last executing test programs:

20m7.909399679s ago: executing program 1 (id=968):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/43, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/80, &(0x7f0000000880)=""/91})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x9c28, 0x7fff})
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000180)="62fd194c5a55160bebb9a9fbcdf7417c9938f926b68dbdc5b3be4527bc6e9b08790aed3d93758ac7dccfc77322117fc9311bd5f8a0a73f0ab280616b49fef4706522847cae8640bdd2270fb4231a0dddc26c3efb01057fc80624", 0x5a)

20m7.826362357s ago: executing program 1 (id=970):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), 0xffffffffffffffff)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
listen(r1, 0x8000000)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)
shutdown(r3, 0x1)

20m6.93189873s ago: executing program 1 (id=977):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
kcmp(r1, r2, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$search(0xa, r4, &(0x7f0000000040)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, r4)

20m6.148665104s ago: executing program 1 (id=979):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0xa00, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0x4018aee3, 0x110c2efffa)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000040)={[0x200000a, 0x80000000000000, 0xea8, 0x80000000, 0x101000, 0xf, 0x1002, 0xfbfffffffffffffb, 0xe, 0x1, 0x2, 0x8, 0x8bda, 0xfffefffffffffefc, 0x3fb, 0x2000000008], 0x25000, 0x56052})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xe000, 0x6000, 0x3, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xffff1000, 0xddccb000, 0xd, 0x0, 0x0, 0x7, 0x7, 0x0, 0xfc, 0x1, 0x0, 0x2}, {0x0, 0xdddd8000, 0x18, 0xa, 0x0, 0x4, 0x7f, 0x0, 0x80, 0xe, 0x2a, 0x6}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0xd, 0x0, 0x70, 0x80, 0x0, 0x0, 0xfd, 0x1c, 0x7, 0xa8}, {0x100026fff, 0x3000, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x6, 0xfc, 0x86, 0x7}, {0xeeee0000, 0x3000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0x41000, 0x3, 0x82, 0xfe, 0x10, 0x40, 0xe}, {0x0, 0xfffe}, {0x1, 0xfffe}, 0x20050012, 0x0, 0x3000, 0x1, 0x1000000000000003, 0x0, 0x4000, [0x0, 0x800000000, 0x2, 0x5]})
ioctl$KVM_SET_MSRS(r6, 0x4140aecd, &(0x7f0000000100))

20m3.915626623s ago: executing program 1 (id=992):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8005)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
socket$inet(0x2, 0x80001, 0x84)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
r2 = landlock_create_ruleset(&(0x7f0000000100)={0x4030, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r2, 0xf)

20m1.556099278s ago: executing program 1 (id=997):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
clock_gettime(0x6, &(0x7f0000000000)={<r3=>0x0, <r4=>0x0})
clock_settime(0x0, &(0x7f0000000380)={r3, r4+60000000})

19m46.378918384s ago: executing program 32 (id=997):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
clock_gettime(0x6, &(0x7f0000000000)={<r3=>0x0, <r4=>0x0})
clock_settime(0x0, &(0x7f0000000380)={r3, r4+60000000})

18m14.283037445s ago: executing program 0 (id=1470):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$vim2m(&(0x7f0000000080), 0x4d, 0x2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff)
ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x121)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r4, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20)
close(r3)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="018d008dffff"})

18m13.378509136s ago: executing program 0 (id=1472):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x800000, 0x5a6c903, 0x1, 0xec, 0x2, 0x8, 0x0, 0x1, 0x1})

18m12.744362344s ago: executing program 0 (id=1478):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
ppoll(&(0x7f0000000040)=[{r1, 0x408}, {r1, 0x390}], 0x2, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x80000000, 0x0)

18m12.447671631s ago: executing program 0 (id=1480):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800000, 0x0, 0x1, 0x1, 0x4, 0x6}, 0x20)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20)

18m12.334519409s ago: executing program 0 (id=1481):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0})
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10)

18m12.279246831s ago: executing program 0 (id=1482):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001280)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000012c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="38002d8004"], 0x54}, 0x1, 0x0, 0x0, 0x20000004}, 0x800)

17m56.973544848s ago: executing program 33 (id=1482):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001280)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000012c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="38002d8004"], 0x54}, 0x1, 0x0, 0x0, 0x20000004}, 0x800)

4m18.145718552s ago: executing program 2 (id=5016):
r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4114}, 0x1})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, 0x0, 0x0, 0x2, 0x0)
io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)

4m17.089552151s ago: executing program 2 (id=5026):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000074c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x8, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x0, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x4, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0x9a, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x3}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x9, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0x53}, {0xa, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x3}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r3, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880)

4m7.708150658s ago: executing program 2 (id=5033):
r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000011c0)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xffffffffffffff41}], &(0x7f00000005c0), 0x2}, 0x20)

4m7.603284783s ago: executing program 2 (id=5034):
socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
timerfd_create(0x1, 0x800)
pipe(&(0x7f0000000040))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0))
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x1, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
memfd_create(&(0x7f0000000300)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffe84, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000)

4m7.258898928s ago: executing program 2 (id=5038):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff70)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9)
ioctl$TCXONC(r0, 0x540a, 0x2)
ioctl$TCXONC(r0, 0x540a, 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100))

4m6.849024754s ago: executing program 2 (id=5043):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000074c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x8, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x0, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x4, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0x9a, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x3}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x9, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0x53}, {0xa, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x3}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r3, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880)

3m50.298211943s ago: executing program 34 (id=5043):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000074c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x8, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x0, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x4, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0x9a, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x3}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x9, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0x53}, {0xa, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x3}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r3, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880)

9.809889099s ago: executing program 5 (id=6076):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sched_setattr(0x0, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r2)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090000000000000000000200"], 0x28}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a2", 0x85}], 0x1}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844)
socket$netlink(0x10, 0x3, 0x1)
ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001})
sendto$inet(r0, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0)
unshare(0x62040200)
syz_usb_connect(0x4, 0x4a, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r4], 0x0)

7.891937372s ago: executing program 4 (id=6083):
r0 = memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\xe4\xda\xf9\xcd7el\xb7\xe6\b\x00\xd8\x8f\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x92\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xd9\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7\xf2<Y\xa1\xdeP\b\xf1kM\x02\x00\x00\x03\x00eA\xb5#>\xa0D-N\xf9\xba!L]h;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xdc\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\x06]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x05\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\xeaq\xbb\x03&\xb4mi\xc7\xff\xca\xd8\x9f\xae\xa3\x04\xaa\x10\xe7\x98\xe48\x8d', 0x3)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0400", 0x18, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x67, '\x00', @loopback}}}}}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x42400)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e64000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018)
sendmsg$NFT_BATCH(r5, 0x0, 0x24000000)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x128, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0xe4, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0xffffffffffffffc3, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x70, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x150}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000)

6.214233122s ago: executing program 4 (id=6085):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ac8b1e1a940c9637400000000000000000a0000010900010073797a31000000005c000480580001800a00010074"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TIOCL_SETVESABLANK(r1, 0x560e, &(0x7f0000000140))

6.19805948s ago: executing program 5 (id=6087):
add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff)
syz_clone3(&(0x7f00000001c0)={0x42323080, &(0x7f00000000c0), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
clock_adjtime(0x0, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="3bc84979b05b00000000000086dd6800010000403a0100000000000000000000ffffac10141eff0200"/52], 0x0)
r2 = syz_open_procfs(0x0, 0x0)
pread64(r2, 0x0, 0x0, 0x41e)
timerfd_settime(r2, 0x1, &(0x7f0000000000)={{0x77359400}}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
socket$tipc(0x1e, 0x5, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c020000190001000000000010000000fe8000000000000000000000000000bbffffffff0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000008000000000000000010000000000000000000000000000000000000184010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000002020000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe8000000000000000000000000000000000000000000000000800000008000000000000ff020000000000000000000000000001000000003200000000000000e00000010000000000000000000000000335000003000100000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a00000000000000000000000000000000000000000001000004d43300000000000000e00000010000000000000000000000000300000000010800000000000000000000040000fc000000000000000000000000000001000000003200000000000000ff0200000000000000000000000000010000000003020000010000000000000000000000f88272b997615c2e2448951f5f93fc3b67d1d88de31abb4704869771f058128a6ad1929feadc088b22d379c94d4df43105d7473674bf4de8d14924092bea950a4f9803d0665ec6ac132f2fb0679535c13b072513234e8f417de072c4"], 0x23c}}, 0x0)
setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @remote}, '4\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x4, 0x4, 0x4, {0xa, 0x4e20, 0xfffff841, @remote, 0x4}}}, 0x32)

4.938611237s ago: executing program 4 (id=6092):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x64}}, 0x10000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0)

4.902661684s ago: executing program 7 (id=6093):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x0, @val=@perf_event={0x9}}, 0x18)
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x1, 0x30, 0x69, 0x0, 0x8, 0x1, 0x0, @private=0xa010106, @dev={0xac, 0x14, 0x14, 0x3b}}, @dest_unreach={0x3, 0xc7c0567298e11ff4, 0x0, 0x0, 0xab, 0x6, {0x5, 0x4, 0x2, 0x3e, 0xd5, 0x68, 0x803, 0x7, 0x16, 0x6b, @local, @multicast1}}}}}}, 0x0)

4.141912372s ago: executing program 7 (id=6096):
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)

4.104637536s ago: executing program 4 (id=6097):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sched_setattr(0x0, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r2)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090000000000000000000200"], 0x28}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a2", 0x85}], 0x1}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844)
socket$netlink(0x10, 0x3, 0x1)
ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001})
sendto$inet(r0, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0)
unshare(0x62040200)
syz_usb_connect(0x4, 0x4a, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r4], 0x0)

4.006213453s ago: executing program 7 (id=6098):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x3)
fchdir(r1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0x10}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback, 0x1170}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0xfefe)
shutdown(r5, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
pause()
sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "fb00080000528e46", "252432e72844858a068b92a5a810f4dc", "b5ab0900", "5aee41448c84afb7"}, 0x28)
preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0)
openat$dlm_control(0xffffff9c, 0x0, 0x400, 0x0)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$uinput_user_dev(r6, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23d, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0xfffffffc, 0x800, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x3, 0x3, 0x1010001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x3, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9388, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c)
ioctl$UI_SET_RELBIT(r6, 0x40045566, 0x8)
ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl$UI_DEV_CREATE(r6, 0x5501)
ioctl$UI_DEV_DESTROY(r6, 0x5502)

3.66459124s ago: executing program 3 (id=6100):
futex(0x0, 0x5, 0x1, 0x0, 0x0, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCMIWAIT(r0, 0x545c, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0xc0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
close(0x3)

3.482870049s ago: executing program 3 (id=6101):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000500"], 0x0, 0x1002, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117})
io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1)

3.363093492s ago: executing program 3 (id=6102):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ac8b1e1a940c9637400000000000000000a0000010900010073797a31000000005c000480580001800a00010074"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TIOCL_SETVESABLANK(r1, 0x560e, &(0x7f0000000140))

2.953079944s ago: executing program 5 (id=6103):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010000ff1f00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600"], 0x84}}, 0x0)

2.886270675s ago: executing program 5 (id=6104):
r0 = socket$alg(0x26, 0x5, 0x0)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x4c001)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000980)=""/102392, 0x18ff8)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000800)=[{0x0}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

2.558880265s ago: executing program 5 (id=6105):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

2.455211877s ago: executing program 6 (id=6106):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
syz_open_dev$dri(0x0, 0x1, 0x0)
r1 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)

2.312600699s ago: executing program 5 (id=6107):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$inet(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth1_to_bond\x00', 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x46, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
cachestat(r2, &(0x7f0000000040), &(0x7f000009de80), 0x0)
r3 = socket(0xb, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e00000004000000080000000700000000120000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000019000000001d00000000000000"], 0x50)
syz_usb_disconnect(0xffffffffffffffff)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0)
r5 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000900)={0x44, &(0x7f00000003c0)=ANY=[@ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000480)={0x18, &(0x7f00000004c0)=ANY=[@ANYBLOB="400b000000d3336dec7a0652b9dbe651df4153cdffff000000000000b880edd4f25e1492f0fcb9dbcf470d9bfa493f19de045a6a68749c7d110cb52f731259db1a0000000000005e032ba81668296d1471f95f2e901049220cb4a0f1a299cd513e01998d84d2db854cc254b0"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)

2.294197001s ago: executing program 3 (id=6108):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x64}}, 0x10000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0)

1.841391827s ago: executing program 6 (id=6109):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80)
close(r0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r3})
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(r4, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r6, 0x406, r6)
setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1", 0x12)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r3, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000})

1.770744131s ago: executing program 3 (id=6110):
r0 = memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\xe4\xda\xf9\xcd7el\xb7\xe6\b\x00\xd8\x8f\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x92\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xd9\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7\xf2<Y\xa1\xdeP\b\xf1kM\x02\x00\x00\x03\x00eA\xb5#>\xa0D-N\xf9\xba!L]h;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xdc\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\x06]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x05\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\xeaq\xbb\x03&\xb4mi\xc7\xff\xca\xd8\x9f\xae\xa3\x04\xaa\x10\xe7\x98\xe48\x8d', 0x3)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0400", 0x18, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x67, '\x00', @loopback}}}}}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x42400)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e64000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94}, 0x24000000)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x128, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0xe4, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0xffffffffffffffc3, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x70, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x150}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000)

1.336305836s ago: executing program 7 (id=6111):
futex(0x0, 0x5, 0x1, 0x0, 0x0, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCMIWAIT(r0, 0x545c, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0xc0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
close(0x3)

1.276973035s ago: executing program 6 (id=6112):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000050000"], 0x0, 0x1002, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117})
io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1)

1.226728134s ago: executing program 3 (id=6113):
add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff)
syz_clone3(&(0x7f00000001c0)={0x42323080, &(0x7f00000000c0), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
clock_adjtime(0x0, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="3bc84979b05b00000000000086dd6800010000403a0100000000000000000000ffffac10141eff0200"/52], 0x0)
r2 = syz_open_procfs(0x0, 0x0)
pread64(r2, 0x0, 0x0, 0x41e)
timerfd_settime(r2, 0x1, &(0x7f0000000000)={{0x77359400}}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
socket$tipc(0x1e, 0x5, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c020000190001000000000010000000fe8000000000000000000000000000bbffffffff0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x0)
setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @remote}, '4\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x4, 0x4, 0x4, {0xa, 0x4e20, 0xfffff841, @remote, 0x4}}}, 0x32)

1.166616579s ago: executing program 7 (id=6114):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x40010)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r2], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000001b80)="4476c8a3c3af5369bdfd752ec45c83c8", 0x10)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000003340)="3cce99e332fbe9f77af308688d5ea0e9", 0x10)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2, @ANYBLOB="40320eb3b977042f609dc05284e086762b99d68c61eea35bed7f7faaa5cf802b12cb60b1f2970e67048da76e774fc9407e96478bf454be0329"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

1.123197745s ago: executing program 6 (id=6115):
r0 = socket$alg(0x26, 0x5, 0x0)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x4c001)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000980)=""/102392, 0x18ff8)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000800)=[{0x0}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

617.087739ms ago: executing program 7 (id=6116):
socket$kcm(0xa, 0x3, 0x87)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480))
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

592.600694ms ago: executing program 4 (id=6117):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

453.483862ms ago: executing program 6 (id=6118):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ac8b1e1a940c9637400000000000000000a0000010900010073797a31000000005c000480580001800a0001007461"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TIOCL_SETVESABLANK(r1, 0x560e, 0x0)

167.868503ms ago: executing program 6 (id=6119):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
mount$9p_xen(&(0x7f0000000140), 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRESHEX=0x0, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB="2c6d61736b3d4d41595f455845432c6f626a5f757365723ddd2c70"])
prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x2, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14)
get_mempolicy(0x0, 0x0, 0x400535a, &(0x7f0000835000/0x2000)=nil, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/prev\x00')

