last executing test programs: 53.741967242s ago: executing program 4 (id=57): signalfd(0xffffffffffffffff, &(0x7f0000000c80)={[0xfffffffffffffffe]}, 0x8) r0 = syz_io_uring_setup(0x4169, 0x0, &(0x7f0000000480), &(0x7f0000000040)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) 52.524535209s ago: executing program 4 (id=60): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000021c0)='/sys/kernel/kexec_loaded', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_dev$sg(0x0, 0x0, 0x40042) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x41, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x2, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 26.225404377s ago: executing program 4 (id=64): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x5c18e1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @remote}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x88882, 0x0) setresuid(0xee00, 0x0, 0x0) setpriority(0x2, 0x0, 0xffffffffffffffcd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/130, 0x82}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000003c0)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x6, 0x10000000}}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x38, 0x301, 0x270bd24, 0x25dfdbfc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8401}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(&(0x7f0000000100)=[{r5, 0x10c4}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0xb9, 0xd, 0x4, 0x0, 0x4}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500000000000800130000170000080014"], 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x44000) 26.219323469s ago: executing program 4 (id=69): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) gettid() setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r4) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000080)={'veth1_macvtap\x00', &(0x7f0000001bc0)=@ethtool_link_settings={0x4c, 0x9, 0x80, 0x40, 0x5, 0xee, 0x8, 0x4, 0x83, 0xfb, [0x9, 0x3, 0x9, 0x7fff, 0x6, 0x57b3f5e4, 0x9, 0x6]}}) 26.143725424s ago: executing program 4 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000640)=""/4096, 0x1000, 0x2000, &(0x7f0000000380)=@generic={0x11, "d71d9c1bf36be386b8195be2f96732daece168ab8c4756fcaaaaa57ab4d9fa9c5e136c872457faea878081b25c7ac9863e328325d3608f7b92b91789fb2322981d60e78ecebc51a8a848ac66a135cbf9adb555f5fff1d2552ce4b120288f1c606bebc17e3b75c547a1c41ac89d1be3f0e179d586d665ef8397dfdbdaa865"}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r3, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='b *:* r\x00'], 0x8) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r6 = openat$cgroup_devices(r4, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="6115033a2a"], 0x8) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bind$inet6(r3, &(0x7f0000002380)={0xa, 0x4e23, 0x59, @loopback, 0x2}, 0x1c) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x2000) socket$alg(0x26, 0x5, 0x0) 25.023111849s ago: executing program 4 (id=80): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x16, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x40a8013, r2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x503, 0x12000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x188c0}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @random="3878887ef1b9"}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x60}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000001e00)=ANY=[@ANYBLOB="1c0000f5"], 0x87b) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000140)={0x20, 0x6, 0xe, {0xe, 0xc, "c5f8b41970b01e19fb9b5ac4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 22.988892533s ago: executing program 0 (id=85): r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0xd2, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000340)=0x5) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40305829, &(0x7f00000002c0)={0x0, 0x6930, 0x5, 0x1}) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000481000/0x1000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) 20.641993603s ago: executing program 3 (id=92): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) preadv(r1, 0x0, 0x0, 0x1000, 0x3f2f0fde) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 20.312295243s ago: executing program 3 (id=93): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0xa, 0xa, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=@framed={{}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x0}}, @printk={@s}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) fdatasync(r1) 19.176591179s ago: executing program 3 (id=95): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x8001000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(0xffffffffffffffff, 0x8b1a, &(0x7f0000000040)) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x80) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008500000097000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa4ba, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0xb, 0x0, 0x0, 0xd, 0x73, &(0x7f0000000340)=""/115, 0x40f00, 0x79, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0xe, 0x3, 0x800}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r3, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, 0x0, 0x4000895) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x1, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, 0xffffffffffffffff, 0x0) 16.408641294s ago: executing program 3 (id=99): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r1, 0x0, 0x0, 0x1000, 0x3f2f0fde) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1d, 0x2, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000080)={0x0, 0x4, 0x20a}) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 14.481765914s ago: executing program 0 (id=103): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0x1, r1, 0x0, 0x285}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc, r1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r1, 0x0, 0x9, 0x9}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000240)={0x30}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffb, r3, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003ac60bbf45109a5b28a6c4d9ec3c046c0ef13e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x301) ioctl$USBDEVFS_DISCSIGNAL(r6, 0x8010550e, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @initdev, @private}, &(0x7f0000000180)=0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'netdevsim0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_delrule={0x74, 0x21, 0x200, 0x70bd2b, 0x25dfdbfe, {0x2, 0x80, 0x10, 0xc7, 0x5, 0x0, 0x0, 0x7, 0x1b}, [@FRA_FLOW={0x8, 0xb, 0x3}, @FRA_SRC={0x8, 0x2, @multicast1}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}, @FRA_SRC={0x8, 0x2, @private=0xa010100}, @FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e22}}, @FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x8}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xdf1}, @FRA_SRC={0x8, 0x2, @private=0xa010100}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x74}, 0x1, 0x5502000000000000, 0x0, 0x44004}, 0x4c000) 14.176241256s ago: executing program 0 (id=104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ad577d2c", @ANYRES16=r2, @ANYBLOB="010000000000000000000c0000001800058008000100756470000c0002800800040000000000"], 0x2c}}, 0x0) r3 = io_uring_setup(0x10d5, &(0x7f00000002c0)={0x0, 0xeebd, 0x100, 0x0, 0x2000001d}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)=0x1ff) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000000)={0x7fffffff, 0xa9b, 0x8, 0x0, 0x3}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x0, 0x0}}, 0xfc36) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r5, &(0x7f0000000400)={{0x3, @null}, [@null, @null, @rose, @remote, @bcast, @rose, @remote, @default]}, &(0x7f0000000480)=0x48) read(0xffffffffffffffff, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000640)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xffffffff, @empty, 0x2}, {0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0xc3}, 0x1}, r8, 0x1}}, 0x48) poll(&(0x7f00000003c0)=[{r3, 0x1008}, {r1, 0x2}], 0x2, 0xe1) recvfrom(r0, &(0x7f0000000740)=""/4096, 0x1000, 0x10140, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x2, @broadcast, 'pim6reg1\x00'}}, 0x80) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000180)={0x5, 0x10, 0xfa00, {&(0x7f0000000540), r8, 0x2}}, 0x18) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040c41090ea000000000001090224000100000000090400002303000000092100000001220700090581030000000000"], 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a300000000040000480100001800c000100636f756e746572002c000180090001007866726d000000001c000280080001400000000a08000240000000030500030065"], 0xf0}}, 0x0) r9 = socket(0x15, 0x5, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) getsockopt(r9, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 12.920376417s ago: executing program 1 (id=107): r0 = socket$kcm(0x1e, 0x4, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x4) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)={0x1}) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x20, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x3000, 0x3, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x3000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x80a0000}, {0xdddd1000, 0xff}, 0xddf8ffd9, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = userfaultfd(0x80801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x290}) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x304, 0x0, 0x0, 0x0, 0x0}) 9.590057262s ago: executing program 32 (id=80): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x16, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x40a8013, r2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x503, 0x12000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x188c0}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @random="3878887ef1b9"}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x60}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000001e00)=ANY=[@ANYBLOB="1c0000f5"], 0x87b) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000140)={0x20, 0x6, 0xe, {0xe, 0xc, "c5f8b41970b01e19fb9b5ac4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 9.555566907s ago: executing program 1 (id=109): socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) getpid() openat(0xffffffffffffff9c, 0x0, 0x0, 0x181) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x5, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5f4731e5de939cbc"}}, 0x48}}, 0x0) 9.437185583s ago: executing program 0 (id=110): socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180400000000152ebbb4805cefdc00"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40046f41, &(0x7f0000000440)=0x1f) recvmmsg(r1, &(0x7f00000086c0), 0x4, 0x20, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = getpid() openat(0xffffffffffffff9c, 0x0, 0x0, 0x181) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x0, &(0x7f0000000100)=0x7) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) 7.344775629s ago: executing program 0 (id=113): r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0xd2, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000340)=0x5) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40305829, &(0x7f00000002c0)={0x0, 0x6930, 0x5, 0x1}) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000481000/0x1000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) 6.75169664s ago: executing program 2 (id=114): r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r5, 0x101) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r6, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0xd, 0x2, 0x3}, {0xfff6, 0xfa, 0xe, 0x3e}, {0xfffc, 0x3, 0xf6, 0x2}, {0x8, 0x2, 0xa, 0x7fc0}]}) connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) accept4(r5, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) bind$unix(r7, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 6.705628099s ago: executing program 1 (id=115): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d0f5b89c3043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b90"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905780300020000000904010000020d00000904010102020d0000090582020002000000090503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) socket(0x15, 0x5, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) socket(0x15, 0x5, 0x0) (async) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) fsopen(&(0x7f0000000040)='ceph\x00', 0x0) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x208400, 0x10) (rerun: 64) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2], 0x20) (async) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0xe83, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES32=r3], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) semctl$GETPID(0x0, 0x2, 0xb, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000700), r6) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x40) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async, rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002200000000000000000000008000100ac1414bb080019"], 0x2c}}, 0x0) (rerun: 64) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x7b7, 0x10, 0xc, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (rerun: 64) 5.168468081s ago: executing program 2 (id=116): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x7fffff}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, r1, r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4000000, 0x4}}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000012009702000000000000010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00$'], 0x44}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01052dbd7000fcdbdf2502000000080003000000000008000400020000000c00fc8008000700576434bf5237aef9cd83738f4d711851125b53a2f773d38ca1ab648e30d1b877a30b84c0969eedebeb07aa96f4b3071371038e2d73e3741dbd12bc29cda6b24dd8568211f95d45707da46394f6a5137503823be41300a53a1559f76e9a4e821a7a8baee79487b3c1c7405527345bb7a5a788a7310487b7ec9f413937aa446ff54a02a2ea2f8c9be89bab9e265653353ee53d38e18d186e51", @ANYRES32=r5, @ANYBLOB="d11db8469f460cf66521fca946f8cfc3326c7f2fa1623af6260e0eacd8085543e7e4cc9c7867350b31f34e01555a5d38c1f9c9e34042ecce9b797aca88731fcc985349091a48d280d6b1b7059814b76bfbe4f0f4878954e4c64a1b05d74edc52bc1c6ed58b859b035501fb3d424957a1d36c8db84c751a30f52029a468a455d2091aafe67f98a1b709c55f400ec3571afe849e00b45cf8e506ee4ef88e7764f6d7eea8cfbff76f783df1c0f1c69e0a1a9a1f763423c0f31de64782e7d5029659e5"], 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x20004010) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) recvfrom(r0, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) 4.223738697s ago: executing program 1 (id=117): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0xc0844123, &(0x7f0000002fc0)) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000001c0)={r7, 0x9}, 0x8) r8 = accept(r0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x1d}], 0x1, 0x0) recvmsg(r8, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f00000000c0)=0xffffffff) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r9, 0x4068aea3, &(0x7f0000000280)={0xa8, 0x0, 0x1}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) 3.840087274s ago: executing program 2 (id=118): socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180400000000152ebbb4805cefdc00"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40046f41, &(0x7f0000000440)=0x1f) recvmmsg(r1, &(0x7f00000086c0), 0x4, 0x20, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = getpid() openat(0xffffffffffffff9c, 0x0, 0x0, 0x181) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x0, &(0x7f0000000100)=0x7) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) 3.061500912s ago: executing program 1 (id=119): r0 = socket$kcm(0x1e, 0x4, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)={0x1}) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x20, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x3000, 0x3, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x3000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x80a0000}, {0xdddd1000, 0xff}, 0xddf8ffd9, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = userfaultfd(0x80801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x290}) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x304, 0x0, 0x0, 0x0, 0x0}) 2.983476039s ago: executing program 3 (id=120): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001900)="a9cff3", 0x3}, {&(0x7f00000019c0)="48c2c8557113f61ff1aafba9c7e66173164c8ca0c15cbff5683fb4ddb6394595afbcbaaa377a4a5f830744e047edf851d62a66716dd1b4267d5ed18eb9f5c4f88793e82590b71922e22ef06265309b871cba49e7299e2c090c02bd10630588bdc3466f4f5bb8578a26c37021bbb564f50e373543dbd71abbcbe8e6e7bb3b26a9dd2f5ed56323a0055e2e30ed595dea33087b6392a8cabc9e5a07b064e79c7528a81ab8d7ee7aa5ff27ab7c51", 0xac}, {&(0x7f0000001a80)='Tq', 0x2}, {&(0x7f0000001b00)="696c6a7b5ea3afd7819ee415dbdde5557921387803db572c10968b2e1fcb5d68baa44bba", 0x24}, {&(0x7f0000001c00)="5ca5b1dabcc26ad25d615b05179a9fd11e6653791ad22b90c11d51d82c5339db07573325f2a50b1f39be84a4ded40063e6538f23fbbb6e35546898cd11f3aed21d065dae1ca8fe6f98feeab1efe708ae36e99ef9540324c582f7f497944e4d88c571328536fa3082092fe0866359247a8cc4fa868e328224411de12869db981383d403e97e958db40152d168b100a3220ec4a243377a0dc1be323e588ac346ed86498d1878e5c8dcc063812c", 0xac}, {&(0x7f0000001d00)="40a39684f731a649fe952deb2eff7fae7af9f2e92ddb69833700fafb1c2de6f1b92ec4a5299ce1da382c", 0x2a}], 0x6}}], 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0xb, 0x40, 0x0, 0x1, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x400000000, 0x0, 0xfffffffffffffffe], 0x0, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 896.859083ms ago: executing program 3 (id=121): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0xba01}, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) 851.854708ms ago: executing program 1 (id=122): ioperm(0x0, 0x1, 0x1bf4) r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioperm(0x4, 0x80, 0xd3a) syz_usb_control_io(r0, 0x0, 0x0) openat2$dir(0xffffff9c, 0x0, &(0x7f0000000240)={0x111100, 0x1, 0x2}, 0x18) 832.48455ms ago: executing program 2 (id=123): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f00000005c0)="e3d087", 0x3}, {&(0x7f0000000600)='.', 0x1}, {&(0x7f0000000640)="551bb9caa2cdb23e8ca505bcb66bb19f74bae8af7ee5d31e91378051f375a4e676ea1577be7a78ec46d74f75f59f1d94fab1e328106602aa46f565c7f6cedd550797fc67f51bccb611ae5c8238c55ceac885e2", 0x53}, {&(0x7f00000004c0)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000100)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}, {{&(0x7f0000000340)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000880)="4367dfe85e39e111beeb3a86a254641933b099c2c239324a982b067b0408a692c62b1596b3cd366273020949056e8d5a36f905f815abcd11669d38ae188616f983da0b6ae2da71a9bca93eca080c1e8ecc4786fd5837e31777972442db2b9dc4b5d40c0a05f57bcfbf6b22e3f2b7da05dfd1dde97490a1ff702337dba40b22bad06939fc664ce74e46bdac45d921d87aa7a054b41cb09c86674ad729b77d616015e993f83d14fdb55013a0c0ad60036733c58f8b7f9f48cf35e51e9539f1f71fb2b199805f053ee3a480a1d8f30e55682a2c1ad10668d272b5f201d5b697a449b07a7ee82d36988dcb4407319db797b2f32f1605a19186d4", 0xf8}, {&(0x7f00000003c0)="d4a94027ee3f1cdd02d0db810782c7d8b08c0f205da8dd5d83a84babc5620357c2d5ef796e15e71ed6958f18c9a1b6545af350", 0x33}, {&(0x7f0000000400)="8840f2146dfe216c88c76844296e01283b64fc26b918a71c54f0d06b274c2c8dd5211ea5a6ffd11f6df45df02ca5", 0x2e}, {&(0x7f0000000700)="6d04e0090fe2bcb216fe3eedc9356d3ac90cf7f6b2839aa8344ef5352bf916f50eaa50ac7dac1e6a80b9fee0af266a149a13d736873fb9244cabb96319f79a306c4a06fdb4351b0bb893e09018e960991f748cf84e4c8ad65d91fe8c043f170462f601a4912113c1bb64652b50c81bb6d738481fe41d3c6e2a65702633db7d72f6c3379722441e0b2f8c33b83080f87c2d4c13a8e38dd895d3764e45b2b65abdaadeceec7e086c", 0xa7}], 0x4, &(0x7f0000000a00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd248}}, @ip_retopts={{0x28, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0xc4, [@private=0xa010101, @broadcast]}, @timestamp={0x44, 0x8, 0x7a, 0x0, 0xa, [0x7]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @remote}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@rr={0x7, 0xf, 0x94, [@private=0xa010100, @rand_addr=0x64010101, @empty]}, @cipso={0x86, 0x36, 0x1, [{0x1, 0x9, "ecef536b139d1c"}, {0x7, 0xe, "cb043c8a330f11f597ce4d60"}, {0x2, 0x8, "459a51a85159"}, {0x2, 0x4, "ff3f"}, {0x1, 0xd, "95106b8727ac0a574b4122"}]}]}}}], 0x148}}], 0x5, 0x4048841) 516.860292ms ago: executing program 2 (id=124): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x5, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5f4731e5de939cbc"}}, 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x8001) 459.605101ms ago: executing program 2 (id=125): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786cab00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000004000000850000007d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000104000000000000002180aa6d00", @ANYRES32=r5, @ANYBLOB="00000000020000003400128009000100626f6e64000000002400028008000300040004000500060000000000"], 0x54}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c8970774f00"]) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="020000000400000008000000016f40d800000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1b, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x1002, &(0x7f0000000880)=""/4121, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffe65, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f00000001c0)={{0x87, @rand_addr=0x64010100, 0x4e23, 0x4, 'lblc\x00', 0x1, 0x79e, 0x4b}, {@private=0xa010102, 0x4e22, 0x10000, 0x6, 0x4, 0x1}}, 0x44) r8 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) fcntl$F_GET_RW_HINT(r8, 0x40b, &(0x7f0000000080)) r9 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000440)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0xa, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x806, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x10000, 0x800, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0xc, 0x4, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0xc57, 0x5, 0x4, 0x8, 0x83ff, 0x80, 0x0, 0x5, 0x6, 0x1, 0x4, 0x10001, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff5, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6ca, 0x9, 0xfffffffc, 0x100000, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x100, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x1, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x9, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x7e78, 0x2, 0x4, 0x9, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x8, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x4, 0x5, 0x0, 0x1ec, 0x5, 0x8, 0x86, 0x4, 0x303c, 0x1, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x2, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x9f, 0x7, 0x0, 0x5, 0x6, 0xac8, 0xc3, 0xb, 0x803, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x405, 0x1c, 0x120000, 0x2, 0x2006, 0x80a2ed, 0x4, 0x25], [0x8, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0xb, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x56, 0xfffffff2, 0x6bd8490e, 0x101, 0x10000, 0x80000001, 0x7fff, 0xffff, 0xa61e, 0x1, 0x5, 0x1, 0xfffffffe, 0xba, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xcc, 0x1, 0x5, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x229, 0x5, 0x5, 0x7, 0x30b1d693, 0xa1f, 0x40000f40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xe, 0xb1e, 0xffff, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=126): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001900)="a9cff3", 0x3}, {&(0x7f00000019c0)="48c2c8557113f61ff1aafba9c7e66173164c8ca0c15cbff5683fb4ddb6394595afbcbaaa377a4a5f830744e047edf851d62a66716dd1b4267d5ed18eb9f5c4f88793e82590b71922e22ef06265309b871cba49e7299e2c090c02bd10630588bdc3466f4f5bb8578a26c37021bbb564f50e373543dbd71abbcbe8e6e7bb3b26a9dd2f5ed56323a0055e2e30ed595dea33087b6392a8cabc9e5a07b064e79c7528a81ab8d7ee7aa5ff27ab7c51", 0xac}, {&(0x7f0000001a80)='Tq', 0x2}, {&(0x7f0000001b00)="696c6a7b5ea3afd7819ee415dbdde5557921387803db572c10968b2e1fcb5d68baa44bba", 