last executing test programs:

8.836616682s ago: executing program 0 (id=82):
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x8000c2, &(0x7f0000000740), 0x0, 0x5d1, &(0x7f0000000140)="$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")

8.591508764s ago: executing program 0 (id=85):
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
io_setup(0x3fe, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)=' -', 0x3fffff}])

8.359716593s ago: executing program 0 (id=88):
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0xd, 0x4)

8.271868642s ago: executing program 0 (id=90):
mkdir(&(0x7f0000005740)='./file0\x00', 0x3b)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f00000000c0)='./file0\x00')
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])

8.167782816s ago: executing program 0 (id=91):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000030000000500000007"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002400)={r0, &(0x7f0000002240), 0x0}, 0x20)

6.461855063s ago: executing program 0 (id=123):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000680)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0xfffe, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x4, 0x2, 0x0, 0x932, {[@timestamp={0x8, 0xa, 0x200, 0xb}, @sack={0x5, 0x12, [0x5, 0x5, 0x1, 0x0]}, @mptcp=@add_addr={0x1e, 0xc, 0x0, 0xc, 0x16, @broadcast, 0x1, "2689"}, @sack={0x5, 0x12, [0x5, 0x9, 0x7f, 0x5]}, @md5sig={0x13, 0x12, "16ad84474dde46ec16d1a7611db5ab2a"}]}}}}}}}, 0x0)

6.264526841s ago: executing program 32 (id=123):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000680)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0xfffe, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x4, 0x2, 0x0, 0x932, {[@timestamp={0x8, 0xa, 0x200, 0xb}, @sack={0x5, 0x12, [0x5, 0x5, 0x1, 0x0]}, @mptcp=@add_addr={0x1e, 0xc, 0x0, 0xc, 0x16, @broadcast, 0x1, "2689"}, @sack={0x5, 0x12, [0x5, 0x9, 0x7f, 0x5]}, @md5sig={0x13, 0x12, "16ad84474dde46ec16d1a7611db5ab2a"}]}}}}}}}, 0x0)

1.904303472s ago: executing program 2 (id=156):
r0 = socket(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c)
syz_emit_ethernet(0x6e, &(0x7f0000000280)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x2, 0x6, "081331", 0x3f6f, 0xff, 0x0, @mcast1, @loopback, [@fragment={0x84, 0x0, 0xa, 0x0, 0x0, 0x7, 0x65}]}}}}}}}, 0x0)

1.79658872s ago: executing program 2 (id=158):
ioprio_set$pid(0x2, 0x0, 0x0)

1.661906653s ago: executing program 2 (id=159):
r0 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil)
shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
get_mempolicy(0x0, 0x0, 0x535a, &(0x7f0000396000/0x8000)=nil, 0x2)

1.5014007s ago: executing program 2 (id=161):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0)
io_setup(0x8, &(0x7f0000004200)=<r1=>0x0)
r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r3 = memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2)
ftruncate(r3, 0xffff)
close(0x3)
fcntl$addseals(r3, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000001c0)={r3, 0x1, 0x0, 0x8000})
io_submit(r1, 0x29, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

1.092892756s ago: executing program 2 (id=162):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

950.713313ms ago: executing program 2 (id=163):
syz_usb_connect(0x3, 0x2d, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xc1, 0x2c, 0x39, 0x10, 0x856, 0xac29, 0xb69e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x83, 0x0, 0x1, 0x1b, 0x6f, 0xda, 0x0, [], [{{0x9, 0x5, 0x1c277d69f7841ba1, 0x3, 0x10, 0x5, 0x2, 0x8}}]}}]}}]}}, 0x0)

669.05416ms ago: executing program 1 (id=165):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r0, 0xe)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x2f, 0x4)

621.117203ms ago: executing program 1 (id=166):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
rt_sigprocmask(0x2, &(0x7f0000000000)={[0x10004]}, 0x0, 0x8)

169.137101ms ago: executing program 1 (id=167):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0x1b, 0x0, 0x0, @remote}}}, 0x30)