0s ago: executing program 4 (id=6120):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a010200000000001000000200000009000200"], 0x64}}, 0x10000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0)

kernel console output (not intermixed with test programs):

`syz.3.5482'.
[ 1214.106592][T22664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5482'.
[ 1214.149535][ T8140] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[ 1214.308421][T22666] lo speed is unknown, defaulting to 1000
[ 1214.324152][ T8140] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1214.324170][ T8140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1214.328782][ T8140] usb 5-1: config 0 descriptor??
[ 1214.332373][ T8140] cp210x 5-1:0.0: cp210x converter detected
[ 1214.734855][   T37] kauditd_printk_skb: 16652 callbacks suppressed
[ 1214.734873][   T37] audit: type=1400 audit(3986.761:1375331): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="virtual" dev="sysfs" ino=1389
[ 1214.735278][   T37] audit: type=1400 audit(3986.770:1375332): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="block" dev="sysfs" ino=13338
[ 1214.735928][   T37] audit: type=1400 audit(3986.770:1375333): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="loop6" dev="sysfs" ino=15866
[ 1214.736238][   T37] audit: type=1400 audit(3986.770:1375334): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="sda1" ino=2
[ 1214.736326][   T37] audit: type=1400 audit(3986.770:1375335): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="sysfs" ino=1
[ 1214.737302][   T37] audit: type=1400 audit(3986.770:1375336): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="devices" dev="sysfs" ino=18
[ 1214.737773][   T37] audit: type=1400 audit(3986.770:1375337): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22667 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1214.737808][   T37] audit: type=1400 audit(3986.770:1375339): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22667 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1214.737838][   T37] audit: type=1400 audit(3986.770:1375338): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="virtual" dev="sysfs" ino=1389
[ 1214.737871][   T37] audit: type=1400 audit(3986.770:1375340): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="block" dev="sysfs" ino=13338
[ 1214.863890][ T8140] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32
[ 1214.879904][ T8140] cp210x 5-1:0.0: GPIO initialisation failed: -524
[ 1214.971298][ T8140] usb 5-1: cp210x converter now attached to ttyUSB0
[ 1215.233198][ T5722] usb 7-1: new high-speed USB device number 64 using dummy_hcd
[ 1215.321031][T21418] usb 5-1: USB disconnect, device number 116
[ 1215.329096][T21418] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1215.337643][T21418] cp210x 5-1:0.0: device disconnected
[ 1215.404966][ T5722] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1215.404996][ T5722] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1215.417089][ T5722] usb 7-1: config 0 descriptor??
[ 1215.419520][ T5722] cp210x 7-1:0.0: cp210x converter detected
[ 1215.855968][ T5722] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32
[ 1216.013444][T22679] tipc: Started in network mode
[ 1216.013476][T22679] tipc: Node identity 0e245d8b18cd, cluster identity 4711
[ 1216.014614][T22679] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1216.023502][T22679] syzkaller0: entered promiscuous mode
[ 1216.027301][T22679] syzkaller0: entered allmulticast mode
[ 1216.133857][ T5722] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: -71
[ 1216.133884][ T5722] cp210x 7-1:0.0: GPIO initialisation failed: -71
[ 1216.140639][ T5722] usb 7-1: cp210x converter now attached to ttyUSB0
[ 1216.149598][ T5722] usb 7-1: USB disconnect, device number 64
[ 1216.157977][ T5722] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1216.159147][ T5722] cp210x 7-1:0.0: device disconnected
[ 1216.196473][T22679] tipc: Resetting bearer <eth:syzkaller0>
[ 1216.233213][T22678] tipc: Resetting bearer <eth:syzkaller0>
[ 1216.405115][T22678] tipc: Disabling bearer <eth:syzkaller0>
[ 1216.618100][T22685] loop2: detected capacity change from 0 to 7
[ 1216.619962][T22685] Dev loop2: unable to read RDB block 7
[ 1216.620000][T22685]  loop2: unable to read partition table
[ 1216.620157][T22685] loop2: partition table beyond EOD, truncated
[ 1216.645199][T22685] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1217.286681][T22702] input: syz1 as /devices/virtual/input/input74
[ 1217.443886][    T9] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[ 1217.606467][    T9] usb 5-1: Using ep0 maxpacket: 8
[ 1217.625442][    T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1217.625471][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1217.625490][    T9] usb 5-1: Product: syz
[ 1217.625504][    T9] usb 5-1: Manufacturer: syz
[ 1217.625527][    T9] usb 5-1: SerialNumber: syz
[ 1217.638298][    T9] usb 5-1: config 0 descriptor??
[ 1217.933668][    T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1218.396958][    T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1218.409575][    T9] usb 5-1: USB disconnect, device number 117
[ 1218.694823][T22722] netlink: 'syz.3.5502': attribute type 1 has an invalid length.
[ 1218.786425][T22722] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1218.798944][T22722] bond4: (slave bond5): Enslaving as an active interface with an up link
[ 1218.842703][T22722] bond4: (slave gretap1): Enslaving as an active interface with an up link
[ 1218.844889][T22722] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5502'.
[ 1218.845418][T22722] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1219.011452][T22727] loop2: detected capacity change from 0 to 7
[ 1219.021121][T22727] Dev loop2: unable to read RDB block 7
[ 1219.021178][T22727]  loop2: unable to read partition table
[ 1219.021299][T22727] loop2: partition table beyond EOD, truncated
[ 1219.021316][T22727] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1219.115461][T22732] syzkaller0: entered promiscuous mode
[ 1219.115475][T22732] syzkaller0: entered allmulticast mode
[ 1219.153004][T22735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5506'.
[ 1219.153028][T22735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5506'.
[ 1219.436052][T22741] tipc: Started in network mode
[ 1219.436070][T22741] tipc: Node identity da37491a3d5a, cluster identity 4711
[ 1219.436249][T22741] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1219.440222][T22739] syzkaller0: entered promiscuous mode
[ 1219.440243][T22739] syzkaller0: entered allmulticast mode
[ 1219.504108][T22735] lo speed is unknown, defaulting to 1000
[ 1219.506598][T22740] tipc: Resetting bearer <eth:syzkaller0>
[ 1219.546835][T22738] tipc: Resetting bearer <eth:syzkaller0>
[ 1219.720609][T22738] tipc: Disabling bearer <eth:syzkaller0>
[ 1220.164126][   T37] kauditd_printk_skb: 18504 callbacks suppressed
[ 1220.164146][   T37] audit: type=1400 audit(3991.772:1393068): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21236 comm="udevd" name="/" dev="tmpfs" ino=1
[ 1220.164206][   T37] audit: type=1400 audit(3991.772:1393069): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21236 comm="udevd" name="udev" dev="tmpfs" ino=9
[ 1220.164224][   T37] audit: type=1400 audit(3991.772:1393070): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=21236 comm="udevd" path="/run/udev/watch" dev="tmpfs" ino=169
[ 1220.164247][   T37] audit: type=1400 audit(3991.772:1393071): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21236 comm="udevd" name="/" dev="sda1" ino=2
[ 1220.166077][   T37] audit: type=1400 audit(3991.772:1393072): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21236 comm="udevd" name="/" dev="tmpfs" ino=1
[ 1220.166101][   T37] audit: type=1400 audit(3991.781:1393073): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21236 comm="udevd" name="udev" dev="tmpfs" ino=9
[ 1220.166119][   T37] audit: type=1400 audit(3991.781:1393074): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21236 comm="udevd" name="watch" dev="tmpfs" ino=169
[ 1220.166135][   T37] audit: type=1400 audit(3991.781:1393075): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21236 comm="udevd" name="/" dev="sda1" ino=2
[ 1220.166151][   T37] audit: type=1400 audit(3991.781:1393076): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21236 comm="udevd" name="/" dev="tmpfs" ino=1
[ 1220.166171][   T37] audit: type=1400 audit(3991.781:1393077): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21236 comm="udevd" name="udev" dev="tmpfs" ino=9
[ 1221.071786][T22764] input: syz1 as /devices/virtual/input/input75
[ 1221.587478][T22781] syzkaller0: entered promiscuous mode
[ 1221.587503][T22781] syzkaller0: entered allmulticast mode
[ 1221.698417][T22783] loop2: detected capacity change from 0 to 7
[ 1221.707949][T22783] Dev loop2: unable to read RDB block 7
[ 1221.708005][T22783]  loop2: unable to read partition table
[ 1221.708146][T22783] loop2: partition table beyond EOD, truncated
[ 1221.708162][T22783] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1222.917866][T22804] loop2: detected capacity change from 0 to 7
[ 1222.920226][T22804] Dev loop2: unable to read RDB block 7
[ 1222.920407][T22804]  loop2: unable to read partition table
[ 1222.920534][T22804] loop2: partition table beyond EOD, truncated
[ 1222.920552][T22804] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1223.044238][T22808] loop2: detected capacity change from 0 to 7
[ 1223.052910][T22808] Dev loop2: unable to read RDB block 7
[ 1223.052964][T22808]  loop2: unable to read partition table
[ 1223.053232][T22808] loop2: partition table beyond EOD, truncated
[ 1223.053251][T22808] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1223.176479][ T8144] usb 7-1: new high-speed USB device number 65 using dummy_hcd
[ 1223.350176][ T8144] usb 7-1: Using ep0 maxpacket: 16
[ 1223.353010][ T8144] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1223.353031][ T8144] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[ 1223.353049][ T8144] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 129
[ 1223.353071][ T8144] usb 7-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[ 1223.353083][ T8144] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1223.356601][ T8144] usb 7-1: config 0 descriptor??
[ 1223.359276][ T8144] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1223.626490][T22817] bond0: (slave macvlan2): Error -98 calling set_mac_address
[ 1223.917979][T22824] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5538'.
[ 1223.919449][T22824] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5538'.
[ 1224.109349][T22831] loop2: detected capacity change from 0 to 7
[ 1224.114600][T22831] Dev loop2: unable to read RDB block 7
[ 1224.114655][T22831]  loop2: unable to read partition table
[ 1224.114800][T22831] loop2: partition table beyond EOD, truncated
[ 1224.114818][T22831] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1224.237018][T22837] loop2: detected capacity change from 0 to 7
[ 1224.240635][T22837] Dev loop2: unable to read RDB block 7
[ 1224.240673][T22837]  loop2: unable to read partition table
[ 1224.240826][T22837] loop2: partition table beyond EOD, truncated
[ 1224.241409][T22837] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1224.244461][T22838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5543'.
[ 1224.244480][T22838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5543'.
[ 1224.380108][T22841] lo speed is unknown, defaulting to 1000
[ 1224.683706][T22856] netlink: 'syz.7.5548': attribute type 1 has an invalid length.
[ 1224.897498][T22862] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5550'.
[ 1224.898851][T22862] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5550'.
[ 1225.595592][   T37] kauditd_printk_skb: 26248 callbacks suppressed
[ 1225.595611][   T37] audit: type=1400 audit(3996.792:1416629): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="sda1" ino=2
[ 1225.598419][   T37] audit: type=1400 audit(3996.792:1416630): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="sysfs" ino=1
[ 1225.598456][   T37] audit: type=1400 audit(3996.792:1416631): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="devices" dev="sysfs" ino=18
[ 1225.598487][   T37] audit: type=1400 audit(3996.792:1416632): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="virtual" dev="sysfs" ino=1389
[ 1225.598516][   T37] audit: type=1400 audit(3996.792:1416633): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="block" dev="sysfs" ino=13338
[ 1225.598546][   T37] audit: type=1400 audit(3996.792:1416634): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="loop4" dev="sysfs" ino=15620
[ 1225.598577][   T37] audit: type=1400 audit(3996.792:1416635): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="sda1" ino=2
[ 1225.598606][   T37] audit: type=1400 audit(3996.792:1416636): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="sysfs" ino=1
[ 1225.598635][   T37] audit: type=1400 audit(3996.792:1416637): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="devices" dev="sysfs" ino=18
[ 1225.598663][   T37] audit: type=1400 audit(3996.792:1416638): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="virtual" dev="sysfs" ino=1389
[ 1226.078593][T22885] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5556'.
[ 1226.176352][T21418] usb 7-1: USB disconnect, device number 65
[ 1226.277968][T22888] bond0: (slave macvlan2): Error -98 calling set_mac_address
[ 1226.484170][T22893] netlink: 'syz.6.5559': attribute type 1 has an invalid length.
[ 1226.512320][T22895] netlink: 'syz.3.5560': attribute type 10 has an invalid length.
[ 1226.606313][T22898] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5561'.
[ 1226.607914][T22898] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5561'.
[ 1226.878265][T22905] lo speed is unknown, defaulting to 1000
[ 1227.303278][T22920] netlink: 'syz.4.5568': attribute type 1 has an invalid length.
[ 1227.423844][T22920] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1227.431367][T22920] bond6: (slave bond7): Enslaving as an active interface with an up link
[ 1227.471393][T22926] bond6: (slave gretap1): Enslaving as an active interface with an up link
[ 1227.494116][T22920] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5568'.
[ 1227.504414][T22920] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1227.744637][T22933] netlink: 'syz.3.5572': attribute type 10 has an invalid length.
[ 1227.975168][T22937] netlink: 'syz.3.5573': attribute type 1 has an invalid length.
[ 1228.156815][T22941] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5574'.
[ 1228.158428][T22941] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5574'.
[ 1228.500453][T22947] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5576'.
[ 1229.223266][ T8144] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[ 1229.271078][T22963] lo speed is unknown, defaulting to 1000
[ 1229.388421][T22966] netlink: 'syz.7.5583': attribute type 10 has an invalid length.
[ 1229.405204][ T8144] usb 6-1: Using ep0 maxpacket: 32
[ 1229.406093][ T8144] usb 6-1: no configurations
[ 1229.406102][ T8144] usb 6-1: can't read configurations, error -22
[ 1229.433204][T22966] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1229.537092][T22969] netlink: 'syz.7.5584': attribute type 1 has an invalid length.
[ 1229.541862][ T8144] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[ 1229.637299][T22974] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5585'.
[ 1229.710880][ T8144] usb 6-1: Using ep0 maxpacket: 32
[ 1229.711559][ T8144] usb 6-1: no configurations
[ 1229.711575][ T8144] usb 6-1: can't read configurations, error -22
[ 1229.712392][ T8144] usb usb6-port1: attempt power cycle
[ 1230.079355][ T8144] usb 6-1: new high-speed USB device number 86 using dummy_hcd
[ 1230.101560][ T8144] usb 6-1: Using ep0 maxpacket: 32
[ 1230.102069][ T8144] usb 6-1: no configurations
[ 1230.102085][ T8144] usb 6-1: can't read configurations, error -22
[ 1230.242175][ T8144] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[ 1230.264154][ T8144] usb 6-1: Using ep0 maxpacket: 32
[ 1230.265769][ T8144] usb 6-1: no configurations
[ 1230.265780][ T8144] usb 6-1: can't read configurations, error -22
[ 1230.266242][ T8144] usb usb6-port1: unable to enumerate USB device
[ 1230.345759][T22995] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1230.346651][T22995] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1230.559940][T23000] netlink: 'syz.3.5596': attribute type 1 has an invalid length.
[ 1231.022220][   T37] kauditd_printk_skb: 16175 callbacks suppressed
[ 1231.022238][   T37] audit: type=1400 audit(4001.793:1432599): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="sda1" ino=2
[ 1231.022269][   T37] audit: type=1400 audit(4001.793:1432600): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="sysfs" ino=1
[ 1231.022296][   T37] audit: type=1400 audit(4001.793:1432601): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="devices" dev="sysfs" ino=18
[ 1231.022324][   T37] audit: type=1400 audit(4001.793:1432602): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="virtual" dev="sysfs" ino=1389
