last executing test programs: 15.846591314s ago: executing program 0 (id=336): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x20101) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) 14.324539004s ago: executing program 0 (id=342): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, 0x0, 0x0) creat(0x0, 0x24) setitimer(0x2, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, &(0x7f00000001c0)) msgget$private(0x0, 0x4) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffb]}, 0x0, 0x8) read$dsp(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) inotify_init1(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) fallocate(r1, 0x0, 0x200000000000003, 0x6) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0], 0x38}, 0x1, 0x0, 0x0, 0x20044001}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x4040000) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) modify_ldt$write2(0x11, &(0x7f0000000200)={0x77b, 0x0, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000002140)=""/4098, 0xfffffffffffffe8e) 12.54954128s ago: executing program 0 (id=345): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000003740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) waitid$P_PIDFD(0x3, r1, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) mount(&(0x7f0000000080)=@filename='127.0.0.1:file0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='nfs4\x00', 0x0, &(0x7f0000000140)='addr=127.0.0.1,port=2049,clientaddr=127.0.0.1,minorversion=1\x00') 11.521510898s ago: executing program 0 (id=353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r2, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 8.982282334s ago: executing program 4 (id=358): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000500)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, 0x0) 8.746304207s ago: executing program 0 (id=361): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x24, 0x0, 0xe000, 0x1, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e24, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x24}}}}}}}, 0x0) 8.667351871s ago: executing program 2 (id=362): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/x86/topo/domains\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x700, 0x700, 0x2c}, 0x48) write(r1, &(0x7f0000000070)='syz0:', 0x5) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xd01c4813, &(0x7f00000000c0)={0x80000002, 0xffffffff, 0x2, 0x1, 0xfffff7fc, 0x3e}) 8.192997165s ago: executing program 0 (id=364): syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) set_mempolicy(0x3, &(0x7f0000000080)=0x2, 0x8) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) unshare(0x62040200) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) set_mempolicy(0x0, 0x0, 0x7) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 7.292399138s ago: executing program 1 (id=365): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x20101) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 7.21180975s ago: executing program 3 (id=366): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setresuid(0xee01, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x140}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, 0x0, 0x6, 0x2) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x4000000000f, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x9861, 0x42c04}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x4}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x24) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r2 = openat$tun(0xffffff9c, 0x0, 0x804900, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000001c0)={'virt_wifi0\x00', @link_local}) 7.128890367s ago: executing program 4 (id=367): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="17830000000000000415000002dcca70a464000000bd2458583a258d765c7e2fe5cb0db7feac1aaa3386b48c6c7ded5bc9f66dc1f58c145a363ce50ab0b28b69485255b30a44d976a363ce68cd02e2245a9f0a33fab711d116a1aa8dc4a9da567f0469d067151f94dc6b5afe025d530787c7c8102226190a2b3161ed414684c0ef9b0ea367ad22c7e6e8596885fcdc4a595e4b089e5764db52525323886b38e8f1cdabfa8bde54b647d648f5a462e017729665ad08c7a34901d9d56cfcaaced9e29ee92baaad214347167accd8ebff806bea1e2e0d3020af070c33dce506f19c68f1ef3afb8085ca89e7e07e08fcb94a7287c9b529dfaf", @ANYRES32, @ANYBLOB="ee6b5fd600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4080) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000006, 0x14032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl(r2, 0xc048aeca, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101202) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x5422) syz_emit_ethernet(0x30a, &(0x7f0000000d00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x2d4, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x500, 0x26000000, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af"}, {0x0, 0x6, "0000000566994ff111397b4a8840491bae50dd6fc1f9dd74244c6faa519bda83168fc5186a3ff03c13a185e1a664d5e4"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a70507000000ddde250bff5b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200000000000000000000000000008879e66485201a0015ca83747357a02745000400"/55}]}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044080}, 0x800) socket$l2tp(0x2, 0x2, 0x73) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) 7.045512617s ago: executing program 1 (id=368): modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000300)={0x6, 0x80000001, 0x10001010, 0xdb1, 0x4, "f21059be8b65aca30f3dbbdf7065bfeea59c28", 0x9, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000240)={0x6, 0x1000, 0x77, 0x80, 0x1a, "49fff6bbdd00"}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000001900)={r0, 0x0, 0x9b, 0x0, &(0x7f0000000140)="4c8a96bd0651ea9ac9792b3214b119e1f651b845c42e7ce1983ac5932bcdeca6b56aca9c67c6b3e53f85a5026853c332b41db764b067e69ae58430ed5a4beca7d24426f9da3fced8dd84b65645ff7b9d05c6c4923ec6a779ee478d5ed47f1282f54b67071cb3f2c8957114c640826140e02da49ab11fcf3df67a6481bf66335ab8eb320949efffe597d051debeb29d231a7c7eb5763a8f1ba4532f", 0x0, 0x5, 0x0, 0xfc0, 0x0, &(0x7f0000000900)="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", 0x0, 0x2, 0x0, 0x2}, 0x4c) recvmmsg(r3, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./trace/error_log\x00', 0x24903, 0x4) 6.490166888s ago: executing program 2 (id=369): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) 4.026871343s ago: executing program 4 (id=370): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, 0x0, 0x0) creat(0x0, 0x24) setitimer(0x2, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, &(0x7f00000001c0)) msgget$private(0x0, 0x4) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffb]}, 0x0, 0x8) read$dsp(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) inotify_init1(0x0) fallocate(0xffffffffffffffff, 0x0, 0x200000000000003, 0x6) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0], 0x38}, 0x1, 0x0, 0x0, 0x20044001}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4040000) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) modify_ldt$write2(0x11, &(0x7f0000000200)={0x77b, 0x0, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000002140)=""/4098, 0xfffffffffffffe8e) 3.903848581s ago: executing program 3 (id=371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r2, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 3.902473827s ago: executing program 1 (id=372): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = syz_io_uring_setup(0xf08, 0x0, &(0x7f0000000580)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f0000000580)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x0, 