91.15022ms ago: executing program 1 (id=168):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x4000)

294.012µs ago: executing program 1 (id=169):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
lseek(r0, 0xffffffffffffffff, 0x1)

0s ago: executing program 1 (id=170):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_sfeatures={0x2c}})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:23955' (ED25519) to the list of known hosts.
syzkaller login: [   55.889057][ T5778] cgroup: Unknown subsys name 'net'
[   56.055969][ T5778] cgroup: Unknown subsys name 'cpuset'
[   56.060253][ T5778] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.019598][ T5778] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.476198][ T5893] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.073937][ T5935] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   71.134992][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.136985][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   73.378489][   T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   73.382725][   T56] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   73.387309][ T5951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   73.402555][ T5951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   73.421063][ T5950] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   73.425143][ T5952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   73.426429][ T5950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   73.428661][ T5952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   73.434103][ T5951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   73.442859][ T5951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   73.445743][ T5952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   73.449489][ T5951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   73.451850][ T5951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   73.455670][ T5951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   73.458546][ T5951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   73.748185][ T5943] chnl_net:caif_netlink_parms(): no params data found
[   73.828232][ T5942] chnl_net:caif_netlink_parms(): no params data found
[   73.860561][ T5944] chnl_net:caif_netlink_parms(): no params data found
[   73.927463][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.931001][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.934719][ T5943] bridge_slave_0: entered allmulticast mode
[   73.938673][ T5943] bridge_slave_0: entered promiscuous mode
[   73.971550][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.976069][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.978898][ T5943] bridge_slave_1: entered allmulticast mode
[   73.982928][ T5943] bridge_slave_1: entered promiscuous mode
[   74.061053][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.076187][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.079138][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.083737][ T5942] bridge_slave_0: entered allmulticast mode
[   74.087446][ T5942] bridge_slave_0: entered promiscuous mode
[   74.095877][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.099545][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.104933][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.107804][ T5944] bridge_slave_0: entered allmulticast mode
[   74.111582][ T5944] bridge_slave_0: entered promiscuous mode
[   74.115748][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.118590][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.121265][ T5942] bridge_slave_1: entered allmulticast mode
[   74.124591][ T5942] bridge_slave_1: entered promiscuous mode
[   74.146617][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.149473][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.153488][ T5944] bridge_slave_1: entered allmulticast mode
[   74.156492][ T5944] bridge_slave_1: entered promiscuous mode
[   74.171204][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.202912][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.207363][ T5943] team0: Port device team_slave_0 added
[   74.248765][ T5943] team0: Port device team_slave_1 added
[   74.252723][ T5942] team0: Port device team_slave_0 added
[   74.257838][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.276330][ T5942] team0: Port device team_slave_1 added
[   74.280317][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.335008][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.337658][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.346235][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.366072][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.368415][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.377868][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.384123][ T5944] team0: Port device team_slave_0 added
[   74.387356][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.389945][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.400926][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.413317][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.415928][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.424965][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.429606][ T5944] team0: Port device team_slave_1 added
[   74.473291][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.475794][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.484883][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.499874][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.502070][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.510950][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.534808][ T5943] hsr_slave_0: entered promiscuous mode
[   74.537668][ T5943] hsr_slave_1: entered promiscuous mode