[ 1231.022352][   T37] audit: type=1400 audit(4001.793:1432603): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="block" dev="sysfs" ino=13338
[ 1231.022381][   T37] audit: type=1400 audit(4001.793:1432604): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="loop6" dev="sysfs" ino=15866
[ 1231.022415][   T37] audit: type=1400 audit(4001.793:1432605): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=4968 comm="udevd" name="power" dev="sysfs" ino=15901
[ 1231.022442][   T37] audit: type=1400 audit(4001.793:1432592): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21259 comm="udevd" name="block" dev="sysfs" ino=13338
[ 1231.022470][   T37] audit: type=1400 audit(4001.793:1432607): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=21259 comm="udevd" name="loop6" dev="sysfs" ino=15866
[ 1231.022498][   T37] audit: type=1400 audit(4001.793:1432608): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=21259 comm="udevd" path="/sys/devices/virtual/block/loop6" dev="sysfs" ino=15866
[ 1231.555220][T23018] __nla_validate_parse: 2 callbacks suppressed
[ 1231.555242][T23018] netlink: 164 bytes leftover after parsing attributes in process `syz.7.5604'.
[ 1231.578067][T23025] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1231.578480][T23025] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1231.667630][T23029] netlink: 'syz.7.5608': attribute type 1 has an invalid length.
[ 1232.311942][ T8144] usb 7-1: new high-speed USB device number 66 using dummy_hcd
[ 1233.117862][T23060] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5618'.
[ 1233.708331][T23072] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1233.718638][T23072] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1233.750756][T23065] input: syz1 as /devices/virtual/input/input76
[ 1234.250335][T23087] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1234.646745][T23093] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5630'.
[ 1234.734860][T23096] loop2: detected capacity change from 0 to 7
[ 1234.740796][T23096] Dev loop2: unable to read RDB block 7
[ 1234.740833][T23096]  loop2: unable to read partition table
[ 1234.740940][T23096] loop2: partition table beyond EOD, truncated
[ 1234.740958][T23096] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1234.805951][T23093] netlink: 164 bytes leftover after parsing attributes in process `syz.5.5630'.
[ 1236.453156][   T37] kauditd_printk_skb: 23913 callbacks suppressed
[ 1236.453170][   T37] audit: type=1400 audit(4006.804:1452882): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23130 comm="syz.5.5643" name="/" dev="proc" ino=1
[ 1236.488136][   T37] audit: type=1400 audit(4006.813:1452883): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23130 comm="syz.5.5643" name="/" dev="proc" ino=1
[ 1236.488176][   T37] audit: type=1400 audit(4006.823:1452884): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23130 comm="syz.5.5643" name="694" dev="proc" ino=85677
[ 1236.488194][   T37] audit: type=1400 audit(4006.823:1452885): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23130 comm="syz.5.5643" name="net" dev="proc" ino=85684
[ 1236.488214][   T37] audit: type=1400 audit(4006.832:1452887): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="sysfs" ino=1
[ 1236.488231][   T37] audit: type=1400 audit(4006.832:1452888): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="devices" dev="sysfs" ino=18
[ 1236.488248][   T37] audit: type=1400 audit(4006.832:1452889): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="virtual" dev="sysfs" ino=1389
[ 1236.488267][   T37] audit: type=1400 audit(4006.832:1452890): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="block" dev="sysfs" ino=13338
[ 1236.488283][   T37] audit: type=1400 audit(4006.832:1452891): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="loop7" dev="sysfs" ino=15989
[ 1236.488299][   T37] audit: type=1400 audit(4006.832:1452892): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=4968 comm="udevd" name="uevent" dev="sysfs" ino=15990
[ 1236.571930][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[ 1236.571976][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[ 1236.718764][T23143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5646'.
[ 1236.741470][T23138] input: syz1 as /devices/virtual/input/input77
[ 1236.876363][T23145] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5646'.
[ 1237.910977][T23177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5659'.
[ 1238.033824][T23177] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5659'.
[ 1239.593852][T21418] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 1239.734791][T21418] usb 5-1: device descriptor read/64, error -71
[ 1239.752142][T23212] netlink: 164 bytes leftover after parsing attributes in process `syz.7.5671'.
[ 1239.818883][T23210] input: syz1 as /devices/virtual/input/input78
[ 1240.001143][T21418] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[ 1240.157408][T21418] usb 5-1: device descriptor read/64, error -71
[ 1240.276714][T21418] usb usb5-port1: attempt power cycle
[ 1240.645164][T21418] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[ 1240.667338][T21418] usb 5-1: device descriptor read/8, error -71
[ 1240.704314][T23235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5679'.
[ 1240.798450][T23235] bond8 (unregistering): Released all slaves
[ 1240.927243][T21418] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[ 1240.949910][T21418] usb 5-1: device descriptor read/8, error -71
[ 1240.963846][T23247] loop2: detected capacity change from 0 to 7
[ 1240.971749][T23247] Dev loop2: unable to read RDB block 7
[ 1240.971790][T23247]  loop2: unable to read partition table
[ 1240.971933][T23247] loop2: partition table beyond EOD, truncated
[ 1240.971950][T23247] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1241.068960][T21418] usb usb5-port1: unable to enumerate USB device
[ 1241.257795][T23252] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5684'.
[ 1241.964703][   T37] kauditd_printk_skb: 26608 callbacks suppressed
[ 1241.964719][   T37] audit: type=1400 audit(4011.898:1475138): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19465 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1241.966256][   T37] audit: type=1400 audit(4011.898:1475139): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19465 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1241.967502][   T37] audit: type=1400 audit(4011.898:1475140): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1201 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.146 dest=42762 netif=eth0
[ 1241.971291][   T37] audit: type=1400 audit(4011.907:1475142): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1201 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.146 dest=42762 netif=eth0
[ 1241.971330][   T37] audit: type=1400 audit(4011.907:1475141): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19465 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1241.971362][   T37] audit: type=1400 audit(4011.907:1475144): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1201 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.146 dest=42762 netif=eth0
[ 1241.971393][   T37] audit: type=1400 audit(4011.907:1475145): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1201 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.146 dest=42762 netif=eth0
[ 1241.971425][   T37] audit: type=1400 audit(4011.907:1475146): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1201 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.146 dest=42762 netif=eth0
[ 1241.971459][   T37] audit: type=1400 audit(4011.907:1475147): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1201 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.146 dest=42762 netif=eth0
[ 1241.971490][   T37] audit: type=1400 audit(4011.907:1475148): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1201 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.146 dest=42762 netif=eth0
[ 1242.319541][T23280] loop2: detected capacity change from 0 to 7
[ 1242.322222][T23280] Dev loop2: unable to read RDB block 7
[ 1242.322249][T23280]  loop2: unable to read partition table
[ 1242.322339][T23280] loop2: partition table beyond EOD, truncated
[ 1242.322349][T23280] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1242.764443][T23286] netlink: 'syz.4.5696': attribute type 10 has an invalid length.
[ 1242.798443][T23286] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1243.168116][T23301] mac80211_hwsim hwsim46 wlan1: entered allmulticast mode
[ 1243.313008][T23289] input: syz1 as /devices/virtual/input/input79
[ 1243.358717][T23299] netlink: 164 bytes leftover after parsing attributes in process `syz.5.5699'.
[ 1243.917651][T12923] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[ 1244.081939][T12923] usb 8-1: Using ep0 maxpacket: 8
[ 1244.089904][T23300] [U] 
[ 1244.109770][T12923] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1244.109800][T12923] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1244.109819][T12923] usb 8-1: Product: syz
[ 1244.109834][T12923] usb 8-1: Manufacturer: syz
[ 1244.109848][T12923] usb 8-1: SerialNumber: syz
[ 1244.116280][T12923] usb 8-1: config 0 descriptor??
[ 1244.376728][T12923] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1244.377609][T12923] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1244.385576][T12923] usb 8-1: USB disconnect, device number 5
[ 1244.762884][ T8140] usb 7-1: new high-speed USB device number 67 using dummy_hcd
[ 1244.903765][ T8140] usb 7-1: device descriptor read/64, error -71
[ 1245.163835][ T8140] usb 7-1: new high-speed USB device number 68 using dummy_hcd
[ 1245.305385][ T8140] usb 7-1: device descriptor read/64, error -71
[ 1245.425568][ T8140] usb usb7-port1: attempt power cycle
[ 1245.753053][T23336] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5710'.
[ 1245.792421][ T8140] usb 7-1: new high-speed USB device number 69 using dummy_hcd
[ 1245.814735][ T8140] usb 7-1: device descriptor read/8, error -71
[ 1246.074119][ T8140] usb 7-1: new high-speed USB device number 70 using dummy_hcd
[ 1246.100178][ T8140] usb 7-1: device descriptor read/8, error -71
[ 1246.217257][ T8140] usb usb7-port1: unable to enumerate USB device
[ 1246.425407][T23348] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5715'.
[ 1246.481049][T23346] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5714'.
[ 1247.006036][    T9] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[ 1247.437023][   T37] kauditd_printk_skb: 16724 callbacks suppressed
[ 1247.437040][   T37] audit: type=1400 audit(4016.946:1491248): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17386 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1247.437345][   T37] audit: type=1400 audit(4016.946:1491250): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1201 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.146 dest=42762 netif=eth0
[ 1247.437438][   T37] audit: type=1400 audit(4016.946:1491249): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17386 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1247.438054][   T37] audit: type=1400 audit(4016.946:1491251): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17386 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1247.438302][   T37] audit: type=1400 audit(4016.946:1491252): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1201 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.146 dest=42762 netif=eth0
[ 1247.438383][   T37] audit: type=1400 audit(4016.946:1491253): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17386 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1247.438911][   T37] audit: type=1400 audit(4016.946:1491254): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=17386 comm="syz-executor" name="322" dev="tmpfs" ino=1651
[ 1247.439263][   T37] audit: type=1400 audit(4016.946:1491255): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=17386 comm="syz-executor" path="/322" dev="tmpfs" ino=1651
[ 1247.505694][   T37] audit: type=1400 audit(4017.001:1491256): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=17386 comm="syz-executor" path="/322" dev="tmpfs" ino=1651
[ 1247.521646][   T37] audit: type=1400 audit(4017.029:1491257): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17386 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1247.896501][T23366] usb usb1: usbfs: process 23366 (syz.4.5722) did not claim interface 2 before use
[ 1249.201791][T23387] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5727'.
[ 1250.068976][T23406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5734'.
[ 1250.192007][T21418] usb 6-1: new high-speed USB device number 89 using dummy_hcd
[ 1250.332890][T21418] usb 6-1: device descriptor read/64, error -71
[ 1250.341258][T23411] usb usb1: usbfs: process 23411 (syz.7.5736) did not claim interface 2 before use
[ 1250.592961][T21418] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[ 1250.733878][T21418] usb 6-1: device descriptor read/64, error -71
[ 1250.755658][T23419] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5738'.
[ 1250.913539][T21418] usb usb6-port1: attempt power cycle
[ 1251.465801][T21418] usb 6-1: new high-speed USB device number 91 using dummy_hcd
[ 1251.482194][T21418] usb 6-1: device descriptor read/8, error -71
[ 1251.593047][T23432] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5744'.
[ 1251.741710][T21418] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[ 1251.766613][T21418] usb 6-1: device descriptor read/8, error -71
[ 1251.888717][T21418] usb usb6-port1: unable to enumerate USB device
[ 1252.045044][T21418] usb 6-1: new high-speed USB device number 93 using dummy_hcd
[ 1252.185927][T21418] usb 6-1: device descriptor read/64, error -71
[ 1252.446106][T21418] usb 6-1: new high-speed USB device number 94 using dummy_hcd
[ 1252.586918][T21418] usb 6-1: device descriptor read/64, error -71
[ 1252.706535][T21418] usb usb6-port1: attempt power cycle
[ 1253.002105][   T37] kauditd_printk_skb: 13440 callbacks suppressed
[ 1253.002121][   T37] audit: type=1400 audit(4022.086:1503843): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16756 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1253.002154][   T37] audit: type=1400 audit(4022.086:1503844): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1201 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.146 dest=42762 netif=eth0
[ 1253.002452][   T37] audit: type=1400 audit(4022.086:1503845): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1201 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.146 dest=42762 netif=eth0
[ 1253.002739][   T37] audit: type=1400 audit(4022.086:1503846): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1201 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.146 dest=42762 netif=eth0
[ 1253.002774][   T37] audit: type=1400 audit(4022.086:1503847): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16756 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1253.004364][   T37] audit: type=1400 audit(4022.086:1503848): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16756 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1253.004486][   T37] audit: type=1400 audit(4022.086:1503849): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16756 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1253.004586][   T37] audit: type=1400 audit(4022.086:1503850): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=16756 comm="syz-executor" name="397" dev="tmpfs" ino=2033
[ 1253.004881][   T37] audit: type=1400 audit(4022.086:1503851): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=16756 comm="syz-executor" path="/397" dev="tmpfs" ino=2033
[ 1253.005201][   T37] audit: type=1400 audit(4022.086:1503852): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=16756 comm="syz-executor" path="/397" dev="tmpfs" ino=2033
[ 1253.074545][T21418] usb 6-1: new high-speed USB device number 95 using dummy_hcd
[ 1253.106380][T21418] usb 6-1: device descriptor read/8, error -71
[ 1253.349376][T23459] usb usb1: usbfs: process 23459 (syz.4.5752) did not claim interface 2 before use
[ 1253.433844][T23461] lo speed is unknown, defaulting to 1000
[ 1253.965985][T23476] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5755'.
[ 1254.359534][T23471] netlink: 388 bytes leftover after parsing attributes in process `syz.5.5753'.
[ 1254.571190][T23484] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5758'.
[ 1254.667566][    T9] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[ 1255.469623][ T8144] syzkaller0: tun_net_xmit 76
[ 1255.545376][T21418] syzkaller0: tun_net_xmit 76
[ 1255.599544][T19557] syzkaller0: tun_net_xmit 76
[ 1255.632162][T19557] syzkaller0: tun_net_xmit 76
[ 1255.697812][T21418] syzkaller0: tun_net_xmit 76
[ 1255.731292][ T5700] syzkaller0: tun_net_xmit 76
[ 1256.431597][T23505] usb usb1: usbfs: process 23505 (syz.3.5764) did not claim interface 2 before use
[ 1256.867678][    T9] usb 4-1: device descriptor read/64, error -71
[ 1257.030868][T23510] netlink: 164 bytes leftover after parsing attributes in process `syz.5.5766'.
