last executing test programs:

4m51.591789423s ago: executing program 3 (id=4355):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)=@delchain={0x184, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x158, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x13c, 0x1, [@m_sample={0x138, 0x10, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x2, 0x0, 0x6, 0xa}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x200}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800}]}, {0xc1, 0x6, "9200fd45cfbfaf345fb3a8a997749fefa053a1e631f289e2733a34bfda3a1983d7027974d46e922209e9f418398e634151458aec78c3e590819e1ab74e5f08ce9f128c78176c6afb718af7f892cc43aa236ae8553e2bcb9475712e849a72c8618a556ea37252caba7ed994f095c56da51cd5d78c3a9aeb9b782ad180c98a44e20973f69e8f22bb71a2cc45b0df0fd876caa6827c38ba0bd9731585a5d2054dde461d79f8ad529bef9fe86f8f1d6b990c101919ac92fb4cd6cd1cd38b8a"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x184}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x68, 0x0, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x200400d0}, 0x40)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x3b9aca00, &(0x7f0000003700)={0x77359400})

4m51.291956364s ago: executing program 3 (id=4357):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0}) (async)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0)
ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000040)) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x30, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100009800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r1], 0x84}}, 0x4040040)

4m50.992896665s ago: executing program 3 (id=4358):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e64000000000000450404000100000017"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010000104000000000000000000000017", @ANYRES32=r2, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800000000000000080009"], 0x44}}, 0x0)

4m50.56000331s ago: executing program 3 (id=4360):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
move_mount(r1, &(0x7f0000000200)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00', 0x46)
r2 = socket(0x10, 0x80002, 0x6)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000420040008002900787d040008001b"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884)
syz_usb_connect(0x3, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002a91d21402577a8b046070102030109022b00010000000009045f00020103df000905050008000200e50905010208000100000725"], 0x0)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0)
r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x1)
syz_usb_control_io(r3, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x53}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x19, 0x2, "7f16"}, 0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async)
move_mount(r1, &(0x7f0000000200)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00', 0x46) (async)
socket(0x10, 0x80002, 0x6) (async)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000420040008002900787d040008001b"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884) (async)
syz_usb_connect(0x3, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002a91d21402577a8b046070102030109022b00010000000009045f00020103df000905050008000200e50905010208000100000725"], 0x0) (async)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) (async)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0) (async)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x1) (async)
syz_usb_control_io(r3, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x53}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x19, 0x2, "7f16"}, 0x0, 0x0, 0x0, 0x0}) (async)

4m49.015104076s ago: executing program 3 (id=4364):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a07fef8ffffff71a400fe0000000071108400000000001d300200000000004704000001ed00000f030000000000001d44000000000000730a06fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0xf5, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

4m45.898686986s ago: executing program 3 (id=4369):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000020020601080000000000000000000000000c00078008000640000000000500010006000000050005000a19000005000400000000000900020073797a31000000000d000300686173683a6e657400000000"], 0x54}}, 0x0)

4m44.636303148s ago: executing program 32 (id=4369):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000020020601080000000000000000000000000c00078008000640000000000500010006000000050005000a19000005000400000000000900020073797a31000000000d000300686173683a6e657400000000"], 0x54}}, 0x0)

4m2.753770601s ago: executing program 5 (id=4519):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x9, 0x0, 0x0, @binary="38eac21a"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000100))
ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)

3m59.583780265s ago: executing program 5 (id=4532):
io_setup(0x222, &(0x7f0000000180)=<r0=>0x0)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000003c0), 0x820182, 0x0)
io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0xfe00, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x1000000000000}])

3m58.999363022s ago: executing program 5 (id=4533):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newtaction={0x2e8, 0x30, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{0x2d4, 0x1, [@m_skbedit={0x1f0, 0x18, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4, 0xa}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xd}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x1, 0xffffffffeffffffb, 0x6, 0x101}}]}, {0x191, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_tunnel_key={0xb0, 0x1c, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}]}, {0x75, 0x6, "ebb7905fe91e9be4677d59a9642fd119d19ac5e190bf4b0f9f2859657921b9c6fce506e2b627b610552adbd25f19af61b6f9b1603735a6e3d97188050bf1e9e04f7b370bf4a6645e82f7d27fe7ecb451e477ceac7c3e03294761182420c71011ec9e6197a94d09c8348554283a8308b47f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x30, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x2e8}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xa1ff}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

3m58.790252592s ago: executing program 5 (id=4534):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0\x00')
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000040601080000000000000000020000020900020073797ae82bcd22000900020073797a3100000000050001000700000005000100070000000500010007000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000050)

3m58.630956571s ago: executing program 5 (id=4535):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400ff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0)

3m58.296075756s ago: executing program 5 (id=4537):
r0 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x57, 0x5f, 0x44, 0x8, 0x403, 0xa6d0, 0xb6bd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x10, 0x0, 0xa0, 0x4}}]}}, 0x0)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000000))
mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f00000010c0)={0x100095, 0x70, 0x20000, {r1}}, 0x20)
syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x1b, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x57, 0x5f, 0x44, 0x8, 0x403, 0xa6d0, 0xb6bd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x10, 0x0, 0xa0, 0x4}}]}}, 0x0) (async)
syz_open_procfs$userns(0x0, &(0x7f0000000000)) (async)
mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f00000010c0)={0x100095, 0x70, 0x20000, {r1}}, 0x20) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

3m57.792160386s ago: executing program 33 (id=4537):
r0 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x57, 0x5f, 0x44, 0x8, 0x403, 0xa6d0, 0xb6bd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x10, 0x0, 0xa0, 0x4}}]}}, 0x0)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000000))
mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f00000010c0)={0x100095, 0x70, 0x20000, {r1}}, 0x20)
syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x1b, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x57, 0x5f, 0x44, 0x8, 0x403, 0xa6d0, 0xb6bd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x10, 0x0, 0xa0, 0x4}}]}}, 0x0) (async)
syz_open_procfs$userns(0x0, &(0x7f0000000000)) (async)
mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f00000010c0)={0x100095, 0x70, 0x20000, {r1}}, 0x20) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

10.643933584s ago: executing program 0 (id=5442):
poll(0x0, 0x0, 0x100)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x980, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000140)=@x={0x94, 0x6, "c511ee84649d"})
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000180))
ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040))
close_range(r2, 0xffffffffffffffff, 0x0)

8.78065799s ago: executing program 6 (id=5448):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r2 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'})
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00002110008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)

