last executing test programs: 6.062494734s ago: executing program 1 (id=2): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="7b1a040000000000850000000500000079a1f8ff0000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='0x1234\n', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000040)='bpf\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c) write(r2, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f00000002c0)='1234567890\n', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000480)=0x0) syz_open_procfs(r6, &(0x7f0000000540)='statm\x00') write(r5, &(0x7f00000004c0)='\n', 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00', 0x0) r7 = fcntl$dupfd(r0, 0x0, r0) read$midi(r7, &(0x7f0000000340)=""/149, 0x57) 5.555182565s ago: executing program 0 (id=1): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005040100000000000000000000000000000000000000000000000c0003006272696467653000200012800b0001006272"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=r1], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c000000700005040100", @ANYRES32=r2, @ANYBLOB="1400018008000100000001000500030003"], 0x2c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.403800029s ago: executing program 3 (id=4): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x2f) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) 5.123512665s ago: executing program 0 (id=5): getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000040)=""/115, &(0x7f0000000100)=0x73) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) syz_ublk_setup_io_uring(0x6001, &(0x7f0000000140)={0x0, 0x30df, 0x40000, 0x0, 0x379}, &(0x7f0000000f80), &(0x7f0000002340), &(0x7f0000001000)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r1, 0x200001a6, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="8000"/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000020000000000000000"], 0x50) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000002380)="7905c425", 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x2040400) r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) mq_timedsend(r3, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x9, &(0x7f00000002c0)={0x77359400}) 5.081822166s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3c}}, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r4, &(0x7f0000007900)=[{{&(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x14) 4.935569988s ago: executing program 1 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$sock(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x20000810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000180)=""/116, &(0x7f0000000280)=0x74) ftruncate(0xffffffffffffffff, 0x6000000) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0) 4.690096925s ago: executing program 3 (id=7): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x2f) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 3.814612734s ago: executing program 2 (id=8): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="7b1a040000000000850000000500000079a1f8ff0000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') 3.52765958s ago: executing program 1 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010029bd", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007900)=[{{&(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x14) shutdown(0xffffffffffffffff, 0x0) sendto(r1, &(0x7f0000000080)="3efc08d9d463c8d842e27df7481c439e64b5b2698c0e12554c65a3d0514512757b2adccb14c5421d78736fc8f34cf2523aae520adb2035f3234c642f27cc6a31dc80517a2a5409b3792a614f463892", 0x4f, 0x0, &(0x7f0000000280)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x9}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x0, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000700), &(0x7f0000000740)=[{0x3, 0x3, 0x10, 0x7}], 0x10, 0xff}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000020c0)) 3.382099183s ago: executing program 0 (id=10): syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010900875b0d20d8130100220e0102030109021200"], 0x0) 3.245662737s ago: executing program 3 (id=11): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003040)=[{0x0, 0x2304}], 0x1}, 0x0) 3.041937341s ago: executing program 2 (id=12): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r4, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x11403f}) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x20000080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x400000000000047, 0x3f00) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa96dd60f81fcb00080000000010000000000000000000000000ff020090c9df6da75ce3d4c9e5cf9158ef3c78000000006000000000000000fc01000000000000000000000000000000000000000020000000ffff7f0000012f000400000000060001"], 0x0) 2.980302603s ago: executing program 3 (id=13): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005040100000000000000000000000000000000000000000000000c0003006272696467653000200012800b0001006272"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=r1], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c000000700005040100", @ANYRES32=r2, @ANYBLOB="1400018008000100000001000500030003"], 0x2c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.340321187s ago: executing program 1 (id=14): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="7b1a040000000000850000000500000079a1f8ff0000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='0x1234\n', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000040)='bpf\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c) write(r2, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f00000002c0)='1234567890\n', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000480)) write(r5, &(0x7f00000004c0)='\n', 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00', 0x0) r6 = fcntl$dupfd(r0, 0x0, r0) read$midi(r6, &(0x7f0000000340)=""/149, 0x57) 1.366350869s ago: executing program 1 (id=15): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x2f) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.358543349s ago: executing program 0 