last executing test programs: 15.79305327s ago: executing program 1 (id=67): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x53) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x40800) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8042) fcntl$dupfd(r2, 0x0, r2) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpgrp(0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x141) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/power/reserved_size', 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000078c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r4, @ANYBLOB="00c5409361ed00"/20, @ANYRES32, @ANYRES32, @ANYBLOB="04000000050000000200"/28], 0x50) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8}}) 14.61188922s ago: executing program 2 (id=70): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r5) r6 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000540)=0x9, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000000)=""/151, 0x97}], 0x1, 0xd, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0xc0844123, &(0x7f0000000040)) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) 13.552212558s ago: executing program 4 (id=71): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x40000200, 0x0, 0x1, 0x3, 0x4}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) rseq(0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 12.645754337s ago: executing program 2 (id=72): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x40000200, 0x0, 0x1, 0x3, 0x4}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring) 12.544037353s ago: executing program 1 (id=73): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r0, @ANYBLOB], 0x70}}, 0xc800) 11.96818184s ago: executing program 1 (id=74): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000280)={0xf0f022}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0x2, 0xc, 0x40, 0xe0fd}, 0x9, 0x1, 0x0, 0xc, 0x0, 0x6}}) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x109) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x8fff5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 11.910146936s ago: executing program 1 (id=75): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) r1 = fsopen(&(0x7f00000001c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xf) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = getpid() syz_pidfd_open(r3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 11.616326232s ago: executing program 4 (id=77): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x48400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f00000016c0)) 11.499670165s ago: executing program 1 (id=78): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r5, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x39, 0x80, {0x0, @in6={{0xa, 0x4e24, 0x3, @private0, 0x1}}, 0x2, 0x8, 0x200, 0x9, 0x8}}, &(0x7f0000000300)=0xb0) 9.401245103s ago: executing program 3 (id=82): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r5) r6 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000540)=0x9, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000000)=""/151, 0x97}], 0x1, 0xd, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0xc0844123, &(0x7f0000000040)) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)) 8.718816209s ago: executing program 0 (id=83): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x53) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x40800) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8042) fcntl$dupfd(r2, 0x0, r2) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpgrp(0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x141) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/power/reserved_size', 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000078c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r4, @ANYBLOB="00c5409361ed00"/20, @ANYRES32, @ANYRES32, @ANYBLOB="04000000050000000200"/28], 0x50) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8}}) 7.955018958s ago: executing program 2 (id=84): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x1, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="6600ff8141", @ANYRES64=r0], 0x3}}, 0x44000) syz_usbip_server_init(0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1d, 0x2, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x13b) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x803fd, 0x1, 0x800}) 7.759492107s ago: executing program 3 (id=85): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000280)={0xf0f022}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0x2, 0xc, 0x40, 0xe0fd}, 0x9, 0x1, 0x0, 0xc, 0x0, 0x6}}) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x109) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x8fff5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 7.413626995s ago: executing program 0 (id=86): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, 0x0, 0xfc00) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x20000023896) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) 7.412522325s ago: executing program 4 (id=87): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r0, @ANYBLOB], 0x70}}, 0xc800) 6.365024011s ago: executing program 2 (id=88): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x40000200, 0x0, 0x1, 0x3, 0x4}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) rseq(0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 6.319281564s ago: executing program 3 (id=89): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r2, &(0x7f0000019540)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000006c0)={@dev={0xfe, 0x80, '\x00', 0x13}}, 0x14) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f017, 0x1}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth1_to_batadv\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x3}, r6}, 0x14) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x2000002, 0xe, 0x20, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r9, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) 5.477370182s ago: executing program 4 (id=90): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x18000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$tmpfs(0x0, 0x0, 0x0, 0x100000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r5, &(0x7f0000001600)=""/4103, 0x1007, 0x97) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000000)={0x80, 0xa, 0xf, 0xd, 0x0, 0xb021, 0x0}) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) 5.366540278s ago: executing program 3 (id=91): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r5 = dup(r1) read$FUSE(r5, &(0x7f0000003c40)={0x2020}, 0xffffff0a) 