[   74.556073][ T5942] hsr_slave_0: entered promiscuous mode
[   74.559214][ T5942] hsr_slave_1: entered promiscuous mode
[   74.562165][ T5942] debugfs: 'hsr0' already exists in 'hsr'
[   74.564486][ T5942] Cannot create hsr debugfs directory
[   74.603284][ T5944] hsr_slave_0: entered promiscuous mode
[   74.606097][ T5944] hsr_slave_1: entered promiscuous mode
[   74.608321][ T5944] debugfs: 'hsr0' already exists in 'hsr'
[   74.610093][ T5944] Cannot create hsr debugfs directory
[   74.902890][ T5943] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   74.912701][ T5943] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   74.932516][ T5943] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   74.949462][ T5943] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   74.987430][ T5942] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   75.008888][ T5942] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   75.036982][ T5942] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   75.052117][ T5942] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   75.090638][ T5944] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   75.100044][ T5944] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   75.106809][ T5944] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   75.121118][ T5944] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   75.198774][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.243724][ T5943] 8021q: adding VLAN 0 to HW filter on device team0
[   75.264517][  T150] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.267538][  T150] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.275468][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.290672][  T150] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.293410][  T150] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.313730][ T5942] 8021q: adding VLAN 0 to HW filter on device team0
[   75.331120][  T150] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.333912][  T150] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.357501][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.363071][  T150] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.365714][  T150] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.434783][ T5944] 8021q: adding VLAN 0 to HW filter on device team0
[   75.454395][  T150] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.456561][  T150] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.484044][  T150] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.486921][  T150] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.537418][ T5233] Bluetooth: hci1: command tx timeout
[   75.539721][ T5233] Bluetooth: hci2: command tx timeout
[   75.546269][ T5945] Bluetooth: hci0: command tx timeout
[   75.650818][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.661120][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.748119][ T5942] veth0_vlan: entered promiscuous mode
[   75.759756][ T5943] veth0_vlan: entered promiscuous mode
[   75.765045][ T5942] veth1_vlan: entered promiscuous mode
[   75.794918][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.802847][ T5943] veth1_vlan: entered promiscuous mode
[   75.829139][ T5942] veth0_macvtap: entered promiscuous mode
[   75.835939][ T5942] veth1_macvtap: entered promiscuous mode
[   75.859961][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.864647][ T5943] veth0_macvtap: entered promiscuous mode
[   75.876491][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.881075][ T5943] veth1_macvtap: entered promiscuous mode
[   75.895899][ T5934] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.904589][ T5944] veth0_vlan: entered promiscuous mode
[   75.910873][ T5934] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.916453][ T5934] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.919714][ T5934] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.941343][ T5944] veth1_vlan: entered promiscuous mode
[   75.951069][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.975526][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.007615][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.011166][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.025657][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.046905][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.056810][ T5944] veth0_macvtap: entered promiscuous mode
[   76.073911][ T5944] veth1_macvtap: entered promiscuous mode
[   76.073939][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.079384][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.140306][  T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.145356][  T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.148671][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.171039][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.215747][   T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.221287][   T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.228882][   T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.250716][   T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.250957][  T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.260660][  T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.301536][ T3219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.307038][ T3219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.384490][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.389312][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.435241][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.446743][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.522382][ T6014] netlink: 'syz.2.73': attribute type 29 has an invalid length.
[   76.567345][ T6016] I/O error, dev loop0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   76.645461][ T6020] loop2: detected capacity change from 0 to 256
