last executing test programs: 1.97084544s ago: executing program 3 (id=4): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @typedef={0x1}]}, {0x0, [0x5f, 0x4f]}}, 0x0, 0x34, 0x0, 0xa}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) setuid(0xee01) r1 = semget$private(0x0, 0x4, 0x96) semop(r1, &(0x7f0000000440)=[{0x0, 0x203}, {}], 0x2) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000480)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x108}, 0x476d, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) semctl$GETZCNT(r1, 0x3, 0xf, &(0x7f0000000500)=""/190) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x7, 0x1, 0xf}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.490290352s ago: executing program 2 (id=3): r0 = semget$private(0x0, 0x4, 0x96) semop(r0, &(0x7f0000000440)=[{0x0, 0x203}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000480)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x108}, 0x476d, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb}) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f0000000500)=""/190) 1.454217576s ago: executing program 4 (id=5): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000800)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100522553d9fbdbdf2518000000"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x20008000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x3, 0xff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc974d000) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000dc0)={0xaa, 0x180}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000e00)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000e40)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000e80)='smaps\x00') read$FUSE(r5, &(0x7f0000000ec0)={0x2020}, 0x2020) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x84}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) socket$inet6(0xa, 0x3, 0xff) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000002f00)='./cgroup\x00', &(0x7f0000002f40), 0x1000040, &(0x7f0000002f80)={[{@mode={'mode', 0x3d, 0x1000}}]}) ioctl$VHOST_VDPA_GET_VRING_GROUP(r7, 0xc008af7b, &(0x7f0000000d80)={0x1, 0x9}) connect$inet6(r6, &(0x7f0000000c80)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) sendmsg(r6, &(0x7f0000000cc0)={0x0, 0x952c, &(0x7f0000000d00)=[{&(0x7f0000000d40)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 1.450362071s ago: executing program 0 (id=1): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000180)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) write$P9_RGETLOCK(r0, &(0x7f0000000040)=ANY=[], 0xffffff6a) write$binfmt_script(r0, &(0x7f0000000080), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={{0x14, 0x3e8}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}}], {0x14, 0x3e9}}, 0x3c}}, 0x0) 1.357235042s ago: executing program 1 (id=2): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x78, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4806}, 0x0) bind$inet6(r0, &(0x7f0000000640)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r0, 0xc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)={0x14, r5, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040811}, 0x800) 1.32844797s ago: executing program 4 (id=6): r0 = socket$inet6(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000007c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x80881000, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000980)}, {&(0x7f00000009c0)="35dd6955f30e5e1c2513b1c562112d7640ea1ead5252bec0c883187204ad405fa804cf797949cab27829b52c91", 0x2d}], 0x3, 0x0, 0x0, 0x40000}}], 0x1, 0x4000000) mknodat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0x2, 0x4) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000a40), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x2000010, &(0x7f0000000b00)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=0x0]) write$FUSE_INIT(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', 0x22801, 0x0) dup3(r5, r4, 0x80000) socket$kcm(0x10, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e1c, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000040000000400000010"], 0x48) fsmount(0xffffffffffffffff, 0x0, 0x84) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x9, &(0x7f00000004c0)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r7}, @generic={0xb7, 0x3, 0x0, 0x0, 0x18}, @generic={0x67, 0x3, 0x0, 0x0, 0x20}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0x0, 0x5, 0x0, 0x0, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r8, 0x0, 0xe, 0x0, &(0x7f0000000600)="11223344556677889900aabbccdd", 0x0, 0x800001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) 1.316448669s ago: executing program 0 (id=7): r0 = syz_open_dev$video(&(0x7f0000000000), 0x13d, 0x101000) r1 = socket$inet6(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x80881000, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="b4000000000000000000950074"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_settime(0x17, &(0x7f0000000780)) sendmmsg$inet6(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="35dd6955f30e5e1c2513b1c562112d7640ea1ead5252bec0c883187204ad405fa804cf797949cab27829b52c91", 0x2d}], 0x3, 0x0, 0x0, 0x40000}}], 0x1, 0x4000000) mknodat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x2, 0x4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2000010, &(0x7f0000000600)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=0x0]) write$FUSE_INIT(r5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x22801, 0x100) dup3(r6, r5, 0x80000) syslog(0x3, 0x0, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000140)={0x9, @output={0x1000, 0x0, {0x8, 0x7}, 0x4, 0x3}}) syslog(0xa, &(0x7f0000000040)=""/77, 0x4d) 1.015126608s ago: executing program 3 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000900)='27', 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000002c0), 0x80580, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd4(r1, &(0x7f0000000000)={[0xc000000000000000]}, 0x8, 0x800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000240), 0x10106, 