last executing test programs: 36.324678878s ago: executing program 4 (id=5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=r4, @ANYBLOB="210000000f080000140014006361696630000000000000b6d653c100200012020800010868737200140002a008000100", @ANYRES32=r4, @ANYRES64=r5, @ANYRES8=r4, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r3, 0x0, 0x8000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=0x0) sched_setaffinity(r7, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r8, &(0x7f0000009b80)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000000840)={0x0, 0xcd76, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r9 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f00000003c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0xb, 0xffdffffe}) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r11, &(0x7f0000000080)=ANY=[], 0x6) syz_usb_connect(0x5, 0xcd, &(0x7f0000000280)=ANY=[@ANYRES32=r8, @ANYBLOB="dc9bd3bc7980620bafbfcfee9aa7bf1e776ec943e3", @ANYRES8=r3, @ANYRESHEX=r2], 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) 20.838000397s ago: executing program 32 (id=5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=r4, @ANYBLOB="210000000f080000140014006361696630000000000000b6d653c100200012020800010868737200140002a008000100", @ANYRES32=r4, @ANYRES64=r5, @ANYRES8=r4, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r3, 0x0, 0x8000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=0x0) sched_setaffinity(r7, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r8, &(0x7f0000009b80)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000000840)={0x0, 0xcd76, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r9 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f00000003c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0xb, 0xffdffffe}) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r11, &(0x7f0000000080)=ANY=[], 0x6) syz_usb_connect(0x5, 0xcd, &(0x7f0000000280)=ANY=[@ANYRES32=r8, @ANYBLOB="dc9bd3bc7980620bafbfcfee9aa7bf1e776ec943e3", @ANYRES8=r3, @ANYRESHEX=r2], 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) 17.331781897s ago: executing program 3 (id=43): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000001100)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = dup2(r0, r0) sendmmsg$unix(r4, &(0x7f0000008380), 0x400000000000174, 0x4008890) 13.855323287s ago: executing program 3 (id=49): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x6, 0x6, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)={0x77359400}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, 0x0, 0x1a0) mount$overlay(0x0, &(0x7f0000000040)='./bus/../file0\x00', &(0x7f0000000080), 0x30000, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x20000084) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 12.671479417s ago: executing program 3 (id=51): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket(0x22, 0x2, 0x3) accept$nfc_llcp(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0) 12.35566117s ago: executing program 0 (id=53): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @null, 0x1}, [@default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(r0, &(0x7f0000000040)={{0x3, @bcast}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x22f, &(0x7f0000000300)={0x0, 0x8ffd, 0x4000, 0x0, 0x3e5}, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x7ffffffe, 0x4000}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f00000001c0)=0x9, 0x4) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000fffd000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') accept(r0, 0x0, &(0x7f00000000c0)) 12.345056312s ago: executing program 2 (id=54): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendfile(r2, r1, 0x0, 0xb) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000001100)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = dup2(r0, r0) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) 11.326717063s ago: executing program 0 (id=55): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008005, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001}) writev(r4, 0x0, 0x0) sendto$inet(r3, &(0x7f00000000c0), 0x0, 0x6000000000000000, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c00078008000640"], 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 11.054170181s ago: executing program 2 (id=56): openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$usbfs(0x0, 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2}, 0x4) 10.927272292s ago: executing program 2 (id=57): socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x60442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x54}, 0x28) r5 = fsmount(r4, 0x0, 0x2) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r8, 0x1, 0x0, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-c'], 0x5) write$cgroup_subtree(r6, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) mount$9p_fd(0x0, 0x0, 0x0, 0x800, &(0x7f00000007c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') read$FUSE(r10, &(0x7f00000040c0)={0x2020}, 0x2020) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="28000000140011020000000000000000280011"], 0x28}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) readv(r9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xf000, 0x20000, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.827774894s ago: executing program 2 (id=58): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0xb0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0) 9.353381547s ago: executing program 2 (id=59): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008005, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001}) writev(r3, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x6000000000000000, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c00078008000640"], 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 