8.652313278s ago: executing program 6 (id=5449):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000080)={0x18, &(0x7f0000000300)={0x20, 0x0, 0x5, {0x5, 0x0, "821f00"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$audio(0xffffff9c, 0x0, 0x402, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000008c0)=[{{&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000440)="3e3ecc66cf45a5d058b8b7495def332f5a454508eb9662eb4a907850c461ad1fbba5c6b9d5c28f1881c976b7061a80815261ba89435f99fa0f55b3e8f14220a85511f18cf7dd83da196a19a7a7b4abf87272eb4892805e4deb1f87b453842dd9bff976243f8902c10dc236022b77cde4595f2cc661c4879ddc4caf51eb83d6b1b10761f39dcc536a0b84f14730dc7698d0cf9aa928fde2ca94ec798c90d0bf8e4cf365b56dad5c9fd4f332757e565b1de7779a4ec9cb520a2faea5ec0b5071ea0917676b2e7d5770ba709c846172d92e333e9e", 0xd3}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000600)="3defd3d21ba9443f9e0b98642ec8ed2aff0c2cca02d8ee14173a412d291f6b370e36a1e980b15e500b61bf6cfab9d7d2d5086e65c487635db4f51a9786801ab248a05123a4a3b8dd7f5b7a90a61323544d4425eb40bd9515e7d0406c99d924f75263010fef", 0x65}, {&(0x7f0000000200)="15301753f1f0072afd1fd44de7622b0024ebfcf6193127878d5188c2bb813ef1", 0x20}], 0x5, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68, 0x2000c040}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0x10, 0x1, 0x7)
r3 = socket$kcm(0x29, 0x0, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f00000001c0), 0x4)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x2000)
ppoll(&(0x7f00000000c0)=[{r4, 0x9620}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x4000)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x23c1}, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r5, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10040040}, 0x4851)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x5f70, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5f3c, 0x2, [@TCA_MATCHALL_ACT={0x11c0, 0x2, [@m_skbmod={0x12c, 0xd, 0x0, 0x0, {{0xb}, {0xb4, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x4b9c, 0x1, 0x1, 0x40}, 0x9}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x3, 0x2, 0x8, 0xfffffffa}, 0xf}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2c}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xc74b}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1000000, 0x7, 0x20000000, 0xa9d8}, 0x1}}]}, {0x50, 0x6, "b34e5b0e24a860434e27a63df5b373f934391924c2599fa9cec3f62b55bd75fe4ca7ef743c1aeaf7db6a0cb4b132b666e7c0a4e7a4683fe69cf94408f7f956cba88ddc59fe2badfb4357f905"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x1090, 0x2, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x16e5, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xa36c, 0x4, 0x10000000, 0x4, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xe70, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0xff, 0x0, 0xc7f, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x227, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x18fe, 0x4}}]}, {0x1004, 0x6, "a1ffae855e4cd95dd04687845f6ef1643f64e453e7bc3b20288972cb7efc83d56aaed96efb96503a6d96a8757f6d0b14f82d5a6b3dc77fb5e3e4da1125f29b7ec31763fd05bcbe6f1faba629d8334890f381e212c9f63e2e8a4053e613c50f1c022adcd9b42ef5efc8fbb2953c274810b3f6d9f1836f0bedceb81169221f850d994b9c06390c879c08115c77b29c334abb96d60c39c371a0ac0d3930c58c5b5aa77e3c091af02580ff0c063a7cc34de1788b0bc326fd3784a788e5721b85255fdd74684d2c4e7e833be3d445eb800dae2d4b90e99cbd0a5d5847e2c3f663e6003c35081a1fbb160d8b2e472cd89a97e32b95d57467303b225ead75b9c3db297603cf86f133cc7f36b9bed646fbc8d8b43dab2d44deb5b16e1cb130e3fd5f5df5d25e6a06c9c63983321bc45c89388d7ab00c632e12625dcf3d334d19c595b0aa60ab7bb57a626fdff8320c814f1aa50e77f8507c22c7165e18ee6f9c552df1bd8f4029d2860610292665ab5f9bc4f8c583eaea81c1599735d665f5f79d34219edb5b83b54a819bb9e8120f0a6f297d2c840896dd6dd904cb810c9279aae46f0840e990db632339bd5ff9c61bd674cbb61c0f3df8036d8d81051b319db00e6ca0ffcc3eac8e2b0001ea7aba05ee36650a3cd363389afc6e5f24f4b94a39317a0361aecacefe3f3bc2fe071138d5bb57a624e4a0c5b161e6c94de227e53119ab000e9c2066525c44d47a1b95ba3b4e83c97d4315522580c6d82b4b7451b9477c6780fe166b1fb01a303393ff53bd9ac050db70b0642e4bdd796d2caf3d793c04bf4cde5f3e27af96f67e3e75f53c56aa9f86bafbea089b9bf9b8d29424ead35b470e257dafc9fb25e6a4a073ce0b469130227493118ec22639b299312a5b1e9a63735c59e618129304cc7eda7464a94819cc35c7c17dca377e9ec32334fc0aa74043e8059b992c48247627366aacf374628a22fc5ad1a152c3feb2e0d9e1e591cee0f9e8f227f95d567db8b06ec5f81e1f97d8bdc11c9919cfb9fbe3dd247344fe55d9da9c4522987771816c6ce76c7b369a37bb039170dfe7cf3737d6c53016ff2460eebbb6d7e1e6d5531da4a97efa238c195f47638ae1eb5c608db14060ad613ee69042a1a40402bbff9060d2c6f5a9b311e7b328290d72781557f5b7a49bfc85e48bd020445869a7b45887d710202f552253c66f63d1f5a3f4f738d065ccad6e0cab2fb788d254b88f1990ecc28899f23b6a5b657a694197d483702d683c638f8d7a5dd7c846595477f5ba62e9994a6fd78b6b4975e2d1381997a0091553a8c548eb4223eca92fb1ab44724fa2191f3894642863b08a6113e6c48b989db103a3b3f58360e2cb7929aa117c9ed9aa15b8cb7baa4bbe2f33bb72af4ea2e697fa7b1b8e0843b75201e1c8065306a29fc906ebb648764aed198304fa17505675bc202a131e27cb2d3ee195530d4b90e7330e6259f1284459e60107f1ceb2151ff9efcac6ed73638bcb6616667be7a56aea34a11f2b3e100429f6754aca924cca57587ddfe6f264eb0b7a894e2db10e4abfe026aa3d31070da54ccf9a89a182102ecb7688a523b3374c1039af3387532f4af0845fd0af7e60fd9f2ce0d2d7692a099709a6890c7fab9cd59728410bedb918d43ff2a8a9b541b38503b46ef767a8e529ce16b21adf6c600fae0ed4f6b3b4da63c032f4debfe5620245cf2e46aae92744b6432d2388962e0187b5cfd229ced37737c48445871b7d125bd46d9b383d1e7112b293bcdfc3fbb196e713f7ea00633043dd0bd27a36f1c405fc035daee3e3b10c875074bf6f6441ba6ea70ac5b9ffdf1c85e5c0798e2cf0c26f34f3dd5ec82cf75481ea859ad69fb275b6c6d034b6d1ad8ce2868c3244c74af48bef2ca4c0c30f3e644dd78775aa63e131370d83658f13807156d14bbb43b260135ec70e6f20cee1601513ede3f96a7343089ba59c482bbeec30049f93ac9eeaef9335b46d3181c70175b4801bfd308db299cd12dd1a7fbccfb219f223b22c8ddfe5a7ea3efc601012ed011ee968dd8b8c7f1796fe087c948515ecd4105507e7df3ac36123e70eefea7cb0139df11bd6bcf1ce43dc62ae12a8a88dca2e0385f7e2380e8d5d60f2949b4c8ce070f4081637563483acf5fd7efb099eb0fc144936f0294b93c5ab1b8500f77ca9e79c09774ca576cd1c771535ea01fe20824a05450744bbc85cb3d49fe6c78bf2b8d6023e0d0e9df21794a7a2a04019b956484e00189d5ecbb0d25fb5cf99d98e140dcd9dfa2d8ff5abab7a57b5af3af10b79a57a3288acc9a38fa232a73c840f2d5097bfaca445fa1cd179c00aa46efaeeebeb382658279495670f18314fbbd006aa1219d295fe1fe90f50ac051179dd779147fa1fff63256a5bfa65af339d256dad00593eee2f66ca65a69d4219fba76ab903672c0e904662759022b8394d38e54a043a6f326a0e52a846df9f68dcaeb3cad2edae251cd8dbe509371e28532a9fc52bc603d0f126629d529b3e508d406574a9770e9eff1aac7b0bb099da75ffbfab221e2da4de25f686de0f63c0dcdfac2c6b38bef68f9e11d2ba435973972c2109ffd51730138f40947758e56de3090514aa70d9454bbc6429463b5e7f04156aec2f62f8039ec1fcf3af6b8849cfca53190ad1faa91172a6b832cbcc741e9e32c5e84c85f741aca8c01587f321cbb000efbfcbb289020e271426fbab903f4499a061a1fff68dde6642f3f19fbe820098509f9e09ff39bee3f84db5f9dd98ee88da7278322c82c8b47edb6bbc817f58691f0d14b705fc9f86994607b25506dea1d52d4670c7b42d8f8e337c52bcd9e1e58334f4cea4e7d73fd36f485454e8f8abe45784867b38faf25aa2d9ea371b77dccc520babaaba3023c2ad65883f6f77a943ff35f62635fe22281091c685af8555c6930159f106010c0576c88c14d47ad1c803282a8d3a6b01c0e463ebe63dc630a701e20d26be70f0332913a4724d53fe0d2ae1c60dc8f8b261a84144fd2f0129b423208b4396636d1779b06204f3b6675d91567671762deabced1dccca94a1e9370bef9141c09e5f7d5ffb4f7e138387022dcdda507b1aa2cfb6c63bc549968de7a1793f5dc23eb0c6f7c38b794d970e66ee99cb98f4e46a5d50026433cea4672d55a400dff6265857b083a74190aca900dfbab8fd001971005a51ab214ff5c98c0d539f975c49949ea665cc0e8ddf8cf89d0789cdc3d1e690807559ce316089f2de7683eaa1a255edc0520d885d8824dd2690f9db118595ca5fef7f83e7da30acaa2c44866c9873b34bc8ca14bd94cf59010234c30059a953e4163168c38744a3b5b14d466515510bf8028c3f10dd8b5b6d05b3ff4d200d43cf676432b2b3c7a784387fc6277574be12411cb9fdeeac4cd250c569698dea4c27dd703fe39fe3d2954f4c060f8800a5ff469063f7b6aae80c231fa4d00132d7d545683288189831720612260ddf44e80a15453fdab483bc4a9a7cdd1fbe325f31800c5b44a0b01837e942dc0a9b9d9d281c7782d20069507ada9c428b9fe66edea3a472f1919c69cc9143bb0b282d97fb05e1eb66e9962b2e0d4a2d76c38b889046244f0e25302b96a606c28ca7ca34457952f2bcb93bfc6b11a306b3562030597cd38ce0c7a732f2dd96f67a981edcd11245866288af5ef31bf4f9b4fc26a6309d85a3f5a317044dcfa61c9a3f2d199b396a1a616e6b9b283c2d85415870f4e4e33aa7b7eda9de6618b06e3071e2baa858a6d3aa5bf6c7dd7b5eb4c54a9e844fd9c6cb3f52b5404e2c42cc6b75926014b4f244bab467e7fabfdc87711048e408eb2ccd2a275daccb1a49de15c0345bea7ab7b6868625c2123914db1ebf41ec2a4e1274400368a6ddd6de13418dd6ab0f9484ff11abfe416ead5ab90af4578abaf4e70b23bc38743f0c1b5ce0eb1d46692e22b7f67993c936a6e2bfd5aef7e45d36ca2a81f3d137a46d6a0c6b2689834b1bbf71e61d8b1ec5613ffba7f6041b37a9ad209624e790a16cf09a2c0cadd1b400bd64398ac786ecaadb970feb98792d7d34957b2c14bdb192b25142489bcc0bfcab1283819bb50cd79d6aed81d0ad8ef4079b7aeb614a12ac27ce2896453046f26b982fdccacf6f60f4c1f3c63b42aa28db8eaedb08a1f42101cb4c38fde94d19ed845f0eacb64282ef422515c87777451cb5ccfe581d984806429cc31b41e7952b3daab583cab27e1a97fe220303c24ead6a694d2daafb92003c50937d542d46080f63ed503bf7a24047a12bd9fe8980d4689ff57e9391bbb46a410a9a57d14a58dfc1cea445975fb0ec5d13c2f28bd260aad08faa06d049ccef9f1a9601f9a276a5de04b01bd2214b8acb9d86bb03587604129735c208083e499644942d37ae2c8021ff74616b3dae7c3a137a8c755873aff5d6f493183066e6bf3d83947e0e699a7e125742cafbbf2914ced12b13304cba37b4ac315c13992911b8b61627e0e7c455b5e7cd5cb5b2da2449c79ead1a7e4c5fd70fbcad05566f5a12a20d55efae3e165d39fbbce81ab5c872df2d86d2bde2277713fa86e99f8982532e63b1e1607e2438998059c5cd479a0db70024223ce32a5493e9e362ec4b08e0ddac5b692257c65f150a255947c586ee17cc2df4114761182d9e67396eabbc338ceeb27bc48e1d06dc79536d42257b8aefa242fe1882061f7b7060e13dc5ad926fad6d4388e631f651bd40e524ebafe006c1500b16b7a947ab8ef1b0348d18a148964f885788af10d8a47062c1493eedcf4f221fba503c5974b36d87998f675759e4ba97106a28899f2b3afbef3c94b621e0cb4939ea8d4f4afcb035082a509d521c47d2a132d7c3d271939b0e412016d3edc0d4017ee83c46883a4c50dfe6d11a7b9f6b7eb8d6275efc67899d655bf28bd08b89842a6a2b1aea8e6f3a5dfe633feb2a32e54063c22c1fd123548d0b5200bd58b87dda698683ac2c8193f6dedf3dfef28fbb6cbff5240349d824e011442387d537f8d033ce01092c272594fe84d765e61b7871550dcf7020567b94c185ab0334cf30918c752475c15ab0dfe997cbd7386e3bc33889ea2def7a783be8b09631fb1badf2345ea14d504021747e2c353407581b79a5f983a23031f7d6b9f1a0d21723f1f67e2da4695f24cd0253d944a09a7afe7c1ee19e0c131e73f7a32a49e5b61a42e0f9d390707406eb8f562bb81a8241ee17ef3e6a1c1dfcc0d4c8d6585674bdd7b4ca0d85db79d1e5a486b4430b9cec55227e5d9db1c6e9c98af2605e90d3131b738ecabb762ccd705ca3de860adff423023cc26ee5e64d984e2bd08f521b77ed1cf410f488326b4d6545c168279d407dd2905053df62df5bb83fa57eeb1871db1b44ceb1d208a0477ef3b451787783760e2e6cc9bef246dded07ddb25e37a4fda0e869075659c0e0fde7efe95ce5944d54c926f67d3a8fa24aeca197f0fa74516617cc73cd90dcc5811cc55df19b1e7273524a69c6a69706a76396f9622819a07c92d397eadc9fddb40a46df524ddbb20efd5ba7f7d7a24a488c437b879eb2fd059b9a51feed50e3208912d7b7283f0173d74b91d05598f19a6f5cec092699f9975f9bcc5ccc528ad876116da8dfcc4686c5a2b1f63e3a1b24925503652a563c917bf2110b38607830e14c451827e47d44fd2ef6f5721c090513c4be515318dfb15286be1e1aef78e8ec7eecd625bdaac5e0c782872441ac6d7c19af28fc9fbe660ed6d98d2cb2be428a5a211d57972ab242a2ca195ba606a3717e84dc01fcaee13a4857572d2ca4dc5047c8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_MATCHALL_ACT={0x4d68, 0x2, [@m_pedit={0xec0, 0x1b, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x1c4008c4, 0x8, 0xffffffffffffffff, 0x8, 0xfe}, 0x5, 0x7, [{0x40, 0x7ff, 0x7fffffff, 0x5, 0x2, 0xfffffffa}]}, [{0xfffffffd, 0x7, 0x2, 0x3, 0x5e, 0xc7e0}, {0x1, 0xa4, 0x1a, 0x40, 0x1, 0xef95}, {0x2, 0xafd0, 0xc0fa, 0x6, 0x563500, 0x6}, {0x3, 0xc6, 0x660, 0x9, 0x80000001, 0x80}, {0x180, 0x2, 0x10000, 0xffff, 0x0, 0x2}, {0x2, 0x8, 0x8, 0x1, 0x2, 0xb4}, {0xd2d8, 0x3, 0x6, 0x18da, 0x36cf4e97, 0x7}, {0x0, 0x2, 0x5, 0x5, 0x4}, {0x0, 0x0, 0x0, 0x10, 0x3, 0x5}, {0xc7, 0x6, 0x1000, 0x4, 0xfffffff9, 0x231}, {0xe000000, 0xe, 0x1, 0xa, 0x8, 0x401}, {0x5, 0x0, 0x1, 0x9, 0xfffffff8, 0x10001}, {0x4e7f, 0x654, 0xd, 0x5, 0x296, 0x9}, {0x2, 0x8, 0x7, 0x5192, 0x2, 0xaa8}, {0xbdf, 0x0, 0xfffffffd, 0x5, 0x9, 0x7f}, {0x4, 0x9, 0x5, 0x2, 0x765a, 0x10000}, {0x6000, 0x7, 0x2, 0x1, 0x0, 0x5}, {0x7dbd, 0x3, 0xe1, 0x1, 0xa, 0xfffffff8}, {0x9, 0x5, 0x80000001, 0x5, 0xa06, 0x1}, {0x8, 0x6, 0x10, 0x2, 0x40, 0x28}, {0x8, 0xcf77, 0x1, 0x6, 0x80000000, 0x5}, {0x9, 0x0, 0x0, 0xfffffff8, 0x59bf75d4}, {0x9, 0x8, 0xa, 0x80000000, 0x7, 0x7}, {0x1, 0x76a, 0x2, 0x3, 0x8, 0xfffffbb1}, {0x4, 0x7, 0x2, 0xffffffff, 0x100, 0xc0}, {0x368, 0x5, 0x0, 0x3, 0x5, 0x4}, {0x0, 0x4, 0x1, 0x7fffffff, 0x41c}, {0x101, 0x5, 0x4, 0x2fb1, 0x5, 0x5}, {0xf, 0x4, 0x8, 0x7, 0x8, 0xff}, {0x401, 0x6, 0x3, 0x10, 0x5, 0x9}, {0x5, 0x0, 0x4, 0x2}, {0x5, 0xfffffffc, 0x0, 0x7fff, 0x6, 0xe}, {0xff, 0x100, 0x0, 0xc1b, 0x2, 0x7ff}, {0x7, 0x9, 0x8, 0xa, 0x81, 0xff}, {0x3, 0x7f, 0x1, 0x10, 0x800, 0x1}, {0x1000, 0x8, 0x9, 0x200, 0x401}, {0x0, 0x3, 0x6, 0x1000, 0x3, 0x3be}, {0x80000001, 0x443, 0x1, 0x7fff, 0xc, 0x6}, {0x0, 0x10, 0x7, 0xdb82, 0x0, 0x446c}, {0x3, 0x16d9, 0x9, 0x300000, 0x0, 0xff}, {0x0, 0xc1fb, 0x1, 0x4, 0x751, 0x400}, {0x484, 0xfffffffb, 0x1, 0x400, 0xf0, 0x1}, {0x3, 0x1, 0xb, 0x9, 0x10, 0xd}, {0x8, 0x1, 0x2, 0x0, 0x2, 0x101}, {0xffff0000, 0x4, 0xcb, 0x80000001, 0x5, 0x3}, {0x9, 0x3, 0x8000, 0x7fff, 0x81, 0xb}, {0x8, 0x5f94, 0x9, 0x5, 0x7dec, 0x4}, {0x401, 0x4, 0x5, 0xb, 0x1ff, 0x7fffffff}, {0x7, 0xff0, 0x0, 0x7ff, 0xbe, 0x276c}, {0x3, 0xffff, 0x4c6f, 0x1, 0x7, 0x10000}, {0x58, 0x5, 0x5, 0x5, 0x6, 0xffff8001}, {0x9, 0x4, 0x5, 0xfff, 0x9, 0x98d}, {0x365, 0x9, 0xfffff000, 0xffffffff, 0x3, 0x7}, {0xfffffffa, 0xffff, 0x10000, 0x9, 0x9, 0xfffff845}, {0x1, 0x8001, 0x5, 0xe, 0x80000000, 0x8}, {0xb, 0x1, 0x6, 0x0, 0x6, 0x3}, {0x3, 0xa, 0x2, 0x1, 0x9a02, 0x6}, {0x4, 0xdd8, 0xe24, 0x1f, 0x3, 0x3}, {0x44, 0x101, 0x7ff, 0x7fff, 0x435, 0x2687}, {0x1, 0x6bde, 0xffffffff, 0xb4, 0x0, 0x8}, {0x8, 0xffffffc0, 0x17e9, 0x4, 0xfffffffa, 0x5}, {0x0, 0x90c3, 0x3, 0x6, 0x9, 0x8}, {0x7, 0x4, 0x8, 0x1, 0xdf7f, 0x6}, {0x7f, 0x6, 0x7c121ff5, 0x4, 0xffffffff, 0x4123fcbf}, {0x7f, 0x5, 0x125, 0x4, 0x9, 0x4c2}, {0xcdb1, 0x80000000, 0x9, 0x4dd, 0x0, 0x2}, {0x4f1a, 0x100, 0xffffff01, 0x3, 0x2, 0x1}, {0x14000, 0x83c3, 0x5, 0x5, 0xfffffff8, 0x1000}, {0x8, 0x81, 0x7, 0x4, 0x7, 0x7fffffff}, {0x5, 0x7fff, 0x3, 0x38a7, 0x5, 0x5}, {0xff, 0x100, 0x2, 0x0, 0xfffffffa, 0xfff}, {0x0, 0x6, 0x5, 0x6, 0x0, 0xfffffdf9}, {0x193, 0x1, 0x2, 0xfffffffc, 0xf4d5, 0x5}, {0x5, 0x6, 0x200, 0x0, 0x6, 0x5}, {0x9, 0x3, 0x0, 0x8, 0x3, 0x9}, {0x8, 0x0, 0x8, 0x10, 0x80, 0x7}, {0x7, 0x7, 0x2, 0x3, 0x5, 0x24a}, {0x0, 0x9, 0x6, 0x7, 0x1, 0x5}, {0x95, 0xf, 0x3, 0xc36, 0x1ff, 0x4}, {0x8, 0x3, 0x8, 0x18000000, 0x6, 0x7}, {0x6, 0x5f3, 0xfffffff7, 0x928, 0x4, 0x80000000}, {0x0, 0x0, 0x1, 0x6, 0x2, 0x7fff}, {0x7fffffff, 0x1, 0x0, 0x9, 0x80000001, 0x10001}, {0x5, 0x7, 0x4, 0x401, 0x3ff, 0x9}, {0x1, 0x0, 0x0, 0x8001, 0x7, 0x7f}, {0x9, 0x8, 0x0, 0x401, 0x2}, {0x5, 0x4, 0xe, 0xff, 0x0, 0x6}, {0x80000001, 0x2, 0x1aa, 0x5, 0x1, 0xff}, {0xfffffffe, 0x7, 0x6, 0x8, 0x6, 0x3}, {0x8, 0x6214, 0xa5e, 0x1000, 0x5b, 0x2}, {0xfffffa7a, 0xd536, 0x4, 0xff, 0x7, 0xa}, {0x3, 0x2, 0x5, 0x7, 0x9, 0x5}, {0x7, 0xe4, 0x8, 0x80000001, 0x7, 0x94d}, {0x8, 0x80, 0x5, 0x9, 0x7, 0x3800}, {0x9, 0x1, 0x4, 0x0, 0x8ec, 0x5}, {0x6800000, 0x200, 0x0, 0x0, 0xf, 0x3}, {0xddba, 0x1, 0xbaab, 0xffffffff, 0x8, 0xfffffffd}, {0xfff, 0x5, 0x4, 0xffff, 0x7, 0x200}, {0x2, 0x8e6b, 0x3ff, 0x5, 0x1, 0x4072}, {0x6, 0x0, 0xff, 0x2, 0x3, 0xc60c}, {0x6, 0xfffffffd, 0x5cfd, 0x6, 0x0, 0xfffffffe}, {0x9, 0x1, 0x6, 0x29, 0x9, 0xff}, {0x8, 0x9, 0x4, 0x9, 0x4a47, 0x4}, {0xf7ea, 0x4, 0x33a3, 0x2, 0x1800000, 0xfff}, {0x8, 0x9, 0xf0, 0x6, 0x4, 0x9}, {0x7, 0x1, 0x6, 0x8, 0x36, 0x1}, {0x310, 0x5, 0x3, 0xd43, 0x8000, 0x80}, {0x7f, 0x8fb6, 0x3, 0x2, 0x3, 0x5}, {0x400, 0xfffffffc, 0x8, 0x8000, 0x7ff}, {0x2, 0x8, 0x2, 0xc8, 0x2, 0x2}, {0x6, 0x2, 0x5, 0xa938, 0xffffffff, 0x2}, {0x7, 0x5, 0x7, 0x7, 0x4, 0x2}, {0x4, 0xf4, 0x6, 0xfffffffb, 0x4}, {0x1d7, 0x20c, 0x3, 0x7, 0x1000, 0x10}, {0x100, 0x7, 0x4, 0x6, 0x3, 0x3}, {0x6, 0x0, 0x1000, 0x7, 0xfffffffd, 0x3}, {0x10001, 0x4, 0x100, 0x7c15, 0x6, 0x4}, {0xd40c, 0x285, 0x9, 0xffffffff, 0x10001, 0x2}, {0xffff, 0x1, 0x10000, 0x6, 0xddb, 0x2}, {0xe, 0x9, 0x6, 0x8, 0x4, 0x977fc6e4}, {0x7fff, 0x4, 0xff, 0x8, 0x7, 0x9}, {0x8000, 0x7, 0x5, 0x80, 0x7, 0x5}, {0x10, 0x800, 0x400, 0xffff687e, 0xffffff81, 0x3}, {0x929a, 0x2, 0x5, 0xffffffff, 0x9fa, 0x3}, {0x1ff, 0xa7, 0xffffff8f, 0x9, 0xffffea15, 0x2}, {0x81, 0x1, 0x4, 0xfffffff0, 0x6, 0x8}, {0x69a, 0x94, 0x3, 0xf4f513ac, 0x4, 0x6}, {0x3, 0x3, 0x3, 0xa3, 0x4, 0x1}], [{0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0xd3860a573bc72cec}, {0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x2}, {0x4, 0x1}, {0xb07f8e8b6471996e, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x4}, {0x1}, {0x3}, {}, {0x3}, {0x2, 0x1}, {0xcd0991be939439cc, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x1}]}}]}, {0x59, 0x6, "e7d5281438a97c2c3d03aa5c6fb6de50696efd87bbb88714592d511cb447b4355199812acb9d4314d93e687a014c8916430e0bb940506b2b2bcae114bee4aecd52e23807c5eb32ab87c97de7dce2aed401ffabc74f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x148, 0x13, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x38}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0xef, 0x6, "7102836b6e6df29c69b39e4355854db875b79bc9b5f040fdad4c6855cb1d53a355e94341fd2612c52b5dadefa1a90f26e77c47c7eac1e8341f42661c0655f81bac39b16ea79e5fd524bbfdb4a2356958beb6e337b20e4905c79198bb61afd89fe5407e93df0c7657a681ef0f67c793ac8461b80d2da287a96b4b65cb6455194bb789ce513e34cb2c020f5775c0ff4222f9bd1604d623c45e827f73fed3d4b949ed6123f88462babf16d803ff482b56ab0566cd57a6a1ff3d7edb344d824f46b14ea4cc3a4325812852dbae9f4fb6faa16f0637b77a278a9661931d5cd56a5ff0121a0fe2f9fcb7b5ec34e2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_pedit={0x3c58, 0x1b, 0x0, 0x0, {{0xa}, {0x3b9c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x58, 0x5, 0x0, 0x1, [{0x4}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xef8, 0x4, {{{0x4, 0x8, 0x10000000, 0x0, 0x5}, 0x5, 0xfa, [{0x6, 0x4, 0x1, 0x0, 0x2, 0x9}, {0xbf8, 0x4, 0x4, 0x0, 0x1, 0x2}, {0x3, 0x0, 0xffff, 0xfff, 0x6, 0x80000000}, {0x2, 0x0, 0x1, 0x2, 0x9, 0x9}, {0x200, 0x9e00000, 0x4e4b3cfd, 0x5, 0x401, 0x7}, {0x2, 0xfc, 0xbf3, 0x7ff, 0x7}, {0x1, 0x8001, 0xd, 0x401, 0xd3b3, 0x5}, {0xa3, 0xfffffffb, 0x2, 0x1, 0xdc, 0xf}, {0xffff99aa, 0x0, 0x2, 0x3, 0x1, 0xff}]}, [{0x10001, 0x0, 0xffffffff, 0x8, 0x855, 0x2}, {0x6, 0x0, 0x6, 0x2, 0xdd4b, 0x61}, {0x3ff, 0x7, 0x2, 0x3de, 0x0, 0xb5}, {0xfffffffa, 0x2, 0xc, 0x6, 0x1, 0x7}, {0x6, 0x9, 0xa5f5, 0x5, 0x1, 0x3}, {0x8000000, 0x7fffffff, 0xfffff000, 0x3, 0x8, 0x4}, {0x80, 0x4, 0x4, 0x1, 0x101, 0x4}, {0x6a40, 0x8000, 0x0, 0x7f, 0x7, 0x4}, {0x3, 0x5, 0xe2, 0x8, 0x81b, 0x3}, {0x3, 0x48, 0x8, 0xffff0001, 0x4, 0xc80f}, {0x10001, 0x7, 0xaf9, 0xffff, 0x7, 0x81}, {0x7, 0x3, 0x0, 0x0, 0x1ff}, {0x7, 0xfffffb05, 0x100, 0x9, 0x0, 0x4}, {0x6, 0x7, 0x7, 0xb, 0x2, 0x3}, {0x1, 0x6f30, 0x8, 0x3, 0x1ff, 0x8000}, {0x8, 0x8000, 0x9, 0x2, 0xfff, 0x7}, {0x10, 0x916, 0x2, 0x3, 0xd, 0x1}, {0x1, 0x3780, 0x0, 0x5a730dd0, 0xffffff01, 0xc}, {0x9, 0x3, 0x3ff, 0x80000001, 0x1000, 0xffffff81}, {0xab15, 0xffffffff, 0x9, 0x3, 0x80000001, 0x1}, {0x0, 0x0, 0x1, 0x81, 0xffffffff, 0xb}, {0x4, 0x6, 0x4, 0x4, 0x81, 0xa}, {0x7, 0x80000001, 0x8, 0x69, 0x1}, {0x0, 0x1000, 0x0, 0x1000, 0x9, 0x2}, {0x4, 0x4, 0x9, 0xfffffffb, 0x4, 0x6}, {0x4, 0x5, 0x6, 0xf2, 0x1, 0x3}, {0x8001, 0x5, 0x7, 0x9, 0x4, 0xfffffffc}, {0x7, 0x3, 0x10001, 0x2, 0x25e7, 0xffff0001}, {0x5, 0x3ff, 0x75f11569, 0x4, 0x8, 0xfffffff9}, {0x1, 0x5, 0x6, 0x9, 0x5, 0x2e4a}, {0x5, 0x7ff, 0x4, 0x1, 0xff, 0x200}, {0x9, 0x7, 0x6, 0x200, 0x7, 0x80000001}, {0x100, 0x8, 0x2, 0x2, 0x2, 0x4}, {0x80000000, 0xfffffff7, 0x1, 0x3, 0x1ff, 0xb3}, {0x9c, 0xffff5ec0, 0x40, 0xc53, 0x1, 0x5}, {0xe, 0x3, 0x1, 0x48000, 0x7, 0x7}, {0x8, 0xffffffff, 0xe755, 0x9, 0x9, 0x63c}, {0x3, 0x5, 0xfffffffe, 0x2, 0x5, 0x7}, {0x10001, 0x1, 0x9, 0x1ff, 0x0, 0x401}, {0x1400000, 0x1, 0x5, 0x7fff, 0x2, 0xc}, {0x0, 0x4, 0xd3, 0xdf22, 0x8, 0x4}, {0x1, 0x6, 0x4, 0x3, 0x1, 0x19d9}, {0x10000, 0xe, 0x6, 0x9, 0xffff8001, 0x401}, {0x1a, 0x81, 0x5, 0x2, 0x4, 0x9}, {0x6, 0xb0, 0x2, 0xfffffb09, 0xff, 0x9}, {0x0, 0x1, 0x3, 0xb33d, 0x4, 0xfffffffd}, {0x8, 0x3, 0x10, 0x80000000, 0x100, 0xfe00}, {0x9, 0x5, 0x401, 0x5, 0x1, 0xfffffff9}, {0x4, 0x3, 0x7, 0xcdd1, 0xff, 0x1}, {0x7fffffff, 0x8, 0xffffffff, 0x8, 0x1, 0x5}, {0x3, 0x8f8, 0x1, 0x1000, 0x40, 0x45}, {0xff, 0x5, 0x10001, 0x81, 0x6, 0xfff}, {0xb81, 0x28000, 0x9, 0x804b, 0x8, 0x3107}, {0x9, 0x5, 0x6, 0x10, 0x5, 0x464e9c08}, {0x7ff, 0x63, 0xb, 0x7, 0x6}, {0x9, 0xfffffffb, 0x7, 0x6603, 0x80000000, 0x7}, {0x3, 0x9, 0x1, 0x3, 0x9, 0x7fffffff}, {0x1, 0xff, 0x16182f44, 0x285f, 0x0, 0x8}, {0xd6, 0x1fd2, 0x7, 0xfe09, 0x3, 0x9}, {0x0, 0x0, 0x9, 0x8, 0x9e5c, 0x9}, {0x7, 0xa0000000, 0x1, 0x7, 0x7ff, 0x40}, {0xfffffffc, 0x3, 0x1000, 0x10001, 0x8001, 0xffff}, {0xd6, 0x5, 0x8000, 0xfffffffd, 0x5, 0xba8}, {0xb, 0x2, 0x9, 0x9, 0x7ff, 0x4}, {0x4, 0x7, 0x1, 0x8, 0x1ff, 0x2}, {0x1, 0x7f, 0x9, 0x8f, 0x9, 0x7}, {0x3, 0x8, 0x9d08, 0xcb, 0x5}, {0xe3, 0xffff, 0x0, 0x0, 0x2, 0x81}, {0xffff, 0x6, 0x207, 0x6, 0x4, 0x4}, {0x0, 0x3, 0x10001, 0x1, 0x1, 0x1}, {0x40000000, 0x9, 0x40, 0x2, 0x2, 0x8}, {0x187, 0x2, 0x400, 0x200, 0x300, 0x9}, {0xb834, 0x9, 0xfffff300, 0x1, 0x1, 0x5}, {0x1, 0x8, 0xc, 0x1, 0xffff, 0x3}, {0xa0, 0x4, 0x8, 0x1ff, 0x0, 0x1}, {0x8, 0x3, 0x2, 0x8a, 0x1ff, 0xf}, {0x87, 0xb3, 0x10000, 0x9, 0x1}, {0x2, 0x4, 0xa99, 0xd14, 0x1, 0x1}, {0x8, 0x7, 0x7ff, 0x7, 0x406, 0x80}, {0x7, 0xfffffe82, 0x4, 0x4, 0x8, 0x180}, {0x80, 0x7f, 0x3, 0x1, 0x9, 0x5}, {0xe1, 0x8000, 0x0, 0x0, 