0x2, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000280)=0x1, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) bind$rds(r5, &(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000480)=""/111, 0x6f}], 0x1, &(0x7f0000000500)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000340)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) 1.010222036s ago: executing program 1 (id=9): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000023c0)={0x5, 0xffff, 0x7, 0x81, 0x7, 0x4f}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000100), 0x26, 0x768, &(0x7f00000001c0)="$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") getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x0}) r5 = syz_open_dev$dvb_demux(&(0x7f0000002400), 0xfffffffffffffffe, 0xb76f6fa0f9007d02) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000002440)={0x2, {"063b149ac2eaecb8f1390f7dfe4b9967", "b875ae895001452c36ccc4f7c87bf399", "e5bc8c8a6f3e8cd40ab44d07bd6928e7"}, 0x9, 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x80}]}}]}, 0x38}}, 0xc840) sendmsg$nl_route_sched(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r3, &(0x7f0000000bc0), 0x0, 0x60, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./file0\x00', 0x40042, 0x1) recvmsg$unix(r7, 0x0, 0x20) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002080)=@o_path={&(0x7f0000002040)='./file0\x00', 0x0, 0x18, r2}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000d22bae", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x6, 0xd, &(0x7f0000002200)=ANY=[@ANYRESDEC=r2, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000800b7040000010000008500000033000000850000000700000095"], &(0x7f0000000a80)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002300)=@bpf_tracing={0x1a, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="1800000000800000000300000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000085100000070000004d33f4ffffffffff1845000004000000000000000000000085200000050000001800000000080000000000008f02000030190100fcffffffbf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001000)='GPL\x00', 0x5, 0x1000, &(0x7f0000001040)=""/4096, 0x40f00, 0x10, '\x00', r4, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x730c, 0xffffffffffffffff, 0x0, &(0x7f00000022c0)=[r8, r9], 0x0, 0x10, 0xc51}, 0x94) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000f40), 0x4000000000001f2, 0x0) chdir(&(0x7f0000000940)='./file0\x00') r11 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x0, 0x8) ioctl$FS_IOC_ENABLE_VERITY(r11, 0x40806685, &(0x7f00000009c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 538.023342ms ago: executing program 2 (id=10): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10) dup3(r0, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040811}, 0x800) 465.1734ms ago: executing program 4 (id=11): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r1, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8001}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x205}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="520033008000e100ffffffffffff080211000000505050505050000000000000000000003b"], 0x70}, 0x1, 0x0, 0x0, 0x880}, 0x0) 461.611301ms ago: executing program 0 (id=12): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x401, 0xfffffffa, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1705, 0x2046bbf}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0xba, &(0x7f0000000340)=""/186, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000004c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000005c0), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) recvmmsg(r2, &(0x7f0000000600), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.net/syz1\x00', 0x1ff) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000680)={0x80, 0x6, 0x2fe, 0xe5, 0xec, 0x0, 0x0}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='status\x00') read$FUSE(r4, &(0x7f0000000700)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000002740)={0x26, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 454.511355ms ago: executing program 1 (id=13): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4000) mknodat$md(0xffffffffffffff9c, &(0x7f0000000600)='./md0\x00', 0x6180, 0x0) r2 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000640)='./md0\x00', 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0xf6, 0xa) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x720, 0x0, 0x0) ioctl$SET_ARRAY_INFO(r2, 0x40480923, &(0x7f0000000680)={0x0, 0x1, 0x0, 0x6, 0xa, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10301, 0x10000}) ioctl$ADD_NEW_DISK(r2, 0x40140921, &(0x7f0000000700)={0x7, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r2, 0x40140921, &(0x7f0000000740)={0x16, {0x1, 0x1}, 0x1}) ioctl$RUN_ARRAY(r2, 0x400c0930, 0x0) socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7001}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x9, 0x101, 0x2e4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x1, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @multicast}) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000180)=0xc, 0x6, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 446.026457ms ago: executing program 2 (id=14): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x800000006fffffff, 0x42640) pipe2(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r0, 0x0, r1, 0x0, 0xfa, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000dc0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000e00)='./proc\x00', &(0x7f0000000e40)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000ec0)='100', 0x3) mkdirat(r2, &(0x7f0000000180)='\x00', 0x1e8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000580), 0x3a, 0x10, &(0x7f00000005c0), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000640)='./proc\x00', &(0x7f0000000680)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r4, &(0x7f0000000700)='7', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0xded0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) mount(0x0, &(0x7f0000000f40)='./dev\x00', &(0x7f0000000f80)='devtmpfs\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./dev\x00', 