0x5000000, {0x96346fe8a85d2583, 0x0, 0x808}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) 3.81878963s ago: executing program 2 (id=373): sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0], 0x9) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000004c0)={0x0, @bt={0x500, 0x2d3, 0x1, 0x280000, 0xdd9f83, 0x1, 0x9, 0x1d, 0x2, 0x4, 0x721, 0x13, 0x6, 0x7f, 0x3b, 0x4, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) 3.772267536s ago: executing program 4 (id=374): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @timestamp, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0x3}, @sack_perm, @sack_perm], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 3.749436325s ago: executing program 3 (id=375): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0xb}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x8008880) socket$netlink(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20004000) 3.731874086s ago: executing program 1 (id=376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) write(r3, &(0x7f0000000740)="d97efe5f7c052111102a7f96c07e1fe465d56f813bc3d135f1ce4735288142dd82f9", 0x22) bind$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, &(0x7f0000000140)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001000000f347d807e5c1937678027be495c2b0ce9b6b17d45043d13be18ce0855dd58b62228d3ed86ec91d2cbb9be10bdfd9db369e09de97864aafb44109b5abdc1f9250"], 0x1c}}, 0x0) socket(0x10, 0x3, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000069000a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x7, @private1, 0xa}, 0x1c) 3.690011461s ago: executing program 2 (id=377): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$autofs(0xffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000e9ff00000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r2 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)="671723c202002c", 0x20}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)="000000b814", 0x5}, {&(0x7f0000000340)="33c4", 0x2}], 0x4}, 0x0) 2.695229053s ago: executing program 4 (id=378): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x20101) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 2.498816414s ago: executing program 3 (id=379): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x40000032, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TDX_FINALIZE_VM(r0, 0xc004aeba, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x40) ioctl$MON_IOCX_MFETCH(r1, 0xc00c9207, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0], 0x2, 0x862}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.492009859s ago: executing program 1 (id=380): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="17830000000000000415000002dcca70a464000000bd2458583a258d765c7e2fe5cb0db7feac1aaa3386b48c6c7ded5bc9f66dc1f58c145a363ce50ab0b28b69485255b30a44d976a363ce68cd02e2245a9f0a33fab711d116a1aa8dc4a9da567f0469d067151f94dc6b5afe025d530787c7c8102226190a2b3161ed414684c0ef9b0ea367ad22c7e6e8596885fcdc4a595e4b089e5764db52525323886b38e8f1cdabfa8bde54b647d648f5a462e017729665ad08c7a34901d9d56cfcaaced9e29ee92baaad214347167accd8ebff806bea1e2e0d3020af070c33dce506f19c68f1ef3afb8085ca89e7e07e08fcb94a7287c9b529dfaf", @ANYRES32, @ANYBLOB="ee6b5fd600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4080) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000006, 0x14032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl(r2, 0xc048aeca, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101202) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x5422) syz_emit_ethernet(0x30a, &(0x7f0000000d00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x2d4, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x500, 0x26000000, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af"}, {0x0, 0x6, "0000000566994ff111397b4a8840491bae50dd6fc1f9dd74244c6faa519bda83168fc5186a3ff03c13a185e1a664d5e4"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a70507000000ddde250bff5b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200000000000000000000000000008879e66485201a0015ca83747357a02745000400"/55}]}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044080}, 0x800) socket$l2tp(0x2, 0x2, 0x73) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) 2.255109157s ago: executing program 2 (id=381): socket$inet6(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x10) ioctl$TIOCSETD(r2, 0x5423, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x9000700, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r9, 0xffffffffffffffff, 0x200000000000000) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000540)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=@newqdisc={0xe4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xb4, 0x2, {{0x3, 0x3, 0x1, 0x10, 0xc, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x1deafe2f}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xe70ceb89f67dc13a}, @TCA_NETEM_RATE64={0xc, 0x8, 0xfd01fade64eb51c6}, @TCA_NETEM_RATE64={0xc, 0x8, 0xd2f981005a9e7b11}, @TCA_NETEM_RATE64={0xc, 0x8, 0xb40e62bb8bcae0b}, @TCA_NETEM_LOSS={0x5c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x8, 0x0, 0xfffffff7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7ffffffd, 0x0, 0x3, 0x400, 0x6}}, @NETEM_LOSS_GI={0x17, 0x1, {0x80, 0x400, 0x0, 0x0, 0x97c9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x0, 0x80000000}}]}]}}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 636.573232ms ago: executing program 1 (id=382): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x5000, @loopback}, 0x10) listen(r0, 0xa) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x5000, @loopback}, 0x10) 502.073812ms ago: executing program 4 (id=383): modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000300)={0x6, 0x80000001, 0x10001010, 0xdb1, 0x4, "f21059be8b65aca30f3dbbdf7065bfeea59c28", 0x9, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000240)={0x6, 0x1000, 0x77, 0x80, 0x1a, "49fff6bbdd00"}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000001900)={r0, 0x0, 0x9b, 0x0, &(0x7f0000000140)="4c8a96bd0651ea9ac9792b3214b119e1f651b845c42e7ce1983ac5932bcdeca6b56aca9c67c6b3e53f85a5026853c332b41db764b067e69ae58430ed5a4beca7d24426f9da3fced8dd84b65645ff7b9d05c6c4923ec6a779ee478d5ed47f1282f54b67071cb3f2c8957114c640826140e02da49ab11fcf3df67a6481bf66335ab8eb320949efffe597d051debeb29d231a7c7eb5763a8f1ba4532f", 0x0, 0x5, 0x0, 0xfc0, 0x0, &(0x7f0000000900)="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", 0x0, 0x2, 0x0, 0x2}, 0x4c) recvmmsg(r3, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./trace/error_log\x00', 0x24903, 0x4) 466.20575ms ago: executing program 2 (id=384): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, 0x0, 0x0) creat(0x0, 0x24) setitimer(0x2, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, &(0x7f00000001c0)) msgget$private(0x0, 0x4) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffb]}, 0x0, 0x8) read$dsp(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) inotify_init1(0x0) fallocate(0xffffffffffffffff, 0x0, 0x200000000000003, 0x6) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0], 0x38}, 0x1, 0x0, 0x0, 0x20044001}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4040000) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) modify_ldt$write2(0x11, &(0x7f0000000200)={0x77b, 0x0, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000002140)=""/4098, 0xfffffffffffffe8e) 441.656755ms ago: executing program 3 (id=385): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) 0s ago: executing program 3 (id=386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r2, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.71' (ED25519) to the list of known hosts. [ 75.502005][ T5579] cgroup: Unknown subsys name 'net' [ 75.772010][ T5579] cgroup: Unknown subsys name 'cpuset' [ 75.818218][ T5579] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.394493][ T5579] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.911197][ T5598] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.925338][ T5595] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.932924][ T5598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.964434][ T5602] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.969516][ T5595] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.975081][ T5595] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.980861][ T5598] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.982082][ T5598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.986476][ T5598] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.990521][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.990927][ T5606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.991753][ T5606] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.993174][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.993516][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.000887][ T5597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.158897][ T5604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.206731][ T5604] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.218049][ T4907] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.220575][ T5604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.245321][ T5604] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.247156][ T4907] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.248560][ T5604] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.254935][ T5604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.292638][ T5602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.309968][ T5604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.198766][ T5604] Bluetooth: hci0: command tx timeout [ 84.198896][ T5604] Bluetooth: hci1: command tx timeout [ 84.277730][ T5606] Bluetooth: hci2: command tx timeout [ 84.357763][ T5606] Bluetooth: hci4: command tx timeout [ 84.357911][ T5606] Bluetooth: hci3: command tx timeout [ 84.612626][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.612860][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.613014][ T5599] bridge_slave_0: entered allmulticast mode [ 84.616653][ T5599] bridge_slave_0: entered promiscuous mode [ 84.656569][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.656653][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.656783][ T5589] bridge_slave_0: entered allmulticast mode [ 84.659231][ T5589] bridge_slave_0: entered promiscuous mode [ 84.687845][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.687948][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.688170][ T5599] bridge_slave_1: entered allmulticast mode [ 84.689812][ T5599] bridge_slave_1: entered promiscuous mode [ 84.726050][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.726146][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.726244][ T5589] bridge_slave_1: entered allmulticast mode [ 84.729515][ T5589] bridge_slave_1: entered promiscuous mode [ 84.856706][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.888865][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.888990][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.889651][ T5592] bridge_slave_0: entered allmulticast mode [ 84.891052][ T5592] bridge_slave_0: entered promiscuous mode [ 84.896188][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.909349][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.909761][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.909886][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.910029][ T5590] bridge_slave_0: entered allmulticast mode [ 84.912510][ T5590] bridge_slave_0: entered promiscuous mode [ 84.939540][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.939681][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.940159][ T5592] bridge_slave_1: entered allmulticast mode [ 84.945859][ T5592] bridge_slave_1: entered promiscuous mode [ 84.952865][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.991523][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.991656][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.992134][ T5590] bridge_slave_1: entered allmulticast mode [ 84.994936][ T5590] bridge_slave_1: entered promiscuous mode [ 84.996417][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.996534][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.996670][ T5593] bridge_slave_0: entered allmulticast mode [ 85.006702][ T5593] bridge_slave_0: entered promiscuous mode [ 85.171579][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.171701][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.172175][ T5593] bridge_slave_1: entered allmulticast mode [ 85.174379][ T5593] bridge_slave_1: entered promiscuous mode [ 85.211247][ T5599] team0: Port device team_slave_0 added [ 85.244920][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.246740][ T5589] team0: Port device team_slave_0 added [ 85.252493][ T5599] team0: Port device team_slave_1 added [ 85.258244][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.281518][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.299329][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.300924][ T5589] team0: Port device team_slave_1 added [ 85.303213][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.370516][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.389644][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.389664][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.389678][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.449202][ T5592] team0: Port device team_slave_0 added [ 85.450093][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.450106][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.450130][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.452346][ T5590] team0: Port device team_slave_0 added [ 85.453145][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.453158][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.453181][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.571389][ T5592] team0: Port device team_slave_1 added [ 85.584113][ T5590] team0: Port device team_slave_1 added [ 85.584724][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.584737][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.584751][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.587432][ T5593] team0: Port device team_slave_0 added [ 85.650782][ T5593] team0: Port device team_slave_1 added [ 85.699076][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.699088][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.699101][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.700321][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.700336][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.700358][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.739221][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.739238][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.739263][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.764787][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.764802][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.764827][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.766609][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.766622][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.766645][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.797162][ T5599] hsr_slave_0: entered promiscuous mode [ 85.799141][ T5599] hsr_slave_1: entered promiscuous mode [ 85.833995][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.834011][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.834035][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.851725][ T5589] hsr_slave_0: entered promiscuous mode [ 85.852954][ T5589] hsr_slave_1: entered promiscuous mode [ 85.853888][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 85.854520][ T5589] Cannot create hsr debugfs directory [ 86.032497][ T5592] hsr_slave_0: entered promiscuous mode [ 86.033238][ T5592] hsr_slave_1: entered promiscuous mode [ 86.035357][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 86.035379][ T5592] Cannot create hsr debugfs directory [ 86.062091][ T5590] hsr_slave_0: entered promiscuous mode [ 86.062901][ T5590] hsr_slave_1: entered promiscuous mode [ 86.063618][ T5590] debugfs: 'hsr0' already exists in 'hsr' [ 86.063641][ T5590] Cannot create hsr debugfs directory [ 86.277902][ T5604] Bluetooth: hci1: command tx timeout [ 86.277924][ T5606] Bluetooth: hci0: command tx timeout [ 86.357752][ T5606] Bluetooth: hci2: command tx timeout [ 86.439181][ T5606] Bluetooth: hci3: command tx timeout [ 86.439217][ T5606] Bluetooth: hci4: command tx timeout [ 86.643067][ T5593] hsr_slave_0: entered promiscuous mode [ 86.643826][ T5593] hsr_slave_1: entered promiscuous mode [ 86.644316][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 86.644337][ T5593] Cannot create hsr debugfs directory [ 86.775763][ T197] cfg80211: failed to load regulatory.db [ 87.232524][ T5599] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.277009][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.293627][ T5599] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.332746][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.335447][ T5599] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.355877][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.383221][ T5599] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.411516][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.523400][ T5592] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.553243][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.564948][ T5592] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.592158][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.595539][ T5592] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.641249][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.666193][ T5592] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.703254][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.823219][ T5589] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.863458][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.875220][ T5589] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.901841][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.909313][ T5589] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.940951][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.965762][ T5589] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.001953][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.111557][ T5590] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.147391][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.164225][ T5590] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.201208][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.213085][ T5590] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.241697][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.272688][ T5590] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.302751][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.358858][ T5604] Bluetooth: hci1: command tx timeout [ 88.370564][ T5604] Bluetooth: hci0: command tx timeout [ 88.386956][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.437716][ T5604] Bluetooth: hci2: command tx timeout [ 88.469212][ T5593] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.513112][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.518455][ T5604] Bluetooth: hci3: command tx timeout [ 88.518486][ T5604] Bluetooth: hci4: command tx timeout [ 88.524780][ T5593] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.560660][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.564167][ T5593] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.585589][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.616428][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.616893][ T5593] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.651889][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.679497][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.744523][ T1445] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.744668][ T1445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.791835][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.791941][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.859500][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.895397][ T1033] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.895565][ T1033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.932960][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.954475][ T2971] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.954563][ T2971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.040118][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.092007][ T2971] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.092212][ T2971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.142559][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.154030][ T1445] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.154154][ T1445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.282550][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.374663][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.406680][ T2971] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.406815][ T2971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.465011][ T2943] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.465206][ T2943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.557111][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.635741][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.635947][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.676506][ T1445] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.676743][ T1445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.348108][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.439257][ T5606] Bluetooth: hci0: command tx timeout [ 90.439293][ T5606] Bluetooth: hci1: command tx timeout [ 90.517742][ T5604] Bluetooth: hci2: command tx timeout [ 90.597708][ T5604] Bluetooth: hci4: command tx timeout [ 90.597740][ T5604] Bluetooth: hci3: command tx timeout [ 90.657902][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.876739][ T5599] veth0_vlan: entered promiscuous mode [ 90.916183][ T5599] veth1_vlan: entered promiscuous mode [ 91.065477][ T5592] veth0_vlan: entered promiscuous mode [ 91.119719][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.141506][ T5599] veth0_macvtap: entered promiscuous mode [ 91.144280][ T5592] veth1_vlan: entered promiscuous mode [ 91.209434][ T5599] veth1_macvtap: entered promiscuous mode [ 