last executing test programs: 3.666382086s ago: executing program 0 (id=1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000100)={0x6, 0x0, [{0x0, 0x1, 0x0, 0x0, 0x9f86}, {0x5e2796afef1a2f31, 0xffffffff, 0xd, 0x9, 0x1, 0x80000001, 0x8}, {0x80000008, 0x2, 0x5, 0xff, 0x5, 0x7, 0x1}, {0x1, 0x67b7, 0x6, 0x62d9, 0x9, 0x3, 0x7f}, {0x4, 0x0, 0x0, 0x6b0, 0x823, 0xa5, 0x2}, {0x40000001, 0x1, 0x4, 0xc, 0xff, 0x9, 0x6}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7001}) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000005c0), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000600), 0x10106, 0x2, 0x0) unshare(0x40070480) socket(0x2b, 0x800, 0x7) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x800000000004}, 0x0) ioctl$XFS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f00000006c0)) socket$nl_route(0x10, 0x3, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x12, 0xffffffffffffffff, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000020000000027bd7000803d2cc02084c368000000000c00450072646d615fff5200c39f00b49d20af48a118c1d54ec537794c5d7569b32570c90cfa4bb1b9ee9664e9f7f8d084f6ff9989c21206df29870d508df9df69354860adcb473728b632a3a148850dbf7e28d6a0ca614ddaf3160fda"], 0x1c}, 0x1, 0x0, 0x0, 0x2008000}, 0x850) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) r8 = fsopen(&(0x7f0000000840)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000880)='source', &(0x7f00000008c0)='c:,:\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000900)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000940)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000ac0)={0x7, 0x8, 0xfa00, {r9, 0x2000000a}}, 0x10) 3.645444318s ago: executing program 1 (id=2): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @random="202309153e2d", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @redirect={0x8, 0x0, 0x0, @loopback, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="7a0af8ff75257035bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000006000000b7000000000000009500000000000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf528666d1ddd73f3047d248df061222193165274bc7f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce7243d1aebdb638d91dbef661935839c77edf2d34b12cd48a0c20fb7dd843267e0331759f4ec6b5b0af58e604f4942eb613eff289026d5045ef76d7d864409eb2dc7718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x2040000, 0x20000000, {0x0, 0x0, 0x0, 0x0, 0x6024b, 0xa1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 3.491130292s ago: executing program 3 (id=6): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) (async) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x2e, 0x40000000, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x5f) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r1, 0x40086f52, &(0x7f0000000280)={0x2, &(0x7f00000002c0)=[{0x8, '\x00', @buffer={"75c583653f9a7285235449338d1dbacb6c0642c5aef421fe8e1e2a912b96d349", 0x20}, 0x2}, {0x1b, '\x00', @st={0x4, [{0x5, @uvalue=0xb08e}, {0x2, @uvalue=0xffffffff}, {0x2, @uvalue=0x209}, {0x0, @svalue=0x4000000000009cb1}]}, 0x8}]}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r2, &(0x7f0000000000)='27', 0x2) mount$9p_unix(&(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0), 0x800000, &(0x7f0000000200)) 3.416213593s ago: executing program 2 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000005c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, 0x0) (fail_nth: 3) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x80, 0x0) 3.412490131s ago: executing program 1 (id=8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000ff, 0x0, 0xdf}]}) r3 = openat$null(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_TDX_INIT_MEM_REGION(r3, 0xc004aeba, &(0x7f00000000c0)={0x3, 0x1, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0xb000, 0xbaa9}}) 3.229044263s ago: executing program 1 (id=9): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000100)={0x6, 0x0, [{0x0, 0x1, 0x0, 0x0, 0x9f86}, {0x5e2796afef1a2f31, 0xffffffff, 0xd, 0x9, 0x1, 0x80000001, 0x8}, {0x80000008, 0x2, 0x5, 0xff, 0x5, 0x7, 0x1}, {0x1, 0x67b7, 0x6, 0x62d9, 0x9, 0x3, 0x7f}, {0x4, 0x0, 0x0, 0x6b0, 0x823, 0xa5, 0x2}, {0x40000001, 0x1, 0x4, 0xc, 0xff, 0x9, 0x6}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7001}) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000005c0), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000600), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x7fffffffffffffff, 0xfffffe0000000003, 0xfa11, 0xffffffff}, 0x0) unshare(0x40070480) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) socket(0x2b, 0x800, 0x7) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x800000000004}, 0x0) ioctl$XFS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f00000006c0)) socket$nl_route(0x10, 0x3, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x12, 0xffffffffffffffff, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000020000000027bd7000803d2cc02084c368000000000c00450072646d615fff5200c39f00b49d20af48a118c1d54ec537794c5d7569b32570c90cfa4bb1b9ee9664e9f7f8d084f6ff9989c21206df29870d508df9df69354860adcb473728b632a3a148850dbf7e28d6a0ca614ddaf3160fda"], 0x1c}, 0x1, 0x0, 0x0, 0x2008000}, 0x850) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) r8 = fsopen(&(0x7f0000000840)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000880)='source', &(0x7f00000008c0)='c:,:\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000900)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000940)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000980)={0x15, 0x110, 0xfa00, {r9, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000ac0)={0x7, 0x8, 0xfa00, {r9, 0x2000000a}}, 0x10) 3.158757s ago: executing program 2 (id=10): poll(0x0, 0x0, 0x8) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000004c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000500), 0xffffffffffffff58, 0x20008005, &(0x7f0000000540)={0x2, 0x4e20}, 0x10) shutdown(r1, 0x0) shutdown(r1, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xc000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) recvfrom(r1, 0x0, 0x0, 0x3, 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./file0\x00', 0x0) close_range(r0, r2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="3000000014000305", @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000700)={'ip6tnl0\x00', r3, 0x2f, 0x5, 0xe5, 0x3, 0x20, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x80, 0x0, 0x7}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="d40000001b0001000000000003000000fc000000000000000000000000000000000000000000000000000000000000000000000000000008000080200f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000003000000000000000000000000000000fffffffffffffffffcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b06b6e00000101000000000008000c000800000050df66d3541a000a0010000100000000000000"], 0xd4}, 0x1, 0x0, 0x0, 0x665c3ed30a41084f}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) symlinkat(&(0x7f00000001c0)='./sys/bus/pci/drivers/i801_smbus\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./drv\x00') r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000280)='0000:00:1f.3', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f00000003c0)='100', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./drv/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='0000:00:1f.3', 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe08, 0x0, 0x5, 0x1, 0x80000000}, 0x21}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x8000) 2.890231218s ago: executing program 2 (id=11): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="000000f600000400fdff14000000458900"], 0x22) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='gfs2\x00', 