[   76.827118][ T6029] loop2: detected capacity change from 0 to 64
[   76.871178][ T6030] loop0: detected capacity change from 0 to 512
[   76.900182][ T6030] =======================================================
[   76.900182][ T6030] WARNING: The mand mount option has been deprecated and
[   76.900182][ T6030]          and is ignored by this kernel. Remove the mand
[   76.900182][ T6030]          option from the mount to silence this warning.
[   76.900182][ T6030] =======================================================
[   76.956683][ T6030] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   76.968909][ T6030] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   76.986284][ T6030] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[   77.063132][ T5992] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   77.120926][ T6038] ubi31: attaching mtd0
[   77.123726][ T6038] ubi31 error: ubi_attach_mtd_dev: bad VID header (8) or data offsets (72)
[   77.177938][ T6040] loop2: detected capacity change from 0 to 128
[   77.185556][ T6040] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   77.208270][ T6040] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   77.251818][ T5992] usb 2-1: Using ep0 maxpacket: 32
[   77.258883][ T5992] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[   77.269252][ T5992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.312702][ T5992] usb 2-1: config 0 descriptor??
[   77.338569][ T5992] gspca_main: nw80x-2.14.0 probing 055f:d001
[   77.622130][ T5945] Bluetooth: hci0: command tx timeout
[   77.623856][ T5233] Bluetooth: hci2: command tx timeout
[   77.749409][ T6058] loop2: detected capacity change from 0 to 64
[   78.275342][ T6077] ALSA: mixer_oss: invalid index 40000
[   78.541188][ T5992] gspca_nw80x: reg_w err -71
[   78.543471][ T5992] nw80x 2-1:0.0: probe with driver nw80x failed with error -71
[   78.547233][ T6089] warning: `syz.2.111' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   78.568733][ T5992] usb 2-1: USB disconnect, device number 2
[   78.624479][ T6094] loop2: detected capacity change from 0 to 256
[   79.090394][ T6113] loop1: detected capacity change from 0 to 16
[   79.223890][   T14] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.464012][   T14] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.540673][   T14] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.622283][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   79.624091][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'.
[   79.626902][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   79.632055][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   79.635822][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   79.639781][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   79.657911][   T14] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.694438][ T5233] Bluetooth: hci2: command tx timeout
[   79.696669][ T5233] Bluetooth: hci0: command tx timeout
[   79.779271][ T6128] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   79.783814][ T6128] macsec1: entered allmulticast mode
[   79.786333][ T6128] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   79.960604][ T6138] loop1: detected capacity change from 0 to 2048
[   79.983670][ T6138] NILFS (loop1): couldn't mount RDWR because of unsupported optional features (40)
[   80.015715][   T14] bridge_slave_1: left allmulticast mode
[   80.018145][   T14] bridge_slave_1: left promiscuous mode
[   80.021879][   T14] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.048083][   T14] bridge_slave_0: left allmulticast mode
[   80.050807][   T14] bridge_slave_0: left promiscuous mode
[   80.064537][   T14] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.982861][   T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.991760][   T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.997331][   T14] bond0 (unregistering): Released all slaves
[   81.154327][ T6125] chnl_net:caif_netlink_parms(): no params data found
[   81.501155][ T6191] netlink: 104 bytes leftover after parsing attributes in process `syz.2.145'.
[   81.508294][ T6125] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.511120][ T6125] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.519810][ T6125] bridge_slave_0: entered allmulticast mode
[   81.528892][ T6125] bridge_slave_0: entered promiscuous mode
[   81.586796][ T6125] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.589105][ T6125] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.599070][ T6125] bridge_slave_1: entered allmulticast mode
[   81.604535][ T6125] bridge_slave_1: entered promiscuous mode
[   81.676109][ T6125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.689351][ T6125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.703450][ T5233] Bluetooth: hci1: command tx timeout
[   81.710425][   T14] hsr_slave_0: left promiscuous mode
[   81.712841][    T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   81.717345][   T14] hsr_slave_1: left promiscuous mode
[   81.719738][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.723015][   T14] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.729203][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.734533][   T14] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.753670][   T14] veth1_macvtap: left promiscuous mode
[   81.755905][   T14] veth0_macvtap: left promiscuous mode
[   81.758929][   T14] veth1_vlan: left promiscuous mode
[   81.762875][   T14] veth0_vlan: left promiscuous mode
[   81.772425][ T5233] Bluetooth: hci0: command tx timeout
[   81.773276][ T5945] Bluetooth: hci2: command tx timeout
[   81.805157][ T6200] process 'syz.2.148' launched './file0' with NULL argv: empty string added