8.767106473s ago: executing program 1 (id=60): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=r4, @ANYBLOB="210000000f080000140014006361696630000000000000b6d653c100200012020800010868737200140002a008000100", @ANYRES32=r4, @ANYRES64=r5, @ANYRES8=r4, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r3, 0x0, 0x8000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=0x0) sched_setaffinity(r7, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000009b80)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000000840)={0x0, 0xcd76, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r8 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000003c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r8, 0xc03064b7, &(0x7f0000000200)={r9, r10, r11, 0x0, 0x80000003, 0x80000003, 0x0, 0x0, 0x5, 0xe, 0xc, 0x31e}) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0xb, 0xffdffffe}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r12, &(0x7f0000000080)=ANY=[], 0x6) syz_usb_connect(0x5, 0xcd, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="dc9bd3bc7980620bafbfcfee9aa7bf1e776ec943e3", @ANYRES8=r3, @ANYRESHEX=r2], 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) 8.217429229s ago: executing program 3 (id=61): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @null, 0x1}, [@default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(r0, &(0x7f0000000040)={{0x3, @bcast}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0x22f, &(0x7f0000000300)={0x0, 0x8ffd, 0x4000, 0x0, 0x3e5}, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x7ffffffe, 0x4000}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f00000001c0)=0x9, 0x4) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000fffd000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r9, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) fcntl$getownex(r1, 0x10, &(0x7f00000002c0)) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r10, 0x1000000, 0x0) 8.201392876s ago: executing program 0 (id=62): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 7.965266964s ago: executing program 0 (id=63): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x3}}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60fca33f00103c00fe800000000000000000000000000000fe800000000000000000000000000059e7f9057feb8c2ca1aa23439943aa0000"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 7.074440218s ago: executing program 3 (id=64): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40182, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0xc5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwrite64(r1, 0x0, 0x0, 0x26c) 6.41324813s ago: executing program 0 (id=65): socket$vsock_stream(0x28, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x60442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x54}, 0x28) r4 = fsmount(r3, 0x0, 0x2) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r7, 0x1, 0x0, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-c'], 0x5) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="12000000810000000800000002"], 0x14) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') read$FUSE(r9, &(0x7f00000040c0)={0x2020}, 0x2020) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="28000000140011020000000000000000280011"], 0x28}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) readv(r8, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xf000, 0x20000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.968628607s ago: executing program 2 (id=66): openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) socket$kcm(0x10, 0x6, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x101, 0xab02) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x4d6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, r2, 0xffffd000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4.754849085s ago: executing program 0 (id=67): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008005, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001}) writev(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r3, &(0x7f00000000c0), 0x0, 0x6000000000000000, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c00078008000640"], 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 4.731290603s ago: executing program 1 (id=68): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @null, 0x1}, [@default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(r0, &(0x7f0000000040)={{0x3, @bcast}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x22f, &(0x7f0000000300)={0x0, 0x8ffd, 0x4000, 0x0, 0x3e5}, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x7ffffffe, 0x4000}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f00000001c0)=0x9, 0x4) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000fffd000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') accept(r0, 0x0, &(0x7f00000000c0)) 3.602497595s ago: executing program 1 (id=69): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x6, 0x6, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)={0x77359400}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, 0x0, 0x1a0) mount$overlay(0x0, &(0x7f0000000040)='./bus/../file0\x00', &(0x7f0000000080), 0x30000, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x20000084) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 3.528644407s ago: executing program 3 (id=70): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x7, 0x202401) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r2}) syz_emit_ethernet(0x0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x109040, 0x0) r3 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1c1b112"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 2.396227041s ago: executing program 1 (id=71): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$phonet(0x23, 0x2, 