0x1000000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141102) sendto$packet(r0, &(0x7f0000000540)="abf7a9153648c87c56e30e972c88591f1ae17cb59c1aa18d43096793ded1a8b4bf4d93b37d1951cf8b93ecf693ec02a4a502cf137a1446f790cd6859be346eee147e4eee172a9a03e9f6215f5d80bb822960a5331532ab9f71ce301ba2f02864602632a3b2030a24815860b115ed6d66858f6a27b3a84a050dba745ac1acdf4e2d1d695895f60da3406bc6c76cc320181b84c2608b2c88c932e27297134c949af6a119c58e2aa0ace29094ab80c2a97266e8410f4fd636ff7c10c837bd32104b94c7505417eef95bad780b2b64a82c590732b3b59bbe3f4ff44ee1f03a89f32baed57d9c5e96cb1e19a4bd18ddff6f3a31a3d95d", 0xf4, 0x24000801, &(0x7f00000006c0)={0x11, 0x1, 0x0, 0x1, 0x8, 0x6, @remote}, 0x14) r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x381000) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000280)=""/209) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000380)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x3) accept4$bt_l2cap(r4, 0x0, 0x0, 0x80800) r5 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x85, 0x0, &(0x7f00000003c0)) r6 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000440)=0x5) openat$audio(0xffffffffffffff9c, 0x0, 0x80002, 0x0) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="043e130100c900", @ANYRES32=r4], 0x16) socket$key(0xf, 0x3, 0x2) socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r5, &(0x7f0000000500)={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) mmap(&(0x7f00007d0000/0x2000)=nil, 0x2000, 0x8, 0x12, 0xffffffffffffffff, 0xdc179000) 2.589561565s ago: executing program 3 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys/devices/system/cpu/vulnerabilities/tsx_async_abort\x00', &(0x7f00000002c0)='afs\x00', 0x181000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/vulnerabilities/tsx_async_abort\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)}], 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x94489e87720a3ec, [{0xa00, 0xff03000000000000}, {0x0, 0x100000000000000}]}, 0xa50) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x44) r1 = openat$iommufd(0xffffff9c, &(0x7f00000003c0), 0x5c1580, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000440)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000480)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000500)={0x18, r3, 0x1, 0x0, &(0x7f0000000540)=[{0xfffffffffffffff7, 0xffffffffffffffff}]}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000580)={0xc, r3}) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/net/stat\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f00000006c0)='rt_cache\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./sys\x00', &(0x7f0000000780)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write$binfmt_format(r6, &(0x7f0000000800)='1\x00', 0x2) pread64(r5, &(0x7f0000000840)=""/216, 0xd8, 0x6333) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$OTPGETREGIONINFO(r5, 0x400c4d0f, &(0x7f0000000940)) bind$netlink(r7, &(0x7f0000000980)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) 2.530573936s ago: executing program 0 (id=13): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @random="202309153e2d", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @redirect={0x8, 0x0, 0x0, @loopback, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="7a0af8ff75257035bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000006000000b7000000000000009500000000000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf528666d1ddd73f3047d248df061222193165274bc7f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce7243d1aebdb638d91dbef661935839c77edf2d34b12cd48a0c20fb7dd843267e0331759f4ec6b5b0af58e604f4942eb613eff289026d5045ef76d7d864409eb2dc7718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681"], &(0x7f0000000100)='GPL\x00'}, 0x48) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2000007, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x2e00, 0x4000000}, 0x28) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x9}}, @float={0x3, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x2e, 0x0]}}, 0x0, 0x40, 0x0, 0x1}, 0x28) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x2040000, 0x20000000, {0x0, 0x0, 0x0, 0x0, 0x6024b, 0xa1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 2.514443068s ago: executing program 3 (id=14): poll(0x0, 0x0, 0x8) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000004c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000500), 0xffffffffffffff58, 0x20008005, &(0x7f0000000540)={0x2, 0x4e20}, 0x10) shutdown(r1, 0x0) shutdown(r1, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xc000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) recvfrom(r1, 0x0, 0x0, 0x3, 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./file0\x00', 0x0) close_range(r0, r2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="3000000014000305", @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000700)={'ip6tnl0\x00', r3, 0x2f, 0x5, 0xe5, 0x3, 0x20, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x80, 0x0, 0x7}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="d40000001b0001000000000003000000fc000000000000000000000000000000000000000000000000000000000000000000000000000008000080200f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000003000000000000000000000000000000fffffffffffffffffcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b06b6e00000101000000000008000c000800000050df66d3541a000a0010000100000000000000"], 0xd4}, 0x1, 0x0, 0x0, 0x665c3ed30a41084f}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) symlinkat(&(0x7f00000001c0)='./sys/bus/pci/drivers/i801_smbus\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./drv\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./drv/unbind\x00', 0x1, 0x0) write(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f00000003c0)='100', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./drv/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='0000:00:1f.3', 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe08, 0x0, 0x5, 0x1, 0x80000000}, 0x21}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x8000) 2.251057823s ago: executing program 3 (id=15): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$dm_control(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8801, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000002940)={0x4, 0x0, 0x0, 0x1a0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@thin_pool={0x0, 0x2000, 0x0, 0x68, 'thin-pool\x00', {@ram_num={'1:', 0x1}, 0x20, @rnull={'/dev/syzrnull', 0x0}, 0x20, '128'}}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000500)={0x1, 'vlan0\x00'}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(r1, 0x0, 0x0) pselect6(0x40, &(0x7f0000000540)={0x0, 0x0, 0x10, 0x300, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000580)={0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1, 0x3000007, 0x30, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs2/custom0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) read$FUSE(r1, &(0x7f0000000780)={0x2020}, 0x2020) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x33, 0xffffffffffffffff, 0x3e73c000) r4 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r4, 0x6a, 0x4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000002800)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000028c0), 0x161042, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) close(0x3) userfaultfd(0x80801) 2.188089708s ago: executing program 1 (id=16): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b00010000000009040000010129000009054f"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000300)={0x1f, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="010118056e98"], 0x9) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000100)={0x2, 0x0, [{0x1, 0x40, 0x4, 0x8, 0xd6a, 0xffffffff, 0x10000}, {0xd, 0x6, 0x2, 0x10001, 0x4, 0x2, 0x81}]}) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000180)={{0x100000, 0x49323de44ee88a26, 0x0, 0x49, 0x40, 0x7, 0x6, 0x5, 0x0, 0x0, 0xb2, 0x2}, {0xf000, 0xdddd0000, 0xf, 0x5, 0xbe, 0x6, 0x38, 0x8, 0x7, 0xfd, 0xd9, 0x2}, {0xeeef0000, 0x41000, 0xf, 0xc6, 0x3, 0xd, 0x6, 0x9, 0x0, 0x5, 0x42, 0xa}, {0x0, 0x40000, 0x0, 0x9, 0x45, 