[   81.871780][    T9] usb 2-1: Using ep0 maxpacket: 16
[   81.885789][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   81.890107][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   81.910304][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   81.919113][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   81.933949][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   81.945300][    T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   81.950765][    T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   81.958823][    T9] usb 2-1: Manufacturer: syz
[   81.973328][    T9] usb 2-1: config 0 descriptor??
[   82.339111][    T9] rc_core: IR keymap rc-hauppauge not found
[   82.341535][    T9] Registered IR keymap rc-empty
[   82.346363][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   82.371792][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   82.399884][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[   82.426702][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input4
[   82.450590][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   82.472848][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   82.493305][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   82.512402][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   82.536104][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   82.552750][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   82.573861][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   82.592108][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   82.612016][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   82.633280][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   82.700667][    T9] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[   82.704848][    T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[   82.736845][    T9] usb 2-1: USB disconnect, device number 3
[   82.837976][   T14] team0 (unregistering): Port device team_slave_1 removed
[   82.913131][   T14] team0 (unregistering): Port device team_slave_0 removed
[   83.572818][ T6214] Falling back ldisc for ttyS3.
[   83.630824][ T6216] netlink: 'syz.1.153': attribute type 1 has an invalid length.
[   83.637465][ T6216] netlink: 144 bytes leftover after parsing attributes in process `syz.1.153'.
[   83.641865][ T6216] netlink: 28 bytes leftover after parsing attributes in process `syz.1.153'.
[   83.658266][ T6125] team0: Port device team_slave_0 added
[   83.675987][ T6125] team0: Port device team_slave_1 added
[   83.775923][ T5945] Bluetooth: hci1: command tx timeout
[   83.791271][ T6125] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.811673][ T6125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.830042][ T6125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.847596][ T6125] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.853188][ T6225] loop1: detected capacity change from 0 to 128
[   83.856398][ T6225] ufs: Bad value for 'onerror'
[   83.859680][ T6125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.901984][ T6125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.027932][   T33] audit: type=1800 audit(1757320957.188:2): pid=6233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.159" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[   84.474724][ T6125] hsr_slave_0: entered promiscuous mode
[   84.479172][ T6125] hsr_slave_1: entered promiscuous mode
[   84.485379][ T6125] debugfs: 'hsr0' already exists in 'hsr'
[   84.488588][ T6125] Cannot create hsr debugfs directory
[   84.590525][ T6243] netlink: 'syz.2.162': attribute type 10 has an invalid length.
[   84.629375][ T6243] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   84.880081][ T6125] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   84.905271][ T6125] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   84.916801][ T6125] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   84.925461][ T6125] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   85.003604][   T47] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   85.025045][ T6125] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.045382][ T6125] 8021q: adding VLAN 0 to HW filter on device team0
[   85.056509][ T3219] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.059514][ T3219] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.075350][ T3219] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.078318][ T3219] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.161840][   T47] usb 3-1: Using ep0 maxpacket: 16
[   85.169887][   T47] usb 3-1: config 0 has an invalid interface number: 131 but max is 0
[   85.177430][   T47] usb 3-1: config 0 has no interface number 0
[   85.179895][   T47] usb 3-1: config 0 interface 131 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[   85.192308][   T47] usb 3-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=b6.9e
[   85.199235][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.216875][   T47] usb 3-1: config 0 descriptor??
[   85.274707][ T6125] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.333858][ T6125] veth0_vlan: entered promiscuous mode
[   85.339221][ T6125] veth1_vlan: entered promiscuous mode
[   85.358670][ T6125] veth0_macvtap: entered promiscuous mode
[   85.363505][ T6125] veth1_macvtap: entered promiscuous mode
[   85.385665][ T6125] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.397744][ T6125] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.409641][ T5991] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.433402][ T5991] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.435362][   T47] mos7840 3-1:0.131: missing endpoints
[   85.440185][ T5991] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.453472][   T47] usb 3-1: USB disconnect, device number 2