0x1) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYRES16=r0], 0x70}, 0x1, 0x7}, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket(0x18, 0x1, 0x2) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) fcntl$dupfd(r4, 0x406, r1) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r7, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x7}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000005, 0x2, 0x3}}}, 0x118) 1.225112054s ago: executing program 1 (id=72): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r2 = dup(r1) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x210) write$binfmt_elf32(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4a, 0x3, 0x1, 0x3, 0x7ff, 0x2, 0x3, 0x4, 0x33e, 0x38, 0xd6, 0x7097, 0x3fe, 0x20, 0x1, 0x7, 0x8, 0x7}, [{0x3, 0x7fffffff, 0x2, 0x400, 0xd, 0x80000001, 0x9, 0x7}]}, 0x58) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r3, 0x0, 0x4003) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r7, 0x0, 0x0, 0x4000811) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{}], 0x1}, 0x0) 0s ago: executing program 1 (id=73): openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) socket$kcm(0x10, 0x6, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x101, 0xab02) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x4d6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, r2, 0xffffd000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts. [ 78.940236][ T5827] cgroup: Unknown subsys name 'net' [ 79.071752][ T5827] cgroup: Unknown subsys name 'cpuset' [ 79.082170][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.727965][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.988459][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.999493][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.016686][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.021983][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.030755][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.033535][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.038896][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.046673][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.053581][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.060899][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.067268][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.075407][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.082958][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.097311][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.109809][ T5161] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.118365][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.127406][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.135030][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.152579][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.164085][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.173819][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.191813][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.200160][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.210749][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.220695][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.831167][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 84.015143][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 84.105493][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 84.117312][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 84.230064][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 84.242936][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.250498][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.257836][ T5841] bridge_slave_0: entered allmulticast mode [ 84.265252][ T5841] bridge_slave_0: entered promiscuous mode [ 84.313215][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.320534][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.327841][ T5841] bridge_slave_1: entered allmulticast mode [ 84.335315][ T5841] bridge_slave_1: entered promiscuous mode [ 84.456680][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.464344][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.471991][ T5840] bridge_slave_0: entered allmulticast mode [ 84.479422][ T5840] bridge_slave_0: entered promiscuous mode [ 84.498493][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.532145][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.539692][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.546899][ T5840] bridge_slave_1: entered allmulticast mode [ 84.555398][ T5840] bridge_slave_1: entered promiscuous mode [ 84.572265][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.641556][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.649006][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.656319][ T5839] bridge_slave_0: entered allmulticast mode [ 84.665204][ T5839] bridge_slave_0: entered promiscuous mode [ 84.672857][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.681236][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.688545][ T5845] bridge_slave_0: entered allmulticast mode [ 84.695892][ T5845] bridge_slave_0: entered promiscuous mode [ 84.741724][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.749171][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.756430][ T5839] bridge_slave_1: entered allmulticast mode [ 84.764272][ T5839] bridge_slave_1: entered promiscuous mode [ 84.774509][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.782109][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.789356][ T5845] bridge_slave_1: entered allmulticast mode [ 84.796793][ T5845] bridge_slave_1: entered promiscuous mode [ 84.808554][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.818248][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.825544][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.833468][ T5856] bridge_slave_0: entered allmulticast mode [ 84.841359][ T5856] bridge_slave_0: entered promiscuous mode [ 84.852452][ T5841] team0: Port device team_slave_0 added [ 84.886899][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.896478][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.904491][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.911926][ T5856] bridge_slave_1: entered allmulticast mode [ 84.919966][ T5856] bridge_slave_1: entered promiscuous mode [ 84.929734][ T5841] team0: Port device team_slave_1 added [ 84.996183][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.010542][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.060486][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.091105][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.103088][ T5840] team0: Port device team_slave_0 added [ 85.113508][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.125088][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.132492][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.158758][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.168608][ T5849] Bluetooth: hci0: command tx timeout [ 85.175394][ T51] Bluetooth: hci1: command tx timeout [ 85.206464][ T5840] team0: Port device team_slave_1 added [ 85.216047][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.227710][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.234697][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.238489][ T51] Bluetooth: hci2: command tx timeout [ 85.265143][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.299557][ T5839] team0: Port device team_slave_0 added [ 85.309587][ T5839] team0: Port device team_slave_1 added [ 85.319058][ T51] Bluetooth: hci4: command tx timeout [ 85.319066][ T5849] Bluetooth: hci3: command tx timeout [ 85.380293][ T5856] team0: Port device team_slave_0 added [ 85.399681][ T5845] team0: Port device team_slave_0 added [ 85.421011][ T5856] team0: Port device team_slave_1 added [ 85.440455][ T5845] team0: Port device team_slave_1 added [ 85.447701][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.454829][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.481328][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.517513][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.524631][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.550817][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.585519][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.592533][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.618795][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.658203][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.665179][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.691200][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.739497][ T5841] hsr_slave_0: entered promiscuous mode [ 85.746248][ T5841] hsr_slave_1: entered promiscuous mode [ 85.754902][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.761932][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.788197][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.803975][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.811333][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.837706][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.851714][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.859273][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.885364][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.905077][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.912189][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.938374][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.991185][ T5840] hsr_slave_0: entered promiscuous mode [ 85.999079][ T5840] hsr_slave_1: entered promiscuous mode [ 86.006283][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 86.012259][ T5840] Cannot create hsr debugfs directory [ 86.128836][ T5845] hsr_slave_0: entered promiscuous mode [ 86.135570][ T5845] hsr_slave_1: entered promiscuous mode [ 86.142314][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 86.148418][ T5845] Cannot create hsr debugfs directory [ 86.168898][ T5839] hsr_slave_0: entered promiscuous mode [ 86.175622][ T5839] hsr_slave_1: entered promiscuous mode [ 86.182288][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 86.188086][ T5839] Cannot create hsr debugfs directory [ 86.262356][ T5856] hsr_slave_0: entered promiscuous mode [ 86.269180][ T5856] hsr_slave_1: entered promiscuous mode [ 86.275716][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 86.282008][ T5856] Cannot create hsr debugfs directory [ 86.961608][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.991501][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.012537][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.044858][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.170525][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.199024][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.237229][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.244111][ T51] Bluetooth: hci1: command tx timeout [ 87.244279][ T51] Bluetooth: hci0: command tx timeout [ 87.266371][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.317787][ T5849] Bluetooth: hci2: command tx timeout [ 87.362401][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.386613][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.398306][ T5849] Bluetooth: hci4: command tx timeout [ 87.398316][ T51] Bluetooth: hci3: command tx timeout [ 