4.449339894s ago: executing program 2 (id=92): r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14e7e100158b010000000000000000000001fd00"], 0x14}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r3, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r4, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) getsockopt$sock_buf(r3, 0x1, 0x993568c40857f797, &(0x7f00000011c0)=""/57, &(0x7f0000001200)=0x39) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a80)=ANY=[@ANYBLOB="140100001f0001000000000000000800020100801400036775c34d00000000000000000000000001140001"], 0x114}], 0x1, 0x0, 0x0, 0x20000004}, 0x140000c4) 4.42080407s ago: executing program 1 (id=93): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)={[0x7]}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setitimer(0x1, 0x0, 0x0) utimensat(r0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x100) syz_pidfd_open(0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syslog(0x4, &(0x7f0000000140)=""/61, 0x3d) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffff5b}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8001}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004031}, 0x24008040) 3.276412853s ago: executing program 2 (id=94): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x40000200, 0x0, 0x1, 0x3, 0x4}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring) 2.909696728s ago: executing program 0 (id=95): setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe(&(0x7f00000000c0)) ioprio_set$uid(0x3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x280449c, &(0x7f0000002140)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000b00)=0x400e704) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.647877017s ago: executing program 0 (id=96): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x53) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x40800) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8042) fcntl$dupfd(r2, 0x0, r2) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpgrp(0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x141) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/power/reserved_size', 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000078c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r4, @ANYBLOB="00c5409361ed00"/20, @ANYRES32, @ANYRES32, @ANYBLOB="04000000050000000200"/28], 0x50) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8}}) 1.842470271s ago: executing program 4 (id=97): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x48400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f00000016c0)) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) read$FUSE(r5, &(0x7f000000c400)={0x2020}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}}, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x8c880, 0x0) add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) 1.569393381s ago: executing program 0 (id=98): socket$inet6(0xa, 0x11, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) 767.568246ms ago: executing program 3 (id=99): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) 765.707792ms ago: executing program 4 (id=100): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bind$netlink(r0, 0x0, 0x0) fanotify_init(0x202, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) 158.11125ms ago: executing program 3 (id=101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r5) r6 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000540)=0x9, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000000)=""/151, 0x97}], 0x1, 0xd, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0xc0844123, &(0x7f0000000040)) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}}, 0x0) 0s ago: executing program 0 (id=102): setgroups(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe08, 0x0, 0x2, 0x1, 0x80000000}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000380), 0x0, 0x1}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) dup2(r5, r4) syz_emit_ethernet(0x56, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.90' (ED25519) to the list of known hosts. syzkaller login: [ 67.476984][ T5821] cgroup: Unknown subsys name 'net' [ 67.627382][ T5821] cgroup: Unknown subsys name 'cpuset' [ 67.636216][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.085264][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.500313][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.513748][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.652128][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.652232][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.662969][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.668581][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.674341][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.699995][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.700324][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.707866][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.716208][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.722592][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.731091][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.743748][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.751820][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.761638][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.769002][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.773887][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.777112][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.791105][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.791536][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.800562][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.814899][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.827415][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.834589][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.842385][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.851470][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.418882][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 72.520130][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 72.663215][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 72.709173][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 72.817855][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.826005][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.833450][ T5831] bridge_slave_0: entered allmulticast mode [ 72.841375][ T5831] bridge_slave_0: entered promiscuous mode [ 72.867955][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 