91.272105][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.305102][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.324254][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.355516][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.432276][ T5592] veth0_macvtap: entered promiscuous mode [ 91.472119][ T5592] veth1_macvtap: entered promiscuous mode [ 91.509339][ T5589] veth0_vlan: entered promiscuous mode [ 91.736060][ T5589] veth1_vlan: entered promiscuous mode [ 91.758694][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.792430][ T5590] veth0_vlan: entered promiscuous mode [ 91.916184][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.976269][ T5590] veth1_vlan: entered promiscuous mode [ 92.046345][ T2943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.046372][ T2943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.320132][ T5589] veth0_macvtap: entered promiscuous mode [ 92.372081][ T5593] veth0_vlan: entered promiscuous mode [ 92.384382][ T1406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.384401][ T1406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.398317][ T5589] veth1_macvtap: entered promiscuous mode [ 92.513481][ T5590] veth0_macvtap: entered promiscuous mode [ 92.519144][ T5593] veth1_vlan: entered promiscuous mode [ 92.534505][ T2971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.534526][ T2971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.552521][ T5590] veth1_macvtap: entered promiscuous mode [ 92.575363][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.645979][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.667811][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.667832][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.703386][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.792471][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.844661][ T5599] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.967143][ T5593] veth0_macvtap: entered promiscuous mode [ 93.219561][ T5593] veth1_macvtap: entered promiscuous mode [ 94.043995][ T5789] Zero length message leads to an empty skb [ 94.275847][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.275869][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.312155][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.390324][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.550558][ T1445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.550578][ T1445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.768814][ T1033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.768836][ T1033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.147732][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.147752][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.380471][ T5815] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.649333][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.891562][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.891584][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.915073][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.217050][ T5825] input: syz0 as /devices/virtual/input/input5 [ 97.541784][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.545964][ T2941] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.546137][ T2941] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.546313][ T2941] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.591487][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.591508][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.666754][ T1406] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.667195][ T1406] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.667394][ T1406] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.667662][ T1406] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.699922][ T1406] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.790204][ T1445] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.023124][ T1012] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.498578][ T2971] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.053920][ T1012] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.054918][ T1012] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.055478][ T1012] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.056267][ T1012] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.056529][ T1012] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.057441][ T1012] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.498328][ T36] audit: type=1326 audit(1791040895.190:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5885 comm="syz.0.34" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60548ce159 code=0x7ffc0000 [ 104.498379][ T36] audit: type=1326 audit(1791040895.190:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5885 comm="syz.0.34" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60548ce159 code=0x7ffc0000 [ 104.581795][ T36] audit: type=1326 audit(1791040895.280:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5885 comm="syz.0.34" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f60548ce159 code=0x7ffc0000 [ 104.581846][ T36] audit: type=1326 audit(1791040895.280:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5885 comm="syz.0.34" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60548ce159 code=0x7ffc0000 [ 104.581884][ T36] audit: type=1326 audit(1791040895.280:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5885 comm="syz.0.34" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60548ce159 code=0x7ffc0000 [ 104.584319][ T36] audit: type=1326 audit(1791040895.280:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5885 comm="syz.0.34" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f60548ce159 code=0x7ffc0000 [ 104.584363][ T36] audit: type=1326 audit(1791040895.280:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5885 comm="syz.0.34" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60548ce159 code=0x7ffc0000 [ 104.584401][ T36] audit: type=1326 audit(1791040895.280:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5885 comm="syz.0.34" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60548ce159 code=0x7ffc0000 [ 107.006603][ T5721] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.221642][ T5721] usb 2-1: Using ep0 maxpacket: 32 [ 107.224727][ T5721] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 107.293961][ T5721] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 107.293991][ T5721] usb 2-1: config 0 has no interface number 0 [ 107.299929][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.299955][ T5721] usb 2-1: Product: syz [ 107.299969][ T5721] usb 2-1: Manufacturer: syz [ 107.299982][ T5721] usb 2-1: SerialNumber: syz [ 107.459277][ T5721] usb 2-1: config 0 descriptor?? [ 107.469278][ T5900] bridge0: port 2(bridge_slave_1) entered listening state [ 108.389983][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.122319][ T5721] usb 2-1: can't set config #0, error -71 [ 109.366907][ T5721] usb 2-1: USB disconnect, device number 2 [ 115.163731][ T5989] syzkaller0: entered promiscuous mode [ 115.163761][ T5989] syzkaller0: entered allmulticast mode [ 116.617778][ T6009] capability: warning: `syz.0.65' uses deprecated v2 capabilities in a way that may be insecure [ 116.807820][ T6015] syz.4.67 uses obsolete (PF_INET,SOCK_PACKET) [ 