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3c}}, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r4, &(0x7f0000007900)=[{{&(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x14) 1.31571006s ago: executing program 2 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$sock(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x20000810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000180)=""/116, &(0x7f0000000280)=0x74) ftruncate(0xffffffffffffffff, 0x6000000) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0) 1.31540755s ago: executing program 3 (id=18): getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000040)=""/115, &(0x7f0000000100)=0x73) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) syz_ublk_setup_io_uring(0x6001, &(0x7f0000000140)={0x0, 0x30df, 0x40000, 0x0, 0x379}, &(0x7f0000000f80), &(0x7f0000002340), &(0x7f0000001000)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r1, 0x200001a6, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="8000"/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000020000000000000000"], 0x50) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000002380)="7905c425", 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x2040400) r3 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) mq_timedsend(r3, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x9, &(0x7f00000002c0)={0x77359400}) 349.977171ms ago: executing program 0 (id=19): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x2f) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 229.731474ms ago: executing program 2 (id=20): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="7b1a040000000000850000000500000079a1f8ff0000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') 83.851528ms ago: executing program 2 (id=21): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003040)=[{0x0, 0x2304}], 0x1}, 0x0) 13.631809ms ago: executing program 3 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010029bd", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007900)=[{{&(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x14) shutdown(0xffffffffffffffff, 0x0) sendto(r1, &(0x7f0000000080)="3efc08d9d463c8d842e27df7481c439e64b5b2698c0e12554c65a3d0514512757b2adccb14c5421d78736fc8f34cf2523aae520adb2035f3234c642f27cc6a31dc80517a2a5409b3792a614f463892", 0x4f, 0x0, &(0x7f0000000280)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x9}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x0, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000700), &(0x7f0000000740)=[{0x3, 0x3, 0x10, 0x7}], 0x10, 0xff}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000020c0)) 0s ago: executing program 1 (id=23): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="7b1a040000000000850000000500000079a1f8ff0000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='0x1234\n', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000040)='bpf\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c) write(r2, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f00000002c0)='1234567890\n', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000480)) write(r5, &(0x7f00000004c0)='\n', 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00', 0x0) r6 = fcntl$dupfd(r0, 0x0, r0) read$midi(r6, &(0x7f0000000340)=""/149, 0x57) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.191' (ED25519) to the list of known hosts. [ 73.049081][ T5758] cgroup: Unknown subsys name 'net' [ 73.178991][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.520184][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.903582][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.912589][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.920401][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.931038][ T5771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.961672][ T5771] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.982074][ T5771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.996094][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.005731][ T5086] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.016803][ T5771] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.024970][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.037552][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.042108][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.046495][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.053575][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.066847][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.068405][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.075194][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.089172][ T5773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.089515][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.096967][ T5773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.106658][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.118726][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.123764][ T5773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.126180][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.480757][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 76.629949][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.638727][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.646267][ T5769] bridge_slave_0: entered allmulticast mode [ 76.654180][ T5769] bridge_slave_0: entered promiscuous mode [ 76.662770][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 76.674189][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.681483][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.688678][ T5769] bridge_slave_1: entered allmulticast mode [ 76.696006][ T5769] bridge_slave_1: entered promiscuous mode [ 76.707411][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 76.785433][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.815707][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.834507][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 76.917768][ T5769] team0: Port device team_slave_0 added [ 76.927887][ T5769] team0: Port device team_slave_1 added [ 