[   85.466384][ T5991] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.589829][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.595462][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.624055][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.627174][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.666810][ T6276] 
[   85.667886][ T6276] ============================================
[   85.669795][ T6276] WARNING: possible recursive locking detected
[   85.671875][ T6276] syzkaller #0 Not tainted
[   85.673891][ T6276] --------------------------------------------
[   85.677174][ T6276] syz.1.170/6276 is trying to acquire lock:
[   85.679447][ T6276] ffff888028dfcd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1be0
[   85.683338][ T6276] 
[   85.683338][ T6276] but task is already holding lock:
[   85.685947][ T6276] ffff888028dfcd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0
[   85.689202][ T6276] and the lock comparison function returns 0:
[   85.691444][ T6276] 
[   85.691444][ T6276] other info that might help us debug this:
[   85.694206][ T6276]  Possible unsafe locking scenario:
[   85.694206][ T6276] 
[   85.696708][ T6276]        CPU0
[   85.698103][ T6276]        ----
[   85.699411][ T6276]   lock(&dev_instance_lock_key#20);
[   85.701374][ T6276]   lock(&dev_instance_lock_key#20);
[   85.703263][ T6276] 
[   85.703263][ T6276]  *** DEADLOCK ***
[   85.703263][ T6276] 
[   85.706492][ T6276]  May be due to missing lock nesting notation
[   85.706492][ T6276] 
[   85.709158][ T6276] 2 locks held by syz.1.170/6276:
[   85.711067][ T6276]  #0: ffffffff8f73f808 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19b0
[   85.714206][ T6276]  #1: ffff888028dfcd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0
[   85.717953][ T6276] 
[   85.717953][ T6276] stack backtrace:
[   85.720020][ T6276] CPU: 0 UID: 0 PID: 6276 Comm: syz.1.170 Not tainted syzkaller #0 PREEMPT(full) 
[   85.720032][ T6276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   85.720039][ T6276] Call Trace:
[   85.720048][ T6276]  <TASK>
[   85.720054][ T6276]  dump_stack_lvl+0x189/0x250
[   85.720069][ T6276]  ? __pfx_dump_stack_lvl+0x10/0x10
[   85.720080][ T6276]  ? __pfx__printk+0x10/0x10
[   85.720093][ T6276]  ? print_lock_name+0xde/0x100
[   85.720105][ T6276]  print_deadlock_bug+0x28b/0x2a0
[   85.720116][ T6276]  validate_chain+0x1a3f/0x2140
[   85.720126][ T6276]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   85.720141][ T6276]  ? lockdep_hardirqs_on+0x9c/0x150
[   85.720153][ T6276]  __lock_acquire+0xab9/0xd20
[   85.720168][ T6276]  ? __netdev_update_features+0xcb1/0x1be0
[   85.720179][ T6276]  lock_acquire+0x120/0x360
[   85.720189][ T6276]  ? __netdev_update_features+0xcb1/0x1be0
[   85.720198][ T6276]  ? kmem_cache_free+0x19a/0x690
[   85.720208][ T6276]  ? ethnl_multicast+0xb6/0x100
[   85.720216][ T6276]  ? ethnl_netdev_event+0xe2/0x160
[   85.720225][ T6276]  __mutex_lock+0x187/0x1350
[   85.720233][ T6276]  ? __netdev_update_features+0xcb1/0x1be0
[   85.720246][ T6276]  ? __netdev_update_features+0xcb1/0x1be0
[   85.720257][ T6276]  ? __pfx___mutex_lock+0x10/0x10
[   85.720270][ T6276]  __netdev_update_features+0xcb1/0x1be0
[   85.720282][ T6276]  ? __pfx___netdev_update_features+0x10/0x10
[   85.720292][ T6276]  ? cfg80211_netdev_notifier_call+0x1ee/0x1450
[   85.720303][ T6276]  ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10
[   85.720312][ T6276]  ? __lock_acquire+0xab9/0xd20
[   85.720323][ T6276]  ? do_raw_spin_lock+0x121/0x290
[   85.720332][ T6276]  netdev_update_features+0x6d/0xe0
[   85.720344][ T6276]  ? __pfx_netdev_update_features+0x10/0x10
[   85.720356][ T6276]  macsec_notify+0x2f5/0x660
[   85.720369][ T6276]  ? __pfx_macsec_notify+0x10/0x10
[   85.720380][ T6276]  notifier_call_chain+0x1b6/0x3e0
[   85.720389][ T6276]  netdev_features_change+0x85/0xc0
[   85.720401][ T6276]  ? __pfx_netdev_features_change+0x10/0x10
[   85.720437][ T6276]  ? security_capable+0x7e/0x2e0
[   85.720453][ T6276]  dev_ethtool+0x1536/0x19b0
[   85.720466][ T6276]  ? __pfx_dev_ethtool+0x10/0x10
[   85.720480][ T6276]  ? dev_load+0x21/0x1f0
[   85.720487][ T6276]  dev_ioctl+0x392/0x1150
[   85.720494][ T6276]  sock_do_ioctl+0x22c/0x300
[   85.720505][ T6276]  ? __pfx_sock_do_ioctl+0x10/0x10
[   85.720517][ T6276]  sock_ioctl+0x576/0x790
[   85.720527][ T6276]  ? __pfx_sock_ioctl+0x10/0x10
[   85.720536][ T6276]  ? __fget_files+0x3a0/0x420
[   85.720547][ T6276]  ? __fget_files+0x2a/0x420
[   85.720557][ T6276]  ? bpf_lsm_file_ioctl+0x9/0x20
[   85.720566][ T6276]  ? __pfx_sock_ioctl+0x10/0x10
[   85.720575][ T6276]  __se_sys_ioctl+0xfc/0x170
[   85.720584][ T6276]  do_syscall_64+0xfa/0xfa0
[   85.720592][ T6276]  ? lockdep_hardirqs_on+0x9c/0x150
[   85.720598][ T6276]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.720606][ T6276]  ? exc_page_fault+0xab/0x100
[   85.720613][ T6276]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.720620][ T6276] RIP: 0033:0x7f38ae18ebe9
[   85.720631][ T6276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   85.720657][ T6276] RSP: 002b:00007f38af0a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   85.720667][ T6276] RAX: ffffffffffffffda RBX: 00007f38ae3c5fa0 RCX: 00007f38ae18ebe9
[   85.720673][ T6276] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004
[   85.720679][ T6276] RBP: 00007f38ae211e19 R08: 0000000000000000 R09: 0000000000000000
[   85.720684][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   85.720689][ T6276] R13: 00007f38ae3c6038 R14: 00007f38ae3c5fa0 R15: 00007ffc965a9078
[   85.720699][ T6276]  </TASK>
[   85.862690][ T5945] Bluetooth: hci1: command tx timeout
[   86.492319][ T1270] cfg80211: failed to load regulatory.db
[   87.931819][ T5945] Bluetooth: hci1: command tx timeout