[ 1257.127502][    T9] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[ 1257.289958][    T9] usb 4-1: Using ep0 maxpacket: 32
[ 1257.292096][    T9] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[ 1257.292122][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1257.292141][    T9] usb 4-1: config 0 has no interfaces?
[ 1257.294246][    T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1257.294273][    T9] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1257.294294][    T9] usb 4-1: Product: syz
[ 1257.294308][    T9] usb 4-1: Manufacturer: syz
[ 1257.294322][    T9] usb 4-1: SerialNumber: syz
[ 1257.296687][    T9] usb 4-1: config 0 descriptor??
[ 1257.810746][    T9] usb 4-1: USB disconnect, device number 89
[ 1258.417524][T23520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5769'.
[ 1258.588438][   T37] kauditd_printk_skb: 9498 callbacks suppressed
[ 1258.588454][   T37] audit: type=1400 audit(4027.235:1512043): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17386 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1258.588488][   T37] audit: type=1400 audit(4027.235:1512044): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17386 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1258.588518][   T37] audit: type=1400 audit(4027.235:1512045): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17386 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1258.588548][   T37] audit: type=1400 audit(4027.235:1512046): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17386 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1258.588578][   T37] audit: type=1400 audit(4027.235:1512047): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=17386 comm="syz-executor" name="341" dev="tmpfs" ino=1746
[ 1258.588809][   T37] audit: type=1400 audit(4027.235:1512048): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1201 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.146 dest=42762 netif=eth0
[ 1258.589111][   T37] audit: type=1400 audit(4027.235:1512049): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=17386 comm="syz-executor" path="/341" dev="tmpfs" ino=1746
[ 1258.589240][   T37] audit: type=1400 audit(4027.235:1512050): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=17386 comm="syz-executor" path="/341" dev="tmpfs" ino=1746
[ 1258.589453][   T37] audit: type=1400 audit(4027.235:1512051): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1201 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.146 dest=42762 netif=eth0
[ 1258.589710][   T37] audit: type=1400 audit(4027.235:1512052): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17386 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1259.005345][T23526] netlink: 388 bytes leftover after parsing attributes in process `syz.3.5770'.
[ 1261.018938][ T4916] Bluetooth: hci2: command 0x0406 tx timeout
[ 1264.341937][   T37] kauditd_printk_skb: 226 callbacks suppressed
[ 1264.341954][   T37] audit: type=1400 audit(4032.541:1512234): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=4968 comm="udevd" opid=21259 ocomm="udevd"
[ 1264.342064][   T37] audit: type=1400 audit(4032.541:1512235): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=4968 comm="udevd" opid=21236 ocomm="udevd"
[ 1264.344163][   T37] audit: type=1400 audit(4032.541:1512236): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=4968 comm="udevd" opid=21260 ocomm="udevd"
[ 1264.344200][   T37] audit: type=1400 audit(4032.541:1512237): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=4968 comm="udevd" opid=21534 ocomm="udevd"
[ 1264.344229][   T37] audit: type=1400 audit(4032.541:1512238): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=4968 comm="udevd" opid=21210 ocomm="udevd"
[ 1264.344257][   T37] audit: type=1400 audit(4032.541:1512239): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=4968 comm="udevd" opid=21533 ocomm="udevd"
[ 1264.344284][   T37] audit: type=1400 audit(4032.541:1512240): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=4968 comm="udevd" opid=21258 ocomm="udevd"
[ 1264.344312][   T37] audit: type=1400 audit(4032.541:1512241): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=4968 comm="udevd" opid=21537 ocomm="udevd"
[ 1264.344340][   T37] audit: type=1400 audit(4032.541:1512242): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=4968 comm="udevd" opid=21194 ocomm="udevd"
[ 1264.344368][   T37] audit: type=1400 audit(4032.541:1512243): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=4968 comm="udevd" opid=21532 ocomm="udevd"
[ 1265.204272][T23523] lo speed is unknown, defaulting to 1000
[ 1265.767786][T23551] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5777'.
[ 1267.602260][T23585] pim6reg: entered allmulticast mode
[ 1268.040003][T21418] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[ 1268.090571][T23591] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5791'.
[ 1268.090634][T23591] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5791'.
[ 1268.202387][T21418] usb 8-1: Using ep0 maxpacket: 8
[ 1268.213486][T21418] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1268.213515][T21418] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1268.213534][T21418] usb 8-1: Product: syz
[ 1268.213548][T21418] usb 8-1: Manufacturer: syz
[ 1268.213563][T21418] usb 8-1: SerialNumber: syz
[ 1268.217543][T21418] usb 8-1: config 0 descriptor??
[ 1268.260223][T23591] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5791'.
[ 1268.260281][T23591] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5791'.
[ 1268.459259][T23591] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5791'.
[ 1268.459353][T23591] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5791'.
[ 1268.546803][T21418] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1268.940714][T23602] netlink: 'syz.3.5793': attribute type 10 has an invalid length.
[ 1269.192158][T23602] bond0: (slave dummy0): Releasing backup interface
[ 1269.242754][T21418] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1269.274458][T21418] usb 8-1: USB disconnect, device number 6
[ 1269.287142][T23602] team0: Port device dummy0 added
[ 1269.388000][T23601] lo speed is unknown, defaulting to 1000
[ 1269.765949][   T37] kauditd_printk_skb: 11929 callbacks suppressed
[ 1269.765968][   T37] audit: type=1400 audit(4037.543:1523891): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="sda1" ino=2
[ 1269.766095][   T37] audit: type=1400 audit(4037.543:1523892): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="tmpfs" ino=1
[ 1269.766205][   T37] audit: type=1400 audit(4037.543:1523893): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="udev" dev="tmpfs" ino=9
[ 1269.766246][   T37] audit: type=1400 audit(4037.552:1523894): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="watch" dev="tmpfs" ino=169
[ 1269.766314][   T37] audit: type=1400 audit(4037.552:1523895): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="sda1" ino=2
[ 1269.766401][   T37] audit: type=1400 audit(4037.552:1523896): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="tmpfs" ino=1
[ 1269.766497][   T37] audit: type=1400 audit(4037.552:1523897): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="udev" dev="tmpfs" ino=9
[ 1269.775846][   T37] audit: type=1400 audit(4037.552:1523898): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23553 comm="udevd" name="/" dev="sda1" ino=2
[ 1269.775924][   T37] audit: type=1400 audit(4037.552:1523899): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23553 comm="udevd" name="/" dev="sysfs" ino=1
[ 1269.775988][   T37] audit: type=1400 audit(4037.552:1523900): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23553 comm="udevd" name="devices" dev="sysfs" ino=18
[ 1270.315683][T12923] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[ 1270.463716][T23601] netlink: 388 bytes leftover after parsing attributes in process `syz.5.5795'.
[ 1270.954962][T21418] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[ 1271.117632][T21418] usb 4-1: Using ep0 maxpacket: 8
[ 1271.137133][T21418] usb 4-1: config 0 has no interfaces?
[ 1271.161279][T21418] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 1271.161298][T21418] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1271.161341][T21418] usb 4-1: Product: syz
[ 1271.161349][T21418] usb 4-1: Manufacturer: syz
[ 1271.161357][T21418] usb 4-1: SerialNumber: syz
[ 1271.170358][T21418] usb 4-1: config 0 descriptor??
[ 1271.533467][T23632] netlink: 164 bytes leftover after parsing attributes in process `syz.7.5802'.
[ 1271.533532][T23632] netlink: 164 bytes leftover after parsing attributes in process `syz.7.5802'.
[ 1271.753628][T23632] netlink: 164 bytes leftover after parsing attributes in process `syz.7.5802'.
[ 1271.753696][T23632] netlink: 164 bytes leftover after parsing attributes in process `syz.7.5802'.
[ 1272.010610][T23632] netlink: 164 bytes leftover after parsing attributes in process `syz.7.5802'.
[ 1272.010694][T23632] netlink: 164 bytes leftover after parsing attributes in process `syz.7.5802'.
[ 1272.607353][T23651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5807'.
[ 1272.607804][T23651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5807'.
[ 1272.893128][T23651] lo speed is unknown, defaulting to 1000
[ 1273.532094][T23668] lo speed is unknown, defaulting to 1000
[ 1273.882112][T23676] netlink: 164 bytes leftover after parsing attributes in process `syz.6.5815'.
[ 1273.882275][T23676] netlink: 164 bytes leftover after parsing attributes in process `syz.6.5815'.
[ 1273.940856][ T5700] usb 4-1: USB disconnect, device number 90
[ 1274.084056][T23680] bond8: entered promiscuous mode
[ 1274.084546][T23680] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1274.124093][T23680] bridge2: entered promiscuous mode
[ 1274.124759][T23680] bond8: (slave bridge2): Enslaving as an active interface with an up link
[ 1274.318689][T23683] bond9 (unregistering): Released all slaves
[ 1275.073545][ T5700] usb 7-1: new high-speed USB device number 71 using dummy_hcd
[ 1275.196675][   T37] kauditd_printk_skb: 12703 callbacks suppressed
[ 1275.196688][   T37] audit: type=1400 audit(4042.563:1535530): lsm=SMACK fn=smack_inode_set_acl action=granted subject="_" object="_" requested=w pid=23691 comm="syz.3.5819" name="355" dev="tmpfs" ino=1816
[ 1275.198168][   T37] audit: type=1400 audit(4042.563:1535531): lsm=SMACK fn=smack_inode_set_acl action=granted subject="_" object="_" requested=w pid=23691 comm="syz.3.5819" name="355" dev="tmpfs" ino=1816
[ 1275.200001][   T37] audit: type=1400 audit(4042.563:1535532): lsm=SMACK fn=smack_inode_set_acl action=granted subject="_" object="_" requested=w pid=23691 comm="syz.3.5819" name="355" dev="tmpfs" ino=1816
[ 1275.201420][   T37] audit: type=1400 audit(4042.563:1535533): lsm=SMACK fn=smack_inode_set_acl action=granted subject="_" object="_" requested=w pid=23691 comm="syz.3.5819" name="355" dev="tmpfs" ino=1816
[ 1275.249769][   T37] audit: type=1400 audit(4042.618:1535534): lsm=SMACK fn=smack_inode_set_acl action=granted subject="_" object="_" requested=w pid=23691 comm="syz.3.5819" name="355" dev="tmpfs" ino=1816
[ 1275.258296][   T37] audit: type=1400 audit(4042.627:1535535): lsm=SMACK fn=smack_inode_set_acl action=granted subject="_" object="_" requested=w pid=23691 comm="syz.3.5819" name="355" dev="tmpfs" ino=1816
[ 1275.321403][   T37] audit: type=1400 audit(4042.664:1535536): lsm=SMACK fn=smack_inode_set_acl action=granted subject="_" object="_" requested=w pid=23691 comm="syz.3.5819" name="355" dev="tmpfs" ino=1816
[ 1275.328366][   T37] audit: type=1400 audit(4042.683:1535537): lsm=SMACK fn=smack_inode_set_acl action=granted subject="_" object="_" requested=w pid=23691 comm="syz.3.5819" name="355" dev="tmpfs" ino=1816
[ 1275.346609][   T37] audit: type=1400 audit(4042.692:1535538): lsm=SMACK fn=smack_inode_set_acl action=granted subject="_" object="_" requested=w pid=23691 comm="syz.3.5819" name="355" dev="tmpfs" ino=1816
[ 1275.356669][   T37] audit: type=1400 audit(4042.710:1535539): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1201 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.146 dest=42762 netif=eth0
[ 1275.411640][T23704] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1275.581002][T23703] tipc: Disabling bearer <eth:syzkaller0>
[ 1276.566545][T23712] netlink: 'syz.5.5824': attribute type 1 has an invalid length.
[ 1276.684210][T23715] Bluetooth: MGMT ver 1.23
[ 1277.003795][T23730] __nla_validate_parse: 12 callbacks suppressed
[ 1277.003815][T23730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5831'.
[ 1277.020246][T23730] bond8: entered promiscuous mode
[ 1277.020575][T23730] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1277.024513][T23730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5831'.
[ 1277.024546][T23730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5831'.
[ 1277.034039][T23730] bridge3: entered promiscuous mode
[ 1277.035207][T23730] bond8: (slave bridge3): Enslaving as an active interface with an up link
[ 1278.125079][T23743] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1278.135663][T23738] lo speed is unknown, defaulting to 1000
[ 1279.578807][T23767] netlink: 15995 bytes leftover after parsing attributes in process `syz.7.5836'.
[ 1279.711244][ T5600] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[ 1279.711290][ T5600] CPU: 1 UID: 0 PID: 5600 Comm: kworker/u9:3 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1279.711323][ T5600] Tainted: [L]=SOFTLOCKUP
[ 1279.711332][ T5600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1279.711347][ T5600] Workqueue: hci5 hci_rx_work
[ 1279.711483][ T5600] Call Trace:
[ 1279.711491][ T5600]  <TASK>
[ 1279.711502][ T5600]  dump_stack_lvl+0xe8/0x150
[ 1279.711531][ T5600]  sysfs_create_dir_ns+0x271/0x2a0
[ 1279.711632][ T5600]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1279.711665][ T5600]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1279.711697][ T5600]  ? rt_spin_unlock+0x160/0x200
[ 1279.711724][ T5600]  kobject_add_internal+0x62c/0xce0
[ 1279.711786][ T5600]  kobject_add+0x163/0x240
[ 1279.711811][ T5600]  ? __rcu_read_unlock+0x83/0xe0
[ 1279.711835][ T5600]  ? __pfx_kobject_add+0x10/0x10
[ 1279.711863][ T5600]  ? get_device_parent+0x370/0x3a0
[ 1279.711970][ T5600]  device_add+0x3fa/0xb80
[ 1279.712000][ T5600]  hci_conn_add_sysfs+0xd5/0x210
[ 1279.712090][ T5600]  le_conn_complete_evt+0xfef/0x1580
[ 1279.712146][ T5600]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1279.712171][ T5600]  ? irqentry_exit+0x218/0x8f0
[ 1279.712198][ T5600]  hci_le_conn_complete_evt+0x187/0x470
[ 1279.712226][ T5600]  hci_event_packet+0x67a/0xf10
[ 1279.712273][ T5600]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1279.712296][ T5600]  ? __pfx_hci_event_packet+0x10/0x10
[ 1279.712316][ T5600]  ? preempt_schedule_common+0x82/0xd0
[ 1279.712347][ T5600]  ? preempt_schedule_thunk+0x16/0x40
[ 1279.712378][ T5600]  ? hci_send_to_monitor+0xe2/0x590
[ 1279.712407][ T5600]  hci_rx_work+0x3ee/0x1020
[ 1279.712430][ T5600]  ? process_scheduled_works+0xa20/0x14e0
[ 1279.712489][ T5600]  process_scheduled_works+0xa8e/0x14e0
[ 1279.712528][ T5600]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1279.712554][ T5600]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1279.712577][ T5600]  ? assign_work+0x3cf/0x5d0
[ 1279.712610][ T5600]  worker_thread+0xa47/0xfb0
[ 1279.712649][ T5600]  kthread+0x388/0x470
[ 1279.712695][ T5600]  ? __pfx_worker_thread+0x10/0x10
[ 1279.712722][ T5600]  ? __pfx_kthread+0x10/0x10
[ 1279.712742][ T5600]  ret_from_fork+0x514/0xb70
[ 1279.712766][ T5600]  ? __pfx_ret_from_fork+0x10/0x10
[ 1279.712788][ T5600]  ? __switch_to+0xc89/0x1420
[ 1279.712818][ T5600]  ? __pfx_kthread+0x10/0x10
[ 1279.712838][ T5600]  ret_from_fork_asm+0x1a/0x30
[ 1279.712869][ T5600]  </TASK>
[ 1279.713092][ T5600] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1279.713271][ T5600] Bluetooth: hci5: failed to register connection device
[ 1280.493557][T23738] netlink: 388 bytes leftover after parsing attributes in process `syz.5.5833'.
[ 1280.622706][   T37] kauditd_printk_skb: 12430 callbacks suppressed
[ 1280.622725][   T37] audit: type=1400 audit(4047.573:1544967): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=4968 comm="udevd" path="/sys/devices/virtual/block/loop6/slaves" dev="sysfs" ino=15911
[ 1280.623968][   T37] audit: type=1400 audit(4047.573:1544968): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="sda1" ino=2
[ 1280.624039][   T37] audit: type=1400 audit(4047.573:1544969): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="sysfs" ino=1
[ 1280.624111][   T37] audit: type=1400 audit(4047.573:1544970): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="devices" dev="sysfs" ino=18
[ 1280.624251][   T37] audit: type=1400 audit(4047.573:1544971): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="virtual" dev="sysfs" ino=1389
[ 1280.624310][   T37] audit: type=1400 audit(4047.573:1544972): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="block" dev="sysfs" ino=13338
[ 1280.624417][   T37] audit: type=1400 audit(4047.573:1544973): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="sda1" ino=2