0x1, 0x4}, {0x3, 0x1, 0x6, 0x5, 0x88a, 0x80}, {0xf, 0x9, 0x9, 0x5, 0x9, 0x72b}, {0x9, 0x1, 0x6, 0x9, 0xd92, 0x7}, {0x5, 0x10000, 0x1000, 0x4, 0xf, 0x5a2d}, {0x653691a3, 0x80000001, 0x8001, 0x0, 0xc, 0x9}, {0x4, 0x7, 0x80000001, 0xff}, {0xb, 0x81, 0x2, 0xc95, 0x6, 0x8001}, {0xfffffffd, 0x25, 0x4, 0x7fffffff, 0x7, 0xf4}, {0xd, 0x8, 0x5, 0x7, 0x3, 0x3}, {0x2, 0x0, 0x2a21, 0x1, 0x4, 0x7ff}, {0x4, 0x5d, 0x8, 0x2, 0xf, 0x8}, {0x40, 0xffff8001, 0x6, 0x4, 0x7, 0xeec}, {0xc3, 0x81, 0x3, 0x9, 0x5, 0x9}, {0xff, 0x53b, 0x4f1, 0x5, 0x7d55, 0x8}, {0x1, 0x1, 0x3d, 0x8, 0x4, 0xb7}, {0x9, 0x1, 0xffffffff, 0x7, 0x0, 0x3a}, {0xffff, 0xd, 0x8, 0x3, 0x5, 0x2}, {0xa8, 0xf4b5, 0x5, 0xed, 0x4, 0x8}, {0x6, 0x3000000, 0xe8, 0x4, 0x1, 0x4}, {0x5, 0x59, 0x5, 0x4, 0xfffffff9}, {0x1, 0x4, 0x1, 0x7179, 0x2db, 0x6}, {0x5, 0x2, 0x0, 0x9ab, 0x6, 0x6}, {0x9, 0x8, 0x83e, 0xfff, 0x7, 0xfffffffe}, {0xffffffff, 0x8, 0xffff, 0x5, 0x8001, 0x10}, {0x7, 0x1, 0x100, 0x5, 0x8, 0x5}, {0x9, 0xe08, 0x99, 0x8, 0xe8db, 0x9}, {0x3, 0x3, 0xa, 0x0, 0x8, 0x1}, {0x7, 0x1, 0x9, 0x9, 0x9, 0x5}, {0x2, 0x80000001, 0x1334, 0x4, 0x5, 0xf61}, {0xfffffffe, 0x2, 0x2, 0x8001, 0x6, 0x6}, {0x4, 0x8, 0x0, 0x6, 0x10001, 0xa2e8}, {0x1, 0xa0, 0x7da, 0xfffff3a0, 0xfffffff8, 0x5}, {0xd, 0x2, 0x9, 0xd0, 0x0, 0x27}, {0x8, 0x2, 0x7f, 0x3, 0x4, 0x75}, {0x3, 0x9, 0x5, 0x6, 0x401, 0xfffffff3}, {0x8, 0x3a7, 0x10001, 0x81, 0x10, 0x8}, {0x5, 0x3, 0x4, 0x7fff, 0x8, 0x80000001}, {0x35, 0x7, 0x1, 0x4, 0x8001, 0x8}, {0x9, 0x9, 0xea, 0xc, 0x5, 0xedd}, {0x7, 0x2, 0x100, 0x2a6, 0x5, 0xffffff81}, {0x6, 0x1, 0x80000000, 0x2, 0x4, 0x3}, {0x3, 0x0, 0xbc92, 0xc8, 0x2, 0x57}, {0x81d, 0x81, 0xd, 0xb7b0, 0x8000, 0x10}, {0x0, 0xfffffc01, 0x101, 0x8001, 0x93, 0x8}, {0x7, 0x2, 0x6, 0x6, 0x0, 0x9}, {0xb9, 0x91, 0x8, 0x0, 0x4}], [{0x5}, {0x1}, {0xc, 0x1}, {0x5}, {0x6, 0x2}, {}, {0x2, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x3}, {0x4}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x5}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x2}, {0x2}, {}, {0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x4, 0x2}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x65e76c2d30c7a2fb}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x5}, {0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x4, 0x2}, {0xd}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x1}, {}, {0x2, 0x1}, {0x5}, {}, {0x5}, {}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x2}, {0x5}, {0x2}, {0x3, 0x1}, {0x3}, {0x3}, {0x4}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x3, 0xbb723d0a8a7b5bc4}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}]}}, @TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x9, 0x3, 0x30000001, 0x5, 0x5}, 0x1, 0xf, [{0x7, 0x1def8d88, 0xffffffff, 0x7, 0x9, 0xed9}, {0x8, 0xff, 0x2, 0x4c, 0x2, 0x7}, {0x400, 0xe263, 0x7ff, 0x5, 0x3, 0x7fffffff}, {0x0, 0x3, 0xced, 0x81, 0x7fff, 0xd}]}, [{0x80000000, 0x8, 0x6, 0x8, 0x9b8e, 0x3}, {0x4c92, 0x80d, 0x3, 0x0, 0xfffffff0, 0x2}, {0x38f, 0x200, 0x1, 0x5, 0xfffffffd, 0x6}, {0x94f, 0x5, 0xc, 0x7, 0x400, 0x6}, {0x0, 0x3, 0x1, 0x2, 0x2593, 0xffff7fff}, {0x80000000, 0x10, 0xa9a7, 0xdf, 0x3}, {0x78f, 0x1ff, 0x5, 0x6, 0x9, 0x5}, {0x6, 0x1, 0x7, 0x8, 0x8, 0x1}, {0x4, 0x7fffffff, 0x2, 0x9}, {0xdac, 0x401, 0x7, 0x7, 0x1c000, 0x2}, {0x8, 0x0, 0xffffffff, 0x9, 0x6, 0xad0}, {0x3, 0x800, 0x2, 0xf0, 0x796d, 0x2}, {0x3, 0x417b, 0x100, 0x4, 0x3, 0x1}, {0x9, 0x0, 0x7, 0xd, 0x3, 0xc}, {0x7ff, 0x1, 0xa, 0xb, 0xaabd, 0x8}, {0x9, 0xffffffff, 0x6, 0xfffeffff, 0x5, 0x7fff}, {0x0, 0x2, 0x100, 0x4c, 0x9}, {0xc2, 0x5, 0x7ff, 0xea, 0x8001, 0x9}, {0x1, 0xba00000, 0x5, 0xe, 0x5, 0x5}, {0x1, 0x6, 0x2, 0x9, 0x7, 0x9}, {0x9, 0x100, 0x7, 0x2, 0x9, 0xffffffff}, {0x918e, 0x8, 0x0, 0x5, 0x7, 0x8}, {0x4a0, 0x9, 0x8000, 0xfb8, 0x4c, 0xd}, {0x200, 0x5, 0x8, 0x4f, 0x5, 0x8}, {0x5, 0xd1, 0x5, 0x8, 0x2, 0x1}, {0xffff, 0x17d3, 0x6, 0x3, 0x1, 0x1456}, {0x7, 0x1, 0x6, 0x3, 0x1, 0x9}, {0x6, 0x80, 0xbb6, 0x4, 0x9, 0x8}, {0x10, 0x4bc, 0x808f6bd, 0x3, 0x7, 0x80000000}, {0xc, 0xfffffff8, 0x3, 0xffffff9b, 0x2, 0x1}, {0xfff, 0x6, 0x8, 0x4, 0x80, 0x40}, {0x8, 0x200, 0xf8, 0x8, 0x10000, 0x7fffffff}, {0x10000, 0x808, 0x0, 0x0, 0x80000000, 0x9}, {0x6, 0x6, 0x8, 0x2, 0x8, 0x6}, {0x39c6, 0x6, 0x9, 0x9, 0x101, 0x100}, {0x7, 0x7f, 0x2, 0x9, 0xd, 0xc}, {0xc9, 0x7, 0x8, 0x2, 0x8, 0x5}, {0x8001, 0x9, 0xfffffffd, 0x1000, 0x88, 0xffffffff}, {0x400, 0xa, 0x3, 0x6, 0x7, 0x7fffffff}, {0x7, 0x8, 0x1, 0x3101, 0x4}, {0x100, 0x9, 0xaaa8, 0x3ff, 0xfffffff9, 0x80}, {0x8, 0x9, 0x80000001, 0xfffffffd, 0xbe, 0x4}, {0x8, 0x0, 0x8, 0x5, 0x7fff, 0x888}, {0x8bec, 0x1, 0x164, 0x80000001, 0x9}, {0x5, 0x0, 0x8, 0x32, 0xa3, 0x3}, {0x80000000, 0x0, 0x7f, 0x8001, 0x1000, 0x28000}, {0x2, 0x7, 0x6, 0x8ed, 0xa5f, 0x7fffffff}, {0x400, 0x3019, 0x3, 0x2, 0x10, 0xffffffff}, {0x3, 0xffffffff, 0x4, 0x10, 0x5, 0x9}, {0x6c, 0x7, 0xffffff0d, 0x0, 0x5, 0x3}, {0x2, 0x61a9b2e7, 0xcab5, 0x4, 0xfff, 0x80000000}, {0xff, 0x1, 0xf3, 0x6, 0x7, 0x9}, {0x1d, 0x7, 0x8, 0x868, 0x8000, 0xff}, {0x1, 0x2, 0x1c44fc6, 0x5, 0x5, 0x3}, {0xd, 0x2, 0x1, 0x7, 0x0, 0x1}, {0x5, 0x5, 0x1bbf, 0x4, 0x1, 0x6}, {0x9, 0xfff, 0xb4, 0x1, 0x6, 0x9}, {0xc0, 0x5, 0x1, 0x46ef, 0x1863, 0x7}, {0x5, 0x0, 0x6, 0x3, 0x200, 0x200}, {0x9, 0x6, 0x7fffffff, 0x5, 0x6, 0x2}, {0x4, 0x0, 0x20000000, 0x400, 0x2, 0xf}, {0xffffff00, 0x7, 0xae0, 0x2, 0x6, 0x5}, {0xff, 0xc, 0xb, 0x3, 0x8001}, {0x1, 0x1, 0x5, 0x7, 0x40, 0x6}, {0x1, 0x80000001, 0x2, 0x6, 0x10000, 0x7fff}, {0x0, 0xfff, 0x2, 0x10, 0x5, 0xffff}, {0x4, 0xffff, 0x1, 0x7, 0x400}, {0xffff8000, 0x8, 0x4, 0xf9, 0x101, 0x4}, {0xe99, 0xfff, 0x7, 0x101, 0x2, 0x9}, {0x3, 0x4, 0x8, 0x9, 0x4}, {0x800, 0xfffffffa, 0x7, 0x8b0, 0xffff, 0x1}, {0x2, 0x7f, 0x2, 0x401, 0x800, 0x8}, {0x7, 0xd52e9b69, 0x3, 0xfffffe01, 0x7, 0x10}, {0x78, 0x1, 0x2, 0xfffffff5, 0x5, 0x10001}, {0x8, 0x7ff, 0x80000001, 0xffff91e1, 0x2, 0xfff}, {0x1, 0x1000, 0xe952335, 0x7ff, 0x7, 0x2}, {0xf, 0x0, 0x2, 0x0, 0x7, 0x100}, {0x6, 0x7, 0x3, 0x12d, 0x9, 0x2c}, {0x8, 0x3, 0x3d66, 0xd, 0x8, 0x6}, {0x1, 0x0, 0xf1c7, 0x6, 0x7f, 0x800}, {0x1, 0xfe0000, 0xfff, 0xc, 0x800, 0xa583}, {0x8001, 0xc, 0xd217, 0x10001, 0x10, 0x4}, {0x10000, 0x2, 0x10001, 0x2, 0x5, 0x3c}, {0x63, 0x3, 0x7, 0x5, 0x8, 0x6}, {0x3, 0x5, 0x8001, 0x3, 0x3ff, 0xf0}, {0x2, 0x7f, 0x8, 0x8, 0x6b, 0x9}, {0xffffffff, 0x8, 0xf, 0x9, 0x8001, 0x494}, {0x6, 0x8, 0x6, 0xe9, 0x1, 0xea}, {0x3, 0x5, 0xc, 0xbc, 0x9, 0xff}, {0x81, 0x1ecc, 0xd64f, 0x4, 0x8, 0x2}, {0x9, 0x800, 0x7, 0x2, 0x0, 0xffffff81}, {0x7, 0x7fff, 0x63c4, 0x7, 0x8, 0x101}, {0x9, 0x39, 0x67b, 0x4, 0x5, 0x3}, {0x1, 0xffffffff, 0xff, 0x87ef, 0x7, 0xfffffffa}, {0x8, 0x9, 0x2e0, 0x8, 0xc, 0x6}, {0x2, 0xfffffff8, 0x3, 0x6, 0x10001, 0x6}, {0xff, 0x9, 0x6, 0x8001, 0xffffffff, 0x5}, {0x5, 0x8001, 0x0, 0x9, 0x1, 0x9}, {0xfffffffe, 0x7fffffff, 0x7, 0x5, 0x6, 0x6}, {0x800, 0x5, 0x2, 0x100, 0x10, 0x28}, {0x65, 0x7, 0x9, 0x1, 0x40, 0x8}, {0x599, 0x3, 0x4, 0x7ff, 0x200, 0x6}, {0x401, 0x3, 0xd78f, 0xc, 0x6, 0x4}, {0x81, 0x8, 0x5, 0xa7f4, 0x10, 0x2230}, {0x6, 0xee, 0xa7, 0x2, 0x10000, 0xfffffcd0}, {0x60, 0x0, 0x1000, 0xfffffff9, 0x1, 0x3}, {0x11e, 0x1, 0x80000000, 0xeee, 0xffffffff, 0x8}, {0x6, 0x7, 0x6, 0x1ff, 0x6, 0x10}, {0x4, 0xfffffffe, 0x5, 0x40ad, 0x1000, 0x7}, {0xff, 0x6, 0xfffffffb, 0x5, 0x80, 0x4}, {0x3, 0xd3e, 0x2, 0x3, 0x7fffffff, 0xb}, {0x8, 0x1, 0x4, 0x8001, 0x7, 0x1}, {0x4, 0xfffffff9, 0x81, 0x3, 0xe, 0x9}, {0x7, 0x200, 0x2, 0x2689, 0x9, 0xc9}, {0x1, 0x1000, 0x4, 0x8001, 0x10, 0xd}, {0x4, 0x9, 0xa4, 0x10000, 0xf0, 0x800}, {0x8, 0x80000001, 0xc29a, 0x401, 0x401, 0xfffffc00}, {0xd, 0x1, 0x2, 0x9, 0x1ff, 0xb}, {0x2, 0xcc94, 0x9, 0x92400000, 0x2, 0x7}, {0x5e8, 0x40, 0x68ba, 0x0, 0x4, 0xfffffff9}, {0x8, 0x36, 0x9, 0x6, 0x3a2, 0x9}, {0x10, 0x0, 0x1, 0x101, 0x2, 0x3}, {0x2, 0x5, 0xf, 0x8001, 0x200, 0x5}, {0x6, 0x80000000, 0x7, 0x401, 0xfff00000, 0x6}, {0x8001, 0x200, 0x200, 0x0, 0x5, 0x9}, {0x8000, 0x6, 0xffffffff, 0x2, 0x100, 0x6}, {0x0, 0x101, 0xfe, 0x3, 0x401, 0x8}, {0x5, 0x6, 0x3c, 0xfffffffe, 0x2, 0x2}], [{0x2, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {}, {}, {0x9564360669228068}, {0x4, 0x1}, {0x5}, {0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {}, {}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x7}, {0x3}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x5}, {0x5}, {0x4}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x4}, {}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x6, 0x1}, {0x5}, {0x5}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x3, 0x8, 0x10000000, 0x7f}, 0x91, 0x8, [{0xd4, 0x2, 0x7, 0x0, 0x3b6, 0x9}, {0x4, 0xffffff81, 0xfffffffe, 0x9, 0xc2a, 0x1}, {0x10001, 0x3, 0x9d, 0xffffffff, 0x5, 0xfe63}, {0x1, 0x1, 0x1000, 0x8, 0x8, 0x3}, {0x9, 0x4, 0x3, 0x7, 0x8001, 0x4}, {0x7, 0x6, 0x4, 0x3, 0x5, 0x1}, {0x87a7, 0x35b, 0x4, 0x7, 0x1, 0x4}]}, [{0x5, 0x80000001, 0xfff, 0x924, 0x36eb, 0x50d9}, {0x4de6b9de, 0x2, 0x400000, 0x8a, 0x1000, 0x8}, {0x5, 0x7ff, 0x9, 0x6, 0x6}, {0x400, 0x200, 0x9, 0x2a, 0xfff, 0x1}, {0x6, 0x40, 0x9, 0x1, 0x7, 0xbd}, {0x2, 0x0, 0xfff, 0x9469, 0x80, 0x1}, {0x9, 0x5, 0x1, 0xffffff9d, 0x101, 0xa3e5}, {0xf, 0x5, 0x10, 0xd, 0x8000, 0x4}, {0xa, 0xe2e, 0x4, 0x8, 0x3, 0x400}, {0x7fff, 0x5, 0x10001, 0x9, 0x80000001, 0x2}, {0x9, 0x4, 0x8, 0xd46, 0x6, 0x1}, {0x5, 0x18000, 0x401, 0x3, 0xd502, 0x9}, {0x1ff, 0x75, 0x1, 0x1, 0x8, 0x3}, {0x206, 0x0, 0x9, 0x7fffffff, 0x100, 0x3}, {0x7f, 0xb7, 0x6, 0x800, 0x9, 0xfffffff9}, {0x300, 0x1, 0x9, 0x7f, 0x8001, 0xbdb1}, {0x6, 0x6, 0x7, 0x6d, 0xd2, 0x80000001}, {0x9, 0x1, 0x0, 0x5, 0x6000, 0x3}, {0x8, 0xfffffc00, 0x4, 0x95, 0x7ff, 0x40}, {0x4, 0x7, 0x3, 0x6, 0x273, 0xfffffffd}, {0x1, 0xba, 0x4, 0x8, 0x3, 0x400f}, {0x140, 0xf, 0x0, 0x4543, 0x9, 0x1}, {0x9a1f, 0x7, 0x6, 0x1, 0xc8, 0x5}, {0x9, 0x1, 0x9, 0x3, 0x40, 0x7}, {0x81, 0x1, 0x3, 0x4, 0x800, 0x2e}, {0x40, 0x90e1, 0x7, 0x9d9, 0x0, 0x4}, {0xf, 0x4, 0x7ff, 0x6, 0x0, 0x7}, {0x6, 0x2, 0xe8bc, 0xc46a, 0x8, 0x2}, {0x5, 0x8, 0x3, 0x7, 0x6db7, 0x9}, {0xfffffff9, 0xa4, 0xfffffffc, 0x7f, 0x2, 0x1}, {0x40, 0x3, 0x7f, 0xc, 0x3, 0x7}, {0x4, 0x5, 0xea, 0x7ff, 0x7, 0x8}, {0x2, 0x1, 0x400, 0x81, 0x6, 0xfffffff7}, {0x40000, 0xb9a6, 0x9, 0x4, 0x1, 0x74}, {0x6, 0x1, 0x1cd9, 0x0, 0x3, 0x8}, {0x8, 0xfffffffd, 0x9, 0x4d43039b, 0x9, 0x5}, {0xb3, 0x7, 0xff, 0x7, 0x2, 0x9}, {0x200, 0xffff, 0x9, 0xf, 0x7f}, {0x0, 0x1, 0x5, 0x3, 0x31f, 0x9}, {0x9, 0x5, 0x5, 0x9, 0x8, 0xf869}, {0x7ff, 0x7, 0x5b, 0xb6, 0x10001, 0x62a1}, {0x7f, 0x7fffffff, 0x9a, 0x4d, 0xffff4f97, 0x9}, {0x1, 0x100, 0x3, 0x9, 0xf18, 0x7}, {0x2, 0x9, 0x1, 0xfffffffa, 0x81, 0x9aac}, {0x9, 0xfffffff9, 0x2, 0x7ff, 0x40, 0xe6}, {0x1, 0x4000, 0x200, 0x8, 0x198039f4, 0xfffffff8}, {0x28c, 0xff, 0x8, 0x0, 0x2, 0x6}, {0x0, 0x200, 0xff32, 0x81, 0xad5, 0x8}, {0x2, 0x3, 0xfffffff9, 0x0, 0x100, 0x1}, {0xfffffff9, 0xa, 0x6, 0x1, 0x1bc, 0x2}, {0x3, 0xbaa, 0xd, 0x3ff, 0x80, 0x10}, {0x0, 0x7fffffff, 0x3, 0x7ff, 0x20000000, 0x1}, {0x76e, 0x5, 0x8, 0x10, 0xfffffffa, 0x5}, {0xfffffffe, 0xfffffffb, 0x8, 0xce1, 0x5b71, 0x2}, {0x45fb, 0x38, 0x3, 0x1, 0x68, 0x5}, {0xc7a, 0xa, 0x40, 0x1, 0x9, 0x4}, {0xeccf, 0x5, 0x0, 0x8, 0x0, 0x11b8e9cb}, {0x9, 0x5, 0x2, 0x7fff, 0x7, 0x4}, {0xa, 0xffffffff, 0x1, 0x10, 0x2, 0x2}, {0xf2f, 0x8, 0xfffffffc, 0x40, 0x2, 0x2}, {0x7, 0x4dae, 0x0, 0x1, 0x2, 0x5}, {0x4, 0x1, 0x5, 0xfffffffa, 0xfffffffc, 0xd2b}, {0x7, 0x10001, 0x4, 0x9, 0xf45b, 0xfffffff6}, {0x1, 0x571, 0x0, 0x9, 0x2, 0x3fb}, {0x4, 0x7, 0xd, 0xe, 0x4, 0x1}, {0xfff, 0x0, 0x2, 0xc, 0xffffffff, 0xfa65}, {0x0, 0xffffffbf, 0xd7a2, 0x10001, 0x10000, 0x8e1}, {0xacc, 0x1, 0x2fb656b6, 0x3fa, 0x9, 0x59}, {0x400, 0x5, 0x2e, 0x40, 0x8001, 0x2b40}, {0x5, 0x9, 0x6, 0x1000, 0xd97d, 0x6}, {0x1, 0x3, 0x3c5, 0x8, 0xd, 0x1ff}, {0xc, 0x7, 0x800, 0x34a, 0x1961c6b5, 0xffff}, {0xb96, 0x2000000, 0x1, 0xfffffff9, 0x800, 0xfffffffb}, {0x8a7, 0x10001, 0x4, 0x3, 0x8, 0xb}, {0x2, 0x9, 0x8001, 0x1, 0x6a8f, 0x5b0}, {0x1, 0xa34, 0xfffffffd, 0x4, 0x5, 0x10}, {0x791, 0x8000, 0x6, 0x4, 0xca, 0x82}, {0x830c, 0x8000, 0x1, 0x2, 0x401, 0x9}, {0x0, 0x4, 0x7fffffff, 0x2e84, 0x99, 0xc}, {0x226, 0x0, 0x10000, 0x7, 0x8, 0x7fff}, {0xf, 0x354e, 0x3, 0x8, 0xede1, 0x1000}, {0x10000, 0x5, 0x44d1e5d4, 0x0, 0x5ff, 0x9e}, {0x8, 0x5, 0x3, 0x5adfe33c, 0x6, 0x1}, {0x80000001, 0x0, 0xb, 0x1, 0x5, 0x3}, {0x0, 0x8, 0x2, 0x7, 0x4, 0x26}, {0x5, 0x5, 0xa, 0x437, 0x7, 0xffff8000}, {0x9, 0x8, 0x80, 0xfffffffc, 0xfffffffe, 0xb25}, {0x6, 0x0, 0x3, 0x7, 0x8, 0xfffff855}, {0x6, 0x0, 0x10001, 0xe, 0x8001, 0x3}, {0x6, 0x10000, 0x2, 0x8, 0x0, 0x724}, {0x9, 0xd96e, 0x8, 0x73834a29, 0x7, 0xc5}, {0x6, 0x0, 0x8, 0x6, 0x40, 0x2}, {0x7fffffff, 0x810, 0x8, 0x6, 0x7f, 0x27d}, {0x7fff, 0x9, 0x6, 0x3, 0x8, 0x3e}, {0x40, 0x1, 0x4, 0x5, 0xea2f9680, 0x3}, {0x5, 0x8, 0x80, 0x80000000, 0x8, 0x1}, {0xdc, 0x6, 0x4, 0x2, 0xff9, 0x6}, {0x3, 0x7fffffff, 0x4, 0x0, 0x100, 0x7ff}, {0x7, 0x3, 0x623, 0x7fff, 0x8, 0x1000}, {0x0, 0x5, 0x1, 0x8, 0x8, 0x80000001}, {0x5, 0x800, 0x6, 0x101, 0x4}, {0xffffff7e, 0xffff, 0x4, 0x4, 0x0, 0x4}, {0x6, 0xc7f, 0xfffff168, 0x3, 0x2, 0x4fe}, {0xffff7fff, 0x3, 0x5, 0x981e, 0xb, 0x704}, {0x0, 0x81, 0x80000001, 0xd9, 0xfffffff1, 0xffffff81}, {0x0, 0x1, 0xab0, 0xa, 0x1, 0x9}, {0x80, 0x0, 0x9cb, 0x10, 0x55a40c04, 0x6}, {0x4, 0x45, 0xfffffffa, 0x7fffffff, 0xfffffff9, 0x7}, {0xb, 0x0, 0x1, 0x1, 0x3, 0x3}, {0xc2a, 0x5, 0x4, 0x6, 0x200000, 0x3}, {0x0, 0xfffffffc, 0x400, 0x7fffffff, 0x3, 0x5}, {0x6, 0x4b, 0x9, 0x8, 0x4, 0x401}, {0x6, 0x8000, 0x80000001, 0x0, 0x3, 0x8}, {0xfffff001, 0x0, 0xffff764c, 0x8, 0x200, 0x6}, {0x1, 0x5, 0xb, 0x6, 0x5, 0x4f15}, {0x3000, 0xb134, 0xfffffc00, 0xce, 0x81, 0x5b35a010}, {0x2, 0xfffffffe, 0x6, 0x4, 0x9, 0xcb5}, {0x0, 0x0, 0x100, 0x5, 0x1, 0x3}, {0x401, 0xfd61, 0xffff, 0xbc, 0x101, 0xb9d5}, {0x0, 0x1, 0x1, 0x4, 0x3, 0x91}, {0x6, 0xff28, 0x101, 0xd83, 0x3, 0x3}, {0x10, 0x200, 0xffffa32b, 0x964c, 0x6, 0x7fffffff}, {0x4, 0x7f80, 0x80000001, 0x1, 0x1, 0x9}, {0x9, 0x5, 0x8000, 0x1, 0x401, 0x8}, {0x0, 0x6, 0x4, 0x992, 0x9, 0x6}, {0x0, 0x5, 0xfc, 0x6, 0x19f, 0xa18}, {0x8, 0x0, 0x6, 0xfffffff8, 0x80, 0x4}, {0xffff0001, 0x3ff, 0x79b6ccc5, 0x3ff, 0x6, 0x4}], [{0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x9c4fde07487ae923, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x6, 0x1}, {0x4}, {0x3}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x3}, {0x4}, {0x4}, {0x2, 0x1}, {0x5}, {0x4, 0x2}, {0x4, 0x1}, {0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {0x3}, {0x4}, {0x0, 0xd179cb6d638cb358}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0xe, 0xf4764886b0106794}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x3}, {0x3}, {}, {0x2}, {0x6}, {0x3}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x7}, {0x3}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2}, {0x6}, {0x2}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x3}, {0x3}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0xb0, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0xfffffff8, 0x40, 0x7, 0x9e, 0x8}, 0x7f, 0xb7, [{0x80, 0x1ff, 0x5, 0x8, 0x1061, 0xfffffe01}, {0x2, 0x86d, 0x1, 0x2, 0x80000001, 0x8}]}, [{0x3, 0x9, 0x9, 0xfffffffc, 0x3, 0x8}, {0x3ff, 0x8, 0xffffffff, 0x80000000, 0x6, 0x80000001}, {0x0, 0xad, 0x3, 0x6b, 0xc065, 0x800}, {0x6, 0x1, 0x6, 0x2, 0x5, 0x7}, {0x7, 0x81, 0x10001, 0x0, 0x8, 0x10}, {0xffffffff, 0x8, 0x8, 0x1, 0x3, 0x10}, {0x0, 0x6, 0xf, 0x7fff, 0x1, 0x3}, {0x400, 0xffffffff, 0xd, 0x59ef, 0x45e, 0x80000001}, {0x0, 0xfffffff9, 0x41d, 0x80000000, 0x3ff, 0x10001}, {0x82e, 0x100, 0xffffffff, 0x1800000, 0x8, 0x9}, {0x3, 0x23, 0x2, 0xf586, 0xcee6, 0xb58f}, {0x0, 0xfff, 0x2, 0x1, 0x9, 0x80000000}, {0x8001, 0x4, 0x2, 0x5, 0x1, 0x6}, {0x6, 0x1, 0x2, 0x9, 0x85, 0x4}, {0x3ff, 0x400, 0x7fffffff, 0x80, 0x9, 0x6}, {0x1, 0x100, 0x4, 0x2, 0x4, 0x1}, {0x3, 0x3, 0x1ff, 0x0, 0xa, 0x40}, {0x800, 0x80000000, 0x63, 0x5, 0x4, 0xac0d}, {0x4, 0x8, 0xd, 0x8, 0x7, 0x7}, {0x8, 0x4e3, 0x1, 0x3, 0x380, 0x9}, {0x7ff, 0xaa35, 0x4, 0xffffffff, 0x100, 0x9}, {0x7ff, 0x6, 0xee8533, 0x2, 0x0, 0xad}, {0x0, 0x7, 0x5, 0x4585c941, 0x9}, {0x3ff, 0x5, 0x0, 0x14000000, 0x0, 0x8}, {0x9, 0x200, 0x40, 0xe8, 0x7, 0x101}, {0x70, 0x7a7, 0x7, 0x8, 0x1d, 0x4}, {0x6657, 0x2de, 0x4, 0x7, 0x5, 0x3}, {0x2, 0x9, 0x0, 0x80000001, 0x1, 0x2}, {0x5, 0x14, 0x7, 0x55f4, 0x401, 0xd14}, {0xaa, 0x8, 0x8, 0x0, 0x401, 0x7f}, {0x3, 0x9, 0x4, 0x9, 0x40, 0x1}, {0x7, 0x8a05, 0xe62b, 0x5, 0xffffffc0, 0x4ee}, {0x2, 0xffffffff, 0x8001, 0x5, 0x1, 0x2}, {0x3, 0x76d, 0x4, 0x3, 0x3, 0x6}, {0x4, 0xff, 0x1, 0x9, 0x1000, 0x1}, {0x1, 0x9eef, 0x1, 0x8001, 0x80000000, 0x8}, {0x0, 0x3, 0x4, 0x8000, 0x0, 0x3}, {0x4, 0x9, 0x0, 0x2347, 0x9, 0x8}, {0xa, 0xda, 0x7, 0x6}, {0xfffffff8, 0x6e, 0x81, 0x6, 0x1, 0x9}, {0xee6e, 0x40000000, 0x9, 0x24, 0x7, 0x48}, {0x5, 0x8, 0x1, 0x7, 0x7, 0x50}, {0x7, 0xc0000, 0x31673ed2, 0x601a, 0x100, 0x7}, {0xfffffff8, 0x10000, 0x6, 0x8, 0x9, 0x1}, {0xc, 0xca, 0x1, 0x1c7, 0x5, 0x9e000000}, {0x3, 0x401, 0x5, 0x3ff, 0x536, 0x3}, {0x1, 0x1ff, 0x10000000, 0x1, 0x9, 0x2}, {0x0, 0x10000, 0x9, 0xfff, 0x8}, {0x1ff, 0x5, 0x401, 0x10001, 0x5, 0xe}, {0x4, 0xfffffff8, 0x1, 0xe9, 0xe, 0xe5e}, {0x3d, 0x4, 0x5f9, 0x0, 0xa, 0x40000000}, {0x7ff, 0x400, 0x100, 0x6, 0x2, 0x4}, {0x6, 0x9, 0x6, 0x4, 0x2, 0xfffffff7}, {0x3, 0x2, 0x5f, 0x4}, {0x8, 0x10000, 0xfb, 0xfffffcad, 0x1ff, 0xca8a}, {0xcb33, 0x1, 0xd, 0x101, 0x800, 0xe}, {0x7000000, 0x8f1, 0x9, 0x2224ead8}, {0x9, 0xda, 0x5, 0x2, 0x0, 0x4}, {0x6, 0x5, 0x7ff, 0x3, 0x243, 0x1}, {0xe, 0x380, 0x0, 0x0, 0x6, 0x9}, {0x5, 0x1, 0xc, 0x5f, 0x100, 0x3}, {0x8000, 0x4, 0x7, 0x2, 0x4, 0x1}, {0x1, 0x10000, 0x1, 0x446f, 0x1, 0x4}, {0x6, 0x200, 0x5, 0x9fe6, 0xfffffeff, 0x4}, {0x6, 0x0, 0x8, 0x19e7c000, 0x8, 0x1000}, {0x4, 0x2, 0x0, 0x2, 0x10000, 0x1592ef0a}, {0x5, 0x0, 0xbaf6e37, 0x2, 0x80000000}, {0x0, 0x42e, 0x1, 0x6552, 0x9bb}, {0x8, 0x7, 0x3, 0xff, 0xba3, 0x4}, {0xd, 0xe3e7, 0x6, 0xeda, 0xffffffff, 0x21}, {0x3, 0x7f, 0x7, 0x10, 0x1b2b, 0x4}, {0x4, 0x86a0, 0x4, 0x6, 0x2, 0x6}, {0x0, 0x8, 0xe, 0x2, 0x3, 0xe}, {0x1, 0x9, 0x5, 0x9, 0x42d, 0x8001}, {0x1000, 0x9, 0x418b, 0x6, 0x9, 0x60}, {0x80000001, 0x8, 0x40, 0x5db4, 0x1000, 0x48}, {0x5, 0x2, 0xff, 0x0, 0x8, 0x1}, {0x9c4b, 0xffff0001, 0xcc6, 0x7, 0x0, 0x2}, {0x40, 0x2, 0xffffffe0, 0x4, 0xd77b, 0x4}, {0x6, 0x800000, 0x1, 0x600000, 0xe7a, 0xf}, {0x8000, 0x1b7, 0x7, 0x1, 0x6, 0x8}, {0x8, 0x1, 0x7ff, 0xffff8000, 0x10, 0x1}, {0x9, 0x7, 0x2, 0x4, 0x7, 0x9}, {0x31, 0x6, 0x6, 0x4, 0x100, 0x69}, {0x7, 0x9, 0x4, 0x11, 0x80000000, 0x1ff}, {0x8, 0x6, 0x9, 0x8, 0x200, 0x7fff}, {0x1ff, 0x4, 0x4, 0x9, 0x9, 0x7}, {0x9, 0x100, 0x10, 0xf, 0xffff}, {0x7, 0x8, 0x3ff, 0x80000, 0x2, 0x4fb0}, {0x9, 0x8, 0x1, 0xe948, 0xa0b, 0x5}, {0x0, 0x0, 0x6, 0x71, 0x4, 0xffff8999}, {0xfffffffe, 0x1, 0x4, 0x6, 0x1, 0xc99d}, {0x1000, 0x5, 0x100, 0x3ff, 0x26e8, 0x9}, {0x6, 0x80000000, 0x4, 0x2a5, 0x80000000, 0x5}, {0xcf, 0x8, 0x7, 0x8, 0x63, 0x9}, {0x1, 0x4, 0x1, 0x400, 0x6, 0xa}, {0x8, 0x3, 0x4, 0x8, 0x8, 0x37de}, {0x2, 0x3, 0x0, 0x2, 0x3, 0x386}, {0x1, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x8, 0x1, 0x9, 0x7, 0x2, 0xb80}, {0x4, 0x1, 0x1000, 0x6, 0x100, 0x40}, {0xffff6fc6, 0x7, 0x2, 0xf4cf, 0x80000001, 0x6}, {0x100, 0x8, 0x9, 0x3252, 0x62e, 0x4}, {0xe, 0x1, 0x797, 0x7d, 0x1, 0xc}, {0x5, 0x5, 0x1, 0xffffffff, 0xfffffff8, 0x1}, {0x1, 0x7, 0x2, 0x6, 0x10, 0x408}, {0x2, 0x3, 0x7fff, 0x2, 0x4, 0x8}, {0x5, 0x6, 0xfdc8, 0xb0, 0x4, 0x101}, {0x2, 0x4, 0xffffff27, 0xb23, 0x4, 0xb481}, {0x39b4, 0x3, 0x7f, 0x9, 0xd, 0x2}, {0xfffffff7, 0x4, 0x6, 0x0, 0xc, 0x7}, {0xa, 0x2428, 0xffffffff, 0x8, 0x8, 0x1}, {0xcf, 0x5c5ba14e, 0x2, 0x2, 0x0, 0xfffffff7}, {0xa78d19eb, 0x10001, 0x2, 0x9, 0xd, 0x4}, {0xa7f, 0x522eab1f, 0x0, 0xc91, 0x5, 0x6}, {0xe1, 0x7bcf, 0x0, 0x0, 0x3, 0x70}, {0x101, 0x2, 0x21, 0x7, 0x1, 0x3}, {0x8, 0x4, 0x9, 0x4, 0x4, 0x8f9f}, {0x3, 0x7, 0x3, 0x10000, 0xf92b, 0xfffffc00}, {0x9, 0x531b, 0x4, 0xfffffc01, 0xfffffffb, 0x8001}, {0x8, 0xa, 0x4, 0x4bfb, 0x4, 0xfc}, {0x100, 0x5, 0x7c24, 0xffffffff, 0x2b, 0x3}, {0x200, 0x9, 0x0, 0xe7, 0x1, 0x6}, {0x4, 0x4, 0x4, 0x5, 0x2, 0x7}, {0x1ff, 0x8, 0x5, 0x4, 0x7, 0x401}, {0x2, 0x8, 0x101786eb, 0x2, 0x6, 0x3}, {0x4, 0x400, 0x8694, 0xdd20, 0x400, 0xa04}, {0x1, 0x6, 0x31, 0x7fff, 0xe7, 0x4}], [{0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x6, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x3}, {0x3, 0x1}, {0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x2}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x3}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x3}, {0xb15c1f89ee5ee2dd, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x28dbf5de04578aa7}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x1}, {0x5}, {0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0xefab0b27d158a5a5, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x6}, {0x4}, {0x1}], 0x1}}]}, {0x92, 0x6, "93f76019dbde5ba48eed1f829f8aed50d95dbf48cd473cf6d9694ce4a63e8bb55c98262b8657eb1c6a737fbf6324b7342551579f6aa78daa4112a9f92cf826d0211359f40f8a64749ba587781f6ac57f5fb3c5cd44ae22f82ea3594451aea9aa518b08fbcd623861afc94d7d80e8a6e5598056d0e70d5f870d28325443ba229fa40831458d664ccfbc9413b370b8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x104, 0xe, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x0, 0xffffffffffffffff, 0x4b5, 0x800}, 0x1, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffc00, 0x5, 0x0, 0x9, 0x400}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x7, 0x1, 0x1ff, 0x4}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x7, 0x8, 0x6, 0xf}, 0x1, r8}}]}, {0x58, 0x6, "31ddf1a77b9d10c8ac3102e7dde30802cb23493a93d5d79a30ff35c9636ab1a5d1426382ef9b91faa38cc5243b686b7befe2d18b501b30f8010f08557bfed967cb88df7339245e400b32793dcb4e0564be22724c"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0xfff2}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xb}}]}}]}, 0x5f70}, 0x1, 0x0, 0x0, 0x893}, 0x24040084)

