last executing test programs: 8.569460239s ago: executing program 3 (id=9): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = dup(r0) io_setup(0x19, &(0x7f00000009c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 8.285127399s ago: executing program 3 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) open_by_handle_at(r2, &(0x7f0000000080)=@xfs_parent={0x1c, 0x82, {0x40, 0xb, 0x3, 0x7}}, 0x8082) 7.992869774s ago: executing program 0 (id=1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 7.722716529s ago: executing program 0 (id=15): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2b, 0x1, 0x0) syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x6, r3, 0x0, 0x0, 0x1}}, 0x20) 7.679468512s ago: executing program 1 (id=17): r0 = syz_open_procfs(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) creat(&(0x7f00000000c0)='./file0\x00', 0x8b) socket$pppl2tp(0x18, 0x1, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r2, &(0x7f0000000000)=""/42, 0x77) 7.312390317s ago: executing program 3 (id=18): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x1b32, 0x100, 0x2, 0x335}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) 6.545307439s ago: executing program 0 (id=20): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4b5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000100003052abd700004000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x400c800}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 6.148282693s ago: executing program 3 (id=23): syz_open_dev$video(0x0, 0x485, 0x40000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0x3, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x141) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff, 0xa2, 0x0, 0x5}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') syslog(0x4, &(0x7f00000000c0)=""/27, 0x1b) 5.36045015s ago: executing program 4 (id=24): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002480)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000019700)) 5.309530126s ago: executing program 1 (id=25): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 5.178578504s ago: executing program 2 (id=26): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x20000, 0x20) read$FUSE(r1, &(0x7f0000003700)={0x2020}, 0x2020) r2 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000100)={0x0, @bt={0x8, 0x401, 0x1, 0x3, 0x2, 0x1717, 0x8, 0x9, 0x8, 0xfff, 0x3, 0xe, 0x28000000, 0x7fff, 0x0, 0x2, {0xb, 0x8}, 0x6, 0x6d}}) keyctl$read(0xb, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x7f1, 0x84, 0xefcc, 0x6, 0x5, "f06fca79266e82a74b6c5e443a04683cc267a0", 0x6, 0xc}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x16, 0x2, 0xe, 0x6, 0x20, r0, 0x7fff, '\x00', 0x0, r0, 0x3, 0x4, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x22, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x37}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff9}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x1, 0x0, 0x9, 0x8, 0x0, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @generic={0x80, 0x2, 0xa, 0x8, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @ldst={0x2, 0x2, 0x4, 0x4, 0x6, 0x100, 0x1}]}, &(0x7f0000000440)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000004c0)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x10, 0x2}, 0x94) 5.028174473s ago: executing program 4 (id=27): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x6, r7, 0x0, 0x0, 0x1}}, 0x20) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0xfeffffff, r2, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5"], 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r8 = gettid() r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0xc4a, 0x0, r8}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x22806d, 0x0) r10 = socket(0x10, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) 4.383300108s ago: executing program 2 (id=28): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 4.344143832s ago: executing program 1 (id=29): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000780)={0xb6, 0x0, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.626435641s ago: executing program 4 (id=30): socket$inet6(0xa, 0x11, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) 2.684308617s ago: executing program 2 (id=31): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 2.568220834s ago: executing program 3 (id=32): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2b, 0x1, 0x0) syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400}, &(0x7f0000000240), &(0x7f0000000100)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x6, r3, 0x0, 0x0, 0x1}}, 0x20) 1.524578068s ago: executing program 2 (id=33): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x1b32, 0x100, 0x2, 0x335}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) 1.496120133s ago: executing program 4 (id=34): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f3"], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c06", 0x27}], 0x1}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000c40)}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 1.405748734s ago: executing program 3 (id=35): syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) syz_open_dev$sndpcmp(0x0, 0x800010000000, 0x220c64) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='rxrpc_client\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x18}, 0xfc00) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000007c0)={0x40, r4, 0xe096044a3fc9e6f1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x24a}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfd}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0xcb]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r10, 0x0, 0x20000023896) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) 1.360370322s ago: executing program 1 (id=36): statfs(&(0x7f0000000200)='./file0/file0\x00', 0x0) 1.32662098s ago: executing program 2 (id=37): socket$inet6(0xa, 0x11, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 1.285215206s ago: executing program 4 (id=38): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) 1.202985774s ago: executing program 0 (id=39): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000007c0), 0x8) connect$bt_sco(r0, 0x0, 0x0) 1.194573389s ago: executing program 1 (id=40): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a0103fa000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000100000000000004440000001e0a05020000000000000000010000000900020073797a32d50000001800038014000080100001800400028008000180000000000900010073797a30"], 0xc8}}, 0x0) 822.668913ms ago: executing program 0 (id=41): close(0xffffffffffffffff) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6(0xa, 0x3, 0x7) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x3ff, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0) 780.364939ms ago: executing program 4 (id=42): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000540)=[{&(0x7f0000000180)=@in6={0xa, 0x4e20, 0xffffffff, @private2, 0x6}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000002c0)="2a7eb675", 0x4}], 0x1, &(0x7f00000004c0)=[@sndrcv={0x30, 0x84, 0x1, {0x876b, 0xc, 0x2, 0xfffffffa, 0x2, 0x9, 0xa, 0x7}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010101}], 0x48, 0x8805}], 0x1, 0x0) 38.143608ms ago: executing program 1 (id=43): socket$inet6(0xa, 0x11, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 0s ago: executing program 2 (id=44): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.150' (ED25519) to the list of known hosts. [ 64.550574][ T5820] cgroup: Unknown subsys name 'net' [ 64.655640][ T5820] cgroup: Unknown subsys name 'cpuset' [ 64.664239][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.035803][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.627895][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.643088][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.651151][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.659789][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.668373][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.675976][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.681743][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.686574][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.690934][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.706728][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.714658][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.722783][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.732295][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.738552][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.742334][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.747530][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.754218][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.765257][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.770584][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.775709][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.794348][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.796048][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.801645][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.817522][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.825974][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.396215][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 69.533743][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 69.601122][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 69.660534][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 69.755849][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 69.783182][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.790393][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.798194][ T5831] bridge_slave_0: entered allmulticast mode [ 69.805335][ T5831] bridge_slave_0: entered promiscuous mode [ 69.814586][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.821705][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.829211][ T5831] bridge_slave_1: entered allmulticast mode [ 69.836712][ T5831] bridge_slave_1: entered promiscuous mode [ 69.984952][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.997813][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.019351][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.026579][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.034172][ T5830] bridge_slave_0: entered allmulticast mode [ 70.041123][ T5830] bridge_slave_0: entered promiscuous mode [ 70.066296][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.073769][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.080915][ T5839] bridge_slave_0: entered allmulticast mode [ 70.088223][ T5839] bridge_slave_0: entered promiscuous mode [ 70.120363][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.127804][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.135249][ T5830] bridge_slave_1: entered allmulticast mode [ 70.143204][ T5830] bridge_slave_1: entered promiscuous mode [ 70.154925][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.162116][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.169568][ T5837] bridge_slave_0: entered allmulticast mode [ 70.176623][ T5837] bridge_slave_0: entered promiscuous mode [ 70.183950][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.191082][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.198551][ T5839] bridge_slave_1: entered allmulticast mode [ 70.206059][ T5839] bridge_slave_1: entered promiscuous mode [ 70.229138][ T5831] team0: Port device team_slave_0 added [ 70.237359][ T5831] team0: Port device team_slave_1 added [ 70.282350][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.289493][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.297085][ T5837] bridge_slave_1: entered allmulticast mode [ 70.304898][ T5837] bridge_slave_1: entered promiscuous mode [ 70.325550][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.361261][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.368835][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.376976][ T5842] bridge_slave_0: entered allmulticast mode [ 70.384164][ T5842] bridge_slave_0: entered promiscuous mode [ 70.406024][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.445138][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.458331][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.468011][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.475855][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.483146][ T5842] bridge_slave_1: entered allmulticast mode [ 70.490113][ T5842] bridge_slave_1: entered promiscuous mode [ 