VM DIAGNOSIS:
08:42:38  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000036 RBX=0000000000000036 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001859 RDI=000000000000185a RBP=00000000000003f8 RSP=ffffc90002e96b70
R8 =ffff888107738237 R9 =1ffff11020ee7046 R10=dffffc0000000000 R11=ffffffff85526070
R12=dffffc0000000000 R13=ffffffff99d1b908 R14=ffffffff9a02e080 R15=0000000000000000
RIP=ffffffff855260ec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f38af0a26c0 ffffffff 00c00000
GS =0000 ffff8880b83fa000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30622ff8 CR3=0000000028cce000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=000000000000306d 697376656474656e
XMM02=00007f38ae397498 ffffffff8169546d XMM03=00007f38ae3974a8 00007f38ae3974a0
XMM04=00007f38aeefd100 00007f38ae397460 XMM05=00007f38ae397478 00007f38ae3974c0
XMM06=00007f38ae3974b8 00007f38ae3974b0 XMM07=00007f38ae3974a8 00007f38ae3974a0
XMM08=0000000000000000 00007f38ae212ee7 XMM09=0000000000000000 00007f38ae212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=faf5547d9ac6a100 RBX=ffffffff81979518 RCX=faf5547d9ac6a100 RDX=0000000000000001
RSI=ffffffff8c0370e0 RDI=ffffffff81979518 RBP=ffffc90000177f10 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fc3eb30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d5000
RIP=ffffffff8b7e9dd3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a39fa000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3a612659c0 CR3=00000001140d0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff000000ffff00 XMM05=0000000000000000 00007f3a61412e53
XMM06=0000000000000000 00007f3a61412e4d XMM07=0000000000000000 00007f3a61412e61
XMM08=0000000000000000 00007f3a61412ee7 XMM09=0000000000000000 00007f3a61412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