[ 1280.624483][   T37] audit: type=1400 audit(4047.573:1544974): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="sysfs" ino=1
[ 1280.624595][   T37] audit: type=1400 audit(4047.573:1544975): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="devices" dev="sysfs" ino=18
[ 1280.624666][   T37] audit: type=1400 audit(4047.573:1544976): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="virtual" dev="sysfs" ino=1389
[ 1281.597799][T23785] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5841'.
[ 1281.708909][T23801] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1281.709402][T23801] mac80211_hwsim hwsim46 syzkaller0: entered promiscuous mode
[ 1281.709427][T23801] mac80211_hwsim hwsim46 syzkaller0: entered allmulticast mode
[ 1281.802363][ T8140] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[ 1281.836941][T23801] tipc: Resetting bearer <eth:syzkaller0>
[ 1282.907707][ T5700] tipc: Node number set to 3882699034
[ 1283.371054][ T4916] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[ 1283.371099][ T4916] CPU: 1 UID: 0 PID: 4916 Comm: kworker/u9:1 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1283.371132][ T4916] Tainted: [L]=SOFTLOCKUP
[ 1283.371140][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1283.371156][ T4916] Workqueue: hci4 hci_rx_work
[ 1283.371183][ T4916] Call Trace:
[ 1283.371191][ T4916]  <TASK>
[ 1283.371202][ T4916]  dump_stack_lvl+0xe8/0x150
[ 1283.371228][ T4916]  sysfs_create_dir_ns+0x271/0x2a0
[ 1283.371258][ T4916]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1283.371288][ T4916]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1283.371323][ T4916]  ? rt_spin_unlock+0x160/0x200
[ 1283.371350][ T4916]  kobject_add_internal+0x62c/0xce0
[ 1283.371380][ T4916]  kobject_add+0x163/0x240
[ 1283.371404][ T4916]  ? __rcu_read_unlock+0x83/0xe0
[ 1283.371427][ T4916]  ? __pfx_kobject_add+0x10/0x10
[ 1283.371454][ T4916]  ? get_device_parent+0x370/0x3a0
[ 1283.371486][ T4916]  device_add+0x3fa/0xb80
[ 1283.371516][ T4916]  hci_conn_add_sysfs+0xd5/0x210
[ 1283.371548][ T4916]  le_conn_complete_evt+0xfef/0x1580
[ 1283.371578][ T4916]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1283.371606][ T4916]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1283.371629][ T4916]  ? skb_pull_data+0xf0/0x200
[ 1283.371660][ T4916]  hci_le_conn_complete_evt+0x187/0x470
[ 1283.371687][ T4916]  hci_event_packet+0x67a/0xf10
[ 1283.371710][ T4916]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1283.371733][ T4916]  ? __pfx_hci_event_packet+0x10/0x10
[ 1283.371752][ T4916]  ? preempt_schedule_common+0x82/0xd0
[ 1283.371784][ T4916]  ? preempt_schedule_thunk+0x16/0x40
[ 1283.371814][ T4916]  ? hci_send_to_monitor+0xe2/0x590
[ 1283.371852][ T4916]  hci_rx_work+0x3ee/0x1020
[ 1283.371875][ T4916]  ? process_scheduled_works+0xa20/0x14e0
[ 1283.371903][ T4916]  process_scheduled_works+0xa8e/0x14e0
[ 1283.371942][ T4916]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1283.371968][ T4916]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1283.371991][ T4916]  ? assign_work+0x3cf/0x5d0
[ 1283.372019][ T4916]  worker_thread+0xa47/0xfb0
[ 1283.372057][ T4916]  kthread+0x388/0x470
[ 1283.372077][ T4916]  ? __pfx_worker_thread+0x10/0x10
[ 1283.372103][ T4916]  ? __pfx_kthread+0x10/0x10
[ 1283.372123][ T4916]  ret_from_fork+0x514/0xb70
[ 1283.372146][ T4916]  ? __pfx_ret_from_fork+0x10/0x10
[ 1283.372167][ T4916]  ? __switch_to+0xc89/0x1420
[ 1283.372197][ T4916]  ? __pfx_kthread+0x10/0x10
[ 1283.372217][ T4916]  ret_from_fork_asm+0x1a/0x30
[ 1283.372249][ T4916]  </TASK>
[ 1283.372406][ T4916] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1283.372558][ T4916] Bluetooth: hci4: failed to register connection device
[ 1284.296133][T23827] netlink: 15995 bytes leftover after parsing attributes in process `syz.4.5851'.
[ 1285.517940][T19557] IPVS: starting estimator thread 0...
[ 1285.611691][T23839] IPVS: using max 5 ests per chain, 12000 per kthread
[ 1285.895978][T23842] lo speed is unknown, defaulting to 1000
[ 1286.050297][   T37] kauditd_printk_skb: 11221 callbacks suppressed
[ 1286.050314][   T37] audit: type=1400 audit(4052.575:1552820): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=16756 comm="syz-executor" path="/418/binderfs" dev="tmpfs" ino=2143
[ 1286.050346][   T37] audit: type=1400 audit(4052.575:1552821): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16756 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1286.050379][   T37] audit: type=1400 audit(4052.575:1552822): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16756 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1286.050408][   T37] audit: type=1400 audit(4052.575:1552823): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16756 comm="syz-executor" name="418" dev="tmpfs" ino=2139
[ 1286.050436][   T37] audit: type=1400 audit(4052.575:1552824): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=16756 comm="syz-executor" name="418" dev="tmpfs" ino=2139
[ 1286.050465][   T37] audit: type=1400 audit(4052.575:1552825): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=16756 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2143
[ 1286.050494][   T37] audit: type=1400 audit(4052.575:1552826): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=16756 comm="syz-executor" name="418" dev="tmpfs" ino=2139
[ 1286.053329][   T37] audit: type=1400 audit(4052.584:1552827): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="sda1" ino=2
[ 1286.056595][   T37] audit: type=1400 audit(4052.584:1552828): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="sysfs" ino=1
[ 1286.056631][   T37] audit: type=1400 audit(4052.584:1552829): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16756 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1287.204781][T23843] netlink: 388 bytes leftover after parsing attributes in process `syz.5.5856'.
[ 1287.288163][T23871] netlink: 164 bytes leftover after parsing attributes in process `syz.7.5863'.
[ 1287.288226][T23871] netlink: 164 bytes leftover after parsing attributes in process `syz.7.5863'.
[ 1287.556158][T23871] netlink: 164 bytes leftover after parsing attributes in process `syz.7.5863'.
[ 1287.556226][T23871] netlink: 164 bytes leftover after parsing attributes in process `syz.7.5863'.
[ 1287.591023][T12923] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[ 1287.751979][T12923] usb 4-1: Using ep0 maxpacket: 16
[ 1287.784090][ T5700] usb 7-1: new high-speed USB device number 72 using dummy_hcd
[ 1287.790740][T23871] netlink: 164 bytes leftover after parsing attributes in process `syz.7.5863'.
[ 1287.790818][T23871] netlink: 164 bytes leftover after parsing attributes in process `syz.7.5863'.
[ 1287.946677][ T5700] usb 7-1: Using ep0 maxpacket: 8
[ 1287.974903][ T5700] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1287.974927][ T5700] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1287.974938][ T5700] usb 7-1: Product: syz
[ 1287.974945][ T5700] usb 7-1: Manufacturer: syz
[ 1287.974953][ T5700] usb 7-1: SerialNumber: syz
[ 1288.017691][ T5700] usb 7-1: config 0 descriptor??
[ 1288.293082][ T8144] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[ 1288.833058][ T5700] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1288.895172][ T8144] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1288.895200][ T8144] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1288.895435][ T8144] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1288.895470][ T8144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1288.898105][T12923] usb 4-1: device descriptor read/all, error -71
[ 1288.956724][ T8144] usb 5-1: config 0 descriptor??
[ 1289.231172][T23891] netlink: 15995 bytes leftover after parsing attributes in process `syz.7.5868'.
[ 1289.248541][ T8144] usb 5-1: USB disconnect, device number 124
[ 1289.520471][ T5700] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1289.523570][ T5700] usb 7-1: USB disconnect, device number 72
[ 1289.737903][T23900] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5871'.
[ 1290.073592][ T5600] Bluetooth: hci4: command 0x0406 tx timeout
[ 1291.208570][ T5700] syzkaller0: tun_net_xmit 76
[ 1291.241126][ T5700] syzkaller0: tun_net_xmit 76
[ 1291.281413][T23917] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5877'.
[ 1291.281497][T23917] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5877'.
[ 1291.395031][T23917] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5877'.
[ 1291.395152][T23917] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5877'.
[ 1291.481145][   T37] kauditd_printk_skb: 16517 callbacks suppressed
[ 1291.481162][   T37] audit: type=1400 audit(4057.595:1564808): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19021 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1291.481194][   T37] audit: type=1400 audit(4057.595:1564809): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19021 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1291.481223][   T37] audit: type=1400 audit(4057.595:1564810): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19021 comm="syz-executor" name="294" dev="tmpfs" ino=1502
[ 1291.481264][   T37] audit: type=1400 audit(4057.595:1564811): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19021 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1291.481294][   T37] audit: type=1400 audit(4057.595:1564812): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19021 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1291.481377][   T37] audit: type=1400 audit(4057.595:1564813): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19021 comm="syz-executor" name="294" dev="tmpfs" ino=1502
[ 1291.481408][   T37] audit: type=1400 audit(4057.595:1564814): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=19021 comm="syz-executor" path="/294/cgroup" dev="tmpfs" ino=1503
[ 1291.481437][   T37] audit: type=1400 audit(4057.595:1564815): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19021 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1291.481467][   T37] audit: type=1400 audit(4057.595:1564816): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19021 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1291.481495][   T37] audit: type=1400 audit(4057.595:1564817): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19021 comm="syz-executor" name="294" dev="tmpfs" ino=1502
[ 1291.614790][T23917] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5877'.
[ 1291.614900][T23917] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5877'.
[ 1291.826271][T12923] syzkaller0: tun_net_xmit 76
[ 1291.838160][T23924] lo speed is unknown, defaulting to 1000
[ 1291.847907][ T8140] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[ 1292.005233][T23929] netlink: 15995 bytes leftover after parsing attributes in process `syz.3.5880'.
[ 1292.025676][ T8140] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1292.025712][ T8140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1292.029176][ T8140] usb 6-1: config 0 descriptor??
[ 1292.058671][ T8140] cp210x 6-1:0.0: cp210x converter detected
[ 1292.264362][ T8140] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -32
[ 1292.264391][ T8140] cp210x 6-1:0.0: querying part number failed
[ 1292.289663][ T8140] usb 6-1: cp210x converter now attached to ttyUSB0
[ 1292.508980][T23925] netlink: 388 bytes leftover after parsing attributes in process `syz.6.5879'.
[ 1292.601026][T23940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5883'.
[ 1292.693119][T21418] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[ 1292.855676][T21418] usb 8-1: Using ep0 maxpacket: 16
[ 1292.860434][T21418] usb 8-1: config 55 has an invalid interface number: 200 but max is 0
[ 1292.860460][T21418] usb 8-1: config 55 has no interface number 0
[ 1292.860486][T21418] usb 8-1: too many endpoints for config 55 interface 200 altsetting 2: 186, using maximum allowed: 30
[ 1292.860529][T21418] usb 8-1: config 55 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 186
[ 1292.860556][T21418] usb 8-1: config 55 interface 200 has no altsetting 0
[ 1292.863297][T21418] usb 8-1: New USB device found, idVendor=15d1, idProduct=005c, bcdDevice=a2.86
[ 1292.863323][T21418] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1292.863343][T21418] usb 8-1: Product: syz
[ 1292.863357][T21418] usb 8-1: Manufacturer: syz
[ 1292.863372][T21418] usb 8-1: SerialNumber: syz
[ 1293.256803][ T5700] usb 7-1: new high-speed USB device number 73 using dummy_hcd
[ 1293.422285][ T5700] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1293.422320][ T5700] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1293.422342][ T5700] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1293.422380][ T5700] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[ 1293.422403][ T5700] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1293.425571][ T5700] usb 7-1: config 0 descriptor??
[ 1293.876781][ T5700] hid_parser_main: 33 callbacks suppressed
[ 1293.876796][ T5700] steelseries 0003:1038:1410.001C: unknown main item tag 0x0
[ 1293.876824][ T5700] steelseries 0003:1038:1410.001C: item fetching failed at offset 1/7
[ 1293.877175][ T5700] steelseries 0003:1038:1410.001C: parse failed
[ 1293.877248][ T5700] steelseries 0003:1038:1410.001C: probe with driver steelseries failed with error -22
[ 1294.099747][T21843] usb 7-1: USB disconnect, device number 73
[ 1294.307256][T21418] usb 8-1: USB disconnect, device number 7
[ 1295.381095][ T5700] usb 6-1: USB disconnect, device number 97
[ 1295.386292][ T5700] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1295.386915][ T5700] cp210x 6-1:0.0: device disconnected
[ 1296.116680][T23964] netlink: 164 bytes leftover after parsing attributes in process `syz.5.5891'.
[ 1296.116741][T23964] netlink: 164 bytes leftover after parsing attributes in process `syz.5.5891'.
[ 1296.267591][T23964] netlink: 164 bytes leftover after parsing attributes in process `syz.5.5891'.
[ 1296.267654][T23964] netlink: 164 bytes leftover after parsing attributes in process `syz.5.5891'.
[ 1296.519267][T23964] netlink: 164 bytes leftover after parsing attributes in process `syz.5.5891'.
[ 1296.519368][T23964] netlink: 164 bytes leftover after parsing attributes in process `syz.5.5891'.
[ 1296.815843][T23973] netlink: 15995 bytes leftover after parsing attributes in process `syz.5.5893'.
[ 1297.017352][   T37] kauditd_printk_skb: 13009 callbacks suppressed
[ 1297.017369][   T37] audit: type=1400 audit(4062.707:1577200): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19465 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1297.017400][   T37] audit: type=1400 audit(4062.707:1577201): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19465 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1297.017439][   T37] audit: type=1400 audit(4062.707:1577202): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19465 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1297.017467][   T37] audit: type=1400 audit(4062.707:1577203): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19465 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1297.017495][   T37] audit: type=1400 audit(4062.707:1577204): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=19465 comm="syz-executor" name="279" dev="tmpfs" ino=1436
[ 1297.017775][   T37] audit: type=1400 audit(4062.707:1577205): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=19465 comm="syz-executor" path="/279" dev="tmpfs" ino=1436
[ 1297.017990][   T37] audit: type=1400 audit(4062.707:1577206): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=19465 comm="syz-executor" path="/279" dev="tmpfs" ino=1436
[ 1297.018222][   T37] audit: type=1400 audit(4062.707:1577207): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19465 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1297.018366][   T37] audit: type=1400 audit(4062.707:1577208): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19465 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1297.018513][   T37] audit: type=1400 audit(4062.707:1577209): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19465 comm="syz-executor" name="279" dev="tmpfs" ino=1436
[ 1297.397220][T23979] netlink: 388 bytes leftover after parsing attributes in process `syz.7.5894'.
[ 1298.687366][ T4916] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[ 1298.687396][ T4916] CPU: 0 UID: 0 PID: 4916 Comm: kworker/u9:1 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1298.687427][ T4916] Tainted: [L]=SOFTLOCKUP
[ 1298.687435][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1298.687449][ T4916] Workqueue: hci0 hci_rx_work
[ 1298.687477][ T4916] Call Trace:
[ 1298.687485][ T4916]  <TASK>
[ 1298.687494][ T4916]  dump_stack_lvl+0xe8/0x150
[ 1298.687521][ T4916]  sysfs_create_dir_ns+0x271/0x2a0
[ 1298.687551][ T4916]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1298.687580][ T4916]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1298.687614][ T4916]  ? rt_spin_unlock+0x160/0x200
[ 1298.687643][ T4916]  kobject_add_internal+0x62c/0xce0
[ 1298.687671][ T4916]  kobject_add+0x163/0x240
[ 1298.687697][ T4916]  ? __pfx_kobject_add+0x10/0x10