0xcb, 0x5, 0x9, 0x40, 0x9, 0x1, 0x5}, {0x40000, 0x0, 0xc, 0x81, 0xe, 0x2, 0x81, 0x8f, 0x1, 0xd, 0x5, 0x1}, {0x80a0001, 0x7000, 0x3, 0x5, 0x63, 0x18, 0x7, 0xfc, 0xc, 0x9, 0x6, 0xfd}, {0x7002, 0xb000, 0xd, 0xff, 0x3, 0x80, 0x3, 0x4, 0x5, 0x0, 0xbf, 0x9}, {0x8000000, 0x2000, 0x0, 0x3, 0x4, 0x6, 0x9, 0x8, 0x2, 0x15, 0x0, 0x81}, {0xf000, 0x3}, {0x15000, 0x8}, 0x14, 0x0, 0xeeee8000, 0x40020, 0xa, 0x0, 0x2000, [0x9, 0x1ff, 0x86d, 0x8001]}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000002c0)) syz_open_dev$audion(&(0x7f00000000c0), 0x3, 0x1) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "9a8e63b8", {0x3, 0x104, 0x0, 0x1, 0x2, 0x7, 0x2}}) close_range(r1, 0xffffffffffffffff, 0x0) 2.130050624s ago: executing program 0 (id=17): listen(0xffffffffffffffff, 0x54df) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x80800}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000340)={0x1, 0x38, "057d1f627ba13da75d804aefb142fc0b0d32c009cfb8802c0fdd43a47ed2635e12f57bb7f876a79e876c623b0803248659ac91b09f39580d"}, &(0x7f00000003c0)=0x40) syz_emit_ethernet(0x22, &(0x7f0000000380)={@broadcast, @local, @val={@void, {0x8100, 0x7, 0x1}}, {@can={0xc, {{0x3, 0x0, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "2ec13fb702c6025a"}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) msgget$private(0x0, 0x1) syz_io_uring_setup(0x34b8, 0x0, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000180)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000800)="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", 0x2000, &(0x7f00000050c0)={&(0x7f0000002800)={0x50, 0xffffffffffffffda, 0x765b2259, {0x7, 0x2d, 0xfffffff9, 0x200, 0x80, 0x100, 0x1, 0xe, 0x0, 0x0, 0x4, 0x71}}, &(0x7f0000002880)={0x18, 0x0, 0x8000000000000000, {0x8}}, &(0x7f00000028c0)={0x18, 0xfffffffffffffffe, 0x2, {0x2}}, &(0x7f0000002900)={0x18, 0x0, 0x8001, {0xfffffffb}}, &(0x7f0000002940)={0x18, 0x0, 0xb3c7, {0xe}}, &(0x7f00000049c0)={0x28, 0x0, 0xdaa, {{0x5, 0x35c0000000000000}}}, &(0x7f0000004a00)={0x60, 0x0, 0x1, {{0x6, 0x3, 0x0, 0x7, 0x9, 0x0, 0x10}}}, 0x0, &(0x7f0000004ac0)={0x13, 0x0, 0x8, {'-.\x00'}}, &(0x7f0000004b00)={0x20, 0x0, 0xffffffffffffffff, {0x0, 0x8}}, &(0x7f0000004b40)={0x78, 0x0, 0x3, {0x2, 0x9, 0x0, {0x2, 0x2, 0x7ff, 0x4, 0x6, 0xbc1, 0x4, 0x8, 0x8cfa, 0x4000, 0x5, 0x0, 0xee00, 0x1, 0x8}}}, &(0x7f0000004c40)={0x90, 0x0, 0x10, {0x0, 0x2, 0xf, 0x6, 0xbaea, 0x870e, {0x2, 0x6, 0x5, 0x6, 0x59d, 0x101, 0x7, 0x6, 0x450, 0x8000, 0x1, 0x0, 0x0, 0xffffffff, 0x8}}}, &(0x7f0000000240)={0xa0, 0x0, 0xe27, [{0x2, 0x1, 0x1, 0x29c, '('}, {0x2, 0xbf9, 0xb, 0x8, '/dev/i2c-#\x00'}, {0x5, 0x3ff, 0x1, 0x4, '\x00'}, {0x5, 0x8, 0xf, 0xb39, '/dev/cpu/#/msr\x00'}]}, &(0x7f0000002980)={0x340, 0xffffffffffffffb4, 0x0, [{{0x2, 0x2, 0x6, 0x3, 0x1, 0xffffff85, {0x6, 0xecc1, 0x3c000000000000, 0x6, 0x1, 0x88f4, 0x7, 0xffffffff, 0x4, 0x4000, 0x6, 0x0, 0x0, 0x1, 0x1}}, {0x6, 0x400, 0x15, 0x2, '\xce\xaca\xa3^\x90\xe6G\xf9;\x80\x18\xe4\x96\x00\xbbO\xf1\xee\x9a\"'}}, {{0x0, 0x3, 0x1, 0x0, 0xffffffff, 0x7ff, {0x0, 0x2, 0xfffffffffffffffd, 0x9, 0x6, 0x24, 0x2, 0xffffff00, 0x9, 0xc000, 0x0, 0xee00, 0x0, 0xfffffffc, 0x6}}, {0x2, 0x400, 0x3, 0x1, 'bbr'}}, {{0x2, 0x0, 0x3, 0x8, 0xfff, 0x6, {0x4, 0x800, 0x9, 0x8, 0x200, 0x6, 0x7fff, 0x100, 0x3, 0x4000, 0x7d3, 0x0, 0x0, 0x2, 0x6}}, {0x1, 0xeef3, 0x3, 0x7, 'bbr'}}, {{0x5, 0x2, 0x4, 0x8, 0x0, 0xfffffe00, {0x1, 0x7b3c, 0x9, 0x9, 0x3, 0xa, 0x3, 0x40000000, 0x100, 0x4000, 0x73579e01, 0x0, 0xee01, 0x2, 0x4a5}}, {0x2, 0x7fffffffffffffff, 0x0, 0x5}}, {{0x2, 0xfffffffffffffffe, 0x6, 0x2, 0x1, 0x1, {0x0, 0x2, 0xd, 0x5, 0x6, 0xd, 0xe, 0x3987ecf5, 0x0, 0x4000, 0x1, 0x0, 0x0, 0x7f, 0x4}}, {0x2, 0x390, 0xb, 0x7fff, '/dev/i2c-#\x00'}}]}, 0x0, &(0x7f0000004f40)={0x20, 0x0, 0x1e57, {0x8000, 0x0, 0x2, 0x10001}}, &(0x7f0000004f80)={0x130, 0x0, 0x3366, {0x401, 0x5, 0x0, '\x00', {0x10000, 0x0, 0xc3f7, 0xc99f, 0x0, 0x0, 0x4000, '\x00', 0x100000001, 0x80, 0xd801, 0x8, {0xa, 0x8}, {0x5, 0x3}, {0xfffffffffffffffc, 0x8}, {0x5, 0x1}, 0x0, 0x3d, 0x6, 0xc30000}}}}) openat$cdrom(0xffffff9c, 0x0, 0x301180, 0x0) 2.107756049s ago: executing program 2 (id=18): clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0xc, 0x0, 0x7, 0xe, 0x800005, 0x1, 0x8000009654, 0x1, 0x7fffffff, 0x0, 0x3, 0xb, 0xffff, 0x200cc0, 0x1, 0x5, 0x0, 0xfffffffffffffffc, 0xfffffffd, 0x809, 0x0, 0x5, 0x6, 0x9}) r0 = openat$cdrom(0xffffff9c, 0x0, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRESDEC, @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='omfs\x00', 0xa0004, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x1d3) write(r4, &(0x7f0000000000)='12', 0x2) r5 = syz_open_dev$video(&(0x7f0000000040), 0x10001, 0x1612c0) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000180)={0x1, @capture={0x0, 0x1, {0x8c5, 0xfffffeff}, 0x1, 0xdf}}) getrandom(&(0x7f00000006c0)=""/286, 0xffffff9a, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000800)={0x304, 0x3}, 0x30, 0x0) landlock_restrict_self(r6, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000840)={0xa, 0x4e22, 0x20, @loopback, 0x28}, 0x1c) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) setns(0xc9, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x1, 0xd4b, 0x9, 0x8, 0x3, 0x5, 0x249}, 0x1c) 1.053578031s ago: executing program 3 (id=19): listen(0xffffffffffffffff, 0x54df) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x80800}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000340)={0x1, 0x38, "057d1f627ba13da75d804aefb142fc0b0d32c009cfb8802c0fdd43a47ed2635e12f57bb7f876a79e876c623b0803248659ac91b09f39580d"}, &(0x7f00000003c0)=0x40) syz_emit_ethernet(0x22, &(0x7f0000000380)={@broadcast, @local, @val={@void, {0x8100, 0x7, 0x1}}, {@can={0xc, {{0x3, 0x0, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "2ec13fb702c6025a"}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) msgget$private(0x0, 0x1) syz_io_uring_setup(0x34b8, 0x0, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000180)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000800)="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", 0x2000, &(0x7f00000050c0)={&(0x7f0000002800)={0x50, 0xffffffffffffffda, 0x765b2259, {0x7, 0x2d, 0xfffffff9, 0x200, 0x80, 0x100, 0x1, 0xe, 0x0, 0x0, 0x4, 0x71}}, &(0x7f0000002880)={0x18, 0x0, 0x8000000000000000, {0x8}}, &(0x7f00000028c0)={0x18, 0xfffffffffffffffe, 0x2, {0x2}}, &(0x7f0000002900)={0x18, 0x0, 0x8001, {0xfffffffb}}, &(0x7f0000002940)={0x18, 0x0, 0xb3c7, {0xe}}, &(0x7f00000049c0)={0x28, 0x0, 0xdaa, {{0x5, 0x35c0000000000000}}}, &(0x7f0000004a00)={0x60, 0x0, 0x1, {{0x6, 0x3, 0x0, 0x7, 0x9, 0x0, 0x10}}}, 0x0, &(0x7f0000004ac0)={0x13, 0x0, 0x8, {'-.\x00'}}, &(0x7f0000004b00)={0x20, 0x0, 0xffffffffffffffff, {0x0, 0x8}}, &(0x7f0000004b40)={0x78, 0x0, 0x3, {0x2, 0x9, 0x0, {0x2, 0x2, 0x7ff, 0x4, 0x6, 0xbc1, 0x4, 0x8, 0x8cfa, 0x4000, 0x5, 0x0, 0xee00, 0x1, 0x8}}}, &(0x7f0000004c40)={0x90, 0x0, 0x10, {0x0, 0x2, 0xf, 0x6, 0xbaea, 0x870e, {0x2, 0x6, 0x5, 0x6, 0x59d, 0x101, 0x7, 0x6, 0x450, 0x8000, 0x1, 0x0, 0x0, 0xffffffff, 0x8}}}, &(0x7f0000000240)={0xa0, 0x0, 0xe27, [{0x2, 0x1, 0x1, 0x29c, '('}, {0x2, 0xbf9, 0xb, 0x8, '/dev/i2c-#\x00'}, {0x5, 0x3ff, 0x1, 0x4, '\x00'}, {0x5, 0x8, 0xf, 0xb39, '/dev/cpu/#/msr\x00'}]}, &(0x7f0000002980)={0x340, 0xffffffffffffffb4, 0x0, [{{0x2, 0x2, 0x6, 0x3, 0x1, 0xffffff85, {0x6, 0xecc1, 0x3c000000000000, 0x6, 0x1, 0x88f4, 0x7, 0xffffffff, 0x4, 0x4000, 0x6, 0x0, 0x0, 0x1, 0x1}}, {0x6, 0x400, 0x15, 0x2, '\xce\xaca\xa3^\x90\xe6G\xf9;\x80\x18\xe4\x96\x00\xbbO\xf1\xee\x9a\"'}}, {{0x0, 0x3, 0x1, 0x0, 0xffffffff, 0x7ff, {0x0, 0x2, 0xfffffffffffffffd, 0x9, 0x6, 0x24, 0x2, 0xffffff00, 0x9, 0xc000, 0x0, 0xee00, 0x0, 0xfffffffc, 0x6}}, {0x2, 0x400, 0x3, 0x1, 'bbr'}}, {{0x2, 0x0, 0x3, 0x8, 0xfff, 0x6, {0x4, 0x800, 0x9, 0x8, 0x200, 0x6, 0x7fff, 0x100, 0x3, 0x4000, 0x7d3, 0x0, 0x0, 0x2, 0x6}}, {0x1, 0xeef3, 0x3, 0x7, 'bbr'}}, {{0x5, 0x2, 0x4, 0x8, 0x0, 0xfffffe00, {0x1, 0x7b3c, 0x9, 0x9, 0x3, 0xa, 0x3, 0x40000000, 0x100, 0x4000, 0x73579e01, 0x0, 0xee01, 0x2, 