70.512456][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.534038][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.541005][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.567428][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.614574][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.638670][ T5839] team0: Port device team_slave_0 added [ 70.648373][ T5839] team0: Port device team_slave_1 added [ 70.655403][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.663382][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.689439][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.714729][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.727673][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.783350][ T5830] team0: Port device team_slave_0 added [ 70.813168][ T5840] Bluetooth: hci0: command tx timeout [ 70.813172][ T5834] Bluetooth: hci2: command tx timeout [ 70.816894][ T5837] team0: Port device team_slave_0 added [ 70.833932][ T5837] team0: Port device team_slave_1 added [ 70.840244][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.847575][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.873656][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.886381][ T5830] team0: Port device team_slave_1 added [ 70.892365][ T5840] Bluetooth: hci3: command tx timeout [ 70.892445][ T5834] Bluetooth: hci1: command tx timeout [ 70.897837][ T5847] Bluetooth: hci4: command tx timeout [ 70.906082][ T5842] team0: Port device team_slave_0 added [ 70.917035][ T5842] team0: Port device team_slave_1 added [ 70.933993][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.940949][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.967100][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.031235][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.038637][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.065162][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.126445][ T5831] hsr_slave_0: entered promiscuous mode [ 71.133160][ T5831] hsr_slave_1: entered promiscuous mode [ 71.150872][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.158048][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.184432][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.213934][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.220904][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.247549][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.260008][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.267105][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.293726][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.298111][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.306045][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.310832][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.317995][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.350055][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.369601][ T5839] hsr_slave_0: entered promiscuous mode [ 71.376232][ T5839] hsr_slave_1: entered promiscuous mode [ 71.383309][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 71.389115][ T5839] Cannot create hsr debugfs directory [ 71.416261][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.423438][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.449585][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.569510][ T5837] hsr_slave_0: entered promiscuous mode [ 71.576097][ T5837] hsr_slave_1: entered promiscuous mode [ 71.583005][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 71.588747][ T5837] Cannot create hsr debugfs directory [ 71.687475][ T5842] hsr_slave_0: entered promiscuous mode [ 71.694413][ T5842] hsr_slave_1: entered promiscuous mode [ 71.700430][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 71.706263][ T5842] Cannot create hsr debugfs directory [ 71.717895][ T5830] hsr_slave_0: entered promiscuous mode [ 71.725578][ T5830] hsr_slave_1: entered promiscuous mode [ 71.731576][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 71.737403][ T5830] Cannot create hsr debugfs directory [ 72.177697][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.211132][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.222031][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.245499][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.309854][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.320998][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.334450][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.356001][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.405413][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.431919][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.464444][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.487558][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.547686][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.561002][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.579396][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.615417][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.710349][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.737020][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.753832][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.768631][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.781154][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.828024][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.887523][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.897698][ T5847] Bluetooth: hci0: command tx timeout [ 72.903345][ T5840] Bluetooth: hci2: command tx timeout [ 72.913429][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.927210][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.934622][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.959955][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.969841][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.973087][ T5840] Bluetooth: hci3: command tx timeout [ 72.977006][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.982479][ T5847] Bluetooth: hci4: command tx timeout [ 72.994938][ T5840] Bluetooth: hci1: command tx timeout [ 73.026457][ T3474] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.033630][ T3474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.044831][ T3474] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.051951][ T3474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.093914][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.129740][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.148732][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.155917][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.191181][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.207923][ T3450] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.215103][ T3450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.256301][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.263418][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.297341][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.304599][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.367547][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.453967][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.510248][ T3474] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.517544][ T3474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.606724][ T3474] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.613933][ T3474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.737071][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.811613][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.929569][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.019978][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.035965][ T5839] veth0_vlan: entered promiscuous mode [ 74.089285][ T5839] veth1_vlan: entered promiscuous mode [ 74.117273][ T5837] veth0_vlan: entered promiscuous mode [ 74.185792][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.197119][ T5837] veth1_vlan: entered promiscuous mode [ 74.216510][ T5839] veth0_macvtap: entered promiscuous mode [ 74.261706][ T5839] veth1_macvtap: entered promiscuous mode [ 74.290415][ T5837] veth0_macvtap: entered promiscuous mode [ 74.330410][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.357057][ T5837] veth1_macvtap: entered promiscuous mode [ 74.377061][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.407225][ T1084] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.420486][ T1084] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.438916][ T1084] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.476008][ T1084] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.489415][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.502043][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.519895][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.558839][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.568939][ T3450] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.604190][ T3450] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.615398][ T3450] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.645129][ T5830] veth0_vlan: entered promiscuous mode [ 74.725815][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.734068][ T5842] veth0_vlan: entered promiscuous mode [ 74.741118][ T5842] veth1_vlan: entered promiscuous mode [ 74.749001][ T5830] veth1_vlan: entered promiscuous mode [ 74.757185][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.797758][ T5831] veth0_vlan: entered promiscuous mode [ 74.845081][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.870868][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.877942][ T5830] veth0_macvtap: entered promiscuous mode [ 74.891423][ T5831] veth1_vlan: entered promiscuous mode [ 74.917513][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.926592][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.937223][ T5830] veth1_macvtap: entered promiscuous mode [ 74.972854][ T5840] Bluetooth: hci2: command tx timeout [ 74.978337][ T5847] Bluetooth: hci0: command tx timeout [ 74.984655][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.995525][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.000163][ T5842] veth0_macvtap: entered promiscuous mode [ 75.027907][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.040240][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.053425][ T5847] Bluetooth: hci4: command tx timeout [ 75.058861][ T5840] Bluetooth: hci1: command tx timeout [ 75.058874][ T5834] Bluetooth: hci3: command tx timeout [ 75.063197][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.118104][ T5842] veth1_macvtap: entered promiscuous mode [ 75.210889][ T3450] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.230705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.240274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.285222][ T5949] ======================================================= [ 75.285222][ T5949] WARNING: The mand mount option has been deprecated and [ 75.285222][ T5949] and is ignored by this kernel. Remove the mand [ 75.285222][ T5949] option from the mount to silence this warning. [ 75.285222][ T5949] ======================================================= [ 75.298848][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.351117][ T3450] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.360976][ T3450] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.537911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.540833][ T3450] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.947489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.274435][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.310358][ T5831] veth0_macvtap: entered promiscuous mode [ 76.339524][ T3450] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.356567][ T3450] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.509219][ T3450] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.521024][ T3450] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.537366][ T5831] veth1_macvtap: entered promiscuous mode [ 77.076230][ T5847] Bluetooth: hci2: command tx timeout [ 77.081696][ T5840] Bluetooth: hci0: command tx timeout [ 77.133428][ T5840] Bluetooth: hci1: command tx timeout [ 77.138869][ T5840] Bluetooth: hci4: command tx timeout [ 77.144656][ T5847] Bluetooth: hci3: command tx timeout [ 