 861.084952][T11415] Bluetooth: hci3: command tx timeout [ 861.237089][ T8994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.237105][ T8994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.440099][ T30] audit: type=1400 audit(1786939016.073:575): avc: denied { unmount } for pid=11790 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 863.177446][T11415] Bluetooth: hci3: command tx timeout [ 863.201524][ T30] audit: type=1400 audit(1786939017.833:576): avc: denied { write } for pid=12085 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.994110][T12096] all: renamed from lo (while UP) [ 864.030958][T12095] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 864.677013][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.677126][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 864.792698][T10691] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 865.047459][T10691] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 865.055265][T12114] Bluetooth: MGMT ver 1.23 [ 865.057789][T10691] usb 10-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 865.057807][T10691] usb 10-1: config 0 interface 0 has no altsetting 0 [ 865.065868][T10691] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 865.065885][T10691] usb 10-1: Product: syz [ 865.065894][T10691] usb 10-1: Manufacturer: syz [ 865.065902][T10691] usb 10-1: SerialNumber: syz [ 865.067308][T10691] usb 10-1: config 0 descriptor?? [ 865.232205][T11415] Bluetooth: hci3: command tx timeout [ 865.259968][ T30] audit: type=1400 audit(1786939019.893:577): avc: denied { write } for pid=12089 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 865.311433][T10691] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 865.553059][T10691] usb 10-1: USB disconnect, device number 2 [ 867.342072][T11415] Bluetooth: hci3: command tx timeout [ 867.385152][T12110] udevd[12110]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 867.587190][T11827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 867.591547][T11923] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 868.330007][T11923] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 868.583703][T11923] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 868.609386][T11923] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 868.652552][T11923] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 868.685589][T11923] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 868.748319][T11923] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 868.777626][ T30] audit: type=1400 audit(1786939023.413:578): avc: denied { write } for pid=12123 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 868.779702][T11923] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 870.934596][T12136] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 871.483766][T11923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.571491][T11923] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.781340][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.781386][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 875.462713][T12156] netlink: 'syz.7.1332': attribute type 3 has an invalid length. [ 875.793777][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.793824][ T5828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 878.499951][T12161] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1333'. [ 878.730843][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1333'. [ 879.570664][T12064] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.570872][T12064] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.571055][T12064] bridge_slave_0: entered allmulticast mode [ 879.605595][T12064] bridge_slave_0: entered promiscuous mode [ 879.608804][T12064] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.609009][T12064] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.609172][T12064] bridge_slave_1: entered allmulticast mode [ 879.610266][T12064] bridge_slave_1: entered promiscuous mode [ 879.685951][ T5596] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 879.694316][ T5596] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 879.695132][ T5596] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 879.696034][ T5596] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 879.696636][ T5596] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 880.173001][T12182] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1334'. [ 880.226551][ T30] audit: type=1400 audit(1786939034.863:579): avc: denied { write } for pid=12141 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 880.304738][T12064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 880.345604][ T30] audit: type=1400 audit(1786939034.983:580): avc: denied { listen } for pid=12183 comm="syz.7.1335" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 880.459320][T12064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 881.881975][ T5596] Bluetooth: hci7: command tx timeout [ 882.217951][T10691] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 882.652112][T10691] usb 10-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 882.652814][T10691] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 882.652828][T10691] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 882.652846][T10691] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.713248][T10691] usb 10-1: USB2VGA dongle found at address 3 [ 882.717108][ T30] audit: type=1400 audit(1786939037.353:581): avc: denied { write } for pid=12192 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 882.719536][T10691] usb 10-1: Allocated 8 output buffers [ 882.727480][T12064] team0: Port device team_slave_0 added [ 882.731120][T12064] team0: Port device team_slave_1 added [ 882.947682][T12064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.947694][T12064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.947709][T12064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.954909][T12193] netlink: 'syz.9.1336': attribute type 1 has an invalid length. [ 883.151528][T12064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 883.151540][T12064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 883.151554][T12064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 883.955508][ T5596] Bluetooth: hci7: command tx timeout [ 884.847619][T12198] ip6gretap0: entered promiscuous mode [ 884.847716][T12198] ip6gretap0: entered allmulticast mode [ 885.532590][T12064] hsr_slave_0: entered promiscuous mode [ 885.534002][T12064] hsr_slave_1: entered promiscuous mode [ 885.534845][T12064] debugfs: 'hsr0' already exists in 'hsr' [ 885.534857][T12064] Cannot create hsr debugfs directory [ 886.032226][ T5596] Bluetooth: hci7: command tx timeout [ 888.117566][ T5596] Bluetooth: hci7: command tx timeout [ 890.951746][T11415] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 890.982147][T11415] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 890.983308][T11415] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 890.989772][T11415] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 890.990362][T11415] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 891.101960][ T30] audit: type=1400 audit(1786939045.733:582): avc: denied { write } for pid=12206 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 891.208538][ T30] audit: type=1400 audit(1786939045.843:583): avc: denied { read } for pid=12232 comm="syz.9.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 892.949438][ T30] audit: type=1400 audit(1786939047.583:584): avc: denied { write } for pid=12238 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 893.133773][T11415] Bluetooth: hci6: command tx timeout [ 895.201923][T11415] Bluetooth: hci6: command tx timeout [ 896.467406][T12064] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.467444][T12064] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 896.517914][ T5596] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 896.519236][ T5596] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 896.520401][ T5596] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 896.521284][ T5596] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 896.524775][ T5596] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 897.111491][T12064] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.111517][T12064] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 897.124272][ T30] audit: type=1400 audit(1786939051.763:585): avc: denied { write } for pid=12245 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 897.231994][ T5596] Bluetooth: hci6: command tx timeout [ 897.521053][T12064] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.521076][T12064] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 897.560244][ T30] audit: type=1400 audit(1786939052.193:586): avc: denied { write } for pid=12269 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 897.599291][ T76] bridge_slave_1: left allmulticast mode [ 897.599472][ T76] bridge_slave_1: left promiscuous mode [ 897.599905][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.602303][ T76] bridge_slave_0: left allmulticast mode [ 897.603878][ T76] bridge_slave_0: left promiscuous mode [ 897.607077][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.601779][ T5596] Bluetooth: hci2: command tx timeout [ 899.333479][ T5596] Bluetooth: hci6: command tx timeout [ 899.426715][T12251] Cannot find del_set index 0 as target [ 900.680112][ T5596] Bluetooth: hci2: command tx timeout [ 901.765156][ T30] audit: type=1400 audit(1786939056.403:587): avc: denied { read } for pid=12280 comm="syz.9.