0x4a5}}, {0x2, 0x7fffffffffffffff, 0x0, 0x5}}, {{0x2, 0xfffffffffffffffe, 0x6, 0x2, 0x1, 0x1, {0x0, 0x2, 0xd, 0x5, 0x6, 0xd, 0xe, 0x3987ecf5, 0x0, 0x4000, 0x1, 0x0, 0x0, 0x7f, 0x4}}, {0x2, 0x390, 0xb, 0x7fff, '/dev/i2c-#\x00'}}]}, 0x0, &(0x7f0000004f40)={0x20, 0x0, 0x1e57, {0x8000, 0x0, 0x2, 0x10001}}, &(0x7f0000004f80)={0x130, 0x0, 0x3366, {0x401, 0x5, 0x0, '\x00', {0x10000, 0x0, 0xc3f7, 0xc99f, 0x0, 0x0, 0x4000, '\x00', 0x100000001, 0x80, 0xd801, 0x8, {0xa, 0x8}, {0x5, 0x3}, {0xfffffffffffffffc, 0x8}, {0x5, 0x1}, 0x0, 0x3d, 0x6, 0xc30000}}}}) openat$cdrom(0xffffff9c, 0x0, 0x301180, 0x0) 1.041322015s ago: executing program 2 (id=20): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$dm_control(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8801, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000002940)={0x4, 0x0, 0x0, 0x1a0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@thin_pool={0x0, 0x2000, 0x0, 0x68, 'thin-pool\x00', {@ram_num={'1:', 0x1}, 0x20, @rnull={'/dev/syzrnull', 0x0}, 0x20, '128'}}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000500)={0x1, 'vlan0\x00'}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(r1, 0x0, 0x0) pselect6(0x40, &(0x7f0000000540)={0x0, 0x0, 0x10, 0x300, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000580)={0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1, 0x3000007, 0x30, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs2/custom0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000027c0)={0x4, 0x0, r3}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x33, 0xffffffffffffffff, 0x3e73c000) r4 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r4, 0x6a, 0x4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000002800)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000028c0), 0x161042, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) close(0x3) userfaultfd(0x80801) 79.326347ms ago: executing program 0 (id=21): poll(0x0, 0x0, 0x8) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000004c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000500), 0xffffffffffffff58, 0x20008005, &(0x7f0000000540)={0x2, 0x4e20}, 0x10) shutdown(r1, 0x0) shutdown(r1, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xc000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) recvfrom(r1, 0x0, 0x0, 0x3, 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./file0\x00', 0x0) close_range(r0, r2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="3000000014000305", @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000700)={'ip6tnl0\x00', r3, 0x2f, 0x5, 0xe5, 0x3, 0x20, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x80, 0x0, 0x7}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="d40000001b0001000000000003000000fc000000000000000000000000000000000000000000000000000000000000000000000000000008000080200f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000003000000000000000000000000000000fffffffffffffffffcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b06b6e00000101000000000008000c000800000050df66d3541a000a0010000100000000000000"], 0xd4}, 0x1, 0x0, 0x0, 0x665c3ed30a41084f}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) symlinkat(&(0x7f00000001c0)='./sys/bus/pci/drivers/i801_smbus\x00', 0xffffffffffffff9c, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./drv/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='0000:00:1f.3', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f00000003c0)='100', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./drv/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='0000:00:1f.3', 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe08, 0x0, 0x5, 0x1, 0x80000000}, 0x21}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x8000) 46.277081ms ago: executing program 2 (id=22): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x2, &(0x7f0000000940)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./proc/sys/kernel/printk\x00', 0x1, 0x0) write(r2, &(0x7f0000000ac0)='0 0', 0x3) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/sys/kernel/panic_on_warn\x00', 0x1, 0x0) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000b80)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000bc0)='./sys\x00', &(0x7f0000000c00)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000c40)='./sys/module/kernel/parameters/panic_on_warn\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./sys/module/phram/parameters/phram\x00', 0x1, 0x0) write(r4, &(0x7f0000000cc0)='test,0x8000000000000000,0x1000\x00', 0x1e) close(r4) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, 0x0, 0x0) bind$rxrpc(r1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r6, @ANYBLOB="101000000000000008000d1f05000000e4031680e00301800c00070000000000adffffff0c00", @ANYRES32=r6, @ANYBLOB="eb91"], 0x40c}}, 0x0) 0s ago: executing program 3 (id=23): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @random="202309153e2d", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @redirect={0x8, 0x0, 0x0, @loopback, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2000007, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x2e00, 0x4000000}, 0x28) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x9}}, @float={0x3, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x2e, 0x0]}}, 0x0, 0x40, 0x0, 0x1}, 0x28) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x2040000, 0x20000000, {0x0, 0x0, 0x0, 0x0, 0x6024b, 0xa1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) kernel console output (not intermixed with test programs): syzkaller login: [ 87.903182][ T148] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:62431' (ED25519) to the list of known hosts. [ 376.229975][ T5831] cgroup: Unknown subsys name 'net' [ 376.322957][ T5831] cgroup: Unknown subsys name 'cpuset' [ 376.325533][ T5831] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 377.261192][ T5831] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 381.755267][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 381.759113][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 381.759896][ T5863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 381.760595][ T5863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 381.763454][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 381.763799][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 381.766601][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 381.769306][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 381.769894][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 381.773105][ T5863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 381.773225][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 381.773876][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 381.774468][ T5866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 381.774714][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 381.775481][ T5866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 381.775754][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 381.776430][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 381.777108][ T5866] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 381.777827][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 381.779637][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 381.991987][ T5848] rxe_eth0 speed is unknown, defaulting to 1000 [ 381.997433][ T5856] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 382.006888][ T5858] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 382.008095][ T5848] rxe_eth0 speed is unknown, defaulting to 1000 [ 382.009089][ T5848] rxe_eth0 speed is unknown, defaulting to 1000 [ 382.088887][ T5849] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 382.115109][ T5839] rxe_eth0 speed is unknown, defaulting to 1000 [ 382.115189][ T5848] infiniband rxe0: set active [ 382.115201][ T5848] infiniband rxe0: added rxe_eth0 [ 382.116681][ T5849] rxe_eth0 speed is unknown, defaulting to 1000 [ 