0x24}, {&(0x7f0000001c00)="5ca5b1dabcc26ad25d615b05179a9fd11e6653791ad22b90c11d51d82c5339db07573325f2a50b1f39be84a4ded40063e6538f23fbbb6e35546898cd11f3aed21d065dae1ca8fe6f98feeab1efe708ae36e99ef9540324c582f7f497944e4d88c571328536fa3082092fe0866359247a8cc4fa868e328224411de12869db981383d403e97e958db40152d168b100a3220ec4a243377a0dc1be323e588ac346ed86498d1878e5c8dcc063812c", 0xac}, {&(0x7f0000001d00)="40a39684f731a649fe952deb2eff7fae7af9f2e92ddb69833700fafb1c2de6f1b92ec4a5299ce1da382c", 0x2a}], 0x6}}], 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0xa, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x806, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x10000, 0x800, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0xc, 0x4, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0xc57, 0x5, 0x4, 0x8, 0x83ff, 0x80, 0x0, 0x5, 0x6, 0x1, 0x4, 0x10001, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff5, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6ca, 0x9, 0xfffffffc, 0x100000, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x100, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x1, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x9, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x7e78, 0x2, 0x4, 0x9, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x4, 0x5, 0x0, 0x1ec, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x1, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x2, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x9f, 0x7, 0x0, 0x5, 0x6, 0xac8, 0xc3, 0xb, 0x803, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x405, 0x1c, 0x120000, 0x2, 0x2006, 0x80a2ed, 0x4, 0x25], [0x8, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0xb, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x56, 0xfffffff2, 0x6bd8490e, 0x101, 0x10000, 0x80000001, 0x7fff, 0xffff, 0xa61e, 0x1, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0x5, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x229, 0x5, 0x5, 0x7, 0x30b1d693, 0xa1f, 0x40000f40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xe, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.159' (ED25519) to the list of known hosts. [ 70.578973][ T5813] cgroup: Unknown subsys name 'net' [ 70.728715][ T5813] cgroup: Unknown subsys name 'cpuset' [ 70.737046][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.620787][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.627361][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.263331][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.893715][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.904739][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.912863][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.920978][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.922478][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.929278][ T5830] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.937282][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.942737][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.950906][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.975875][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.986342][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.994219][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.001702][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.010370][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.032689][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.040166][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.055469][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.063240][ T5837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.086334][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.096118][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.103355][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.121098][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.128545][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.136323][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.146082][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.146630][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.157383][ T5137] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.167900][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.175371][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.183269][ T5137] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.506345][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 77.607858][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 77.663061][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 77.759747][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.768957][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.777478][ T5823] bridge_slave_0: entered allmulticast mode [ 77.784470][ T5823] bridge_slave_0: entered promiscuous mode [ 77.838121][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.845634][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.853020][ T5823] bridge_slave_1: entered allmulticast mode [ 77.860136][ T5823] bridge_slave_1: entered promiscuous mode [ 77.904246][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.911522][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.918905][ T5829] bridge_slave_0: entered allmulticast mode [ 77.926008][ T5829] bridge_slave_0: entered promiscuous mode [ 77.960623][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 77.973962][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.982703][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.990209][ T5829] bridge_slave_1: entered allmulticast mode [ 77.997467][ T5829] bridge_slave_1: entered promiscuous mode [ 78.046832][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.057653][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 78.067806][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.074994][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.082774][ T5833] bridge_slave_0: entered allmulticast mode [ 78.089972][ T5833] bridge_slave_0: entered promiscuous mode [ 78.102844][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.110828][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.118592][ T5833] bridge_slave_1: entered allmulticast mode [ 78.125494][ T5833] bridge_slave_1: entered promiscuous mode [ 78.142619][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.156921][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.228830][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.259578][ T5823] team0: Port device team_slave_0 added [ 78.301608][ T5823] team0: Port device team_slave_1 added [ 78.317079][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.330489][ T5829] team0: Port device team_slave_0 added [ 78.338495][ T5829] team0: Port device team_slave_1 added [ 78.374293][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.392348][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.400162][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.426531][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.483584][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.490699][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.517530][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.529334][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.541182][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.548519][ T5824] bridge_slave_0: entered allmulticast mode [ 78.555458][ T5824] bridge_slave_0: entered promiscuous mode [ 78.582694][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.590001][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.616123][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.628923][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.635983][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.662583][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.682140][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.689586][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.696970][ T5824] bridge_slave_1: entered allmulticast mode [ 78.703745][ T5824] bridge_slave_1: entered promiscuous mode [ 78.710387][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.717836][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.725422][ T5835] bridge_slave_0: entered allmulticast mode [ 78.732206][ T5835] bridge_slave_0: entered promiscuous mode [ 78.740609][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.747858][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.755052][ T5835] bridge_slave_1: entered allmulticast mode [ 78.762011][ T5835] bridge_slave_1: entered promiscuous mode [ 78.770821][ T5833] team0: Port device team_slave_0 added [ 78.779331][ T5833] team0: Port device team_slave_1 added [ 78.867807][ T5829] hsr_slave_0: entered promiscuous mode [ 78.874150][ T5829] hsr_slave_1: entered promiscuous mode [ 78.883577][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.894757][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.915401][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.922483][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.948715][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.971967][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.982083][ T5137] Bluetooth: hci0: command tx timeout [ 78.997851][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.007559][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.014532][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.040899][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.061248][ T5823] hsr_slave_0: entered promiscuous mode [ 79.067533][ T5823] hsr_slave_1: entered promiscuous mode [ 79.073624][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.081612][ T5823] Cannot create hsr debugfs directory [ 79.108209][ T5824] team0: Port device team_slave_0 added [ 79.135802][ T5835] team0: Port device team_slave_0 added [ 79.144926][ T5835] team0: Port device team_slave_1 added [ 79.158018][ T5824] team0: Port device team_slave_1 added [ 79.215719][ T5137] Bluetooth: hci1: command tx timeout [ 79.217264][ T5839] Bluetooth: hci4: command tx timeout [ 79.263522][ T5833] hsr_slave_0: entered promiscuous mode [ 79.270184][ T5833] hsr_slave_1: entered promiscuous mode [ 79.277236][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.284824][ T5833] Cannot create hsr debugfs directory [ 79.295801][ T5839] Bluetooth: hci3: command tx timeout [ 79.296870][ T5137] Bluetooth: hci2: command tx timeout [ 79.320374][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.327419][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.353447][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.366364][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.373346][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.399713][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.429286][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.436401][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.462576][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.480215][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.487299][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.513359][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.656755][ T5835] hsr_slave_0: entered promiscuous mode [ 79.663143][ T5835] hsr_slave_1: entered promiscuous mode [ 79.669376][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.677043][ T5835] Cannot create hsr debugfs directory [ 79.701325][ T5824] hsr_slave_0: entered promiscuous mode [ 79.707972][ T5824] hsr_slave_1: entered promiscuous mode [ 79.714024][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.721970][ T5824] Cannot create hsr debugfs directory [ 