72.884163][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.891955][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.899564][ T5831] bridge_slave_1: entered allmulticast mode [ 72.906701][ T5831] bridge_slave_1: entered promiscuous mode [ 72.989480][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.998837][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.008950][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.016381][ T5834] bridge_slave_0: entered allmulticast mode [ 73.023423][ T5834] bridge_slave_0: entered promiscuous mode [ 73.076325][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.088586][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.096113][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.103265][ T5834] bridge_slave_1: entered allmulticast mode [ 73.112461][ T5834] bridge_slave_1: entered promiscuous mode [ 73.138069][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.145547][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.152765][ T5832] bridge_slave_0: entered allmulticast mode [ 73.160611][ T5832] bridge_slave_0: entered promiscuous mode [ 73.209396][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.217616][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.225941][ T5832] bridge_slave_1: entered allmulticast mode [ 73.234424][ T5832] bridge_slave_1: entered promiscuous mode [ 73.242176][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.249928][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.257561][ T5845] bridge_slave_0: entered allmulticast mode [ 73.265311][ T5845] bridge_slave_0: entered promiscuous mode [ 73.325409][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.332954][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.340336][ T5845] bridge_slave_1: entered allmulticast mode [ 73.348801][ T5845] bridge_slave_1: entered promiscuous mode [ 73.358058][ T5831] team0: Port device team_slave_0 added [ 73.367451][ T5831] team0: Port device team_slave_1 added [ 73.376392][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.389089][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.476803][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.521537][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.529337][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.539664][ T5843] bridge_slave_0: entered allmulticast mode [ 73.547113][ T5843] bridge_slave_0: entered promiscuous mode [ 73.556101][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.579591][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.589898][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.598197][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.624630][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.639436][ T5834] team0: Port device team_slave_0 added [ 73.645847][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.653211][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.661677][ T5843] bridge_slave_1: entered allmulticast mode [ 73.670481][ T5843] bridge_slave_1: entered promiscuous mode [ 73.704146][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.714224][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.721356][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.747723][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.769023][ T5834] team0: Port device team_slave_1 added [ 73.803470][ T5832] team0: Port device team_slave_0 added [ 73.814767][ T5851] Bluetooth: hci2: command tx timeout [ 73.846162][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.853115][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.880554][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.895497][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.908424][ T51] Bluetooth: hci3: command tx timeout [ 73.908997][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.914264][ T51] Bluetooth: hci0: command tx timeout [ 73.924020][ T5842] Bluetooth: hci4: command tx timeout [ 73.929360][ T5851] Bluetooth: hci1: command tx timeout [ 73.937705][ T5832] team0: Port device team_slave_1 added [ 73.972079][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.980072][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.007909][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.044701][ T5845] team0: Port device team_slave_0 added [ 74.093774][ T5831] hsr_slave_0: entered promiscuous mode [ 74.100745][ T5831] hsr_slave_1: entered promiscuous mode [ 74.121392][ T5845] team0: Port device team_slave_1 added [ 74.128343][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.135832][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.162035][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.175185][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.182149][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.210351][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.231396][ T5843] team0: Port device team_slave_0 added [ 74.291641][ T5843] team0: Port device team_slave_1 added [ 74.311260][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.318423][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.344746][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.416557][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.423537][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.449587][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.493059][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.500310][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.526541][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.542717][ T5834] hsr_slave_0: entered promiscuous mode [ 74.549945][ T5834] hsr_slave_1: entered promiscuous mode [ 74.556999][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 74.562799][ T5834] Cannot create hsr debugfs directory [ 74.598676][ T5832] hsr_slave_0: entered promiscuous mode [ 74.606353][ T5832] hsr_slave_1: entered promiscuous mode [ 74.612463][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 74.618726][ T5832] Cannot create hsr debugfs directory [ 74.649587][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.656735][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.682872][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.838273][ T5845] hsr_slave_0: entered promiscuous mode [ 74.845133][ T5845] hsr_slave_1: entered promiscuous mode [ 74.851169][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 74.857338][ T5845] Cannot create hsr debugfs directory [ 74.901032][ T5843] hsr_slave_0: entered promiscuous mode [ 74.907501][ T5843] hsr_slave_1: entered promiscuous mode [ 74.913468][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 