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 902.040274][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 902.076444][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 902.103707][ T76] bond0 (unregistering): Released all slaves [ 902.243226][ T76] hsr_slave_0: left promiscuous mode [ 902.281288][ T76] hsr_slave_1: left promiscuous mode [ 902.282380][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 902.329942][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 902.758515][ T5596] Bluetooth: hci2: command tx timeout [ 903.004471][ T30] audit: type=1400 audit(1786939057.633:588): avc: denied { write } for pid=12273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 904.941905][ T5596] Bluetooth: hci2: command tx timeout [ 905.639212][ T30] audit: type=1400 audit(1786939060.273:589): avc: denied { write } for pid=12295 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 907.340382][ T76] team0 (unregistering): Port device team_slave_1 removed [ 907.400197][ T76] team0 (unregistering): Port device team_slave_0 removed [ 907.717992][ T5596] Bluetooth: hci0: command 0x0406 tx timeout [ 908.570857][T12064] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.570881][T12064] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 912.695496][ T30] audit: type=1400 audit(1786939067.333:590): avc: denied { write } for pid=12308 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 912.872432][T12173] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.872660][T12173] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.872822][T12173] bridge_slave_0: entered allmulticast mode [ 912.873889][T12173] bridge_slave_0: entered promiscuous mode [ 912.972175][ T30] audit: type=1400 audit(1786939067.613:591): avc: denied { write } for pid=12325 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 913.068266][T12173] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.068480][T12173] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.068665][T12173] bridge_slave_1: entered allmulticast mode [ 913.069884][T12173] bridge_slave_1: entered promiscuous mode [ 913.242881][T12064] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 913.250715][T12064] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 913.253390][T12064] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 913.257405][T12064] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 913.258371][T12064] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 913.263452][T12064] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 913.290981][T12173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 913.527124][T12064] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 913.533288][T12064] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 913.537332][T12173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 913.718043][T12173] team0: Port device team_slave_0 added [ 913.943726][T12173] team0: Port device team_slave_1 added [ 914.453975][T12173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 914.453988][T12173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.454003][T12173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 914.455704][T12173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 914.455713][T12173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.455727][T12173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 914.825053][ T30] audit: type=1400 audit(1786939069.463:592): avc: denied { write } for pid=12328 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 915.691293][ T30] audit: type=1400 audit(1786939070.323:593): avc: denied { write } for pid=12350 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 917.688217][T12173] hsr_slave_0: entered promiscuous mode [ 917.689579][T12173] hsr_slave_1: entered promiscuous mode [ 917.690412][T12173] debugfs: 'hsr0' already exists in 'hsr' [ 917.690424][T12173] Cannot create hsr debugfs directory [ 918.029580][T12226] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.029802][T12226] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.030049][T12226] bridge_slave_0: entered allmulticast mode [ 918.031130][T12226] bridge_slave_0: entered promiscuous mode [ 918.087208][ T76] bridge_slave_1: left allmulticast mode [ 918.087390][ T76] bridge_slave_1: left promiscuous mode [ 918.087820][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.090589][ T76] bridge_slave_0: left allmulticast mode [ 918.090850][ T76] bridge_slave_0: left promiscuous mode [ 918.091255][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.270320][ T5596] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 919.279906][ T5596] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 919.281950][ T5596] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 919.283538][ T5596] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 919.284123][ T5596] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 919.571107][T11415] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 919.581047][T11415] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 919.582639][T11415] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 919.596781][T11415] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 