79.881283][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.918603][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.933163][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.960424][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.057490][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.067572][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.091122][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.111925][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.158742][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.173440][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.183499][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.217125][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.278950][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.289670][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.301437][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.327985][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.340715][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.364123][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.392995][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.400262][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.414657][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.421861][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.516356][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.528693][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.538647][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.552908][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.639241][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.694619][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.741346][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.763633][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.786687][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.830633][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.837817][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.854130][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.861402][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.899780][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.906954][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.917824][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.925048][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.938503][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.974524][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.981701][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.995200][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.023568][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.030761][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.056263][ T5137] Bluetooth: hci0: command tx timeout [ 81.104211][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.143300][ T5829] veth0_vlan: entered promiscuous mode [ 81.189263][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.254719][ T5829] veth1_vlan: entered promiscuous mode [ 81.278697][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.285932][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.300569][ T5137] Bluetooth: hci1: command tx timeout [ 81.300580][ T5839] Bluetooth: hci4: command tx timeout [ 81.332981][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.340168][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.375806][ T5137] Bluetooth: hci3: command tx timeout [ 81.381290][ T5137] Bluetooth: hci2: command tx timeout [ 81.435155][ T5829] veth0_macvtap: entered promiscuous mode [ 81.477826][ T5829] veth1_macvtap: entered promiscuous mode [ 81.562472][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.586541][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.617472][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.656351][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.667309][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.677132][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.686402][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.749850][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.767498][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.854217][ T5833] veth0_vlan: entered promiscuous mode [ 81.931931][ T5833] veth1_vlan: entered promiscuous mode [ 81.943842][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.961085][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.999784][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.013522][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.028605][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.069704][ T5824] veth0_vlan: entered promiscuous mode [ 82.102059][ T5824] veth1_vlan: entered promiscuous mode [ 82.120813][ T5823] veth0_vlan: entered promiscuous mode [ 82.159853][ T5833] veth0_macvtap: entered promiscuous mode [ 82.180949][ T5833] veth1_macvtap: entered promiscuous mode [ 82.211954][ T5823] veth1_vlan: entered promiscuous mode [ 82.256821][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.275076][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.294894][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.306746][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.320868][ T5824] veth0_macvtap: entered promiscuous mode [ 82.335185][ T5824] veth1_macvtap: entered promiscuous mode [ 82.370807][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.401133][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.428501][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.454283][ T5823] veth0_macvtap: entered promiscuous mode [ 82.499217][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.513118][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.523475][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.534479][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.560906][ T5823] veth1_macvtap: entered promiscuous mode [ 82.591872][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.608193][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.619108][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.631214][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.649562][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.700878][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.714912][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.734912][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.753673][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.774412][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.785001][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.804184][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.833338][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.853063][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.863745][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.884231][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.903502][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.017121][ T5824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.027144][ T5824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.036565][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.045573][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.097379][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.108780][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.120008][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.130687][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.141841][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.146744][ T5137] Bluetooth: hci0: command tx timeout [ 83.153201][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.169288][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.199698][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.203767][ T5823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.214426][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.226271][ T5823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.235082][ T5823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.244635][ T5823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.257098][ T5835] veth0_vlan: entered promiscuous mode [ 83.322366][ T5835] veth1_vlan: entered promiscuous mode [ 83.371929][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.379962][ T5137] Bluetooth: hci4: command tx timeout [ 83.385499][ T5137] Bluetooth: hci1: command tx timeout [ 83.393739][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.433607][ T5835] veth0_macvtap: entered promiscuous mode [ 83.447481][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.456445][ T5137] Bluetooth: hci3: command tx timeout [ 83.462936][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.466082][ T5137] Bluetooth: hci2: command tx timeout [ 83.486925][ T5835] veth1_macvtap: entered promiscuous mode [ 83.517504][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.544056][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.554200][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.567103][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.603460][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.619029][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.640070][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.660398][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.673152][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.692256][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.725074][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.743567][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.776540][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.840782][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.867508][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.895588][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.916480][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.953869][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.972663][ T5923] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.990187][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.003556][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.032271][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.043840][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.112469][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.117989][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.136609][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.150017][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.153151][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.165333][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.459881][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.499440][ T5932] trusted_key: encrypted_key: insufficient parameters specified [ 84.910583][ T9] usb 4-1: device descriptor read/64, error -71 [ 85.092742][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.134089][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.216568][ T5137] Bluetooth: hci0: command tx timeout [ 85.246317][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.323034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.442114][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.476026][ T5137] Bluetooth: hci1: command tx timeout [ 85.476557][ T5839] Bluetooth: hci4: command tx timeout [ 85.531227][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.546001][ T5839] Bluetooth: hci2: command tx timeout [ 85.546717][ T5137] Bluetooth: hci3: command tx timeout [ 85.589442][ T9] usb 4-1: device descriptor read/64, error -71 [ 85.631042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.732792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 85.850753][ T9] usb usb4-port1: attempt power cycle [ 86.096217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 86.268896][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 86.280502][ T5914] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.309246][ T9] usb 4-1: device descriptor read/8, error -71 [ 86.533619][ T5914] usb 1-1: config 0 has an invalid descriptor of length 100, skipping remainder of the config [ 86.708301][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 86.741392][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 97, changing to 10 [ 86.754443][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 24677, setting to 1024 [ 86.767723][ T9] usb 4-1: device descriptor read/8, error -71 [ 86.799525][ T5914] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.845880][ T5914] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 