74.919471][ T5843] Cannot create hsr debugfs directory [ 75.249773][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.293627][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.327205][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.357338][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.424341][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.436909][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.447973][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.478093][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.570147][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.583185][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.617823][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.637628][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.720514][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.757008][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.766137][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.780348][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.809449][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.845269][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.893973][ T5851] Bluetooth: hci2: command tx timeout [ 75.908652][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.945070][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.956671][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.971179][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.978731][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.988281][ T5851] Bluetooth: hci4: command tx timeout [ 75.994065][ T5851] Bluetooth: hci3: command tx timeout [ 75.999661][ T5851] Bluetooth: hci1: command tx timeout [ 76.005445][ T51] Bluetooth: hci0: command tx timeout [ 76.023053][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.035149][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.042297][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.063007][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.071215][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.098769][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.105947][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.142700][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.149879][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.291376][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.429331][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.479754][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.491061][ T2907] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.498286][ T2907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.533029][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.540222][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.605000][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.615598][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.637517][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.680304][ T2907] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.687502][ T2907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.718369][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.725548][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.750450][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.760691][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.809327][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.816505][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.893031][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.900241][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.980121][ T5831] veth0_vlan: entered promiscuous mode [ 77.012330][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.073411][ T5831] veth1_vlan: entered promiscuous mode [ 77.276164][ T5831] veth0_macvtap: entered promiscuous mode [ 77.316712][ T5831] veth1_macvtap: entered promiscuous mode [ 77.427931][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.468379][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.508900][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.544671][ T64] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.562507][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.573271][ T64] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.583955][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.592679][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.625589][ T5832] veth0_vlan: entered promiscuous mode [ 77.681984][ T5832] veth1_vlan: entered promiscuous mode [ 77.701239][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.712864][ T5845] veth0_vlan: entered promiscuous mode [ 77.769417][ T5845] veth1_vlan: entered promiscuous mode [ 77.859758][ T5834] veth0_vlan: entered promiscuous mode [ 77.873304][ T2907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.881840][ T5832] veth0_macvtap: entered promiscuous mode [ 77.891083][ T2907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.910050][ T5845] veth0_macvtap: entered promiscuous mode [ 77.943108][ T5834] veth1_vlan: entered promiscuous mode [ 77.959392][ T5832] veth1_macvtap: entered promiscuous mode [ 77.971671][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.981799][ T5851] Bluetooth: hci2: command tx timeout [ 77.988373][ T5843] veth0_vlan: entered promiscuous mode [ 77.988513][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.002224][ T5845] veth1_macvtap: entered promiscuous mode [ 78.033172][ T5843] veth1_vlan: entered promiscuous mode [ 78.058231][ T5851] Bluetooth: hci3: command tx timeout [ 78.064023][ T5842] Bluetooth: hci1: command tx timeout [ 78.064066][ T5851] Bluetooth: hci0: command tx timeout [ 78.069553][ T51] Bluetooth: hci4: command tx timeout [ 78.095877][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.102546][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.132507][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.146295][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.181949][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.209765][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.234757][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.243507][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.287693][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.310562][ T5834] veth0_macvtap: entered promiscuous mode [ 78.326240][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.336055][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.367548][ T5834] veth1_macvtap: entered promiscuous mode [ 78.378097][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.392317][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.418298][ T5843] veth0_macvtap: entered promiscuous mode [ 78.457728][ T5843] veth1_macvtap: entered promiscuous mode [ 78.512933][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.555939][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.570631][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.615117][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.639303][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.651394][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.663996][ T2907] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.672751][ T2907] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.720108][ T2907] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.729811][ T2907] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.742632][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.754766][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.766823][ T2907] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.777406][ T2907] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.805605][ T2907] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.841603][ T5953] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 78.940335][ T2907] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.007373][ T2907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.015629][ T2907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.131453][ T2907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.155714][ T2907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.323886][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.331765][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.365812][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.407184][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.054370][ T51] Bluetooth: hci2: command tx timeout [ 80.069108][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.074885][ T5963] syz.4.5 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 80.077891][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.134939][ T51] Bluetooth: hci4: command tx timeout [ 80.139550][ T5851] Bluetooth: hci1: command tx timeout [ 80.140455][ T5847] Bluetooth: hci3: command tx timeout [ 80.145886][ T5851] Bluetooth: hci0: command tx timeout [ 80.203465][ T2922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.212834][ T2922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.234282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.625784][ T5971] Zero length message leads to an empty skb [ 83.744010][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.115987][ T6004] vivid-002: disconnect [ 84.135837][ T6003] vivid-002: reconnect [ 84.264103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.272747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.294458][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.464477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.774105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.801350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.903730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 85.006079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.510082][ T6020] netlink: 'syz.4.17': attribute type 1 has an invalid length. [ 85.519022][ T6020] netlink: 216 bytes leftover after parsing attributes in process `syz.4.17'. [ 86.856300][ T979] cfg80211: failed to load regulatory.db [ 87.189262][ T6041] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 90.684999][ T30] audit: type=1326 audit(1751559277.688:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675698e929 code=0x7ffc0000 [ 90.885282][ T30] audit: type=1326 audit(1751559277.748:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675698e929 code=0x7ffc0000 [ 90.937133][ T6076] Illegal XDP return value 4294967294 on prog (id 7) dev N/A, expect packet loss! [ 91.006379][ T30] audit: type=1326 audit(1751559277.938:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f675698e929 code=0x7ffc0000 [ 91.077544][ T30] audit: type=1326 audit(1751559277.938:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675698e929 code=0x7ffc0000 [ 91.166110][ T30] audit: type=1326 audit(1751559277.938:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675698e929 code=0x7ffc0000 [ 91.905130][ T6089] fuse: Unknown parameter '0x0000000000000003' [ 94.515811][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.52'. [ 95.226810][ T6124] netlink: 'syz.3.51': attribute type 1 has an invalid length. [ 95.234503][ T6124] netlink: 216 bytes leftover after parsing attributes in process `syz.3.51'. [ 100.389778][ T6170] netlink: 'syz.0.64': attribute type 1 has an invalid length. [ 100.397405][ T6170] netlink: 216 bytes leftover after parsing attributes in process `syz.0.64'. [ 103.100230][ T6197] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.491203][ T6203] QAT: failed to copy from user cfg_data. [ 104.424474][ T6211] loop6: detected capacity change from 0 to 524287999 [ 107.394001][ T6233] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 107.400715][ T6233] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 107.464676][ T6233] vhci_hcd vhci_hcd.0: Device attached [ 108.049605][ T6234] vhci_hcd: connection closed [ 108.507906][ T43] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 108.556233][ T6184] vhci_hcd: stop threads [ 108.684382][ T6184] vhci_hcd: release socket [ 108.691015][ T6184] vhci_hcd: disconnect device [ 108.961217][ T30] audit: type=1326 audit(1751559295.978:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.3.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91adf8e929 code=0x7ffc0000 [ 109.074339][ T30] audit: type=1326 audit(1751559295.978:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.3.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91adf8e929 code=0x7ffc0000 [ 109.104887][ T30] audit: type=1326 audit(1751559295.978:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.3.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f91adf8e929 code=0x7ffc0000 [ 109.128186][ T30] audit: type=1326 audit(1751559295.978:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.3.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91adf8e929 code=0x7ffc0000 [ 109.151746][ T30] audit: type=1326 audit(1751559295.978:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.3.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91adf8e929 code=0x7ffc0000 [ 109.174975][ T30] audit: type=1326 audit(1751559295.978:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.3.