76.954243][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.961567][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.968753][ T5772] bridge_slave_0: entered allmulticast mode [ 76.977887][ T5772] bridge_slave_0: entered promiscuous mode [ 76.998190][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.005449][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.013002][ T5776] bridge_slave_0: entered allmulticast mode [ 77.019712][ T5776] bridge_slave_0: entered promiscuous mode [ 77.028131][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.035864][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.043086][ T5772] bridge_slave_1: entered allmulticast mode [ 77.049851][ T5772] bridge_slave_1: entered promiscuous mode [ 77.069378][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.076739][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.086266][ T5776] bridge_slave_1: entered allmulticast mode [ 77.093242][ T5776] bridge_slave_1: entered promiscuous mode [ 77.120765][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.127908][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.154241][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.188685][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.199581][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.206653][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.233023][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.260035][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.274303][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.293803][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.301013][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.308284][ T5777] bridge_slave_0: entered allmulticast mode [ 77.315101][ T5777] bridge_slave_0: entered promiscuous mode [ 77.324394][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.363580][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.370725][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.378552][ T5777] bridge_slave_1: entered allmulticast mode [ 77.386120][ T5777] bridge_slave_1: entered promiscuous mode [ 77.423822][ T5776] team0: Port device team_slave_0 added [ 77.432915][ T5772] team0: Port device team_slave_0 added [ 77.449656][ T5776] team0: Port device team_slave_1 added [ 77.468600][ T5772] team0: Port device team_slave_1 added [ 77.476716][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.508823][ T5769] hsr_slave_0: entered promiscuous mode [ 77.515192][ T5769] hsr_slave_1: entered promiscuous mode [ 77.535021][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.566403][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.573785][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.599863][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.621345][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.629281][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.657647][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.686598][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.694140][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.720170][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.737823][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.744970][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.771043][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.789880][ T5777] team0: Port device team_slave_0 added [ 77.824048][ T5776] hsr_slave_0: entered promiscuous mode [ 77.830669][ T5776] hsr_slave_1: entered promiscuous mode [ 77.837100][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.845424][ T5776] Cannot create hsr debugfs directory [ 77.860307][ T5777] team0: Port device team_slave_1 added [ 77.942266][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.949249][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.977650][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.999660][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.006772][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.033937][ T5781] Bluetooth: hci0: command tx timeout [ 78.041062][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.071870][ T5772] hsr_slave_0: entered promiscuous mode [ 78.078857][ T5772] hsr_slave_1: entered promiscuous mode [ 78.085743][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.093423][ T5772] Cannot create hsr debugfs directory [ 78.171796][ T5781] Bluetooth: hci3: command tx timeout [ 78.177561][ T5781] Bluetooth: hci1: command tx timeout [ 78.181531][ T5771] Bluetooth: hci2: command tx timeout [ 78.218034][ T5777] hsr_slave_0: entered promiscuous mode [ 78.224928][ T5777] hsr_slave_1: entered promiscuous mode [ 78.230972][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.239211][ T5777] Cannot create hsr debugfs directory [ 78.459706][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.488539][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.500800][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.518741][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.603984][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.614122][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.633120][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.644463][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.724703][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.743406][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.760650][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.779608][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.884416][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.895557][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.908376][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.920895][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.944602][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.993762][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.018114][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.025530][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.069710][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.077563][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.116698][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.183364][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.210274][ T3919] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.217460][ T3919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.233865][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.260818][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.267984][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.318833][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.348401][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.384010][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.391218][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.408052][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.415275][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.450244][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.502775][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.509955][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.547403][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.554557][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.618688][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.822524][ T5769] veth0_vlan: entered promiscuous mode [ 79.868722][ T5769] veth1_vlan: entered promiscuous mode [ 79.968492][ T5769] veth0_macvtap: entered promiscuous mode [ 79.980097][ T5769] veth1_macvtap: entered promiscuous mode [ 80.059421][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.081967][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.093139][ T5771] Bluetooth: hci0: command tx timeout [ 80.103765][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.129307][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.159960][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.198401][ T5776] veth0_vlan: entered promiscuous mode [ 80.207504][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.216713][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.225994][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.234835][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.252379][ T5771] Bluetooth: hci2: command tx timeout [ 80.252585][ T5773] Bluetooth: hci3: command tx timeout [ 80.266839][ T5781] Bluetooth: hci1: command tx timeout [ 80.286252][ T5776] veth1_vlan: entered promiscuous mode [ 80.327994][ T5772] veth0_vlan: entered promiscuous mode [ 80.372874][ T5777] veth0_vlan: entered promiscuous mode [ 80.417036][ T5772] veth1_vlan: entered promiscuous mode [ 80.438133][ T5777] veth1_vlan: entered promiscuous mode [ 80.456724][ T5776] veth0_macvtap: entered promiscuous mode [ 80.518358][ T5776] veth1_macvtap: entered promiscuous mode [ 80.544182][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.554309][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.606263][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.617865][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.630987][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.647482][ T5772] veth0_macvtap: entered promiscuous mode [ 80.658239][ T5777] veth0_macvtap: entered promiscuous mode [ 80.670036][ T5777] veth1_macvtap: entered promiscuous mode [ 80.678961][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.689710][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.695620][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.712749][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.724990][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.740992][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.752942][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.763705][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.774884][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.787617][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.802679][ T5772] veth1_macvtap: entered promiscuous mode [ 80.811187][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.828601][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.839223][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.851530][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.863595][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.877886][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.887357][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.900307][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.909223][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.924920][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.938598][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.947956][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.961447][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.019001][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.035206][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.047014][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.063099][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.077663][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.088947][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.103262][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.155460][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.170462][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.181103][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.192751][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.206262][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.217229][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.233459][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.266418][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.278297][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.287158][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.296336][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.338274][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.352384][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.390486][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.402373][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.448491][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.462320][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.533343][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.544905][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.629870][ T5838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 81.640164][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.654436][ T5838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 81.664415][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.730517][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.756357][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.182300][ T5781] Bluetooth: hci0: command tx timeout [ 82.332783][ T5781] Bluetooth: hci2: command tx timeout [ 82.338249][ T5781] Bluetooth: hci1: command tx timeout [ 82.344021][ T5781] Bluetooth: hci3: command tx timeout [ 84.171108][ T5875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9'. [ 84.252403][ T5812] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.312396][ T5773] Bluetooth: hci0: command tx timeout [ 84.411818][ T5773] Bluetooth: hci3: command tx timeout [ 84.417705][ T5773] Bluetooth: hci1: command tx timeout [ 84.425742][ T5773] Bluetooth: hci2: command tx timeout [ 84.573576][ T5812] usb 1-1: Using ep0 maxpacket: 32 [ 84.702555][ T5812] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.730516][ T5812] usb 1-1: config 0 has no interfaces? [ 84.774462][ T5879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13'. [ 84.793789][ T5879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 84.817804][ T5812] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 84.837094][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.856448][ T5812] usb 1-1: Product: syz [ 84.867691][ T5812] usb 1-1: Manufacturer: syz [ 84.882228][ T5812] usb 1-1: SerialNumber: syz [ 84.907252][ T5812] usb 1-1: config 0 descriptor?? [ 85.147593][ T5812] usb 1-1: USB disconnect, device number 2 [ 87.084538][ T788] cfg80211: failed to load regulatory.db [ 88.241536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.801535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.361558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.921555][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.481618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.041706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.601563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.161558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.721514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.281598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 192.141424][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 192.148545][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5905/1:b..l P5812/1:b..l [ 192.157887][ C0] rcu: (detected by 0, t=10502 jiffies, g=9477, q=827 ncpus=2) [ 192.165532][ C0] task:kworker/1:4 state:R running task stack:24360 pid:5812 ppid:2 flags:0x00004000 [ 192.176910][ C0] Workqueue: events_power_efficient gc_worker [ 192.183011][ C0] Call Trace: [ 192.186280][ C0] [ 192.189207][ C0] __schedule+0x15ae/0x4660 [ 192.193769][ C0] ? asan.module_dtor+0x20/0x20 [ 192.198786][ C0] ? mark_lock+0x94/0x320 [ 192.203115][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 192.209099][ C0] ? preempt_schedule_irq+0xb4/0x150 [ 192.214376][ C0] preempt_schedule_irq+0xbf/0x150 [ 192.219479][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 192.225200][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 192.231006][ C0] irqentry_exit+0x67/0x70 [ 192.235442][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 192.241431][ C0] RIP: 0010:seqcount_lockdep_reader_access+0x19a/0x1d0 [ 192.248382][ C0] Code: f8 4d 85 e4 75 16 e8 35 4d c1 f8 eb 15 e8 2e 4d c1 f8 e8 79 e5 c8 01 4d 85 e4 74 ea e8 1f 4d c1 f8 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 43 c7 44 3e 08 00 00 00 00 65 48 8b 04 25 [ 192.268003][ C0] RSP: 0018:ffffc900048d79a0 EFLAGS: 00000293 [ 192.274138][ C0] RAX: ffffffff88c62501 RBX: 0000000000000000 RCX: ffff88802d35da00 [ 192.282184][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.290162][ C0] RBP: ffffc900048d7a50 R08: ffffffff911ed597 R09: 1ffffffff223dab2 [ 192.298137][ C0] R10: dffffc0000000000 R11: fffffbfff223dab3 R12: 0000000000000200 [ 192.306127][ C0] R13: dffffc0000000000 R14: 1ffff9200091af34 R15: dffffc0000000000 [ 192.314135][ C0] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 192.320383][ C0] ? nf_conntrack_hash_check_insert+0x6f0/0x6f0 [ 192.326653][ C0] gc_worker+0x314/0x14a0 [ 192.330984][ C0] ? gc_worker+0x266/0x14a0 [ 192.335500][ C0] ? init_conntrack+0xe20/0xe20 [ 192.340344][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 192.345544][ C0] ? process_scheduled_works+0x975/0x1600 [ 192.351302][ C0] ? process_scheduled_works+0x975/0x1600 [ 192.357024][ C0] process_scheduled_works+0xa60/0x1600 [ 192.362623][ C0] ? worker_attach_to_pool+0x370/0x370 [ 192.368077][ C0] ? assign_work+0x3cc/0x5d0 [ 192.372682][ C0] worker_thread+0xa5e/0xfe0 [ 192.377287][ C0] ? _raw_spin_unlock+0x40/0x40 [ 192.382143][ C0] ? __kthread_parkme+0x71/0x1c0 [ 192.387389][ C0] kthread+0x2fa/0x390 [ 192.391461][ C0] ? pr_cont_work+0x550/0x550 [ 192.396146][ C0] ? kthread_blkcg+0xd0/0xd0 [ 192.400725][ C0] ret_from_fork+0x48/0x80 [ 192.405132][ C0] ? kthread_blkcg+0xd0/0xd0 [ 192.409731][ C0] ret_from_fork_asm+0x11/0x20 [ 192.414499][ C0] [ 192.417519][ C0] task:syz.2.21 state:R running task stack:27560 pid:5905 ppid:5772 flags:0x00004000 [ 192.428292][ C0] Call Trace: [ 192.431667][ C0] [ 192.434592][ C0] __schedule+0x15ae/0x4660 [ 192.439131][ C0] ? mark_lock+0x94/0x320 [ 192.443456][ C0] ? asan.module_dtor+0x20/0x20 [ 192.448310][ C0] ? preempt_schedule+0xc0/0xd0 [ 192.453155][ C0] preempt_schedule_common+0x82/0xc0 [ 192.458873][ C0] preempt_schedule+0xc0/0xd0 [ 192.463542][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 192.469172][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 192.474193][ C0] preempt_schedule_thunk+0x1a/0x30 [ 192.479396][ C0] _raw_spin_unlock+0x3a/0x40 [ 192.484069][ C0] unmap_page_range+0x2577/0x32f0 [ 