87.401089][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.422760][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.556469][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.570180][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.596625][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.613554][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.635492][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.734907][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.752090][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.764510][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.786015][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.809960][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.828622][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.836119][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.881120][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.888282][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.946316][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.061905][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.080415][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.115027][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.122193][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.179689][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.187016][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.234610][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.286484][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.293764][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.342052][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.349305][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.386035][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.431566][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.479795][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.486941][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.514572][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.521750][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.539646][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.596921][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.654255][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.680287][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.748058][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.755315][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.818723][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.825961][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.116702][ T5841] veth0_vlan: entered promiscuous mode [ 89.173392][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.194808][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.232353][ T5841] veth1_vlan: entered promiscuous mode [ 89.317816][ T5849] Bluetooth: hci0: command tx timeout [ 89.321930][ T51] Bluetooth: hci1: command tx timeout [ 89.398854][ T51] Bluetooth: hci2: command tx timeout [ 89.429914][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.475238][ T5841] veth0_macvtap: entered promiscuous mode [ 89.481281][ T51] Bluetooth: hci3: command tx timeout [ 89.488042][ T5849] Bluetooth: hci4: command tx timeout [ 89.520107][ T5841] veth1_macvtap: entered promiscuous mode [ 89.546863][ T5839] veth0_vlan: entered promiscuous mode [ 89.566950][ T5845] veth0_vlan: entered promiscuous mode [ 89.589707][ T5839] veth1_vlan: entered promiscuous mode [ 89.606429][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.672688][ T5845] veth1_vlan: entered promiscuous mode [ 89.691916][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.748266][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.816931][ T5856] veth0_vlan: entered promiscuous mode [ 89.832521][ T1154] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.844155][ T1154] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.865547][ T1154] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.875319][ T1154] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.906774][ T5839] veth0_macvtap: entered promiscuous mode [ 89.930183][ T5856] veth1_vlan: entered promiscuous mode [ 89.981045][ T5839] veth1_macvtap: entered promiscuous mode [ 90.004546][ T5845] veth0_macvtap: entered promiscuous mode [ 90.049990][ T5845] veth1_macvtap: entered promiscuous mode [ 90.121474][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.175869][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.187066][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.207324][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.220509][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.279022][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.303905][ T5856] veth0_macvtap: entered promiscuous mode [ 90.321750][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.329858][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.338950][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.339443][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.378998][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.390775][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.411812][ T5840] veth0_vlan: entered promiscuous mode [ 90.428655][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.452345][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.463813][ T5856] veth1_macvtap: entered promiscuous mode [ 90.464536][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.497414][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.527726][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.561360][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.594616][ T5840] veth1_vlan: entered promiscuous mode [ 90.723796][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.737282][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.822184][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.875181][ T1174] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.884613][ T1174] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.962958][ T5965] syz.3.4 