116.987628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.007632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.017620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.027625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.037623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.047622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.057621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.067631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.077623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.087616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.019569][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 118.392293][ T6024] netlink: 'syz.2.66': attribute type 9 has an invalid length. [ 118.392320][ T6024] netlink: 'syz.2.66': attribute type 7 has an invalid length. [ 118.392333][ T6024] netlink: 'syz.2.66': attribute type 8 has an invalid length. [ 120.957940][ T6053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.79'. [ 122.334814][ T6050] syzkaller0: entered promiscuous mode [ 122.334843][ T6050] syzkaller0: entered allmulticast mode [ 124.121518][ T6083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.163737][ T6085] netlink: 'syz.0.86': attribute type 1 has an invalid length. [ 130.057448][ T36] audit: type=1804 audit(1791040920.750:10): pid=6147 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.106" name="/newroot/21/file0" dev="tmpfs" ino=130 res=1 errno=0 [ 130.151911][ T6147] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 130.151931][ T6147] flags: 0x100000000002000(reserved|node=0|zone=2) [ 130.151953][ T6147] raw: 0100000000002000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 130.151963][ T6147] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 130.151968][ T6147] page dumped because: unmovable page [ 130.151979][ T6147] page_owner info is not present (never set?) [ 132.852536][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.870369][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.145712][ T6179] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 133.515435][ T36] audit: type=1804 audit(1791040924.210:11): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.118" name="/newroot/24/file0" dev="tmpfs" ino=142 res=1 errno=0 [ 136.715342][ T6191] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 136.715370][ T6191] flags: 0x100000000002000(reserved|node=0|zone=2) [ 136.715390][ T6191] raw: 0100000000002000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 136.715399][ T6191] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 136.715405][ T6191] page dumped because: unmovable page [ 136.715412][ T6191] page_owner info is not present (never set?) [ 143.366806][ T6229] syzkaller0: entered promiscuous mode [ 143.366837][ T6229] syzkaller0: entered allmulticast mode [ 151.086159][ T6269] vimc link validate: Sensor A:src:640x480 (0x33424752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 153.358019][ T6280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.940772][ T6293] program syz.3.148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.703743][ T49] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 160.878951][ T49] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 160.880895][ T49] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 160.880926][ T49] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 160.880964][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.663755][ T49] usb 4-1: can't set config #27, error -71 [ 163.785752][ T49] usb 4-1: USB disconnect, device number 2 [ 164.056916][ T6351] netlink: 'syz.3.164': attribute type 39 has an invalid length. [ 164.166542][ T6356] program syz.1.166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.269263][ T6362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.447860][ T49] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 164.811368][ T49] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 164.830941][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.830968][ T49] usb 3-1: Product: syz [ 164.830982][ T49] usb 3-1: Manufacturer: syz [ 164.830996][ T49] usb 3-1: SerialNumber: syz [ 166.439505][ T1239] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 167.558978][ T1239] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 167.623967][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.176'. [ 170.593316][ T49] usb 3-1: USB disconnect, device number 2 [ 170.636320][ T1239] ath9k_htc: Failed to initialize the device [ 170.664259][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 170.798173][ T49] usb 3-1: ath9k_htc: USB layer deinitialized [ 172.864930][ T6404] program syz.2.183 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.271234][ T6415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.585784][ T6442] program syz.4.196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.050157][ T6449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.030819][ T6443] syz.1.195 (6443) used greatest stack depth: 17680 bytes left [ 181.691889][ T6455] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.197669][ T31] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 184.348683][ T31] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 184.350501][ T31] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC [ 184.350625][ T31] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 184.353476][ T31] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 184.353500][ T31] usb 4-1: Manufacturer: syz [ 184.353515][ T31] usb 4-1: SerialNumber: syz [ 185.476177][ T6455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.569950][ T6455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.984642][ T31] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 189.002525][ T2971] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.002571][ T2971] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.002605][ T2971] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.002635][ T2971] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.044898][ T31] usb 4-1: USB disconnect, device number 3 [ 191.673172][ T6563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.811511][ T6567] random: crng reseeded on system resumption [ 192.352927][ T6556] gadgetfs: bound to dummy_udc driver [ 192.707671][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 192.710453][ C0] gadgetfs: connected [ 192.712493][ T9] gadgetfs: disconnected [ 193.150241][ T36] audit: type=1804 audit(1791040983.850:12): pid=6584 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.231" name="/newroot/51/file0" dev="tmpfs" ino=288 res=1 errno=0 [ 193.187738][ T197] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 193.374814][ T197] usb 3-1: unable to get BOS descriptor or descriptor too short [ 193.387131][ T197] usb 3-1: not running at top speed; connect to a high speed hub [ 193.387172][ T197] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 193.395321][ T197] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.395347][ T197] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 193.395410][ T197] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 193.445244][ T197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.445271][ T197] usb 3-1: Product: syz [ 193.445285][ T197] usb 3-1: Manufacturer: syz [ 193.445299][ T197] usb 3-1: SerialNumber: syz [ 193.845086][ T6577] netlink: 56 bytes leftover after parsing attributes in process `syz.2.229'. [ 193.845942][ T6577] netlink: 16 bytes leftover after parsing attributes in process `syz.2.229'. [ 195.537424][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.537496][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.922011][ T36] audit: type=1804 audit(1791040987.620:13): pid=6623 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.242" name="/newroot/47/file0" dev="tmpfs" ino=266 