last executing test programs: 1m43.041735842s ago: executing program 1 (id=118): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000536bca14530ac4589c7e01fd0f71f778ff787f5706174003107e8af50e7767d8cbd9acd774e0e8cb0a04699d99a1d31cdd2c76a66cf0c522a1c97470824ee318e80659f06e0800efd30c48c5b4123dd62193e746e00ca37ccfc4c3c9b0ea59752c773f3cf6e3eb78e8ee5c5312e821faa7a5a04c834e976302e4107f4314c2a24be014c4a2e25278744cdbc9d550837320f3ac9f7a1347ebd765136e86f62053a3cc28a3e670fcee5850e3d2c362d0bc", @ANYRES16=r3, @ANYBLOB="03472875eb7600"/23, @ANYRES32=r1, @ANYBLOB, @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4054}, 0x200cc0c4) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb8a47eadbd30bc50) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb8a47eadbd30bc50) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x4, 0x5, 0x4, 0x7f, 0x4230, 0x500000000000000, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x80300}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000340)="0bbb288dd6ffa80800431c00000000000000210d0000aaa8fa017242ba9380d419", 0x21) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000180)=0x3) (async) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000180)=0x3) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a30000000000900020073797a32000000001c000480180001800d00010073796e70726f7879000000000400028096f747e5efd8adf16f409e3a1400000011000100"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r10 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) (async) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) accept4$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x2711}, 0x10, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) 1m42.759631155s ago: executing program 1 (id=119): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x0) listen(0xffffffffffffffff, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x8a000, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x10002, 0x14f600) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x2, 0x4, 0x200, 0x0, {0x77359400}, {0x1, 0x1, 0x0, 0x0, 0x0, 0xfe, "05000100"}, 0x0, 0x2, {}, 0x20800}) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000a200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 1m42.434187938s ago: executing program 1 (id=121): r0 = syz_io_uring_setup(0xb1f, &(0x7f0000000500)={0x0, 0x8007ffd, 0x1, 0x0, 0xf5fffffd}, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000180)={0x200000000000001f, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000080)=[0x4, 0x9]}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x5, 0x0, 0x6, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x17, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x88000, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x9f3, 0x0, 0xaf}]}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0xa, 0x19831, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000080)=0x800, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet(0xa, 0x801, 0x84) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000051600000000000000fcffffff0a00000001d10c6463ca98d3ec5f4472755852c94ddf86338d979aea19cec22a058e665001b4f6acdd1bfc893faadd233796989e1f012217fdc60b", @ANYRES32], 0x18}}, 0x94) r9 = add_key(&(0x7f00000002c0)='big_key\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)='syz1\x00', r9) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) fsopen(&(0x7f0000000140)='cifs\x00', 0x0) 1m41.698372236s ago: executing program 3 (id=127): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = syz_ublk_setup_io_uring(0x6bb, &(0x7f00000002c0)={0x0, 0x30b5, 0x0, 0x3, 0x2eb}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x65}}}, &(0x7f0000000540)=0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x56d, 0xb, 0x100, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt(0xffffffffffffffff, 0xff, 0x24, 0x0, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) syz_pidfd_open(0x0, 0x0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0x3291, 0x2000, 0x1, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x181}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x92e0, 0x2, 0x0, 0x10000004, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x2, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2000, 0xffffffff, 0x801f0, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x10002, 0x367, 0x0, r12}}], 0x1, &(0x7f0000000340)={0x2e, 0x55, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x1, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) 1m41.154990031s ago: executing program 1 (id=131): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RLOCK(r2, &(0x7f00000001c0)={0x8, 0x35, 0x1}, 0x8) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x9901) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x84000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) io_uring_setup(0x705b, &(0x7f0000000380)={0x0, 0xe58f, 0x8000, 0x2, 0x1db}) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f0000000080)={{0x81, 0x7}, {0x5, 0xff32}, 0x6}) r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r7, 0x40106f52, &(0x7f0000000000)={0x18, &(0x7f00000000c0)=[{0x11, '\x00', @data=0xb, 0x9}]}) 1m40.635979851s ago: executing program 3 (id=132): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x44090}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @local}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x20240, 0x0) unshare(0x22020600) syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='attr\x00') unshare(0x26020480) r7 = fanotify_init(0x4000, 0x0) fanotify_mark(r7, 0x445, 0x1003, 0xffffffffffffffff, 0x0) r8 = open_tree(r6, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a4031, 0x0) 1m39.02198495s ago: executing program 0 (id=138): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x800) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/155, 0x9b}], 0x1) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000300)={0x1, 0x0, [{0x40000094, 0x0, 0x7}]}) (async) r5 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r6 = dup(r5) write$binfmt_elf64(r6, &(0x7f0000000800)=ANY=[@ANYBLOB="7f454c46060478a3060000000000000002003e00cd000000b8010000000000004000000000000000ec02002300000000000001000500380001000600b106040403000000ff0000000900000000000000f50f000000000000ff030000000000009b"], 0x78) (async) r7 = fanotify_init(0x20, 0x1) (async, rerun: 64) r8 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x10) (rerun: 64) sendfile(r8, r8, 0x0, 0x7f03) (async, rerun: 32) write$tun(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="020407000700aa67060003000b3bee1a42abe0c3a9caefcd5168cd8deb32c74886ee3a4494a89a868029eabb"], 0x2c) (async, rerun: 32) fanotify_mark(r7, 0x1, 0x40001028, r6, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async, rerun: 32) r11 = accept4$alg(r10, 0x0, 0x0, 0x0) (rerun: 32) sendmmsg$alg(r11, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808", 0x7}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r11, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/49, 0x34000}], 0x1}}], 0x1, 0x101, 0x0) (async) r12 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) (async) ioctl$KVM_GET_STATS_FD_vm(r12, 0xaece) (async) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x16018, &(0x7f0000000340)={{'fd', 0x3d, r13}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7}}]}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)={{'fd', 0x3d, r13}, 0x2c, {'rootmode', 0x3d, 0x1000}}) r14 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r14, 0x3b81, &(0x7f00000000c0)={0xc}) 1m38.360529684s ago: executing program 4 (id=140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x50, 0x7}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x4080) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)="0c0ef8d1a64ef655ea6c44b84bdb21cad237faaa1f6dda0c8d798437fa24ae7fbef062d8e88815943aa135fef3bd308086b13d06ded59fc4b927e2a92aca022715b2", 0x42}], 0x1) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r1, 0x102, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x100}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x200}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x80}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40040001) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@new_dev={0x2, 0x912, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x94}}}, &(0x7f0000000400)) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000440)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000500)=0xc) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f0000000540)={r4, 0xffff, 0x0, 0x0, r5}) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000005c0), &(0x7f0000000600)=0xe) clock_adjtime(0x5, &(0x7f0000000640)={0x400, 0x3ff, 0x4, 0x3, 0xfed, 0x7, 0x5, 0x10001, 0x100000001, 0xf, 0x6a9, 0x3f7, 0x2, 0x3, 0x5, 0xfffffffffffffffd, 0x5, 0x3, 0x3, 0x8, 0x1, 0x9, 0x3, 0xffffffff, 0x3, 0x4}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000740)={0x0, 0x9}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000840)={r7, 0x5c, &(0x7f00000007c0)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e23, 0xd3a, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, @in={0x2, 0x4e20, @empty}]}, &(0x7f0000000880)=0x10) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) r9 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000900), 0x218800, 0x0) ioctl$DRM_IOCTL_GET_CAP(r9, 0xc010640c, &(0x7f0000000940)={0x11}) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000980), 0x40000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r10, 0x40485404, &(0x7f00000009c0)={{0x3, 0x3, 0x1, 0x2, 0xfffff33a}, 0xc, 0x4}) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2f, &(0x7f0000000a40)={0x9, {{0xa, 0x4e22, 0x97, @local, 0x400}}, {{0xa, 0x4e22, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}}, 0x108) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r12, 0x4004af61, &(0x7f0000000bc0)) r13 = syz_open_dev$vbi(&(0x7f0000000c00), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r13, 0xc040563d, &(0x7f0000000c40)={0x1, 0x0, 0x1, 0x1, {0x5, 0x7, 0xc, 0x1}}) r14 = pidfd_getfd(0xffffffffffffffff, r9, 0x0) sendmsg$NFT_BATCH(r14, &(0x7f0000001100)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000010c0)={&(0x7f0000000cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xc}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}}, @NFT_MSG_NEWSET={0x3b8, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_DESC={0x390, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xa4, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ea6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9a98}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6d5ab2c0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0xd4, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2b09}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff2f0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x164, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf9}]}, {0x4}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5e85}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x17637127}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9191}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_DESC_CONCAT={0x70, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcc3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc797}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20e1}]}]}, @NFTA_SET_DESC_CONCAT={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x400}, 0x1, 0x0, 0x0, 0x4008810}, 0x4084) 1m38.360115729s ago: executing program 2 (id=141): r0 = syz_io_uring_setup(0x18f9, &(0x7f0000000500)={0x0, 0x8007ffd, 0x1, 0x0, 0xf5fffffd}, &(0x7f0000000040), &(0x7f0000001280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000180)={0x200000000000001f, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000080)=[0x4, 0x9]}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x17, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000080)=0x800, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet(0xa, 0x801, 0x84) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@ipv6_getaddr={0x18, 0x16, 0x921, 0x0, 0xfffffffc}, 0x18}}, 0x94) r7 = add_key(&(0x7f00000002c0)='encrypted\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)='syz1\x00', r7) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r8 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x4b63, 0x3) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0xffffff9b, &(0x7f0000000200)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWFLOWTABLE={0x50, 0x16, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}]}]}, @NFT_MSG_DELSETELEM={0x44, 0xe, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xec}, 0x1, 0x0, 0x0, 0x4044}, 0x0) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) 1m38.276609628s ago: executing program 3 (id=142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, 0x0, 0x0) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x8001) ioctl$SNDRV_PCM_IOCTL_DRAIN(r5, 0x4144, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000019c0)=@newtfilter={0x84, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_ACT={0x50, 0x3, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xffffffff, 0xffffffffbffffffe, 0x101, 0xc}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$pokeuser(0x6, r8, 0x358, 0x10002) ptrace$pokeuser(0x6, r8, 0x388, 0xffffffffffffff81) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000020605000700000000000000000000800c00078008001200000000000500010006000000050005000200000005000400000000000900020073797a31001f000010000300686173683a69702c6d6163"], 0x54}, 0x1, 0x0, 0x0, 0x40845}, 0x8404) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000440)='v2\x00ul\x00\x00\x00\x00\xc7\xa9v\x80!\x02\x93r\xb93\x85\x00loc\xad\x8b#\xe2\xb9\xbd\"\xeb.\xc7]\xa67\x06 \xc9\x02|\x85o7Z\xdc\n\xaa?4/\x00\x00\x00(\xe6\x9em_\x1a\xbfTi\x15\x81\xd47\x8e\x86\xa2u~\x8cv\xe4\\\x91\xa8G!mm\f\xcf\xfb\x00'/97, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r11, 0x6, 0x9, 0x0, &(0x7f00000000c0)) 1m38.143244305s ago: executing program 0 (id=143): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x0) listen(0xffffffffffffffff, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x8a000, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x10002, 0x14f600) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x2, 0x4, 0x200, 0x0, {0x77359400}, {0x1, 0x1, 0x0, 0x0, 0x0, 0xfe, "05000100"}, 0x0, 0x2, {}, 0x20800}) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000fe0100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 1m38.050781881s ago: executing program 1 (id=144): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000280)={0x40, 0x31, 0x4, "1b145368"}, 0x0, 0x0, 0x0, 0x0}) 1m37.939599016s ago: executing program 4 (id=145): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000003000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000b005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000076070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080200000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m36.539476689s ago: executing program 3 (id=146): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_print_times', 0x101982, 0x0) sendfile(r1, r1, 0x0, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x50}}, 0x40020) (async) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000080)={0xb, 0xffff, 0x6, 0x880}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) (rerun: 64) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r5, @ANYBLOB="0500060001000000050007d60500000005000300df00000008000200", @ANYRES64=r2], 0x68}, 0x1, 0x0, 0x0, 0x4810}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000004c0)={{0x0, 0x1, 0x4, 0x100000000, 0x7f, 0x2, 0x10, 0x6, 0xa21d, 0xb48f, 0x0, 0x3ff, 0x56a19d20, 0xfff, 0x9}}) r7 = ioctl$USERFAULTFD_IOC_NEW(r1, 0xaa00) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)=[{0x0, 0x224}], 0x1, 0x0, 0x0, 0x2000a014}, 0x8d2b33bcafc19fd1) (async) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = dup(r8) ioctl$PTP_EXTTS_REQUEST2(r9, 0xc0603d0f, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r12, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f00000014c0)={r6, 0x7}) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20004000) 1m36.353127499s ago: executing program 4 (id=147): r0 = syz_io_uring_setup(0x18f9, &(0x7f0000000500)={0x0, 0x8007ffd, 0x1, 0x0, 0xf5fffffd}, &(0x7f0000000040), &(0x7f0000001280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000180)={0x200000000000001f, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000080)=[0x4, 0x9]}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x17, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000080)=0x800, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet(0xa, 0x801, 0x84) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@ipv6_getaddr={0x18, 0x16, 0x921, 0x0, 0xfffffffc}, 0x18}}, 0x94) r7 = add_key(&(0x7f00000002c0)='encrypted\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)='syz1\x00', r7) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r8 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x4b63, 0x3) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWFLOWTABLE={0x50, 0x16, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}]}]}, @NFT_MSG_DELSETELEM={0x44, 0xe, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xec}, 0x1, 0x0, 0x0, 0x4044}, 0x0) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) 1m36.352841694s ago: executing program 0 (id=148): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x4752, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xf9, 0xf0, 0x4, {0x8, 0xb, 0x2, 0x0, 0x1, 0x0, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x8, 0x9, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xf, 0xf, 0xa9, {0x8, 0x25, 0x1, 0x83, 0x3c, 0x7, 0xae}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0x72, 0x81, {0x8, 0x25, 0x1, 0x2, 0x0, 0x3, 0x7fff}}}}}}}}]}}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1f, @empty, 0x8}}, 0x1, 0x4}, &(0x7f00000001c0)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0x1ff}, 0xc) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 1m36.031324269s ago: executing program 2 (id=149): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) 1m34.400326527s ago: executing program 2 (id=150): r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000340)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xffffffff, &(0x7f0000000000)=[{0x400, 0x6, 0xfffffffffffffffc}], 0x1, 0x2, 0x2c, 0x2, 0x0, 0x20}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) io_uring_setup(0x1185, &(0x7f0000000040)={0x0, 0xed48, 0x2000, 0x4, 0xce}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000140)=0x7f) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) syz_io_uring_setup(0x1cfd, &(0x7f0000000400)={0x0, 0x100800, 0x8000, 0x1, 0x91}, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000240)) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r5, 0x40086602, &(0x7f0000000000)) 1m34.366456008s ago: executing program 1 (id=151): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000300), 0x101040, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000340)={0x3, r1, 0x1}) r3 = socket(0x1e, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) sendmmsg$sock(r3, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x2, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = dup(0xffffffffffffffff) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="4000000010003704000080000000000000000000f234ee84b512bccb1107535db1d981ac8ebc1f4ec7337435ad5b9e998813d9c7", @ANYRES32=r7, @ANYBLOB="83840500000000002000128008000100677265001400028006000e00030000000500170001000000"], 0x40}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x3) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20004001}, 0x8000) socket$inet_sctp(0x2, 0x5, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) r9 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{r9, 0x1100}], 0x1, 0x20002081) 1m34.255581592s ago: executing program 3 (id=152): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x44090}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @local}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x20240, 0x0) unshare(0x22020600) syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='attr\x00') unshare(0x26020480) r7 = fanotify_init(0x4000, 0x0) fanotify_mark(r7, 0x445, 0x1003, 0xffffffffffffffff, 0x0) r8 = open_tree(r6, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a4031, 0x0) 1m33.945798275s ago: executing program 4 (id=153): ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000c53000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x9, &(0x7f0000000340)=[{0x8, 0x8, 0x1}], 0x1, 0x1, 0x24, 0x10, 0x29, 0x6f}) r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x6c99, 0x40041) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x8bd4cec) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000080)={@local, @empty}, 0x8) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(0x0, 0x80, 0x8, 0x8010, r2, 0x8000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) munlockall() add_key$user(0x0, &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb8458", 0xb0, 0xffffffffffffffff) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={'sha256-ni\x00'}, 0x0, 0xffffffffffffff67}) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m33.430797605s ago: executing program 2 (id=154): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac184d"], 0x0, 0x0, 0x0, 0x0}) pread64(r0, &(0x7f0000000000)=""/2, 0x7, 0x200004) socket$inet(0x2, 0x4000000000080008, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000f06810b000000000000000001000006050001000700000006000b0080000000050001000700000006000b0002000000050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) listns(&(0x7f0000000000)={0x20, 0x0, 0x4, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0x0) 1m29.358680735s ago: executing program 4 (id=155): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028bd700bfbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x60, 0x30, 0x28, {0x28, 0xd, "94cffec6da69b5499ad59201968128d3eea73f44574981f6712f2736e332b659b2965223b481"}}, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001c00010029bd7000ffdbdf2507000003", @ANYRES32=r1, @ANYBLOB="80005f0a0a000200ffffffffffff000006000500"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040084) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001c00010029bd7000ffdbdf2507000003", @ANYRES32=r1, @ANYBLOB="80005f0a0a000200ffffffffffff000006000500"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200008c2}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x9) (async) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000001c0), 0x3) (async) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000001c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) writev(r6, &(0x7f0000000600)=[{&(0x7f0000000040)="18f17419b146a84cbeda9224297dac92d747ced31a35cd6d7b9b442343", 0x1d}, {&(0x7f0000000500)="edb4a0cdd18a271cdbaace5806cf8a2692bea8933fc7b9e8f05c9d5150d5e56f76c53ebff12630745660e26f01c67083b94f8b4b05", 