192.489131][ C0] ? copy_page_range+0x3700/0x3700 [ 192.494252][ C0] unmap_vmas+0x286/0x3f0 [ 192.498581][ C0] ? unmap_page_range+0x32f0/0x32f0 [ 192.503788][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 192.508815][ C0] exit_mmap+0x238/0xb90 [ 192.513072][ C0] ? exit_mm_release+0x1a/0x30 [ 192.517831][ C0] ? vm_brk+0x30/0x30 [ 192.521810][ C0] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 192.527450][ C0] ? uprobe_clear_state+0x278/0x290 [ 192.532668][ C0] __mmput+0x118/0x3a0 [ 192.536745][ C0] exit_mm+0x23f/0x340 [ 192.540835][ C0] ? sysctl_delayacct+0x220/0x220 [ 192.545928][ C0] ? do_exit+0x2530/0x2530 [ 192.550340][ C0] ? tty_audit_exit+0x14d/0x1f0 [ 192.555184][ C0] do_exit+0x909/0x2530 [ 192.559364][ C0] ? put_task_struct+0xc0/0xc0 [ 192.564130][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 192.570102][ C0] ? get_signal+0x100e/0x1390 [ 192.574770][ C0] ? lock_chain_count+0x20/0x20 [ 192.579614][ C0] ? _raw_spin_lock_irq+0xbb/0xf0 [ 192.584653][ C0] do_group_exit+0x22d/0x2f0 [ 192.589265][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 192.594467][ C0] get_signal+0x12a6/0x1390 [ 192.598974][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 192.604517][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 192.610409][ C0] ? get_sigframe_size+0x20/0x20 [ 192.615356][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 192.620843][ C0] exit_to_user_mode_loop+0x70/0x110 [ 192.626137][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 192.631699][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 192.637174][ C0] do_syscall_64+0x61/0xb0 [ 192.641591][ C0] ? clear_bhb_loop+0x40/0x90 [ 192.647049][ C0] ? clear_bhb_loop+0x40/0x90 [ 192.651740][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.657638][ C0] RIP: 0033:0x7f8c4879e0d9 [ 192.662053][ C0] RSP: 002b:00007f8c4974a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 192.670679][ C0] RAX: fffffffffffffe00 RBX: 00007f8c48a25fa8 RCX: 00007f8c4879e0d9 [ 192.678660][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8c48a25fa8 [ 192.686644][ C0] RBP: 00007f8c48a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 192.694720][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.702690][ C0] R13: 00007f8c48a26038 R14: 00007fff91d32dc0 R15: 00007fff91d32ea8 [ 192.710674][ C0] [ 192.713715][ C0] rcu: rcu_preempt kthread starved for 10551 jiffies! g9477 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 192.724813][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 192.734780][ C0] rcu: RCU grace-period kthread stack dump: [ 192.740745][ C0] task:rcu_preempt state:R running task stack:27848 pid:17 ppid:2 flags:0x00004000 [ 192.751516][ C0] Call Trace: [ 192.754790][ C0] [ 192.757731][ C0] __schedule+0x15ae/0x4660 [ 192.762251][ C0] ? asan.module_dtor+0x20/0x20 [ 192.767115][ C0] ? rcu_is_watching+0x15/0xb0 [ 192.771899][ C0] schedule+0xbd/0x170 [ 192.775988][ C0] schedule_timeout+0x188/0x2d0 [ 192.780839][ C0] ? console_conditional_schedule+0x40/0x40 [ 192.786734][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 192.792659][ C0] ? update_process_times+0x1b0/0x1b0 [ 192.798037][ C0] ? prepare_to_swait_event+0x344/0x360 [ 192.803612][ C0] rcu_gp_fqs_loop+0x30d/0x1590 [ 192.808465][ C0] ? dump_blkd_tasks+0x820/0x820 [ 192.813390][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 192.819386][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 192.824418][ C0] ? rcu_gp_init+0x1530/0x1530 [ 192.829178][ C0] ? rcu_gp_cleanup+0xade/0xc30 [ 192.834027][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 192.839226][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 192.844490][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 192.849167][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 192.854298][ C0] ? __kthread_parkme+0x71/0x1c0 [ 192.859229][ C0] ? __kthread_parkme+0x15b/0x1c0 [ 192.864253][ C0] kthread+0x2fa/0x390 [ 192.868315][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 192.873450][ C0] ? kthread_blkcg+0xd0/0xd0 [ 192.878035][ C0] ret_from_fork+0x48/0x80 [ 192.882452][ C0] ? kthread_blkcg+0xd0/0xd0 [ 192.887036][ C0] ret_from_fork_asm+0x11/0x20 [ 192.891842][ C0] [ 192.894883][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 192.901196][ C0] Sending NMI from CPU 0 to CPUs 1: [ 192.906417][ C1] NMI backtrace for cpu 1 [ 192.906448][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 192.906463][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.906472][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 192.906498][ C1] Code: 59 1a 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d b3 35 39 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 192.906510][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 192.906523][ C1] RAX: 8218f38b1695d300 RBX: ffffffff81630c41 RCX: 8218f38b1695d300 [ 192.906534][ C1] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0 [ 192.906544][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36bab R09: 1ffff110171e6d75 [ 192.906555][ C1] R10: dffffc0000000000 R11: ffffed10171e6d76 R12: 1ffff92000030fc8 [ 192.906572][ C1] R13: dffffc0000000000 R14: 1ffff110038cb780 R15: 0000000000000000 [ 192.906582][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 192.906595][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.906605][ C1] CR2: 00007fe58d9eb7c0 CR3: 0000000026759000 CR4: 00000000003506e0 [ 192.906622][ C1] Call Trace: [ 192.906629][ C1] [ 192.906633][ C1] default_idle+0x13/0x20 [ 192.906655][ C1] default_idle_call+0x6c/0xa0 [ 192.906676][ C1] do_idle+0x221/0x5c0 [ 192.906697][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 192.906720][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 192.906742][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 192.906761][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 192.906782][ C1] ? _raw_spin_unlock+0x40/0x40 [ 192.906806][ C1] cpu_startup_entry+0x43/0x60 [ 192.906824][ C1] start_secondary+0xee/0xf0 [ 192.906841][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 192.906868][ C1] [ 193.088388][ C0] sched: RT throttling activated