6.714134821s ago: executing program 0 (id=5456):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000480), 0x2)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="0198000000000000200012800800", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtfilter={0x64, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r5, {0xfff3, 0x9}, {}, {0x2, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ct={0x2c, 0x7, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x48c0)

6.712703738s ago: executing program 6 (id=5457):
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
r0 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=<r1=>0x0, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r3, 0x0, 0x0, 0x0, 0x80800, 0x1})
io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0)
close(r2)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}})
r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r8 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCPKT(r8, 0x5420, &(0x7f0000000080)=0x3)
ioctl$TIOCPKT(r8, 0x5420, &(0x7f0000000140)=0xfff)
ioctl$SG_IO(r7, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0xff, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000880)="5ca86304000000f0099af29e96c8d42bf351039697e1d4c1d8edc7399bed9c4584dd57963ddceee7af02f304286e50ffc3e59e635cf000000081f8ac2e86da524ae2ad5deb90ac06b044097359492e6fa240fc9d250c5ff8d080e2659439694cd1ecc032b04249a12c0d69e173f387a090b59226e9804aa251ed0c76014cf17b90f39e40a0389b9fc3644415bb6861be988e7af22fb4d27f3eb4a7c82698fd23a2015f954fb3e9c2b4629ec47b845de19989a6b38b0b6e26c74a680d6f04222f7fd8b490d59e132d5a52c398ff819b237f4a684bd42527f0694996bc7112497cdc9f33fdf2130a7d31f2da822d3ca832ba3100"/255, 0x0, 0xfffffff9, 0x0, 0x3, 0x0})
io_uring_enter(r0, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000100)={0x9, 0x9})
close(r9)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r10, 0x0)
r11 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r12 = accept(r9, 0x0, 0x0)
r13 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r13, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58)
r14 = accept$alg(r13, 0x0, 0x0)
sendmmsg$alg(r14, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r12)

6.528186182s ago: executing program 2 (id=5458):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000009960810524711004f32010203010902160001000000000904"], 0x0) (async)
socketpair(0xa, 0x1, 0x1e, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0xc40)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbfbf, 0xbf}) (async)
close_range(r1, r0, 0x0)

6.493698148s ago: executing program 0 (id=5459):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18)
sendmmsg$inet6(r0, &(0x7f0000003a00)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xffffff83, @local, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000600)="11", 0x1}], 0x1, 0x0, 0x0, 0xf5}}], 0x1, 0x4c040) (fail_nth: 11)

5.989509605s ago: executing program 2 (id=5460):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x100000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000340)={0x1, 0x3})

5.150343347s ago: executing program 0 (id=5461):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000940)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x80000004, @dev={0xfe, 0x80, '\x00', 0xa}, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x1, 0x48081)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000001c0)=@int=0x6, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'netdevsim0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0)

5.147363449s ago: executing program 2 (id=5462):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0)

4.848062857s ago: executing program 6 (id=5463):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, <r3=>0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r3, r4, 0x3, 0x0, 0xffffffff, 0x1000, {0xac7c, 0x0, 0x23, 0x67, 0xf4b, 0x1, 0x5, 0x8, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0x1, "fe1d0000928c008e00000020b42766ebe82f4ad0a93b00"}})

4.564051147s ago: executing program 0 (id=5464):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x20000023896)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xa, 0x0, 0x0)
r6 = landlock_create_ruleset(&(0x7f0000000000)={0x4080, 0x0, 0x2}, 0x18, 0x0)
pipe2(&(0x7f0000000100), 0x84480)
landlock_restrict_self(r6, 0x1)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x100c080, 0x0, 0x0, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x0, 0x6, 0x0, 0xfffffffc})
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/ipc\x00')
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000002c0)=0xfffffffe)
ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000100)=0xffff0080)
ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000000)=0x8)
setns(r8, 0x8000000)

4.563135304s ago: executing program 2 (id=5465):
socket$rds(0x15, 0x5, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
fspick(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
open(0x0, 0x1850c2, 0x14c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[], 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x20058880)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x90, 0x6000}, 0x9c)

4.488506362s ago: executing program 6 (id=5466):
poll(0x0, 0x0, 0x100)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x980, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000140)=@x={0x94, 0x6, "c511ee84649d"})
r6 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@rdma_map={0x24, 0x114, 0x3, {{0x0}, 0x0, 0x31}}], 0x30}, 0x0)
arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000180))
ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040))
close_range(r2, 0xffffffffffffffff, 0x0)