0x0, 0x10}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./pipe\x00', 0x1ff) read$ublk_bdev(r2, 0x0, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) mount(0x0, &(0x7f0000000100)='./pipe\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) 349.637597ms ago: executing program 2 (id=15): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@block_validity}, {@nobh}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0xd}}, {@bh}, {@bh}]}, 0xfc, 0x56f, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000c00)='\f', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x1d3042, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, r3, 0x1, 0x170bf2a, 0x25dfdc01, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4920}, 0x20048e4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_io_uring_setup(0x5f38, &(0x7f0000000300)={0x0, 0xf930, 0x80, 0x3, 0x355}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x64) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r4, 0x29, 0x10, 0x0, &(0x7f0000000d40)) 334.574101ms ago: executing program 4 (id=16): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x40, 0x400000) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x2, @pix={0x4, 0x8, 0x38416761, 0x6, 0x7, 0x2, 0xa, 0x1000, 0x0, 0x6, 0x1, 0x6}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0xc201}) openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x40, 0x16f) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000740)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000007c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000880), 0x4000087, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) execve(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000940)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000980)='./file0\x00', 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents64(r7, 0x0, 0x22) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r7) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r8, 0x208, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x854}, 0x4000880) 0s ago: executing program 3 (id=17): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @typedef={0x1}]}, {0x0, [0x5f, 0x4f]}}, 0x0, 0x34, 0x0, 0xa}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) setuid(0xee01) r1 = semget$private(0x0, 0x4, 0x96) semop(r1, &(0x7f0000000440)=[{0x0, 0x203}, {}], 0x2) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000480)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x108}, 0x476d, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000280), 0x10106, 0x2, 0x0) semctl$GETZCNT(r1, 0x3, 0xf, &(0x7f0000000500)=""/190) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.83' (ED25519) to the list of known hosts. [ 21.254367][ T4682] cgroup: Unknown subsys name 'net' [ 21.393986][ T4682] cgroup: Unknown subsys name 'cpuset' [ 21.396288][ T4682] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 21.564878][ T4682] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 22.415873][ T4722] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 22.416245][ T4722] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 22.416398][ T4722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 22.416479][ T4722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 22.416720][ T4722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 22.416974][ T4722] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 22.417258][ T4722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 22.417328][ T4722] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 22.417642][ T4722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 22.417818][ T4722] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 22.418158][ T4722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 22.418282][ T4722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 22.418382][ T4722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 22.418499][ T4722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 22.418599][ T4722] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 22.419840][ T4722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 22.419985][ T4722] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 22.420094][ T4722] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 22.420298][ T4722] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 22.420340][ T4722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 22.421230][ T4722] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 22.421342][ T4722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 22.421541][ T4722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 22.421592][ T4722] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 22.421690][ T4722] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 22.640204][ T4709] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 22.644528][ T4708] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.645272][ T4708] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.645667][ T4708] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.647864][ T4710] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 22.679028][ T4716] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 22.679515][ T4718] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 22.707811][ T4708] infiniband rxe0: set active [ 22.708535][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.709236][ T4708] infiniband rxe0: added rxe_eth0 [ 22.729832][ T4708] RDS/IB: rxe0: added [ 22.729897][ T4708] smc: adding ib device rxe0 with port count 1 [ 22.729919][ T4708] smc: ib device rxe0 port 1 has no pnetid [ 22.738446][ T4716] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.744273][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.803428][ T4708] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.818684][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.859048][ T4708] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.917064][ T4708] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.954246][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.954288][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.954348][ T4709] bridge_slave_0: entered allmulticast mode [ 22.954864][ T4709] bridge_slave_0: entered promiscuous mode [ 22.964583][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.964619][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.964671][ T4709] bridge_slave_1: entered allmulticast mode [ 22.966388][ T4709] bridge_slave_1: entered promiscuous mode [ 22.973837][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.973937][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.973963][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.974025][ T4710] bridge_slave_0: entered allmulticast mode [ 22.974410][ T4710] bridge_slave_0: entered promiscuous mode [ 22.975151][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.975172][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.975218][ T4710] bridge_slave_1: entered allmulticast mode [ 22.975584][ T4710] bridge_slave_1: entered promiscuous mode [ 22.981662][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.983167][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.989471][ T4710] team0: Port device team_slave_0 added [ 22.990185][ T4710] team0: Port device team_slave_1 added [ 22.996168][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.996176][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.996189][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.996992][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.996999][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.997015][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.006660][ T4710] hsr_slave_0: entered promiscuous mode [ 23.006973][ T4710] hsr_slave_1: entered promiscuous mode [ 23.029640][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.043683][ T4708] rxe_eth0 speed is unknown, defaulting to 1000 [ 23.051472][ T4709] team0: Port device team_slave_0 added [ 23.053003][ T4709] team0: Port device team_slave_1 added [ 23.087290][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.087303][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.087315][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.089066][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.089074][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.089086][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.112151][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.112207][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.112333][ T4718] bridge_slave_0: entered allmulticast mode [ 23.112836][ T4718] bridge_slave_0: entered promiscuous mode [ 23.113584][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.113606][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.113851][ T4718] bridge_slave_1: entered allmulticast mode [ 23.114208][ T4718] bridge_slave_1: entered promiscuous mode [ 23.120380][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.121254][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.127044][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.127069][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.127117][ T4716] bridge_slave_0: entered allmulticast mode [ 23.127469][ T4716] bridge_slave_0: entered promiscuous mode [ 23.128246][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.128267][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.128347][ T4716] bridge_slave_1: entered allmulticast mode [ 23.128693][ T4716] bridge_slave_1: entered promiscuous mode [ 23.147760][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.150755][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.160268][ T4709] hsr_slave_0: entered promiscuous mode [ 23.160558][ T4709] hsr_slave_1: entered promiscuous mode [ 23.160743][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 23.160751][ T4709] Cannot create hsr debugfs directory [ 23.161688][ T4718] team0: Port device team_slave_0 added [ 23.183150][ T4716] team0: Port device team_slave_0 added [ 23.183867][ T4716] team0: Port device team_slave_1 added [ 23.191624][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.191633][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.191646][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.192169][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.192175][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.192188][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.195820][ T4718] team0: Port device team_slave_1 added [ 23.201417][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.201425][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.201436][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.201985][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.201992][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.202005][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.211925][ T4718] hsr_slave_0: entered promiscuous mode [ 23.212215][ T4718] hsr_slave_1: entered promiscuous mode [ 23.213080][ T4718] debugfs: 'hsr0' already exists in 'hsr' [ 23.213089][ T4718] Cannot create hsr debugfs directory [ 23.254458][ T4710] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 23.255760][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.256081][ T4710] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 23.256993][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.266921][ T4710] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 23.269566][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.269896][ T4710] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 23.278231][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.304300][ T4716] hsr_slave_0: entered promiscuous mode [ 23.304629][ T4716] hsr_slave_1: entered promiscuous mode [ 23.304818][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 23.304826][ T4716] Cannot create hsr debugfs directory [ 23.364634][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.364670][ T4710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.364895][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.364924][ T4710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.369359][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.369391][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.369481][ T4708] bridge_slave_0: entered allmulticast mode [ 23.369895][ T4708] bridge_slave_0: entered promiscuous mode [ 23.371900][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.371951][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.372010][ T4708] bridge_slave_1: entered allmulticast mode [ 23.372392][ T4708] bridge_slave_1: entered promiscuous mode [ 23.380886][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.381882][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.392673][ T4709] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 23.393911][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.394619][ T4709] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 23.396157][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.409963][ T4709] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 23.411010][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.411318][ T4709] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 23.412150][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.421561][ T4708] team0: Port device team_slave_0 added [ 23.428681][ T4708] team0: Port device team_slave_1 added [ 23.445711][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.445741][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.445808][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.445836][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.449039][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.449047][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.449060][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.449672][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.449678][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.449689][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.455809][ T4718] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 23.458144][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.458452][ T4718] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 23.459502][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.488385][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.488559][ T4718] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 23.489622][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.491437][ T4718] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 23.492349][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.500636][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.504323][ T4708] hsr_slave_0: entered promiscuous mode [ 23.504631][ T4708] hsr_slave_1: entered promiscuous mode [ 23.504844][ T4708] debugfs: 'hsr0' already exists in 'hsr' [ 23.504851][ T4708] Cannot create hsr debugfs directory [ 23.512075][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.515578][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.516495][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.517611][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.518967][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.536919][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.548030][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.548067][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.549712][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.549738][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.566263][ T4716] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 23.567251][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.568272][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.568301][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.568695][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.568715][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.583242][ T4716] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 23.584412][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.598348][ T4716] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 23.599632][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.600394][ T4716] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 23.601440][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.605421][ T4710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.676169][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.680220][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.682285][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.699447][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.704903][ T4708] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 23.707858][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.709283][ T1301] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.709309][ T1301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.709916][ T1301] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.709940][ T1301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.710505][ T1301] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.710536][ T1301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.714205][ T1301] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.714232][ T1301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.722059][ T4718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 23.722071][ T4718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.725478][ T4708] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 23.726569][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.739369][ T4716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 23.739382][ T4716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.748635][ T4708] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 23.749632][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.750873][ T4708] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 23.756594][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.837745][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.840140][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.851599][ T4710] veth0_vlan: entered promiscuous mode [ 23.856339][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.860744][ T1498] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.860774][ T1498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.861330][ T1498] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.861351][ T1498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.884183][ T4710] veth1_vlan: entered promiscuous mode [ 23.926132][ T4710] veth0_macvtap: entered promiscuous mode [ 23.927869][ T4710] veth1_macvtap: entered promiscuous mode [ 23.937109][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.952072][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.965236][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.995171][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.003295][ T4895] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.003368][ T4895] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.003386][ T4895] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.003402][ T4895] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.023902][ T1498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.023915][ T1498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.037772][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.048711][ T4718] veth0_vlan: entered promiscuous mode [ 24.049379][ T1498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.049389][ T1498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.053600][ T4718] veth1_vlan: entered promiscuous mode [ 24.088647][ T4716] veth0_vlan: entered promiscuous mode [ 24.095130][ T4718] veth0_macvtap: entered promiscuous mode [ 24.098938][ T4718] veth1_macvtap: entered promiscuous mode [ 24.111045][ T4716] veth1_vlan: entered promiscuous mode [ 24.115723][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.116956][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.152906][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.152990][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.153008][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.153024][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.154622][ T4716] veth0_macvtap: entered promiscuous mode [ 24.160626][ T4709] veth0_vlan: entered promiscuous mode [ 24.176590][ T4716] veth1_macvtap: entered promiscuous mode [ 24.180247][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.181215][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.188632][ T4709] veth1_vlan: entered promiscuous mode [ 24.189873][ T4710] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.206903][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.224399][ T1498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.224413][ T1498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.226613][ T4709] veth0_macvtap: entered promiscuous mode [ 24.249725][ T4709] veth1_macvtap: entered promiscuous mode [ 24.260274][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.260286][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.262592][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.262620][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.262639][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.262656][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.265128][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.277003][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.313332][ T3639] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.313371][ T3639] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.313392][ T3639] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.313408][ T3639] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.348387][ T4895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.348396][ T4895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.364645][ T4708] veth0_vlan: entered promiscuous mode [ 24.374709][ T4895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.374722][ T4895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.383728][ T4708] veth1_vlan: entered promiscuous mode [ 24.411034][ T4708] veth0_macvtap: entered promiscuous mode [ 24.447022][ T4918] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 24.447022][ T4918] The task syz.3.4 (4918) triggered the difference, watch for misbehavior. [ 24.473576][ T4724] Bluetooth: hci3: command tx timeout [ 24.473814][ T4724] Bluetooth: hci0: command tx timeout [ 24.473973][ T4724] Bluetooth: hci1: command tx timeout [ 24.474169][ T4724] Bluetooth: hci4: command tx timeout [ 24.475642][ T4715] Bluetooth: hci2: command tx timeout [ 24.614487][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.614511][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.627048][ T4708] veth1_macvtap: entered promiscuous mode [ 24.634905][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.634916][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.637410][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.643428][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.682527][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.682556][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.682572][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.682586][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.708861][ T1498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.708874][ T1498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.739789][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.739806][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.749839][ T4927] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 24.762370][ T4928] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 24.767763][ T4928] ======================================================= [ 24.767763][ T4928] WARNING: The mand mount option has been deprecated and [ 24.767763][ T4928] and is ignored by this kernel. Remove the mand [ 24.767763][ T4928] option from the mount to silence this warning. [ 24.767763][ T4928] ======================================================= [ 