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 90.992476][ T5965] ubi31: attaching mtd0 [ 91.011397][ T5965] ubi31: scanning is finished [ 91.016163][ T5965] ubi31: empty MTD device detected [ 91.244957][ T1174] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.397951][ T51] Bluetooth: hci1: command tx timeout [ 91.408109][ T51] Bluetooth: hci0: command tx timeout [ 91.528239][ T51] Bluetooth: hci2: command tx timeout [ 91.535740][ T1174] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.558177][ T51] Bluetooth: hci3: command tx timeout [ 91.563764][ T51] Bluetooth: hci4: command tx timeout [ 91.596054][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.605449][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.695055][ T5965] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 91.803759][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.831570][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.936677][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.956991][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.969952][ T10] cfg80211: failed to load regulatory.db [ 91.990041][ T5840] veth0_macvtap: entered promiscuous mode [ 92.130333][ T5840] veth1_macvtap: entered promiscuous mode [ 92.187695][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.250803][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.661127][ T5849] Bluetooth: hci3: Unknown advertising packet type: 0x73 [ 92.677765][ T5849] Bluetooth: hci3: Malformed LE Event: 0x0d [ 93.331022][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.342007][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.376893][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.471758][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.526337][ T1174] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.548557][ T1174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.580072][ T1174] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.652128][ T1174] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.055586][ T5849] Bluetooth: hci3: Unknown advertising packet type: 0x73 [ 94.055731][ T5849] Bluetooth: hci3: Malformed LE Event: 0x0d [ 95.212938][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.244553][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.428709][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.468052][ T42] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.520735][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.687200][ T42] usb 3-1: config 0 has an invalid interface number: 238 but max is 0 [ 95.729791][ T42] usb 3-1: config 0 has an invalid descriptor of length 69, skipping remainder of the config [ 95.777430][ T42] usb 3-1: config 0 has no interface number 0 [ 95.811080][ T42] usb 3-1: config 0 interface 238 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 95.859256][ T42] usb 3-1: config 0 interface 238 has no altsetting 0 [ 95.917401][ T42] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 95.944646][ T42] usb 3-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 95.979212][ T42] usb 3-1: Product: syz [ 95.988213][ T42] usb 3-1: Manufacturer: syz [ 96.006433][ T42] usb 3-1: SerialNumber: syz [ 96.069605][ T42] usb 3-1: config 0 descriptor?? [ 96.103269][ T6010] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.173827][ T42] comedi comedi5: Wrong number of endpoints [ 96.197635][ T42] ni6501 3-1:0.238: driver 'ni6501' failed to auto-configure device. [ 97.330043][ T42] usb 3-1: USB disconnect, device number 2 [ 97.433353][ T6011] Bluetooth: MGMT ver 1.23 [ 97.903646][ T5849] Bluetooth: hci1: Unknown advertising packet type: 0x73 [ 97.903954][ T5849] Bluetooth: hci1: Malformed LE Event: 0x0d [ 98.334409][ T6022] vivid-003: kernel_thread() failed [ 100.395918][ T5905] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.841975][ T6044] process 'syz.0.20' launched '/dev/fd/5' with NULL argv: empty string added [ 103.194680][ T6051] vivid-001: kernel_thread() failed [ 106.717766][ T5905] usb 5-1: device descriptor read/64, error -110 [ 107.617796][ T5905] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.526974][ T5905] usb 5-1: device descriptor read/64, error -32 [ 108.668481][ T5905] usb usb5-port1: attempt power cycle [ 110.044069][ T5905] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 110.863765][ T6101] netlink: 40 bytes leftover after parsing attributes in process `syz.3.31'. [ 110.899553][ T5905] usb 5-1: device descriptor read/8, error -32 [ 110.949224][ T6101] Zero length message leads to an empty skb [ 111.202815][ T5905] raw-gadget.0 gadget.4: failed to queue resume event [ 111.382018][ T5905] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 111.437924][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 111.445408][ T5905] usb 5-1: device descriptor read/8, error -32 [ 111.557822][ T5905] raw-gadget.0 gadget.4: failed to queue suspend event [ 111.565501][ T5905] usb usb5-port1: unable to enumerate USB device [ 112.718053][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 112.729908][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 112.743427][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 112.769457][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 112.779864][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.583475][ T6134] overlayfs: failed to resolve './file2': -2 [ 114.697659][ T31] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 114.838234][ T51] Bluetooth: hci5: command tx timeout [ 115.715347][ T6144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.44'. [ 115.768783][ T6145] netlink: 16 bytes leftover after parsing attributes in process `syz.1.44'. [ 115.811822][ T6145] netlink: 16 bytes leftover after parsing attributes in process `syz.1.44'. [ 117.030296][ T51] Bluetooth: hci5: command tx timeout [ 118.546391][ T6124] chnl_net:caif_netlink_parms(): no params data found [ 118.585220][ T6170] netlink: 24 bytes leftover after parsing attributes in process `syz.2.48'. [ 118.722696][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'. [ 118.744391][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'. [ 118.848011][ T6174] overlayfs: failed to resolve './file2': -2 [ 119.097742][ T51] Bluetooth: hci5: command tx timeout [ 119.701996][ T6183] overlayfs: missing 'workdir' [ 119.833601][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'. [ 120.105329][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'. [ 121.039324][ T6010] raw-gadget.0 gadget.4: failed to queue disconnect event [ 121.159645][ T51] Bluetooth: hci5: command tx timeout [ 121.332031][ T6124] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.518666][ T6124] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.532111][ T6124] bridge_slave_0: entered allmulticast mode [ 122.197476][ T6124] bridge_slave_0: entered promiscuous mode [ 122.207650][ T6124] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.215112][ T6124] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.222584][ T6124] bridge_slave_1: entered allmulticast mode [ 122.293014][ T6124] bridge_slave_1: entered promiscuous mode [ 122.466415][ T31] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.602182][ T6213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.58'. [ 122.670415][ T6214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.58'. [ 122.884329][ T31] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.958208][ T6124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.998583][ T6124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.197260][ T31] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.294808][ T6124] team0: Port device team_slave_0 added [ 123.420595][ T6124] team0: Port device team_slave_1 added [ 123.541066][ T31] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.870070][ T6124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.932647][ T6124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.024336][ T6124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.127174][ T6124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.140619][ T6124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.180602][ T6124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.258300][ T5897] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 124.355082][ T6124] hsr_slave_0: entered promiscuous mode [ 124.387793][ T5897] usb 2-1: device descriptor read/64, error -71 [ 124.515318][ T6124] hsr_slave_1: entered promiscuous mode [ 124.526916][ T6124] debugfs: 'hsr0' already exists in 'hsr' [ 124.538751][ T6124] Cannot create hsr debugfs directory [ 124.803808][ T5897] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 125.438540][ T5897] usb 2-1: device descriptor read/64, error -71 [ 125.512438][ T31] bridge_slave_1: left allmulticast mode [ 125.527699][ T31] bridge_slave_1: left promiscuous mode [ 125.544961][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.579818][ T5897] usb usb2-port1: attempt power cycle [ 125.586654][ T31] bridge_slave_0: left allmulticast mode [ 125.598095][ T31] bridge_slave_0: left promiscuous mode [ 125.611000][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.637888][ T5958] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 125.827753][ T5958] usb 4-1: Using ep0 maxpacket: 8 [ 125.844499][ T5958] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 125.864997][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.900307][ T5958] usb 4-1: Product: syz [ 125.906964][ T5958] usb 4-1: Manufacturer: syz [ 125.919174][ T5958] usb 4-1: SerialNumber: syz [ 125.937757][ T5897] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 125.966531][ T5958] usb 4-1: config 0 descriptor?? [ 126.107597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 126.157781][ T5897] usb 2-1: device descriptor read/8, error -71 [ 126.192277][ T5958] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 126.896860][ T5958] pctv452e: pctv452e_power_ctrl: 1 [ 126.896860][ T5958] [ 126.905147][ T5958] usb 4-1: selecting invalid altsetting 3 [ 126.911034][ T5958] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 126.911034][ T5958] [ 126.921688][ T5958] dvb-usb: bulk message failed: -22 (5/0) [ 127.002584][ T5958] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 127.030027][ T6236] dvb-usb: bulk message failed: -22 (7/0) [ 127.038499][ T5897] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 127.063554][ T6236] pctv452e: I2C error -22; AA 01 00 00 00 -> aa 01 31 03 00 00 00 [ 127.072475][ T5958] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 127.083802][ T5958] usb 4-1: media controller created [ 127.105990][ T5958] dvb-usb: bulk message failed: -22 (8/0) [ 127.112603][ T5958] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 127.129358][ T5958] dvb-usb: MAC address reading failed. [ 127.193530][ T5958] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.211144][ T5897] usb 2-1: device descriptor read/8, error -71 [ 127.268990][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.295389][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.321970][ T31] bond0 (unregistering): Released all slaves [ 127.330899][ T5897] usb usb2-port1: unable to enumerate USB device [ 127.366444][ T5958] DVB: Unable to find symbol stb0899_attach() [ 127.373612][ T5958] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 127.614301][ T5958] rc_core: IR keymap rc-tt-1500 not found [ 127.795517][ T5958] Registered IR keymap rc-empty [ 128.518631][ T6256] mmap: syz.2.66 (6256) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 128.610798][ T5958] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 128.650246][ T5958] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input5 [ 129.012446][ T6266] overlayfs: failed to resolve './file2': -2 [ 129.543973][ T5958] dvb-usb: schedule remote query interval to 100 msecs. [ 129.551221][ T5958] pctv452e: pctv452e_power_ctrl: 0 [ 129.551221][ T5958] [ 129.561434][ T5958] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 129.578890][ T5958] usb 4-1: USB disconnect, device number 2 [ 129.619498][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 129.634949][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 129.661263][ T5897] dvb-usb: bulk message failed: -22 (4/0) [ 129.703557][ T5897] dvb-usb: error -22 while querying for an remote control event. [ 131.326661][ T5958] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 131.432969][ T6282] IPVS: length: 528 != 8 [ 131.481433][ T6282] xt_hashlimit: size too large, truncated to 1048576 [ 132.217501][ T6274] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN PTI [ 132.229439][ T6274] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 132.237855][ T6274] CPU: 0 UID: 0 PID: 6274 Comm: syz.3.70 Not tainted syzkaller #0 PREEMPT(full) [ 132.246948][ T6274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 132.256986][ T6274] RIP: 0010:rwsem_mark_wake+0xfa/0x7c0 [ 132.262439][ T6274] Code: 01 00 74 08 4c 89 f7 e8 94 d9 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be [ 132.282165][ T6274] RSP: 0000:ffffc90010177340 EFLAGS: 00010006 [ 132.288490][ T6274] RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000 [ 132.296465][ T6274] RDX: 1ffff9200202ee74 RSI: ffffffff8e1b1f01 RDI: ffffffff8c287200 [ 132.304442][ T6274] RBP: ffffc90010177440 R08: 0000000000000003 R09: 0000000000000004 [ 132.312413][ T6274] R10: dffffc0000000000 R11: fffff5200202ee84 R12: 0000000000000000 [ 132.320374][ T6274] R13: ffff888031bc5a50 R14: 0000000000000018 R15: ffffc900101775c0 [ 132.328340][ T6274] FS: 00007f7ee54856c0(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 132.337256][ T6274] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.343826][ T6274] CR2: 00007f96c9642cf0 CR3: 000000002a19a000 CR4: 00000000003526f0 [ 132.351797][ T6274] Call Trace: [ 132.355083][ T6274] [ 132.358027][ T6274] ? __pfx_rwsem_mark_wake+0x10/0x10 [ 132.363323][ T6274] ? do_raw_spin_lock+0x12b/0x2f0 [ 132.368531][ T6274] rwsem_del_wake_waiter+0x25d/0x2e0 [ 132.373821][ T6274] rwsem_down_write_slowpath+0xa6f/0x1080 [ 132.379650][ T6274] ? rwsem_down_write_slowpath+0x4a3/0x1080 [ 132.385979][ T6274] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 132.392130][ T6274] ? lapic_next_event+0x11/0x20 [ 132.396968][ T6274] ? clockevents_program_event+0x3ba/0x4b0 [ 132.402763][ T6274] ? dup_mmap+0x181/0x1d90 [ 132.407165][ T6274] down_write_killable+0x1eb/0x240 [ 132.412294][ T6274] ? lockdep_hardirqs_on+0x7a/0x110 [ 132.417500][ T6274] ? __pfx_down_write_killable+0x10/0x10 [ 132.423146][ T6274] dup_mmap+0x181/0x1d90 [ 132.427499][ T6274] ? pcpu_memcg_post_alloc_hook+0x2a4/0x630 [ 132.433405][ T6274] ? pcpu_memcg_post_alloc_hook+0x2a4/0x630 [ 132.439296][ T6274] ? __lock_acquire+0x6b5/0x2cf0 [ 132.444357][ T6274] ? __pfx_dup_mmap+0x10/0x10 [ 132.449028][ T6274] copy_mm+0x14d/0x690 [ 132.453085][ T6274] copy_process+0x1efd/0x4430 [ 132.457754][ T6274] ? copy_process+0xd68/0x4430 [ 132.462507][ T6274] ? __pfx_copy_process+0x10/0x10 [ 132.467528][ T6274] ? futex_wait+0x2a2/0x390 [ 132.472021][ T6274] kernel_clone+0x26d/0x910 [ 132.476513][ T6274] ? __pfx_kernel_clone+0x10/0x10 [ 132.481528][ T6274] ? do_futex+0x333/0x420 [ 132.485847][ T6274] __x64_sys_clone+0x1b6/0x230 [ 132.490601][ T6274] ? __pfx___x64_sys_clone+0x10/0x10 [ 132.495877][ T6274] ? rcu_is_watching+0x15/0xb0 [ 132.500647][ T6274] do_syscall_64+0x14d/0xf80 [ 132.505227][ T6274] ? trace_irq_disable+0x3b/0x150 [ 132.510326][ T6274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.516376][ T6274] ? clear_bhb_loop+0x40/0x90 [ 132.521039][ T6274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.526916][ T6274] RIP: 0033:0x7f7ee459c799 [ 132.531318][ T6274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.550910][ T6274] RSP: 002b:00007f7ee5484fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 132.559309][ T6274] RAX: ffffffffffffffda RBX: 00007f7ee4816090 RCX: 00007f7ee459c799 [ 132.567279][ T6274] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 132.575236][ T6274] RBP: 00007f7ee4632c99 R08: 0000000000000000 R09: 0000000000000000 [ 132.583195][ T6274] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 132.591273][ T6274] R13: 00007f7ee4816128 R14: 00007f7ee4816090 R15: 00007fff26d051b8 [ 132.599236][ T6274] [ 132.602256][ T6274] Modules linked in: [ 132.606143][ T6274] ---[ end trace 0000000000000000 ]--- [ 132.611589][ T6274] RIP: 0010:rwsem_mark_wake+0xfa/0x7c0 [ 132.617046][ T6274] Code: 01 00 74 08 4c 89 f7 e8 94 d9 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be [ 132.636727][ T6274] RSP: 0000:ffffc90010177340 EFLAGS: 00010006 [ 132.642785][ T6274] RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000 [ 132.650744][ T6274] RDX: 1ffff9200202ee74 RSI: ffffffff8e1b1f01 RDI: ffffffff8c287200 [ 132.658718][ T6274] RBP: ffffc90010177440 R08: 0000000000000003 R09: 0000000000000004 [ 132.666692][ T6274] R10: dffffc0000000000 R11: fffff5200202ee84 R12: 0000000000000000 [ 132.674652][ T6274] R13: ffff888031bc5a50 R14: 0000000000000018 R15: ffffc900101775c0 [ 132.682609][ T6274] FS: 00007f7ee54856c0(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 132.691611][ T6274] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.698183][ T6274] CR2: 00007f96c9642cf0 CR3: 000000002a19a000 CR4: 00000000003526f0 [ 132.706246][ T6274] Kernel panic - not syncing: Fatal exception [ 133.840776][ T6274] Shutting down cpus with NMI [ 133.845669][ T6274] Kernel Offset: disabled [ 133.849991][ T6274] Rebooting in 86400 seconds..