4.384450155s ago: executing program 2 (id=5467):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = dup(r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20e20, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000bc0)={0x6, 0x400d, 0x400, 0x97aa, 0x1a, "5ef863f1a0973cf65a7917895c30acd61b3d2b"})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000008063014c000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x80, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0)
r5 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000b10b5103a09222689b7010203010902450001000000000904"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
fsmount(r5, 0x0, 0x1)
socket$l2tp6(0xa, 0x2, 0x73)
r7 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0)
r8 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2)
ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000000c0)={0x5, @pix_mp={0x3, 0x1, 0x31303553, 0x0, 0x0, [{0x80, 0xc1}, {0x7, 0x7}, {0x8, 0xfffffe01}, {0x6, 0x80000000}, {0x0, 0x8}, {0x9197, 0x400}, {0x81, 0x3}, {0x6, 0x1}], 0x18, 0x3, 0x2, 0x2, 0x7}})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[<r9=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9})
r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60)
ioctl$KVM_CREATE_PIT2(r10, 0x4040ae77, 0x0)
close(r10)
socket$nl_route(0x10, 0x3, 0x0)

3.786294054s ago: executing program 4 (id=5473):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4}}}]}, 0x38}}, 0x20000000)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x1030bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0x0, 0xfff2}, {0xffe0, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x7a}, @TCA_CHAIN={0x8, 0xb, 0x10}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', r4, 0x40, 0x1, 0x401, 0x7, {{0xf, 0x4, 0x0, 0x18, 0x3c, 0x64, 0x0, 0xa, 0x4, 0x0, @multicast2, @empty, {[@ssrr={0x89, 0xf, 0x5, [@broadcast, @private=0xa010100, @multicast2]}, @rr={0x7, 0x17, 0x82, [@private=0xa010101, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @end]}}}}})
open(0x0, 0x8080, 0x40)
r5 = gettid()
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x4c, &(0x7f0000000040)=0x7, 0x4)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=<r7=>0x0)
timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x40000)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r8, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
r10 = syz_open_dev$media(&(0x7f00000001c0), 0x5, 0x8800)
syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x1, &(0x7f0000000300)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@flag='nolazytime'}]}}, 0x1, 0x0, 0x0)
setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x10, 0x2, 0x2)
sendmsg$nl_route_sched(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES8=r10, @ANYRES8=r4], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x1000000, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080)
bind$packet(r9, &(0x7f0000000040)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @remote}, 0x14)

3.477146702s ago: executing program 4 (id=5474):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 32)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xa}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0xffffffffffffffe0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x1, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x682}]}, 0x24}, 0x1, 0x0, 0x0, 0x200480d4}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = dup(r3)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async)
syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000080)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0x233}, 0x1})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000084}, 0x84) (async)
accept$alg(r5, 0x0, 0x0) (async)
r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0xc6943)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, <r10=>0x0})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r9, 0xc00464c9, &(0x7f0000000140)={r10}) (async)
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, &(0x7f0000000800)={r10})
pipe(&(0x7f0000000080)) (async)
vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x1, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0)

2.834781103s ago: executing program 1 (id=5475):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r0, 0x0, &(0x7f00000003c0)=""/64}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={0xffffffffffffffff, r0}, 0xe)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x21, 0x0, 0x772d42}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$sndpcmp(&(0x7f0000000300), 0x2, 0x203)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4d483}, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000140))
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000)
r5 = dup2(r2, r2)
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a00", @ANYRES32=r8], 0x3c}}, 0x0)
r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000040)={0xf0f028, 0x80000006})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x3c}}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYRESOCT], 0x30}, 0x1, 0x0, 0x0, 0x400}, 0x0)

2.491603283s ago: executing program 1 (id=5476):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0)

2.389880146s ago: executing program 1 (id=5477):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3], 0x34}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_usb_connect(0x2, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0xcf, 0x7e, 0x8f, 0x40, 0x2040, 0x721f, 0xf262, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x81, 0x4, 0x0, 0x4f, [{{0x9, 0x4, 0x87, 0x6, 0x0, 0xa9, 0x7a, 0x37, 0x2}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r4=>r1, {0x2}}, './file0\x00'})
getdents64(r4, &(0x7f0000000180)=""/12, 0xc) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r7 = syz_open_dev$video(&(0x7f0000000c80), 0x5, 0x40240)
ioctl$VIDIOC_G_INPUT(r7, 0x80045626, &(0x7f0000000d40)) (async)
prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0xffff7262, 0x2}, 0x0) (async)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r8 = syz_clone(0x20048080, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000340), &(0x7f0000000500)="504577b655250dce3d9447187a54c58ea5fae69cef938c8375f9cb58a8311f7faf64ab403bbb0c037eefba4ed2a077f64aebe54b7a9a00b51d5617ae7b028f8cf5720fdcd44512e2ad9d0e9a81870f08512bf45845637526da6d4514d749e2753d7b030e15df39b15643f28739ebfe39771b7642e73f92dfac74342c174fe011ac7292dea572625c8b3ed77afc007dc16c05e47ccc269b2f7de4c99561f1fbd7f26e04b76667f0c8ac3841a3cd511537ad29012567b399a20c83577908")
ioprio_get$pid(0x1, r8) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0, 0x0)
ioctl$TUNSETOFFLOAD(r9, 0x400454d0, 0x10) (async)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)

2.200235424s ago: executing program 4 (id=5478):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
r1 = dup(r0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0xff00000000000000}, 0x0)

2.168806163s ago: executing program 4 (id=5479):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0xb1, 0x0, 0xfe, 0xfffff00c}, {0x6, 0x0, 0x1}]}, 0x10)
sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000480), 0x2)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtfilter={0x64, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r9, {0xfff3, 0x9}, {}, {0x2, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ct={0x2c, 0x7, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x48c0)
write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80000, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0xfffffffe], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r10 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcb, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x7a, 0x8, 0x8, &(0x7f0000000240)}}, 0x10)
setsockopt$packet_drop_memb(r10, 0x107, 0x2, &(0x7f00000003c0)={r11, 0x1, 0x6, @random="b7029d85e246"}, 0x10)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

1.531220788s ago: executing program 1 (id=5480):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000480), 0x2)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="019800000000000020001280080001006772650014", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtfilter={0x64, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r5, {0xfff3, 0x9}, {}, {0x2, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ct={0x2c, 0x7, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x48c0)

1.310287408s ago: executing program 1 (id=5481):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x254480, 0x0)
open(0x0, 0x0, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r1)
pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0)
ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(0xffffffffffffffff, 0x3b8c, &(0x7f0000000240)={0x30, 0x0, 0x0, 0x0, 0xffffffffffffeed7, 0x8000, 0x7e2d, 0x0})
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)

1.09590578s ago: executing program 6 (id=5482):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1})
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[<r9=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r9, <r10=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000400)={r10, 0x0, 0x0, 0x0, 0x0, [<r11=>0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000100)={r11, 0x0, <r12=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000180)={<r13=>0x0, 0x0, r12})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f00000001c0)={r13, 0x0, <r14=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r14})
getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f00000001c0), &(0x7f00000000c0)=0x68)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', <r15=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xc0, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r15, {0x0, 0x300}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x90, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x3, 0xd645, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xbff3}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x67}]}]}]}}]}, 0xc0}, 0x1, 0x7a00}, 0x0)

376.79156ms ago: executing program 0 (id=5483):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0xff00, 0x0, 0xd80}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)

306.50275ms ago: executing program 2 (id=5484):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_io_uring_setup(0x485b, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, 0x0, 0x0)
eventfd2(0xfff, 0x1)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00')
socket$isdn(0x22, 0x2, 0x26)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x0, 0xb4, 0x8c, 0xbb}}]}}]}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES32=r3, @ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
epoll_create1(0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
epoll_create1(0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f0000000500), 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0)
socket$netlink(0x10, 0x3, 0xf)
r9 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r4, @ANYBLOB="c5f74fde5c40d4e3a2ffead326a62c096524042f255d706172b1b9c731ba25bd62ec295606121e8fb38b069d34951cca63b568a493096fb7c514ce2493a2cd78be3d3077bc81d50aa89cab5a78201355bee343911ecae57626e09fa2555c96a826fbdaeb8196", @ANYBLOB="000000c6000000001400128009000000006574680000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x80)

288.499206ms ago: executing program 1 (id=5485):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc)
sendmmsg$unix(r0, &(0x7f0000000300), 0x0, 0x20008095)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000dd06060104000000fc00000000060000080500010005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000044}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'virt_wifi0\x00', 0x20})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES16=r5, @ANYRES32=0x0, @ANYBLOB="8b06050025000000480012800b000100697036746e6c00003800028014000300fc01000000000000000000000000000114000200fc01000000000000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="04001300"], 0x68}}, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'ip6erspan0\x00', <r8=>0x0})
r9 = fsmount(0xffffffffffffffff, 0x0, 0x1)
ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f00000000c0)=0x8000000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r11 = openat$cgroup_procs(r10, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r13 = openat$cgroup_procs(r12, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r13, &(0x7f00000002c0), 0x63)
write$cgroup_pid(r11, &(0x7f0000000c40), 0x12)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c40)=@newtfilter={0x810, 0x2c, 0xd27, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x7e0, 0x2, [@TCA_BASIC_EMATCHES={0x38c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x300, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xe, 0x3, 0x3}, {0x10000, 0x8, 0xfff, 0xfffffd77}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x47f9, 0x3, 0x2}, {0x7ff, 0x5, 0x8, 0x8}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8, 0x7, 0x4}, {{0x0, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x5, 0x3, 0x4}, {0xffff, 0x6f5, 0xbca4}}}, @TCF_EM_CONTAINER={0xc0, 0x2, 0x0, 0x0, {{0x9, 0x0, 0x4}, "bf3b1e581b8689f51c0a941d2b1d3b3c3434325c7685125bb26933607327b30319d22b99b05a0fb0c97acc5d220c2dd26fd929c487026ddb85bafd254bbe5e1c778a9113b6654c339cbbb67627d479213b29d44545239bb975082fbce6b890539bdaef7544f3a2bc5e4362054ddf36e540a14dcda61d2e015df6bc75202837ba0ce7aebacb11bf1baeae35999e4b89bd9da310e616a8dd825cbebf1b3af42b70ae4cce7cd66bdf46a9ad78abbc08d70cd29fe3e8"}}, @TCF_EM_CONTAINER={0xdc, 0x1, 0x0, 0x0, {{0x3a, 0x0, 0x30c}, "a92508bd9e170be5bfbdf0f98e5ff8ae9ab4e2456a96dc2bfb6c2244f99b086455a753e884b213d7b857fa3f702d270a2c57ea660157b583c207a1ad28b3bc2e4e53b3f1af314a746c2cb619e681763878d1f56d2305b3bd4b9d6b0df217bbccfdde06e16589ff313364c856750591b60f0da6b3f430a8a9ebbe4094205ce519e068f1d0bd0f95c6cc0231f4ddc98a33d95bc4bd64cfed28a03d8b6ac039126ee90e32ccd7b74e718a138cd355b97dda9389fbb12f70f4e12be4a862ac3fcc028953ca829678694de0ed2f1f3ce2"}}, @TCF_EM_META={0x68, 0x1, 0x0, 0x0, {{0xfff8, 0x4, 0x6}, [@TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="e7f321d1", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_VAR="51fff4b4f20aecb5"]}, @TCA_EM_META_LVALUE={0x24, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="7f", @TCF_META_TYPE_VAR="80ba770f349ad46143", @TCF_META_TYPE_VAR="8ed1", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="584a6455e9d9", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="0ac9"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0xf9, 0x2}, {0x6, 0xd, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x6e, 0x3}, {0x6, 0x7f, 0x1}}}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7ff, 0x8, 0x7ff}, {0x3, 0x0, 0x1}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x6, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="7707d7dfaf205eaee6", @TCF_META_TYPE_VAR="f04a7d72"]}]}}, @TCF_EM_META={0x60, 0x3, 0x0, 0x0, {{0x4, 0x4, 0xf801}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x8, 0x2}, {0xfc01, 0x28}}}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="bb"]}, @TCA_EM_META_LVALUE={0x21, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="aa42607ceefd8bef", @TCF_META_TYPE_VAR="49a4f96fcc", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0x16, 0x3, [@TCF_META_TYPE_VAR="83b4", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x1]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x80, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x3, 0x5}, {0x3c, 0x7, 0x2, 0x4}}}, @TCF_EM_IPT={0x60, 0x3, 0x0, 0x0, {{0x3, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_DATA={0x54, 0x5, "49fd014bdd05d38ea50e1c363f53d96f5566533e138c8c6927cbc965686dab039bb9528d30d6d55a147b4679c79493222c1f5a88feb250edd84b6d297cf277994057f5cead426aea1e1487ddcbc6cd3d"}]}}]}]}, @TCA_BASIC_POLICE={0x450, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffa, 0x26, 0xa, 0xf, 0x5, 0x0, 0x7, 0x1, 0x6, 0x5, 0xffffffff, 0x18000000, 0xf776, 0x7ff, 0x7, 0x8, 0x8, 0x3d, 0x7, 0x7, 0x3ff, 0x4, 0x1, 0x91, 0x6, 0x3, 0x3, 0x3, 0x4, 0xe, 0x884, 0x1c, 0x7, 0x9c8, 0x8, 0x2, 0x9, 0x28ab, 0x2, 0xd, 0x7, 0x9, 0x7ff, 0x7fffffff, 0xa837, 0x9, 0x9, 0x104, 0x2343, 0x79ca, 0x9, 0x5, 0xa1, 0x8, 0x5, 0x6, 0x9, 0xffffa20d, 0xe, 0x9, 0x401, 0x10, 0x8, 0x3ff, 0x80, 0xae, 0x1, 0x7f, 0x0, 0x0, 0x8f72, 0x0, 0x7, 0x3, 0x6, 0x7, 0x0, 0x2, 0xfff, 0x0, 0x2, 0x7ff, 0x4, 0x45d, 0x3, 0x5, 0x9, 0x5, 0x4, 0x2, 0xd, 0x1a5, 0x401, 0x80000001, 0x8, 0xbc, 0x8, 0x8, 0x3, 0x3, 0x6, 0x48f, 0x7fff, 0x1, 0x2, 0x2f, 0x80000001, 0x5, 0xa, 0x1, 0xb00e, 0x6, 0xffffffff, 0x935f, 0x3, 0x7, 0x0, 0x3, 0x8, 0x3, 0x2, 0x9, 0x3, 0xfffffff4, 0x92d, 0xa, 0x80000001, 0x9, 0x80000000, 0xfffffff8, 0x4, 0x3, 0x8000, 0x5, 0x10001, 0x0, 0x1, 0x6, 0x40, 0x3, 0x9, 0x8000, 0x1, 0x8, 0x5, 0xb5c, 0x2, 0x7, 0x3, 0x1, 0xfffffffa, 0xf8, 0x2, 0xc, 0x3, 0x80000000, 0x43f, 0x8, 0x908, 0x7, 0x46d, 0x1, 0x2, 0x6, 0x8, 0x6, 0xb, 0x72, 0x10, 0x77d, 0x5a, 0x7, 0x6235, 0x8, 0x6, 0x4, 0x3, 0x7, 0x7fffffff, 0x10001, 0x7, 0xfff, 0x7, 0x9, 0x3ff, 0x3ff, 0x7, 0x7ff, 0x400, 0x6, 0xff, 0xffff2378, 0x7, 0x80000000, 0x3, 0x6, 0x4, 0xfffffb22, 0xe, 0x7, 0x4, 0xc000, 0x1, 0x9, 0x0, 0x4, 0x3, 0xd, 0x6, 0x9aa4, 0x9, 0x7, 0x1000, 0x4, 0x800, 0x428c, 0x5, 0x2, 0x280, 0x81, 0x683f, 0x2, 0x8, 0x8, 0x4efeadfd, 0xade8, 0x9, 0x10001, 0x7, 0x0, 0x80000001, 0x3, 0xb54d, 0x9, 0x1, 0x8, 0x40, 0x0, 0x400, 0x4, 0x3, 0x3, 0x3e5, 0x2, 0xfffff03b, 0xf140, 0x3, 0x4, 0x82, 0x10000, 0x4, 0x3, 0x8009, 0x4, 0x800]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0xfffffffffffffff3, 0x101, 0x7f, 0x9, {0x88, 0x2, 0x5, 0x5, 0x1, 0x4}, {0x3, 0x2, 0x0, 0x2, 0x2, 0x6}, 0xf3c0, 0x3}}]}]}}]}, 0x810}}, 0x0)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x1ff, @loopback, 0x8000}, 0x1c)
close(0xffffffffffffffff)

144.354986ms ago: executing program 4 (id=5486):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x6}, [@typed={0x8, 0xa, 0x0, 0x0, @uid}]}, 0x1c}}, 0x20000094) (async)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xa, &(0x7f00000002c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

0s ago: executing program 4 (id=5487):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