919.597428][T11415] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 920.100103][ T30] audit: type=1400 audit(1786939074.733:594): avc: denied { write } for pid=12358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 921.318874][T11415] Bluetooth: hci8: command tx timeout [ 921.900024][T11415] Bluetooth: hci9: command tx timeout [ 922.252503][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 922.461012][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.521838][ T76] bond0 (unregistering): Released all slaves [ 923.160434][T12226] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.160643][T12226] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.160867][T12226] bridge_slave_1: entered allmulticast mode [ 923.161981][T12226] bridge_slave_1: entered promiscuous mode [ 923.166629][ T30] audit: type=1400 audit(1786939077.803:595): avc: denied { write } for pid=12380 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 923.203680][T12253] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.203884][T12253] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.204048][T12253] bridge_slave_0: entered allmulticast mode [ 923.205111][T12253] bridge_slave_0: entered promiscuous mode [ 923.238741][T12253] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.238947][T12253] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.239122][T12253] bridge_slave_1: entered allmulticast mode [ 923.252249][T12253] bridge_slave_1: entered promiscuous mode [ 923.364503][T12226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 923.391969][T11415] Bluetooth: hci8: command tx timeout [ 923.553448][ T76] hsr_slave_0: left promiscuous mode [ 923.554337][ T76] hsr_slave_1: left promiscuous mode [ 923.555223][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 923.555815][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 923.956181][T11415] Bluetooth: hci9: command tx timeout [ 925.475344][ T31] INFO: task syz.1.1276:11466 blocked for more than 143 seconds. [ 925.475364][ T31] Tainted: G L syzkaller #0 [ 925.475372][ T31] Blocked by coredump. [ 925.475376][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 925.475382][ T31] task:syz.1.1276 state:D stack:26776 pid:11466 tgid:11465 ppid:5592 task_flags:0x40054c flags:0x00080003 [ 925.475416][ T31] Call Trace: [ 925.475421][ T31] [ 925.475429][ T31] __schedule+0x125c/0x6730 [ 925.475451][ T31] ? do_raw_spin_lock+0x128/0x260 [ 925.475474][ T31] ? __pfx___schedule+0x10/0x10 [ 925.475485][ T31] ? find_held_lock+0x2b/0x80 [ 925.475497][ T31] ? schedule+0x225/0x2c0 [ 925.475512][ T31] schedule+0xdd/0x2c0 [ 925.475524][ T31] schedule_preempt_disabled+0x13/0x30 [ 925.475537][ T31] __mutex_lock+0xccc/0x1bd0 [ 925.475552][ T31] ? tty_release_struct+0xad/0xe0 [ 925.475571][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 925.475591][ T31] ? __pfx___might_resched+0x10/0x10 [ 925.475610][ T31] ? tty_release_struct+0xad/0xe0 [ 925.475624][ T31] tty_release_struct+0xad/0xe0 [ 925.475639][ T31] tty_release+0xd7a/0x1300 [ 925.475655][ T31] ? ima_file_free+0xc6/0x340 [ 925.475669][ T31] ? __pfx_tty_release+0x10/0x10 [ 925.475684][ T31] __fput+0x3ff/0xb50 [ 925.475703][ T31] task_work_run+0x150/0x240 [ 925.475718][ T31] ? __pfx_task_work_run+0x10/0x10 [ 925.475732][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 925.475753][ T31] do_exit+0x951/0x2ae0 [ 925.475764][ T31] ? find_held_lock+0x2b/0x80 [ 925.475777][ T31] ? __pfx_do_exit+0x10/0x10 [ 925.475789][ T31] ? do_raw_spin_lock+0x128/0x260 [ 925.475806][ T31] ? find_held_lock+0x2b/0x80 [ 925.475817][ T31] ? get_signal+0x7e0/0x21e0 [ 925.475835][ T31] do_group_exit+0xd5/0x2a0 [ 925.475848][ T31] get_signal+0x1ec7/0x21e0 [ 925.475864][ T31] ? __pfx_do_nanosleep+0x10/0x10 [ 925.475883][ T31] ? __asan_memset+0x23/0x50 [ 925.475899][ T31] ? __pfx_get_signal+0x10/0x10 [ 925.475915][ T31] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 925.475932][ T31] arch_do_signal_or_restart+0x91/0x7e0 [ 925.475947][ T31] ? get_timespec64+0x147/0x240 [ 925.475962][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 925.475980][ T31] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 925.475998][ T31] exit_to_user_mode_loop+0x139/0x6f0 [ 925.476015][ T31] ? rcu_is_watching+0x12/0xc0 [ 925.476035][ T31] do_syscall_64+0x666/0x870 [ 925.476049][ T31] ? clear_bhb_loop+0x70/0xc0 [ 925.476064][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.476077][ T31] RIP: 0033:0x7f381d35e90e [ 925.476088][ T31] RSP: 002b:00007f381e1b5ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 925.476100][ T31] RAX: fffffffffffffdfc RBX: 00007f381e1b86c0 RCX: 00007f381d35e90e [ 925.476108][ T31] RDX: 00007f381e1b5f30 RSI: 0000000000000000 RDI: 0000000000000000 [ 925.476116][ T31] RBP: 00007f381e1b6fd0 R08: 0000000000000000 R09: 0000000000000000 [ 925.476124][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 925.476131][ T31] R13: 0000000800000000 R14: 0000000000000000 R15: 00007f381d4538e2 [ 925.476150][ T31] [ 925.476158][ T31] INFO: task syz.2.1287:11537 blocked for more than 143 seconds. [ 925.476168][ T31] Tainted: G L syzkaller #0 [ 925.476175][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 925.476180][ T31] task:syz.2.1287 state:D stack:28776 pid:11537 tgid:11535 ppid:5595 task_flags:0x400140 flags:0x00080002 [ 925.476213][ T31] Call Trace: [ 925.476217][ T31] [ 925.476223][ T31] __schedule+0x125c/0x6730 [ 925.476239][ T31] ? do_raw_spin_lock+0x128/0x260 [ 925.476261][ T31] ? __pfx___schedule+0x10/0x10 [ 925.476272][ T31] ? find_held_lock+0x2b/0x80 [ 925.476284][ T31] ? schedule+0x225/0x2c0 [ 925.476298][ T31] schedule+0xdd/0x2c0 [ 925.476310][ T31] schedule_preempt_disabled+0x13/0x30 [ 925.476323][ T31] __mutex_lock+0xccc/0x1bd0 [ 925.476337][ T31] ? ptmx_open+0x11a/0x360 [ 925.476350][ T31] ? ptmx_open+0xdb/0x360 [ 925.476363][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 925.476378][ T31] ? __mutex_unlock_slowpath+0x35d/0x930 [ 925.476396][ T31] ? __pfx_devpts_acquire+0x10/0x10 [ 925.476411][ T31] ? __pfx_ptmx_open+0x10/0x10 [ 925.476424][ T31] ? ptmx_open+0x11a/0x360 [ 925.476435][ T31] ptmx_open+0x11a/0x360 [ 925.476447][ T31] ? __pfx_ptmx_open+0x10/0x10 [ 925.476459][ T31] chrdev_open+0x234/0x6a0 [ 925.476473][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 925.476487][ T31] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 925.476507][ T31] do_dentry_open+0x6ab/0x14d0 [ 925.476519][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 925.476536][ T31] vfs_open+0x82/0x3f0 [ 925.476553][ T31] path_openat+0x2873/0x4280 [ 925.476573][ T31] ? __pfx_path_openat+0x10/0x10 [ 925.476590][ T31] do_file_open+0x20e/0x430 [ 925.476605][ T31] ? __pfx_do_file_open+0x10/0x10 [ 925.476628][ T31] ? alloc_fd+0x471/0x7a0 [ 925.476643][ T31] ? do_getname+0x191/0x390 [ 925.476661][ T31] do_sys_openat2+0x10f/0x1e0 [ 925.476677][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 925.476694][ T31] ? find_held_lock+0x2b/0x80 [ 925.476709][ T31] __x64_sys_openat+0x12d/0x210 [ 925.476726][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 925.476747][ T31] do_syscall_64+0x115/0x870 [ 925.476761][ T31] ? clear_bhb_loop+0x70/0xc0 [ 925.476776][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.476788][ T31] RIP: 0033:0x7f260739e0d9 [ 925.476798][ T31] RSP: 002b:00007f26081b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 925.476809][ T31] RAX: ffffffffffffffda RBX: 00007f2607625fa0 RCX: 00007f260739e0d9 [ 925.476817][ T31] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 925.476825][ T31] RBP: 00007f2607435024 R08: 0000000000000000 R09: 0000000000000000 [ 925.476833][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 925.476840][ T31] R13: 00007f2607626038 R14: 00007f2607625fa0 R15: 00007ffc716844c8 [ 925.476856][ T31] [ 925.476883][ T31] [ 925.476883][ T31] Showing all locks held in the system: [ 925.476890][ T31] 2 locks held by kworker/u8:0/12: [ 925.476899][ T31] 1 lock held by khungtaskd/31: [ 925.476906][ T31] #0: ffffffff8ede8200 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 925.476945][ T31] 4 locks held by kworker/u8:4/76: [ 925.476953][ T31] 3 locks held by kworker/u8:5/83: [ 925.476963][ T31] 3 locks held by kworker/u8:6/951: [ 925.476984][ T31] 1 lock held by dhcpcd/5259: [ 925.476991][ T31] #0: ffffffff90c99780 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_deladdr+0x1b4/0x320 [ 925.477023][ T31] 2 locks held by getty/5351: [ 925.477030][ T31] #0: ffff8880387560a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 925.477061][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 925.477102][ T31] 3 locks held by kworker/u8:10/5898: [ 925.477109][ T31] #0: ffff88801c084140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 925.477145][ T31] #1: ffffc900048f7d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 925.477176][ T31] #2: ffffffff90c99780 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 925.477206][ T31] 3 locks held by kworker/u8:15/8994: [ 925.477213][ T31] #0: ffff88803383e940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 925.477244][ T31] #1: ffffc9001d0e7d08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 925.477275][ T31] #2: ffffffff90c99780 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 [ 925.477306][ T31] 5 locks held by kworker/0:7/10691: [ 925.477314][ T31] #0: ffff88801c131940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 925.477345][ T31] #1: ffffc90004497d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 925.477376][ T31] #2: ffff88802b3871d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 925.477408][ T31] #3: ffff888036f611d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 925.477442][ T31] #4: ffff88803993d1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 925.477475][ T31] 1 lock held by syz.1.1276/11466: [ 925.477482][ T31] #0: ffffffff8fb869a0 (tty_mutex){+.+.