last executing test programs: 4.179441493s ago: executing program 3 (id=650): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2000) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000040)={0x0, {0x0, 0x0, @qam}}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000)) ioctl$SIOCSIFHWADDR(r2, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r4, &(0x7f00000015c0)=[{0x0}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x4000002, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0xfffffffe, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x7f, 0xe, 0x8, 0x8000806f, 0x100007, 0x200, 0x1, 0x9, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0xffffffff, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c8, 0x9, 0xfffffffc, 0x8, 0x0, 0x4, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x3, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x3, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x1, 0x5, 0x9, 0xffffff80, 0x4, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0x3, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ef, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x3, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x2001, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d683, 0xa1f, 0xf40, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x401]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.989335695s ago: executing program 2 (id=651): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000480)={0x463b, 0x8200, 0xc639, 0x1}, &(0x7f00000004c0)=0x10) 3.554806717s ago: executing program 0 (id=660): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_adjtime(0x0, &(0x7f0000000100)={0x5fc, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0x40000d, 0x426, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0xfff, 0x2, 0x40081, 0x9, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x7ffffffe, 0x0, 0x5, 0x7}) 3.056874506s ago: executing program 2 (id=665): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) 2.919645892s ago: executing program 3 (id=666): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 2.595373436s ago: executing program 0 (id=670): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffff7}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8) 2.59144577s ago: executing program 3 (id=671): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) 2.340810124s ago: executing program 3 (id=675): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01082abd7000ffdbdf25250000000a00"], 0x30}, 0x1, 0x0, 0x0, 0x340488d2}, 0x0) 2.104998136s ago: executing program 3 (id=679): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000180)={0x4, 0x0, [{0x372, 0x0, 0x200}, {0x3ba, 0x0, 0x2}, {0xa9c, 0x0, 0xf4}, {0xad1, 0x0, 0xdb}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000003580)=[{&(0x7f0000001500)=""/4096, 0x1000}], 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x2ff, 0x0, 0x5}]}) sched_setaffinity(0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x6, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 1.979006197s ago: executing program 2 (id=681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 1.742363719s ago: executing program 2 (id=684): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) 1.581299645s ago: executing program 0 (id=685): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de3832", 0x9d}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e", 0x73}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b96", 0x63}, {&(0x7f0000000580)="8f966bd94d169820f6b844", 0xb}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e", 0xc}], 0x1}}], 0x3, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.551464023s ago: executing program 3 (id=687): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2000) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000040)={0x0, {0x0, 0x0, @qam}}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000)) ioctl$SIOCSIFHWADDR(r2, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r4, &(0x7f00000015c0)=[{0x0}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x4000002, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0xfffffffe, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x7f, 0xe, 0x8, 0x8000806f, 0x100007, 0x200, 0x1, 0x9, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0xffffffff, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c8, 0x9, 0xfffffffc, 0x8, 0x0, 0x4, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x3, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x3, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x1, 0x5, 0x9, 0xffffff80, 0x4, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0x3, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ef, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x3, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x2001, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d683, 0xa1f, 0xf40, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x401]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 1.526569525s ago: executing program 2 (id=688): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01082abd7000ffdbdf25250000000a00"], 0x30}, 0x1, 0x0, 0x0, 0x340488d2}, 0x0) 1.401455475s ago: executing program 0 (id=690): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.28138675s ago: executing program 2 (id=692): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) mkdir(0x0, 0x22) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000240001082dbd7000fadbdf1b0c0000000600030000000000"], 0x1c}}, 0x40010) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x3, 