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f91adf8e929 code=0x7ffc0000 [ 109.200692][ T30] audit: type=1326 audit(1751559295.978:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.3.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91adf8e929 code=0x7ffc0000 [ 109.372529][ T30] audit: type=1326 audit(1751559295.978:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.3.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91adf8e929 code=0x7ffc0000 [ 109.473930][ T30] audit: type=1326 audit(1751559295.978:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.3.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91adf8e929 code=0x7ffc0000 [ 109.564840][ T30] audit: type=1326 audit(1751559295.978:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.3.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f91adf8e929 code=0x7ffc0000 [ 110.384999][ T6259] loop6: detected capacity change from 0 to 524287999 [ 110.529340][ T5913] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 111.057824][ T5913] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 111.075290][ T5913] usb 5-1: config 0 has no interface number 0 [ 111.093513][ T5913] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 111.173322][ T6275] netlink: 'syz.2.92': attribute type 1 has an invalid length. [ 111.183861][ T6275] netlink: 216 bytes leftover after parsing attributes in process `syz.2.92'. [ 111.635495][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.665898][ T5913] usb 5-1: Product: syz [ 111.681989][ T5913] usb 5-1: Manufacturer: syz [ 111.703905][ T5913] usb 5-1: SerialNumber: syz [ 111.727180][ T5913] usb 5-1: config 0 descriptor?? [ 112.867893][ T5913] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 113.038310][ T5848] usb 5-1: USB disconnect, device number 2 [ 113.437583][ T6292] QAT: failed to copy from user cfg_data. [ 113.653854][ T43] vhci_hcd: vhci_device speed not set [ 114.922872][ T5834] [ 114.925239][ T5834] ============================================ [ 114.931387][ T5834] WARNING: possible recursive locking detected [ 114.937538][ T5834] 6.16.0-rc4-next-20250703-syzkaller #0 Not tainted [ 114.944116][ T5834] -------------------------------------------- [ 114.950253][ T5834] syz-executor/5834 is trying to acquire lock: [ 114.956398][ T5834] ffff88807ebcc8c8 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: rpc_close_pipes+0x10a/0x730 [ 114.966683][ T5834] [ 114.966683][ T5834] but task is already holding lock: [ 114.974040][ T5834] ffff88807ebc91c8 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 114.985280][ T5834] [ 114.985280][ T5834] other info that might help us debug this: [ 114.993332][ T5834] Possible unsafe locking scenario: [ 114.993332][ T5834] [ 115.000788][ T5834] CPU0 [ 115.004070][ T5834] ---- [ 115.007345][ T5834] lock(&sb->s_type->i_mutex_key#20); [ 115.012826][ T5834] lock(&sb->s_type->i_mutex_key#20); [ 115.018298][ T5834] [ 115.018298][ T5834] *** DEADLOCK *** [ 115.018298][ T5834] [ 115.026447][ T5834] May be due to missing lock nesting notation [ 115.026447][ T5834] [ 115.034857][ T5834] 4 locks held by syz-executor/5834: [ 115.040141][ T5834] #0: ffff88807c3000e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 115.050352][ T5834] #1: ffff8880272398a0 (&sn->pipefs_sb_lock){+.+.}-{4:4}, at: rpc_kill_sb+0x77/0x190 [ 115.059953][ T5834] #2: ffffffff8f6d0e30 ((rpc_pipefs_notifier_list).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 115.072057][ T5834] #3: ffff88807ebc91c8 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 115.083727][ T5834] [ 115.083727][ T5834] stack backtrace: [ 115.089622][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250703-syzkaller #0 PREEMPT(full) [ 115.089638][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.089653][ T5834] Call Trace: [ 115.089659][ T5834] [ 115.089665][ T5834] dump_stack_lvl+0x189/0x250 [ 115.089688][ T5834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.089705][ T5834] ? __pfx__printk+0x10/0x10 [ 115.089719][ T5834] ? print_lock_name+0xde/0x100 [ 115.089733][ T5834] print_deadlock_bug+0x28b/0x2a0 [ 115.089751][ T5834] validate_chain+0x1a3f/0x2140 [ 115.089775][ T5834] __lock_acquire+0xab9/0xd20 [ 115.089792][ T5834] ? rpc_close_pipes+0x10a/0x730 [ 115.089807][ T5834] lock_acquire+0x120/0x360 [ 115.089820][ T5834] ? rpc_close_pipes+0x10a/0x730 [ 115.089838][ T5834] down_write+0x96/0x1f0 [ 115.089852][ T5834] ? rpc_close_pipes+0x10a/0x730 [ 115.089866][ T5834] ? __pfx_down_write+0x10/0x10 [ 115.089878][ T5834] ? __pfx_find_submount+0x10/0x10 [ 115.089892][ T5834] ? _raw_spin_unlock+0x28/0x50 [ 115.089907][ T5834] ? d_walk+0x6f4/0x780 [ 115.089920][ T5834] rpc_close_pipes+0x10a/0x730 [ 115.089935][ T5834] ? d_invalidate+0x204/0x260 [ 115.089948][ T5834] ? __pfx_rpc_close_pipes+0x10/0x10 [ 115.089964][ T5834] ? up_write+0x1c4/0x420 [ 115.089981][ T5834] ? __pfx_rpc_close_pipes+0x10/0x10 [ 115.089995][ T5834] __simple_recursive_removal+0x20b/0x510 [ 115.090013][ T5834] ? __pfx_rpc_close_pipes+0x10/0x10 [ 115.090028][ T5834] rpc_unlink+0x56/0x80 [ 115.090042][ T5834] rpc_pipefs_event+0xc0/0x170 [ 115.090056][ T5834] notifier_call_chain+0x1b3/0x3e0 [ 115.090076][ T5834] blocking_notifier_call_chain+0x6a/0x90 [ 115.090093][ T5834] rpc_kill_sb+0xd0/0x190 [ 115.090110][ T5834] deactivate_locked_super+0xb9/0x130 [ 115.090126][ T5834] cleanup_mnt+0x425/0x4c0 [ 115.090140][ T5834] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.090159][ T5834] task_work_run+0x1d1/0x260 [ 115.090173][ T5834] ? __pfx_task_work_run+0x10/0x10 [ 115.090185][ T5834] ? __x64_sys_umount+0x122/0x160 [ 115.090203][ T5834] ? exit_to_user_mode_loop+0x40/0x110 [ 115.090219][ T5834] exit_to_user_mode_loop+0xec/0x110 [ 115.090233][ T5834] do_syscall_64+0x2bd/0x3b0 [ 115.090245][ T5834] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.090262][ T5834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.090274][ T5834] ? clear_bhb_loop+0x60/0xb0 [ 115.090288][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.090300][ T5834] RIP: 0033:0x7f7a1f78fc57 [ 115.090318][ T5834] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 115.090329][ T5834] RSP: 002b:00007ffe57283598 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 115.090343][ T5834] RAX: 0000000000000000 RBX: 00007f7a1f810925 RCX: 00007f7a1f78fc57 [ 115.090352][ T5834] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe57283650 [ 115.090365][ T5834] RBP: 00007ffe57283650 R08: 0000000000000000 R09: 0000000000000000 [ 115.090373][ T5834] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe572846e0 [ 115.090382][ T5834] R13: 00007f7a1f810925 R14: 000000000001c06b R15: 00007ffe57284720 [ 115.090396][ T5834]