[ 1298.687724][ T4916]  ? get_device_parent+0x370/0x3a0
[ 1298.687756][ T4916]  device_add+0x3fa/0xb80
[ 1298.687785][ T4916]  hci_conn_add_sysfs+0xd5/0x210
[ 1298.687817][ T4916]  le_conn_complete_evt+0xfef/0x1580
[ 1298.687847][ T4916]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1298.687874][ T4916]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1298.687894][ T4916]  ? rt_mutex_slowunlock+0x219/0x460
[ 1298.687921][ T4916]  ? skb_pull_data+0xf0/0x200
[ 1298.687951][ T4916]  hci_le_conn_complete_evt+0x187/0x470
[ 1298.687979][ T4916]  hci_event_packet+0x67a/0xf10
[ 1298.687998][ T4916]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1298.688021][ T4916]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1298.688043][ T4916]  ? __pfx_hci_event_packet+0x10/0x10
[ 1298.688063][ T4916]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1298.688086][ T4916]  ? hci_send_to_monitor+0xe2/0x590
[ 1298.688114][ T4916]  hci_rx_work+0x3ee/0x1020
[ 1298.688137][ T4916]  ? process_scheduled_works+0xa20/0x14e0
[ 1298.688164][ T4916]  process_scheduled_works+0xa8e/0x14e0
[ 1298.688200][ T4916]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1298.688225][ T4916]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1298.688246][ T4916]  ? assign_work+0x3cf/0x5d0
[ 1298.688280][ T4916]  worker_thread+0xa47/0xfb0
[ 1298.688319][ T4916]  kthread+0x388/0x470
[ 1298.688339][ T4916]  ? __pfx_worker_thread+0x10/0x10
[ 1298.688365][ T4916]  ? __pfx_kthread+0x10/0x10
[ 1298.688385][ T4916]  ret_from_fork+0x514/0xb70
[ 1298.688409][ T4916]  ? __pfx_ret_from_fork+0x10/0x10
[ 1298.688430][ T4916]  ? __switch_to+0xc89/0x1420
[ 1298.688460][ T4916]  ? __pfx_kthread+0x10/0x10
[ 1298.688480][ T4916]  ret_from_fork_asm+0x1a/0x30
[ 1298.688512][ T4916]  </TASK>
[ 1298.688618][ T4916] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1298.688651][ T4916] Bluetooth: hci0: failed to register connection device
[ 1299.601802][T19557] usb 7-1: new high-speed USB device number 74 using dummy_hcd
[ 1299.783083][T19557] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1299.783115][T19557] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1299.793355][T19557] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1299.793384][T19557] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1299.793404][T19557] usb 7-1: SerialNumber: syz
[ 1300.253988][T19557] usb 7-1: 0:2 : does not exist
[ 1300.274780][T19557] usb 7-1: USB disconnect, device number 74
[ 1300.329642][T23606] udevd[23606]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1300.888539][T24005] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5903'.
[ 1300.918550][T24005] netlink: 164 bytes leftover after parsing attributes in process `syz.6.5903'.
[ 1301.881740][T24016] __nla_validate_parse: 5 callbacks suppressed
[ 1301.881751][T24016] netlink: 15995 bytes leftover after parsing attributes in process `syz.6.5906'.
[ 1302.891115][   T37] kauditd_printk_skb: 10230 callbacks suppressed
[ 1302.891133][   T37] audit: type=1400 audit(4068.124:1585865): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1201 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.146 dest=42762 netif=eth0
[ 1303.152273][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[ 1303.152323][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[ 1303.247735][   T37] audit: type=1400 audit(4068.447:1585866): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19465 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1303.247776][   T37] audit: type=1400 audit(4068.447:1585867): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19465 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1303.248810][   T37] audit: type=1400 audit(4068.456:1585868): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1201 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.146 dest=42762 netif=eth0
[ 1303.249372][   T37] audit: type=1400 audit(4068.456:1585869): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1201 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.146 dest=42762 netif=eth0
[ 1303.331051][   T37] audit: type=1400 audit(4068.521:1585870): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19465 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1303.331094][   T37] audit: type=1400 audit(4068.521:1585871): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19465 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1303.331179][   T37] audit: type=1400 audit(4068.521:1585872): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=19465 comm="syz-executor" name="286" dev="tmpfs" ino=1472
[ 1303.331724][   T37] audit: type=1400 audit(4068.521:1585873): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=19465 comm="syz-executor" path="/286" dev="tmpfs" ino=1472
[ 1303.331945][   T37] audit: type=1400 audit(4068.521:1585874): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=19465 comm="syz-executor" path="/286" dev="tmpfs" ino=1472
[ 1305.056882][T24031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5911'.
[ 1305.092534][T23974] lo speed is unknown, defaulting to 1000
[ 1305.477762][T24046] netlink: 15995 bytes leftover after parsing attributes in process `syz.7.5917'.
[ 1305.645994][T24055] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1305.980664][T24064] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5924'.
[ 1306.128188][T24069] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5926'.
[ 1306.128812][T24069] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5926'.
[ 1306.313590][T24072] lo speed is unknown, defaulting to 1000
[ 1306.667024][T24081] netlink: 388 bytes leftover after parsing attributes in process `syz.7.5927'.
[ 1306.704806][ T4916] Bluetooth: hci3: command 0xfc11 tx timeout
[ 1306.704845][ T5600] Bluetooth: hci3: Entering manufacturer mode failed (-110)
[ 1308.203566][T24086] lo speed is unknown, defaulting to 1000
[ 1308.253655][ T8144] libceph: connect (1)[c::]:6789 error -101
[ 1308.253771][ T8144] libceph: mon0 (1)[c::]:6789 connect error
[ 1308.268580][ T8144] libceph: connect (1)[c::]:6789 error -101
[ 1308.268667][ T8144] libceph: mon0 (1)[c::]:6789 connect error
[ 1308.319748][   T37] kauditd_printk_skb: 12267 callbacks suppressed
[ 1308.319767][   T37] audit: type=1400 audit(4073.126:1596102): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4968 comm="udevd" path="/run/udev/queue" dev="tmpfs" ino=16078
[ 1308.320732][   T37] audit: type=1400 audit(4073.135:1596103): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=4968 comm="udevd" name="queue" dev="tmpfs" ino=16078
[ 1308.322949][   T37] audit: type=1400 audit(4073.135:1596104): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23606 comm="udevd" name="/" dev="sda1" ino=2
[ 1308.322992][   T37] audit: type=1400 audit(4073.135:1596105): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23606 comm="udevd" name="/" dev="devtmpfs" ino=1
[ 1308.323022][   T37] audit: type=1400 audit(4073.135:1596106): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=23606 comm="udevd" name="loop4" dev="devtmpfs" ino=651
[ 1308.323055][   T37] audit: type=1400 audit(4073.135:1596107): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=24100 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1308.323096][   T37] audit: type=1400 audit(4073.135:1596108): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=23606 comm="udevd" path="/dev/loop4" dev="devtmpfs" ino=651
[ 1308.323125][   T37] audit: type=1400 audit(4073.135:1596109): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=24100 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1308.323155][   T37] audit: type=1400 audit(4073.135:1596111): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=24100 comm="syz-executor" name="313" dev="tmpfs" ino=1598
[ 1308.323184][   T37] audit: type=1400 audit(4073.135:1596110): lsm=SMACK fn=smack_file_lock action=granted subject="_" object="_" requested=l pid=23606 comm="udevd" path="/dev/loop4" dev="devtmpfs" ino=651
[ 1308.327959][T24098] netlink: 15995 bytes leftover after parsing attributes in process `syz.3.5934'.
[ 1308.411461][T24102] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5935'.
[ 1308.547281][ T8144] libceph: connect (1)[c::]:6789 error -101
[ 1308.547361][ T8144] libceph: mon0 (1)[c::]:6789 connect error
[ 1308.686503][T24105] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5937'.
[ 1308.696264][T24105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5937'.
[ 1308.831485][T24092] ceph: No mds server is up or the cluster is laggy
[ 1309.156085][T24122] (syz.4.5940,24122,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1309.156185][T24122] (syz.4.5940,24122,0):ocfs2_fill_super:1177 ERROR: status = -22
[ 1310.303246][T24117] lo speed is unknown, defaulting to 1000
[ 1311.636202][T24140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5948'.
[ 1311.658827][T24136] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1311.780327][T24145] netlink: 15995 bytes leftover after parsing attributes in process `syz.3.5949'.
[ 1311.805866][T24147] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5950'.
[ 1311.806538][T24147] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5950'.
[ 1311.864234][T24136] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1312.038831][T24136] team0: Failed to send options change via netlink (err -105)
[ 1312.039031][T24136] team0: Failed to send port change of device netdevsim1 via netlink (err -105)
[ 1312.039290][T24136] team0: Port device netdevsim1 removed
[ 1312.040939][T24136] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1312.147824][T24155] lo speed is unknown, defaulting to 1000
[ 1312.287508][T24136] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1312.321529][T24160] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1312.615312][ T7603] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1312.617791][ T7603] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1312.617838][ T7603] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1312.617872][ T7603] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1312.663232][T24173] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5955'.
[ 1312.751633][ T8144] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[ 1312.877980][T24155] netlink: 388 bytes leftover after parsing attributes in process `syz.7.5952'.
[ 1312.925123][ T8144] usb 4-1: Using ep0 maxpacket: 8
[ 1312.928064][ T8144] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 1312.928090][ T8144] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1312.928103][ T8144] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1312.928115][ T8144] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1312.928128][ T8144] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1312.928148][ T8144] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1312.928160][ T8144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1313.748643][   T37] kauditd_printk_skb: 12831 callbacks suppressed
[ 1313.748660][   T37] audit: type=1400 audit(4078.137:1606631): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=24181 comm="syz-executor" opid=24181 ocomm="syz-executor"
[ 1313.748693][   T37] audit: type=1400 audit(4078.146:1606632): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23606 comm="udevd" name="/" dev="sda1" ino=2
[ 1313.748741][   T37] audit: type=1400 audit(4078.146:1606633): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23606 comm="udevd" name="/" dev="tmpfs" ino=1
[ 1313.751822][   T37] audit: type=1400 audit(4078.137:1606619): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=4968 comm="udevd" path="/sys/devices/virtual/block/loop6/uevent" dev="sysfs" ino=15867
[ 1313.751860][   T37] audit: type=1400 audit(4078.146:1606634): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="sda1" ino=2
[ 1313.751894][   T37] audit: type=1400 audit(4078.146:1606635): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="sysfs" ino=1
[ 1313.751924][   T37] audit: type=1400 audit(4078.146:1606636): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="devices" dev="sysfs" ino=18
[ 1313.751953][   T37] audit: type=1400 audit(4078.146:1606637): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="virtual" dev="sysfs" ino=1389
[ 1313.751980][   T37] audit: type=1400 audit(4078.146:1606638): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="block" dev="sysfs" ino=13338
[ 1313.752006][   T37] audit: type=1400 audit(4078.146:1606639): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="loop6" dev="sysfs" ino=15866
[ 1313.779668][T24184] usbtmc 4-1:16.0: simple usb_control_msg failed -32
[ 1313.780816][T21418] usb 4-1: USB disconnect, device number 93
[ 1314.106141][ T8144] usb 6-1: new high-speed USB device number 98 using dummy_hcd
[ 1314.282165][ T8144] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1314.282191][ T8144] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1314.284923][ T8144] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1314.284950][ T8144] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1314.284971][ T8144] usb 6-1: SerialNumber: syz
[ 1314.867986][ T8144] usb 6-1: 0:2 : does not exist
[ 1314.868051][ T8144] usb 6-1: unit 5 not found!
[ 1314.918595][T24198] tipc: Started in network mode
[ 1314.918625][T24198] tipc: Node identity ee445d47c701, cluster identity 4711
[ 1314.922552][T24198] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1314.940079][ T8144] usb 6-1: USB disconnect, device number 98
[ 1314.989520][T23606] udevd[23606]: setting owner of /dev/bus/usb/006/098 to uid=0, gid=0 failed: No such file or directory
[ 1315.423802][T24196] tipc: Disabling bearer <eth:syzkaller0>
[ 1315.599178][T24209] __nla_validate_parse: 1 callbacks suppressed
[ 1315.599207][T24209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5970'.
[ 1315.636427][T23606] udevd[23606]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1315.710524][T24206] lo speed is unknown, defaulting to 1000
[ 1315.864213][T24214] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5972'.
[ 1315.931374][T24220] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5972'.
[ 1315.931408][T24220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5972'.
[ 1315.931436][T24220] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5972'.
[ 1315.979098][T24214] bond11: entered promiscuous mode
[ 1315.980518][T24214] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1316.065612][T24214] bridge1: entered promiscuous mode
[ 1316.066233][T24214] bond11: (slave bridge1): Enslaving as an active interface with an up link
[ 1316.902406][T19557] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[ 1317.014730][T24206] netlink: 388 bytes leftover after parsing attributes in process `syz.6.5969'.
[ 1317.097240][T19557] usb 6-1: Using ep0 maxpacket: 16
[ 1317.601482][T19557] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[ 1317.601524][T19557] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1317.601551][T19557] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1317.601573][T19557] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[ 1317.601612][T19557] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[ 1317.601635][T19557] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1317.672751][T19557] usb 6-1: config 0 descriptor??
[ 1318.234986][ T8140] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[ 1318.321653][T19557] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.001D/input/input80
[ 1318.397430][ T8140] usb 8-1: Using ep0 maxpacket: 8
[ 1318.403709][ T8140] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1318.403793][ T8140] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1318.403815][ T8140] usb 8-1: Product: syz
[ 1318.403829][ T8140] usb 8-1: Manufacturer: syz
[ 1318.403844][ T8140] usb 8-1: SerialNumber: syz
[ 1318.406935][ T8140] usb 8-1: config 0 descriptor??
[ 1318.458720][T19557] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.001D/input/input81
[ 1318.489177][T24250] netlink: 'syz.4.5982': attribute type 27 has an invalid length.
[ 1318.489200][T24250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5982'.
[ 1318.489223][T24250] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[ 1318.492743][T19557] kye 0003:0458:5013.001D: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.5-1/input0
[ 1318.632185][ T8140] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1318.633033][ T8140] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1318.659856][ T8140] usb 8-1: USB disconnect, device number 8
[ 1318.659981][T19557] usb 6-1: USB disconnect, device number 99
[ 1319.180520][   T37] kauditd_printk_skb: 17342 callbacks suppressed
[ 1319.180547][   T37] audit: type=1400 audit(4083.147:1617136): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23889 comm="udevd" name="data" dev="tmpfs" ino=14
[ 1319.180656][   T37] audit: type=1400 audit(4083.157:1617137): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="sysfs" ino=1
[ 1319.181369][   T37] audit: type=1400 audit(4083.157:1617138): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="devices" dev="sysfs" ino=18
[ 1319.182125][   T37] audit: type=1400 audit(4083.157:1617139): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="virtual" dev="sysfs" ino=1389