0x40005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xf3, 0x0, 0x0, 0x7, 0xfc, 0x6, 0x0, [0x0, 0x71]}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) 1.117725038s ago: executing program 0 (id=695): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796", 0x85, 0x5, 0xffffffff}], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) syz_pidfd_open(r0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) 1.020010787s ago: executing program 0 (id=697): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) listen(r0, 0xfffffff7) 603.657313ms ago: executing program 1 (id=701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 489.6128ms ago: executing program 1 (id=702): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) 373.885468ms ago: executing program 1 (id=703): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) 222.488253ms ago: executing program 1 (id=704): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 65.266276ms ago: executing program 1 (id=705): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000480)={0x463b, 0x8200, 0xc639, 0x1}, &(0x7f00000004c0)=0x10) 0s ago: executing program 1 (id=706): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796", 0x85, 0x5, 0xffffffff}], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.117' (ED25519) to the list of known hosts. [ 74.196163][ T5595] cgroup: Unknown subsys name 'net' [ 74.437949][ T5595] cgroup: Unknown subsys name 'cpuset' [ 74.513077][ T5595] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.176309][ T5595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.499562][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.525486][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.539323][ T5607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.540679][ T5607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.553154][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.554895][ T5607] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.558654][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.558879][ T5607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.559545][ T5607] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.568063][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.689914][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.721513][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.731267][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.740706][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.744756][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.761380][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.761485][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.781285][ T5616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.803370][ T5616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.806914][ T5616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.587461][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.588612][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.588788][ T5609] bridge_slave_0: entered allmulticast mode [ 80.590685][ T5609] bridge_slave_0: entered promiscuous mode [ 80.614016][ T5607] Bluetooth: hci1: command tx timeout [ 80.614021][ T5616] Bluetooth: hci0: command tx timeout [ 80.674619][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.674784][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.674944][ T5609] bridge_slave_1: entered allmulticast mode [ 80.678375][ T5609] bridge_slave_1: entered promiscuous mode [ 80.692060][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.693038][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.693537][ T5615] bridge_slave_0: entered allmulticast mode [ 80.697293][ T5615] bridge_slave_0: entered promiscuous mode [ 80.699810][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.700136][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.700652][ T5614] bridge_slave_0: entered allmulticast mode [ 80.707340][ T5614] bridge_slave_0: entered promiscuous mode [ 80.760111][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.760402][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.760641][ T5615] bridge_slave_1: entered allmulticast mode [ 80.764553][ T5615] bridge_slave_1: entered promiscuous mode [ 80.766463][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.766724][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.767250][ T5614] bridge_slave_1: entered allmulticast mode [ 80.770493][ T5614] bridge_slave_1: entered promiscuous mode [ 80.846348][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.852527][ T5607] Bluetooth: hci3: command tx timeout [ 80.852703][ T5607] Bluetooth: hci2: command tx timeout [ 80.898860][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.926279][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.930688][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.961880][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.962112][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.964933][ T5606] bridge_slave_0: entered allmulticast mode [ 80.967953][ T5606] bridge_slave_0: entered promiscuous mode [ 80.979685][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.987688][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.009041][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.009597][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.009853][ T5606] bridge_slave_1: entered allmulticast mode [ 81.011934][ T5606] bridge_slave_1: entered promiscuous mode [ 81.057735][ T5609] team0: Port device team_slave_0 added [ 81.105422][ T5609] team0: Port device