24.833059][ T1498] IPVS: starting estimator thread 0... [ 25.133511][ T4940] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 25.152526][ T4934] IPVS: using max 60 ests per chain, 144000 per kthread [ 25.209401][ T4944] loop1: detected capacity change from 0 to 2048 [ 25.251902][ T4944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 25.678019][ T4944] fs-verity (loop1, inode 13): Error -28 writing Merkle tree block 22912 [ 25.678063][ T4944] fs-verity (loop1, inode 13): Error -28 building Merkle tree [ 25.743395][ T4958] FAULT_INJECTION: forcing a failure. [ 25.743395][ T4958] name fail_futex, interval 1, probability 0, space 0, times 1 [ 25.743420][ T4958] CPU: 0 UID: 0 PID: 4958 Comm: syz.2.14 Tainted: G L syzkaller #0 PREEMPT [ 25.743434][ T4958] Tainted: [L]=SOFTLOCKUP [ 25.743437][ T4958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 25.743442][ T4958] Call trace: [ 25.743445][ T4958] show_stack+0x2c/0x3c (C) [ 25.743460][ T4958] __dump_stack+0x30/0x40 [ 25.743468][ T4958] dump_stack_lvl+0xd8/0x12c [ 25.743476][ T4958] dump_stack+0x1c/0x28 [ 25.743483][ T4958] should_fail_ex+0x3fc/0x570 [ 25.743502][ T4958] should_fail+0x14/0x24 [ 25.743515][ T4958] get_futex_key+0x1e0/0x118c [ 25.743526][ T4958] futex_wait_setup+0x58/0x674 [ 25.743537][ T4958] __futex_wait+0x11c/0x2b8 [ 25.743549][ T4958] futex_wait+0x108/0x2c0 [ 25.743560][ T4958] do_futex+0x320/0x378 [ 25.743570][ T4958] __arm64_sys_futex+0x2e4/0x418 [ 25.743581][ T4958] invoke_syscall+0x98/0x244 [ 25.743590][ T4958] el0_svc_common+0xec/0x23c [ 25.743598][ T4958] do_el0_svc+0x4c/0x5c [ 25.743605][ T4958] el0_svc+0x60/0x1d8 [ 25.743615][ T4958] el0t_64_sync_handler+0x44/0x104 [ 25.743625][ T4958] el0t_64_sync+0x198/0x19c [ 25.747699][ T4958] FAULT_INJECTION: forcing a failure. [ 25.747699][ T4958] name fail_futex, interval 1, probability 0, space 0, times 0 [ 25.747712][ T4958] CPU: 0 UID: 0 PID: 4958 Comm: syz.2.14 Tainted: G L syzkaller #0 PREEMPT [ 25.747724][ T4958] Tainted: [L]=SOFTLOCKUP [ 25.747727][ T4958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 25.747732][ T4958] Call trace: [ 25.747734][ T4958] show_stack+0x2c/0x3c (C) [ 25.747746][ T4958] __dump_stack+0x30/0x40 [ 25.747754][ T4958] dump_stack_lvl+0xd8/0x12c [ 25.747761][ T4958] dump_stack+0x1c/0x28 [ 25.747769][ T4958] should_fail_ex+0x3fc/0x570 [ 25.747782][ T4958] should_fail+0x14/0x24 [ 25.747794][ T4958] get_futex_key+0x1e0/0x118c [ 25.747804][ T4958] futex_wake+0x10c/0x594 [ 25.747815][ T4958] do_futex+0x2c4/0x378 [ 25.747826][ T4958] __arm64_sys_futex+0x2e4/0x418 [ 25.747837][ T4958] invoke_syscall+0x98/0x244 [ 25.747845][ T4958] el0_svc_common+0xec/0x23c [ 25.747852][ T4958] do_el0_svc+0x4c/0x5c [ 25.747860][ T4958] el0_svc+0x60/0x1d8 [ 25.747869][ T4958] el0t_64_sync_handler+0x44/0x104 [ 25.747879][ T4958] el0t_64_sync+0x198/0x19c [ 25.834315][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.146040][ T4966] loop2: detected capacity change from 0 to 1024 [ 26.147755][ T4966] EXT4-fs: Ignoring removed nobh option [ 26.147778][ T4966] EXT4-fs: Ignoring removed bh option [ 26.147785][ T4966] EXT4-fs: Ignoring removed bh option [ 26.159626][ T4966] EXT4-fs (loop2): stripe (13) is not aligned with cluster size (16), stripe is disabled [ 26.213215][ T4970] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 26.213250][ T4970] block device autoloading is deprecated and will be removed. [ 26.223345][ T4966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 26.414123][ T4975] process 'syz.4.16' launched './file0' with NULL argv: empty string added [ 27.222139][ T4720] Bluetooth: hci4: command tx timeout [ 27.222173][ T4720] Bluetooth: hci1: command tx timeout [ 27.222190][ T4720] Bluetooth: hci0: command tx timeout [ 27.222205][ T4720] Bluetooth: hci3: command tx timeout [ 27.222316][ T4715] Bluetooth: hci2: command tx timeout [ 27.234532][ T4978] Injecting memory failure for pfn 0x11f0bc at process virtual address 0x20000000 [ 27.248279][ T4978] Memory failure: 0x11f0bc: recovery action for clean LRU page: Recovered [ 27.248300][ T4978] Injecting memory failure for pfn 0x11f53b at process virtual address 0x20001000 [ 27.248585][ T4978] Memory failure: 0x11f53b: corrupted page was clean: dropped without side effects [ 27.248712][ T4978] Memory failure: 0x11f53b: recovery action for clean LRU page: Recovered [ 27.248724][ T4978] Injecting memory failure for pfn 0x11f0be at process virtual address 0x20002000 [ 27.248847][ T4978] Memory failure: 0x11f0be: corrupted page was clean: dropped without side effects [ 27.248879][ T4978] Memory failure: 0x11f0be: recovery action for clean LRU page: Recovered [ 27.385660][ T4980] syzkaller0: entered promiscuous mode [ 27.385678][ T4980] syzkaller0: entered allmulticast mode [ 27.507310][ T4977] [ 27.507874][ T4977] ====================================================== [ 27.509507][ T4977] WARNING: possible circular locking dependency detected [ 27.511127][ T4977] syzkaller #0 Tainted: G L [ 27.512511][ T4977] ------------------------------------------------------ [ 27.514132][ T4977] syz.1.13/4977 is trying to acquire lock: [ 27.515433][ T4977] ffff800089e4c0e0 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x3c/0x158 [ 27.517463][ T4977] [ 27.517463][ T4977] but task is already holding lock: [ 27.519103][ T4977] ffff0000f79ae358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_suspend_and_lock+0x4c/0xd8 [ 27.521511][ T4977] [ 27.521511][ T4977] which lock already depends on the new lock. [ 27.521511][ T4977] [ 27.523891][ T4977] [ 27.523891][ T4977] the existing dependency chain (in reverse order) is: [ 27.525759][ T4977] [ 27.525759][ T4977] -> #2 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 27.527444][ T4977] __mutex_lock+0x164/0x10b8 [ 27.528446][ T4977] mutex_lock_nested+0x24/0x30 [ 27.529558][ T4977] md_alloc+0x670/0xa18 [ 27.530554][ T4977] md_alloc_and_put+0x28/0x84 [ 27.531797][ T4977] md_probe+0x6c/0x88 [ 27.532844][ T4977] blk_probe_dev+0x12c/0x158 [ 27.533845][ T4977] blk_request_module+0x24/0xc0 [ 27.534974][ T4977] blkdev_get_no_open+0x4c/0xf8 [ 27.536196][ T4977] blkdev_open+0xfc/0x408 [ 27.537259][ T4977] do_dentry_open+0x5bc/0xfb4 [ 27.538278][ T4977] vfs_open_consume+0x54/0x2ec [ 27.539226][ T4977] path_openat+0x1098/0x1910 [ 27.540243][ T4977] do_file_open+0x1c8/0x2e8 [ 27.541231][ T4977] do_sys_openat2+0x114/0x1ec [ 27.542300][ T4977] do_sys_open+0xb0/0xe0 [ 27.543302][ T4977] __arm64_sys_openat+0xa8/0xc4 [ 27.544429][ T4977] invoke_syscall+0x98/0x244 [ 27.545493][ T4977] el0_svc_common+0xec/0x23c [ 27.546561][ T4977] do_el0_svc+0x4c/0x5c [ 27.547492][ T4977] el0_svc+0x60/0x1d8 [ 27.548382][ T4977] el0t_64_sync_handler+0x44/0x104 [ 27.549548][ T4977] el0t_64_sync+0x198/0x19c [ 27.550593][ T4977] [ 27.550593][ T4977] -> #1 (disks_mutex){+.