[ 1319.184623][   T37] audit: type=1400 audit(4083.157:1617140): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="block" dev="sysfs" ino=13338
[ 1319.187524][   T37] audit: type=1400 audit(4083.157:1617141): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="loop4" dev="sysfs" ino=15620
[ 1319.197738][   T37] audit: type=1400 audit(4083.166:1617143): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=23889 comm="udevd" name="data" dev="tmpfs" ino=14
[ 1319.197921][   T37] audit: type=1400 audit(4083.157:1617142): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="mq" dev="sysfs" ino=15716
[ 1319.199020][   T37] audit: type=1400 audit(4083.166:1617145): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="sda1" ino=2
[ 1319.199053][   T37] audit: type=1400 audit(4083.166:1617146): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="sysfs" ino=1
[ 1319.633061][ T8140] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[ 1319.633360][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[ 1319.772485][T24259] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5985'.
[ 1319.773152][T24259] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5985'.
[ 1319.784608][ T8140] usb 4-1: device descriptor read/64, error -32
[ 1320.055437][ T8140] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[ 1320.217968][ T8140] usb 4-1: Using ep0 maxpacket: 8
[ 1320.230222][ T8140] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1320.230249][ T8140] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1320.230269][ T8140] usb 4-1: Product: syz
[ 1320.230283][ T8140] usb 4-1: Manufacturer: syz
[ 1320.230297][ T8140] usb 4-1: SerialNumber: syz
[ 1320.243528][ T8140] usb 4-1: config 0 descriptor??
[ 1320.380572][    T9] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[ 1320.386414][T24280] netlink: 'syz.4.5993': attribute type 27 has an invalid length.
[ 1320.386432][T24280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5993'.
[ 1320.386454][T24280] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[ 1320.492752][T24278] fido_id[24278]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 1320.539241][ T8140] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1320.545136][    T9] usb 6-1: Using ep0 maxpacket: 16
[ 1320.550533][    T9] usb 6-1: config 0 has an invalid interface number: 34 but max is 0
[ 1320.550556][    T9] usb 6-1: config 0 has no interface number 0
[ 1320.550587][    T9] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[ 1320.550612][    T9] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[ 1320.560760][    T9] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[ 1320.560787][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1320.560806][    T9] usb 6-1: Product: syz
[ 1320.560821][    T9] usb 6-1: Manufacturer: syz
[ 1320.560834][    T9] usb 6-1: SerialNumber: syz
[ 1320.577190][    T9] usb 6-1: config 0 descriptor??
[ 1320.582773][T24275] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1320.583939][T24275] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1320.781477][T19557] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[ 1320.829473][T24275] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1320.831203][T24275] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1320.945290][T19557] usb 5-1: Using ep0 maxpacket: 16
[ 1320.950812][T19557] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[ 1320.950855][T19557] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1320.950882][T19557] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1320.950903][T19557] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[ 1320.950940][T19557] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[ 1320.950962][T19557] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1321.010022][T19557] usb 5-1: config 0 descriptor??
[ 1321.053249][    T9] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 1321.175322][T24287] lo speed is unknown, defaulting to 1000
[ 1321.274868][ T8140] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1321.305323][ T8140] usb 4-1: USB disconnect, device number 95
[ 1321.497477][T19557] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.001E/input/input82
[ 1321.551009][ T8144] usb 7-1: new high-speed USB device number 75 using dummy_hcd
[ 1321.574368][T19557] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.001E/input/input83
[ 1321.598785][T19557] kye 0003:0458:5013.001E: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0
[ 1321.724868][ T8144] usb 7-1: Using ep0 maxpacket: 8
[ 1321.752619][ T8144] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1321.752647][ T8144] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1321.753220][ T8144] usb 7-1: Product: syz
[ 1321.753237][ T8144] usb 7-1: Manufacturer: syz
[ 1321.753248][ T8144] usb 7-1: SerialNumber: syz
[ 1321.803523][ T8144] usb 7-1: config 0 descriptor??
[ 1321.848620][ T8140] usb 5-1: USB disconnect, device number 125
[ 1321.936688][    T9] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1321.936902][    T9] asix 6-1:0.34: probe with driver asix failed with error -71
[ 1321.992022][    T9] usb 6-1: USB disconnect, device number 100
[ 1322.038407][ T8144] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1322.039700][    C0] raw-gadget.3 gadget.6: ignoring, device is not running
[ 1322.041073][    C0] raw-gadget.3 gadget.6: ignoring, device is not running
[ 1322.042298][ T8144] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1322.088280][ T8144] usb 7-1: USB disconnect, device number 75
[ 1322.145495][T23889] udevd[23889]: setting owner of /dev/bus/usb/007/075 to uid=0, gid=0 failed: No such file or directory
[ 1322.333245][T24290] netlink: 388 bytes leftover after parsing attributes in process `syz.7.5996'.
[ 1322.387042][T24298] fido_id[24298]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[ 1322.497851][T24302] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5998'.
[ 1322.498269][T24302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5998'.
[ 1322.646301][T24308] netlink: 15995 bytes leftover after parsing attributes in process `syz.5.6001'.
[ 1322.808183][ T8140] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[ 1322.979104][ T8140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1322.979137][ T8140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1322.979159][ T8140] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1322.979193][ T8140] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[ 1322.979216][ T8140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1322.993157][ T8140] usb 5-1: config 0 descriptor??
[ 1323.094587][T24318] netlink: 'syz.5.6004': attribute type 27 has an invalid length.
[ 1323.094600][T24318] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6004'.
[ 1323.094616][T24318] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[ 1323.427700][T24320] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6002'.
[ 1324.116861][ T8140] usbhid 5-1:0.0: can't add hid device: -71
[ 1324.116914][ T8140] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1324.123984][ T8140] usb 5-1: USB disconnect, device number 126
[ 1324.609447][   T37] kauditd_printk_skb: 28414 callbacks suppressed
[ 1324.609473][   T37] audit: type=1400 audit(4088.140:1638090): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=23606 comm="udevd" path="/run/udev/data/c98:4" dev="tmpfs" ino=1095
[ 1324.609549][   T37] audit: type=1400 audit(4088.158:1638091): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=23606 comm="udevd" path="/run/udev/data/c98:4" dev="tmpfs" ino=1095
[ 1324.609617][   T37] audit: type=1400 audit(4088.158:1638092): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23606 comm="udevd" name="/" dev="sda1" ino=2
[ 1324.609684][   T37] audit: type=1400 audit(4088.158:1638093): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23606 comm="udevd" name="/" dev="tmpfs" ino=1
[ 1324.609750][   T37] audit: type=1400 audit(4088.158:1638094): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23606 comm="udevd" name="udev" dev="tmpfs" ino=9
[ 1324.610055][   T37] audit: type=1400 audit(4088.158:1638095): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23606 comm="udevd" name="data" dev="tmpfs" ino=14
[ 1324.625764][   T37] audit: type=1400 audit(4088.177:1638096): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=23606 comm="udevd" name="data" dev="tmpfs" ino=14
[ 1324.625899][   T37] audit: type=1400 audit(4088.177:1638097): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=23606 comm="udevd" name="c98:4" dev="tmpfs" ino=1095
[ 1324.626016][   T37] audit: type=1400 audit(4088.177:1638098): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=23606 comm="udevd" name="data" dev="tmpfs" ino=14
[ 1324.626203][   T37] audit: type=1400 audit(4088.177:1638099): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23606 comm="udevd" name="/" dev="sda1" ino=2
[ 1324.763326][T24340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6010'.
[ 1325.840990][T24350] netlink: 15995 bytes leftover after parsing attributes in process `syz.6.6014'.
[ 1326.599311][T24356] lo speed is unknown, defaulting to 1000
[ 1326.687390][T24293] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[ 1326.850041][T24293] usb 4-1: Using ep0 maxpacket: 8
[ 1326.853349][T24293] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1326.853365][T24293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1326.853376][T24293] usb 4-1: Product: syz
[ 1326.853384][T24293] usb 4-1: Manufacturer: syz
[ 1326.853391][T24293] usb 4-1: SerialNumber: syz
[ 1326.855283][T24293] usb 4-1: config 0 descriptor??
[ 1327.073024][T24372] syzkaller0: entered promiscuous mode
[ 1327.073752][T24372] syzkaller0: entered allmulticast mode
[ 1327.076313][T24293] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1327.076517][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[ 1327.076802][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[ 1327.077585][T24293] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1327.086834][T24293] usb 4-1: USB disconnect, device number 96
[ 1327.295984][T24356] netlink: 388 bytes leftover after parsing attributes in process `syz.4.6017'.
[ 1327.325387][T24376] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6022'.
[ 1327.977685][ T5600] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection
[ 1328.496394][T24388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6024'.
[ 1328.638037][T24293] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[ 1328.734525][T24399] netlink: 15995 bytes leftover after parsing attributes in process `syz.4.6029'.
[ 1329.063523][T24293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1329.063542][T24293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1329.063554][T24293] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1329.063573][T24293] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[ 1329.063586][T24293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1329.070266][T24293] usb 4-1: config 0 descriptor??
[ 1329.741140][T24293] usbhid 4-1:0.0: can't add hid device: -71
[ 1329.741209][T24293] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1329.763095][T24293] usb 4-1: USB disconnect, device number 97
[ 1329.962816][T24410] lo speed is unknown, defaulting to 1000
[ 1330.043329][   T37] kauditd_printk_skb: 12370 callbacks suppressed
[ 1330.043341][   T37] audit: type=1400 audit(4093.160:1648472): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="block" dev="sysfs" ino=13338
[ 1330.043361][   T37] audit: type=1400 audit(4093.178:1648473): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="sda1" ino=2
[ 1330.043377][   T37] audit: type=1400 audit(4093.178:1648474): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="sysfs" ino=1
[ 1330.043392][   T37] audit: type=1400 audit(4093.178:1648475): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="devices" dev="sysfs" ino=18
[ 1330.043407][   T37] audit: type=1400 audit(4093.178:1648476): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="virtual" dev="sysfs" ino=1389
[ 1330.043422][   T37] audit: type=1400 audit(4093.178:1648477): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="block" dev="sysfs" ino=13338
[ 1330.043437][   T37] audit: type=1400 audit(4093.178:1648478): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="loop6" dev="sysfs" ino=15866
[ 1330.043454][   T37] audit: type=1400 audit(4093.178:1648479): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=4968 comm="udevd" path="/sys/devices/virtual/block/loop6/uevent" dev="sysfs" ino=15867
[ 1330.045671][   T37] audit: type=1400 audit(4093.178:1648480): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="sda1" ino=2
[ 1330.045697][   T37] audit: type=1400 audit(4093.178:1648481): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="sysfs" ino=1
[ 1330.310003][T24413] syzkaller0: entered promiscuous mode
[ 1330.310019][T24413] syzkaller0: entered allmulticast mode
[ 1330.714638][T24420] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6036'.
[ 1331.670727][T24431] lo speed is unknown, defaulting to 1000
[ 1331.759912][T24436] netlink: 15995 bytes leftover after parsing attributes in process `syz.5.6041'.
[ 1331.888989][T24293] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[ 1332.056827][T24293] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1332.056861][T24293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1332.056888][T24293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1332.056924][T24293] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1332.056962][T24293] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1332.056985][T24293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1332.123798][T24293] usb 4-1: config 0 descriptor??
[ 1332.135744][T24433] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1333.608496][T24293] usbhid 4-1:0.0: can't add hid device: -71
[ 1333.608584][T24293] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1333.623138][T24293] usb 4-1: USB disconnect, device number 98
[ 1333.698433][T24444] netlink: 388 bytes leftover after parsing attributes in process `syz.7.6039'.
[ 1334.096032][T24460] syzkaller0: entered promiscuous mode
[ 1334.096057][T24460] syzkaller0: entered allmulticast mode
[ 1334.254753][T24466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6046'.
[ 1334.792893][T24481] netlink: 15995 bytes leftover after parsing attributes in process `syz.5.6053'.
[ 1334.999753][T24487] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6056'.
[ 1335.124612][T24489] lo speed is unknown, defaulting to 1000
[ 1336.055102][   T37] kauditd_printk_skb: 12422 callbacks suppressed
[ 1336.055123][   T37] audit: type=1400 audit(4097.894:1658315): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=24490 comm="syz.3.6058" opid=24490 ocomm="syz.3.6058"
[ 1336.055158][   T37] audit: type=1400 audit(4097.958:1658316): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=24494 comm="syz.3.6058" name="402" dev="tmpfs" ino=2055
[ 1336.055198][   T37] audit: type=1400 audit(4097.958:1658317): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=24494 comm="syz.3.6058" name="402" dev="tmpfs" ino=2055
[ 1336.055229][   T37] audit: type=1400 audit(4097.958:1658318): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=24494 comm="syz.3.6058" name="402" dev="tmpfs" ino=2055
[ 1336.055259][   T37] audit: type=1400 audit(4097.958:1658319): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=24494 comm="syz.3.6058" path="/402/core" dev="tmpfs" ino=2060
[ 1336.055290][   T37] audit: type=1400 audit(4097.958:1658320): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=24494 comm="syz.3.6058" name="core" dev="tmpfs" ino=2060
[ 1336.055321][   T37] audit: type=1400 audit(4098.097:1658321): lsm=SMACK fn=smack_ptrace_access_check action=granted subject="_" object="_" requested=r pid=24490 comm="syz.3.6058" opid=24490 ocomm="syz.3.6058"
[ 1336.055351][   T37] audit: type=1400 audit(4098.097:1658322): lsm=SMACK fn=smack_ptrace_access_check action=granted subject="_" object="_" requested=r pid=24490 comm="syz.3.6058" opid=24490 ocomm="syz.3.6058"
[ 1336.055381][   T37] audit: type=1400 audit(4098.143:1658323): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1201 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.146 dest=42762 netif=eth0
[ 1336.055414][   T37] audit: type=1400 audit(4098.207:1658324): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=24490 comm="syz.3.6058" name="newroot" dev="tmpfs" ino=2
[ 1337.003870][T21418] usb 7-1: new high-speed USB device number 76 using dummy_hcd
[ 1337.594982][T24517] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1337.727114][T24512] lo speed is unknown, defaulting to 1000
[ 1342.052479][   T37] kauditd_printk_skb: 4669 callbacks suppressed
[ 1342.052500][   T37] audit: type=1400 audit(4102.766:1662643): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1201 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.146 dest=42762 netif=eth0
[ 1342.052535][   T37] audit: type=1400 audit(4103.237:1662644): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1201 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.146 dest=42762 netif=eth0