e count: 16).
[ 1126.011533][T22281] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1126.034170][T22284] netlink: del zone limit has 4 unknown bytes
[ 1126.043125][ T5886] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1126.077137][ T5886] usb 2-1: media controller created
[ 1126.268500][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1126.295944][T20943] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[ 1126.361097][ T5886] dvb-usb: bulk message failed: -22 (6/0)
[ 1126.394242][ T5886] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1126.433863][ T5886] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input118
[ 1126.469488][T20943] usb 7-1: device descriptor read/64, error -71
[ 1126.499441][ T5886] dvb-usb: schedule remote query interval to 150 msecs.
[ 1126.545591][ T5886] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1126.705780][ T5886] dvb-usb: bulk message failed: -22 (1/0)
[ 1126.715890][T20943] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[ 1126.725465][ T5886] dvb-usb: error while querying for an remote control event.
[ 1126.814995][T22295] netlink: zone id is out of range
[ 1126.849409][ T5886] usb 2-1: USB disconnect, device number 58
[ 1126.857191][T20943] usb 7-1: device descriptor read/64, error -71
[ 1126.977585][T20943] usb usb7-port1: attempt power cycle
[ 1126.987370][ T5886] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1127.101840][   T30] kauditd_printk_skb: 18 callbacks suppressed
[ 1127.101857][   T30] audit: type=1326 audit(1746651233.987:7642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22298 comm="syz.4.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f400b92ab39 code=0x7ffc0000
[ 1127.182067][   T30] audit: type=1326 audit(1746651233.987:7643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22298 comm="syz.4.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400b98e969 code=0x7ffc0000
[ 1127.328797][   T30] audit: type=1326 audit(1746651233.987:7644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22298 comm="syz.4.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400b98e969 code=0x7ffc0000
[ 1127.384317][T20943] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[ 1127.392834][   T30] audit: type=1326 audit(1746651233.987:7645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22298 comm="syz.4.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400b98e969 code=0x7ffc0000
[ 1127.416270][T20943] usb 7-1: device descriptor read/8, error -71
[ 1127.459962][   T30] audit: type=1326 audit(1746651233.987:7646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22298 comm="syz.4.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f400b92ab39 code=0x7ffc0000
[ 1127.584531][   T30] audit: type=1326 audit(1746651233.987:7647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22298 comm="syz.4.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400b98e969 code=0x7ffc0000
[ 1127.685549][T20943] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[ 1127.693298][   T30] audit: type=1326 audit(1746651233.987:7648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22298 comm="syz.4.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400b98e969 code=0x7ffc0000
[ 1127.745713][T20943] usb 7-1: device descriptor read/8, error -71
[ 1127.763951][   T30] audit: type=1326 audit(1746651233.987:7649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22298 comm="syz.4.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f400b92ab39 code=0x7ffc0000
[ 1127.865746][T20943] usb usb7-port1: unable to enumerate USB device
[ 1127.895653][   T30] audit: type=1326 audit(1746651233.987:7650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22298 comm="syz.4.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400b98e969 code=0x7ffc0000
[ 1128.015543][   T30] audit: type=1326 audit(1746651233.987:7651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22298 comm="syz.4.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f400b92ab39 code=0x7ffc0000
[ 1128.459361][T22317] FAULT_INJECTION: forcing a failure.
[ 1128.459361][T22317] name failslab, interval 1, probability 0, space 0, times 0
[ 1128.505639][T22317] CPU: 0 UID: 0 PID: 22317 Comm: syz.4.5000 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) 
[ 1128.505665][T22317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1128.505682][T22317] Call Trace:
[ 1128.505690][T22317]  <TASK>
[ 1128.505698][T22317]  dump_stack_lvl+0x189/0x250
[ 1128.505730][T22317]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1128.505755][T22317]  ? __pfx__printk+0x10/0x10
[ 1128.505778][T22317]  ? __pfx___might_resched+0x10/0x10
[ 1128.505793][T22317]  ? fs_reclaim_acquire+0x7d/0x100
[ 1128.505823][T22317]  should_fail_ex+0x414/0x560
[ 1128.505856][T22317]  should_failslab+0xa8/0x100
[ 1128.505881][T22317]  __kmalloc_noprof+0xcb/0x4f0
[ 1128.505900][T22317]  ? kfree+0x4d/0x440
[ 1128.505917][T22317]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1128.505942][T22317]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1128.505965][T22317]  ? tomoyo_domain+0xda/0x130
[ 1128.505991][T22317]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1128.506018][T22317]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1128.506048][T22317]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1128.506078][T22317]  ? sb_end_write+0xe9/0x1c0
[ 1128.506103][T22317]  ? vfs_write+0x8d8/0xa90
[ 1128.506152][T22317]  ? ksys_write+0x1e1/0x250
[ 1128.506176][T22317]  security_file_ioctl+0xcb/0x2d0
[ 1128.506204][T22317]  __se_sys_ioctl+0x47/0x170
[ 1128.506224][T22317]  do_syscall_64+0xf6/0x210
[ 1128.506246][T22317]  ? clear_bhb_loop+0x45/0xa0
[ 1128.506269][T22317]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1128.506286][T22317] RIP: 0033:0x7f400b98e969
[ 1128.506301][T22317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1128.506316][T22317] RSP: 002b:00007f400c843038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1128.506334][T22317] RAX: ffffffffffffffda RBX: 00007f400bbb5fa0 RCX: 00007f400b98e969
[ 1128.506347][T22317] RDX: 00002000000000c0 RSI: 00000000c020aa08 RDI: 0000000000000004
[ 1128.506359][T22317] RBP: 00007f400c843090 R08: 0000000000000000 R09: 0000000000000000
[ 1128.506370][T22317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1128.506381][T22317] R13: 0000000000000000 R14: 00007f400bbb5fa0 R15: 00007f400bcdfa28
[ 1128.506408][T22317]  </TASK>
[ 1128.506415][T22317] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1128.856109][T20943] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[ 1129.027566][T20943] usb 3-1: Using ep0 maxpacket: 16
[ 1129.044290][T20943] usb 3-1: config index 0 descriptor too short (expected 5668, got 36)
[ 1129.073628][T20943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1129.117373][T20943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1129.155767][T20943] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[ 1129.191733][T20943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1129.293191][T20943] usb 3-1: config 0 descriptor??
[ 1129.565449][   T24] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[ 1129.608640][T22319] netlink: 'syz.2.5002': attribute type 5 has an invalid length.
[ 1129.616722][T22319] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5002'.
[ 1129.936086][T20943] playstation 0003:054C:05C4.0037: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0
[ 1129.959915][T22341] bond3: entered promiscuous mode
[ 1130.001675][T22341] bond3 (unregistering): Released all slaves
[ 1130.035450][   T24] usb 7-1: Using ep0 maxpacket: 8
[ 1130.106754][   T24] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1130.117821][T22319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1130.142864][T22319] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1130.178415][   T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1130.274210][   T24] usb 7-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00
[ 1130.369105][T20943] playstation 0003:054C:05C4.0037: Failed to retrieve feature with reportID 18: -71
[ 1130.389244][T20943] playstation 0003:054C:05C4.0037: Failed to retrieve DualShock4 pairing info: -71
[ 1130.404484][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1130.419870][T20943] playstation 0003:054C:05C4.0037: Failed to get MAC address from DualShock4
[ 1130.432122][   T24] usb 7-1: config 0 descriptor??
[ 1130.453206][T20943] playstation 0003:054C:05C4.0037: Failed to create dualshock4.
[ 1130.484117][T20943] playstation 0003:054C:05C4.0037: probe with driver playstation failed with error -71
[ 1130.529966][T20943] usb 3-1: USB disconnect, device number 55
[ 1130.966068][T22356] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5006'.
[ 1130.994523][T22356] bridge_slave_1: left allmulticast mode
[ 1131.015579][T22356] bridge_slave_1: left promiscuous mode
[ 1131.055964][T22356] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1131.148590][T22356] bridge_slave_0: left allmulticast mode
[ 1131.154394][T22356] bridge_slave_0: left promiscuous mode
[ 1131.209354][T22356] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1131.364401][T22363] netlink: 'syz.4.5013': attribute type 1 has an invalid length.
[ 1131.896002][T20943] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[ 1132.004079][T22374] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1132.065574][T20943] usb 3-1: Using ep0 maxpacket: 8
[ 1132.073996][T20943] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[ 1132.099045][T20943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1132.200511][T20943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1132.242860][T20943] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[ 1132.263612][T20943] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[ 1132.272965][T20943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1132.313918][T20943] usb 3-1: config 0 descriptor??
[ 1132.391101][T22379] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5019'.
[ 1132.431655][T22379] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5019'.
[ 1132.542861][T22382] FAULT_INJECTION: forcing a failure.
[ 1132.542861][T22382] name failslab, interval 1, probability 0, space 0, times 0
[ 1132.574365][T22382] CPU: 1 UID: 0 PID: 22382 Comm: syz.1.5020 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) 
[ 1132.574389][T22382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1132.574404][T22382] Call Trace:
[ 1132.574412][T22382]  <TASK>
[ 1132.574420][T22382]  dump_stack_lvl+0x189/0x250
[ 1132.574467][T22382]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1132.574495][T22382]  ? __pfx__printk+0x10/0x10
[ 1132.574515][T22382]  ? __pfx___might_resched+0x10/0x10
[ 1132.574533][T22382]  ? fs_reclaim_acquire+0x7d/0x100
[ 1132.574565][T22382]  should_fail_ex+0x414/0x560
[ 1132.574600][T22382]  should_failslab+0xa8/0x100
[ 1132.574625][T22382]  __kmalloc_noprof+0xcb/0x4f0
[ 1132.574647][T22382]  ? tomoyo_encode+0x28b/0x550
[ 1132.574672][T22382]  tomoyo_encode+0x28b/0x550
[ 1132.574699][T22382]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 1132.574731][T22382]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1132.574760][T22382]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1132.574792][T22382]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1132.574837][T22382]  ? __lock_acquire+0xaac/0xd20
[ 1132.574880][T22382]  ? __fget_files+0x2a/0x420
[ 1132.574908][T22382]  ? __fget_files+0x3a0/0x420
[ 1132.574930][T22382]  ? __fget_files+0x2a/0x420
[ 1132.574957][T22382]  security_file_ioctl+0xcb/0x2d0
[ 1132.574986][T22382]  __se_sys_ioctl+0x47/0x170
[ 1132.575007][T22382]  do_syscall_64+0xf6/0x210
[ 1132.575032][T22382]  ? clear_bhb_loop+0x45/0xa0
[ 1132.575055][T22382]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1132.575073][T22382] RIP: 0033:0x7fc456f8e969
[ 1132.575089][T22382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1132.575105][T22382] RSP: 002b:00007fc457ed6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1132.575125][T22382] RAX: ffffffffffffffda RBX: 00007fc4571b5fa0 RCX: 00007fc456f8e969
[ 1132.575139][T22382] RDX: 0000000000000000 RSI: 00000000c0f85403 RDI: 0000000000000003
[ 1132.575151][T22382] RBP: 00007fc457ed6090 R08: 0000000000000000 R09: 0000000000000000
[ 1132.575163][T22382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1132.575174][T22382] R13: 0000000000000000 R14: 00007fc4571b5fa0 R15: 00007fc4572dfa28
[ 1132.575202][T22382]  </TASK>
[ 1132.575250][T22382] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1132.734398][T22368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1132.828760][T22368] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1132.845066][T22368] netlink: 'syz.2.5014': attribute type 32 has an invalid length.
[ 1132.859595][T20943] redragon 0003:0C45:760B.0038: Fixing Redragon ASURA report descriptor.
[ 1132.901954][T20943] redragon 0003:0C45:760B.0038: unknown main item tag 0x6
[ 1132.921387][T20943] redragon 0003:0C45:760B.0038: item fetching failed at offset 7/133
[ 1132.933792][T20943] redragon 0003:0C45:760B.0038: probe with driver redragon failed with error -22
[ 1133.048184][ T3607] usb 3-1: USB disconnect, device number 56
[ 1133.555729][   T24] usbhid 7-1:0.0: can't add hid device: -71
[ 1133.565548][   T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1133.585254][   T24] usb 7-1: USB disconnect, device number 29
[ 1134.001258][T22409] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5032'.
[ 1134.365763][   T24] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[ 1134.550145][   T24] usb 3-1: Using ep0 maxpacket: 16
[ 1134.586027][T22427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1134.607816][T22427] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1134.630733][   T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1134.660469][T22427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1134.677235][   T24] usb 3-1: config 0 has no interface number 0
[ 1134.713444][   T24] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82
[ 1134.723937][T22427] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1134.744285][   T24] usb 3-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10
[ 1134.783483][   T24] usb 3-1: Product: syz
[ 1134.789285][T22427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5038'.
[ 1134.827149][   T24] usb 3-1: Manufacturer: syz
[ 1134.864208][   T24] usb 3-1: SerialNumber: syz
[ 1134.888991][   T24] usb 3-1: config 0 descriptor??
[ 1134.911152][T22430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5037'.
[ 1135.143722][T22412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1135.153649][T22412] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1135.393609][T22412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1135.443953][T22412] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1135.659185][T22436] netlink: 'syz.4.5040': attribute type 6 has an invalid length.
[ 1135.680658][T22436] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1135.714679][T22436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1135.753528][T22436] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1135.846339][T22439] xt_hashlimit: invalid interval
[ 1135.876718][T22439] netlink: 'syz.1.5041': attribute type 27 has an invalid length.
[ 1135.963482][T22439] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1135.996222][T22439] caif0: left allmulticast mode
[ 1136.035248][T22442] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5040'.
[ 1136.049233][T22442] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5040'.
[ 1136.168188][ T3607] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 1136.199364][T22445] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1136.355734][ T3607] usb 2-1: Using ep0 maxpacket: 8
[ 1136.370027][ T3607] usb 2-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[ 1136.382901][ T3607] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1136.392021][ T3607] usb 2-1: Product: syz
[ 1136.396797][ T3607] usb 2-1: Manufacturer: syz
[ 1136.402549][ T3607] usb 2-1: SerialNumber: syz
[ 1136.413413][ T3607] usb 2-1: config 0 descriptor??
[ 1136.430102][ T3607] gspca_main: xirlink-cit-2.14.0 probing 0545:800c
[ 1136.440641][ T3607] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input119
[ 1136.601845][T22439] ip6erspan0: left promiscuous mode
[ 1136.619800][T22439] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1136.631130][T22439] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1136.667538][T22439] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1136.688698][T22439] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1136.688788][T22440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5041'.
[ 1136.795790][T22439] bond2: left allmulticast mode
[ 1136.808284][T22439] bond2: left promiscuous mode
[ 1136.827699][T22439] macsec1: left promiscuous mode
[ 1136.842816][T22439] macsec1: left allmulticast mode
[ 1136.942399][T22450] binder: 22449:22450 ioctl c018620c 200000000380 returned -22
[ 1136.981881][T22450] netlink: 'syz.6.5044': attribute type 44 has an invalid length.
[ 1137.041767][   T30] kauditd_printk_skb: 190 callbacks suppressed
[ 1137.041785][   T30] audit: type=1326 audit(1746651243.937:7842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22449 comm="syz.6.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5330d8e969 code=0x7ffc0000
[ 1137.084106][   T30] audit: type=1326 audit(1746651243.967:7843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22449 comm="syz.6.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5330d8e969 code=0x7ffc0000
[ 1137.158316][   T30] audit: type=1326 audit(1746651243.967:7844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22449 comm="syz.6.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5330d8e969 code=0x7ffc0000
[ 1137.189585][   T30] audit: type=1326 audit(1746651243.967:7845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22449 comm="syz.6.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5330d8e969 code=0x7ffc0000
[ 1137.223482][   T30] audit: type=1326 audit(1746651243.977:7846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22449 comm="syz.6.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5330d8e969 code=0x7ffc0000
[ 1137.247115][   T30] audit: type=1326 audit(1746651243.977:7847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22449 comm="syz.6.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f5330d8e969 code=0x7ffc0000
[ 1137.278050][   T30] audit: type=1326 audit(1746651243.977:7848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22449 comm="syz.6.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5330d2ab39 code=0x7ffc0000
[ 1137.301184][   T30] audit: type=1326 audit(1746651243.977:7849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22449 comm="syz.6.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5330d2ab39 code=0x7ffc0000
[ 1137.324663][   T30] audit: type=1326 audit(1746651243.977:7850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22449 comm="syz.6.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5330d8e969 code=0x7ffc0000
[ 1137.351498][   T30] audit: type=1326 audit(1746651243.977:7851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22449 comm="syz.6.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5330d2ab39 code=0x7ffc0000
[ 1138.380967][ T5141] Bluetooth: hci1: command 0x0406 tx timeout
[ 1138.692594][T22472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1138.711487][T22472] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1138.755474][ T5883] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[ 1138.808932][ T3607] usb 2-1: USB disconnect, device number 59
[ 1138.947177][ T5883] usb 7-1: Using ep0 maxpacket: 16
[ 1138.955706][ T5883] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00
[ 1138.977478][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1139.008245][ T5883] usb 7-1: config 0 descriptor??
[ 1139.016053][ T5883] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected
[ 1139.034999][ T5883] usb 7-1: Detected FT4232H
[ 1139.224941][ T5883] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[ 1139.247477][ T5883] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1139.452661][ T5886] usb 7-1: USB disconnect, device number 30
[ 1139.465245][ T5886] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1139.484329][ T5886] ftdi_sio 7-1:0.0: device disconnected
[ 1140.040734][T22488] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1140.316795][T22492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1140.406189][T22492] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1140.743874][T22495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5057'.
[ 1140.820345][T22495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5057'.
[ 1140.917660][T22504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5060'.
[ 1140.968139][T22504] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1141.875535][ T3607] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 1142.035535][ T3607] usb 2-1: Using ep0 maxpacket: 16
[ 1142.088846][ T3607] usb 2-1: too many configurations: 22, using maximum allowed: 8
[ 1142.185559][ T3607] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1142.220868][ T3607] usb 2-1: can't read configurations, error -61
[ 1142.367188][ T3607] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 1142.585445][ T3607] usb 2-1: Using ep0 maxpacket: 16
[ 1142.610707][ T3607] usb 2-1: too many configurations: 22, using maximum allowed: 8
[ 1142.655343][ T3607] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1142.693512][ T3607] usb 2-1: can't read configurations, error -61
[ 1142.732686][ T3607] usb usb2-port1: attempt power cycle
[ 1142.771434][T22517] FAULT_INJECTION: forcing a failure.
[ 1142.771434][T22517] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1142.825710][T22517] CPU: 1 UID: 0 PID: 22517 Comm: syz.6.5064 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) 
[ 1142.825735][T22517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1142.825746][T22517] Call Trace:
[ 1142.825754][T22517]  <TASK>
[ 1142.825761][T22517]  dump_stack_lvl+0x189/0x250
[ 1142.825802][T22517]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1142.825827][T22517]  ? __pfx__printk+0x10/0x10
[ 1142.825846][T22517]  ? fs_reclaim_acquire+0x7d/0x100
[ 1142.825880][T22517]  should_fail_ex+0x414/0x560
[ 1142.825913][T22517]  prepare_alloc_pages+0x213/0x610
[ 1142.825946][T22517]  __alloc_frozen_pages_noprof+0x123/0x370
[ 1142.825973][T22517]  ? finish_task_switch+0x18b/0x950
[ 1142.825997][T22517]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1142.826033][T22517]  ? policy_nodemask+0x27c/0x720
[ 1142.826055][T22517]  ? __lock_acquire+0xaac/0xd20
[ 1142.826082][T22517]  alloc_pages_mpol+0x232/0x4a0
[ 1142.826110][T22517]  vma_alloc_folio_noprof+0xe4/0x200
[ 1142.826135][T22517]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[ 1142.826170][T22517]  folio_prealloc+0x30/0x180
[ 1142.826195][T22517]  __handle_mm_fault+0x2b28/0x5380
[ 1142.826233][T22517]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1142.826272][T22517]  ? find_vma+0xe7/0x160
[ 1142.826293][T22517]  ? __pfx_find_vma+0x10/0x10
[ 1142.826317][T22517]  handle_mm_fault+0x3f6/0x8c0
[ 1142.826347][T22517]  do_user_addr_fault+0x764/0x1390
[ 1142.826379][T22517]  exc_page_fault+0x68/0x110
[ 1142.826401][T22517]  asm_exc_page_fault+0x26/0x30
[ 1142.826418][T22517] RIP: 0010:rep_movs_alternative+0x4a/0x90
[ 1142.826445][T22517] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[ 1142.826460][T22517] RSP: 0018:ffffc9000be774d8 EFLAGS: 00050202
[ 1142.826477][T22517] RAX: ffff88806f3a8001 RBX: ffff88806f3a83e1 RCX: 0000000000000157
[ 1142.826490][T22517] RDX: 0000000000000000 RSI: ffff88806f3a8421 RDI: 0000200000001000
[ 1142.826501][T22517] RBP: ffffc9000be77638 R08: ffff88806f3a8577 R09: 1ffff1100de750ae
[ 1142.826514][T22517] R10: dffffc0000000000 R11: ffffed100de750af R12: dffffc0000000000
[ 1142.826528][T22517] R13: 0000000000000197 R14: 00007ffffffff000 R15: 0000200000001157
[ 1142.826556][T22517]  _copy_to_iter+0x5f6/0x15a0
[ 1142.826589][T22517]  ? __pfx__copy_to_iter+0x10/0x10
[ 1142.826608][T22517]  ? __skb_try_recv_from_queue+0x2b2/0x730
[ 1142.826639][T22517]  ? __skb_try_recv_datagram+0x3da/0x4e0
[ 1142.826670][T22517]  __skb_datagram_iter+0x100/0x960
[ 1142.826697][T22517]  ? __pfx_simple_copy_to_iter+0x10/0x10
[ 1142.826733][T22517]  skb_copy_datagram_iter+0xc5/0x230
[ 1142.826762][T22517]  netlink_recvmsg+0x2c9/0xe00
[ 1142.826796][T22517]  ? __pfx_netlink_recvmsg+0x10/0x10
[ 1142.826819][T22517]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1142.826840][T22517]  ? aa_sock_msg_perm+0x94/0x160
[ 1142.826860][T22517]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[ 1142.826880][T22517]  ? security_socket_recvmsg+0x7e/0x2e0
[ 1142.826904][T22517]  ? __pfx_netlink_recvmsg+0x10/0x10
[ 1142.826924][T22517]  sock_recvmsg+0x229/0x270
[ 1142.826944][T22517]  ____sys_recvmsg+0x1c9/0x460
[ 1142.826976][T22517]  ? __pfx_____sys_recvmsg+0x10/0x10
[ 1142.827014][T22517]  ? import_iovec+0x74/0xa0
[ 1142.827041][T22517]  ___sys_recvmsg+0x1b5/0x510
[ 1142.827070][T22517]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1142.827116][T22517]  ? __fget_files+0x3a0/0x420
[ 1142.827149][T22517]  do_recvmmsg+0x307/0x760
[ 1142.827180][T22517]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1142.827216][T22517]  ? _copy_from_user+0x94/0xb0
[ 1142.827254][T22517]  __x64_sys_recvmmsg+0x1af/0x240
[ 1142.827278][T22517]  ? rcu_is_watching+0x15/0xb0
[ 1142.827305][T22517]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1142.827333][T22517]  ? do_syscall_64+0xba/0x210
[ 1142.827357][T22517]  do_syscall_64+0xf6/0x210
[ 1142.827378][T22517]  ? clear_bhb_loop+0x45/0xa0
[ 1142.827400][T22517]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1142.827416][T22517] RIP: 0033:0x7f5330d8e969
[ 1142.827430][T22517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1142.827445][T22517] RSP: 002b:00007f5331b6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1142.827461][T22517] RAX: ffffffffffffffda RBX: 00007f5330fb5fa0 RCX: 00007f5330d8e969
[ 1142.827474][T22517] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[ 1142.827486][T22517] RBP: 00007f5331b6a090 R08: 0000200000003700 R09: 0000000000000000
[ 1142.827497][T22517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1142.827508][T22517] R13: 0000000000000000 R14: 00007f5330fb5fa0 R15: 00007f53310dfa28
[ 1142.827535][T22517]  </TASK>
[ 1143.417597][ T3607] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[ 1143.543284][ T3607] usb 2-1: Using ep0 maxpacket: 16
[ 1143.565298][ T3607] usb 2-1: too many configurations: 22, using maximum allowed: 8
[ 1143.579932][ T3607] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1143.589621][ T3607] usb 2-1: can't read configurations, error -61
[ 1143.740435][ T3607] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[ 1143.767134][ T3607] usb 2-1: Using ep0 maxpacket: 16
[ 1143.775893][ T3607] usb 2-1: too many configurations: 22, using maximum allowed: 8
[ 1143.793239][ T3607] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1143.802029][ T3607] usb 2-1: can't read configurations, error -61
[ 1143.814147][ T3607] usb usb2-port1: unable to enumerate USB device
[ 1144.057557][T22526] FAULT_INJECTION: forcing a failure.
[ 1144.057557][T22526] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1144.070775][T22526] CPU: 0 UID: 0 PID: 22526 Comm: syz.0.5067 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) 
[ 1144.070800][T22526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1144.070812][T22526] Call Trace:
[ 1144.070820][T22526]  <TASK>
[ 1144.070828][T22526]  dump_stack_lvl+0x189/0x250
[ 1144.070862][T22526]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1144.070889][T22526]  ? __pfx__printk+0x10/0x10
[ 1144.070911][T22526]  ? __pfx_binder_debug+0x10/0x10
[ 1144.070942][T22526]  should_fail_ex+0x414/0x560
[ 1144.070977][T22526]  _copy_to_user+0x31/0xb0
[ 1144.071004][T22526]  binder_ioctl_write_read+0x9571/0xa090
[ 1144.071043][T22526]  ? is_bpf_text_address+0x292/0x2b0
[ 1144.071096][T22526]  ? unwind_get_return_address+0x4d/0x90
[ 1144.071134][T22526]  ? __pfx_binder_ioctl_write_read+0x10/0x10
[ 1144.071164][T22526]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1144.071193][T22526]  ? stack_depot_save_flags+0x40/0x910
[ 1144.071227][T22526]  ? do_vfs_ioctl+0xf36/0x1eb0
[ 1144.071247][T22526]  ? __se_sys_ioctl+0x47/0x170
[ 1144.071265][T22526]  ? do_syscall_64+0xf6/0x210
[ 1144.071292][T22526]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1144.071317][T22526]  ? binder_debug+0x13f/0x1b0
[ 1144.071349][T22526]  ? __pfx_binder_debug+0x10/0x10
[ 1144.071372][T22526]  ? do_raw_spin_lock+0x121/0x290
[ 1144.071413][T22526]  ? _raw_spin_unlock+0x28/0x50
[ 1144.071432][T22526]  ? binder_get_thread+0x178/0x6d0
[ 1144.071472][T22526]  binder_ioctl+0x3e0/0x19c0
[ 1144.071501][T22526]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1144.071535][T22526]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1144.071567][T22526]  ? tomoyo_path_number_perm+0x4e2/0x5a0
[ 1144.071598][T22526]  ? __pfx_binder_ioctl+0x10/0x10
[ 1144.071624][T22526]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1144.071674][T22526]  ? __lock_acquire+0xaac/0xd20
[ 1144.071722][T22526]  ? __fget_files+0x2a/0x420
[ 1144.071753][T22526]  ? __fget_files+0x3a0/0x420
[ 1144.071778][T22526]  ? __fget_files+0x2a/0x420
[ 1144.071810][T22526]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1144.071837][T22526]  ? __pfx_binder_ioctl+0x10/0x10
[ 1144.071862][T22526]  __se_sys_ioctl+0xf9/0x170
[ 1144.071885][T22526]  do_syscall_64+0xf6/0x210
[ 1144.071911][T22526]  ? clear_bhb_loop+0x45/0xa0
[ 1144.071936][T22526]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1144.071956][T22526] RIP: 0033:0x7efe7a58e969
[ 1144.071974][T22526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1144.071992][T22526] RSP: 002b:00007efe7b44e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1144.072014][T22526] RAX: ffffffffffffffda RBX: 00007efe7a7b5fa0 RCX: 00007efe7a58e969
[ 1144.072029][T22526] RDX: 0000200000001a80 RSI: 00000000c0306201 RDI: 0000000000000003
[ 1144.072043][T22526] RBP: 00007efe7b44e090 R08: 0000000000000000 R09: 0000000000000000
[ 1144.072056][T22526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1144.072068][T22526] R13: 0000000000000000 R14: 00007efe7a7b5fa0 R15: 00007efe7a8dfa28
[ 1144.072099][T22526]  </TASK>
[ 1144.072171][T22526] binder: 22525:22526 ioctl c0306201 200000001a80 returned -14
[ 1144.091345][   T30] kauditd_printk_skb: 60 callbacks suppressed
[ 1144.091362][   T30] audit: type=1326 audit(1746651250.987:7912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22531 comm="syz.4.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400b98e969 code=0x7ffc0000
[ 1144.654525][   T30] audit: type=1326 audit(1746651251.317:7913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22531 comm="syz.4.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f400b98e969 code=0x7ffc0000
[ 1144.829236][   T30] audit: type=1326 audit(1746651251.317:7914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22531 comm="syz.4.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400b98e969 code=0x7ffc0000
[ 1144.864046][T22544] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1144.891983][   T30] audit: type=1326 audit(1746651251.317:7915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22531 comm="syz.4.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400b98e969 code=0x7ffc0000
[ 1144.914788][   T30] audit: type=1326 audit(1746651251.517:7916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22531 comm="syz.4.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f400b92ab39 code=0x7ffc0000
[ 1144.939317][   T30] audit: type=1326 audit(1746651251.517:7917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22531 comm="syz.4.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f400b92ab39 code=0x7ffc0000
[ 1145.045621][   T30] audit: type=1326 audit(1746651251.517:7918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22531 comm="syz.4.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f400b92ab39 code=0x7ffc0000
[ 1145.068595][   T30] audit: type=1326 audit(1746651251.517:7919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22531 comm="syz.4.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f400b92ab39 code=0x7ffc0000
[ 1145.091732][   T30] audit: type=1326 audit(1746651251.517:7920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22531 comm="syz.4.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f400b92ab39 code=0x7ffc0000
[ 1145.114278][   T30] audit: type=1326 audit(1746651251.517:7921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22531 comm="syz.4.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f400b92ab39 code=0x7ffc0000
[ 1145.830029][T22555] input: syz0 as /devices/virtual/input/input120
[ 1145.888193][T22557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1145.936514][T22557] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1146.339246][T22563] FAULT_INJECTION: forcing a failure.
[ 1146.339246][T22563] name failslab, interval 1, probability 0, space 0, times 0
[ 1146.365699][T22563] CPU: 1 UID: 0 PID: 22563 Comm: syz.1.5077 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) 
[ 1146.365725][T22563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1146.365736][T22563] Call Trace:
[ 1146.365744][T22563]  <TASK>
[ 1146.365751][T22563]  dump_stack_lvl+0x189/0x250
[ 1146.365783][T22563]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1146.365808][T22563]  ? __pfx__printk+0x10/0x10
[ 1146.365831][T22563]  ? __pfx___might_resched+0x10/0x10
[ 1146.365847][T22563]  ? fs_reclaim_acquire+0x7d/0x100
[ 1146.365877][T22563]  should_fail_ex+0x414/0x560
[ 1146.365913][T22563]  should_failslab+0xa8/0x100
[ 1146.365938][T22563]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[ 1146.365960][T22563]  ? __alloc_skb+0x112/0x2d0
[ 1146.365985][T22563]  __alloc_skb+0x112/0x2d0
[ 1146.366008][T22563]  netlink_ack+0x146/0xa50
[ 1146.366025][T22563]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1146.366047][T22563]  ? __pfx_ethnl_default_start+0x10/0x10
[ 1146.366067][T22563]  ? __pfx_ethnl_default_done+0x10/0x10
[ 1146.366100][T22563]  netlink_rcv_skb+0x2a0/0x490
[ 1146.366119][T22563]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1146.366145][T22563]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1146.366185][T22563]  ? down_read+0x1ad/0x2e0
[ 1146.366210][T22563]  genl_rcv+0x28/0x40
[ 1146.366231][T22563]  netlink_unicast+0x758/0x8d0
[ 1146.366268][T22563]  netlink_sendmsg+0x805/0xb30
[ 1146.366305][T22563]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1146.366328][T22563]  ? aa_sock_msg_perm+0x94/0x160
[ 1146.366348][T22563]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1146.366368][T22563]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1146.366387][T22563]  __sock_sendmsg+0x219/0x270
[ 1146.366418][T22563]  sock_sendmsg+0x158/0x230
[ 1146.366446][T22563]  ? __pfx_sock_sendmsg+0x10/0x10
[ 1146.366485][T22563]  ? __asan_memset+0x22/0x50
[ 1146.366501][T22563]  ? iov_iter_bvec+0xb8/0x180
[ 1146.366526][T22563]  splice_to_socket+0x8ff/0xf10
[ 1146.366568][T22563]  ? __pfx_splice_to_socket+0x10/0x10
[ 1146.366586][T22563]  ? current_time+0x222/0x370
[ 1146.366635][T22563]  ? touch_atime+0xf1/0x6d0
[ 1146.366679][T22563]  ? __pfx_splice_to_socket+0x10/0x10
[ 1146.366700][T22563]  direct_splice_actor+0xfe/0x160
[ 1146.366724][T22563]  splice_direct_to_actor+0x5a5/0xcc0
[ 1146.366763][T22563]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1146.366784][T22563]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1146.366806][T22563]  ? __pfx_aa_file_perm+0x10/0x10
[ 1146.366832][T22563]  do_splice_direct+0x181/0x270
[ 1146.366855][T22563]  ? __pfx_do_splice_direct+0x10/0x10
[ 1146.366877][T22563]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 1146.366901][T22563]  ? bpf_lsm_file_permission+0x9/0x20
[ 1146.366923][T22563]  ? security_file_permission+0x75/0x290
[ 1146.366951][T22563]  ? rw_verify_area+0x258/0x650
[ 1146.366974][T22563]  do_sendfile+0x4da/0x7d0
[ 1146.366998][T22563]  ? __pfx_vfs_write+0x10/0x10
[ 1146.367023][T22563]  ? __pfx_do_sendfile+0x10/0x10
[ 1146.367047][T22563]  ? __fget_files+0x3a0/0x420
[ 1146.367077][T22563]  __se_sys_sendfile64+0x13e/0x190
[ 1146.367098][T22563]  ? rcu_is_watching+0x15/0xb0
[ 1146.367124][T22563]  ? __pfx___se_sys_sendfile64+0x10/0x10
[ 1146.367150][T22563]  ? do_syscall_64+0xba/0x210
[ 1146.367172][T22563]  do_syscall_64+0xf6/0x210
[ 1146.367192][T22563]  ? clear_bhb_loop+0x45/0xa0
[ 1146.367213][T22563]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1146.367229][T22563] RIP: 0033:0x7fc456f8e969
[ 1146.367243][T22563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1146.367258][T22563] RSP: 002b:00007fc457ed6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1146.367276][T22563] RAX: ffffffffffffffda RBX: 00007fc4571b5fa0 RCX: 00007fc456f8e969
[ 1146.367296][T22563] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000009
[ 1146.367307][T22563] RBP: 00007fc457ed6090 R08: 0000000000000000 R09: 0000000000000000
[ 1146.367318][T22563] R10: 000000010000a007 R11: 0000000000000246 R12: 0000000000000002
[ 1146.367329][T22563] R13: 0000000000000000 R14: 00007fc4571b5fa0 R15: 00007fc4572dfa28
[ 1146.367353][T22563]  </TASK>
[ 1148.215204][T22589] syzkaller1: entered promiscuous mode
[ 1148.221324][T22589] syzkaller1: entered allmulticast mode
[ 1148.476639][T22590] kvm: emulating exchange as write
[ 1148.969875][T22569] syz.6.5078 (22569): drop_caches: 3
[ 1149.515710][T22597] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5086'.
[ 1149.865586][ T5832] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[ 1150.093283][T22623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5092'.
[ 1150.105978][ T5832] usb 7-1: Using ep0 maxpacket: 32
[ 1150.145689][ T5832] usb 7-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1150.164417][ T5832] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1150.206913][ T5832] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1150.222176][T22622] input: syz0 as /devices/virtual/input/input121
[ 1150.228868][ T5832] usb 7-1: config 1 has no interface number 0
[ 1150.235018][ T5832] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1150.268258][ T5832] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 1150.305479][ T5832] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1150.324746][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1150.356885][ T5832] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found
[ 1150.554301][ T5832] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached
[ 1150.971682][ T5832] usb 7-1: USB disconnect, device number 31
[ 1150.988931][ T5832] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected
[ 1151.213172][T22639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1151.222568][T22639] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1151.239853][T22639] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1152.695739][ T5141] Bluetooth: hci1: command 0x0406 tx timeout
[ 1153.047390][ T3607] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 1153.208349][ T3607] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1153.225444][ T3607] usb 2-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config
[ 1153.250791][ T3607] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1153.291746][ T3607] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1153.341367][ T3607] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1153.351016][ T3607] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1153.370896][ T3607] usb 2-1: Product: syz
[ 1153.375106][ T3607] usb 2-1: Manufacturer: syz
[ 1153.462948][ T3607] cdc_wdm 2-1:1.0: skipping garbage
[ 1153.487001][ T3607] cdc_wdm 2-1:1.0: skipping garbage
[ 1153.502564][ T3607] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1153.700127][   T30] kauditd_printk_skb: 174 callbacks suppressed
[ 1153.700148][   T30] audit: type=1326 audit(1746651260.597:8096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22659 comm="syz.1.5104" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc456f8e969 code=0x0
[ 1153.842305][ T3607] usb 2-1: USB disconnect, device number 64
[ 1154.793021][T22677] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5109'.
[ 1154.999497][T22678] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1155.735673][   T30] audit: type=1326 audit(1746651262.617:8097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22692 comm="syz.4.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400b98e969 code=0x7ffc0000
[ 1155.788835][T22691] netlink: 'syz.2.5112': attribute type 10 has an invalid length.
[ 1155.810290][T22691] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5112'.
[ 1155.831549][T22691] batadv0: entered promiscuous mode
[ 1155.951430][T22691] batadv0: entered allmulticast mode
[ 1155.956298][   T30] audit: type=1326 audit(1746651262.617:8098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22692 comm="syz.4.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400b98e969 code=0x7ffc0000
[ 1156.012661][T22691] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[ 1156.040571][   T30] audit: type=1326 audit(1746651262.627:8099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22692 comm="syz.4.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f400b98e969 code=0x7ffc0000
[ 1156.065456][T21391] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[ 1156.076248][   T30] audit: type=1326 audit(1746651262.627:8100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22692 comm="syz.4.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400b98e969 code=0x7ffc0000
[ 1156.104822][   T30] audit: type=1326 audit(1746651262.627:8101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22692 comm="syz.4.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400b98e969 code=0x7ffc0000
[ 1156.235535][T21391] usb 2-1: Using ep0 maxpacket: 8
[ 1156.245836][   T30] audit: type=1326 audit(1746651262.657:8102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22692 comm="syz.4.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f400b98d2d0 code=0x7ffc0000
[ 1156.275740][   T30] audit: type=1326 audit(1746651262.657:8103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22692 comm="syz.4.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f400b98e56b code=0x7ffc0000
[ 1156.323039][T22700] netlink: 'syz.0.5116': attribute type 4 has an invalid length.
[ 1156.335438][T22700] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5116'.
[ 1156.355752][T21391] usb 2-1: config 11 has an invalid interface number: 95 but max is 0
[ 1156.364026][T21391] usb 2-1: config 11 has no interface number 0
[ 1156.391770][   T30] audit: type=1326 audit(1746651262.657:8104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22692 comm="syz.4.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400b98e969 code=0x7ffc0000
[ 1156.435941][T21391] usb 2-1: config 11 interface 95 altsetting 64 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1156.460329][T21391] usb 2-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1156.479711][   T30] audit: type=1326 audit(1746651262.657:8105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22692 comm="syz.4.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400b98e969 code=0x7ffc0000
[ 1156.503680][T21391] usb 2-1: config 11 interface 95 has no altsetting 0
[ 1156.531451][T21391] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d
[ 1156.541111][T21391] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1156.549546][T21391] usb 2-1: Product: syz
[ 1156.554249][T21391] usb 2-1: Manufacturer: syz
[ 1156.558994][T21391] usb 2-1: SerialNumber: syz
[ 1156.639078][T22707] syzkaller1: entered promiscuous mode
[ 1156.662701][T22707] syzkaller1: entered allmulticast mode
[ 1156.778562][T21391] usbtouchscreen 2-1:11.95: probe with driver usbtouchscreen failed with error -90
[ 1156.860650][T21391] usb 2-1: USB disconnect, device number 65
[ 1157.369148][T22721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1157.378145][T22721] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1158.643353][ T3607] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[ 1158.805566][ T3607] usb 7-1: Using ep0 maxpacket: 8
[ 1158.844582][ T3607] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1158.857498][ T3607] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1158.868415][ T3607] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1158.878847][ T3607] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1158.892425][ T3607] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1158.901920][ T3607] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1159.118133][ T3607] usb 7-1: GET_CAPABILITIES returned 0
[ 1159.119678][T22740] FAULT_INJECTION: forcing a failure.
[ 1159.119678][T22740] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1159.125799][ T3607] usbtmc 7-1:16.0: can't read capabilities
[ 1159.184051][T22740] CPU: 0 UID: 0 PID: 22740 Comm: syz.1.5129 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) 
[ 1159.184077][T22740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1159.184089][T22740] Call Trace:
[ 1159.184097][T22740]  <TASK>
[ 1159.184105][T22740]  dump_stack_lvl+0x189/0x250