+.}-{4:4}: [ 27.552144][ T4977] __mutex_lock+0x164/0x10b8 [ 27.553242][ T4977] mutex_lock_nested+0x24/0x30 [ 27.554366][ T4977] md_alloc+0x54/0xa18 [ 27.555374][ T4977] md_alloc_and_put+0x28/0x84 [ 27.556445][ T4977] md_probe+0x6c/0x88 [ 27.557279][ T4977] blk_probe_dev+0x12c/0x158 [ 27.558237][ T4977] blk_request_module+0x24/0xc0 [ 27.559231][ T4977] blkdev_get_no_open+0x4c/0xf8 [ 27.560197][ T4977] blkdev_open+0xfc/0x408 [ 27.561099][ T4977] do_dentry_open+0x5bc/0xfb4 [ 27.562098][ T4977] vfs_open_consume+0x54/0x2ec [ 27.563079][ T4977] path_openat+0x1098/0x1910 [ 27.564101][ T4977] do_file_open+0x1c8/0x2e8 [ 27.565083][ T4977] do_sys_openat2+0x114/0x1ec [ 27.566155][ T4977] do_sys_open+0xb0/0xe0 [ 27.567133][ T4977] __arm64_sys_openat+0xa8/0xc4 [ 27.568257][ T4977] invoke_syscall+0x98/0x244 [ 27.569325][ T4977] el0_svc_common+0xec/0x23c [ 27.570396][ T4977] do_el0_svc+0x4c/0x5c [ 27.571379][ T4977] el0_svc+0x60/0x1d8 [ 27.572323][ T4977] el0t_64_sync_handler+0x44/0x104 [ 27.573518][ T4977] el0t_64_sync+0x198/0x19c [ 27.574570][ T4977] [ 27.574570][ T4977] -> #0 (major_names_lock){+.+.}-{4:4}: [ 27.576059][ T4977] __lock_acquire+0x1660/0x2b08 [ 27.577258][ T4977] lock_acquire+0x13c/0x320 [ 27.578326][ T4977] __mutex_lock+0x164/0x10b8 [ 27.579449][ T4977] mutex_lock_nested+0x24/0x30 [ 27.580597][ T4977] blk_probe_dev+0x3c/0x158 [ 27.581651][ T4977] blk_request_module+0x24/0xc0 [ 27.582740][ T4977] blkdev_get_no_open+0x4c/0xf8 [ 27.583787][ T4977] bdev_file_open_by_dev+0x80/0x1d8 [ 27.584925][ T4977] md_import_device+0xfc/0x354 [ 27.585998][ T4977] md_add_new_disk+0x35c/0x144c [ 27.587090][ T4977] md_ioctl+0x1d78/0x23e4 [ 27.588024][ T4977] blkdev_ioctl+0x574/0x904 [ 27.588967][ T4977] __arm64_sys_ioctl+0x154/0x1cc [ 27.590070][ T4977] invoke_syscall+0x98/0x244 [ 27.591056][ T4977] el0_svc_common+0xec/0x23c [ 27.592079][ T4977] do_el0_svc+0x4c/0x5c [ 27.592971][ T4977] el0_svc+0x60/0x1d8 [ 27.593929][ T4977] el0t_64_sync_handler+0x44/0x104 [ 27.595120][ T4977] el0t_64_sync+0x198/0x19c [ 27.596209][ T4977] [ 27.596209][ T4977] other info that might help us debug this: [ 27.596209][ T4977] [ 27.598417][ T4977] Chain exists of: [ 27.598417][ T4977] major_names_lock --> disks_mutex --> &mddev->reconfig_mutex [ 27.598417][ T4977] [ 27.601359][ T4977] Possible unsafe locking scenario: [ 27.601359][ T4977] [ 27.602779][ T4977] CPU0 CPU1 [ 27.603937][ T4977] ---- ---- [ 27.605116][ T4977] lock(&mddev->reconfig_mutex); [ 27.606204][ T4977] lock(disks_mutex); [ 27.607659][ T4977] lock(&mddev->reconfig_mutex); [ 27.609331][ T4977] lock(major_names_lock); [ 27.610336][ T4977] [ 27.610336][ T4977] *** DEADLOCK *** [ 27.610336][ T4977] [ 27.612058][ T4977] locks held by syz.1.13/4977: 1, last CPU#0: [ 27.613344][ T4977] #0: ffff0000f79ae358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_suspend_and_lock+0x4c/0xd8 [ 27.615748][ T4977] [ 27.615748][ T4977] stack backtrace: [ 27.617053][ T4977] CPU: 0 UID: 0 PID: 4977 Comm: syz.1.13 Tainted: G L syzkaller #0 PREEMPT [ 27.619376][ T4977] Tainted: [L]=SOFTLOCKUP [ 27.620350][ T4977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 27.622710][ T4977] Call trace: [ 27.623460][ T4977] show_stack+0x2c/0x3c (C) [ 27.624517][ T4977] __dump_stack+0x30/0x40 [ 27.625489][ T4977] dump_stack_lvl+0xd8/0x12c [ 27.626457][ T4977] dump_stack+0x1c/0x28 [ 27.627233][ T4977] print_circular_bug+0x328/0x330 [ 27.628306][ T4977] check_noncircular+0x158/0x174 [ 27.629374][ T4977] __lock_acquire+0x1660/0x2b08 [ 27.630412][ T4977] lock_acquire+0x13c/0x320 [ 27.631399][ T4977] __mutex_lock+0x164/0x10b8 [ 27.632348][ T4977] mutex_lock_nested+0x24/0x30 [ 27.633335][ T4977] blk_probe_dev+0x3c/0x158 [ 27.634306][ T4977] blk_request_module+0x24/0xc0 [ 27.635371][ T4977] blkdev_get_no_open+0x4c/0xf8 [ 27.636431][ T4977] bdev_file_open_by_dev+0x80/0x1d8 [ 27.637626][ T4977] md_import_device+0xfc/0x354 [ 27.638733][ T4977] md_add_new_disk+0x35c/0x144c [ 27.639858][ T4977] md_ioctl+0x1d78/0x23e4 [ 27.640846][ T4977] blkdev_ioctl+0x574/0x904 [ 27.641728][ T4977] __arm64_sys_ioctl+0x154/0x1cc [ 27.642771][ T4977] invoke_syscall+0x98/0x244 [ 27.643711][ T4977] el0_svc_common+0xec/0x23c [ 27.644713][ T4977] do_el0_svc+0x4c/0x5c [ 27.645627][ T4977] el0_svc+0x60/0x1d8 [ 27.646468][ T4977] el0t_64_sync_handler+0x44/0x104 [ 27.647565][ T4977] el0t_64_sync+0x198/0x19c [ 27.683111][ T4977] md: could not open device unknown-block(0,0). [ 27.683140][ T4977] md: error, md_import_device() returned -6 [ 27.687037][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.694491][ T4970] md: could not open device unknown-block(0,0). [ 27.694527][ T4970] md: error, md_import_device() returned -6 [ 29.273070][ T4724] Bluetooth: hci3: command tx timeout [ 29.273093][ T4724] Bluetooth: hci0: command tx timeout [ 29.273106][ T4724] Bluetooth: hci1: command tx timeout [ 29.273118][ T4724] Bluetooth: hci4: command tx timeout [ 29.273202][ T4715] Bluetooth: hci2: command tx timeout [ 31.352606][ T4724] Bluetooth: hci1: command tx timeout [ 31.352618][ T4723] Bluetooth: hci0: command tx timeout [ 31.352631][ T4724] Bluetooth: hci3: command tx timeout [ 31.352655][ T4720] Bluetooth: hci4: command tx timeout [ 31.352672][ T4715] Bluetooth: hci2: command tx timeout [ 34.102727][ T26] rxe_eth0 speed is unknown, defaulting to 1000