86.875892][ T9] usb usb4-port1: unable to enumerate USB device [ 86.900088][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.912313][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 86.960059][ T5914] usb 1-1: config 0 descriptor?? [ 86.990041][ T3076] cfg80211: failed to load regulatory.db [ 87.006756][ T5946] vlan2: entered allmulticast mode [ 87.012121][ T5946] gretap0: entered allmulticast mode [ 87.022590][ T5946] gretap0: left allmulticast mode [ 87.191196][ T5914] ath6kl: Failed to submit usb control message: -71 [ 87.214315][ T5914] ath6kl: unable to send the bmi data to the device: -71 [ 87.260986][ T5914] ath6kl: Unable to send get target info: -71 [ 87.298702][ T5914] ath6kl: Failed to init ath6kl core: -71 [ 87.341174][ T5914] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 87.396660][ T5914] usb 1-1: USB disconnect, device number 2 [ 87.425323][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.475560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.678361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 87.855773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.883851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.966146][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.075383][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 88.085786][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.136121][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.155668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.206718][ T9] usb 5-1: config 0 descriptor?? [ 89.023313][ T9] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 89.051986][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0001/input/input5 [ 89.080738][ T5964] kvm: pic: non byte write [ 89.220799][ T5968] serio: Serial port ptm0 [ 89.380975][ T9] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 89.440184][ T9] usb 5-1: USB disconnect, device number 2 [ 89.496550][ T5970] overlayfs: failed to resolve './file1': -2 [ 89.758519][ T5914] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.749079][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.886913][ T5914] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.888296][ T5987] vlan2: entered allmulticast mode [ 90.900417][ T5914] usb 1-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 90.900463][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.903530][ T5914] usb 1-1: config 0 descriptor?? [ 90.967743][ T5987] team0: entered allmulticast mode [ 90.972996][ T5987] team_slave_0: entered allmulticast mode [ 90.998170][ T5987] team_slave_1: entered allmulticast mode [ 91.042973][ T5987] bridge0: port 3(vlan2) entered blocking state [ 91.051364][ T5987] bridge0: port 3(vlan2) entered disabled state [ 91.065065][ T5987] vlan2: entered promiscuous mode [ 91.070795][ T5987] team0: entered promiscuous mode [ 91.078369][ T5987] team_slave_0: entered promiscuous mode [ 91.094521][ T5987] team_slave_1: entered promiscuous mode [ 91.118688][ T5987] bridge0: port 3(vlan2) entered blocking state [ 91.125470][ T5987] bridge0: port 3(vlan2) entered forwarding state [ 91.347202][ T5868] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.348919][ T5914] hid-rmi 0003:1532:011D.0002: unknown main item tag 0x1 [ 91.386290][ T5914] hid-rmi 0003:1532:011D.0002: hidraw0: USB HID v0.00 Device [HID 1532:011d] on usb-dummy_hcd.0-1/input0 [ 91.735348][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 91.743201][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.825676][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.836190][ T30] audit: type=1326 audit(1742628020.760:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6003 comm="syz.4.29" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb24e78d169 code=0x0 [ 92.836283][ T5868] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 93.045799][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.164159][ T5868] usb 3-1: config 0 descriptor?? [ 93.763658][ T5996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.997268][ T5996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.240891][ T52] usb 1-1: USB disconnect, device number 3 [ 94.540699][ T6022] kvm: pic: non byte write [ 94.594618][ T6027] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.815520][ T5876] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 95.036562][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 95.146016][ T5876] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 95.241458][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.396543][ T5876] usb 4-1: config 0 descriptor?? [ 95.418653][ T5868] usbhid 3-1:0.0: can't add hid device: -71 [ 95.424688][ T5868] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 95.588872][ T5868] usb 3-1: USB disconnect, device number 2 [ 95.627504][ T5876] ums-jumpshot 4-1:0.0: USB Mass Storage device detected [ 96.616853][ T5876] ums-jumpshot 4-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 96.817251][ T5876] usb 4-1: USB disconnect, device number 6 [ 96.853197][ T6044] trusted_key: encrypted_key: insufficient parameters specified [ 96.867594][ T5839] Bluetooth: Wrong link type (-22) [ 97.195853][ T26] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.496408][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.576448][ T26] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 97.660148][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.862320][ T26] usb 1-1: config 0 descriptor?? [ 98.269883][ T30] audit: type=1326 audit(1742628027.020:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6058 comm="syz.4.44" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb24e78d169 code=0x0 [ 98.852543][ T6063] Bluetooth: MGMT ver 1.23 [ 99.090373][ T26] lg-g15 0003:046D:C222.0003: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 99.307666][ T5825] usb 1-1: USB disconnect, device number 4 [ 100.923148][ T6087] trusted_key: encrypted_key: insufficient parameters specified [ 100.955960][ T6089] trusted_key: encrypted_key: insufficient parameters specified [ 101.326676][ T30] audit: type=1326 audit(1742628030.070:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6090 comm="syz.2.53" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f954518d169 code=0x0 [ 104.781784][ T30] audit: type=1326 audit(1742628032.660:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6107 comm="syz.0.61" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0245f8d169 code=0x0 [ 106.309309][ T5914] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 106.318907][ T6124] trusted_key: encrypted_key: insufficient parameters specified [ 106.459222][ T5868] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 107.089793][ T5914] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 35, using maximum allowed: 30 [ 107.177376][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.214420][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.225511][ T5868] usb 1-1: device descriptor read/64, error -71 [ 107.251213][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 35 [ 107.280101][ T5914] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 107.305142][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.324539][ T5914] usb 2-1: config 0 descriptor?? [ 107.485671][ T5868] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 107.548377][ T5914] usbhid 2-1:0.0: can't add hid device: -71 [ 107.554479][ T5914] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 108.413044][ T5914] usb 2-1: USB disconnect, device number 2 [ 108.445675][ T5868] usb 1-1: device descriptor read/64, error -71 [ 108.697721][ T30] audit: type=1326 audit(1742628037.340:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6148 comm="syz.2.70" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f954518d169 code=0x0 [ 109.438028][ T5868] usb usb1-port1: attempt power cycle [ 110.520899][ T30] audit: type=1326 audit(1742628039.150:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6161 comm="syz.0.73" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0245f8d169 code=0x0 [ 128.889947][ T6185] trusted_key: encrypted_key: insufficient parameters specified [ 131.025971][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 131.087162][ T30] audit: type=1326 audit(1742628058.920:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6197 comm="syz.1.82" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa09798d169 code=0x0 [ 131.397274][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 131.607949][ T9] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.680374][ T9] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 131.725483][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 131.732265][ T9] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 131.787952][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.806955][ T9] usb 5-1: config 0 descriptor?? [ 132.512964][ T6220] mkiss: ax0: crc mode is auto. [ 133.066571][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.663331][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.204220][ T6236] netlink: 32 bytes leftover after parsing attributes in process `syz.2.91'. [ 134.293116][ T6239] trusted_key: encrypted_key: insufficient parameters specified [ 137.237500][ T30] audit: type=1326 audit(1742628064.980:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6253 comm="syz.2.96" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f954518d169 code=0x0 [ 137.350822][ T9] usbhid 5-1:0.0: can't add hid device: -32 [ 137.391439][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 137.911002][ T6274] Device name cannot be null; rc = [-22] [ 139.854654][ T6285] trusted_key: encrypted_key: insufficient parameters specified [ 140.051416][ T30] audit: type=1800 audit(1742628068.800:10): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.100" name="file1" dev="tmpfs" ino=163 res=0 errno=0 [ 140.174972][ T30] audit: type=1800 audit(1742628068.830:11): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.100" name="file1" dev="tmpfs" ino=163 res=0 errno=0 [ 140.259593][ T30] audit: type=1326 audit(1742628068.900:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6288 comm="syz.2.100" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f954518d169 code=0x0 [ 141.775574][ T5868] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 141.957322][ T5868] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 35, using maximum allowed: 30 [ 141.985290][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.027189][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.322403][ T6321] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 144.104959][ T5868] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 35 [ 144.965315][ T5868] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 144.974424][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.009471][ T5868] usb 1-1: config 0 descriptor?? [ 145.220953][ T5868] usb 1-1: can't set config #0, error -71 [ 145.351378][ T5868] usb 1-1: USB disconnect, device number 8 [ 145.847147][ T6337] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.518739][ T6350] mkiss: ax0: crc mode is auto. [ 149.506904][ T5868] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 149.535916][ T30] audit: type=1326 audit(1742628077.420:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6345 comm="syz.2.114" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f954518d169 code=0x0 [ 149.667142][ T5868] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x78, changing to 0x8 [ 149.705267][ T5868] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 149.881930][ T5868] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 149.962656][ T5868] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.972999][ T30] audit: type=1326 audit(1742628078.700:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6355 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954518d169 code=0x7ffc0000 [ 150.035294][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.066959][ T5868] usb 2-1: Product: syz [ 150.088525][ T5868] usb 2-1: Manufacturer: syz [ 150.093189][ T5868] usb 2-1: SerialNumber: syz [ 150.105331][ T30] audit: type=1326 audit(1742628078.710:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6355 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f954518d169 code=0x7ffc0000 [ 150.178691][ T30] audit: type=1326 audit(1742628078.720:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6355 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954518d169 code=0x7ffc0000 [ 150.307663][ T30] audit: type=1326 audit(1742628078.720:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6355 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f954518d169 code=0x7ffc0000 [ 150.407388][ T5868] cdc_ncm 2-1:1.0: bind() failure [ 150.447583][ T5868] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 150.485324][ T5137] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.493858][ T5868] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 150.515341][ T5137] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.567378][ T5137] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.587874][ T5868] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 150.616594][ T5868] usb 2-1: USB disconnect, device number 3 [ 150.630370][ T5137] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.679985][ T5137] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 150.705684][ T5137] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.084940][ T6376] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 153.209166][ T5137] Bluetooth: hci5: command tx timeout [ 153.879091][ T6358] chnl_net:caif_netlink_parms(): no params data found [ 154.141248][ T6223] Set syz1 is full, maxelem 65536 reached [ 154.154066][ T6383] vlan2: entered allmulticast mode [ 154.161463][ T6383] team0: entered allmulticast mode [ 154.205464][ T6383] team_slave_0: entered allmulticast mode [ 154.225605][ T6383] team_slave_1: entered allmulticast mode [ 154.242181][ T6383] bridge0: port 3(vlan2) entered blocking state [ 154.272457][ T6383] bridge0: port 3(vlan2) entered disabled state [ 154.306920][ T6383] vlan2: entered promiscuous mode [ 154.321356][ T6383] team0: entered promiscuous mode [ 154.346145][ T975] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 154.353961][ T6383] team_slave_0: entered promiscuous mode [ 154.386213][ T6383] team_slave_1: entered promiscuous mode [ 154.397580][ T6383] bridge0: port 3(vlan2) entered blocking state [ 154.403960][ T6383] bridge0: port 3(vlan2) entered forwarding state [ 154.435714][ T6393] netlink: 16 bytes leftover after parsing attributes in process `syz.2.125'. [ 154.512346][ T6396] netlink: 'syz.2.125': attribute type 10 has an invalid length. [ 154.536997][ T6396] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.542158][ T975] usb 2-1: Using ep0 maxpacket: 8 [ 154.545685][ T6396] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.562255][ T975] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 154.572378][ T975] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 154.580790][ T975] usb 2-1: config 0 has no interface number 0 [ 154.587225][ T975] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.599955][ T975] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 154.611597][ T975] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 154.637761][ T6396] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.639482][ T975] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 154.644924][ T6396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.662285][ T6396] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.665364][ T975] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 154.669578][ T6396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.677783][ T975] usb 2-1: Product: syz [ 154.705003][ T975] usb 2-1: config 0 descriptor?? [ 154.716012][ T6396] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 154.716096][ T6398] 9pnet_fd: Insufficient options for proto=fd [ 154.731573][ T1162] [ 154.734119][ T1162] ============================= [ 154.739344][ T1162] WARNING: suspicious RCU usage [ 154.744292][ T1162] 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 Not tainted [ 154.751994][ T1162] ----------------------------- [ 154.757401][ T1162] net/sched/sch_generic.c:1251 suspicious rcu_dereference_protected() usage! SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 154.766420][ T1162] [ 154.766420][ T1162] other info that might help us debug this: [ 154.766420][ T1162] [ 154.776822][ T1162] [ 154.776822][ T1162] rcu_scheduler_active = 2, debug_locks = 1 [ 154.785183][ T1162] 3 locks held by kworker/u8:6/1162: [ 154.790585][ T1162] #0: ffff88807de0a948 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 154.801993][ T1162] #1: ffffc90004007c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 154.815066][ T1162] #2: ffffffff8eb393e0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 154.825276][ T1162] [ 154.825276][ T1162] stack backtrace: [ 154.831287][ T1162] CPU: 0 UID: 0 PID: 1162 Comm: kworker/u8:6 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 154.831313][ T1162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 154.831327][ T1162] Workqueue: bond0 bond_mii_monitor [ 154.831355][ T1162] Call Trace: [ 154.831363][ T1162] [ 154.831372][ T1162] dump_stack_lvl+0x241/0x360 [ 154.831398][ T1162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.831418][ T1162] ? __pfx__printk+0x10/0x10 [ 154.831461][ T1162] lockdep_rcu_suspicious+0x226/0x340 [ 154.831498][ T1162] dev_activate+0xf8/0x1240 [ 154.831526][ T1162] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 154.831554][ T1162] ? lockdep_hardirqs_on+0x99/0x150 [ 154.831586][ T1162] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 154.831614][ T1162] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 154.831644][ T1162] ? __pfx_dev_activate+0x10/0x10 [ 154.831667][ T1162] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 154.831695][ T1162] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 154.831727][ T1162] ? rfc2863_policy+0x10e/0x3f0 [ 154.831763][ T1162] linkwatch_do_dev+0xfb/0x170 [ 154.831798][ T1162] ethtool_op_get_link+0x15/0x60 [ 154.831825][ T1162] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 154.831850][ T1162] bond_check_dev_link+0x1eb/0x4a0 [ 154.831876][ T1162] ? __pfx_bond_check_dev_link+0x10/0x10 [ 154.831916][ T1162] bond_mii_monitor+0x49a/0x3170 [ 154.831949][ T1162] ? __lock_acquire+0x1397/0x2100 [ 154.831978][ T1162] ? bond_mii_monitor+0x174/0x3170 [ 154.832002][ T1162] ? do_raw_spin_unlock+0x13c/0x8b0 [ 154.832034][ T1162] ? __pfx_bond_mii_monitor+0x10/0x10 [ 154.832070][ T1162] ? __pfx_lock_acquire+0x10/0x10 [ 154.832098][ T1162] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 154.832140][ T1162] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 154.832183][ T1162] ? process_scheduled_works+0x9c6/0x18e0 [ 154.832208][ T1162] process_scheduled_works+0xabe/0x18e0 [ 154.832264][ T1162] ? __pfx_process_scheduled_works+0x10/0x10 [ 154.832300][ T1162] ? assign_work+0x364/0x3d0 [ 154.832331][ T1162] worker_thread+0x870/0xd30 [ 154.832374][ T1162] ? __kthread_parkme+0x169/0x1d0 [ 154.832406][ T1162] ? __pfx_worker_thread+0x10/0x10 [ 154.832433][ T1162] kthread+0x7a9/0x920 [ 154.832460][ T1162] ? __pfx_kthread+0x10/0x10 [ 154.832493][ T1162] ? __pfx_worker_thread+0x10/0x10 [ 154.832519][ T1162] ? __pfx_kthread+0x10/0x10 [ 154.832548][ T1162] ? __pfx_kthread+0x10/0x10 [ 154.832581][ T1162] ? __pfx_kthread+0x10/0x10 [ 154.832609][ T1162] ? _raw_spin_unlock_irq+0x23/0x50 [ 154.832636][ T1162] ? lockdep_hardirqs_on+0x99/0x150 [ 154.832665][ T1162] ? __pfx_kthread+0x10/0x10 [ 154.832696][ T1162] ret_from_fork+0x4b/0x80 [ 154.832721][ T1162] ? __pfx_kthread+0x10/0x10 [ 154.832751][ T1162] ret_from_fork_asm+0x1a/0x30 [ 154.832791][ T1162] [ 154.834137][ T1162] [ 154.919533][ T6385] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 154.922290][ T1162] ============================= [ 155.123356][ T1162] WARNING: suspicious RCU usage [ 155.128334][ T1162] 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 Not tainted [ 155.135615][ T1162] ----------------------------- [ 155.140496][ T1162] net/sched/sch_generic.c:1229 suspicious rcu_dereference_protected() usage! [ 155.149424][ T1162] [ 155.149424][ T1162] other info that might help us debug this: [ 155.149424][ T1162] [ 155.160055][ T1162] [ 155.160055][ T1162] rcu_scheduler_active = 2, debug_locks = 1 [ 155.168733][ T1162] 3 locks held by kworker/u8:6/1162: [ 155.174064][ T1162] #0: ffff88807de0a948 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 155.185507][ T1162] #1: ffffc90004007c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 155.198594][ T1162] #2: ffffffff8eb393e0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 155.208388][ T1162] [ 155.208388][ T1162] stack backtrace: [ 155.214494][ T1162] CPU: 0 UID: 0 PID: 1162 Comm: kworker/u8:6 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 155.214519][ T1162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.214533][ T1162] Workqueue: bond0 bond_mii_monitor [ 155.214561][ T1162] Call Trace: [ 155.214568][ T1162] [ 155.214577][ T1162] dump_stack_lvl+0x241/0x360 [ 155.214603][ T1162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.214624][ T1162] ? __pfx__printk+0x10/0x10 [ 155.214671][ T1162] lockdep_rcu_suspicious+0x226/0x340 [ 155.214709][ T1162] transition_one_qdisc+0x8e/0x1c0 [ 155.214740][ T1162] dev_activate+0x838/0x1240 [ 155.214780][ T1162] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 155.214812][ T1162] ? __pfx_dev_activate+0x10/0x10 [ 155.214835][ T1162] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 155.214863][ T1162] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 155.214896][ T1162] ? rfc2863_policy+0x10e/0x3f0 [ 155.214932][ T1162] linkwatch_do_dev+0xfb/0x170 [ 155.214968][ T1162] ethtool_op_get_link+0x15/0x60 [ 155.214995][ T1162] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 155.215021][ T1162] bond_check_dev_link+0x1eb/0x4a0 [ 155.215047][ T1162] ? __pfx_bond_check_dev_link+0x10/0x10 [ 155.215088][ T1162] bond_mii_monitor+0x49a/0x3170 [ 155.215121][ T1162] ? __lock_acquire+0x1397/0x2100 [ 155.215156][ T1162] ? bond_mii_monitor+0x174/0x3170 [ 155.215182][ T1162] ? do_raw_spin_unlock+0x13c/0x8b0 [ 155.215217][ T1162] ? __pfx_bond_mii_monitor+0x10/0x10 [ 155.215252][ T1162] ? __pfx_lock_acquire+0x10/0x10 [ 155.215281][ T1162] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 155.215311][ T1162] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.215352][ T1162] ? process_scheduled_works+0x9c6/0x18e0 [ 155.215377][ T1162] process_scheduled_works+0xabe/0x18e0 [ 155.215433][ T1162] ? __pfx_process_scheduled_works+0x10/0x10 [ 155.215469][ T1162] ? assign_work+0x364/0x3d0 [ 155.215500][ T1162] worker_thread+0x870/0xd30 [ 155.215543][ T1162] ? __kthread_parkme+0x169/0x1d0 [ 155.215574][ T1162] ? __pfx_worker_thread+0x10/0x10 [ 155.215600][ T1162] kthread+0x7a9/0x920 [ 155.215629][ T1162] ? __pfx_kthread+0x10/0x10 [ 155.215661][ T1162] ? __pfx_worker_thread+0x10/0x10 [ 155.215688][ T1162] ? __pfx_kthread+0x10/0x10 [ 155.215716][ T1162] ? __pfx_kthread+0x10/0x10 [ 155.215750][ T1162] ? __pfx_kthread+0x10/0x10 [ 155.215778][ T1162] ? _raw_spin_unlock_irq+0x23/0x50 [ 155.215804][ T1162] ? lockdep_hardirqs_on+0x99/0x150 [ 155.215834][ T1162] ? __pfx_kthread+0x10/0x10 [ 155.215865][ T1162] ret_from_fork+0x4b/0x80 [ 155.215891][ T1162] ? __pfx_kthread+0x10/0x10 [ 155.215921][ T1162] ret_from_fork_asm+0x1a/0x30 [ 155.215961][ T1162] [ 155.478754][ T5137] Bluetooth: hci5: command tx timeout [ 155.566294][ T1162] [ 155.568711][ T1162] ============================= [ 155.574432][ T1162] WARNING: suspicious RCU usage [ 155.579567][ T1162] 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 Not tainted [ 155.586800][ T1162] ----------------------------- [ 155.591735][ T1162] ./include/linux/rtnetlink.h:162 suspicious rcu_dereference_protected() usage! [ 155.600951][ T1162] [ 155.600951][ T1162] other info that might help us debug this: [ 155.600951][ T1162] [ 155.611352][ T1162] [ 155.611352][ T1162] rcu_scheduler_active = 2, debug_locks = 1 [ 155.619541][ T1162] 3 locks held by kworker/u8:6/1162: [ 155.624912][ T1162] #0: ffff88807de0a948 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 155.636196][ T1162] #1: ffffc90004007c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 155.649312][ T1162] #2: ffffffff8eb393e0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 155.659347][ T1162] [ 155.659347][ T1162] stack backtrace: [ 155.665374][ T1162] CPU: 0 UID: 0 PID: 1162 Comm: kworker/u8:6 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 155.665400][ T1162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.665413][ T1162] Workqueue: bond0 bond_mii_monitor [ 155.665440][ T1162] Call Trace: [ 155.665448][ T1162] [ 155.665461][ T1162] dump_stack_lvl+0x241/0x360 [ 155.665487][ T1162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.665507][ T1162] ? __pfx__printk+0x10/0x10 [ 155.665550][ T1162] lockdep_rcu_suspicious+0x226/0x340 [ 155.665587][ T1162] dev_activate+0x925/0x1240 [ 155.665623][ T1162] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 155.665654][ T1162] ? __pfx_dev_activate+0x10/0x10 [ 155.665676][ T1162] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 155.665704][ T1162] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 155.665736][ T1162] ? rfc2863_policy+0x10e/0x3f0 [ 155.665770][ T1162] linkwatch_do_dev+0xfb/0x170 [ 155.665805][ T1162] ethtool_op_get_link+0x15/0x60 [ 155.665831][ T1162] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 155.665857][ T1162] bond_check_dev_link+0x1eb/0x4a0 [ 155.665883][ T1162] ? __pfx_bond_check_dev_link+0x10/0x10 [ 155.665923][ T1162] bond_mii_monitor+0x49a/0x3170 [ 155.665955][ T1162] ? __lock_acquire+0x1397/0x2100 [ 155.665984][ T1162] ? bond_mii_monitor+0x174/0x3170 [ 155.666010][ T1162] ? do_raw_spin_unlock+0x13c/0x8b0 [ 155.666041][ T1162] ? __pfx_bond_mii_monitor+0x10/0x10 [ 155.666091][ T1162] ? __pfx_lock_acquire+0x10/0x10 [ 155.666121][ T1162] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 155.666154][ T1162] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.666197][ T1162] ? process_scheduled_works+0x9c6/0x18e0 [ 155.666222][ T1162] process_scheduled_works+0xabe/0x18e0 [ 155.666277][ T1162] ? __pfx_process_scheduled_works+0x10/0x10 [ 155.666312][ T1162] ? assign_work+0x364/0x3d0 [ 155.666344][ T1162] worker_thread+0x870/0xd30 [ 155.666385][ T1162] ? __kthread_parkme+0x169/0x1d0 [ 155.666416][ T1162] ? __pfx_worker_thread+0x10/0x10 [ 155.666443][ T1162] kthread+0x7a9/0x920 [ 155.666470][ T1162] ? __pfx_kthread+0x10/0x10 [ 155.666502][ T1162] ? __pfx_worker_thread+0x10/0x10 [ 155.666528][ T1162] ? __pfx_kthread+0x10/0x10 [ 155.666555][ T1162] ? __pfx_kthread+0x10/0x10 [ 155.666589][ T1162] ? __pfx_kthread+0x10/0x10 [ 155.666616][ T1162] ? _raw_spin_unlock_irq+0x23/0x50 [ 155.666643][ T1162] ? lockdep_hardirqs_on+0x99/0x150 [ 155.666671][ T1162] ? __pfx_kthread+0x10/0x10 [ 155.666702][ T1162] ret_from_fork+0x4b/0x80 [ 155.666727][ T1162] ? __pfx_kthread+0x10/0x10 [ 155.666757][ T1162] ret_from_fork_asm+0x1a/0x30 [ 155.666798][ T1162] [ 155.666928][ T1162] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523 [ 155.932806][ T1162] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 1162, name: kworker/u8:6 [ 155.944757][ T1162] preempt_count: 0, expected: 0 [ 155.949981][ T1162] RCU nest depth: 1, expected: 0 [ 155.954995][ T1162] 3 locks held by kworker/u8:6/1162: [ 155.960604][ T1162] #0: ffff88807de0a948 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 155.971933][ T1162] #1: ffffc90004007c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 155.985856][ T1162] #2: ffffffff8eb393e0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 155.995888][ T1162] CPU: 0 UID: 0 PID: 1162 Comm: kworker/u8:6 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 155.995912][ T1162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.995924][ T1162] Workqueue: bond0 bond_mii_monitor [ 155.995947][ T1162] Call Trace: [ 155.995954][ T1162] [ 155.995962][ T1162] dump_stack_lvl+0x241/0x360 [ 155.995993][ T1162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.996014][ T1162] ? __pfx__printk+0x10/0x10 [ 155.996059][ T1162] __might_resched+0x5d4/0x780 [ 155.996088][ T1162] ? preempt_schedule_notrace+0xf6/0x140 [ 155.996120][ T1162] ? __pfx___might_resched+0x10/0x10 [ 155.996145][ T1162] ? __pfx___schedule+0x10/0x10 [ 155.996176][ T1162] ? lockdep_hardirqs_on+0x99/0x150 [ 155.996217][ T1162] down_read+0x8e/0xa40 [ 155.996243][ T1162] ? dump_stack_lvl+0x2f9/0x360 [ 155.996268][ T1162] ? preempt_schedule_notrace+0x100/0x140 [ 155.996298][ T1162] ? __pfx_down_read+0x10/0x10 [ 155.996319][ T1162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.996340][ T1162] ? __pfx__printk+0x10/0x10 [ 155.996375][ T1162] ? dev_get_flags+0x147/0x1d0 [ 155.996410][ T1162] wext_netdev_notifier_call+0x1f/0x120 [ 155.996438][ T1162] notifier_call_chain+0x1a5/0x3f0 [ 155.996472][ T1162] netdev_state_change+0x11f/0x1a0 [ 155.996500][ T1162] ? __pfx_netdev_state_change+0x10/0x10 [ 155.996527][ T1162] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 155.996548][ T1162] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 155.996571][ T1162] ? rfc2863_policy+0x10e/0x3f0 [ 155.996596][ T1162] linkwatch_do_dev+0x112/0x170 [ 155.996620][ T1162] ethtool_op_get_link+0x15/0x60 [ 155.996640][ T1162] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 155.996658][ T1162] bond_check_dev_link+0x1eb/0x4a0 [ 155.996676][ T1162] ? __pfx_bond_check_dev_link+0x10/0x10 [ 155.996703][ T1162] bond_mii_monitor+0x49a/0x3170 [ 155.996725][ T1162] ? __lock_acquire+0x1397/0x2100 [ 155.996747][ T1162] ? bond_mii_monitor+0x174/0x3170 [ 155.996765][ T1162] ? do_raw_spin_unlock+0x13c/0x8b0 [ 155.996787][ T1162] ? __pfx_bond_mii_monitor+0x10/0x10 [ 155.996812][ T1162] ? __pfx_lock_acquire+0x10/0x10 [ 155.996834][ T1162] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 155.996857][ T1162] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.996887][ T1162] ? process_scheduled_works+0x9c6/0x18e0 [ 155.996904][ T1162] process_scheduled_works+0xabe/0x18e0 [ 155.996942][ T1162] ? __pfx_process_scheduled_works+0x10/0x10 [ 155.996966][ T1162] ? assign_work+0x364/0x3d0 [ 155.996987][ T1162] worker_thread+0x870/0xd30 [ 155.997016][ T1162] ? __kthread_parkme+0x169/0x1d0 [ 155.997038][ T1162] ? __pfx_worker_thread+0x10/0x10 [ 155.997056][ T1162] kthread+0x7a9/0x920 [ 155.997076][ T1162] ? __pfx_kthread+0x10/0x10 [ 155.997099][ T1162] ? __pfx_worker_thread+0x10/0x10 [ 155.997118][ T1162] ? __pfx_kthread+0x10/0x10 [ 155.997138][ T1162] ? __pfx_kthread+0x10/0x10 [ 155.997162][ T1162] ? __pfx_kthread+0x10/0x10 [ 155.997182][ T1162] ? _raw_spin_unlock_irq+0x23/0x50 [ 155.997200][ T1162] ? lockdep_hardirqs_on+0x99/0x150 [ 155.997221][ T1162] ? __pfx_kthread+0x10/0x10 [ 155.997251][ T1162] ret_from_fork+0x4b/0x80 [ 155.997269][ T1162] ? __pfx_kthread+0x10/0x10 [ 155.997291][ T1162] ret_from_fork_asm+0x1a/0x30 [ 155.997318][ T1162] [ 155.997348][ T1162] [ 156.309218][ T1162] ============================= [ 156.314153][ T1162] [ BUG: Invalid wait context ] [ 156.319003][ T1162] 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 Tainted: G W [ 156.327646][ T1162] ----------------------------- [ 156.333013][ T1162] kworker/u8:6/1162 is trying to lock: [ 156.338468][ T1162] ffffffff8feb7350 (net_rwsem){++++}-{4:4}, at: wext_netdev_notifier_call+0x1f/0x120 [ 156.347978][ T1162] other info that might help us debug this: [ 156.353863][ T1162] context-{5:5} [ 156.357323][ T1162] 3 locks held by kworker/u8:6/1162: [ 156.362630][ T1162] #0: ffff88807de0a948 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 156.373711][ T1162] #1: ffffc90004007c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 156.386601][ T1162] #2: ffffffff8eb393e0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 156.396281][ T1162] stack backtrace: [ 156.400002][ T1162] CPU: 0 UID: 0 PID: 1162 Comm: kworker/u8:6 Tainted: G W 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 156.400025][ T1162] Tainted: [W]=WARN [ 156.400031][ T1162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.400042][ T1162] Workqueue: bond0 bond_mii_monitor [ 156.400062][ T1162] Call Trace: [ 156.400068][ T1162] [ 156.400077][ T1162] dump_stack_lvl+0x241/0x360 [ 156.400096][ T1162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.400111][ T1162] ? __pfx__printk+0x10/0x10 [ 156.400141][ T1162] __lock_acquire+0x15a8/0x2100 [ 156.400172][ T1162] lock_acquire+0x1ed/0x550 [ 156.400194][ T1162] ? wext_netdev_notifier_call+0x1f/0x120 [ 156.400217][ T1162] ? __pfx_lock_acquire+0x10/0x10 [ 156.400240][ T1162] ? preempt_schedule_notrace+0xf6/0x140 [ 156.400264][ T1162] ? __pfx___might_resched+0x10/0x10 [ 156.400284][ T1162] ? __pfx___schedule+0x10/0x10 [ 156.400307][ T1162] ? lockdep_hardirqs_on+0x99/0x150 [ 156.400334][ T1162] down_read+0xb1/0xa40 [ 156.400348][ T1162] ? wext_netdev_notifier_call+0x1f/0x120 [ 156.400366][ T1162] ? dump_stack_lvl+0x2f9/0x360 [ 156.400382][ T1162] ? preempt_schedule_notrace+0x100/0x140 [ 156.400406][ T1162] ? __pfx_down_read+0x10/0x10 [ 156.400421][ T1162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.400436][ T1162] ? __pfx__printk+0x10/0x10 [ 156.400462][ T1162] ? dev_get_flags+0x147/0x1d0 [ 156.400490][ T1162] wext_netdev_notifier_call+0x1f/0x120 [ 156.400510][ T1162] notifier_call_chain+0x1a5/0x3f0 [ 156.400533][ T1162] netdev_state_change+0x11f/0x1a0 [ 156.400557][ T1162] ? __pfx_netdev_state_change+0x10/0x10 [ 156.400580][ T1162] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 156.400602][ T1162] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 156.400626][ T1162] ? rfc2863_policy+0x10e/0x3f0 [ 156.400652][ T1162] linkwatch_do_dev+0x112/0x170 [ 156.400679][ T1162] ethtool_op_get_link+0x15/0x60 [ 156.400701][ T1162] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 156.400722][ T1162] bond_check_dev_link+0x1eb/0x4a0 [ 156.400740][ T1162] ? __pfx_bond_check_dev_link+0x10/0x10 [ 156.400763][ T1162] bond_mii_monitor+0x49a/0x3170 [ 156.400783][ T1162] ? __lock_acquire+0x1397/0x2100 [ 156.400806][ T1162] ? bond_mii_monitor+0x174/0x3170 [ 156.400825][ T1162] ? do_raw_spin_unlock+0x13c/0x8b0 [ 156.400846][ T1162] ? __pfx_bond_mii_monitor+0x10/0x10 [ 156.400868][ T1162] ? __pfx_lock_acquire+0x10/0x10 [ 156.400891][ T1162] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 156.400915][ T1162] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 156.400942][ T1162] ? process_scheduled_works+0x9c6/0x18e0 [ 156.400961][ T1162] process_scheduled_works+0xabe/0x18e0 [ 156.400998][ T1162] ? __pfx_process_scheduled_works+0x10/0x10 [ 156.401021][ T1162] ? assign_work+0x364/0x3d0 [ 156.401041][ T1162] worker_thread+0x870/0xd30 [ 156.401066][ T1162] ? __kthread_parkme+0x169/0x1d0 [ 156.401088][ T1162] ? __pfx_worker_thread+0x10/0x10 [ 156.401109][ T1162] kthread+0x7a9/0x920 [ 156.401131][ T1162] ? __pfx_kthread+0x10/0x10 [ 156.401155][ T1162] ? __pfx_worker_thread+0x10/0x10 [ 156.401175][ T1162] ? __pfx_kthread+0x10/0x10 [ 156.401197][ T1162] ? __pfx_kthread+0x10/0x10 [ 156.401223][ T1162] ? __pfx_kthread+0x10/0x10 [ 156.401246][ T1162] ? _raw_spin_unlock_irq+0x23/0x50 [ 156.401267][ T1162] ? lockdep_hardirqs_on+0x99/0x150 [ 156.401290][ T1162] ? __pfx_kthread+0x10/0x10 [ 156.401313][ T1162] ret_from_fork+0x4b/0x80 [ 156.401334][ T1162] ? __pfx_kthread+0x10/0x10 [ 156.401357][ T1162] ret_from_fork_asm+0x1a/0x30 [ 156.401380][ T1162] [ 156.744872][ T1162] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:562 [ 156.754285][ T1162] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 1162, name: kworker/u8:6 [ 156.763789][ T1162] preempt_count: 0, expected: 0 [ 156.768714][ T1162] RCU nest depth: 1, expected: 0 [ 156.773680][ T1162] INFO: lockdep is turned off. [ 156.778493][ T1162] CPU: 1 UID: 0 PID: 1162 Comm: kworker/u8:6 Tainted: G W 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 156.778521][ T1162] Tainted: [W]=WARN [ 156.778528][ T1162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.778542][ T1162] Workqueue: bond0 bond_mii_monitor [ 156.778567][ T1162] Call Trace: [ 