0x35}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000100)={0x7, 0x21, 0x1}, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m29.039873046s ago: executing program 0 (id=156): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x60}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x1200081, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) lsetxattr$security_ima(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xfffffff8}]}}]}, 0x38}}, 0x4020000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00420040000000060000000c003900ff04000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r6, @ANYBLOB="08000500", @ANYRES64=r6], 0x8c}, 0x1, 0xba01, 0x0, 0x400c085}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x200048d4}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 1m26.40650352s ago: executing program 2 (id=157): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x24088000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff1000040000000000000005500", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900", [0x8, 0xffffffff9673e359]}}) 1m26.291679085s ago: executing program 0 (id=158): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000003000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000f005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000076070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080200000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m24.457648516s ago: executing program 4 (id=159): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x7}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x0, 0xff000000}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8, 0x0, 0xfff0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m24.425266291s ago: executing program 2 (id=160): getpgrp(0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x0, 0x10002, 0x5}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000004680)=[{{&(0x7f0000000340)=@qipcrtr, 0x80, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/51, 0x33}, {&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f0000000600)=""/118, 0x76}, {&(0x7f0000000400)=""/91, 0x5b}], 0x4, &(0x7f0000000740)=""/151, 0x97}, 0x1ff}, {{&(0x7f0000000800)=@hci, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000880)=""/229, 0xe5}, {&(0x7f0000000980)=""/50, 0x32}, {&(0x7f00000009c0)=""/77, 0x4d}, {&(0x7f0000000a40)=""/140, 0x8c}, {&(0x7f0000000b00)=""/106, 0x6a}, {0x0}], 0x6, &(0x7f0000000dc0)=""/115, 0x73}, 0x9}, {{&(0x7f0000000e40)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000ec0)=""/245, 0xf5}, {&(0x7f0000000680)=""/123, 0x7b}, {&(0x7f0000000b80)=""/17, 0x11}], 0x3, &(0x7f0000001000)=""/199, 0xc7}, 0x4}, {{&(0x7f0000001100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000001180)=""/232, 0xe8}, {&(0x7f0000001280)=""/152, 0x98}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/91, 0x5b}, {&(0x7f0000003200)=""/181, 0xb5}], 0x5, &(0x7f0000003340)=""/4096, 0x1000}, 0xd4c9}, {{&(0x7f0000004340)=@alg, 0x80, &(0x7f0000004640)=[{&(0x7f00000043c0)=""/117, 0x75}, {&(0x7f0000004440)=""/70, 0x46}, {&(0x7f00000044c0)=""/137, 0x89}, {&(0x7f0000004580)=""/167, 0xa7}], 0x4}, 0x28}], 0x5, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x8, 0x3}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)=ANY=[@ANYBLOB="2c0000000d0a01080085912f710000000a00fffe0900020073797a3100000000090001e473797a31000000002d76363cab137c615a5729232615ed6cd93a2005ef397008443ff34a2a2581ae42ad7fc5e67ddb10b608803763e65bba20dc332f39b474bcd6ff8f249ecb7ce5936cc5ed11b55f97ba3d1df6ae4b5bba166b3c12c551228c31f588ec21b25f"], 0x2c}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) listen(0xffffffffffffffff, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000417000/0x4000)=nil, 0x4000, 0x15) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) r5 = fanotify_init(0x200, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r5, 0x161, 0x8000000, r6, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x20a}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x890) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) 1m24.242873249s ago: executing program 3 (id=161): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) 1m24.148191435s ago: executing program 0 (id=162): unshare(0x42000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xc0, 0x20, 0x3, {0x8, 0xb, 0x1, 0x2, 0x1, 0x5, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x5ff1fe7c80e7d826, 0x9, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0x2, 0x0, {0x8, 0x25, 0x1, 0x81, 0xc, 0x9, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x3, 0xdb, {0x8, 0x25, 0x1, 0x80, 0xc, 0x3, 0x9}}}}}}}}]}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000010000020900010073797a3100000000080002400000000248000000030a010400000000000000000100ffff0900030073797a310000220014000480080002400000000008000140000000030900010073797a3100000000080007006e61740014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r3 = dup2(r0, r2) close_range(r3, 0xffffffffffffffff, 0x0) 1m14.265683924s ago: executing program 32 (id=151): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000300), 0x101040, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000340)={0x3, r1, 0x1}) r3 = socket(0x1e, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) sendmmsg$sock(r3, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x2, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = dup(0xffffffffffffffff) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="4000000010003704000080000000000000000000f234ee84b512bccb1107535db1d981ac8ebc1f4ec7337435ad5b9e998813d9c7", @ANYRES32=r7, @ANYBLOB="83840500000000002000128008000100677265001400028006000e00030000000500170001000000"], 0x40}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x3) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20004001}, 0x8000) socket$inet_sctp(0x2, 0x5, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) r9 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{r9, 0x1100}], 0x1, 0x20002081) 0s ago: executing program 33 (id=162): unshare(0x42000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xc0, 0x20, 0x3, {0x8, 0xb, 0x1, 0x2, 0x1, 0x5, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x5ff1fe7c80e7d826, 0x9, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0x2, 0x0, {0x8, 0x25, 0x1, 0x81, 0xc, 0x9, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x3, 0xdb, {0x8, 0x25, 0x1, 0x80, 0xc, 0x3, 0x9}}}}}}}}]}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000010000020900010073797a3100000000080002400000000248000000030a010400000000000000000100ffff0900030073797a310000220014000480080002400000000008000140000000030900010073797a3100000000080007006e61740014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r3 = dup2(r0, r2) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts. [ 82.139864][ T5605] cgroup: Unknown subsys name 'net' [ 82.235930][ T5605] cgroup: Unknown subsys name 'cpuset' [ 82.240481][ T5605] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.899657][ T5605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.257708][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.261815][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.269158][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.277400][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.292161][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.331394][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.340404][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.344123][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.356478][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.357150][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.399504][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.405952][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.430332][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.441064][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.450770][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.451907][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.466804][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.467337][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.467597][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.469292][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.469720][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.470918][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.477858][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.484195][ T5628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.528274][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.744952][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.745058][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.745192][ T5629] bridge_slave_0: entered allmulticast mode [ 87.747061][ T5629] bridge_slave_0: entered promiscuous mode [ 87.775059][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.775362][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.778634][ T5625] bridge_slave_0: entered allmulticast mode [ 87.784304][ T5625] bridge_slave_0: entered promiscuous mode [ 87.820556][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.820654][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.821021][ T5629] bridge_slave_1: entered allmulticast mode [ 87.827106][ T5629] bridge_slave_1: entered promiscuous mode [ 87.854582][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.854690][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.854798][ T5625] bridge_slave_1: entered allmulticast mode [ 87.856196][ T5625] bridge_slave_1: entered promiscuous mode [ 87.954108][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.954225][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.954691][ T5634] bridge_slave_0: entered allmulticast mode [ 87.956241][ T5634] bridge_slave_0: entered promiscuous mode [ 88.010885][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.011846][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.012155][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.012544][ T5634] bridge_slave_1: entered allmulticast mode [ 88.021974][ T5634] bridge_slave_1: entered promiscuous mode [ 88.046336][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.068212][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.068333][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.068437][ T5632] bridge_slave_0: entered allmulticast mode [ 88.069813][ T5632] bridge_slave_0: entered promiscuous mode [ 88.086754][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.128874][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.148439][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.148570][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.148699][ T5632] bridge_slave_1: entered allmulticast mode [ 88.150346][ T5632] bridge_slave_1: entered promiscuous mode [ 88.200519][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.218706][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.218827][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.218926][ T5633] bridge_slave_0: entered allmulticast mode [ 88.220287][ T5633] bridge_slave_0: entered promiscuous mode [ 88.258528][ T5629] team0: Port device team_slave_0 added [ 88.261367][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.283463][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.284409][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.284510][ T5633] bridge_slave_1: entered allmulticast mode [ 88.285857][ T5633] bridge_slave_1: entered promiscuous mode [ 88.320412][ T5629] team0: Port device team_slave_1 added [ 88.332707][ T5628] Bluetooth: hci0: command tx timeout [ 88.337245][ T5625] team0: Port device team_slave_0 added [ 88.366910][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.370792][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.411872][ T5628] Bluetooth: hci1: command tx timeout [ 88.412233][ T5625] team0: Port device team_slave_1 added [ 88.456493][ T5634] team0: Port device team_slave_0 added [ 88.474759][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.494152][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.494171][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.494197][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.498648][ T5634] team0: Port device team_slave_1 added [ 88.540971][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.555443][ T5632] team0: Port device team_slave_0 added [ 88.559151][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.559207][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.559286][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.575024][ T5628] Bluetooth: hci4: command tx timeout [ 88.575053][ T5617] Bluetooth: hci3: command tx timeout [ 88.575266][ T52] Bluetooth: hci2: command tx timeout [ 88.639612][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.639629][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.639651][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.695902][ T5632] team0: Port device team_slave_1 added [ 88.724429][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.724449][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.724477][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.786320][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.786348][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.786368][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.788049][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.788066][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.788094][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.789921][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.789933][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.789952][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.829365][ T5633] team0: Port device team_slave_0 added [ 88.836040][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.836056][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.836082][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.983020][ T5633] team0: Port device team_slave_1 added [ 89.022735][ T5629] hsr_slave_0: entered promiscuous mode [ 89.023627][ T5629] hsr_slave_1: entered promiscuous mode [ 89.053630][ T5625] hsr_slave_0: entered promiscuous mode [ 89.054454][ T5625] hsr_slave_1: entered promiscuous mode [ 89.055017][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 89.055084][ T5625] Cannot create hsr debugfs directory [ 89.097436][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.097452][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.097475][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.099696][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.099711][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.099737][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.230267][ T5632] hsr_slave_0: entered promiscuous mode [ 89.231299][ T5632] hsr_slave_1: entered promiscuous mode [ 89.234015][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 89.234067][ T5632] Cannot create hsr debugfs directory [ 89.265287][ T5634] hsr_slave_0: entered promiscuous mode [ 89.266114][ T5634] hsr_slave_1: entered promiscuous mode [ 89.266655][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 89.266676][ T5634] Cannot create hsr debugfs directory [ 89.479988][ T5633] hsr_slave_0: entered promiscuous mode [ 89.481038][ T5633] hsr_slave_1: entered promiscuous mode [ 89.481849][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 89.481916][ T5633] Cannot create hsr debugfs directory [ 89.992490][ T5632] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.014977][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.016883][ T5632] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.026567][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.035677][ T5632] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.053917][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.071282][ T5632] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.081191][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.150472][ T5629] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.170513][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.189873][ T5629] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.202135][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.203429][ T5629] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.208333][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.238922][ T5629] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.250727][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.366893][ T5634] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.385709][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.405399][ T5634] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.409408][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.410284][ T5634] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.412655][ T52] Bluetooth: hci0: command tx timeout [ 90.421151][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.457071][ T5634] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.460699][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.502593][ T52] Bluetooth: hci1: command tx timeout [ 90.582675][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.606606][ T5625] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.609603][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.610579][ T5625] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.638550][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.651814][ T52] Bluetooth: hci2: command tx timeout [ 90.651849][ T52] Bluetooth: hci3: command tx timeout [ 90.651948][ T52] Bluetooth: hci4: command tx timeout [ 90.657312][ T5625] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.664081][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.697293][ T5625] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.701188][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.767413][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.783966][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.820817][ T2239] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.821113][ T2239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.864265][ T5633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.868094][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.869670][ T5633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.895730][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.914268][ T5633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.917899][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.925531][ T2239] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.925903][ T2239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.956663][ T5633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.960162][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.978627][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.020743][ T2239] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.020818][ T2239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.071442][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.072008][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.169302][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.254782][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.283163][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.311617][ T2239] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.311727][ T2239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.346347][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.360052][ T2239] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.360161][ T2239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.380121][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.398554][ T1373] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.398650][ T1373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.445821][ T1373] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.445932][ T1373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.481390][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.511230][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.594271][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.616557][ T2239] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.616690][ T2239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.659855][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.659953][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.698228][ T5632] veth0_vlan: entered promiscuous mode [ 91.760193][ T5629] veth0_vlan: entered promiscuous mode [ 91.787572][ T5632] veth1_vlan: entered promiscuous mode [ 91.828525][ T5629] veth1_vlan: entered promiscuous mode [ 91.840929][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.869824][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.945593][ T124] cfg80211: failed to load regulatory.db [ 91.994575][ T5632] veth0_macvtap: entered promiscuous mode [ 92.025549][ T5632] veth1_macvtap: entered promiscuous mode [ 92.030981][ T5629] veth0_macvtap: entered promiscuous mode [ 92.066442][ T5629] veth1_macvtap: entered promiscuous mode [ 92.078318][ T5634] veth0_vlan: entered promiscuous mode [ 92.097212][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.136985][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.151094][ T5634] veth1_vlan: entered promiscuous mode [ 92.177616][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.179279][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.180393][ T5625] veth0_vlan: entered promiscuous mode [ 92.212797][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.274489][ T5625] veth1_vlan: entered promiscuous mode [ 92.312198][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.393647][ T39] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.393780][ T39] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.393862][ T39] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.393906][ T39] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.393949][ T39] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.393993][ T39] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.394036][ T39] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.492020][ T5617] Bluetooth: hci0: command tx timeout [ 92.511331][ T5634] veth0_macvtap: entered promiscuous mode [ 92.527945][ T5633] veth0_vlan: entered promiscuous mode [ 92.545823][ T5634] veth1_macvtap: entered promiscuous mode [ 92.572112][ T5617] Bluetooth: hci1: command tx timeout [ 92.597792][ T5633] veth1_vlan: entered promiscuous mode [ 92.632557][ T5625] veth0_macvtap: entered promiscuous mode [ 92.641349][ T2239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.641375][ T2239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.646396][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.697400][ T5625] veth1_macvtap: entered promiscuous mode [ 92.720537][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.722715][ T2239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.722770][ T2239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.735364][ T5617] Bluetooth: hci4: command tx timeout [ 92.735464][ T5617] Bluetooth: hci3: command tx timeout [ 92.735536][ T5617] Bluetooth: hci2: command tx timeout [ 92.836969][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.836985][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.839774][ T5633] veth0_macvtap: entered promiscuous mode [ 92.876663][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.899879][ T5633] veth1_macvtap: entered promiscuous mode [ 92.943666][ T2239] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.943720][ T2239] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.943760][ T2239] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.943798][ T2239] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.947985][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.948006][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.951129][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.083940][ T5632] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.145124][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.185665][ T2239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.185688][ T2239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.210209][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.293973][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.294283][ T1373] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.294327][ T1373] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.294368][ T1373] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.378325][ T2239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.378363][ T2239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.401662][ T2239] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.401716][ T2239] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.402674][ T2239] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.402716][ T2239] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.557818][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.557836][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.624975][ T31] audit: type=1326 audit(1790983032.874:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b519e159 code=0x7ffc0000 [ 93.627635][ T31] audit: type=1326 audit(1790983032.874:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b519e159 code=0x7ffc0000 [ 93.690426][ T31] audit: type=1326 audit(1790983032.934:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd1b519e159 code=0x7ffc0000 [ 93.717933][ T31] audit: type=1326 audit(1790983032.964:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b519e159 code=0x7ffc0000 [ 93.718281][ T31] audit: type=1326 audit(1790983032.964:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b519e159 code=0x7ffc0000 [ 93.721118][ T31] audit: type=1326 audit(1790983032.964:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b519e159 code=0x7ffc0000 [ 93.721295][ T31] audit: type=1326 audit(1790983032.964:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b519e159 code=0x7ffc0000 [ 93.830674][ T31] audit: type=1326 audit(1790983033.074:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd1b519e159 code=0x7ffc0000 [ 93.838322][ T31] audit: type=1326 audit(1790983033.084:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b519e159 code=0x7ffc0000 [ 93.838479][ T31] audit: type=1326 audit(1790983033.084:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd1b519dec2 code=0x7ffc0000 [ 94.038975][ T2239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.039000][ T2239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.167950][ T1373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.167972][ T1373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.307220][ T5719] kernel profiling enabled (shift: 9) [ 94.370436][ T5724] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4'. [ 94.471183][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.471201][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.573572][ T52] Bluetooth: hci0: command tx timeout [ 94.662540][ T52] Bluetooth: hci1: command tx timeout [ 94.812873][ T5617] Bluetooth: hci3: command tx timeout [ 94.812911][ T5617] Bluetooth: hci4: command tx timeout [ 94.812959][ T52] Bluetooth: hci2: command tx timeout [ 95.383475][ T5695] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 95.574855][ T5695] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 95.600411][ T5695] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.600450][ T5695] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 95.600482][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.684870][ T5695] usb 3-1: config 0 descriptor?? [ 95.745588][ T5695] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 95.768916][ T5740] syz.1.9 uses obsolete (PF_INET,SOCK_PACKET) [ 96.132151][ T5705] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.175477][ T5744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10'. [ 96.228246][ T5745] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10'. [ 96.243792][ T5744] vlan2: entered allmulticast mode [ 96.243825][ T5744] bond0: entered allmulticast mode [ 96.243841][ T5744] bond_slave_0: entered allmulticast mode [ 96.243859][ T5744] bond_slave_1: entered allmulticast mode [ 96.298607][ T5705] usb 2-1: Using ep0 maxpacket: 32 [ 96.301765][ T5705] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 96.306419][ T5705] usb 2-1: config 0 has no interfaces? [ 96.329554][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.329584][ T5705] usb 2-1: Product: syz [ 96.329600][ T5705] usb 2-1: Manufacturer: syz [ 96.329616][ T5705] usb 2-1: SerialNumber: syz [ 96.351397][ T39] IPVS: starting estimator thread 0... [ 96.423446][ T5746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.425368][ T5746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.451728][ T5747] IPVS: using max 25 ests per chain, 60000 per kthread [ 96.453413][ T5705] usb 2-1: config 0 descriptor?? [ 96.516133][ T5745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.548381][ T5745] bond_slave_0: left allmulticast mode [ 96.585795][ T5745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.610302][ T5745] bond_slave_1: left allmulticast mode [ 96.622143][ T5745] bond0 (unregistering): Released all slaves [ 96.622802][ T1893] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.678415][ T5750] netlink: 'syz.0.11': attribute type 7 has an invalid length. [ 96.678438][ T5750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'. [ 96.706914][ T5748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.732495][ T5748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.736170][ T10] usb 2-1: USB disconnect, device number 2 [ 96.765904][ T5750] Zero length message leads to an empty skb [ 96.777930][ T60] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.778278][ T60] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.778669][ T60] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.803276][ T1893] usb 5-1: Using ep0 maxpacket: 32 [ 96.825374][ T60] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.842863][ T1893] usb 5-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=35.09 [ 96.849449][ T1893] usb 5-1: config 2 has an invalid interface number: 51 but max is 0 [ 96.849472][ T1893] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 96.849486][ T1893] usb 5-1: config 2 has no interface number 0 [ 96.849518][ T1893] usb 5-1: config 2 interface 51 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0 [ 96.849536][ T1893] usb 5-1: config 2 interface 51 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 96.849551][ T1893] usb 5-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 96.849567][ T1893] usb 5-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 96.849584][ T1893] usb 5-1: config 2 interface 51 altsetting 255 has 8 endpoint descriptors, different from the interface descriptor's value: 14 [ 96.849603][ T1893] usb 5-1: config 2 interface 51 has no altsetting 0 [ 96.901320][ T1893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.901410][ T1893] usb 5-1: Product: syz [ 96.901452][ T1893] usb 5-1: Manufacturer: syz [ 96.901494][ T1893] usb 5-1: SerialNumber: syz [ 97.045621][ T5744] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 97.705586][ T921] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.414371][ T5675] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.593416][ T5675] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 98.594790][ T5675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 98.594812][ T5675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 98.594828][ T5675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 98.594846][ T5675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 98.599283][ T5675] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.599302][ T5675] usb 2-1: Product: syz [ 98.599313][ T5675] usb 2-1: Manufacturer: syz [ 98.599324][ T5675] usb 2-1: SerialNumber: syz [ 98.704461][ T5675] usb 2-1: config 0 descriptor?? [ 98.990390][ T5706] usb 3-1: USB disconnect, device number 2 [ 99.004778][ T5675] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 99.005672][ T5767] binder: BINDER_SET_CONTEXT_MGR already set [ 99.005686][ T5767] binder: 5766:5767 ioctl 4018620d 200000004a80 returned -16 [ 99.265905][ T30] usb 2-1: USB disconnect, device number 3 [ 99.324366][ T1893] keyspan_pda 5-1:2.51: required endpoints missing [ 99.371583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.415265][ T5773] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.457158][ T1893] usb 5-1: USB disconnect, device number 2 [ 99.698100][ T5777] netlink: 332 bytes leftover after parsing attributes in process `syz.4.17'. [ 99.837007][ T5779] netlink: 'syz.0.18': attribute type 4 has an invalid length. [ 99.872056][ T5779] netlink: 'syz.0.18': attribute type 4 has an invalid length. [ 100.430895][ T31] kauditd_printk_skb: 225 callbacks suppressed [ 100.430917][ T31] audit: type=1326 audit(1790983039.674:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5787 comm="syz.0.22" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc9f7b9e159 code=0x0 [ 100.673698][ T5801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.674177][ T5801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.744051][ T5799] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 100.817551][ T5807] process 'syz.3.23' launched './file1' with NULL argv: empty string added [ 100.872099][ T921] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.043781][ T921] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 101.045140][ T921] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.045167][ T921] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.046547][ T921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 101.046571][ T921] usb 2-1: SerialNumber: syz [ 101.492995][ T921] usb 2-1: 0:2 : does not exist [ 101.584228][ T5814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27'. [ 101.675141][ T5814] bond0: Invalid ad_actor_system MAC address. [ 101.675165][ T5814] bond0: option ad_actor_system: invalid value (3303287) [ 101.684291][ T5814] bond0 (unregistering): Released all slaves [ 101.781298][ T921] usb 2-1: USB disconnect, device number 4 [ 101.926660][ T5751] udevd[5751]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.953605][ T5706] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.954900][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.103349][ T5706] usb 1-1: Using ep0 maxpacket: 16 [ 102.108034][ T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 102.136988][ T5706] usb 1-1: unable to get BOS descriptor or descriptor too short [ 102.137058][ T5706] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 102.159359][ T5706] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.159448][ T5706] usb 1-1: config 1 interface 0 has no altsetting 0 [ 102.190591][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 102.190628][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 102.190653][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 102.190681][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 102.212682][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.212702][ T5706] usb 1-1: Product: syz [ 102.212713][ T5706] usb 1-1: Manufacturer: syz [ 102.212756][ T5706] usb 1-1: SerialNumber: syz [ 102.277463][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.277494][ T10] usb 3-1: Product: syz [ 102.277509][ T10] usb 3-1: Manufacturer: syz [ 102.277524][ T10] usb 3-1: SerialNumber: syz [ 102.323874][ T10] usb 3-1: config 0 descriptor?? [ 102.531038][ T5706] snd-ua101 1-1:1.1: invalid num_altsetting [ 102.589979][ T10] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 102.674122][ T5706] usb 1-1: USB disconnect, device number 3 [ 102.827183][ T25] usb 3-1: USB disconnect, device number 3 [ 103.326416][ T5829] xt_l2tp: missing protocol rule (udp|l2tpip) [ 103.326808][ T5828] xt_l2tp: missing protocol rule (udp|l2tpip) [ 104.423615][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.596791][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 104.597663][ T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 104.599013][ T25] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 104.599039][ T25] usb 3-1: config 0 has no interface number 0 [ 104.599081][ T25] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.599110][ T25] usb 3-1: config 0 interface 85 has no altsetting 0 [ 104.667931][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.667964][ T25] usb 3-1: Product: syz [ 104.667981][ T25] usb 3-1: Manufacturer: syz [ 104.667997][ T25] usb 3-1: SerialNumber: syz [ 104.701433][ T25] usb 3-1: config 0 descriptor?? [ 104.912979][ T25] appletouch 3-1:0.85: Failed to read mode from device. [ 104.913151][ T25] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 105.152487][ T25] usb 3-1: USB disconnect, device number 4 [ 105.296131][ T5856] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 106.221691][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 106.371850][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 106.372556][ T25] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 106.376888][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.376906][ T25] usb 2-1: Product: syz [ 106.376917][ T25] usb 2-1: Manufacturer: syz [ 106.376928][ T25] usb 2-1: SerialNumber: syz [ 106.865753][ T25] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 106.898256][ T25] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 107.218665][ T25] usb 2-1: USB disconnect, device number 5 [ 107.311597][ T30] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.449167][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.470705][ T30] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.492482][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.492519][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.492543][ T30] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.492588][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.548243][ T30] usb 4-1: config 0 descriptor?? [ 108.093046][ T31] audit: type=1326 audit(1790983047.344:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.4.47" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084959e159 code=0x7ffc0000 [ 108.093117][ T31] audit: type=1326 audit(1790983047.344:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.4.47" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084959e159 code=0x7ffc0000 [ 108.099709][ T31] audit: type=1326 audit(1790983047.344:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.4.47" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f084959e159 code=0x7ffc0000 [ 108.104080][ T31] audit: type=1326 audit(1790983047.354:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.4.47" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084959e159 code=0x7ffc0000 [ 108.104119][ T31] audit: type=1326 audit(1790983047.354:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.4.47" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084959e159 code=0x7ffc0000 [ 108.183156][ T31] audit: type=1326 audit(1790983047.404:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.4.47" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084959e159 code=0x7ffc0000 [ 108.183307][ T31] audit: type=1326 audit(1790983047.434:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.4.47" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084959e159 code=0x7ffc0000 [ 108.190651][ T31] audit: type=1326 audit(1790983047.434:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.4.47" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f084959e159 code=0x7ffc0000 [ 108.312043][ T31] audit: type=1326 audit(1790983047.564:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.4.47" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084959e159 code=0x7ffc0000 [ 108.312108][ T31] audit: type=1326 audit(1790983047.564:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.4.47" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f084959dec2 code=0x7ffc0000 [ 108.314304][ T30] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 108.314346][ T30] plantronics 0003:047F:FFFF.0001: item fetching failed at offset 13/15 [ 108.315253][ T30] plantronics 0003:047F:FFFF.0001: parse failed [ 108.315364][ T30] plantronics 0003:047F:FFFF.0001: probe with driver plantronics failed with error -22 [ 108.405290][ T5877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.410247][ T5877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.616683][ T5887] loop8: detected capacity change from 0 to 7 [ 108.692557][ T1893] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 108.707837][ T5887] Dev loop8: unable to read RDB block 7 [ 108.708004][ T5887] loop8: unable to read partition table [ 108.708547][ T5887] loop8: partition table beyond EOD, truncated [ 108.715152][ T5887] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 108.779376][ T5675] usb 4-1: USB disconnect, device number 2 [ 108.847560][ T1893] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 108.848211][ T1893] usb 3-1: config 0 has no interfaces? [ 108.882109][ T1893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.882139][ T1893] usb 3-1: Product: syz [ 108.882156][ T1893] usb 3-1: Manufacturer: syz [ 108.882171][ T1893] usb 3-1: SerialNumber: syz [ 108.970369][ T1893] usb 3-1: config 0 descriptor?? [ 109.171669][ T10] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 109.324523][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 109.329227][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 109.329258][ T10] usb 2-1: config 0 has no interface number 0 [ 109.329299][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 109.329323][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 109.329350][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 109.329376][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 109.329403][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 109.329461][ T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 109.329505][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.450529][ T10] usb 2-1: config 0 descriptor?? [ 109.462004][ T5893] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.462163][ T5893] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.506475][ T10] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 109.574064][ T30] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.732892][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 109.735228][ T30] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 109.758670][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.758690][ T30] usb 1-1: Product: syz [ 109.758714][ T30] usb 1-1: Manufacturer: syz [ 109.758730][ T30] usb 1-1: SerialNumber: syz [ 109.810031][ T10] usb 3-1: USB disconnect, device number 5 [ 109.880421][ T5905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.974665][ T5905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.072855][ T30] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 110.118403][ T30] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 110.120546][ T30] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 110.120605][ T30] usb 1-1: media controller created [ 110.141700][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.193479][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.482700][ T30] zl10353_read_register: readreg error (reg=127, ret==-110) [ 111.005676][ T921] usb 2-1: USB disconnect, device number 6 [ 111.058992][ T921] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 111.431043][ T5920] xt_bpf: check failed: parse error [ 111.448582][ T30] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 111.482335][ T30] usb 1-1: USB disconnect, device number 4 [ 112.334237][ T5946] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 112.647125][ T5955] xt_bpf: check failed: parse error [ 112.730358][ T5960] FAULT_INJECTION: forcing a failure. [ 112.730358][ T5960] name failslab, interval 1, probability 0, space 0, times 1 [ 112.730398][ T5960] CPU: 0 UID: 0 PID: 5960 Comm: syz.4.67 Not tainted syzkaller #0 PREEMPT(full) [ 112.730415][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.730431][ T5960] Call Trace: [ 112.730439][ T5960] [ 112.730446][ T5960] dump_stack_lvl+0xe8/0x150 [ 112.730482][ T5960] should_fail_ex+0x410/0x560 [ 112.730504][ T5960] ? __alloc_skb+0x1db/0x7a0 [ 112.730525][ T5960] should_failslab+0xa8/0x100 [ 112.730547][ T5960] ? __alloc_skb+0x1db/0x7a0 [ 112.730565][ T5960] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 112.730582][ T5960] ? __alloc_skb+0x18d/0x7a0 [ 112.730613][ T5960] ? __alloc_skb+0x1db/0x7a0 [ 112.730638][ T5960] __alloc_skb+0x1db/0x7a0 [ 112.730661][ T5960] netlink_sendmsg+0x5d4/0xb40 [ 112.730685][ T5960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.730707][ T5960] ? apparmor_socket_sendmsg+0x98/0x360 [ 112.730728][ T5960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.730743][ T5960] sock_sendmsg_nosec+0x13a/0x180 [ 112.730763][ T5960] ____sys_sendmsg+0x54e/0x850 [ 112.730791][ T5960] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.730822][ T5960] ? import_iovec+0x73/0xa0 [ 112.730846][ T5960] ___sys_sendmsg+0x2a5/0x360 [ 112.730868][ T5960] ? __lock_acquire+0x747/0x2de0 [ 112.730889][ T5960] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.730936][ T5960] ? __fget_files+0x2a/0x420 [ 112.730959][ T5960] ? __fget_files+0x3a2/0x420 [ 112.730989][ T5960] __x64_sys_sendmsg+0x1b1/0x290 [ 112.731014][ T5960] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 112.731052][ T5960] do_syscall_64+0x166/0x520 [ 112.731074][ T5960] ? trace_irq_disable+0x3b/0x140 [ 112.731091][ T5960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.731107][ T5960] ? clear_bhb_loop+0x70/0xc0 [ 112.731126][ T5960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.731142][ T5960] RIP: 0033:0x7f084959e159 [ 112.731160][ T5960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.731176][ T5960] RSP: 002b:00007f084a4f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.731197][ T5960] RAX: ffffffffffffffda RBX: 00007f0849825fa0 RCX: 00007f084959e159 [ 112.731208][ T5960] RDX: 0000000000044850 RSI: 0000200000000740 RDI: 0000000000000003 [ 112.731218][ T5960] RBP: 00007f084a4f2090 R08: 0000000000000000 R09: 0000000000000000 [ 112.731228][ T5960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.731237][ T5960] R13: 00007f0849826038 R14: 00007f0849825fa0 R15: 00007f084994fa48 [ 112.731261][ T5960] [ 112.878703][ T921] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 113.105883][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 113.256193][ T10] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 113.260664][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.260713][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 113.260729][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 113.260745][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.333159][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.333191][ T10] usb 3-1: Product: syz [ 113.333207][ T10] usb 3-1: Manufacturer: syz [ 113.333223][ T10] usb 3-1: SerialNumber: syz [ 113.536808][ T5973] netlink: 36 bytes leftover after parsing attributes in process `syz.0.68'. [ 113.641630][ T10] usb 3-1: usb_control_msg returned -71 [ 113.641693][ T10] usbtmc 3-1:1.0: can't read capabilities [ 113.770748][ T10] usb 3-1: USB disconnect, device number 6 [ 114.321562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 114.325572][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 114.473665][ T10] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 114.477244][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.477296][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 114.477320][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 114.477345][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.491652][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 114.556337][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.556360][ T10] usb 3-1: Product: syz [ 114.556371][ T10] usb 3-1: Manufacturer: 嵡妒臉뙆䭫窓缘允鈬ᚫ戅큞藬➨ꂦ醟幠娣ꮲ★輰㥃ⷫ釛误惾셄蕀導ὲ떏輱绥׀﹑乺⠠韱迊⽶ΰ붿끎쿡ᏸ꯷ᶁ梺켾濧얅攌饳㔳蚩烃洵횢峎賂钅錶⮌贅㞗迯㑎鞬ኼ﹗ԅ⎄樸鷂씐⁹쟦챔ᄐꝢ䑧⌫䬄譵冁⍁牫⹲ڃ뫪理 [ 114.556414][ T10] usb 3-1: SerialNumber: syz [ 114.937342][ T5953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.940572][ T5953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.941115][ T5953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.204084][ T10] usb 3-1: usb_control_msg returned -71 [ 116.204135][ T10] usbtmc 3-1:1.0: can't read capabilities [ 116.332615][ T10] usb 3-1: USB disconnect, device number 7 [ 116.522037][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 116.683977][ T25] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 116.685094][ T25] usb 1-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 116.712698][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.712726][ T25] usb 1-1: Product: syz [ 116.712741][ T25] usb 1-1: Manufacturer: syz [ 116.712756][ T25] usb 1-1: SerialNumber: syz [ 116.764331][ T25] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 116.764643][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 116.822415][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 116.825016][ T25] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 116.825070][ T25] usb 1-1: media controller created [ 116.879123][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.954407][ T25] DVB: Unable to find symbol mt352_attach() [ 116.954429][ T25] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 116.956441][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 116.985179][ T25] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 116.990733][ T5979] dvb-usb: bulk message failed: -22 (2/0) [ 117.073319][ T1893] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 117.154695][ T10] usb 1-1: USB disconnect, device number 5 [ 117.178107][ T6018] Cannot find add_set index 4 as target [ 117.240363][ T1893] usb 5-1: Using ep0 maxpacket: 8 [ 117.249523][ T1893] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.271742][ T1893] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 117.271799][ T1893] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.271822][ T1893] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.271848][ T1893] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.271873][ T1893] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.271918][ T1893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.470083][ T10] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 117.593739][ T1893] usb 5-1: GET_CAPABILITIES returned 0 [ 117.593790][ T1893] usbtmc 5-1:16.0: can't read capabilities [ 117.860363][ T1893] usb 5-1: USB disconnect, device number 3 [ 118.355892][ T921] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 118.481599][ T921] usb 3-1: device descriptor read/64, error -71 [ 118.732461][ T921] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 118.751864][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 118.861601][ T921] usb 3-1: device descriptor read/64, error -71 [ 118.882434][ T10] usb 2-1: device descriptor read/64, error -71 [ 118.971992][ T921] usb usb3-port1: attempt power cycle [ 119.122423][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 119.251943][ T10] usb 2-1: device descriptor read/64, error -71 [ 119.331623][ T921] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 119.352389][ T921] usb 3-1: device descriptor read/8, error -71 [ 119.367919][ T10] usb usb2-port1: attempt power cycle [ 119.595941][ T921] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 119.633532][ T921] usb 3-1: device descriptor read/8, error -71 [ 119.690669][ T6087] xt_bpf: check failed: parse error [ 119.704252][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 119.730578][ T10] usb 2-1: device descriptor read/8, error -71 [ 119.742036][ T921] usb usb3-port1: unable to enumerate USB device [ 119.877136][ T6094] mmap: syz.0.94 (6094) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 119.961936][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 119.972340][ T6092] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 119.989317][ T10] usb 2-1: device descriptor read/8, error -71 [ 120.095098][ T10] usb usb2-port1: unable to enumerate USB device [ 120.447726][ T6102] netlink: 52 bytes leftover after parsing attributes in process `syz.0.94'. [ 120.508425][ T6116] loop9: detected capacity change from 0 to 7 [ 120.532446][ T6116] Dev loop9: unable to read RDB block 7 [ 120.532494][ T6116] loop9: unable to read partition table [ 120.532688][ T6116] loop9: partition table beyond EOD, truncated [ 120.532722][ T6116] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 120.642866][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.99'. [ 121.349406][ T6148] xt_bpf: check failed: parse error [ 121.492126][ T921] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 121.658887][ T921] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 121.683839][ T921] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 121.683868][ T921] usb 3-1: Product: syz [ 121.683883][ T921] usb 3-1: SerialNumber: syz [ 121.710142][ T921] usb 3-1: config 0 descriptor?? [ 121.959910][ T921] hso 3-1:0.0: Failed to find BULK eps [ 122.023748][ T9] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 122.192275][ T9] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 122.193355][ T9] usb 2-1: config 4 has an invalid interface number: 88 but max is 0 [ 122.193382][ T9] usb 2-1: config 4 has no interface number 0 [ 122.193426][ T9] usb 2-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 122.193451][ T9] usb 2-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 122.193478][ T9] usb 2-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 122.193507][ T9] usb 2-1: config 4 interface 88 has no altsetting 0 [ 122.195045][ T9] usb 2-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 122.195071][ T9] usb 2-1: Manufacturer: syz [ 122.195088][ T9] usb 2-1: SerialNumber: syz [ 122.300247][ T6160] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 122.349572][ T6182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.350074][ T6182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.636364][ T1893] usb 3-1: USB disconnect, device number 12 [ 123.401301][ T6202] FAULT_INJECTION: forcing a failure. [ 123.401301][ T6202] name failslab, interval 1, probability 0, space 0, times 0 [ 123.401337][ T6202] CPU: 1 UID: 0 PID: 6202 Comm: syz.2.114 Not tainted syzkaller #0 PREEMPT(full) [ 123.401361][ T6202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.401374][ T6202] Call Trace: [ 123.401383][ T6202] [ 123.401392][ T6202] dump_stack_lvl+0xe8/0x150 [ 123.401428][ T6202] should_fail_ex+0x410/0x560 [ 123.401459][ T6202] ? __alloc_skb+0x1db/0x7a0 [ 123.401490][ T6202] should_failslab+0xa8/0x100 [ 123.401518][ T6202] ? __alloc_skb+0x1db/0x7a0 [ 123.401544][ T6202] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 123.401566][ T6202] ? __alloc_skb+0x18d/0x7a0 [ 123.401594][ T6202] ? __alloc_skb+0x1db/0x7a0 [ 123.401629][ T6202] __alloc_skb+0x1db/0x7a0 [ 123.401661][ T6202] netlink_ack+0x136/0xb30 [ 123.401681][ T6202] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 123.401709][ T6202] ? ref_tracker_free+0x689/0x830 [ 123.401740][ T6202] ? __pfx_ref_tracker_free+0x10/0x10 [ 123.401780][ T6202] netlink_rcv_skb+0x2a4/0x4a0 [ 123.401803][ T6202] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 123.401835][ T6202] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 123.401871][ T6202] ? netlink_deliver_tap+0x2e/0x1b0 [ 123.401893][ T6202] ? netlink_deliver_tap+0x2e/0x1b0 [ 123.401921][ T6202] netlink_unicast+0x7bd/0x940 [ 123.401965][ T6202] netlink_sendmsg+0x813/0xb40 [ 123.401997][ T6202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.402029][ T6202] ? apparmor_socket_sendmsg+0x98/0x360 [ 123.402058][ T6202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.402079][ T6202] sock_sendmsg_nosec+0x13a/0x180 [ 123.402114][ T6202] ____sys_sendmsg+0x54e/0x850 [ 123.402153][ T6202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.402194][ T6202] ? import_iovec+0x73/0xa0 [ 123.402227][ T6202] ___sys_sendmsg+0x2a5/0x360 [ 123.402257][ T6202] ? __lock_acquire+0x747/0x2de0 [ 123.402286][ T6202] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.402355][ T6202] ? __fget_files+0x2a/0x420 [ 123.402386][ T6202] ? __fget_files+0x3a2/0x420 [ 123.402429][ T6202] __x64_sys_sendmsg+0x1b1/0x290 [ 123.402464][ T6202] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 123.402518][ T6202] do_syscall_64+0x166/0x520 [ 123.402548][ T6202] ? trace_irq_disable+0x3b/0x140 [ 123.402572][ T6202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.402595][ T6202] ? clear_bhb_loop+0x70/0xc0 [ 123.402622][ T6202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.402644][ T6202] RIP: 0033:0x7f273039e159 [ 123.402664][ T6202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.402682][ T6202] RSP: 002b:00007f27312cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.402706][ T6202] RAX: ffffffffffffffda RBX: 00007f2730625fa0 RCX: 00007f273039e159 [ 123.402722][ T6202] RDX: 0000000000044850 RSI: 0000200000000740 RDI: 0000000000000003 [ 123.402737][ T6202] RBP: 00007f27312cf090 R08: 0000000000000000 R09: 0000000000000000 [ 123.402750][ T6202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.402763][ T6202] R13: 00007f2730626038 R14: 00007f2730625fa0 R15: 