382.132609][ T5848] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 382.132642][ T5848] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 382.132676][ T5848] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 382.161882][ T5848] RDS/IB: rxe0: added [ 382.161997][ T5848] smc: adding ib device rxe0 with port count 1 [ 382.162031][ T5848] smc: ib device rxe0 port 1 has no pnetid [ 382.167528][ T59] rxe_eth0 speed is unknown, defaulting to 1000 [ 382.231343][ T5839] rxe_eth0 speed is unknown, defaulting to 1000 [ 382.237012][ T5839] rxe_eth0 speed is unknown, defaulting to 1000 [ 382.246241][ T5848] rxe_eth0 speed is unknown, defaulting to 1000 [ 382.330917][ T5848] rxe_eth0 speed is unknown, defaulting to 1000 [ 382.429284][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.429760][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.429833][ T5856] bridge_slave_0: entered allmulticast mode [ 382.430696][ T5856] bridge_slave_0: entered promiscuous mode [ 382.433963][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.434039][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.434132][ T5856] bridge_slave_1: entered allmulticast mode [ 382.435421][ T5856] bridge_slave_1: entered promiscuous mode [ 382.441677][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.441748][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.441840][ T5858] bridge_slave_0: entered allmulticast mode [ 382.442761][ T5858] bridge_slave_0: entered promiscuous mode [ 382.444376][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.444417][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.444473][ T5858] bridge_slave_1: entered allmulticast mode [ 382.445243][ T5858] bridge_slave_1: entered promiscuous mode [ 382.478607][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.483560][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.483635][ T5848] rxe_eth0 speed is unknown, defaulting to 1000 [ 382.499291][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.516243][ T5856] team0: Port device team_slave_0 added [ 382.517569][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.535927][ T5856] team0: Port device team_slave_1 added [ 382.558580][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.558593][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.558612][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.561729][ T5858] team0: Port device team_slave_0 added [ 382.562282][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.562294][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.562315][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.572938][ T5858] team0: Port device team_slave_1 added [ 382.625471][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.625490][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.625513][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.645929][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.645945][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.645966][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.650441][ T5856] hsr_slave_0: entered promiscuous mode [ 382.650952][ T5856] hsr_slave_1: entered promiscuous mode [ 382.753057][ T5858] hsr_slave_0: entered promiscuous mode [ 382.753496][ T5858] hsr_slave_1: entered promiscuous mode [ 382.754000][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 382.754014][ T5858] Cannot create hsr debugfs directory [ 382.783281][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.784650][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.784757][ T5849] bridge_slave_0: entered allmulticast mode [ 382.786004][ T5849] bridge_slave_0: entered promiscuous mode [ 382.806777][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.806883][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.806974][ T5849] bridge_slave_1: entered allmulticast mode [ 382.808239][ T5849] bridge_slave_1: entered promiscuous mode [ 382.868902][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.892823][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.964117][ T5849] team0: Port device team_slave_0 added [ 382.986740][ T5849] team0: Port device team_slave_1 added [ 383.025548][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.025560][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.025575][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.026603][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.026612][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.026626][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.071014][ T5856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 383.076920][ T5856] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 383.077629][ T5856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 383.080809][ T5856] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 383.081663][ T5856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 383.085352][ T5856] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 383.099037][ T5849] hsr_slave_0: entered promiscuous mode [ 383.099511][ T5849] hsr_slave_1: entered promiscuous mode [ 383.099833][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 383.099843][ T5849] Cannot create hsr debugfs directory [ 383.101373][ T5856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 383.105942][ T5856] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.206127][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.206181][ T5856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.206445][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.206491][ T5856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.224974][ T5858] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 383.227778][ T5858] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 383.228292][ T5858] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 383.231932][ T5858] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 383.239413][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.239508][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.239588][ T5848] bridge_slave_0: entered allmulticast mode [ 383.242174][ T5848] bridge_slave_0: entered promiscuous mode [ 383.243432][ T5858] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 383.248334][ T5858] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 383.249252][ T5858] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 383.252339][ T5858] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.259789][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.260292][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.260360][ T5848] bridge_slave_1: entered allmulticast mode [ 383.261071][ T5848] bridge_slave_1: entered promiscuous mode [ 383.291043][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.292642][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.323934][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.327514][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.357699][ T5848] team0: Port device team_slave_0 added [ 383.366911][ T5848] team0: Port device team_slave_1 added [ 383.396684][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.396698][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.396711][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.397592][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.397600][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.397613][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.424398][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 383.432743][ T5849] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 383.435429][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 383.441640][ T5849] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 383.449188][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 383.452173][ T5849] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 383.452687][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 383.456820][ T5849] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.466858][ T5848] hsr_slave_0: entered promiscuous mode [ 383.467840][ T5848] hsr_slave_1: entered promiscuous mode [ 383.468273][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 383.468286][ T5848] Cannot create hsr debugfs directory [ 383.551295][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.600071][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.605801][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.605851][ T5870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.617952][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.633377][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.633423][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.653033][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 383.657161][ T5848] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 383.663056][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.673720][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 383.682228][ T5848] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 383.683034][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 383.687331][ T5848] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 383.698428][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 383.706591][ T5848] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.712679][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.712746][ T5870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.726352][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.726399][ T5870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.745265][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.796739][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.806618][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.806665][ T5879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.816872][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.816918][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.833954][ T5852] Bluetooth: hci0: command tx timeout [ 383.834452][ T5852] Bluetooth: hci2: command tx timeout [ 383.834466][ T5861] Bluetooth: hci3: command tx timeout [ 383.835109][ T67] Bluetooth: hci1: command tx timeout [ 383.867642][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.880024][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.886965][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.887011][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.898413][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.898499][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.119502][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.146458][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.164709][ T5858] veth0_vlan: entered promiscuous mode [ 384.172374][ T5858] veth1_vlan: entered promiscuous mode [ 384.215032][ T5856] veth0_vlan: entered promiscuous mode [ 384.222273][ T5856] veth1_vlan: entered promiscuous mode [ 384.223578][ T5858] veth0_macvtap: entered promiscuous mode [ 384.229194][ T5858] veth1_macvtap: entered promiscuous mode [ 384.243620][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.253451][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.257179][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.257472][ T5856] veth0_macvtap: entered promiscuous mode [ 384.270849][ T5856] veth1_macvtap: entered promiscuous mode [ 384.282884][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.295606][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.301158][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.301455][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.301760][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.303185][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.370482][ T5901] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.375385][ T5848] veth0_vlan: entered promiscuous mode [ 384.380088][ T5873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.380102][ T5873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.391196][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.391234][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.391254][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.391272][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.402679][ T5849] veth0_vlan: entered promiscuous mode [ 384.414556][ T5848] veth1_vlan: entered promiscuous mode [ 384.426582][ T5993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.426595][ T5993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.426940][ T5849] veth1_vlan: entered promiscuous mode [ 384.458859][ T5993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.458878][ T5993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.482060][ T5848] veth0_macvtap: entered promiscuous mode [ 384.486581][ T5849] veth0_macvtap: entered promiscuous mode [ 384.488781][ T5848] veth1_macvtap: entered promiscuous mode [ 384.489363][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.489376][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.492055][ T5849] veth1_macvtap: entered promiscuous mode [ 384.505813][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.508157][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.514427][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.515264][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.586016][ T5858] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 384.590321][ T5901] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.590503][ T5901] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.590696][ T5901] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.590894][ T5858] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 384.598830][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.598842][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.604967][ T5856] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 384.605602][ T5856] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 384.610401][ T5993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.610412][ T5993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.621816][ T5856] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 384.629476][ T5993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.629487][ T5993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.637305][ T5993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.637316][ T5993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.642344][ T6015] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.642369][ T6015] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.642388][ T6015] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.642407][ T6015] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.642425][ T6015] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.743585][ T6029] FAULT_INJECTION: forcing a failure. [ 384.743585][ T6029] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 384.743619][ T6029] CPU: 3 UID: 0 PID: 6029 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 384.743632][ T6029] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 384.743647][ T6029] Call Trace: [ 384.743651][ T6029] [ 384.743656][ T6029] dump_stack_lvl+0x100/0x190 [ 384.743678][ T6029] should_fail_ex.cold+0x5/0xa [ 384.743696][ T6029] _copy_from_user+0x2e/0xd0 [ 384.743714][ T6029] msr_io+0x93/0x860 [ 384.743727][ T6029] ? __pfx_do_set_msr+0x10/0x10 [ 384.743742][ T6029] ? lock_acquire+0x1d1/0x380 [ 384.743755][ T6029] ? __pfx_msr_io+0x10/0x10 [ 384.743769][ T6029] ? is_bpf_text_address+0x25/0x1a0 [ 384.743787][ T6029] kvm_set_msrs+0x91/0x100 [ 384.743802][ T6029] ? kvm_set_msrs+0x77/0x100 [ 384.743819][ T6029] kvm_arch_vcpu_ioctl+0x8ba/0x39f0 [ 384.743837][ T6029] ? is_bpf_text_address+0x94/0x1a0 [ 384.743852][ T6029] ? kernel_text_address+0x8d/0x100 [ 384.743875][ T6029] ? __pfx_widen_string+0x10/0x10 [ 384.743887][ T6029] ? __kernel_text_address+0xd/0x30 [ 384.743904][ T6029] ? unwind_get_return_address+0x59/0xa0 [ 384.743922][ T6029] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 384.743945][ T6029] ? __lock_acquire+0xe8b/0x1f40 [ 384.743959][ T6029] ? stack_depot_save_flags+0x27/0xa10 [ 384.743977][ T6029] ? lock_acquire+0x1d1/0x380 [ 384.743988][ T6029] ? kvm_vcpu_ioctl+0x322/0x17b0 [ 384.744007][ T6029] ? rcu_is_watching+0x13/0xc0 [ 384.744024][ T6029] ? trace_contention_end+0x126/0x160 [ 384.744039][ T6029] ? __mutex_lock+0x267/0x1c10 [ 384.744054][ T6029] ? kvm_vcpu_ioctl+0x322/0x17b0 [ 384.744073][ T6029] ? __pfx___mutex_lock+0x10/0x10 [ 384.744097][ T6029] ? kvm_vcpu_ioctl+0x8a3/0x17b0 [ 384.744112][ T6029] kvm_vcpu_ioctl+0x8a3/0x17b0 [ 384.744130][ T6029] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 384.744147][ T6029] ? tomoyo_path_number_perm+0x188/0x580 [ 384.744165][ T6029] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 384.744181][ T6029] ? get_pid_task+0x106/0x250 [ 384.744200][ T6029] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 384.744215][ T6029] ? do_vfs_ioctl+0x226/0x13e0 [ 384.744235][ T6029] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 384.744255][ T6029] ? __fget_files+0x34/0x3d0 [ 384.744271][ T6029] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 384.744288][ T6029] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 384.744306][ T6029] ? __fget_files+0x21f/0x3d0 [ 384.744321][ T6029] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 384.744338][ T6029] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 384.744358][ T6029] __do_fast_syscall_32+0x14b/0x8c0 [ 384.744374][ T6029] ? lockdep_hardirqs_on+0x7d/0x110 [ 384.744390][ T6029] do_fast_syscall_32+0x32/0x70 [ 384.744406][ T6029] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 384.744421][ T6029] RIP: 0023:0xf7f95fbc [ 384.744431][ T6029] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 384.744441][ T6029] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 384.744453][ T6029] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004008ae89 [ 384.744460][ T6029] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 384.744467][ T6029] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 384.744473][ T6029] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 384.744479][ T6029] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 384.744493][ T6029] [ 384.849697][ T6034] bridge0: port 3(macvlan2) entered blocking state [ 384.849746][ T6034] bridge0: port 3(macvlan2) entered disabled state [ 384.850574][ T6034] macvlan2: entered allmulticast mode [ 384.850590][ T6034] bridge0: entered allmulticast mode [ 384.850688][ T6034] bridge0: entered promiscuous mode [ 384.864123][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.864160][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.867411][ T6034] macvlan2: left allmulticast mode [ 384.867424][ T6034] bridge0: left allmulticast mode [ 384.885171][ T5853] bridge0: left promiscuous mode [ 385.004283][ T6045] libceph: resolve 'c' (ret=-3): failed [ 385.287675][ T6055] libceph: resolve 'c' (ret=-3): failed [ 385.374804][ T6052] i801_smbus 0000:00:1f.3: SMBus using PCI interrupt [ 385.414538][ T6052] i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD [ 385.528444][ T6057] syzkaller1: entered promiscuous mode [ 385.528467][ T6057] syzkaller1: entered allmulticast mode [ 385.599597][ T67] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 385.599612][ T67] CPU: 0 UID: 0 PID: 67 Comm: kworker/u34:0 Not tainted syzkaller #0 PREEMPT(full) [ 385.599628][ T67] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 385.599636][ T67] Workqueue: hci3 hci_rx_work [ 385.599654][ T67] Call Trace: [ 385.599659][ T67] [ 385.599664][ T67] dump_stack_lvl+0x100/0x190 [ 385.599685][ T67] sysfs_warn_dup.cold+0x1c/0x28 [ 385.599705][ T67] sysfs_create_dir_ns+0x24b/0x2b0 [ 385.599722][ T67] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 385.599738][ T67] ? find_held_lock+0x2b/0x80 [ 385.599755][ T67] ? kobject_add_internal+0x25f/0x930 [ 385.599767][ T67] ? kobject_add_internal+0x25f/0x930 [ 385.599780][ T67] ? do_raw_spin_unlock+0x145/0x1e0 [ 385.599798][ T67] kobject_add_internal+0x2c8/0x930 [ 385.599812][ T67] kobject_add+0x16a/0x1e0 [ 385.599824][ T67] ? __pfx_kobject_add+0x10/0x10 [ 385.599835][ T67] ? class_to_subsys+0x10f/0x150 [ 385.599850][ T67] ? kobject_put+0xb9/0x640 [ 385.599868][ T67] ? _raw_spin_unlock+0x28/0x50 [ 385.599884][ T67] device_add+0x294/0x1970 [ 385.599896][ T67] ? __pfx_dev_set_name+0x10/0x10 [ 385.599910][ T67] ? __pfx_device_add+0x10/0x10 [ 385.599922][ T67] ? mgmt_send_event_skb+0x2fb/0x460 [ 385.599943][ T67] hci_conn_add_sysfs+0x1a3/0x260 [ 385.599963][ T67] le_conn_complete_evt+0x12f9/0x2200 [ 385.599983][ T67] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 385.599998][ T67] ? hci_event_packet+0x186/0xcd0 [ 385.600017][ T67] hci_le_conn_complete_evt+0x23c/0x3a0 [ 385.600033][ T67] ? skb_pull_data+0x15f/0x1e0 [ 385.600048][ T67] hci_le_meta_evt+0x34a/0x5f0 [ 385.600066][ T67] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 385.600084][ T67] hci_event_packet+0x51c/0xcd0 [ 385.600100][ T67] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 385.600117][ T67] ? __pfx_hci_event_packet+0x10/0x10 [ 385.600136][ T67] ? lockdep_hardirqs_on+0x7d/0x110 [ 385.600154][ T67] hci_rx_work+0x6ea/0x10c0 [ 385.600187][ T67] process_one_work+0xac7/0x1b10 [ 385.600213][ T67] ? __pfx_process_one_work+0x10/0x10 [ 385.600232][ T67] ? lock_acquire+0x1d1/0x380 [ 385.600251][ T67] ? __pfx_hci_rx_work+0x10/0x10 [ 385.600292][ T67] worker_thread+0x5ef/0xe50 [ 385.600375][ T67] ? kthread+0x13a/0x450 [ 385.600404][ T67] ? __pfx_worker_thread+0x10/0x10 [ 385.600421][ T67] kthread+0x373/0x450 [ 385.600469][ T67] ? __pfx_kthread+0x10/0x10 [ 385.600498][ T67] ret_from_fork+0x730/0xd60 [ 385.600514][ T67] ? __pfx_ret_from_fork+0x10/0x10 [ 385.600529][ T67] ? __switch_to+0x800/0x10e0 [ 385.600548][ T67] ? __pfx_kthread+0x10/0x10 [ 385.600569][ T67] ret_from_fork_asm+0x1a/0x30 [ 385.600590][ T67] [ 385.601853][ T67] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 385.601878][ T67] Bluetooth: hci3: failed to register connection device [ 385.900311][ T5852] Bluetooth: hci3: command tx timeout [ 385.900334][ T5852] Bluetooth: hci0: command tx timeout [ 385.900403][ T5149] Bluetooth: hci2: command tx timeout [ 385.900437][ T67] Bluetooth: hci1: command tx timeout [ 386.031531][ T6072] bridge0: port 3(macvlan2) entered blocking state [ 386.031607][ T6072] bridge0: port 3(macvlan2) entered disabled state [ 386.031665][ T6072] macvlan2: entered allmulticast mode [ 386.031675][ T6072] bridge0: entered allmulticast mode [ 386.031695][ T6072] bridge0: entered promiscuous mode [ 386.034121][ T6072] macvlan2: left allmulticast mode [ 386.034132][ T6072] bridge0: left allmulticast mode [ 386.039731][ T5959] bridge0: left promiscuous mode [ 386.832109][ T1851] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 387.362335][ T1851] usb 6-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 387.365816][ T1851] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 387.365891][ T1851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 387.371874][ T1851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.371888][ T1851] usb 6-1: Product: syz [ 387.371954][ T1851] usb 6-1: Manufacturer: syz [ 387.371963][ T1851] usb 6-1: SerialNumber: syz [ 387.384788][ T1851] usb 6-1: config 0 descriptor?? [ 387.980854][ T5861] Bluetooth: hci0: command tx timeout [ 387.980888][ T5861] Bluetooth: hci3: command tx timeout [ 387.980996][ T5149] Bluetooth: hci2: command tx timeout [ 387.981051][ T67] Bluetooth: hci1: command tx timeout [ 388.308926][ T1851] usb 6-1: USB disconnect, device number 2 [ 388.352037][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 388.388461][ T6115] ioremap: invalid physical address 8000000000000000 [ 388.388515][ T6115] ------------[ cut here ]------------ [ 388.388521][ T6115] 1 [ 388.388525][ T6115] WARNING: arch/x86/mm/ioremap.c:206 at __ioremap_caller.isra.0.cold+0x59/0xa4, CPU#0: syz.2.22/6115 [ 388.396613][ T6115] Modules linked in: [ 388.397936][ T6115] CPU: 0 UID: 0 PID: 6115 Comm: syz.2.22 Not tainted syzkaller #0 PREEMPT(full) [ 388.401055][ T6115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 388.404383][ T6115] RIP: 0010:__ioremap_caller.isra.0.cold+0x59/0xa4 [ 388.406434][ T6115] Code: 48 8b 34 24 48 c7 c7 00 2e 0c 8c e8 4a 22 01 00 e9 db d4 9a 00 e8 30 52 ec 00 4c 89 ee 48 c7 c7 60 2c 0c 8c e8 31 22 01 00 90 <0f> 0b 90 e9 bb d4 9a 00 e8 13 52 ec 00 41 0f b6 d7 4c 89 ee 48 c7 [ 388.412633][ T6115] RSP: 0018:ffffc90006baf8b8 EFLAGS: 00010286 [ 388.414557][ T6115] RAX: 0000000000000032 RBX: 1ffff92000d75f1b RCX: 0000000000000000 [ 388.417249][ T6115] RDX: 0000000000000032 RSI: ffffffff81eb6e59 RDI: fffff52000d75f08 [ 388.419711][ T6115] RBP: 0000000000001000 R08: 0000000000000000 R09: 0000000000000000 [ 388.422974][ T6115] R10: ffffc90006baf67f R11: 0000000000000001 R12: 8000000000000fff [ 388.425658][ T6115] R13: 8000000000000000 R14: 0000000000000002 R15: 0000000000020000 [ 388.428115][ T6115] FS: 0000000000000000(0000) GS:ffff888095281000(0063) knlGS:00000000f5426b40 [ 388.431171][ T6115] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 388.433261][ T6115] CR2: 00000000327e1ff8 CR3: 000000006d2ea000 CR4: 0000000000352ef0 [ 388.435722][ T6115] Call Trace: [ 388.436812][ T6115] [ 388.437764][ T6115] ? register_device+0x1bb/0x6a0 [ 388.439533][ T6115] ? __pfx___ioremap_caller.isra.0+0x10/0x10 [ 388.441662][ T6115] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 388.443404][ T6115] ? register_device+0x164/0x6a0 [ 388.444986][ T6115] register_device+0x1bb/0x6a0 [ 388.446477][ T6115] phram_setup+0x3b1/0x4c0 [ 388.447867][ T6115] ? __pfx_phram_setup+0x10/0x10 [ 388.449437][ T6115] ? trace_contention_end+0x126/0x160 [ 388.451432][ T6115] ? param_attr_store+0xec/0x300 [ 388.453024][ T6115] ? __pfx___mutex_lock+0x10/0x10 [ 388.454609][ T6115] phram_param_call+0xa6/0xd0 [ 388.456090][ T6115] param_attr_store+0x199/0x300 [ 388.457644][ T6115] ? __pfx_param_attr_store+0x10/0x10 [ 388.459319][ T6115] module_attr_store+0x58/0x80 [ 388.460891][ T6115] ? __pfx_module_attr_store+0x10/0x10 [ 388.462601][ T6115] sysfs_kf_write+0xf2/0x150 [ 388.464063][ T6115] kernfs_fop_write_iter+0x3e0/0x5f0 [ 388.465735][ T6115] ? __pfx_sysfs_kf_write+0x10/0x10 [ 388.467374][ T6115] vfs_write+0x6af/0x1050 [ 388.468762][ T6115] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 388.470663][ T6115] ? __pfx_vfs_write+0x10/0x10 [ 388.472199][ T6115] ? find_held_lock+0x2b/0x80 [ 388.473712][ T6115] ksys_write+0x12a/0x250 [ 388.475068][ T6115] ? __pfx_ksys_write+0x10/0x10 [ 388.476619][ T6115] __do_fast_syscall_32+0x14b/0x8c0 [ 388.478254][ T6115] ? lockdep_hardirqs_on+0x7d/0x110 [ 388.479898][ T6115] do_fast_syscall_32+0x32/0x70 [ 388.481536][ T6115] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 388.483519][ T6115] RIP: 0023:0xf740efbc [ 388.484812][ T6115] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 388.490918][ T6115] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 388.493525][ T6115] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000cc0 [ 388.496077][ T6115] RDX: 000000000000001e RSI: 0000000000000000 RDI: 0000000000000000 [ 388.498545][ T6115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 388.501464][ T6115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.503937][ T6115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 388.506440][ T6115] [ 388.507432][ T6115] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 388.509490][ T6115] CPU: 0 UID: 0 PID: 6115 Comm: syz.2.22 Not tainted syzkaller #0 PREEMPT(full) [ 388.512318][ T6115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 388.515433][ T6115] Call Trace: [ 388.516504][ T6115] [ 388.517447][ T6115] dump_stack_lvl+0x100/0x190 [ 388.518936][ T6115] vpanic+0x2dc/0x6f8 [ 388.520195][ T6115] panic+0xd1/0xe0 [ 388.521396][ T6115] ? __pfx_panic+0x10/0x10 [ 388.522815][ T6115] check_panic_on_warn.cold+0x19/0x34 [ 388.524494][ T6115] ? __ioremap_caller.isra.0.cold+0x59/0xa4 [ 388.526373][ T6115] __warn.cold+0x191/0x321 [ 388.527782][ T6115] __report_bug+0x30f/0x440 [ 388.529240][ T6115] ? __ioremap_caller.isra.0.cold+0x59/0xa4 [ 388.531086][ T6115] ? __pfx___report_bug+0x10/0x10 [ 388.532781][ T6115] ? irq_work_queue+0xd1/0x100 [ 388.534302][ T6115] ? __wake_up_klogd+0x7a/0xb0 [ 388.535842][ T6115] ? vprintk_emit+0x1c9/0x6b0 [ 388.537384][ T6115] ? __pfx_vprintk_emit+0x10/0x10 [ 388.538963][ T6115] ? __ioremap_caller.isra.0.cold+0x59/0xa4 [ 388.540815][ T6115] report_bug+0xb3/0x220 [ 388.542177][ T6115] ? __ioremap_caller.isra.0.cold+0x59/0xa4 [ 388.544025][ T6115] handle_bug+0x16a/0x2a0 [ 388.545606][ T6115] exc_invalid_op+0x17/0x50 [ 388.547044][ T6115] asm_exc_invalid_op+0x1a/0x20 [ 388.548562][ T6115] RIP: 0010:__ioremap_caller.isra.0.cold+0x59/0xa4 [ 388.550588][ T6115] Code: 48 8b 34 24 48 c7 c7 00 2e 0c 8c e8 4a 22 01 00 e9 db d4 9a 00 e8 30 52 ec 00 4c 89 ee 48 c7 c7 60 2c 0c 8c e8 31 22 01 00 90 <0f> 0b 90 e9 bb d4 9a 00 e8 13 52 ec 00 41 0f b6 d7 4c 89 ee 48 c7 [ 388.556551][ T6115] RSP: 0018:ffffc90006baf8b8 EFLAGS: 00010286 [ 388.558436][ T6115] RAX: 0000000000000032 RBX: 1ffff92000d75f1b RCX: 0000000000000000 [ 388.560846][ T6115] RDX: 0000000000000032 RSI: ffffffff81eb6e59 RDI: fffff52000d75f08 [ 388.563294][ T6115] RBP: 0000000000001000 R08: 0000000000000000 R09: 0000000000000000 [ 388.565756][ T6115] R10: ffffc90006baf67f R11: 0000000000000001 R12: 8000000000000fff [ 388.568214][ T6115] R13: 8000000000000000 R14: 0000000000000002 R15: 0000000000020000 [ 388.570680][ T6115] ? vprintk_emit+0x1c9/0x6b0 [ 388.572201][ T6115] ? __ioremap_caller.isra.0.cold+0x58/0xa4 [ 388.574043][ T6115] ? register_device+0x1bb/0x6a0 [ 388.575588][ T6115] ? __pfx___ioremap_caller.isra.0+0x10/0x10 [ 388.577484][ T6115] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 388.579208][ T6115] ? register_device+0x164/0x6a0 [ 388.580760][ T6115] register_device+0x1bb/0x6a0 [ 388.582287][ T6115] phram_setup+0x3b1/0x4c0 [ 388.583685][ T6115] ? __pfx_phram_setup+0x10/0x10 [ 388.585240][ T6115] ? trace_contention_end+0x126/0x160 [ 388.586915][ T6115] ? param_attr_store+0xec/0x300 [ 388.588465][ T6115] ? __pfx___mutex_lock+0x10/0x10 [ 388.590057][ T6115] phram_param_call+0xa6/0xd0 [ 388.591533][ T6115] param_attr_store+0x199/0x300 [ 388.593066][ T6115] ? __pfx_param_attr_store+0x10/0x10 [ 388.594730][ T6115] module_attr_store+0x58/0x80 [ 388.596242][ T6115] ? __pfx_module_attr_store+0x10/0x10 [ 388.597963][ T6115] sysfs_kf_write+0xf2/0x150 [ 388.599401][ T6115] kernfs_fop_write_iter+0x3e0/0x5f0 [ 388.601051][ T6115] ? __pfx_sysfs_kf_write+0x10/0x10 [ 388.602693][ T6115] vfs_write+0x6af/0x1050 [ 388.604060][ T6115] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 388.606022][ T6115] ? __pfx_vfs_write+0x10/0x10 [ 388.607526][ T6115] ? find_held_lock+0x2b/0x80 [ 388.609031][ T6115] ksys_write+0x12a/0x250 [ 388.610487][ T6115] ? __pfx_ksys_write+0x10/0x10 [ 388.612052][ T6115] __do_fast_syscall_32+0x14b/0x8c0 [ 388.613700][ T6115] ? lockdep_hardirqs_on+0x7d/0x110 [ 388.615343][ T6115] do_fast_syscall_32+0x32/0x70 [ 388.616906][ T6115] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 388.618882][ T6115] RIP: 0023:0xf740efbc [ 388.620173][ T6115] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 388.626116][ T6115] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 388.628675][ T6115] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000cc0 [ 388.631113][ T6115] RDX: 000000000000001e RSI: 0000000000000000 RDI: 0000000000000000 [ 388.633579][ T6115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 388.636052][ T6115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.638503][ T6115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 388.640945][ T6115] [ 388.642527][ T6115] Kernel Offset: disabled [ 388.643869][ T6115] Rebooting in 86400 seconds..