[ 1342.052605][   T37] audit: type=1400 audit(4103.698:1662645): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1201 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.146 dest=42762 netif=eth0
[ 1342.052633][   T37] audit: type=1400 audit(4104.150:1662646): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1201 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.146 dest=42762 netif=eth0
[ 1342.126006][T19465] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1342.126024][T19465] audit: audit_lost=123102 audit_rate_limit=0 audit_backlog_limit=64
[ 1342.126037][T19465] audit: backlog limit exceeded
[ 1342.126047][T19465] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1342.126058][T19465] audit: audit_lost=123103 audit_rate_limit=0 audit_backlog_limit=64
[ 1342.126071][T19465] audit: backlog limit exceeded
[ 1342.324726][T24537] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6070'.
[ 1342.394155][T24537] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1342.471928][T24512] netlink: 388 bytes leftover after parsing attributes in process `syz.4.6064'.
[ 1342.487138][T21418] usb 7-1: new high-speed USB device number 77 using dummy_hcd
[ 1343.356296][T21418] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1343.356342][T21418] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1343.356365][T21418] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1343.364113][T21418] usb 7-1: config 0 descriptor??
[ 1343.398524][T21418] pwc: Askey VC010 type 2 USB webcam detected.
[ 1343.734385][T24553] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6076'.
[ 1343.809242][    T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[ 1343.866510][T21418] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1343.867477][T21418] pwc: recv_control_msg error -32 req 02 val 2700
[ 1343.868359][T21418] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1343.869164][T21418] pwc: recv_control_msg error -32 req 04 val 1000
[ 1343.870099][T21418] pwc: recv_control_msg error -32 req 04 val 1300
[ 1343.871022][T21418] pwc: recv_control_msg error -32 req 04 val 1400
[ 1343.883846][T21418] pwc: recv_control_msg error -32 req 02 val 2000
[ 1343.920253][T21418] pwc: recv_control_msg error -32 req 02 val 2100
[ 1343.923557][T21418] pwc: recv_control_msg error -32 req 04 val 1500
[ 1343.941684][T21418] pwc: recv_control_msg error -32 req 02 val 2500
[ 1343.986173][    T9] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1343.986203][    T9] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[ 1343.986223][    T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1343.986261][    T9] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1343.986282][    T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1343.986296][    T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1343.991879][    T9] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1343.991907][    T9] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1343.991927][    T9] usb 8-1: Product: syz
[ 1343.991941][    T9] usb 8-1: Manufacturer: syz
[ 1344.086164][T24550] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1344.089310][    T9] cdc_wdm 8-1:1.0: skipping garbage
[ 1344.089327][    T9] cdc_wdm 8-1:1.0: skipping garbage
[ 1344.112955][    T9] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[ 1344.112977][    T9] cdc_wdm 8-1:1.0: Unknown control protocol
[ 1344.114768][T24555] lo speed is unknown, defaulting to 1000
[ 1344.169874][T21418] pwc: recv_control_msg error -71 req 02 val 2600
[ 1344.170218][T21418] pwc: recv_control_msg error -71 req 02 val 2900
[ 1344.170533][T21418] pwc: recv_control_msg error -71 req 02 val 2800
[ 1344.174264][T21418] pwc: recv_control_msg error -71 req 04 val 1100
[ 1344.174892][T21418] pwc: recv_control_msg error -71 req 04 val 1200
[ 1344.215515][T21418] pwc: Registered as video103.
[ 1344.226333][T21418] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input84
[ 1344.243612][T21418] usb 7-1: USB disconnect, device number 77
[ 1344.335417][    T9] usb 8-1: USB disconnect, device number 9
[ 1345.748286][T24576] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6083'.
[ 1345.852291][T24576] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1347.296533][T24583] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6086'.
[ 1347.370562][T24591] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6086'.
[ 1347.370597][T24591] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6086'.
[ 1347.408263][T24583] bond4: entered promiscuous mode
[ 1347.413816][T24583] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1347.552670][T17386] audit_log_start: 12628 callbacks suppressed
[ 1347.552692][T17386] audit: audit_backlog=66 > audit_backlog_limit=64
[ 1347.552734][T17386] audit: audit_lost=123415 audit_rate_limit=0 audit_backlog_limit=64
[ 1347.552776][T17386] audit: backlog limit exceeded
[ 1347.553947][T17386] audit: audit_backlog=66 > audit_backlog_limit=64
[ 1347.553993][T17386] audit: audit_lost=123416 audit_rate_limit=0 audit_backlog_limit=64
[ 1347.554040][T17386] audit: backlog limit exceeded
[ 1347.556972][T17386] audit: audit_backlog=66 > audit_backlog_limit=64
[ 1347.557018][T17386] audit: audit_lost=123417 audit_rate_limit=0 audit_backlog_limit=64
[ 1347.557067][T17386] audit: backlog limit exceeded
[ 1347.557120][T17386] audit: audit_backlog=66 > audit_backlog_limit=64
[ 1347.648271][T24583] bridge1: entered promiscuous mode
[ 1347.671702][T24583] bond4: (slave bridge1): Enslaving as an active interface with an up link
[ 1348.243223][T24589] lo speed is unknown, defaulting to 1000
[ 1348.747315][T24608] netlink: 388 bytes leftover after parsing attributes in process `syz.5.6087'.
[ 1349.325600][T24614] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6095'.
[ 1349.460985][T24620] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6097'.
[ 1349.602718][T24623] lo speed is unknown, defaulting to 1000
[ 1349.897883][T24628] input: syz1 as /devices/virtual/input/input85
[ 1350.503382][T24642] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6103'.
[ 1350.503405][T24642] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6103'.
[ 1350.503422][T24642] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6103'.
[ 1351.670692][T24658] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1352.024554][T24661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6110'.
[ 1352.250914][    T9] usb 6-1: new high-speed USB device number 101 using dummy_hcd
[ 1352.274986][T24668] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6114'.
[ 1352.305811][T24668] bond5: entered promiscuous mode
[ 1352.306447][T24668] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1352.312018][T24668] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6114'.
[ 1352.312050][T24668] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6114'.
[ 1352.376278][T24668] bridge2: entered promiscuous mode
[ 1352.376964][T24668] bond5: (slave bridge2): Enslaving as an active interface with an up link
[ 1352.403681][T24670] lo speed is unknown, defaulting to 1000
[ 1352.414153][    T9] usb 6-1: Using ep0 maxpacket: 8
[ 1352.745821][    T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1352.745863][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1352.745883][    T9] usb 6-1: Product: syz
[ 1352.745897][    T9] usb 6-1: Manufacturer: syz
[ 1352.745912][    T9] usb 6-1: SerialNumber: syz
[ 1352.754000][    T9] usb 6-1: config 0 descriptor??
[ 1352.977458][   T37] kauditd_printk_skb: 16522 callbacks suppressed
[ 1352.977476][   T37] audit: type=1400 audit(4114.347:1683944): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="block" dev="sysfs" ino=13338
[ 1352.977510][   T37] audit: type=1400 audit(4114.347:1683945): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="loop7" dev="sysfs" ino=15989
[ 1352.977917][   T37] audit: type=1400 audit(4114.347:1683946): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="integrity" dev="sysfs" ino=16017
[ 1352.978711][   T37] audit: type=1400 audit(4114.347:1683947): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="sda1" ino=2
[ 1352.978745][   T37] audit: type=1400 audit(4114.347:1683948): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="/" dev="sysfs" ino=1
[ 1352.978774][   T37] audit: type=1400 audit(4114.347:1683949): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="devices" dev="sysfs" ino=18
[ 1352.979339][   T37] audit: type=1400 audit(4114.347:1683950): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="virtual" dev="sysfs" ino=1389
[ 1352.979372][   T37] audit: type=1400 audit(4114.347:1683951): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="block" dev="sysfs" ino=13338
[ 1352.979676][   T37] audit: type=1400 audit(4114.347:1683952): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4968 comm="udevd" name="loop7" dev="sysfs" ino=15989
[ 1352.980122][   T37] audit: type=1400 audit(4114.347:1683953): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=4968 comm="udevd" name="integrity" dev="sysfs" ino=16017
[ 1353.056836][    T9] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1353.781407][   T38] INFO: task kworker/0:1:17717 blocked for more than 143 seconds.
[ 1353.781431][   T38]       Tainted: G             L      syzkaller #0
[ 1353.781441][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1353.781450][   T38] task:kworker/0:1     state:D stack:21528 pid:17717 tgid:17717 ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1353.781582][   T38] Workqueue: usb_hub_wq hub_event
[ 1353.781702][   T38] Call Trace:
[ 1353.781709][   T38]  <TASK>
[ 1353.781720][   T38]  __schedule+0x16dc/0x5500
[ 1353.781756][   T38]  ? __pfx_sched_clock_cpu+0x10/0x10
[ 1353.781780][   T38]  ? rcu_is_watching+0x15/0xb0
[ 1353.781806][   T38]  ? do_raw_spin_unlock+0xf5/0x210
[ 1353.781823][   T38]  ? __pfx___schedule+0x10/0x10
[ 1353.781851][   T38]  ? rcu_is_watching+0x15/0xb0
[ 1353.781876][   T38]  rt_mutex_schedule+0x76/0xf0
[ 1353.781936][   T38]  rt_mutex_slowlock_block+0x55c/0x680
[ 1353.781984][   T38]  ? rt_mutex_slowlock_block+0x33a/0x680
[ 1353.782008][   T38]  rt_mutex_slowlock+0x2d4/0x780
[ 1353.833121][   T38]  ? rt_mutex_slowlock+0x1f2/0x780
[ 1353.833157][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 1353.833181][   T38]  ? rcu_is_watching+0x15/0[ 1353.833181][   T38]  ? rcu_is_watching+0x15/0xb0
[ 1353.833211][   T38]  ? lock_acquire+0x5f/0x350
[ 1353.833236][   T38]  ? hub_event+0x20e1/0x4cf0
[ 1353.833257][   T38]  mutex_lock_nested+0x168/0x1d0
[ 1353.833279][   T38]  ? hub_event+0x20ad/0x4cf0
[ 1353.833299][   T38]  hub_event+0x20e1/0x4cf0
[ 1353.833337][   T38]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1353.833357][   T38]  ? __pfx_hub_event+0x10/0x10
[ 1353.833375][   T38]  ? rcu_is_watching+0x15/0xb0
[ 1353.833399][   T38]  ? lock_acquire+0x5f/0x350
[ 1353.833421][   T38]  ? rcu_is_watching+0x15/0xb0
[ 1353.833444][   T38]  ? process_scheduled_works+0xa20/0x14e0
[ 1353.833468][   T38]  process_scheduled_works+0xa8e/0x14e0
[ 1353.833501][   T38]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1353.833524][   T38]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1353.833544][   T38]  ? assign_work+0x3cf/0x5d0
[ 1353.833568][   T38]  worker_thread+0xa47/0xfb0
[ 1353.833596][   T38]  ? __kthread_parkme+0x71/0x1f0
[ 1353.833622][   T38]  kthread+0x388/0x470
[ 1353.833638][   T38]  ? __pfx_worker_thread+0x10/0x10
[ 1353.833661][   T38]  ? __pfx_kthread+0x10/0x10
[ 1353.833678][   T38]  ret_from_fork+0x514/0xb70
[ 1353.833698][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1353.833718][   T38]  ? __switch_to+0xc89/0x1420
[ 1353.833744][   T38]  ? __pfx_kthread+0x10/0x10
[ 1353.833773][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1353.833801][   T38]  </TASK>
[ 1353.914938][   T38] INFO: lockdep is turned off.
[ 1353.914951][   T38] NMI backtrace for cpu 0
[ 1353.914970][   T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1353.914996][   T38] Tainted: [L]=SOFTLOCKUP
[ 1353.915002][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1353.915014][   T38] Call Trace:
[ 1353.915021][   T38]  <TASK>
[ 1353.915029][   T38]  dump_stack_lvl+0xe8/0x150
[ 1353.915055][   T38]  nmi_cpu_backtrace+0x274/0x2d0
[ 1353.915148][   T38]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1353.915203][   T38]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1353.915229][   T38]  sys_info+0x135/0x170
[ 1353.915277][   T38]  watchdog+0xfd7/0x1030
[ 1353.915299][   T38]  ? watchdog+0x1c7/0x1030
[ 1353.915320][   T38]  kthread+0x388/0x470
[ 1353.915337][   T38]  ? __pfx_watchdog+0x10/0x10
[ 1353.915354][   T38]  ? __pfx_kthread+0x10/0x10
[ 1353.915372][   T38]  ret_from_fork+0x514/0xb70
[ 1353.915391][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1353.915409][   T38]  ? __switch_to+0xc89/0x1420
[ 1353.915441][   T38]  ? __pfx_kthread+0x10/0x10
[ 1353.915458][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1353.915486][   T38]  </TASK>
[ 1353.915505][   T38] Sending NMI from CPU 0 to CPUs 1:
[ 1353.915536][    C1] NMI backtrace for cpu 1
[ 1353.915552][    C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1353.915575][    C1] Tainted: [L]=SOFTLOCKUP
[ 1353.915580][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1353.915590][    C1] RIP: 0010:io_serial_in+0x77/0xc0
[ 1353.915667][    C1] Code: e8 1e bb 8e fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f c0 f7 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07
[ 1353.915681][    C1] RSP: 0018:ffffc90000167a08 EFLAGS: 00000202
[ 1353.915696][    C1] RAX: 1ffffffff3365800 RBX: 00000000000003fd RCX: 0000000000000000
[ 1353.915707][    C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000
[ 1353.915717][    C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1353.915728][    C1] R10: dffffc0000000000 R11: ffffffff85360f70 R12: dffffc0000000000
[ 1353.915740][    C1] R13: 0000000000000000 R14: ffffffff99b2c100 R15: 0000000000000000
[ 1353.915751][    C1] FS:  0000000000000000(0000) GS:ffff888126262000(0000) knlGS:0000000000000000
[ 1353.915764][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1353.915775][    C1] CR2: 0000001b33722ff8 CR3: 0000000025c30000 CR4: 00000000003526f0
[ 1353.915790][    C1] Call Trace:
[ 1353.915796][    C1]  <TASK>
[ 1353.915804][    C1]  wait_for_lsr+0x190/0x300
[ 1353.915822][    C1]  serial8250_console_write+0x1232/0x1bd0
[ 1353.915844][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[ 1353.915859][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1353.915879][    C1]  ? lock_acquire+0x5f/0x350
[ 1353.915898][    C1]  ? console_flush_one_record+0x472/0xb50
[ 1353.915955][    C1]  console_flush_one_record+0x642/0xb50
[ 1353.915972][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1353.915992][    C1]  ? console_flush_one_record+0xfa/0xb50
[ 1353.916010][    C1]  ? __pfx_console_flush_one_record+0x10/0x10
[ 1353.916026][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1353.916046][    C1]  ? trace_irq_enable+0x3b/0x140
[ 1353.916064][    C1]  legacy_kthread_func+0x1b6/0x250
[ 1353.916080][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1353.916099][    C1]  ? __pfx_legacy_kthread_func+0x10/0x10
[ 1353.916115][    C1]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1353.916139][    C1]  ? __kthread_parkme+0x71/0x1f0
[ 1353.916160][    C1]  ? __kthread_parkme+0x196/0x1f0
[ 1353.916182][    C1]  kthread+0x388/0x470
[ 1353.916196][    C1]  ? __pfx_legacy_kthread_func+0x10/0x10
[ 1353.916212][    C1]  ? __pfx_kthread+0x10/0x10
[ 1353.916227][    C1]  ret_from_fork+0x514/0xb70
[ 1353.916244][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1353.916260][    C1]  ? __switch_to+0xc89/0x1420
[ 1353.916281][    C1]  ? __pfx_kthread+0x10/0x10
[ 1353.916296][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1353.916320][    C1]  </TASK>
[ 1353.916668][   T38] Kernel panic - not syncing: hung_task: blocked tasks
[ 1353.916686][   T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1353.916711][   T38] Tainted: [L]=SOFTLOCKUP
[ 1353.916719][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1353.916730][   T38] Call Trace:
[ 1353.916737][   T38]  <TASK>
[ 1353.916744][   T38]  vpanic+0x56c/0xa60
[ 1353.916780][   T38]  ? __pfx_vpanic+0x10/0x10
[ 1353.916801][   T38]  ? irqentry_exit+0x218/0x8f0
[ 1353.916819][   T38]  ? trace_irq_disable+0x3b/0x140
[ 1353.916839][   T38]  panic+0xc5/0xd0
[ 1353.916858][   T38]  ? __pfx_panic+0x10/0x10
[ 1353.916877][   T38]  ? watchdog+0x101f/0x1030
[ 1353.916896][   T38]  watchdog+0x1030/0x1030
[ 1353.916914][   T38]  ? watchdog+0x1c7/0x1030
[ 1353.916933][   T38]  kthread+0x388/0x470
[ 1353.916949][   T38]  ? __pfx_watchdog+0x10/0x10
[ 1353.916965][   T38]  ? __pfx_kthread+0x10/0x10
[ 1353.916983][   T38]  ret_from_fork+0x514/0xb70
[ 1353.917003][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1353.917022][   T38]  ? __switch_to+0xc89/0x1420
[ 1353.917048][   T38]  ? __pfx_kthread+0x10/0x10
[ 1353.917066][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1353.917095][   T38]  </TASK>
[ 1353.917355][   T38] Kernel Offset: disabled