77.381122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.412848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.688304][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.742405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.921047][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.986561][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.027574][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.056598][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.127543][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.137637][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.170841][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.176363][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.182168][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.201435][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.227114][ T5977] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11'. [ 78.280500][ T5977] Zero length message leads to an empty skb [ 78.293993][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.308213][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.403079][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.416104][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.474604][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.488284][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.583007][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.631694][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.815341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.802630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.264188][ T6028] binder: 6025:6028 ioctl c00c620f 200000019700 returned -22 [ 81.799727][ T121] cfg80211: failed to load regulatory.db [ 83.862459][ T6043] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.114372][ T6057] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.34'. [ 86.298417][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'. [ 86.536829][ T5839] [ 86.539188][ T5839] ============================================ [ 86.545329][ T5839] WARNING: possible recursive locking detected [ 86.551481][ T5839] 6.16.0-rc4-next-20250703-syzkaller #0 Not tainted [ 86.558058][ T5839] -------------------------------------------- [ 86.564202][ T5839] syz-executor/5839 is trying to acquire lock: [ 86.570346][ T5839] ffff88807e7948c8 (&sb->s_type->i_mutex_key#21){+.+.}-{4:4}, at: rpc_close_pipes+0x10a/0x730 [ 86.580641][ T5839] [ 86.580641][ T5839] but task is already holding lock: [ 86.588014][ T5839] ffff88807e7911c8 (&sb->s_type->i_mutex_key#21){+.+.}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 86.599262][ T5839] [ 86.599262][ T5839] other info that might help us debug this: [ 86.607309][ T5839] Possible unsafe locking scenario: [ 86.607309][ T5839] [ 86.614741][ T5839] CPU0 [ 86.618007][ T5839] ---- [ 86.621264][ T5839] lock(&sb->s_type->i_mutex_key#21); [ 86.626709][ T5839] lock(&sb->s_type->i_mutex_key#21); [ 86.632156][ T5839] [ 86.632156][ T5839] *** DEADLOCK *** [ 86.632156][ T5839] [ 86.640281][ T5839] May be due to missing lock nesting notation [ 86.640281][ T5839] [ 86.648584][ T5839] 4 locks held by syz-executor/5839: [ 86.653857][ T5839] #0: ffff88802d5e00e0 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 86.664065][ T5839] #1: ffff88805c4e18a0 (&sn->pipefs_sb_lock){+.+.}-{4:4}, at: rpc_kill_sb+0x77/0x190 [ 86.673630][ T5839] #2: ffffffff8f6d0e30 ((rpc_pipefs_notifier_list).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 86.685724][ T5839] #3: ffff88807e7911c8 (&sb->s_type->i_mutex_key#21){+.+.}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 86.697385][ T5839] [ 86.697385][ T5839] stack backtrace: [ 86.703275][ T5839] CPU: 1 UID: 0 PID: 5839 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250703-syzkaller #0 PREEMPT(full) [ 86.703294][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.703309][ T5839] Call Trace: [ 86.703315][ T5839] [ 86.703321][ T5839] dump_stack_lvl+0x189/0x250 [ 86.703344][ T5839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.703361][ T5839] ? __pfx__printk+0x10/0x10 [ 86.703375][ T5839] ? print_lock_name+0xde/0x100 [ 86.703407][ T5839] print_deadlock_bug+0x28b/0x2a0 [ 86.703425][ T5839] validate_chain+0x1a3f/0x2140 [ 86.703449][ T5839] __lock_acquire+0xab9/0xd20 [ 86.703466][ T5839] ? rpc_close_pipes+0x10a/0x730 [ 86.703481][ T5839] lock_acquire+0x120/0x360 [ 86.703494][ T5839] ? rpc_close_pipes+0x10a/0x730 [ 86.703513][ T5839] down_write+0x96/0x1f0 [ 86.703526][ T5839] ? rpc_close_pipes+0x10a/0x730 [ 86.703540][ T5839] ? __pfx_down_write+0x10/0x10 [ 86.703553][ T5839] ? __pfx_find_submount+0x10/0x10 [ 86.703566][ T5839] ? _raw_spin_unlock+0x28/0x50 [ 86.703581][ T5839] ? d_walk+0x6f4/0x780 [ 86.703594][ T5839] rpc_close_pipes+0x10a/0x730 [ 86.703609][ T5839] ? d_invalidate+0x204/0x260 [ 86.703623][ T5839] ? __pfx_rpc_close_pipes+0x10/0x10 [ 86.703642][ T5839] ? up_write+0x1c4/0x420 [ 86.703660][ T5839] ? __pfx_rpc_close_pipes+0x10/0x10 [ 86.703674][ T5839] __simple_recursive_removal+0x20b/0x510 [ 86.703691][ T5839] ? __pfx_rpc_close_pipes+0x10/0x10 [ 86.703707][ T5839] rpc_unlink+0x56/0x80 [ 86.703720][ T5839] rpc_pipefs_event+0xc0/0x170 [ 86.703734][ T5839] notifier_call_chain+0x1b3/0x3e0 [ 86.703753][ T5839] blocking_notifier_call_chain+0x6a/0x90 [ 86.703771][ T5839] rpc_kill_sb+0xd0/0x190 [ 86.703788][ T5839] deactivate_locked_super+0xb9/0x130 [ 86.703804][ T5839] cleanup_mnt+0x425/0x4c0 [ 86.703818][ T5839] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.703837][ T5839] task_work_run+0x1d1/0x260 [ 86.703850][ T5839] ? __pfx_task_work_run+0x10/0x10 [ 86.703862][ T5839] ? __x64_sys_umount+0x122/0x160 [ 86.703880][ T5839] ? exit_to_user_mode_loop+0x40/0x110 [ 86.703895][ T5839] exit_to_user_mode_loop+0xec/0x110 [ 86.703909][ T5839] do_syscall_64+0x2bd/0x3b0 [ 86.703921][ T5839] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.703938][ T5839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.703950][ T5839] ? clear_bhb_loop+0x60/0xb0 [ 86.703964][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.703976][ T5839] RIP: 0033:0x7f92aad8fc57 [ 86.703994][ T5839] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 86.704005][ T5839] RSP: 002b:00007ffef51f10b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 86.704019][ T5839] RAX: 0000000000000000 RBX: 00007f92aae10925 RCX: 00007f92aad8fc57 [ 86.704028][ T5839] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef51f1170 [ 86.704036][ T5839] RBP: 00007ffef51f1170 R08: 0000000000000000 R09: 0000000000000000 [ 86.704045][ T5839] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffef51f2200 [ 86.704053][ T5839] R13: 00007f92aae10925 R14: 00000000000150d6 R15: 00007ffef51f2240 [ 86.704068][ T5839]