}-{4:4}, at: tty_release_struct+0xad/0xe0 [ 925.477513][ T31] 4 locks held by syz.0.1279/11488: [ 925.477520][ T31] 1 lock held by syz.2.1287/11537: [ 925.477527][ T31] #0: ffffffff8fb869a0 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x11a/0x360 [ 925.477557][ T31] 1 lock held by syz.3.1297/11652: [ 925.477564][ T31] #0: ffffffff8fb869a0 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 925.477597][ T31] 1 lock held by syz.5.1299/11737: [ 925.477604][ T31] #0: ffffffff8fb869a0 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x11a/0x360 [ 925.477633][ T31] 1 lock held by syz.6.1303/11803: [ 925.477640][ T31] #0: ffffffff8fb869a0 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x11a/0x360 [ 925.477670][ T31] 1 lock held by syz.8.1319/11978: [ 925.477676][ T31] #0: ffffffff8fb869a0 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x11a/0x360 [ 925.477706][ T31] 2 locks held by syz-executor/12173: [ 925.477712][ T31] #0: ffffffff8ffe84a8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 925.477750][ T31] #1: ffffffff90c99780 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 925.477784][ T31] 1 lock held by syz.7.1335/12188: [ 925.477790][ T31] #0: ffffffff8fb869a0 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 925.477823][ T31] 1 lock held by syz-executor/12226: [ 925.477830][ T31] #0: ffffffff90c99780 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 925.477863][ T31] 2 locks held by syz-executor/12253: [ 925.477870][ T31] #0: ffffffff9001ea68 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 925.477906][ T31] #1: ffffffff90c99780 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 925.477940][ T31] 1 lock held by syz.9.1343/12297: [ 925.477947][ T31] #0: ffffffff8fb869a0 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 925.477980][ T31] 1 lock held by syz-executor/12370: [ 925.477986][ T31] #0: ffffffff90c99780 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 925.478020][ T31] 1 lock held by syz-executor/12372: [ 925.478027][ T31] #0: ffffffff90c99780 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 925.478060][ T31] [ 925.478063][ T31] ============================================= [ 925.478063][ T31] [ 925.478069][ T31] NMI backtrace for cpu 0 [ 925.478077][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 925.478092][ T31] Tainted: [L]=SOFTLOCKUP [ 925.478096][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 925.478102][ T31] Call Trace: [ 925.478106][ T31] [ 925.478110][ T31] dump_stack_lvl+0x100/0x190 [ 925.478125][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 925.478145][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 925.478163][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 925.478183][ T31] sys_info+0x141/0x190 [ 925.478199][ T31] watchdog+0xcb1/0x1030 [ 925.478216][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 925.478228][ T31] ? __pfx_watchdog+0x10/0x10 [ 925.478242][ T31] ? __kthread_parkme+0x18c/0x230 [ 925.478260][ T31] ? kthread+0x13a/0x450 [ 925.478270][ T31] ? __pfx_watchdog+0x10/0x10 [ 925.478283][ T31] kthread+0x370/0x450 [ 925.478294][ T31] ? __pfx_kthread+0x10/0x10 [ 925.478306][ T31] ret_from_fork+0x72b/0xd50 [ 925.478323][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 925.478340][ T31] ? __switch_to+0x800/0x10f0 [ 925.478352][ T31] ? __pfx_kthread+0x10/0x10 [ 925.478364][ T31] ret_from_fork_asm+0x1a/0x30 [ 925.478387][ T31] [ 925.478394][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 925.478402][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 925.478417][ T31] Tainted: [L]=SOFTLOCKUP [ 925.478421][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 925.478428][ T31] Call Trace: [ 925.478432][ T31] [ 925.478436][ T31] dump_stack_lvl+0x100/0x190 [ 925.478451][ T31] vpanic+0x552/0x970 [ 925.478462][ T31] ? __pfx_vpanic+0x10/0x10 [ 925.478473][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 925.478492][ T31] ? rcu_is_watching+0x12/0xc0 [ 925.478512][ T31] panic+0xd1/0xe0 [ 925.478522][ T31] ? __pfx_panic+0x10/0x10 [ 925.478534][ T31] ? nmi_cpu_backtrace+0x79/0x200 [ 925.478554][ T31] ? nmi_trigger_cpumask_backtrace+0x203/0x2a0 [ 925.478572][ T31] ? watchdog.cold+0x1ec/0x234 [ 925.478585][ T31] ? watchdog+0xcc1/0x1030 [ 925.478600][ T31] watchdog.cold+0x1fd/0x234 [ 925.478615][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 925.478628][ T31] ? __pfx_watchdog+0x10/0x10 [ 925.478642][ T31] ? __kthread_parkme+0x18c/0x230 [ 925.478661][ T31] ? kthread+0x13a/0x450 [ 925.478672][ T31] ? __pfx_watchdog+0x10/0x10 [ 925.478685][ T31] kthread+0x370/0x450 [ 925.478696][ T31] ? __pfx_kthread+0x10/0x10 [ 925.478709][ T31] ret_from_fork+0x72b/0xd50 [ 925.478726][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 925.478743][ T31] ? __switch_to+0x800/0x10f0 [ 925.478755][ T31] ? __pfx_kthread+0x10/0x10 [ 925.478768][ T31] ret_from_fork_asm+0x1a/0x30 [ 925.478791][ T31] [ 925.478836][ T31] Kernel Offset: disabled