team_slave_1 added [ 81.123052][ T5615] team0: Port device team_slave_0 added [ 81.326704][ T5614] team0: Port device team_slave_0 added [ 81.348647][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.351371][ T5615] team0: Port device team_slave_1 added [ 81.361372][ T5614] team0: Port device team_slave_1 added [ 81.387882][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.424291][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.424307][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.424332][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.496086][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.496097][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.496111][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.520904][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.520920][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.520958][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.524862][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.524876][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.524899][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.553972][ T5606] team0: Port device team_slave_0 added [ 81.557202][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.557216][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.557239][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.560047][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.560061][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.560085][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.583829][ T5606] team0: Port device team_slave_1 added [ 81.788244][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.788259][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.788305][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.895625][ T5609] hsr_slave_0: entered promiscuous mode [ 81.897842][ T5609] hsr_slave_1: entered promiscuous mode [ 81.914037][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.914052][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.914075][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.006898][ T5614] hsr_slave_0: entered promiscuous mode [ 82.008052][ T5614] hsr_slave_1: entered promiscuous mode [ 82.009066][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 82.009148][ T5614] Cannot create hsr debugfs directory [ 82.018691][ T5615] hsr_slave_0: entered promiscuous mode [ 82.020605][ T5615] hsr_slave_1: entered promiscuous mode [ 82.022066][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 82.022087][ T5615] Cannot create hsr debugfs directory [ 82.176783][ T5606] hsr_slave_0: entered promiscuous mode [ 82.177908][ T5606] hsr_slave_1: entered promiscuous mode [ 82.178806][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 82.178828][ T5606] Cannot create hsr debugfs directory [ 82.692855][ T5616] Bluetooth: hci1: command tx timeout [ 82.692888][ T5616] Bluetooth: hci0: command tx timeout [ 82.932995][ T5607] Bluetooth: hci2: command tx timeout [ 82.933036][ T5607] Bluetooth: hci3: command tx timeout [ 83.057980][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.105348][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.117407][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.155412][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.159430][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.198012][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.219799][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.259611][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.385893][ T5615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.421146][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.430946][ T5615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.468148][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.481489][ T5615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.506908][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.538534][ T5615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.566976][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.736750][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.769101][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.782945][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.833443][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.843657][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.866990][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.890401][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.926771][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.047371][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.087767][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.097984][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.136825][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.140108][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.166339][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.184874][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.218018][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.300111][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.427567][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.474435][ T1540] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.474600][ T1540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.541726][ T1540] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.541867][ T1540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.561339][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.651005][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.673545][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.715754][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.715848][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.770959][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.771060][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.772451][ T5616] Bluetooth: hci1: command tx timeout [ 84.772810][ T5616] Bluetooth: hci0: command tx timeout [ 84.819694][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.847888][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.854836][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.855058][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.941981][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.942076][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.013176][ T5616] Bluetooth: hci3: command tx timeout [ 85.013202][ T5607] Bluetooth: hci2: command tx timeout [ 85.043025][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.111817][ T783] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.112034][ T783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.167008][ T783] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.167161][ T783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.085153][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.460837][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.508013][ T5609] veth0_vlan: entered promiscuous mode [ 86.527785][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.582222][ T5609] veth1_vlan: entered promiscuous mode [ 86.757643][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.789729][ T1900] cfg80211: failed to load regulatory.db [ 86.842553][ T5614] veth0_vlan: entered promiscuous mode [ 86.852659][ T5607] Bluetooth: hci0: command tx timeout [ 86.852668][ T5616] Bluetooth: hci1: command tx timeout [ 86.888608][ T5609] veth0_macvtap: entered promiscuous mode [ 86.906616][ T5615] veth0_vlan: entered promiscuous mode [ 86.918441][ T5609] veth1_macvtap: entered promiscuous mode [ 86.931101][ T5614] veth1_vlan: entered promiscuous mode [ 86.993473][ T5615] veth1_vlan: entered promiscuous mode [ 87.036951][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.077510][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.092595][ T5616] Bluetooth: hci3: command tx timeout [ 87.103620][ T5616] Bluetooth: hci2: command tx timeout [ 87.122978][ T5606] veth0_vlan: entered promiscuous mode [ 87.139212][ T1326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.163652][ T1657] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.164854][ T5614] veth0_macvtap: entered promiscuous mode [ 87.188117][ T1657] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.198951][ T1657] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.286264][ T5614] veth1_macvtap: entered promiscuous mode [ 87.290717][ T5606] veth1_vlan: entered promiscuous mode [ 87.305795][ T5615] veth0_macvtap: entered promiscuous mode [ 87.395933][ T5615] veth1_macvtap: entered promiscuous mode [ 87.613066][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.646805][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.679297][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.719351][ T1657] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.727065][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.727153][ T1657] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.758427][ T1326] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.759392][ T5606] veth0_macvtap: entered promiscuous mode [ 87.770307][ T1657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.770333][ T1657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.790789][ T1326] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.818814][ T783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.823239][ T783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.867669][ T5606] veth1_macvtap: entered promiscuous mode [ 87.875975][ T783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.878691][ T783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.210365][ T1657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.210382][ T1657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.279975][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.410412][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.479524][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.479543][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.607137][ T783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.628223][ T783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.669047][ T783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.699818][ T783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.725144][ T783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.725163][ T783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.857180][ T1657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.857198][ T1657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.472119][ T1592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.472138][ T1592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.551157][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.551175][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.768694][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.768713][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.024407][ T5769] overlayfs: missing 'lowerdir' [ 90.120373][ T5772] Zero length message leads to an empty skb [ 91.854799][ T5804] overlayfs: missing 'lowerdir' [ 92.348869][ T5808] input: syz1 as /devices/virtual/input/input5 [ 93.284523][ T5831] netlink: 'syz.1.26': attribute type 1 has an invalid length. [ 93.284546][ T5831] netlink: 'syz.1.26': attribute type 2 has an invalid length. [ 93.952485][ T5707] IPVS: starting estimator thread 0... [ 94.374423][ T5839] IPVS: using max 11 ests per chain, 26400 per kthread [ 95.570915][ T5842] overlayfs: missing 'lowerdir' [ 96.686231][ T5863] input: syz1 as /devices/virtual/input/input6 [ 96.760378][ T5868] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 96.760440][ T5868] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 97.545378][ T5885] input: syz1 as /devices/virtual/input/input7 [ 97.702181][ T5898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 97.702232][ T5898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 98.270970][ T5917] input: syz1 as /devices/virtual/input/input8 [ 98.344033][ T5922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.61'. [ 98.367380][ T5924] input: syz1 as /devices/virtual/input/input9 [ 98.732993][ T5934] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 98.733026][ T5934] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 99.595051][ T5952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.73'. [ 99.685416][ T5957] overlayfs: missing 'lowerdir' [ 99.875457][ T5964] input: syz1 as /devices/virtual/input/input10 [ 100.130057][ T5974] input: syz1 as /devices/virtual/input/input11 [ 100.389650][ T5981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.85'. [ 100.488961][ T5986] overlayfs: missing 'lowerdir' [ 101.225764][ T6012] overlayfs: missing 'lowerdir' [ 101.315557][ T6015] input: syz1 as /devices/virtual/input/input12 [ 101.805216][ T6029] input: syz1 as /devices/virtual/input/input13 [ 102.206076][ T6042] overlayfs: missing 'workdir' [ 102.506571][ T6046] input: syz1 as /devices/virtual/input/input14 [ 103.053560][ T6070] overlayfs: missing 'workdir' [ 103.408372][ T6083] input: syz1 as /devices/virtual/input/input15 [ 103.911550][ T6096] overlayfs: missing 'workdir' [ 104.955636][ T6133] input: syz1 as /devices/virtual/input/input18 [ 106.140456][ T6167] input: syz1 as /devices/virtual/input/input21 [ 107.034234][ T6191] input: syz1 as /devices/virtual/input/input22 [ 108.065884][ T6217] input: syz1 as /devices/virtual/input/input25 [ 108.685857][ T6240] input: syz1 as /devices/virtual/input/input26 [ 108.957293][ T6244] input: syz1 as /devices/virtual/input/input27 [ 109.870828][ T6270] input: syz1 as /devices/virtual/input/input28 [ 111.091095][ T6296] input: syz1 as /devices/virtual/input/input29 [ 111.245478][ T6298] input: syz1 as /devices/virtual/input/input30 [ 112.354077][ T6324] input: syz1 as /devices/virtual/input/input31 [ 112.794032][ T6337] input: syz1 as /devices/virtual/input/input32 [ 113.301526][ T6354] input: syz1 as /devices/virtual/input/input33 [ 113.618589][ T6368] input: syz1 as /devices/virtual/input/input34 [ 114.556362][ T6393] input: syz1 as /devices/virtual/input/input35 [ 115.317009][ T6427] input: syz1 as /devices/virtual/input/input36 [ 115.852532][ T6438] input: syz1 as /devices/virtual/input/input37 [ 116.962675][ T6480] input: syz1 as /devices/virtual/input/input39 [ 118.488957][ T6529] input: syz1 as /devices/virtual/input/input41 [ 120.142730][ T6594] input: syz1 as /devices/virtual/input/input43 [ 120.978600][ T6616] warning: `syz.3.344' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 121.547930][ T5738] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.775032][ T5738] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.780887][ T5738] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 121.780911][ T5738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 121.780922][ T5738] usb 4-1: Product: syz [ 121.780929][ T5738] usb 4-1: Manufacturer: syz [ 121.780936][ T5738] usb 4-1: SerialNumber: syz [ 121.833024][ T6628] cgroup: fork rejected by pids controller in /syz0 [ 122.187711][ T5738] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 122.380302][ T6680] input: syz1 as /devices/virtual/input/input44 [ 123.110686][ T10] usb 4-1: USB disconnect, device number 2 [ 123.175490][ T10] usblp0: removed [ 123.679723][ T6724] input: syz1 as /devices/virtual/input/input45 [ 125.152221][ T6771] input: syz1 as /devices/virtual/input/input46 [ 125.698034][ T6768] cgroup: fork rejected by pids controller in /syz3 [ 126.203522][ T6833] input: syz1 as /devices/virtual/input/input48 [ 126.866331][ T6875] input: syz1 as /devices/virtual/input/input50 [ 127.562669][ T6907] input: syz1 as /devices/virtual/input/input52 [ 128.335540][ T6938] input: syz1 as /devices/virtual/input/input53 [ 128.937333][ T6965] input: syz1 as /devices/virtual/input/input54 [ 129.498248][ T6988] input: syz1 as /devices/virtual/input/input55 [ 130.191542][ T7014] input: syz1 as /devices/virtual/input/input56 [ 130.877557][ T7038] input: syz1 as /devices/virtual/input/input57 [ 131.471389][ T7058] input: syz1 as /devices/virtual/input/input58 [ 132.509117][ T7084] input: syz1 as /devices/virtual/input/input59 [ 132.691241][ T7090] input: syz1 as /devices/virtual/input/input60 [ 132.857002][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.857121][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.166329][ T7108] program syz.1.514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.280957][ T7110] input: syz1 as /devices/virtual/input/input61 [ 134.270138][ T7139] input: syz1 as /devices/virtual/input/input62 [ 134.270738][ T7140] input: syz1 as /devices/virtual/input/input63 [ 134.987020][ T7168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.540'. [ 135.079618][ T7170] input: syz1 as /devices/virtual/input/input64 [ 135.480946][ T7183] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 135.713699][ T5694] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 135.744895][ T7190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.550'. [ 135.829567][ T7194] input: syz1 as /devices/virtual/input/input65 [ 135.890378][ T5694] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.907685][ T5694] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 135.907703][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 135.907715][ T5694] usb 2-1: Product: syz [ 135.907722][ T5694] usb 2-1: Manufacturer: syz [ 135.907729][ T5694] usb 2-1: SerialNumber: syz [ 135.988559][ T7197] input: syz1 as /devices/virtual/input/input66 [ 136.271183][ T5694] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 136.598277][ T5694] usb 2-1: USB disconnect, device number 2 [ 136.678734][ T5694] usblp0: removed [ 136.838234][ T7219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.562'. [ 136.971922][ T7227] input: syz1 as /devices/virtual/input/input68 [ 137.262154][ T7240] input: syz1 as /devices/virtual/input/input69 [ 137.426943][ T7249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.576'. [ 137.701997][ T7257] input: syz1 as /devices/virtual/input/input70 [ 138.233310][ T32] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 138.294635][ T7286] input: syz1 as /devices/virtual/input/input71 [ 138.399487][ T32] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.418899][ T32] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 138.418929][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 138.418947][ T32] usb 1-1: Product: syz [ 138.418961][ T32] usb 1-1: Manufacturer: syz [ 138.418975][ T32] usb 1-1: SerialNumber: syz [ 138.559483][ T7294] program syz.3.598 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.700411][ T32] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 138.761855][ T7300] input: syz1 as /devices/virtual/input/input72 [ 139.002842][ T10] usb 1-1: USB disconnect, device number 2 [ 139.150784][ T10] usblp0: removed [ 139.283375][ T7322] program syz.0.610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.778414][ T7345] program syz.2.622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.989112][ T7352] input: syz1 as /devices/virtual/input/input73 [ 140.042529][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 140.219695][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.226200][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 140.226229][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 140.226248][ T10] usb 1-1: Product: syz [ 140.226261][ T10] usb 1-1: Manufacturer: syz [ 140.226274][ T10] usb 1-1: SerialNumber: syz [ 140.253615][ T7363] input: syz1 as /devices/virtual/input/input74 [ 140.441972][ T7369] program syz.3.633 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.477903][ T10] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 140.754537][ T10] usb 1-1: USB disconnect, device number 3 [ 140.841701][ T10] usblp0: removed [ 141.237088][ T7398] input: syz1 as /devices/virtual/input/input75 [ 141.283959][ T7400] 9pnet_virtio: no channels available for device syz [ 141.574157][ T32] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 141.616289][ T7415] program syz.0.654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.725640][ T7420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.656'. [ 141.745118][ T32] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.747464][ T32] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 141.747491][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 141.747510][ T32] usb 4-1: Product: syz [ 141.747523][ T32] usb 4-1: Manufacturer: syz [ 141.747535][ T32] usb 4-1: SerialNumber: syz [ 142.050249][ T32] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 142.309596][ T32] usb 4-1: USB disconnect, device number 3 [ 142.358153][ T32] usblp0: removed [ 142.441166][ T7438] input: syz1 as /devices/virtual/input/input76 [ 142.864362][ T7451] input: syz1 as /devices/virtual/input/input77 [ 144.233174][ T5707] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 144.398843][ T5707] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.405463][ T5707] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 144.405489][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 144.405508][ T5707] usb 4-1: Product: syz [ 144.405521][ T5707] usb 4-1: Manufacturer: syz [ 144.405535][ T5707] usb 4-1: SerialNumber: syz [ 144.705679][ T5707] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 145.012250][ T32] usb 4-1: USB disconnect, device number 4 [ 145.081426][ T32] usblp0: removed [ 145.429037][ T7498] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 145.429059][ T7498] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 145.429084][ T7498] CPU: 0 UID: 0 PID: 7498 Comm: syz.2.692 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 145.429102][ T7498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 145.429111][ T7498] RIP: 0010:__schedule+0x4030/0x5550 [ 145.429134][ T7498] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 145.429147][ T7498] RSP: 0018:ffffc9000798f0c0 EFLAGS: 00010003 [ 145.429161][ T7498] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 145.429171][ T7498] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff8880b8620c60 [ 145.429181][ T7498] RBP: ffffc9000798f2a8 R08: 0000000000000003 R09: 0000000000000004 [ 145.429191][ T7498] R10: dffffc0000000000 R11: ffffffff8199feb0 