[ 1159.184139][T22740]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1159.184164][T22740]  ? __pfx__printk+0x10/0x10
[ 1159.184194][T22740]  should_fail_ex+0x414/0x560
[ 1159.184226][T22740]  _copy_to_iter+0x575/0x15a0
[ 1159.184256][T22740]  ? __pfx__copy_to_iter+0x10/0x10
[ 1159.184274][T22740]  ? __skb_try_recv_from_queue+0x2b2/0x730
[ 1159.184306][T22740]  ? __skb_try_recv_datagram+0x3da/0x4e0
[ 1159.184337][T22740]  __skb_datagram_iter+0x100/0x960
[ 1159.184363][T22740]  ? __pfx_simple_copy_to_iter+0x10/0x10
[ 1159.184396][T22740]  skb_copy_datagram_iter+0xc5/0x230
[ 1159.184425][T22740]  netlink_recvmsg+0x2c9/0xe00
[ 1159.184453][T22740]  ? __pfx_netlink_recvmsg+0x10/0x10
[ 1159.184476][T22740]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1159.184497][T22740]  ? aa_sock_msg_perm+0x94/0x160
[ 1159.184517][T22740]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[ 1159.184535][T22740]  ? security_socket_recvmsg+0x7e/0x2e0
[ 1159.184559][T22740]  ? __pfx_netlink_recvmsg+0x10/0x10
[ 1159.184578][T22740]  sock_recvmsg+0x229/0x270
[ 1159.184599][T22740]  ____sys_recvmsg+0x1c9/0x460
[ 1159.184631][T22740]  ? __pfx_____sys_recvmsg+0x10/0x10
[ 1159.184668][T22740]  ? import_iovec+0x74/0xa0
[ 1159.184695][T22740]  ___sys_recvmsg+0x1b5/0x510
[ 1159.184732][T22740]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1159.184777][T22740]  ? __fget_files+0x3a0/0x420
[ 1159.184810][T22740]  do_recvmmsg+0x307/0x760
[ 1159.184841][T22740]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1159.184876][T22740]  ? _copy_from_user+0x94/0xb0
[ 1159.184914][T22740]  __x64_sys_recvmmsg+0x1af/0x240
[ 1159.184937][T22740]  ? rcu_is_watching+0x15/0xb0
[ 1159.184964][T22740]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1159.184992][T22740]  ? do_syscall_64+0xba/0x210
[ 1159.185016][T22740]  do_syscall_64+0xf6/0x210
[ 1159.185038][T22740]  ? clear_bhb_loop+0x45/0xa0
[ 1159.185060][T22740]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1159.185078][T22740] RIP: 0033:0x7fc456f8e969
[ 1159.185093][T22740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1159.185107][T22740] RSP: 002b:00007fc457ed6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1159.185126][T22740] RAX: ffffffffffffffda RBX: 00007fc4571b5fa0 RCX: 00007fc456f8e969
[ 1159.185138][T22740] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[ 1159.185150][T22740] RBP: 00007fc457ed6090 R08: 0000200000003700 R09: 0000000000000000
[ 1159.185162][T22740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1159.185173][T22740] R13: 0000000000000000 R14: 00007fc4571b5fa0 R15: 00007fc4572dfa28
[ 1159.185200][T22740]  </TASK>
[ 1159.522686][ T3607] usb 7-1: USB disconnect, device number 32
[ 1160.573007][T22755] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5133'.
[ 1161.135502][T21391] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[ 1161.233011][T22770] netlink: 'syz.4.5140': attribute type 10 has an invalid length.
[ 1161.328188][T21391] usb 7-1: Using ep0 maxpacket: 16
[ 1161.342392][T21391] usb 7-1: config index 0 descriptor too short (expected 16456, got 72)
[ 1161.361038][T21391] usb 7-1: config 0 has an invalid interface number: 125 but max is 1
[ 1161.385150][T21391] usb 7-1: config 0 has an invalid interface number: 125 but max is 1
[ 1161.403592][T22772] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1161.417412][T21391] usb 7-1: config 0 has an invalid interface number: 125 but max is 1
[ 1161.446362][T21391] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1161.471322][T21391] usb 7-1: config 0 has no interface number 0
[ 1161.503873][T21391] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[ 1161.560969][T21391] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[ 1161.610896][T21391] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1161.629889][T22776] FAULT_INJECTION: forcing a failure.
[ 1161.629889][T22776] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1161.704616][T21391] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1161.717831][T22776] CPU: 1 UID: 0 PID: 22776 Comm: syz.4.5142 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) 
[ 1161.717860][T22776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1161.717872][T22776] Call Trace:
[ 1161.717881][T22776]  <TASK>
[ 1161.717889][T22776]  dump_stack_lvl+0x189/0x250
[ 1161.717922][T22776]  ? __lock_acquire+0xaac/0xd20
[ 1161.717953][T22776]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1161.717981][T22776]  ? __pfx__printk+0x10/0x10
[ 1161.718001][T22776]  ? __might_fault+0xb0/0x130
[ 1161.718041][T22776]  should_fail_ex+0x414/0x560
[ 1161.718083][T22776]  _copy_from_user+0x2d/0xb0
[ 1161.718114][T22776]  kstrtouint_from_user+0xc4/0x170
[ 1161.718142][T22776]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1161.718185][T22776]  proc_fail_nth_write+0x88/0x240
[ 1161.718216][T22776]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1161.718252][T22776]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1161.718284][T22776]  vfs_write+0x27b/0xa90
[ 1161.718345][T22776]  ? __pfx_vfs_write+0x10/0x10
[ 1161.718371][T22776]  ? __fget_files+0x2a/0x420
[ 1161.718406][T22776]  ? __fget_files+0x3a0/0x420
[ 1161.718432][T22776]  ? __fget_files+0x2a/0x420
[ 1161.718471][T22776]  ksys_write+0x145/0x250
[ 1161.718494][T22776]  ? rcu_is_watching+0x15/0xb0
[ 1161.718529][T22776]  ? __pfx_ksys_write+0x10/0x10
[ 1161.718558][T22776]  ? do_syscall_64+0xba/0x210
[ 1161.718601][T22776]  do_syscall_64+0xf6/0x210
[ 1161.718628][T22776]  ? clear_bhb_loop+0x45/0xa0
[ 1161.718655][T22776]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1161.718675][T22776] RIP: 0033:0x7f400b98d41f
[ 1161.718695][T22776] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 1161.718714][T22776] RSP: 002b:00007f400c843030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1161.718736][T22776] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f400b98d41f
[ 1161.718752][T22776] RDX: 0000000000000001 RSI: 00007f400c8430a0 RDI: 0000000000000005
[ 1161.718766][T22776] RBP: 00007f400c843090 R08: 0000000000000000 R09: 0000000000000000
[ 1161.718780][T22776] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[ 1161.718793][T22776] R13: 0000000000000000 R14: 00007f400bbb5fa0 R15: 00007f400bcdfa28
[ 1161.718826][T22776]  </TASK>
[ 1162.299663][T21391] usb 7-1: config 0 interface 125 has no altsetting 0
[ 1162.361528][T21391] usb 7-1: config 0 interface 125 has no altsetting 2
[ 1162.400032][T22784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5145'.
[ 1162.453176][T21391] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[ 1162.469697][T21391] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1162.515571][T21391] usb 7-1: Product: syz
[ 1162.587175][T21391] usb 7-1: Manufacturer: syz
[ 1162.591834][T21391] usb 7-1: SerialNumber: syz
[ 1162.683200][T21391] usb 7-1: config 0 descriptor??
[ 1162.699158][T21391] usb 7-1: selecting invalid altsetting 2
[ 1163.167390][ T5886] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 1163.387849][ T5886] usb 2-1: Using ep0 maxpacket: 8
[ 1163.720199][    C0] usb 7-1: async_complete: urb error -32
[ 1163.731608][T22763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1163.742130][T21391] get_1284_register: usb error -32
[ 1163.768702][T22763] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1163.786602][T22803] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5150'.
[ 1163.807861][T22803] 8021q: VLANs not supported on gre0
[ 1163.835838][T21391] uss720 7-1:0.125: probe with driver uss720 failed with error -32
[ 1163.936995][ T5832] usb 7-1: USB disconnect, device number 33
[ 1164.672732][T22820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5157'.
[ 1164.943022][T22824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5158'.
[ 1165.148255][T22824] input: syz0 as /devices/virtual/input/input123
[ 1165.311111][T22812] [U] ³•¯
[ 1165.955509][ T3607] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[ 1166.002147][ T5886] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1166.021123][ T5886] usb 2-1: no configurations
[ 1166.095022][ T5886] usb 2-1: can't read configurations, error -22
[ 1166.107934][T22829] FAULT_INJECTION: forcing a failure.
[ 1166.107934][T22829] name failslab, interval 1, probability 0, space 0, times 0
[ 1166.125627][ T3607] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1166.138775][ T3607] usb 7-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c
[ 1166.175469][T22829] CPU: 1 UID: 0 PID: 22829 Comm: syz.2.5160 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) 
[ 1166.175495][T22829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1166.175507][T22829] Call Trace:
[ 1166.175515][T22829]  <TASK>
[ 1166.175537][T22829]  dump_stack_lvl+0x189/0x250
[ 1166.175572][T22829]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1166.175598][T22829]  ? __pfx__printk+0x10/0x10
[ 1166.175637][T22829]  ? __pfx___might_resched+0x10/0x10
[ 1166.175656][T22829]  ? fs_reclaim_acquire+0x7d/0x100
[ 1166.175690][T22829]  should_fail_ex+0x414/0x560
[ 1166.175737][T22829]  should_failslab+0xa8/0x100
[ 1166.175762][T22829]  __kmalloc_noprof+0xcb/0x4f0
[ 1166.175784][T22829]  ? tomoyo_encode+0x28b/0x550
[ 1166.175810][T22829]  tomoyo_encode+0x28b/0x550
[ 1166.175838][T22829]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 1166.175862][T22829]  ? tomoyo_domain+0xda/0x130
[ 1166.175890][T22829]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1166.175919][T22829]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1166.175951][T22829]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1166.175983][T22829]  ? sb_end_write+0xe9/0x1c0
[ 1166.176026][T22829]  ? vfs_write+0x8d8/0xa90
[ 1166.176083][T22829]  ? ksys_write+0x1e1/0x250
[ 1166.176103][T22829]  ? rcu_is_watching+0x15/0xb0
[ 1166.176136][T22829]  security_file_ioctl+0xcb/0x2d0
[ 1166.176179][T22829]  __se_sys_ioctl+0x47/0x170
[ 1166.176201][T22829]  do_syscall_64+0xf6/0x210
[ 1166.176225][T22829]  ? clear_bhb_loop+0x45/0xa0
[ 1166.176248][T22829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1166.176265][T22829] RIP: 0033:0x7f593918e969
[ 1166.176288][T22829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1166.176320][T22829] RSP: 002b:00007f593a093038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1166.176341][T22829] RAX: ffffffffffffffda RBX: 00007f59393b5fa0 RCX: 00007f593918e969
[ 1166.176356][T22829] RDX: 00002000000000c0 RSI: 00000000c020aa08 RDI: 0000000000000004
[ 1166.176369][T22829] RBP: 00007f593a093090 R08: 0000000000000000 R09: 0000000000000000
[ 1166.176381][T22829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1166.176392][T22829] R13: 0000000000000000 R14: 00007f59393b5fa0 R15: 00007f59394dfa28
[ 1166.176433][T22829]  </TASK>
[ 1166.176556][T22829] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1166.435447][ T3607] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1166.464824][ T3607] usb 7-1: config 0 descriptor??
[ 1166.503040][ T3607] usb 7-1: bad CDC descriptors
[ 1166.712033][   T30] kauditd_printk_skb: 15 callbacks suppressed
[ 1166.712052][   T30] audit: type=1326 audit(1746651273.607:8121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22826 comm="syz.6.5159" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5330d8e969 code=0x0
[ 1166.712278][T22833] FAULT_INJECTION: forcing a failure.
[ 1166.712278][T22833] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1166.740183][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1166.835404][T22833] CPU: 1 UID: 0 PID: 22833 Comm: syz.2.5162 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) 
[ 1166.835435][T22833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1166.835447][T22833] Call Trace:
[ 1166.835456][T22833]  <TASK>
[ 1166.835465][T22833]  dump_stack_lvl+0x189/0x250
[ 1166.835498][T22833]  ? __lock_acquire+0xaac/0xd20
[ 1166.835529][T22833]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1166.835557][T22833]  ? __pfx__printk+0x10/0x10
[ 1166.835578][T22833]  ? __might_fault+0xb0/0x130
[ 1166.835614][T22833]  should_fail_ex+0x414/0x560
[ 1166.835652][T22833]  _copy_from_user+0x2d/0xb0
[ 1166.835681][T22833]  ___sys_sendmsg+0x158/0x2a0
[ 1166.835711][T22833]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1166.835774][T22833]  ? __fget_files+0x2a/0x420
[ 1166.835799][T22833]  ? __fget_files+0x3a0/0x420
[ 1166.835835][T22833]  __x64_sys_sendmsg+0x19b/0x260
[ 1166.835864][T22833]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1166.835906][T22833]  ? do_syscall_64+0xba/0x210
[ 1166.835935][T22833]  do_syscall_64+0xf6/0x210
[ 1166.835958][T22833]  ? clear_bhb_loop+0x45/0xa0
[ 1166.835982][T22833]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1166.836010][T22833] RIP: 0033:0x7f593918e969
[ 1166.836029][T22833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1166.836045][T22833] RSP: 002b:00007f593a093038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1166.836066][T22833] RAX: ffffffffffffffda RBX: 00007f59393b5fa0 RCX: 00007f593918e969
[ 1166.836080][T22833] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003
[ 1166.836093][T22833] RBP: 00007f593a093090 R08: 0000000000000000 R09: 0000000000000000
[ 1166.836105][T22833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1166.836117][T22833] R13: 0000000000000000 R14: 00007f59393b5fa0 R15: 00007f59394dfa28
[ 1166.836148][T22833]  </TASK>
[ 1167.031485][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1167.048755][T22839] xt_recent: Unsupported userspace flags (000000de)
[ 1167.228476][T22844] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5165'.
[ 1167.650137][T22859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5170'.
[ 1167.670410][T22856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5168'.
[ 1167.694685][T22859] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1167.704829][T22859] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1167.718824][T22859] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1167.730657][T22859] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1167.741607][T22859] geneve2: entered promiscuous mode
[ 1167.887189][T22868] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5170'.
[ 1167.943786][T22870] netlink: 'syz.0.5172': attribute type 1 has an invalid length.
[ 1168.245860][T21391] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[ 1168.406812][T21391] usb 2-1: Using ep0 maxpacket: 8
[ 1168.455649][ T3607] usb 7-1: USB disconnect, device number 34
[ 1168.955438][ T3607] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[ 1169.425453][ T3607] usb 7-1: Using ep0 maxpacket: 32
[ 1169.433499][ T3607] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1169.443119][ T3607] usb 7-1: config 1 interface 0 altsetting 38 bulk endpoint 0x1 has invalid maxpacket 64
[ 1169.470479][ T3607] usb 7-1: config 1 interface 0 altsetting 38 bulk endpoint 0x82 has invalid maxpacket 64
[ 1169.510974][ T3607] usb 7-1: config 1 interface 0 has no altsetting 0
[ 1169.595074][ T3607] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1169.604931][ T3607] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1169.613730][ T3607] usb 7-1: Product: �
[ 1169.622516][ T3607] usb 7-1: Manufacturer: 筓껚妱ꓣ퓄맙舑≯�ਦઓ憟뮳삹₉
[ 1169.642728][ T3607] usb 7-1: SerialNumber: 㸪
[ 1169.661661][T22877] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1169.669804][T22877] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1169.920268][ T3607] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 38 proto 2 vid 0x0525 pid 0xA4A8
[ 1169.963531][ T3607] usb 7-1: USB disconnect, device number 35
[ 1170.032575][ T3607] usblp0: removed
[ 1170.574127][T22884] [U] ³•¯
[ 1170.693068][T22893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1170.733744][T22893] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1171.452001][T21391] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1171.471199][T21391] usb 2-1: no configurations
[ 1171.501223][T22907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5182'.
[ 1171.513478][T21391] usb 2-1: can't read configurations, error -22
[ 1171.797469][T22913] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5184'.
[ 1172.928392][   T30] audit: type=1326 audit(1746651279.827:8122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22923 comm="syz.6.5188" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5330d8e969 code=0x0
[ 1172.990420][T22928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5187'.
[ 1173.005196][T22928] syzkaller1: entered promiscuous mode
[ 1173.010929][T22928] syzkaller1: entered allmulticast mode
[ 1173.018501][T22928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5187'.
[ 1173.415801][ T3607] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[ 1173.575540][ T3607] usb 2-1: Using ep0 maxpacket: 16
[ 1173.582534][ T3607] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[ 1173.590737][ T3607] usb 2-1: config 0 has no interface number 0
[ 1173.597975][ T3607] usb 2-1: config 0 interface 41 has no altsetting 0
[ 1173.629930][ T3607] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1173.639294][ T3607] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1173.647389][ T3607] usb 2-1: Product: syz
[ 1173.652393][ T3607] usb 2-1: Manufacturer: syz
[ 1173.657192][ T3607] usb 2-1: SerialNumber: syz
[ 1173.664813][ T3607] usb 2-1: config 0 descriptor??
[ 1173.673516][ T3607] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -22
[ 1173.932640][T22926] delete_channel: no stack
[ 1173.939022][T20943] usb 2-1: USB disconnect, device number 70
[ 1174.153241][T22939] bond0: entered promiscuous mode
[ 1174.161261][T22939] bond_slave_0: entered promiscuous mode
[ 1174.168700][T22939] bond_slave_1: entered promiscuous mode
[ 1174.179564][T22939] bond1: entered promiscuous mode
[ 1174.187552][T22939] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1174.262822][T22939] bond0: left promiscuous mode
[ 1174.290394][T22939] bond_slave_0: left promiscuous mode
[ 1174.342601][T22939] bond_slave_1: left promiscuous mode
[ 1174.348400][T22939] bond1: left promiscuous mode
[ 1174.482272][T22950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5193'.
[ 1174.642487][T22942] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1)
[ 1174.656445][T21391] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[ 1174.840682][T21391] usb 7-1: Using ep0 maxpacket: 16
[ 1175.037704][T21391] usb 7-1: config index 0 descriptor too short (expected 1828, got 36)
[ 1175.055572][T21391] usb 7-1: config 0 has an invalid interface number: 0 but max is -1
[ 1175.063852][T21391] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1175.074751][T21391] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1175.085262][T21391] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[ 1175.095815][T21391] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1175.131638][T21391] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e
[ 1175.161160][T21391] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1175.175625][ T3607] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[ 1175.272515][T21391] usb 7-1: Product: syz
[ 1175.315114][T21391] usb 7-1: Manufacturer: syz
[ 1175.346013][ T3607] usb 2-1: Using ep0 maxpacket: 16
[ 1175.352052][ T3607] usb 2-1: too many configurations: 239, using maximum allowed: 8
[ 1175.362405][ T3607] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1175.370083][ T3607] usb 2-1: can't read configurations, error -61
[ 1175.383504][   T30] audit: type=1326 audit(1746651282.277:8123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22956 comm="syz.4.5196" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f400b98e969 code=0x0
[ 1175.460819][T21391] usb 7-1: SerialNumber: syz
[ 1175.483760][T21391] usb 7-1: config 0 descriptor??
[ 1175.501918][T21391] keyspan 7-1:0.0: Keyspan 2 port adapter converter detected
[ 1175.520864][ T3607] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[ 1175.539058][T21391] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 87
[ 1175.549024][T21391] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 7
[ 1175.580688][T21391] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 81
[ 1175.629792][T21391] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 1
[ 1175.638799][T21391] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 2
[ 1175.648597][T21391] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 85
[ 1175.658896][T21391] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 5
[ 1175.674118][T21391] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 1175.716527][T21391] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 83
[ 1175.795524][T21391] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 3
[ 1175.815605][ T3607] usb 2-1: Using ep0 maxpacket: 16
[ 1175.895786][T21391] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 4
[ 1175.920338][ T3607] usb 2-1: too many configurations: 239, using maximum allowed: 8
[ 1175.930145][ T3607] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1175.937939][ T3607] usb 2-1: can't read configurations, error -61
[ 1175.954645][ T3607] usb usb2-port1: attempt power cycle
[ 1176.021263][T21391] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 86
[ 1176.086692][T21391] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 6
[ 1176.149923][T21391] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 1176.315492][ T3607] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[ 1176.346952][ T3607] usb 2-1: Using ep0 maxpacket: 16
[ 1176.436374][T22977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1176.445068][ T3607] usb 2-1: too many configurations: 239, using maximum allowed: 8
[ 1176.453591][T22977] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1176.487398][ T3607] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1176.495008][ T3607] usb 2-1: can't read configurations, error -61
[ 1176.513051][T22977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1176.522085][T22977] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1176.635737][ T3607] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[ 1176.819389][ T3607] usb 2-1: Using ep0 maxpacket: 16
[ 1176.825088][ T3607] usb 2-1: too many configurations: 239, using maximum allowed: 8
[ 1176.834388][ T3607] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1176.842016][ T3607] usb 2-1: can't read configurations, error -61
[ 1176.850313][ T3607] usb usb2-port1: unable to enumerate USB device
[ 1177.141099][ T3607] usb 7-1: USB disconnect, device number 36
[ 1177.150727][ T3607] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 1177.194863][ T3607] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 1177.230503][ T3607] keyspan 7-1:0.0: device disconnected
[ 1177.260446][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.266996][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.469290][T22983] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5201'.
[ 1177.697828][T22985] syzkaller1: entered promiscuous mode
[ 1177.704647][T22985] syzkaller1: entered allmulticast mode
[ 1179.025470][ T5886] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[ 1179.196950][ T5886] usb 7-1: Using ep0 maxpacket: 32
[ 1179.204096][ T5886] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1179.219304][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1179.245174][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1179.276333][ T5886] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1179.297234][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1179.323318][ T5886] usb 7-1: config 0 descriptor??
[ 1179.334945][T22995] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1179.348669][ T5886] hub 7-1:0.0: USB hub found
[ 1179.472112][T23010] usb usb8: usbfs: process 23010 (syz.0.5209) did not claim interface 0 before use
[ 1179.541743][T23012] FAULT_INJECTION: forcing a failure.
[ 1179.541743][T23012] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1179.559544][ T5886] hub 7-1:0.0: 2 ports detected
[ 1179.559557][T23012] CPU: 0 UID: 0 PID: 23012 Comm: syz.0.5210 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) 
[ 1179.559585][T23012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1179.559597][T23012] Call Trace:
[ 1179.559606][T23012]  <TASK>
[ 1179.559614][T23012]  dump_stack_lvl+0x189/0x250
[ 1179.559650][T23012]  ? __lock_acquire+0xaac/0xd20
[ 1179.559685][T23012]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1179.559718][T23012]  ? __pfx__printk+0x10/0x10
[ 1179.559740][T23012]  ? __might_fault+0xb0/0x130
[ 1179.559780][T23012]  should_fail_ex+0x414/0x560
[ 1179.559820][T23012]  _copy_from_user+0x2d/0xb0
[ 1179.559851][T23012]  ___sys_recvmsg+0x12e/0x510
[ 1179.559888][T23012]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1179.559951][T23012]  ? __might_fault+0xb0/0x130
[ 1179.559982][T23012]  do_recvmmsg+0x307/0x760
[ 1179.560020][T23012]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1179.560063][T23012]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1179.560110][T23012]  __x64_sys_recvmmsg+0x190/0x240
[ 1179.560140][T23012]  ? rcu_is_watching+0x15/0xb0
[ 1179.560173][T23012]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1179.560208][T23012]  ? do_syscall_64+0xba/0x210
[ 1179.560239][T23012]  do_syscall_64+0xf6/0x210
[ 1179.560266][T23012]  ? clear_bhb_loop+0x45/0xa0
[ 1179.560293][T23012]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1179.560313][T23012] RIP: 0033:0x7efe7a58e969
[ 1179.560333][T23012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1179.560351][T23012] RSP: 002b:00007efe7b44e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1179.560374][T23012] RAX: ffffffffffffffda RBX: 00007efe7a7b5fa0 RCX: 00007efe7a58e969
[ 1179.560391][T23012] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005
[ 1179.560405][T23012] RBP: 00007efe7b44e090 R08: 0000000000000000 R09: 0000000000000000
[ 1179.560419][T23012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1179.560431][T23012] R13: 0000000000000000 R14: 00007efe7a7b5fa0 R15: 00007efe7a8dfa28
[ 1179.560475][T23012]  </TASK>
[ 1179.623666][T23014] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[ 1180.039227][ T5886] hub 7-1:0.0: set hub depth failed
[ 1180.076748][ T5886] usb 7-1: USB disconnect, device number 37
[ 1180.235605][T23023] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[ 1180.366033][T20943] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[ 1180.564240][T23029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5214'.
[ 1180.580137][T20943] usb 2-1: config 0 has no interfaces?
[ 1180.596565][T23029] syzkaller1: entered promiscuous mode
[ 1180.620898][T23029] syzkaller1: entered allmulticast mode
[ 1180.632450][T23029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5214'.
[ 1180.660576][T20943] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1180.674148][T20943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1180.685560][T20943] usb 2-1: Product: syz
[ 1180.689917][T20943] usb 2-1: Manufacturer: syz
[ 1180.694828][T20943] usb 2-1: SerialNumber: syz
[ 1180.710609][T20943] usb 2-1: config 0 descriptor??
[ 1180.982396][T23022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1180.999039][T23022] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1181.938031][T23043] input: syz1 as /devices/virtual/input/input124
[ 1181.967369][T23043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1181.979767][T23043] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1182.045051][T23041] ip6tnl1: entered promiscuous mode
[ 1182.307881][T23046] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1183.073285][T20943] usb 2-1: USB disconnect, device number 75
[ 1183.444996][ T5886] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[ 1183.609459][ T5886] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1183.618361][ T5886] usb 7-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config
[ 1183.629705][ T5886] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1183.658318][ T5886] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1183.705461][ T5883] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 1183.733765][ T5886] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1183.743828][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1183.758683][ T5886] usb 7-1: Product: syz
[ 1183.768549][ T5886] usb 7-1: Manufacturer: syz
[ 1183.787745][ T5886] cdc_wdm 7-1:1.0: skipping garbage
[ 1183.800067][ T5886] cdc_wdm 7-1:1.0: skipping garbage
[ 1183.815637][ T5886] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1183.994046][   T30] audit: type=1326 audit(1746651290.887:8124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23061 comm="syz.6.5225" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5330d8e969 code=0x0
[ 1184.094008][ T5883] usb 2-1: config 0 has no interfaces?
[ 1184.111475][ T5886] usb 7-1: USB disconnect, device number 38
[ 1184.133658][ T5883] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1184.143206][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1184.177323][ T5883] usb 2-1: Product: syz
[ 1184.227710][T23070] FAULT_INJECTION: forcing a failure.
[ 1184.227710][T23070] name failslab, interval 1, probability 0, space 0, times 0
[ 1184.240737][T23070] CPU: 1 UID: 0 PID: 23070 Comm: syz.2.5229 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) 
[ 1184.240759][T23070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1184.240768][T23070] Call Trace:
[ 1184.240775][T23070]  <TASK>
[ 1184.240782][T23070]  dump_stack_lvl+0x189/0x250
[ 1184.240810][T23070]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1184.240832][T23070]  ? __pfx__printk+0x10/0x10
[ 1184.240865][T23070]  should_fail_ex+0x414/0x560
[ 1184.240894][T23070]  should_failslab+0xa8/0x100
[ 1184.240915][T23070]  __kmalloc_cache_noprof+0x70/0x3d0
[ 1184.240934][T23070]  ? sctp_add_bind_addr+0x8c/0x370
[ 1184.240956][T23070]  sctp_add_bind_addr+0x8c/0x370
[ 1184.240977][T23070]  sctp_copy_local_addr_list+0x30b/0x4e0
[ 1184.240998][T23070]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[ 1184.241016][T23070]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[ 1184.241036][T23070]  ? sctp_v6_is_any+0x64/0x80
[ 1184.241057][T23070]  ? sctp_copy_one_addr+0x93/0x360
[ 1184.241078][T23070]  sctp_bind_addr_copy+0xb3/0x3c0
[ 1184.241097][T23070]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[ 1184.241117][T23070]  sctp_connect_new_asoc+0x2e0/0x690
[ 1184.241143][T23070]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1184.241165][T23070]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1184.241194][T23070]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 1184.241212][T23070]  ? security_sctp_bind_connect+0x7e/0x2e0
[ 1184.241236][T23070]  sctp_sendmsg+0x155c/0x2810
[ 1184.241266][T23070]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1184.241291][T23070]  ? aa_sk_perm+0x81e/0x950
[ 1184.241309][T23070]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1184.241325][T23070]  ? sock_rps_record_flow+0x19/0x400
[ 1184.241348][T23070]  ? inet_sendmsg+0x2f4/0x370
[ 1184.241371][T23070]  __sock_sendmsg+0x19c/0x270
[ 1184.241397][T23070]  ____sys_sendmsg+0x52d/0x830
[ 1184.241420][T23070]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1184.241447][T23070]  ? import_iovec+0x74/0xa0
[ 1184.241469][T23070]  ___sys_sendmsg+0x21f/0x2a0
[ 1184.241490][T23070]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1184.241536][T23070]  ? __fget_files+0x2a/0x420
[ 1184.241555][T23070]  ? __fget_files+0x3a0/0x420
[ 1184.241581][T23070]  __sys_sendmmsg+0x227/0x430
[ 1184.241605][T23070]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1184.241631][T23070]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1184.241663][T23070]  ? ksys_write+0x1f0/0x250
[ 1184.241686][T23070]  ? rcu_is_watching+0x15/0xb0
[ 1184.241720][T23070]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1184.241741][T23070]  do_syscall_64+0xf6/0x210
[ 1184.241760][T23070]  ? clear_bhb_loop+0x45/0xa0
[ 1184.241778][T23070]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1184.241792][T23070] RIP: 0033:0x7f593918e969
[ 1184.241806][T23070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1184.241819][T23070] RSP: 002b:00007f593a093038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1184.241835][T23070] RAX: ffffffffffffffda RBX: 00007f59393b5fa0 RCX: 00007f593918e969
[ 1184.241846][T23070] RDX: 0000000000000001 RSI: 0000200000003a00 RDI: 0000000000000004
[ 1184.241864][T23070] RBP: 00007f593a093090 R08: 0000000000000000 R09: 0000000000000000
[ 1184.241873][T23070] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000002
[ 1184.241882][T23070] R13: 0000000000000000 R14: 00007f59393b5fa0 R15: 00007f59394dfa28
[ 1184.241905][T23070]  </TASK>
[ 1184.575644][ T5883] usb 2-1: Manufacturer: syz
[ 1184.580307][ T5883] usb 2-1: SerialNumber: syz
[ 1184.633270][ T5883] usb 2-1: config 0 descriptor??
[ 1186.568803][T22446] usb 2-1: USB disconnect, device number 76
[ 1186.654339][T23098] FAULT_INJECTION: forcing a failure.
[ 1186.654339][T23098] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1186.691926][T23098] CPU: 0 UID: 0 PID: 23098 Comm: syz.1.5240 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) 
[ 1186.691958][T23098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1186.691971][T23098] Call Trace:
[ 1186.691980][T23098]  <TASK>
[ 1186.691990][T23098]  dump_stack_lvl+0x189/0x250
[ 1186.692023][T23098]  ? __lock_acquire+0xaac/0xd20
[ 1186.692055][T23098]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1186.692084][T23098]  ? __pfx__printk+0x10/0x10
[ 1186.692106][T23098]  ? __might_fault+0xb0/0x130
[ 1186.692149][T23098]  should_fail_ex+0x414/0x560
[ 1186.692186][T23098]  _copy_from_user+0x2d/0xb0
[ 1186.692215][T23098]  userfaultfd_ioctl+0xaa0/0x4900
[ 1186.692238][T23098]  ? kasan_save_track+0x4f/0x80
[ 1186.692257][T23098]  ? kasan_save_track+0x3e/0x80
[ 1186.692279][T23098]  ? do_vfs_ioctl+0xf36/0x1eb0
[ 1186.692297][T23098]  ? __se_sys_ioctl+0x47/0x170
[ 1186.692314][T23098]  ? do_syscall_64+0xf6/0x210
[ 1186.692339][T23098]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1186.692362][T23098]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[ 1186.692409][T23098]  ? kasan_quarantine_put+0xdd/0x220
[ 1186.692440][T23098]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1186.692472][T23098]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1186.692504][T23098]  ? tomoyo_path_number_perm+0x4e2/0x5a0
[ 1186.692535][T23098]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1186.692569][T23098]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1186.692609][T23098]  ? vfs_write+0x8d8/0xa90
[ 1186.692667][T23098]  ? ksys_write+0x1e1/0x250
[ 1186.692688][T23098]  ? rcu_is_watching+0x15/0xb0
[ 1186.692730][T23098]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1186.692756][T23098]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[ 1186.692777][T23098]  __se_sys_ioctl+0xf9/0x170
[ 1186.692801][T23098]  do_syscall_64+0xf6/0x210
[ 1186.692827][T23098]  ? clear_bhb_loop+0x45/0xa0
[ 1186.692852][T23098]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1186.692872][T23098] RIP: 0033:0x7fc456f8e969
[ 1186.692890][T23098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1186.692908][T23098] RSP: 002b:00007fc457ed6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1186.692930][T23098] RAX: ffffffffffffffda RBX: 00007fc4571b5fa0 RCX: 00007fc456f8e969
[ 1186.692945][T23098] RDX: 00002000000000c0 RSI: 00000000c020aa08 RDI: 0000000000000004
[ 1186.692959][T23098] RBP: 00007fc457ed6090 R08: 0000000000000000 R09: 0000000000000000
[ 1186.692972][T23098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1186.692984][T23098] R13: 0000000000000000 R14: 00007fc4571b5fa0 R15: 00007fc4572dfa28
[ 1186.693014][T23098]  </TASK>
[ 1186.949578][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1187.004658][T23102] loop6: detected capacity change from 0 to 128
[ 1187.019014][T23102] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1187.028795][T23102] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1187.038131][T23102] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[ 1187.047612][T23102] buffer_io_error: 54 callbacks suppressed
[ 1187.047623][T23102] Buffer I/O error on dev loop6, logical block 0, lost async page write
[ 1187.384214][T23110] ALSA: mixer_oss: invalid OSS volume ''
[ 1187.931296][T21391] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[ 1188.086363][T21391] usb 2-1: Using ep0 maxpacket: 32
[ 1188.109135][T21391] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1188.290585][T21391] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 1188.341376][T21391] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1188.363635][T21391] usb 2-1: Product: syz
[ 1188.381680][T21391] usb 2-1: Manufacturer: syz
[ 1188.390652][T23123] netlink: 'syz.4.5249': attribute type 10 has an invalid length.
[ 1188.414073][T21391] usb 2-1: SerialNumber: syz
[ 1188.472347][T21391] usb 2-1: config 0 descriptor??
[ 1188.486171][T23123] loop6: detected capacity change from 0 to 63
[ 1188.495188][T21391] usb 2-1: bad CDC descriptors
[ 1188.501051][T21391] usb 2-1: unsupported MDLM descriptors
[ 1188.712985][T21391] usb 2-1: USB disconnect, device number 77
[ 1189.329784][T23137] netlink: 'syz.4.5253': attribute type 1 has an invalid length.
[ 1189.483151][T23140] bond5: entered promiscuous mode
[ 1189.560824][T23140] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1189.628135][T23140] bond4: (slave bond5): making interface the new active one
[ 1189.649504][T23140] bond4: (slave bond5): Enslaving as an active interface with an up link
[ 1189.685442][ T5883] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[ 1189.702149][T23137] macsec0: entered promiscuous mode
[ 1189.734442][T23137] bond4: entered promiscuous mode
[ 1189.761812][T23137] macsec0: entered allmulticast mode
[ 1189.780779][T23137] bond4: entered allmulticast mode
[ 1189.799196][T23137] bond5: entered allmulticast mode
[ 1189.946876][ T5883] usb 2-1: config 0 has no interfaces?
[ 1190.018484][ T5883] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1190.043342][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1190.080414][ T5883] usb 2-1: Product: syz
[ 1190.092328][ T5883] usb 2-1: Manufacturer: syz
[ 1190.147218][ T5883] usb 2-1: SerialNumber: syz
[ 1190.178038][ T5883] usb 2-1: config 0 descriptor??
[ 1190.360196][T23163] netlink: 'syz.0.5262': attribute type 10 has an invalid length.
[ 1190.795525][T21391] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[ 1190.958736][T21391] usb 7-1: config 0 has no interfaces?
[ 1190.968101][T21391] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1190.980456][T21391] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1190.990897][T21391] usb 7-1: Product: syz
[ 1190.995118][T21391] usb 7-1: Manufacturer: syz
[ 1191.047641][T21391] usb 7-1: SerialNumber: syz
[ 1191.065090][T21391] usb 7-1: config 0 descriptor??
[ 1191.349048][T23168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1191.359540][T23168] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1191.444828][T23179] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1191.855590][T23184] kernel profiling enabled (shift: 17)
[ 1191.994959][T23184] ALSA: mixer_oss: invalid OSS volume ''
[ 1192.673014][T23199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1192.687257][T23199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1193.297126][T23196] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5273'.
[ 1193.309217][T21391] usb 2-1: USB disconnect, device number 78
[ 1193.866211][T21391] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 1194.005599][T21391] usb 2-1: device descriptor read/64, error -71
[ 1194.280790][T21391] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 1194.360696][ T3607] usb 7-1: USB disconnect, device number 39
[ 1194.425507][T21391] usb 2-1: device descriptor read/64, error -71
[ 1194.555940][T21391] usb usb2-port1: attempt power cycle
[ 1194.895543][ T3607] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[ 1194.965644][T21391] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 1195.016623][T21391] usb 2-1: device descriptor read/8, error -71
[ 1195.079742][ T3607] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1195.115411][ T3607] usb 7-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config
[ 1195.159988][ T3607] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1195.179712][ T3607] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1195.220218][ T3607] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1195.240077][ T3607] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1195.255840][ T3607] usb 7-1: Product: syz
[ 1195.265622][T21391] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[ 1195.280504][ T3607] usb 7-1: Manufacturer: syz
[ 1195.307606][T21391] usb 2-1: device descriptor read/8, error -71
[ 1195.317972][ T3607] cdc_wdm 7-1:1.0: skipping garbage
[ 1195.385674][ T3607] cdc_wdm 7-1:1.0: skipping garbage
[ 1195.401240][ T3607] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1195.417543][T21391] usb usb2-port1: unable to enumerate USB device
[ 1195.528683][   T30] audit: type=1326 audit(1746651302.427:8125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23209 comm="syz.6.5277" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5330d8e969 code=0x0
[ 1195.657939][ T5886] usb 7-1: USB disconnect, device number 40
[ 1195.804283][T23227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5280'.
[ 1197.435491][ T5886] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 1197.620233][ T5886] usb 2-1: config 0 has no interfaces?
[ 1197.631481][ T5886] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1197.658055][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1197.738700][ T5886] usb 2-1: Product: syz
[ 1197.791301][ T5886] usb 2-1: Manufacturer: syz
[ 1197.895234][ T5886] usb 2-1: SerialNumber: syz
[ 1197.953149][ T5886] usb 2-1: config 0 descriptor??
[ 1198.070693][T23267] netlink: 'syz.4.5292': attribute type 1 has an invalid length.
[ 1198.213813][T23248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1198.240206][T23248] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1198.432302][T23267] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1198.624821][T23270] bond6: (slave veth3): Enslaving as an active interface with a down link
[ 1198.811141][T23273] bond6: (slave dummy0): making interface the new active one
[ 1198.883812][T23273] dummy0: entered promiscuous mode
[ 1198.915291][T23273] bond6: (slave dummy0): Enslaving as an active interface with an up link
[ 1198.980417][T23260] team0: Port device bond0 removed
[ 1199.013956][T23260] bond6: (slave dummy0): Releasing active interface
[ 1199.052014][T23260] dummy0: left promiscuous mode
[ 1199.102958][T23260] bridge_slave_0: left allmulticast mode
[ 1199.130388][T23260] bridge_slave_0: left promiscuous mode
[ 1199.155192][T23260] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1199.317866][T23260] bridge_slave_1: left allmulticast mode
[ 1199.333918][T23260] bridge_slave_1: left promiscuous mode
[ 1199.352763][T23260] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1199.383919][T23260] bond0: (slave bond_slave_0): Releasing backup interface
[ 1199.410010][T23260] bond0: (slave bond_slave_1): Releasing backup interface
[ 1199.421724][T23260] team0: Port device team_slave_0 removed
[ 1199.434636][T23260] team0: Port device team_slave_1 removed
[ 1199.441371][T23260] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1199.454677][T23260] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1199.474086][T23260] bond4: (slave bond5): Releasing backup interface
[ 1199.482336][T23260] bond5: left allmulticast mode
[ 1199.519939][T23260] bond6: (slave veth3): Releasing active interface
[ 1200.009879][T23301] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5299'.
[ 1200.092198][T23302] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1200.106076][T23297] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1200.142014][T23297] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1200.236591][T23297] veth1_vlan: left allmulticast mode
[ 1200.262402][T23297] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1200.272446][T23297] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1200.284295][T23297] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1200.293628][T23297] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1200.388814][T20943] usb 2-1: USB disconnect, device number 83
[ 1200.408042][T23297] bond1: left allmulticast mode
[ 1200.423083][T23297] bond2: left allmulticast mode
[ 1200.442702][T23297] bond1: left promiscuous mode
[ 1200.577412][T23309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5300'.
[ 1200.605181][T23297] bond3: left allmulticast mode
[ 1200.619781][T23297] bond4: left allmulticast mode
[ 1200.649197][T23297] bond3: left promiscuous mode
[ 1200.702633][T23297] bond5: left allmulticast mode
[ 1200.714344][T23297] bond6: left allmulticast mode
[ 1200.727333][T23297] bond5: left promiscuous mode
[ 1200.758937][T23297] bond8: left allmulticast mode
[ 1200.779482][T23297] bond9: left allmulticast mode
[ 1200.799460][T23297] bond8: left promiscuous mode
[ 1202.252948][T23322] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1202.359123][T23324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5305'.
[ 1204.384607][ T5886] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[ 1204.632477][ T5886] usb 7-1: config 0 has no interfaces?