156.778574][ T1162] [ 156.778581][ T1162] dump_stack_lvl+0x241/0x360 [ 156.778604][ T1162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.778622][ T1162] ? __pfx__printk+0x10/0x10 [ 156.778655][ T1162] __might_resched+0x5d4/0x780 [ 156.778679][ T1162] ? __asan_memset+0x23/0x50 [ 156.778703][ T1162] ? __pfx___might_resched+0x10/0x10 [ 156.778724][ T1162] ? br_get_link_ksettings+0x36d/0x420 [ 156.778749][ T1162] ? rcu_is_watching+0x15/0xb0 [ 156.778770][ T1162] __mutex_lock+0x126/0x1010 [ 156.778802][ T1162] ? lock_release+0xbf/0xa30 [ 156.778833][ T1162] ? __pfx_lock_acquire+0x10/0x10 [ 156.778859][ T1162] ? rcu_is_watching+0x15/0xb0 [ 156.778881][ T1162] ? tee_netdev_event+0x86/0x460 [ 156.778900][ T1162] ? __pfx_lock_release+0x10/0x10 [ 156.778929][ T1162] ? __pfx___mutex_lock+0x10/0x10 [ 156.778961][ T1162] ? do_raw_spin_lock+0x14f/0x370 [ 156.778990][ T1162] ? net_generic+0x1f/0x240 [ 156.779011][ T1162] tee_netdev_event+0x86/0x460 [ 156.779030][ T1162] ? nft_offload_netdev_event+0x27d/0x360 [ 156.779053][ T1162] notifier_call_chain+0x1a5/0x3f0 [ 156.779082][ T1162] netdev_state_change+0x11f/0x1a0 [ 156.779111][ T1162] ? __pfx_netdev_state_change+0x10/0x10 [ 156.779139][ T1162] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 156.779166][ T1162] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 156.779196][ T1162] ? rfc2863_policy+0x10e/0x3f0 [ 156.779239][ T1162] linkwatch_do_dev+0x112/0x170 [ 156.779273][ T1162] ethtool_op_get_link+0x15/0x60 [ 156.779301][ T1162] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 156.779328][ T1162] bond_check_dev_link+0x1eb/0x4a0 [ 156.779351][ T1162] ? __pfx_bond_check_dev_link+0x10/0x10 [ 156.779380][ T1162] bond_mii_monitor+0x49a/0x3170 [ 156.779407][ T1162] ? __lock_acquire+0x1397/0x2100 [ 156.779435][ T1162] ? bond_mii_monitor+0x174/0x3170 [ 156.779459][ T1162] ? do_raw_spin_unlock+0x13c/0x8b0 [ 156.779500][ T1162] ? __pfx_bond_mii_monitor+0x10/0x10 [ 156.779530][ T1162] ? __pfx_lock_acquire+0x10/0x10 [ 156.779567][ T1162] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 156.779602][ T1162] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 156.779637][ T1162] ? process_scheduled_works+0x9c6/0x18e0 [ 156.779663][ T1162] process_scheduled_works+0xabe/0x18e0 [ 156.779700][ T1162] ? __pfx_process_scheduled_works+0x10/0x10 [ 156.779730][ T1162] ? assign_work+0x364/0x3d0 [ 156.779755][ T1162] worker_thread+0x870/0xd30 [ 156.779788][ T1162] ? __kthread_parkme+0x169/0x1d0 [ 156.779816][ T1162] ? __pfx_worker_thread+0x10/0x10 [ 156.779841][ T1162] kthread+0x7a9/0x920 [ 156.779870][ T1162] ? __pfx_kthread+0x10/0x10 [ 156.779900][ T1162] ? __pfx_worker_thread+0x10/0x10 [ 156.779926][ T1162] ? __pfx_kthread+0x10/0x10 [ 156.779954][ T1162] ? __pfx_kthread+0x10/0x10 [ 156.779985][ T1162] ? __pfx_kthread+0x10/0x10 [ 156.780013][ T1162] ? _raw_spin_unlock_irq+0x23/0x50 [ 156.780039][ T1162] ? lockdep_hardirqs_on+0x99/0x150 [ 156.780069][ T1162] ? __pfx_kthread+0x10/0x10 [ 156.780099][ T1162] ret_from_fork+0x4b/0x80 [ 156.780124][ T1162] ? __pfx_kthread+0x10/0x10 [ 156.780154][ T1162] ret_from_fork_asm+0x1a/0x30 [ 156.780184][ T1162] [ 157.552961][ T1162] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.612120][ T9] usb 5-1: USB disconnect, device number 3 [ 157.683000][ T1162] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.722407][ T975] usb 2-1: USB disconnect, device number 4 [ 157.731379][ T1162] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.769616][ T1162] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.836065][ T1162] vlan2: left promiscuous mode [ 157.840986][ T1162] team0: left promiscuous mode [ 157.848582][ T1162] team_slave_0: left promiscuous mode [ 157.854669][ T1162] team_slave_1: left promiscuous mode [ 157.860717][ T1162] bridge0: port 3(vlan2) entered disabled state [ 157.868199][ T1162] bridge_slave_1: left allmulticast mode [ 157.873850][ T1162] bridge_slave_1: left promiscuous mode [ 157.880021][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.888965][ T1162] bridge_slave_0: left allmulticast mode [ 157.894647][ T1162] bridge_slave_0: left promiscuous mode [ 157.901331][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.999515][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.009720][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.021418][ T1162] bond0 (unregistering): Released all slaves [ 158.248177][ T1162] hsr_slave_0: left promiscuous mode [ 158.254331][ T1162] hsr_slave_1: left promiscuous mode [ 158.261721][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.269634][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.277904][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.286995][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.297920][ T1162] team0: left allmulticast mode [ 158.302794][ T1162] team_slave_0: left allmulticast mode [ 158.308296][ T1162] team_slave_1: left allmulticast mode [ 158.313845][ T1162] veth1_macvtap: left promiscuous mode [ 158.319488][ T1162] veth0_macvtap: left promiscuous mode [ 158.325045][ T1162] veth1_vlan: left promiscuous mode [ 158.330757][ T1162] veth0_vlan: left promiscuous mode [ 158.464317][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 158.479128][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 158.839758][ T1162] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.890317][ T1162] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.933108][ T1162] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.972721][ T1162] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.071789][ T1162] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.120766][ T1162] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.159689][ T1162] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.219822][ T1162] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.284869][ T1162] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.341370][ T1162] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.389759][ T1162] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.430191][ T1162] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.507288][ T1162] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.540573][ T1162] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.595041][ T1162] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.661880][ T1162] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.769393][ T1162] bridge_slave_1: left allmulticast mode [ 159.775099][ T1162] bridge_slave_1: left promiscuous mode [ 159.783925][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.793711][ T1162] bridge_slave_0: left allmulticast mode [ 159.802377][ T1162] bridge_slave_0: left promiscuous mode [ 159.809291][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.818771][ T1162] bridge_slave_1: left allmulticast mode [ 159.824451][ T1162] bridge_slave_1: left promiscuous mode [ 159.830221][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.838772][ T1162] bridge_slave_0: left allmulticast mode [ 159.844445][ T1162] bridge_slave_0: left promiscuous mode [ 159.850767][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.859658][ T1162] vlan2: left promiscuous mode [ 159.864461][ T1162] team0: left promiscuous mode [ 159.869401][ T1162] team_slave_0: left promiscuous mode [ 159.875533][ T1162] team_slave_1: left promiscuous mode [ 159.881206][ T1162] bridge0: port 3(vlan2) entered disabled state [ 159.888837][ T1162] bridge_slave_1: left allmulticast mode [ 159.894490][ T1162] bridge_slave_1: left promiscuous mode [ 159.900281][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.908736][ T1162] bridge_slave_0: left allmulticast mode [ 159.914399][ T1162] bridge_slave_0: left promiscuous mode [ 159.920486][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.931102][ T1162] bridge_slave_1: left allmulticast mode [ 159.936929][ T1162] bridge_slave_1: left promiscuous mode [ 159.942592][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.950973][ T1162] bridge_slave_0: left allmulticast mode [ 159.956909][ T1162] bridge_slave_0: left promiscuous mode [ 159.962671][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.212569][ T1162] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 160.421415][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.432428][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.442796][ T1162] bond0 (unregistering): Released all slaves [ 160.454772][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.465795][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.475346][ T1162] bond0 (unregistering): Released all slaves [ 160.488458][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.499023][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.508715][ T1162] bond0 (unregistering): Released all slaves [ 160.518907][ T1162] bond0 (unregistering): Released all slaves [ 160.531067][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.541255][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.552150][ T1162] bond0 (unregistering): Released all slaves [ 161.138575][ T1162] hsr_slave_0: left promiscuous mode [ 161.144494][ T1162] hsr_slave_1: left promiscuous mode [ 161.150449][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.158281][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.167120][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.174546][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.185488][ T1162] hsr_slave_0: left promiscuous mode [ 161.191218][ T1162] hsr_slave_1: left promiscuous mode [ 161.197338][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.204770][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.212459][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.220193][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.231475][ T1162] hsr_slave_0: left promiscuous mode [ 161.237406][ T1162] hsr_slave_1: left promiscuous mode [ 161.243063][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.250547][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.258245][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.265947][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.276102][ T1162] hsr_slave_0: left promiscuous mode [ 161.281826][ T1162] hsr_slave_1: left promiscuous mode [ 161.287841][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.295352][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.303031][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.310788][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.326026][ T1162] veth1_macvtap: left promiscuous mode [ 161.331621][ T1162] veth0_macvtap: left promiscuous mode [ 161.337551][ T1162] veth1_vlan: left promiscuous mode [ 161.342834][ T1162] veth0_vlan: left promiscuous mode [ 161.349052][ T1162] veth1_macvtap: left promiscuous mode [ 161.354585][ T1162] veth0_macvtap: left promiscuous mode [ 161.360317][ T1162] veth1_vlan: left promiscuous mode [ 161.365650][ T1162] veth0_vlan: left promiscuous mode [ 161.371590][ T1162] team0: left allmulticast mode [ 161.377843][ T1162] team_slave_0: left allmulticast mode [ 161.383330][ T1162] team_slave_1: left allmulticast mode [ 161.388915][ T1162] veth1_macvtap: left promiscuous mode [ 161.394445][ T1162] veth0_macvtap: left promiscuous mode [ 161.400322][ T1162] veth1_vlan: left promiscuous mode [ 161.405759][ T1162] veth0_vlan: left promiscuous mode [ 161.411730][ T1162] veth1_macvtap: left promiscuous mode [ 161.417488][ T1162] veth0_macvtap: left promiscuous mode [ 161.423044][ T1162] veth1_vlan: left promiscuous mode [ 161.428558][ T1162] veth0_vlan: left promiscuous mode [ 161.674294][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 161.698524][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 161.869842][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 161.894608][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 162.065049][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 162.087450][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 162.289363][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 162.311543][ T1162] team0 (unregistering): Port device team_slave_0 removed