R12: ffff8880b863c658 [ 145.429202][ T7498] R13: ffff888125a6b000 R14: 1ffff110170c7922 R15: 0000000000000014 [ 145.429213][ T7498] FS: 00007f5a0c41e6c0(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 145.429227][ T7498] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.429237][ T7498] CR2: 0000200000055030 CR3: 0000000025bc6000 CR4: 00000000003526f0 [ 145.429345][ T7498] Call Trace: [ 145.429355][ T7498] [ 145.429370][ T7498] ? __pfx___schedule+0x10/0x10 [ 145.429391][ T7498] preempt_schedule_irq+0x4d/0xa0 [ 145.429409][ T7498] irqentry_exit+0x14f/0x8c0 [ 145.429428][ T7498] ? trace_irq_disable+0x3b/0x140 [ 145.429449][ T7498] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 145.429466][ T7498] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x8/0xa0 [ 145.429484][ T7498] Code: 74 0a 18 48 89 44 0a 20 c3 cc cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d f8 7e f5 10 65 44 8b 05 18 7f f5 10 41 81 e0 00 00 ff [ 145.429496][ T7498] RSP: 0018:ffffc9000798f3d8 EFLAGS: 00000246 [ 145.429515][ T7498] RAX: ffffffff82192bea RBX: 0000000008100077 RCX: 0000000000080000 [ 145.429525][ T7498] RDX: ffffc9000e389000 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.429535][ T7498] RBP: ffffc9000798f570 R08: 0000000000000000 R09: 0000000000000000 [ 145.429545][ T7498] R10: dffffc0000000000 R11: fffffbfff1f9e71f R12: dffffc0000000000 [ 145.429556][ T7498] R13: 0000000000000000 R14: ffff88802a505b40 R15: ffffc9000798f640 [ 145.429569][ T7498] ? do_wp_page+0x2ca/0x3d90 [ 145.429595][ T7498] do_wp_page+0x2ca/0x3d90 [ 145.429624][ T7498] ? rt_spin_lock+0x1e0/0x400 [ 145.429641][ T7498] ? preempt_count_add+0x91/0x190 [ 145.429664][ T7498] ? __pfx_do_wp_page+0x10/0x10 [ 145.429685][ T7498] ? rt_spin_lock+0x2ce/0x400 [ 145.429699][ T7498] ? __pfx_rt_spin_lock+0x10/0x10 [ 145.429714][ T7498] ? pte_offset_map_rw_nolock+0xea/0x160 [ 145.429738][ T7498] handle_mm_fault+0xafb/0x14d0 [ 145.429753][ T7498] ? handle_mm_fault+0xed/0x14d0 [ 145.429768][ T7498] ? __pfx_handle_mm_fault+0x10/0x10 [ 145.429787][ T7498] ? lock_mm_and_find_vma+0xa7/0x340 [ 145.429803][ T7498] do_user_addr_fault+0x75b/0x1340 [ 145.429832][ T7498] exc_page_fault+0x6a/0xc0 [ 145.429855][ T7498] asm_exc_page_fault+0x26/0x30 [ 145.429867][ T7498] RIP: 0010:__put_user_nocheck_4+0x3/0x20 [ 145.429880][ T7498] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 11 57 04 00 90 90 90 90 90 90 90 90 90 90 [ 145.429888][ T7498] RSP: 0018:ffffc9000798f8d8 EFLAGS: 00050202 [ 145.429896][ T7498] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000055030 [ 145.429903][ T7498] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 00000000ffffffff [ 145.429909][ T7498] RBP: ffffc9000798fa50 R08: 0000000000000000 R09: 0000000000000000 [ 145.429915][ T7498] R10: dffffc0000000000 R11: fffffbfff1f9e71f R12: 1ffff92000f31f28 [ 145.429923][ T7498] R13: 0000200000055000 R14: 0000000000000000 R15: 0000000000000002 [ 145.429933][ T7498] ____sys_recvmsg+0x319/0x4f0 [ 145.429949][ T7498] ? __pfx_____sys_recvmsg+0x10/0x10 [ 145.429964][ T7498] ? import_iovec+0x73/0xa0 [ 145.429976][ T7498] ___sys_recvmsg+0x215/0x5a0 [ 145.429989][ T7498] ? __pfx____sys_recvmsg+0x10/0x10 [ 145.430008][ T7498] do_recvmmsg+0x32b/0x7e0 [ 145.430023][ T7498] ? __pfx_do_recvmmsg+0x10/0x10 [ 145.430036][ T7498] ? do_futex+0x43d/0x4f0 [ 145.430053][ T7498] ? __tun_chr_ioctl+0xa4c/0x1e30 [ 145.430067][ T7498] __x64_sys_recvmmsg+0x198/0x250 [ 145.430081][ T7498] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 145.430096][ T7498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.430106][ T7498] do_syscall_64+0x174/0x580 [ 145.430118][ T7498] ? trace_irq_disable+0x3b/0x140 [ 145.430130][ T7498] ? clear_bhb_loop+0x40/0x90 [ 145.430141][ T7498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.430151][ T7498] RIP: 0033:0x7f5a0e1cce59 [ 145.430164][ T7498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.430172][ T7498] RSP: 002b:00007f5a0c41e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 145.430182][ T7498] RAX: ffffffffffffffda RBX: 00007f5a0e445fa0 RCX: 00007f5a0e1cce59 [ 145.430190][ T7498] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 145.430196][ T7498] RBP: 00007f5a0e262e6f R08: 0000000000000000 R09: 0000000000000000 [ 145.430202][ T7498] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 145.430208][ T7498] R13: 00007f5a0e446038 R14: 00007f5a0e445fa0 R15: 00007fffab422fc8 [ 145.430218][ T7498] [ 145.430222][ T7498] Modules linked in: [ 145.430233][ T7498] ---[ end trace 0000000000000000 ]--- [ 145.430243][ T7498] RIP: 0010:__schedule+0x4030/0x5550 [ 145.430260][ T7498] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 145.430268][ T7498] RSP: 0018:ffffc9000798f0c0 EFLAGS: 00010003 [ 145.430276][ T7498] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 145.430283][ T7498] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff8880b8620c60 [ 145.430289][ T7498] RBP: ffffc9000798f2a8 R08: 0000000000000003 R09: 0000000000000004 [ 145.430295][ T7498] R10: dffffc0000000000 R11: ffffffff8199feb0 R12: ffff8880b863c658 [ 145.430303][ T7498] R13: ffff888125a6b000 R14: 1ffff110170c7922 R15: 0000000000000014 [ 145.430310][ T7498] FS: 00007f5a0c41e6c0(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 145.430318][ T7498] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.430325][ T7498] CR2: 0000200000055030 CR3: 0000000025bc6000 CR4: 00000000003526f0 [ 145.430336][ T7498] Kernel panic - not syncing: Fatal exception [ 146.502519][ T7498] Shutting down cpus with NMI [ 146.502893][ T7498] Kernel Offset: disabled