[ 1204.653226][ T5886] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1204.686590][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1204.725140][ T5886] usb 7-1: Product: syz
[ 1204.762732][ T5886] usb 7-1: Manufacturer: syz
[ 1204.774260][ T5886] usb 7-1: SerialNumber: syz
[ 1204.912291][T23364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5314'.
[ 1204.938800][ T5886] usb 7-1: config 0 descriptor??
[ 1205.808010][T23367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1205.919786][T23367] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1205.951723][ T5883] usb 7-1: USB disconnect, device number 41
[ 1207.358395][T23379] FAULT_INJECTION: forcing a failure.
[ 1207.358395][T23379] name failslab, interval 1, probability 0, space 0, times 0
[ 1207.407319][T23379] CPU: 1 UID: 0 PID: 23379 Comm: syz.2.5318 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) 
[ 1207.407351][T23379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1207.407363][T23379] Call Trace:
[ 1207.407372][T23379]  <TASK>
[ 1207.407381][T23379]  dump_stack_lvl+0x189/0x250
[ 1207.407419][T23379]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1207.407448][T23379]  ? __pfx__printk+0x10/0x10
[ 1207.407483][T23379]  should_fail_ex+0x414/0x560
[ 1207.407520][T23379]  should_failslab+0xa8/0x100
[ 1207.407549][T23379]  __kmalloc_cache_noprof+0x70/0x3d0
[ 1207.407572][T23379]  ? sctp_add_bind_addr+0x8c/0x370
[ 1207.407602][T23379]  sctp_add_bind_addr+0x8c/0x370
[ 1207.407641][T23379]  sctp_copy_local_addr_list+0x30b/0x4e0
[ 1207.407670][T23379]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[ 1207.407695][T23379]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[ 1207.407722][T23379]  ? sctp_v6_is_any+0x64/0x80
[ 1207.407750][T23379]  ? sctp_copy_one_addr+0x93/0x360
[ 1207.407779][T23379]  sctp_bind_addr_copy+0xb3/0x3c0
[ 1207.407804][T23379]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[ 1207.407830][T23379]  sctp_connect_new_asoc+0x2e0/0x690
[ 1207.407864][T23379]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1207.407892][T23379]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1207.407931][T23379]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 1207.407954][T23379]  ? security_sctp_bind_connect+0x7e/0x2e0
[ 1207.407988][T23379]  sctp_sendmsg+0x155c/0x2810
[ 1207.408029][T23379]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1207.408062][T23379]  ? aa_sk_perm+0x81e/0x950
[ 1207.408087][T23379]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1207.408109][T23379]  ? sock_rps_record_flow+0x19/0x400
[ 1207.408139][T23379]  ? inet_sendmsg+0x2f4/0x370
[ 1207.408170][T23379]  __sock_sendmsg+0x19c/0x270
[ 1207.408205][T23379]  ____sys_sendmsg+0x52d/0x830
[ 1207.408236][T23379]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1207.408271][T23379]  ? import_iovec+0x74/0xa0
[ 1207.408301][T23379]  ___sys_sendmsg+0x21f/0x2a0
[ 1207.408329][T23379]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1207.408394][T23379]  ? __fget_files+0x2a/0x420
[ 1207.408418][T23379]  ? __fget_files+0x3a0/0x420
[ 1207.408453][T23379]  __sys_sendmmsg+0x227/0x430
[ 1207.408485][T23379]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1207.408521][T23379]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1207.408564][T23379]  ? ksys_write+0x1f0/0x250
[ 1207.408585][T23379]  ? rcu_is_watching+0x15/0xb0
[ 1207.408627][T23379]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1207.408660][T23379]  do_syscall_64+0xf6/0x210
[ 1207.408685][T23379]  ? clear_bhb_loop+0x45/0xa0
[ 1207.408710][T23379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1207.408729][T23379] RIP: 0033:0x7f593918e969
[ 1207.408747][T23379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1207.408765][T23379] RSP: 002b:00007f593a093038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1207.408786][T23379] RAX: ffffffffffffffda RBX: 00007f59393b5fa0 RCX: 00007f593918e969
[ 1207.408801][T23379] RDX: 0000000000000001 RSI: 0000200000003a00 RDI: 0000000000000004
[ 1207.408814][T23379] RBP: 00007f593a093090 R08: 0000000000000000 R09: 0000000000000000
[ 1207.408827][T23379] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000002
[ 1207.408840][T23379] R13: 0000000000000000 R14: 00007f59393b5fa0 R15: 00007f59394dfa28
[ 1207.408871][T23379]  </TASK>
[ 1208.187450][   T30] audit: type=1326 audit(1746651315.087:8126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23385 comm="syz.0.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7a58e969 code=0x7ffc0000
[ 1208.300421][   T30] audit: type=1326 audit(1746651315.087:8127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23385 comm="syz.0.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7efe7a58e969 code=0x7ffc0000
[ 1208.418521][   T30] audit: type=1326 audit(1746651315.087:8128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23385 comm="syz.0.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7a58e969 code=0x7ffc0000
[ 1209.095408][   T30] audit: type=1326 audit(1746651315.087:8129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23385 comm="syz.0.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7efe7a58e969 code=0x7ffc0000
[ 1209.389020][T23403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5325'.
[ 1209.405800][   T30] audit: type=1326 audit(1746651315.087:8130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23385 comm="syz.0.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7a58e969 code=0x7ffc0000
[ 1209.428697][   T30] audit: type=1326 audit(1746651315.117:8131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23385 comm="syz.0.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7efe7a58e969 code=0x7ffc0000
[ 1209.613587][   T30] audit: type=1326 audit(1746651315.117:8132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23385 comm="syz.0.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7a58e969 code=0x7ffc0000
[ 1209.663728][T23403] input: syz0 as /devices/virtual/input/input125
[ 1210.228428][T23422] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5327'.
[ 1210.316666][T23424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1210.326159][T23424] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1210.703113][T23427] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[ 1215.507311][T23480] FAULT_INJECTION: forcing a failure.
[ 1215.507311][T23480] name failslab, interval 1, probability 0, space 0, times 0
[ 1215.533896][T23481] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5343'.
[ 1215.568028][T23480] CPU: 1 UID: 0 PID: 23480 Comm: syz.1.5345 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) 
[ 1215.568056][T23480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1215.568069][T23480] Call Trace:
[ 1215.568078][T23480]  <TASK>
[ 1215.568087][T23480]  dump_stack_lvl+0x189/0x250
[ 1215.568124][T23480]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1215.568153][T23480]  ? __pfx__printk+0x10/0x10
[ 1215.568188][T23480]  should_fail_ex+0x414/0x560
[ 1215.568225][T23480]  should_failslab+0xa8/0x100
[ 1215.568272][T23480]  __kmalloc_cache_noprof+0x70/0x3d0
[ 1215.568301][T23480]  ? sctp_add_bind_addr+0x8c/0x370
[ 1215.568347][T23480]  sctp_add_bind_addr+0x8c/0x370
[ 1215.568376][T23480]  sctp_copy_local_addr_list+0x30b/0x4e0
[ 1215.568424][T23480]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[ 1215.568449][T23480]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[ 1215.568477][T23480]  ? sctp_v6_is_any+0x64/0x80
[ 1215.568507][T23480]  ? sctp_copy_one_addr+0x93/0x360
[ 1215.568536][T23480]  sctp_bind_addr_copy+0xb3/0x3c0
[ 1215.568564][T23480]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[ 1215.568590][T23480]  sctp_connect_new_asoc+0x2e0/0x690
[ 1215.568626][T23480]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1215.568655][T23480]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1215.568694][T23480]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 1215.568719][T23480]  ? security_sctp_bind_connect+0x7e/0x2e0
[ 1215.568765][T23480]  sctp_sendmsg+0x155c/0x2810
[ 1215.568806][T23480]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1215.568845][T23480]  ? aa_sk_perm+0x81e/0x950
[ 1215.568870][T23480]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1215.568892][T23480]  ? sock_rps_record_flow+0x19/0x400
[ 1215.568923][T23480]  ? inet_sendmsg+0x2f4/0x370
[ 1215.568954][T23480]  __sock_sendmsg+0x19c/0x270
[ 1215.568988][T23480]  ____sys_sendmsg+0x52d/0x830
[ 1215.569020][T23480]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1215.569056][T23480]  ? import_iovec+0x74/0xa0
[ 1215.569086][T23480]  ___sys_sendmsg+0x21f/0x2a0
[ 1215.569114][T23480]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1215.569179][T23480]  ? __fget_files+0x2a/0x420
[ 1215.569203][T23480]  ? __fget_files+0x3a0/0x420
[ 1215.569240][T23480]  __sys_sendmmsg+0x227/0x430
[ 1215.569272][T23480]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1215.569308][T23480]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1215.569353][T23480]  ? rcu_is_watching+0x15/0xb0
[ 1215.569393][T23480]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1215.569421][T23480]  do_syscall_64+0xf6/0x210
[ 1215.569446][T23480]  ? clear_bhb_loop+0x45/0xa0
[ 1215.569471][T23480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1215.569490][T23480] RIP: 0033:0x7fc456f8e969
[ 1215.569508][T23480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1215.569525][T23480] RSP: 002b:00007fc457ed6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1215.569546][T23480] RAX: ffffffffffffffda RBX: 00007fc4571b5fa0 RCX: 00007fc456f8e969
[ 1215.569561][T23480] RDX: 0000000000000001 RSI: 0000200000003a00 RDI: 0000000000000003
[ 1215.569574][T23480] RBP: 00007fc457ed6090 R08: 0000000000000000 R09: 0000000000000000
[ 1215.569586][T23480] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000002
[ 1215.569599][T23480] R13: 0000000000000000 R14: 00007fc4571b5fa0 R15: 00007fc4572dfa28
[ 1215.569629][T23480]  </TASK>
[ 1216.505632][T23490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5349'.
[ 1216.662616][T23494] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5350'.
[ 1217.584495][T23494] bond0: (slave netdevsim0): Releasing backup interface
[ 1217.614916][T23506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1217.639306][T23494] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1217.702680][T23506] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1217.751524][T23510] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5354'.
[ 1217.980992][T23515] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5357'.
[ 1218.017926][T23515] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5357'.
[ 1218.237577][T23524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5360'.
[ 1218.599331][T23534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5363'.
[ 1218.686149][ T5886] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[ 1218.801101][T23538] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5363'.
[ 1218.862532][ T5886] usb 7-1: config 0 has no interfaces?
[ 1218.892118][ T5886] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1218.908867][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1218.933296][ T5886] usb 7-1: Product: syz
[ 1218.950778][ T5886] usb 7-1: Manufacturer: syz
[ 1219.052968][ T5886] usb 7-1: SerialNumber: syz
[ 1219.102447][T23543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5364'.
[ 1219.177049][ T5886] usb 7-1: config 0 descriptor??
[ 1220.700404][T23549] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5365'.
[ 1220.758921][T23549] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1220.766335][T23549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5365'.
[ 1221.703909][T23555] netlink: 'syz.0.5367': attribute type 1 has an invalid length.
[ 1221.909072][T23560] bond4: entered promiscuous mode
[ 1221.938724][T23560] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1222.042733][T23560] bond3: (slave bond4): making interface the new active one
[ 1222.164310][T23560] bond3: (slave bond4): Enslaving as an active interface with an up link
[ 1222.265257][T21391] usb 7-1: USB disconnect, device number 42
[ 1222.283940][T23555] macsec1: entered promiscuous mode
[ 1222.294800][T23555] bond3: entered promiscuous mode
[ 1222.327043][T23555] macsec1: entered allmulticast mode
[ 1222.377333][T23555] bond3: entered allmulticast mode
[ 1222.409793][T23555] bond4: entered allmulticast mode
[ 1222.501651][T23572] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5372'.
[ 1222.534852][T23574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1222.605841][T23574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1222.647463][T23574] tipc: Failed to obtain node identity
[ 1222.673624][T23574] tipc: Enabling of bearer <ib:geneve1> rejected, failed to enable media
[ 1223.295480][ T5883] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[ 1223.380387][T23593] netlink: 'syz.4.5379': attribute type 10 has an invalid length.
[ 1223.465706][ T5883] usb 7-1: Using ep0 maxpacket: 32
[ 1223.479085][ T5883] usb 7-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=99.db
[ 1223.488763][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1223.500348][ T5883] usb 7-1: config 0 descriptor??
[ 1223.543134][ T5883] pwc: Logitech ViewPort AV 100 webcam detected.
[ 1223.822428][ T5883] pwc: Failed to set LED on/off time (-71)
[ 1223.836826][ T5883] pwc: send_video_command error -71
[ 1223.856883][ T5883] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 1223.882426][ T5883] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71
[ 1223.932090][ T5883] usb 7-1: USB disconnect, device number 43
[ 1224.115273][T23601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1224.151192][T23601] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1224.555619][ T5883] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[ 1224.759450][ T5883] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1224.921448][ T5883] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1225.101442][ T5883] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1225.113614][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1225.241385][T23608] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1225.415794][T20943] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[ 1225.465496][T23608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1225.475880][T23608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1225.495839][T23608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1225.506485][T23608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1225.608898][T20943] usb 2-1: too many configurations: 9, using maximum allowed: 8
[ 1225.621327][T20943] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1225.666824][T20943] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1225.720429][T20943] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1225.788445][T23616] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5386'.
[ 1225.821669][T20943] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1225.836931][T20943] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1225.850716][T20943] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1225.864185][T20943] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1225.881883][T20943] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1225.951191][T20943] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1226.000120][T20943] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1226.040344][T20943] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1226.120003][T20943] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1226.157898][T23618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5387'.
[ 1226.159159][T20943] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1226.188028][T23618] 8021q: VLANs not supported on gre0
[ 1226.229990][T20943] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1226.324983][T20943] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1226.357083][T20943] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1226.381086][T20943] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1226.430072][T20943] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1226.470602][T20943] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1226.484292][T20943] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1226.511918][T20943] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1226.523160][T20943] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1226.541095][T20943] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1226.571152][T20943] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1226.590619][T20943] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 1226.607884][T20943] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 1226.634471][T20943] usb 2-1: Product: syz
[ 1226.650751][T20943] usb 2-1: Manufacturer: syz
[ 1226.668023][T20943] usb 2-1: SerialNumber: syz
[ 1226.690796][T20943] usb 2-1: config 0 descriptor??
[ 1226.730435][T20943] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[ 1226.874431][T23635] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5392'.
[ 1226.944186][T23612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1226.956291][T23612] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1227.310755][ T5886] usb 2-1: USB disconnect, device number 84
[ 1227.459300][ T5886] yurex 2-1:0.0: USB YUREX #0 now disconnected
[ 1228.038438][T23657] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5397'.
[ 1228.430868][T23668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5401'.
[ 1228.456134][ T5886] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 1228.608029][ T5886] usb 2-1: Using ep0 maxpacket: 8
[ 1228.617576][ T5886] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1228.633167][ T5886] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1228.643733][ T5886] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1228.660688][ T5886] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1228.680204][ T5886] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1228.689945][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1228.915766][ T5886] usb 2-1: GET_CAPABILITIES returned 0
[ 1228.931511][ T5886] usbtmc 2-1:16.0: can't read capabilities
[ 1229.123820][T23679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1229.146851][T23665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1229.147325][T23679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1229.165992][T23665] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1229.277639][T22446] usb 2-1: USB disconnect, device number 85
[ 1230.210097][T23691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5408'.
[ 1230.829291][T23697] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5410'.
[ 1232.978499][T23730] Invalid logical block size (43605)
[ 1233.293777][T23732] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5421'.
[ 1233.313262][T23733] syzkaller1: entered promiscuous mode
[ 1233.330345][T23733] syzkaller1: entered allmulticast mode
[ 1233.462707][T23735] ptrace attach of "./syz-executor exec"[15416] was attempted by "./syz-executor exec"[23735]
[ 1233.945277][T23743] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1234.308018][T23748] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5424'.
[ 1234.915913][T23761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1234.935122][T23761] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1235.326047][T22446] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[ 1235.560341][T22446] usb 2-1: Using ep0 maxpacket: 8
[ 1235.868811][T23775] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5432'.
[ 1236.731154][T23788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1236.790267][T23788] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1236.890849][T23792] FAULT_INJECTION: forcing a failure.
[ 1236.890849][T23792] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1236.940269][T23792] CPU: 0 UID: 0 PID: 23792 Comm: syz.0.5439 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) 
[ 1236.940297][T23792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1236.940310][T23792] Call Trace:
[ 1236.940319][T23792]  <TASK>
[ 1236.940327][T23792]  dump_stack_lvl+0x189/0x250
[ 1236.940358][T23792]  ? __lock_acquire+0xaac/0xd20
[ 1236.940386][T23792]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1236.940412][T23792]  ? __pfx__printk+0x10/0x10
[ 1236.940431][T23792]  ? __might_fault+0xb0/0x130
[ 1236.940466][T23792]  should_fail_ex+0x414/0x560
[ 1236.940506][T23792]  _copy_from_user+0x2d/0xb0
[ 1236.940550][T23792]  ___sys_recvmsg+0x12e/0x510
[ 1236.940588][T23792]  ? trace_irq_disable+0x37/0x110
[ 1236.940615][T23792]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1236.940670][T23792]  ? __might_fault+0xb0/0x130
[ 1236.940696][T23792]  do_recvmmsg+0x307/0x760
[ 1236.940729][T23792]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1236.940765][T23792]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1236.940805][T23792]  __x64_sys_recvmmsg+0x190/0x240
[ 1236.940829][T23792]  ? rcu_is_watching+0x15/0xb0
[ 1236.940857][T23792]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1236.940886][T23792]  ? do_syscall_64+0xba/0x210
[ 1236.940913][T23792]  do_syscall_64+0xf6/0x210
[ 1236.940936][T23792]  ? clear_bhb_loop+0x45/0xa0
[ 1236.940958][T23792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1236.940976][T23792] RIP: 0033:0x7efe7a58e969
[ 1236.940992][T23792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1236.941007][T23792] RSP: 002b:00007efe7b44e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1236.941027][T23792] RAX: ffffffffffffffda RBX: 00007efe7a7b5fa0 RCX: 00007efe7a58e969
[ 1236.941041][T23792] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005
[ 1236.941054][T23792] RBP: 00007efe7b44e090 R08: 0000000000000000 R09: 0000000000000000
[ 1236.941065][T23792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1236.941076][T23792] R13: 0000000000000000 R14: 00007efe7a7b5fa0 R15: 00007efe7a8dfa28
[ 1236.941104][T23792]  </TASK>
[ 1238.278785][T23806] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5444'.
[ 1238.306025][T22446] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1238.330123][T22446] usb 2-1: no configurations
[ 1238.351098][T22446] usb 2-1: can't read configurations, error -22
[ 1238.933401][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.939915][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.586360][T23821] netlink: 'syz.6.5448': attribute type 10 has an invalid length.
[ 1240.415149][T23832] bond0: option arp_validate: invalid value (23)
[ 1240.741808][T23841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5454'.
[ 1240.885301][T23843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1240.894322][T23843] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1241.240611][T23838] input: syz0 as /devices/virtual/input/input136
[ 1241.729334][T23846] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5456'.
[ 1242.040442][T23858] FAULT_INJECTION: forcing a failure.
[ 1242.040442][T23858] name failslab, interval 1, probability 0, space 0, times 0
[ 1242.413564][T23858] CPU: 1 UID: 0 PID: 23858 Comm: syz.0.5459 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) 
[ 1242.413591][T23858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1242.413603][T23858] Call Trace:
[ 1242.413611][T23858]  <TASK>
[ 1242.413619][T23858]  dump_stack_lvl+0x189/0x250
[ 1242.413652][T23858]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1242.413677][T23858]  ? __pfx__printk+0x10/0x10
[ 1242.413708][T23858]  should_fail_ex+0x414/0x560
[ 1242.413741][T23858]  should_failslab+0xa8/0x100
[ 1242.413767][T23858]  __kmalloc_cache_noprof+0x70/0x3d0
[ 1242.413789][T23858]  ? sctp_add_bind_addr+0x8c/0x370
[ 1242.413816][T23858]  sctp_add_bind_addr+0x8c/0x370
[ 1242.413842][T23858]  sctp_copy_local_addr_list+0x30b/0x4e0
[ 1242.413868][T23858]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[ 1242.413889][T23858]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[ 1242.413913][T23858]  ? sctp_v6_is_any+0x64/0x80
[ 1242.413939][T23858]  ? sctp_copy_one_addr+0x93/0x360
[ 1242.413964][T23858]  sctp_bind_addr_copy+0xb3/0x3c0
[ 1242.413987][T23858]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[ 1242.414009][T23858]  sctp_connect_new_asoc+0x2e0/0x690
[ 1242.414039][T23858]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1242.414064][T23858]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1242.414097][T23858]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 1242.414128][T23858]  ? security_sctp_bind_connect+0x7e/0x2e0
[ 1242.414157][T23858]  sctp_sendmsg+0x155c/0x2810
[ 1242.414194][T23858]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1242.414224][T23858]  ? aa_sk_perm+0x81e/0x950
[ 1242.414245][T23858]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1242.414265][T23858]  ? sock_rps_record_flow+0x19/0x400
[ 1242.414292][T23858]  ? inet_sendmsg+0x2f4/0x370
[ 1242.414320][T23858]  __sock_sendmsg+0x19c/0x270
[ 1242.414352][T23858]  ____sys_sendmsg+0x52d/0x830
[ 1242.414380][T23858]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1242.414412][T23858]  ? import_iovec+0x74/0xa0
[ 1242.414439][T23858]  ___sys_sendmsg+0x21f/0x2a0
[ 1242.414464][T23858]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1242.414520][T23858]  ? __fget_files+0x2a/0x420
[ 1242.414543][T23858]  ? __fget_files+0x3a0/0x420
[ 1242.414575][T23858]  __sys_sendmmsg+0x227/0x430
[ 1242.414603][T23858]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1242.414634][T23858]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1242.414673][T23858]  ? ksys_write+0x1f0/0x250
[ 1242.414692][T23858]  ? rcu_is_watching+0x15/0xb0
[ 1242.414727][T23858]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1242.414752][T23858]  do_syscall_64+0xf6/0x210
[ 1242.414774][T23858]  ? clear_bhb_loop+0x45/0xa0
[ 1242.414796][T23858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1242.414812][T23858] RIP: 0033:0x7efe7a58e969
[ 1242.414826][T23858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1242.414841][T23858] RSP: 002b:00007efe7b44e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1242.414859][T23858] RAX: ffffffffffffffda RBX: 00007efe7a7b5fa0 RCX: 00007efe7a58e969
[ 1242.414872][T23858] RDX: 0000000000000001 RSI: 0000200000003a00 RDI: 0000000000000003
[ 1242.414883][T23858] RBP: 00007efe7b44e090 R08: 0000000000000000 R09: 0000000000000000
[ 1242.414894][T23858] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000002
[ 1242.414905][T23858] R13: 0000000000000000 R14: 00007efe7a7b5fa0 R15: 00007efe7a8dfa28
[ 1242.414933][T23858]  </TASK>
[ 1243.476376][T23864] sctp: [Deprecated]: syz.0.5461 (pid 23864) Use of int in max_burst socket option deprecated.
[ 1243.476376][T23864] Use struct sctp_assoc_value instead
[ 1244.085725][T23884] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5469'.
[ 1244.649102][T23895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5473'.
[ 1245.965958][T23914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5477'.
[ 1246.467716][T23925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5479'.
[ 1246.611489][T23921] input: syz0 as /devices/virtual/input/input139
[ 1246.860777][T23928] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5480'.
[ 1248.289805][T23942] bond5: entered promiscuous mode
[ 1248.295683][   T31] INFO: task kworker/1:1:47 blocked for more than 143 seconds.
[ 1248.303633][   T31]       Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0
[ 1248.312355][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1248.321640][   T31] task:kworker/1:1     state:D stack:20728 pid:47    tgid:47    ppid:2      task_flags:0x4208060 flags:0x00004000
[ 1248.336671][   T31] Workqueue: usb_hub_wq hub_event
[ 1248.345190][   T31] Call Trace:
[ 1248.348919][   T31]  <TASK>
[ 1248.352252][   T31]  __schedule+0x16e2/0x4cd0
[ 1248.357490][   T31]  ? schedule+0x165/0x360
[ 1248.362156][   T31]  ? __pfx___schedule+0x10/0x10
[ 1248.367710][   T31]  ? schedule+0x91/0x360
[ 1248.372319][   T31]  schedule+0x165/0x360
[ 1248.376783][   T31]  schedule_timeout+0x9a/0x270
[ 1248.381872][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1248.387781][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1248.393309][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1248.407847][   T31]  ? wait_for_completion+0x267/0x5d0
[ 1248.414184][   T31]  wait_for_completion+0x2bf/0x5d0
[ 1248.420167][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[ 1248.434002][   T31]  ? __init_swait_queue_head+0xa9/0x150
[ 1248.440498][   T31]  snd_card_free+0x11f/0x190
[ 1248.445245][   T31]  ? __pfx_snd_card_free+0x10/0x10
[ 1248.451020][   T31]  ? usb_match_one_id+0x654/0x980
[ 1248.456729][   T31]  ? snd_usb_create_quirk+0x5d/0x110
[ 1248.462607][   T31]  usb_audio_probe+0x18ea/0x1dc0
[ 1248.468151][   T31]  ? __pfx_usb_audio_probe+0x10/0x10
[ 1248.473794][   T31]  ? ktime_get_mono_fast_ns+0x2af/0x2d0
[ 1248.480167][   T31]  ? pm_runtime_enable+0x1f3/0x340
[ 1248.490921][   T31]  usb_probe_interface+0x641/0xbc0
[ 1248.496751][   T31]  ? __pfx_usb_probe_interface+0x10/0x10
[ 1248.502672][   T31]  really_probe+0x26a/0x9a0
[ 1248.508268][   T31]  __driver_probe_device+0x18c/0x2f0
[ 1248.513735][   T31]  driver_probe_device+0x4f/0x430
[ 1248.519729][   T31]  __device_attach_driver+0x2ce/0x530
[ 1248.525277][   T31]  bus_for_each_drv+0x24e/0x2e0
[ 1248.530954][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[ 1248.543509][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1248.549351][   T31]  __device_attach+0x2b8/0x400
[ 1248.554404][   T31]  ? __pfx___device_attach+0x10/0x10
[ 1248.560376][   T31]  ? do_raw_spin_unlock+0x122/0x240
[ 1248.566140][   T31]  bus_probe_device+0x185/0x260
[ 1248.574940][   T31]  device_add+0x7b6/0xb50
[ 1248.580045][   T31]  usb_set_configuration+0x1a87/0x20e0
[ 1248.588969][   T31]  usb_generic_driver_probe+0x8d/0x150
[ 1248.594885][   T31]  usb_probe_device+0x1c1/0x390
[ 1248.601757][   T31]  ? __pfx_usb_probe_device+0x10/0x10
[ 1248.607989][   T31]  really_probe+0x26a/0x9a0
[ 1248.612647][   T31]  __driver_probe_device+0x18c/0x2f0
[ 1248.619008][   T31]  driver_probe_device+0x4f/0x430
[ 1248.624217][   T31]  __device_attach_driver+0x2ce/0x530
[ 1248.630305][   T31]  bus_for_each_drv+0x24e/0x2e0
[ 1248.635820][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[ 1248.643099][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1248.649264][   T31]  __device_attach+0x2b8/0x400
[ 1248.654358][   T31]  ? __pfx___device_attach+0x10/0x10
[ 1248.660368][   T31]  ? do_raw_spin_unlock+0x122/0x240
[ 1248.666218][   T31]  bus_probe_device+0x185/0x260
[ 1248.671249][   T31]  device_add+0x7b6/0xb50
[ 1248.676382][   T31]  usb_new_device+0xa39/0x16c0
[ 1248.681369][   T31]  ? __pfx_usb_new_device+0x10/0x10
[ 1248.687242][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1248.692596][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1248.700455][   T31]  hub_event+0x2941/0x4a00
[ 1248.715073][   T31]  ? __pfx_hub_event+0x10/0x10
[ 1248.723577][   T31]  ? process_scheduled_works+0x9ec/0x17a0
[ 1248.731520][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1248.740162][   T31]  ? process_scheduled_works+0x9ec/0x17a0
[ 1248.747856][   T31]  ? process_scheduled_works+0x9ec/0x17a0
[ 1248.753896][   T31]  process_scheduled_works+0xadb/0x17a0
[ 1248.762369][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1248.770511][   T31]  worker_thread+0x8a0/0xda0
[ 1248.777766][   T31]  kthread+0x70e/0x8a0
[ 1248.782152][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1248.788673][   T31]  ? __pfx_kthread+0x10/0x10
[ 1248.793722][   T31]  ? __pfx_kthread+0x10/0x10
[ 1248.801765][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1248.808491][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1248.814222][   T31]  ? __pfx_kthread+0x10/0x10
[ 1248.826756][   T31]  ret_from_fork+0x4b/0x80
[ 1248.831329][   T31]  ? __pfx_kthread+0x10/0x10
[ 1248.837751][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1248.842785][   T31]  </TASK>
[ 1248.848630][   T31] 
[ 1248.848630][   T31] Showing all locks held in the system:
[ 1248.858669][   T31] 6 locks held by kworker/1:0/24:
[ 1248.863895][   T31]  #0: ffff888020efa948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0
[ 1248.869090][T23942] bond5 (unregistering): Released all slaves
[ 1248.880547][   T31]  #1: ffffc900001e7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0
[ 1248.898783][   T31]  #2: ffff888027aee198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00
[ 1248.908295][   T31]  #3: ffff888037695198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[ 1248.922918][   T31]  #4: ffff88802ce4f160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[ 1248.934709][   T31]  #5: ffffffff8f282e88 (register_mutex#7){+.+.}-{4:4}, at: usb_audio_probe+0x390/0x1dc0
[ 1248.949435][   T31] 1 lock held by khungtaskd/31:
[ 1248.954517][   T31]  #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1248.964869][   T31] 6 locks held by kworker/1:1/47:
[ 1248.973954][   T31]  #0: ffff888020efa948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0
[ 1248.990835][   T31]  #1: ffffc90000b87c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0
[ 1249.003234][   T31]  #2: ffff888145377198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00
[ 1249.019520][   T31]  #3: ffff888061af0198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[ 1249.029505][   T31]  #4: ffff888061af5160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[ 1249.046621][   T31]  #5: ffffffff8f282e88 (register_mutex#7){+.+.}-{4:4}, at: usb_audio_probe+0x390/0x1dc0
[ 1249.060138][   T31] 3 locks held by udevd/5201:
[ 1249.064919][   T31] 2 locks held by getty/5588:
[ 1249.071623][   T31]  #0: ffff8880305b30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1249.112867][   T31]  #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[ 1249.142015][   T31] 6 locks held by kworker/0:4/5883:
[ 1249.167101][   T31]  #0: ffff888020efa948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0
[ 1249.212427][   T31]  #1: ffffc900042efc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0
[ 1249.295584][   T31]  #2: ffff888027d85198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00
[ 1249.304842][   T31]  #3: ffff888057c78198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[ 1249.315230][   T31]  #4: ffff88806ae82160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[ 1249.355629][   T31]  #5: ffffffff8f282e88 (register_mutex#7){+.+.}-{4:4}, at: usb_audio_probe+0x390/0x1dc0
[ 1249.385406][   T31] 3 locks held by kworker/u8:20/14790:
[ 1249.391056][   T31]  #0: ffff88801a089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0
[ 1249.403660][   T31]  #1: ffffc9000ed0fc60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0
[ 1249.415225][   T31]  #2: ffffffff8f2f47c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[ 1249.426183][   T31] 1 lock held by syz.1.5485/23938:
[ 1249.431413][   T31]  #0: ffffffff8f2f47c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[ 1249.441235][   T31] 3 locks held by syz.0.5483/23942:
[ 1249.446992][   T31]  #0: ffffffff8f7f0de0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[ 1249.457096][   T31]  #1: ffffffff8f2f47c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[ 1249.466487][   T31]  #2: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730
[ 1249.479724][   T31] 
[ 1249.482166][   T31] =============================================
[ 1249.482166][   T31] 
[ 1249.491860][   T31] NMI backtrace for cpu 1
[ 1249.491877][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) 
[ 1249.491901][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1249.491914][   T31] Call Trace:
[ 1249.491923][   T31]  <TASK>
[ 1249.491931][   T31]  dump_stack_lvl+0x189/0x250
[ 1249.491963][   T31]  ? __wake_up_klogd+0xd9/0x110
[ 1249.491989][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1249.492022][   T31]  ? __pfx__printk+0x10/0x10
[ 1249.492054][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[ 1249.492089][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1249.492118][   T31]  ? _printk+0xcf/0x120
[ 1249.492143][   T31]  ? __pfx__printk+0x10/0x10
[ 1249.492165][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1249.492189][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1249.492224][   T31]  watchdog+0xfee/0x1030
[ 1249.492250][   T31]  ? watchdog+0x1de/0x1030
[ 1249.492283][   T31]  kthread+0x70e/0x8a0
[ 1249.492310][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1249.492334][   T31]  ? __pfx_kthread+0x10/0x10
[ 1249.492359][   T31]  ? __pfx_kthread+0x10/0x10
[ 1249.492381][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1249.492402][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1249.492425][   T31]  ? __pfx_kthread+0x10/0x10
[ 1249.492448][   T31]  ret_from_fork+0x4b/0x80
[ 1249.492467][   T31]  ? __pfx_kthread+0x10/0x10
[ 1249.492491][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1249.492526][   T31]  </TASK>
[ 1249.492555][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 1249.640465][    C0] NMI backtrace for cpu 0
[ 1249.640488][    C0] CPU: 0 UID: 0 PID: 22615 Comm: kworker/u8:9 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) 
[ 1249.640515][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1249.640527][    C0] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker
[ 1249.640556][    C0] RIP: 0010:unwind_next_frame+0x19a1/0x2390
[ 1249.640580][    C0] Code: 0d 00 75 1f c6 05 e3 eb f6 0d 01 48 c7 c7 80 20 68 8b be 66 03 00 00 48 c7 c2 20 21 68 8b e8 96 85 2c 00 48 c7 c7 60 b8 f3 8d <4c> 89 fe e8 77 6b 2c 00 e8 62 e9 35 00 89 d8 48 81 c4 98 00 00 00
[ 1249.640595][    C0] RSP: 0018:ffffc900000077b8 EFLAGS: 00000202
[ 1249.640609][    C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 17961e64eefe2900
[ 1249.640620][    C0] RDX: ffffffff900825d8 RSI: ffffffff8bc1d1c0 RDI: ffffffff8df3b860
[ 1249.640633][    C0] RBP: dffffc0000000000 R08: 000000000000000f R09: 0000000000000000
[ 1249.640644][    C0] R10: 0000000000000000 R11: ffffffff8171a9f5 R12: 1ffff92000000f11
[ 1249.640661][    C0] R13: ffffc900000078d8 R14: ffffc90000007888 R15: ffffffff8171a9f5
[ 1249.640674][    C0] FS:  0000000000000000(0000) GS:ffff8881260cb000(0000) knlGS:0000000000000000
[ 1249.640688][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1249.640699][    C0] CR2: 00007fc45717d2d8 CR3: 0000000033348000 CR4: 00000000003526f0
[ 1249.640714][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1249.640724][    C0] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1249.640736][    C0] Call Trace:
[ 1249.640742][    C0]  <IRQ>
[ 1249.640752][    C0]  ? unwind_next_frame+0xa5/0x2390
[ 1249.640773][    C0]  ? ret_from_fork_asm+0x1a/0x30
[ 1249.640791][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1249.640810][    C0]  arch_stack_walk+0x11c/0x150
[ 1249.640833][    C0]  ? ret_from_fork_asm+0x1a/0x30
[ 1249.640851][    C0]  stack_trace_save+0x9c/0xe0
[ 1249.640867][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[ 1249.640885][    C0]  ? stack_depot_save_flags+0x40/0x910
[ 1249.640906][    C0]  kasan_save_track+0x3e/0x80
[ 1249.640924][    C0]  ? kasan_save_track+0x3e/0x80
[ 1249.640939][    C0]  ? kasan_save_free_info+0x46/0x50
[ 1249.640964][    C0]  ? __kasan_slab_free+0x62/0x70
[ 1249.640981][    C0]  ? kmem_cache_free+0x192/0x3f0
[ 1249.641001][    C0]  ? rcu_core+0xca5/0x1710
[ 1249.641022][    C0]  ? handle_softirqs+0x283/0x870
[ 1249.641046][    C0]  ? do_softirq+0xec/0x180
[ 1249.641069][    C0]  ? __local_bh_enable_ip+0x17d/0x1c0
[ 1249.641094][    C0]  ? kernel_fpu_end+0xd2/0x120
[ 1249.641115][    C0]  ? blake2s_compress+0x5f/0xd0
[ 1249.641154][    C0]  ? blake2s_final+0x116/0x260
[ 1249.641175][    C0]  ? hmac+0x1c6/0x330
[ 1249.641190][    C0]  ? kdf+0xde/0x270
[ 1249.641206][    C0]  ? wg_noise_handshake_create_initiation+0x462/0x7e0
[ 1249.641226][    C0]  ? wg_packet_handshake_send_worker+0x163/0x320
[ 1249.641249][    C0]  ? process_scheduled_works+0xadb/0x17a0
[ 1249.641274][    C0]  ? worker_thread+0x8a0/0xda0
[ 1249.641289][    C0]  ? kthread+0x70e/0x8a0
[ 1249.641307][    C0]  ? ret_from_fork+0x4b/0x80
[ 1249.641323][    C0]  ? ret_from_fork_asm+0x1a/0x30
[ 1249.641357][    C0]  ? rcu_core+0xca5/0x1710
[ 1249.641378][    C0]  kasan_save_free_info+0x46/0x50
[ 1249.641404][    C0]  __kasan_slab_free+0x62/0x70
[ 1249.641422][    C0]  kmem_cache_free+0x192/0x3f0
[ 1249.641445][    C0]  ? __pfx___d_free+0x10/0x10
[ 1249.641461][    C0]  ? rcu_core+0xc34/0x1710
[ 1249.641484][    C0]  rcu_core+0xca5/0x1710
[ 1249.641516][    C0]  ? __pfx_rcu_core+0x10/0x10
[ 1249.641540][    C0]  ? kvm_sched_clock_read+0x11/0x20
[ 1249.641559][    C0]  ? sched_clock_cpu+0x74/0x430
[ 1249.641584][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1249.641605][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[ 1249.641630][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[ 1249.641671][    C0]  handle_softirqs+0x283/0x870
[ 1249.641698][    C0]  ? do_softirq+0xec/0x180
[ 1249.641726][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[ 1249.641754][    C0]  ? kernel_fpu_end+0xc8/0x120
[ 1249.641778][    C0]  do_softirq+0xec/0x180
[ 1249.641802][    C0]  </IRQ>
[ 1249.641807][    C0]  <TASK>
[ 1249.641815][    C0]  ? __pfx_do_softirq+0x10/0x10
[ 1249.641844][    C0]  ? lockdep_softirqs_on+0x13b/0x1c0
[ 1249.641868][    C0]  __local_bh_enable_ip+0x17d/0x1c0
[ 1249.641894][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1249.641923][    C0]  ? kernel_fpu_begin_mask+0x2af/0x360
[ 1249.641949][    C0]  kernel_fpu_end+0xd2/0x120
[ 1249.641972][    C0]  ? __pfx_kernel_fpu_end+0x10/0x10
[ 1249.642000][    C0]  blake2s_compress+0x5f/0xd0
[ 1249.642023][    C0]  blake2s_final+0x116/0x260
[ 1249.642045][    C0]  hmac+0x1c6/0x330
[ 1249.642064][    C0]  ? __pfx_hmac+0x10/0x10
[ 1249.642095][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1249.642117][    C0]  kdf+0xde/0x270
[ 1249.642136][    C0]  ? __pfx_kdf+0x10/0x10
[ 1249.642154][    C0]  ? __pfx_kernel_fpu_end+0x10/0x10
[ 1249.642182][    C0]  ? __asan_memset+0x22/0x50
[ 1249.642200][    C0]  wg_noise_handshake_create_initiation+0x462/0x7e0
[ 1249.642225][    C0]  ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10
[ 1249.642247][    C0]  ? __lock_acquire+0xaac/0xd20
[ 1249.642274][    C0]  ? ktime_get_coarse_with_offset+0x88/0x1a0
[ 1249.642299][    C0]  ? ktime_get_coarse_with_offset+0x88/0x1a0
[ 1249.642329][    C0]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[ 1249.642351][    C0]  ? do_raw_spin_lock+0x121/0x290
[ 1249.642372][    C0]  ? ktime_get_coarse_with_offset+0x14a/0x1a0
[ 1249.642392][    C0]  wg_packet_handshake_send_worker+0x163/0x320
[ 1249.642414][    C0]  ? register_lock_class+0x51/0x320
[ 1249.642437][    C0]  ? __pfx_wg_packet_handshake_send_worker+0x10/0x10
[ 1249.642470][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1249.642486][    C0]  ? process_scheduled_works+0x9ec/0x17a0
[ 1249.642510][    C0]  ? process_scheduled_works+0x9ec/0x17a0
[ 1249.642535][    C0]  process_scheduled_works+0xadb/0x17a0
[ 1249.642574][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1249.642607][    C0]  worker_thread+0x8a0/0xda0
[ 1249.642634][    C0]  kthread+0x70e/0x8a0
[ 1249.642680][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 1249.642714][    C0]  ? __pfx_kthread+0x10/0x10
[ 1249.642734][    C0]  ? __pfx_kthread+0x10/0x10
[ 1249.642752][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1249.642768][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1249.642787][    C0]  ? __pfx_kthread+0x10/0x10
[ 1249.642806][    C0]  ret_from_fork+0x4b/0x80
[ 1249.642822][    C0]  ? __pfx_kthread+0x10/0x10
[ 1249.642841][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1249.642864][    C0]  </TASK>
[ 1250.276067][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1250.282974][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) 
[ 1250.294806][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1250.304975][   T31] Call Trace:
[ 1250.308279][   T31]  <TASK>
[ 1250.311236][   T31]  dump_stack_lvl+0x99/0x250
[ 1250.315875][   T31]  ? __asan_memcpy+0x40/0x70
[ 1250.320516][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1250.325765][   T31]  ? __pfx__printk+0x10/0x10
[ 1250.330412][   T31]  panic+0x2db/0x790
[ 1250.334356][   T31]  ? __pfx_panic+0x10/0x10
[ 1250.338808][   T31]  ? tick_nohz_tick_stopped+0x86/0xb0
[ 1250.344213][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1250.349622][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[ 1250.355822][   T31]  watchdog+0x102d/0x1030
[ 1250.360183][   T31]  ? watchdog+0x1de/0x1030
[ 1250.364652][   T31]  kthread+0x70e/0x8a0
[ 1250.368753][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1250.373450][   T31]  ? __pfx_kthread+0x10/0x10
[ 1250.378065][   T31]  ? __pfx_kthread+0x10/0x10
[ 1250.382726][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1250.387959][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1250.393207][   T31]  ? __pfx_kthread+0x10/0x10
[ 1250.397820][   T31]  ret_from_fork+0x4b/0x80
[ 1250.402258][   T31]  ? __pfx_kthread+0x10/0x10
[ 1250.406886][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1250.411693][   T31]  </TASK>
[ 1250.415132][   T31] Kernel Offset: disabled
[ 1250.419465][   T31] Rebooting in 86400 seconds..