res=1 errno=0 [ 198.200341][ T197] usb 3-1: USB disconnect, device number 3 [ 198.293401][ T6641] binder: 6638:6641 ioctl c0306201 200000002980 returned -14 [ 200.080319][ T6658] random: crng reseeded on system resumption [ 200.733115][ T6671] syz_tun: entered allmulticast mode [ 204.462379][ T6698] random: crng reseeded on system resumption [ 205.697703][ T197] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 206.642082][ T5610] Bluetooth: hci1: command 0x0406 tx timeout [ 206.668791][ T5598] Bluetooth: hci0: command 0x0406 tx timeout [ 206.705143][ T5598] Bluetooth: hci3: command 0x0406 tx timeout [ 206.710466][ T5610] Bluetooth: hci2: command 0x0406 tx timeout [ 206.731825][ T5598] Bluetooth: hci4: command 0x0406 tx timeout [ 206.797389][ T197] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 206.826105][ T197] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 206.826134][ T197] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 206.826155][ T197] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 206.826174][ T197] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 206.905670][ T197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.905698][ T197] usb 1-1: Product: syz [ 206.905712][ T197] usb 1-1: Manufacturer: syz [ 206.905737][ T197] usb 1-1: SerialNumber: syz [ 207.008356][ T197] usb 1-1: config 0 descriptor?? [ 207.014460][ T197] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 207.113591][ T6726] syz.4.263 (6726) used greatest stack depth: 17576 bytes left [ 207.380201][ T197] scsi host1: usb-storage 1-1:0.0 [ 209.087242][ T197] usb 1-1: USB disconnect, device number 3 [ 209.819650][ T6772] netdevsim netdevsim0: Direct firmware load for . [ 209.819650][ T6772] failed with error -2 [ 209.819680][ T6772] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 209.819680][ T6772] [ 210.668030][ T197] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 210.882276][ T6789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.828522][ T197] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 211.829891][ T197] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.829922][ T197] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.829958][ T197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.910398][ T197] usb 5-1: config 0 descriptor?? [ 212.442434][ T197] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 212.459750][ T197] hid-steam 0003:28DE:1142.0001: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 212.518649][ T1239] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 212.562956][ T197] hid-steam 0003:28DE:1142.0001: Steam wireless receiver connected [ 212.565674][ T197] hid-steam 0003:28DE:1142.0001: steam_probe:steam_get_conn_status failed with error -22 [ 212.655900][ T197] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 212.670457][ T1239] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 212.680805][ T1239] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 212.680832][ T1239] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 212.680856][ T1239] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 212.680875][ T1239] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 212.684782][ T1239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.684806][ T1239] usb 4-1: Product: syz [ 212.684820][ T1239] usb 4-1: Manufacturer: syz [ 212.684834][ T1239] usb 4-1: SerialNumber: syz [ 212.720190][ T6816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.296'. [ 212.730769][ T1239] usb 4-1: config 0 descriptor?? [ 212.742480][ T1239] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 212.810411][ T197] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 212.873560][ T197] usb 5-1: USB disconnect, device number 2 [ 212.980054][ T1239] scsi host1: usb-storage 4-1:0.0 [ 213.204967][ T6824] fido_id[6824]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 214.770619][ T197] hid-steam 0003:28DE:1142.0001: Steam wireless receiver disconnected [ 215.619608][ T36] audit: type=1804 audit(1791041006.310:14): pid=6837 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.301" name="/newroot/52/file0" dev="tmpfs" ino=308 res=1 errno=0 [ 215.956539][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'. [ 216.762966][ T31] usb 4-1: USB disconnect, device number 4 [ 219.967101][ T6864] syzkaller0: entered promiscuous mode [ 219.967118][ T6864] syzkaller0: entered allmulticast mode [ 220.711555][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'. [ 222.721237][ T36] audit: type=1804 audit(1791041013.400:15): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.318" name="/newroot/70/file0" dev="tmpfs" ino=385 res=1 errno=0 [ 226.400683][ T6935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.426497][ T6936] syzkaller0: entered promiscuous mode [ 226.426523][ T6936] syzkaller0: entered allmulticast mode [ 226.467703][ T1239] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 226.712861][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 227.411549][ T1239] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 227.420209][ T1239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.420235][ T1239] usb 3-1: Product: syz [ 227.420249][ T1239] usb 3-1: Manufacturer: syz [ 227.420263][ T1239] usb 3-1: SerialNumber: syz [ 227.734022][ T5917] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 228.007783][ T5892] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 228.158447][ T5892] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 228.197813][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 228.197844][ T5892] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 228.197868][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 228.197889][ T5892] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 228.203039][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.203065][ T5892] usb 2-1: Product: syz [ 228.203078][ T5892] usb 2-1: Manufacturer: syz [ 228.203092][ T5892] usb 2-1: SerialNumber: syz [ 228.336137][ T10] usb 3-1: USB disconnect, device number 4 [ 228.356457][ T5892] usb 2-1: config 0 descriptor?? [ 228.419649][ T5892] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 229.009526][ T5917] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 229.360979][ T5917] ath9k_htc: Failed to initialize the device [ 229.364975][ T10] usb 3-1: ath9k_htc: USB layer deinitialized [ 229.387422][ T5892] scsi host1: usb-storage 2-1:0.0 [ 231.731732][ T5917] usb 2-1: USB disconnect, device number 3 [ 235.407360][ T7045] FAULT_INJECTION: forcing a failure. [ 235.407360][ T7045] name failslab, interval 1, probability 0, space 0, times 1 [ 235.409540][ T7045] CPU: 1 UID: 0 PID: 7045 Comm: syz.2.362 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 235.409568][ T7045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 235.409589][ T7045] Call Trace: [ 235.409597][ T7045] [ 235.409607][ T7045] dump_stack_lvl+0xe8/0x150 [ 235.409661][ T7045] should_fail_ex+0x46b/0x600 [ 235.409697][ T7045] should_failslab+0xa8/0x100 [ 235.409720][ T7045] __kmalloc_node_noprof+0xfd/0x7b0 [ 235.409750][ T7045] ? get_callchain_buffers+0x198/0x350 [ 235.409781][ T7045] ? get_callchain_buffers+0x198/0x350 [ 235.409818][ T7045] get_callchain_buffers+0x198/0x350 [ 235.409853][ T7045] stack_map_alloc+0x301/0x4b0 [ 235.409885][ T7045] map_create+0x1111/0x1e20 [ 235.409924][ T7045] ? __pfx_map_create+0x10/0x10 [ 235.409964][ T7045] ? bpf_lsm_bpf+0x9/0x20 [ 235.409988][ T7045] ? security_bpf+0x7e/0x2d0 [ 235.410021][ T7045] __sys_bpf+0xaea/0xd90 [ 235.410060][ T7045] ? __pfx___sys_bpf+0x10/0x10 [ 235.410093][ T7045] ? do_futex+0x458/0x4e0 [ 235.410141][ T7045] ? rcu_is_watching+0x16/0xb0 [ 235.410179][ T7045] __x64_sys_bpf+0xba/0xd0 [ 235.410210][ T7045] do_syscall_64+0x166/0x520 [ 235.410232][ T7045] ? trace_irq_disable+0x3b/0x140 [ 235.410259][ T7045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.410280][ T7045] ? clear_bhb_loop+0x70/0xc0 [ 235.410305][ T7045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.410325][ T7045] RIP: 0033:0x7fde7db8e159 [ 235.410354][ T7045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.410373][ T7045] RSP: 002b:00007fde7bda4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.410399][ T7045] RAX: ffffffffffffffda RBX: 00007fde7de16180 RCX: 00007fde7db8e159 [ 235.410415][ T7045] RDX: 0000000000000048 RSI: 00002000000005c0 RDI: 0000000000000000 [ 235.410428][ T7045] RBP: 00007fde7dc2506b R08: 0000000000000000 R09: 0000000000000000 [ 235.410442][ T7045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.410454][ T7045] R13: 00007fde7de16218 R14: 00007fde7de16180 R15: 00007ffe26c5c458 [ 235.410486][ T7045] [ 235.679926][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 236.484767][ T7043] syz_tun: entered allmulticast mode [ 236.485730][ T7043] syz_tun: left allmulticast mode [ 240.442023][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'. [ 243.149813][ T7099] syz.2.381 (7099) used greatest stack depth: 16872 bytes left [ 243.964375][ T7106] [ 243.966972][ T7106] ====================================================== [ 243.974669][ T7106] WARNING: possible circular locking dependency detected [ 243.982393][ T7106] syzkaller #0 Not tainted [ 243.987232][ T7106] ------------------------------------------------------ [ 243.994919][ T7106] syz.1.382/7106 is trying to acquire lock: [ 244.001389][ T7106] ffff888066ecbab0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x101/0xd70 [ 244.013984][ T7106] [ 244.013984][ T7106] but task is already holding lock: [ 244.022059][ T7106] ffff888066e2a1d8 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x22f/0x580 [ 244.031886][ T7106] [ 244.031886][ T7106] which lock already depends on the new lock. [ 244.031886][ T7106] [ 244.043298][ T7106] [ 244.043298][ T7106] the existing dependency chain (in reverse order) is: [ 244.053183][ T7106] [ 244.053183][ T7106] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 244.061682][ T7106] lock_sock_nested+0x41/0x130 [ 244.067476][ T7106] smc_listen_out+0xd4/0x3d0 [ 244.073078][ T7106] smc_listen_work+0x81d/0x1410 [ 244.078982][ T7106] process_scheduled_works+0xc3d/0x1630 [ 244.085632][ T7106] worker_thread+0xa47/0xfb0 [ 244.091225][ T7106] kthread+0x38b/0x470 [ 244.096240][ T7106] ret_from_fork+0x514/0xb70 [ 244.101829][ T7106] ret_from_fork_asm+0x1a/0x30 [ 244.107616][ T7106] [ 244.107616][ T7106] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 244.118783][ T7106] __lock_acquire+0x164c/0x2de0 [ 244.124689][ T7106] lock_acquire+0x115/0x350 [ 244.130192][ T7106] __flush_work+0x6c5/0xd70 [ 244.135698][ T7106] __cancel_work_sync+0xbf/0x110 [ 244.141695][ T7106] smc_clcsock_release+0x60/0xf0 [ 244.147673][ T7106] __smc_release+0x662/0x7d0 [ 244.153267][ T7106] smc_close_non_accepted+0xd5/0x1f0 [ 244.159624][ T7106] smc_close_active+0xb59/0xf50 [ 244.165504][ T7106] __smc_release+0x9e/0x7d0 [ 244.171002][ T7106] smc_release+0x2cd/0x580 [ 244.176405][ T7106] __sock_release+0xa0/0x1f0 [ 244.182009][ T7106] sock_close+0x1c/0x30 [ 244.187127][ T7106] __fput+0x42a/0xa80 [ 244.192048][ T7106] task_work_run+0x1d9/0x270 [ 244.197643][ T7106] exit_to_user_mode_loop+0x204/0x770 [ 244.204118][ T7106] do_syscall_64+0x328/0x520 [ 244.209722][ T7106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.216750][ T7106] [ 244.216750][ T7106] other info that might help us debug this: [ 244.216750][ T7106] [ 244.227970][ T7106] Possible unsafe locking scenario: [ 244.227970][ T7106] [ 244.236132][ T7106] CPU0 CPU1 [ 244.242001][ T7106] ---- ---- [ 244.247873][ T7106] lock(sk_lock-AF_SMC/1); [ 244.252797][ T7106] lock((work_completion)(&new_smc->smc_listen_work)); [ 244.263167][ T7106] lock(sk_lock-AF_SMC/1); [ 244.270866][ T7106] lock((work_completion)(&new_smc->smc_listen_work)); [ 244.278470][ T7106] [ 244.278470][ T7106] *** DEADLOCK *** [ 244.278470][ T7106] [ 244.287401][ T7106] locks held by syz.1.382/7106: 3, last CPU#1: [ 244.294137][ T7106] #0: ffff8880606582b8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 244.305681][ T7106] #1: ffff888066e2a1d8 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x22f/0x580 [ 244.315991][ T7106] #2: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x101/0xd70 [ 244.326108][ T7106] [ 244.326108][ T7106] stack backtrace: [ 244.332565][ T7106] CPU: 1 UID: 0 PID: 7106 Comm: syz.1.382 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 244.343221][ T7106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 244.354267][ T7106] Call Trace: [ 244.357853][ T7106] [ 244.361079][ T7106] dump_stack_lvl+0xe8/0x150 [ 244.366106][ T7106] print_circular_bug+0x2e2/0x300 [ 244.371603][ T7106] check_noncircular+0x12f/0x150 [ 244.377013][ T7106] __lock_acquire+0x164c/0x2de0 [ 244.382335][ T7106] ? do_raw_spin_unlock+0xf5/0x200 [ 244.387936][ T7106] lock_acquire+0x115/0x350 [ 244.392865][ T7106] ? __flush_work+0x101/0xd70 [ 244.397986][ T7106] ? __flush_work+0x101/0xd70 [ 244.403124][ T7106] __flush_work+0x6c5/0xd70 [ 244.408053][ T7106] ? __flush_work+0x101/0xd70 [ 244.413173][ T7106] ? __flush_work+0x101/0xd70 [ 244.418292][ T7106] ? __pfx___flush_work+0x10/0x10 [ 244.423791][ T7106] ? __pfx_wq_barrier_func+0x10/0x10 [ 244.429580][ T7106] ? __cancel_work_sync+0x5c/0x110 [ 244.435182][ T7106] __cancel_work_sync+0xbf/0x110 [ 244.440604][ T7106] smc_clcsock_release+0x60/0xf0 [ 244.446011][ T7106] __smc_release+0x662/0x7d0 [ 244.451035][ T7106] smc_close_non_accepted+0xd5/0x1f0 [ 244.456823][ T7106] smc_close_active+0xb59/0xf50 [ 244.462130][ T7106] ? __pfx_sock_def_readable+0x10/0x10 [ 244.468110][ T7106] ? smc_close_active+0x3ed/0xf50 [ 244.473610][ T7106] __smc_release+0x9e/0x7d0 [ 244.478537][ T7106] ? lockdep_hardirqs_on+0x7b/0x110 [ 244.484230][ T7106] smc_release+0x2cd/0x580 [ 244.489066][ T7106] __sock_release+0xa0/0x1f0 [ 244.494092][ T7106] ? __pfx_sock_close+0x10/0x10 [ 244.499401][ T7106] sock_close+0x1c/0x30 [ 244.503942][ T7106] __fput+0x42a/0xa80 [ 244.508293][ T7106] task_work_run+0x1d9/0x270 [ 244.513316][ T7106] ? __pfx_task_work_run+0x10/0x10 [ 244.518910][ T7106] exit_to_user_mode_loop+0x204/0x770 [ 244.524801][ T7106] ? rcu_is_watching+0x16/0xb0 [ 244.530046][ T7106] do_syscall_64+0x328/0x520 [ 244.535100][ T7106] ? trace_irq_disable+0x3b/0x140 [ 244.540601][ T7106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.547251][ T7106] ? clear_bhb_loop+0x70/0xc0 [ 244.552389][ T7106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.558852][ T7106] RIP: 0033:0x7f55accbe159 [ 244.563688][ T7106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.585235][ T7106] RSP: 002b:00007ffec3b93b78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 244.594502][ T7106] RAX: 0000000000000000 RBX: 00007f55acf47da0 RCX: 00007f55accbe159 [ 244.603247][ T7106] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 244.611994][ T7106] RBP: 00007f55acf47da0 R08: 00007f55acf46038 R09: 0000000000000000 [ 244.620738][ T7106] R10: 00000000005f705c R11: 0000000000000246 R12: 000000000003b86c [ 244.629479][ T7106] R13: 00007f55acf45fac R14: 000000000003b5c3 R15: 00007ffec3b93c80 [ 244.638246][ T7106]