00007f273074fa48 [ 123.402798][ T6202] [ 123.974121][ T31] kauditd_printk_skb: 163 callbacks suppressed [ 123.974145][ T31] audit: type=1326 audit(1790983063.204:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.2.116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273039e159 code=0x7ffc0000 [ 123.974197][ T31] audit: type=1326 audit(1790983063.214:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.2.116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273039e159 code=0x7ffc0000 [ 124.032676][ T31] audit: type=1326 audit(1790983063.264:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.2.116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273039e159 code=0x7ffc0000 [ 124.032841][ T31] audit: type=1326 audit(1790983063.264:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.2.116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f273039e159 code=0x7ffc0000 [ 124.032948][ T31] audit: type=1326 audit(1790983063.264:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.2.116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273039e159 code=0x7ffc0000 [ 124.033070][ T31] audit: type=1326 audit(1790983063.264:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.2.116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273039e159 code=0x7ffc0000 [ 124.033193][ T31] audit: type=1326 audit(1790983063.264:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.2.116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273039e159 code=0x7ffc0000 [ 124.033292][ T31] audit: type=1326 audit(1790983063.274:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.2.116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273039e159 code=0x7ffc0000 [ 124.033404][ T31] audit: type=1326 audit(1790983063.274:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.2.116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273039e159 code=0x7ffc0000 [ 124.033516][ T31] audit: type=1326 audit(1790983063.274:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.2.116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f273035e98e code=0x7ffc0000 [ 124.777972][ T6219] loop8: detected capacity change from 0 to 7 [ 124.792461][ T6219] Dev loop8: unable to read RDB block 7 [ 124.792508][ T6219] loop8: unable to read partition table [ 124.792715][ T6219] loop8: partition table beyond EOD, truncated [ 124.797672][ T6219] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 125.469910][ T6228] loop4: detected capacity change from 0 to 7 [ 125.495037][ T6228] Dev loop4: unable to read RDB block 7 [ 125.495085][ T6228] loop4: unable to read partition table [ 125.495294][ T6228] loop4: partition table beyond EOD, truncated [ 125.495335][ T6228] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 125.711655][ T5706] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 125.862327][ T5706] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 125.864420][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.864452][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.864493][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.881405][ T5706] usb 3-1: config 0 descriptor?? [ 125.888596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 126.421246][ T6252] syzkaller1: entered promiscuous mode [ 126.421272][ T6252] syzkaller1: entered allmulticast mode [ 127.168501][ T5706] hid-led 0003:27B8:01ED.0002: probe with driver hid-led failed with error -71 [ 127.213520][ T5706] usb 3-1: USB disconnect, device number 13 [ 128.203047][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'. [ 128.304677][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.136'. [ 129.142217][ T10] usb 2-1: USB disconnect, device number 11 [ 129.346924][ T6304] netlink: 'syz.3.142': attribute type 12 has an invalid length. [ 129.609527][ T6308] loop8: detected capacity change from 0 to 7 [ 129.813366][ T30] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 129.959019][ T30] usb 2-1: device descriptor read/64, error -71 [ 130.191629][ T30] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 130.282641][ T6308] Dev loop8: unable to read RDB block 7 [ 130.282689][ T6308] loop8: unable to read partition table [ 130.282895][ T6308] loop8: partition table beyond EOD, truncated [ 130.282934][ T6308] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 130.391687][ T30] usb 2-1: device descriptor read/64, error -71 [ 130.510044][ T30] usb usb2-port1: attempt power cycle [ 131.161941][ T30] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 131.186821][ T30] usb 2-1: device descriptor read/8, error -71 [ 131.421938][ T30] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 131.458142][ T30] usb 2-1: device descriptor read/8, error -71 [ 131.596918][ T30] usb usb2-port1: unable to enumerate USB device [ 131.666841][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.146'. [ 132.018068][ T6327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.146'. [ 132.038840][ T6322] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 132.188374][ T6322] erspan0: entered promiscuous mode [ 132.932352][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.932445][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.814273][ T5706] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 135.055732][ T5706] usb 1-1: unable to get BOS descriptor or descriptor too short [ 135.056551][ T5706] usb 1-1: not running at top speed; connect to a high speed hub [ 135.056586][ T5706] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 135.060367][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.060394][ T5706] usb 1-1: Product: syz [ 135.060410][ T5706] usb 1-1: Manufacturer: syz [ 135.060425][ T5706] usb 1-1: SerialNumber: syz [ 135.500527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 135.661697][ T5695] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 135.741528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 136.231528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 136.441527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.878206][ T5695] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 136.880704][ T5695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.880765][ T5695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.880806][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.007302][ T5706] usb 1-1: can't set config #1, error -71 [ 137.036372][ T5706] usb 1-1: USB disconnect, device number 6 [ 137.042367][ T5695] usb 3-1: config 0 descriptor?? [ 137.185020][ T6354] netlink: 32 bytes leftover after parsing attributes in process `syz.1.151'. [ 137.600488][ T5695] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 137.600527][ T5695] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 137.600556][ T5695] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 137.614155][ T5695] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 137.614195][ T5695] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 137.614223][ T5695] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 137.614251][ T5695] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 138.518451][ T5695] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 138.772457][ T5695] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x00 [ 138.950777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 139.034928][ T6352] netlink: 32 bytes leftover after parsing attributes in process `syz.2.154'. [ 139.102846][ T6364] netlink: 'syz.0.156': attribute type 5 has an invalid length. [ 140.458888][ T6371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.156'. [ 140.458933][ T6371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.156'. [ 140.564915][ T6371] 8021q: VLANs not supported on ip6tnl0 [ 140.983098][ T5695] cp2112 0003:10C4:EA90.0003: error setting SMBus config [ 141.230375][ T5695] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -71 [ 141.314616][ T5695] usb 3-1: USB disconnect, device number 14 [ 142.384765][ T6380] loop4: detected capacity change from 0 to 7 [ 142.444308][ T6380] Dev loop4: unable to read RDB block 7 [ 142.444355][ T6380] loop4: AHDI p1 p2 p3 [ 142.444379][ T6380] loop4: partition table partially beyond EOD, truncated [ 142.444668][ T6380] loop4: p1 start 1601398130 is beyond EOD, truncated [ 142.444690][ T6380] loop4: p2 start 1702059890 is beyond EOD, truncated [ 144.702180][ T5695] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 144.891784][ T5695] usb 1-1: Using ep0 maxpacket: 32 [ 150.398559][ T5695] usb 1-1: device descriptor read/all, error -110 [ 152.331517][ C0] sched: DL replenish lagged too much [ 169.709693][ T5695] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 189.740420][ T5695] usb 1-1: device descriptor read/64, error -110 [ 191.797422][ T5695] usb usb1-port1: attempt power cycle [ 196.278117][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.286652][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.282555][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.298448][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.067291][ T52] Bluetooth: hci4: command tx timeout [ 257.067333][ T52] Bluetooth: hci0: command tx timeout [ 257.067358][ T52] Bluetooth: hci1: command tx timeout [ 257.067383][ T52] Bluetooth: hci3: command tx timeout [ 257.067406][ T52] Bluetooth: hci2: command tx timeout [ 310.031258][ T5695] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 317.321977][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.337659][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 349.866331][ T32] INFO: task kworker/u8:5:60 blocked for more than 144 seconds. [ 349.866362][ T32] Not tainted syzkaller #0 [ 349.866374][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 349.866384][ T32] task:kworker/u8:5 state:D stack:20688 pid:60 tgid:60 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 349.866448][ T32] Workqueue: ipv6_addrconf addrconf_verify_work [ 349.866499][ T32] Call Trace: [ 349.866509][ T32] [ 349.866524][ T32] __schedule+0x17db/0x58f0 [ 349.866586][ T32] ? __pfx___schedule+0x10/0x10 [ 349.866625][ T32] ? schedule+0x90/0x2b0 [ 349.866656][ T32] schedule+0x164/0x2b0 [ 349.866687][ T32] schedule_preempt_disabled+0x13/0x30 [ 349.866715][ T32] __mutex_lock+0x7c1/0x1550 [ 349.866752][ T32] ? __mutex_lock+0x5d4/0x1550 [ 349.866787][ T32] ? addrconf_verify_work+0x19/0x30 [ 349.866818][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 349.866866][ T32] ? rcu_is_watching+0x16/0xb0 [ 349.866895][ T32] ? process_scheduled_works+0x97a/0x1630 [ 349.866926][ T32] addrconf_verify_work+0x19/0x30 [ 349.866955][ T32] process_scheduled_works+0xc3d/0x1630 [ 349.867019][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 349.867056][ T32] ? assign_work+0x3cf/0x5d0 [ 349.867092][ T32] worker_thread+0xa47/0xfb0 [ 349.867138][ T32] ? __kthread_parkme+0x71/0x1f0 [ 349.867181][ T32] kthread+0x38b/0x480 [ 349.867204][ T32] ? __pfx_worker_thread+0x10/0x10 [ 349.867232][ T32] ? __pfx_kthread+0x10/0x10 [ 349.867256][ T32] ret_from_fork+0x514/0xb70 [ 349.867282][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 349.867304][ T32] ? __switch_to+0xc89/0x1420 [ 349.867338][ T32] ? __pfx_kthread+0x10/0x10 [ 349.867362][ T32] ret_from_fork_asm+0x1a/0x30 [ 349.867415][ T32] [ 349.867577][ T32] [ 349.867577][ T32] Showing all locks held in the system: [ 349.867587][ T32] locks held by kthreadd/2: 2, last CPU#0: [ 349.867603][ T32] #0: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 349.867661][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 349.876792][ T32] locks held by kworker/0:0/9: 3, on CPU#0: