last executing test programs:

5m8.319312469s ago: executing program 2 (id=2469):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="1f00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000e100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
poll(&(0x7f0000000440), 0x0, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xe, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x9}, 0x10}, 0x94)
timer_create(0x5, &(0x7f0000000400)={0x0, 0x33, 0x2}, &(0x7f0000000f00))
fcntl$lock(r0, 0x7, &(0x7f0000000f40)={0x2, 0x2, 0x10001, 0x5})
mprotect(&(0x7f00000d2000/0x3000)=nil, 0x3000, 0x3000007)
timer_settime(0x0, 0x1, &(0x7f0000000f80)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
syz_open_procfs(0x0, &(0x7f0000000440)='ns\x00')
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000640))

5m8.146261876s ago: executing program 2 (id=2471):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000280), 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e00)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae17facce2575d91909fac4d7fd86fd42f84e282b7c30a5bf32f4cffbf61003a32e49cb9eb3e5963209db4bb2aa9e6387af872e1b74b68c27be140077e899c1c624ea7d369681089aa604c7816e723de0668f7f6c6cb1fa5db65922b67c0550b44da4926bbc54c272a7fb2803022eb2d8018f936462751b06ea89c2d6f60cb05aa0f03c00ad79778fcb334302140894f9624b4332cc639c71903c1c74bde5c53ddb763f58b6a646211b6a08e"], 0x18}}, 0x0)
recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/4100, 0x1004}, {&(0x7f0000005440)=""/104, 0x68}], 0x3}, 0x8fffff}], 0x6, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="948bfa8781", 0x5}], 0x1}, 0x8040)
recvfrom(r0, &(0x7f00000012c0)=""/4076, 0xfec, 0x17, 0x0, 0x0)
timer_create(0x6, &(0x7f00000022c0)={0x0, 0x7, 0x4, @thr={&(0x7f0000000f00)="cf7d5f56dd4543b57239861f43e02c389483d727831185e8ed97469d301f42b2797821a22086d47b4e6547652842a4a64decb3aa70a9fc89beb499c10755422b81", &(0x7f0000000fc0)="9fd239e4dec9c3c01101d15b8bcd69111b02ced41345a54aeea5285eabe56874a09f3f09f7d0654e591fe7e51bf1db67baa031c13bf3168dec16e79078d816c7b7e950e879ecefda3dc6905404993d19e6b417efc5fe77856f2d5c674906c29c"}}, &(0x7f0000002300)=<r2=>0x0)
fcntl$lock(r1, 0x5, &(0x7f0000000140)={0x2, 0x3, 0xd9fb, 0x5})
mprotect(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="500000000202010400000000000000000a0000003c0002802c00018014000300fe8000000000800000000000000000aa14000400"], 0x50}}, 0x0)
timer_settime(r2, 0x1, &(0x7f0000002380)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x40040)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
readv(r4, &(0x7f0000000680)=[{&(0x7f0000000100)=""/18, 0x12}, {&(0x7f00000004c0)=""/183, 0xb7}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000000600)=""/111, 0x6f}], 0x4)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001240)={0x1, &(0x7f0000001280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)

5m6.672315515s ago: executing program 2 (id=2476):
r0 = userfaultfd(0x80801)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x1c3902, 0x0)
sendfile(r1, r1, 0x0, 0x20000005)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
fsopen(0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0))
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000200)={0x60, 0x0, &(0x7f000025a000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x8000000000002006, &(0x7f0000000280)=[{0xfffffffffffffffb, 0x8001, 0x4}], 0x1, 0xfffffffffffff4ae, 0x11, 0x40, 0x5, 0x8})
ioctl$STOP_ARRAY_RO(r1, 0x933, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4201, 0x10)
futex_waitv(&(0x7f0000001480)=[{0x4e7, 0x0, 0x2}], 0x1, 0x0, &(0x7f00000014c0)={0x77359400}, 0x1)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
userfaultfd(0x1)
io_uring_setup(0x585f, &(0x7f0000000380)={0x0, 0x2c28, 0x80, 0x0, 0x10000000})
r3 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000400)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18)
setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000440)={0x0, 0xea60}, 0x10)
connect$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000001500)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000500)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000040)={0x1, <r5=>0xffffffffffffffff, 0x80000}, &(0x7f0000000080)=0xc)
getsockopt$bt_hci(r5, 0x0, 0x2, &(0x7f00000000c0)=""/68, &(0x7f0000000140)=0x44)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000540)={&(0x7f0000ec1000/0xe000)=nil, 0xe000})

5m5.276412847s ago: executing program 2 (id=2478):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002400), r0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e00010000000000000000", @ANYRESOCT], 0xb8}}, 0x20040014)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002b40)='/sys/power/pm_trace', 0x2, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000002b80)=ANY=[@ANYBLOB='-'], 0x28)
getsockname$packet(r0, &(0x7f0000002440)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002480)=0x14)
sendmsg$nl_route(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002540)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r2, @ANYBLOB="830408000100677265001c00028008000600ac1414bb06000e000200000006000f00b74b00"/48], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000002600)={0x2, 0x4e1c, @multicast1}, 0x52, 0x0, 0x0, &(0x7f0000000000), 0x20}, 0x11}], 0x1, 0x880)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x200})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x4)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002680)=ANY=[@ANYBLOB="1b00"/14, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002700)={0x1, 0x2a, &(0x7f00000027c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRESHEX=r3, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000002940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/62, 0x0, 0x9000})
ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000140))
r7 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000)
read(r7, &(0x7f00000002c0)=""/145, 0x91)
r8 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r8, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000002640)=0x5)
ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0)
fcntl$notify(r4, 0x402, 0x30)

5m3.273607685s ago: executing program 2 (id=2489):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/sync_on_suspend', 0x82, 0x10a)
io_setup(0x4fe, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000540)={0x0, 0x40000000, 0x0, 0x1, 0xf, r0, &(0x7f0000000580)='F', 0x1, 0x9, 0x0, 0x0, r0}])

5m3.002132421s ago: executing program 2 (id=2491):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = syz_io_uring_setup(0x2a52, &(0x7f0000000300)={0x0, 0x595f, 0x7fff, 0x1, 0x51, 0x0, r2}, &(0x7f0000000140)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_BIND=@ipv6={0x38, 0x0, 0x0, r2, 0x1c, &(0x7f0000000580)={{0xa, 0x4e23, 0xe30c, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x80}}})
io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]})
r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000040)={0x1, 0xa, 0x1})
ioctl$VIDIOC_QBUF(r2, 0xc058560f, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]})
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x101002, 0x0)
r9 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0)
syz_usb_disconnect(r9)
r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0)
syz_usb_control_io$hid(r10, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r11 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54})
ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r11, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x0, 0xf4ffffff})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

4m47.954600752s ago: executing program 32 (id=2491):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = syz_io_uring_setup(0x2a52, &(0x7f0000000300)={0x0, 0x595f, 0x7fff, 0x1, 0x51, 0x0, r2}, &(0x7f0000000140)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_BIND=@ipv6={0x38, 0x0, 0x0, r2, 0x1c, &(0x7f0000000580)={{0xa, 0x4e23, 0xe30c, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x80}}})
io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]})
r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000040)={0x1, 0xa, 0x1})
ioctl$VIDIOC_QBUF(r2, 0xc058560f, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]})
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x101002, 0x0)
r9 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0)
syz_usb_disconnect(r9)
r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0)
syz_usb_control_io$hid(r10, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r11 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54})
ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r11, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x0, 0xf4ffffff})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

10.034464353s ago: executing program 0 (id=3789):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x4000000004002, 0x0)
r9 = dup(r8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffe, 0x256}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0xfffffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe64a, 0x2, 0x20000000, 0x327, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x20, 0x3, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
r10 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r10, 0x0)
landlock_restrict_self(r10, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x8)
landlock_restrict_self(0xffffffffffffffff, 0x8)
syz_open_procfs(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a80)={'ip6_vti0\x00', 0x0, 0x29, 0x57, 0x3, 0x1, 0x14, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x20, 0xfffffffa, 0x1000}})
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000))
epoll_create1(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x40)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x20040, 0x0)

8.152431403s ago: executing program 3 (id=3802):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]})
rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xff, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132835}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x2, 0x3, 0x1, 0x2}}, @common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x100, 0x700000, 0x8, 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438)
r3 = fcntl$getown(r0, 0x9)
capset(&(0x7f0000000700)={0x20080522, r3}, 0x0)

7.798099623s ago: executing program 0 (id=3803):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r1, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) (async, rerun: 64)
syz_usb_control_io(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_connect$uac2(0x6, 0xcf, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0xb05, 0x1739, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x3, 0x1, 0x81, 0x30, 0x0, {0x8, 0xb, 0x0, 0x2, 0x1, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x6, 0x27, 0x9}, [@output_terminal={0xc, 0x24, 0x3, 0x6, 0x303, 0x9, 0x4, 0x3, 0x3, 0x3f}, @source_unit={0x8, 0x24, 0xa, 0xfc, 0x2, 0x3, 0x41, 0x2}, @extension_unit={0xa, 0x24, 0x9, 0x2, 0x53, 0x65, "73c20d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x11, 0x8, 0x1, 0x1004, 0x4f, 0xffffffff, 0x7f}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xe9}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x2, 0x4, 0x4c, 0xe, "c9"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2, 0x4, 0x40, 0x8, "cceabaf892"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x2, 0xfc, {0x8, 0x25, 0x1, 0x1, 0x17, 0x1, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x7, 0xc, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x2, 0x10, 0x2, {0x8, 0x25, 0x1, 0x80, 0xc, 0x7, 0x9}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x1, 0x8, 0x80, 0x40, 0x99}, 0x66, &(0x7f00000001c0)={0x5, 0xf, 0x66, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xe, "9fbae8a391c8e83327b615a14b3a7f4f"}, @generic={0x42, 0x10, 0x2, "79b53cc3aad7e1b775c89e31c837abfdccf476dcff3f9ae7f34aa0f83c5d15f1329813b16db60160266f70d2038d4057185f888e6ea47417366da763b6c5b3"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x6, 0x7, 0x2, 0x7}]}, 0x7, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x406}}, {0x2, &(0x7f0000000300)=@string={0x2}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x37}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1c36}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x860}}, {0x73, &(0x7f0000000400)=@string={0x73, 0x3, "953786f04595bfb72ee6757f6b844344633fc6c591acd5078d459380719a75827791319c9391a91725a3162599d25c2fee6fd04ead5a67e8aac76b5393d5d15a99fcdc1173f1c98ab0b2916d81f7862c34449489d2da692c1a2f7c4d22f08d22d02836cf17646e63ebc3145da5864091d4"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x80c}}]}) (async, rerun: 32)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) (rerun: 32)
write$char_usb(r2, 0x0, 0x0) (async)
syz_usb_control_io$printer(r1, 0x0, 0x0)

7.717801061s ago: executing program 3 (id=3804):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f000000dc80)={<r0=>0xffffffffffffffff})
getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x89, &(0x7f000000dcc0), &(0x7f000000dd00)=0x4)

7.653210784s ago: executing program 3 (id=3805):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x4}) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0xffffffffffffff47})
dup3(r1, r0, 0x0) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x10a, 0xfffffffffffffffd}) (async)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000400)={0xa, {"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", 0x1000}}, 0x1006) (async)
r3 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000001440), &(0x7f0000001480)=0x4)
syz_usb_connect$uac1(0x5, 0x82, &(0x7f00000014c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x582, 0x7d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x0, 0x48, 0xf3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x4, 0x4, 0x3}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x6, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x3, 0x7f, {0x7, 0x25, 0x1, 0xc, 0x0, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0x6, 0x3, {0x7, 0x25, 0x1, 0x4, 0x9, 0xa4b8}}}}}}}}]}}, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@acquire], 0xffffffffffffff67}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000340)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x3e}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x1, 0x23}, @fda={0x66646185, 0xc, 0x1, 0xb4}}, &(0x7f00000003c0)={0x0, 0x28, 0x50}}, 0x1040}]})
syz_usb_connect(0x3, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b081000010000000109028d0001010080fa0904000005ffffff00070503"], 0x0)

7.207928628s ago: executing program 1 (id=3809):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000540)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000580), 0x4) (async)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000e80), 0x88002, 0x0) (async)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000f00)={0xc0002009})
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000f40), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000f80)=0xd) (async)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000fc0)=0x1) (async)
r4 = io_uring_setup(0x524, &(0x7f0000000340)={0x0, 0x1922, 0x4000, 0x8, 0x223}) (async, rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl2\x00', <r5=>0x0, 0x1, 0x20, 0x4, 0x7fffffff, {{0xe, 0x4, 0x2, 0x12, 0x38, 0x65, 0x0, 0x3, 0x4, 0x0, @remote, @multicast1, {[@end, @timestamp={0x44, 0x10, 0xe4, 0x0, 0x4, [0x5, 0x1000, 0x6]}, @ssrr={0x89, 0xf, 0xf, [@loopback, @private=0xa010100, @broadcast]}, @ra={0x94, 0x4, 0x1}]}}}}}) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x6aea, 0x0, 0xffffffffffffffff, 0x8, '\x00', r5}, 0x50) (rerun: 64)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, '\x00', r5, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_lsm={0x1d, 0x26, &(0x7f0000000d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7f}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xca83}}, @ldst={0x3, 0x0, 0x4, 0xb, 0x3, 0x0, 0xffffffffffffffff}, @generic={0x6, 0x8, 0xc, 0x4, 0xd}, @jmp={0x5, 0x1, 0x0, 0x7, 0x3, 0x8, 0xfffffffffffffffc}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}]}, &(0x7f0000000980)='syzkaller\x00', 0x2, 0x6d, &(0x7f00000009c0)=""/109, 0x40f00, 0x32, '\x00', r5, 0x1b, r4, 0x8, &(0x7f0000000a40)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x0, 0x1, 0x2f, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[0xffffffffffffffff], &(0x7f0000000b00)=[{0x0, 0x2, 0x9, 0x8}], 0x10, 0xb}, 0x94) (async)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000004c0)={0xb, 0x29, 0x2, {0x401}}, 0xb) (async)
pipe2(&(0x7f0000000d00)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80000)
ioctl$FIONREAD(r8, 0x5761, 0x0) (async)
io_uring_enter(r4, 0x1912, 0x71, 0x0, 0x0, 0x0) (async, rerun: 32)
r9 = syz_open_procfs(0x0, &(0x7f0000000c00)='gid_map\x00') (rerun: 32)
read$rfkill(r9, &(0x7f0000000c40), 0x8) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r9, 0x2, 0x1}, 0x50) (async)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000500)={0x8000000001f, r4, 0x30, {0x80000000000007, 0x800005}, 0x6}, 0x1) (async, rerun: 32)
creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) (async, rerun: 32)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0xff00, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc080}, 0x20004450) (async)
sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a00fffe0900410073797a31005b1500200004801c0001800900011f68617368000000000c00028008000740000000010900020073797a32000000000500074098000000140000001400010000000000000000000100000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="622cbba1fbe9adfac9c526cc5cb256d10ea4dac0ed674076dd862471b819910df160a3be39289a09f11573b3a252b8ad5353f92c675e7a64c45a050a69e3b002de668c816101232786c0c364fa79d965869cd61b392c74b1ed31a1dba80ff635601343ebb27e53c8f34a42abf4b7c9ab3204efc2c9d17218bcea1e2426f0eb183f5de43a4a8cf599f7ea55ad3581cb6e270c4fbdb4ebb787f75ac806d8027832fbbbc59524d11d705e65471238bb8e99c475a9388b903ddc07d80a793f3994b61ebdc7491620da8e51665021ab9598e0a34b3ee12652ed88", @ANYBLOB="b1aa78d5314292b32d58c934f49a682b84113383d57d467ef5b73d0efbafdfa540f4c5e08e1ec080e26aa13cda1cbdc456a26044b95b29aefa3727cef3d12f370a6a33b232f337d91a276c94c411d3dbb0041989d24d59be745bbf5398852ff1405c4fb39d04dae72a407433864bc0f39d443b30bb2b9248bb696808c60258f70bb333f696f9770dff3a77c654dcc1f12d6f0b10bb67e1d1200d3c61dccbde3f516fe42993cf6715850046a531111ddf8dd44cf86c4e73cf2b31e947fe30d330cf1619a9ce61466112fc", @ANYRES16=0x0], 0x48)

6.678057087s ago: executing program 4 (id=3810):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000016c0), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001700)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f0000000080)=[{{&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="05", 0x1}], 0x1}}], 0x2, 0x0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000280)=@sack_info={r3, 0x1, 0x100269}, 0xc)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'gretap0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x43001, 0x1424}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}}, 0x20040040)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000002c0)={r3, 0x1, 0x20}, &(0x7f0000000300)=0xc)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001740)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000001780)=ANY=[@ANYBLOB="034886dd0100000000001400000060"], 0xfdef)

6.557738111s ago: executing program 4 (id=3811):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x844)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket$packet(0x11, 0x3, 0x300)
timer_settime(r1, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
sendmmsg$unix(r3, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x20000000}}], 0x1, 0x4018080)

6.40674079s ago: executing program 3 (id=3813):
pipe(0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
listns(&(0x7f0000000000)={0x20, 0x0, 0x2, 0x1c020080, 0x0, 0xffffffffffffffff}, 0x0, 0xf4240, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20004000)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

6.401046147s ago: executing program 5 (id=3814):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
close(0x3)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0xca58c30f81b6079f})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x6101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2901, 0x0)
close(r3)
socket$can_raw(0x1d, 0x3, 0x1)
ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000380))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @link_local})
write$tun(r1, &(0x7f0000000380)=ANY=[], 0x16)
write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x32600)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x88, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x60, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xef1, 0x1, 0x0, 0x4, 0x3, 0x0, 0x6000, 0xfff9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x4, 0x1, 0x6, 0xb, 0x3, 0x36, 0x48, 0x30, 0x16, 0x6, 0x6, 0x60, 0x16, 0x9, 0xb, 0x3, 0x7, 0x2, 0x16, 0x24, 0x6, 0x2, 0x36, 0x6c, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7, 0x6, 0x528, 0x4, 0x7f, 0x2, 0x5]}}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x48c0)

6.256604944s ago: executing program 1 (id=3815):
r0 = socket(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @remote, 0x4}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'})
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5e54e574da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1, 0x0, 0x0, 0x2800}}], 0x1, 0x30044080)

6.207978265s ago: executing program 5 (id=3816):
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]})
rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, 0xffffffffffffffff, 0x0)

6.205727598s ago: executing program 3 (id=3817):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, 0x0, 0x0) (async, rerun: 32)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) (async, rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42082, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x4102}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2a0280, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0x4, 0x400, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x800) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @multicast})
r5 = socket$kcm(0x11, 0x3, 0x0) (async)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', <r7=>0x0}) (async)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000740), 0x56) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000780)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000009c0)=@deltfilter={0x47ac, 0x2d, 0x800, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x2, 0x7}, {0x10}, {0x2, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1d58, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xfff2}}, @TCA_BPF_ACT={0x1d4c, 0x1, [@m_bpf={0xb4, 0x6, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x7f, 0x6, "a3c145c762d3caae1524f50b003043d23e52e78d4411390913640e23bd745b0c112f38f03714aa4244f6626c424a0b55c5501d4b94ff2644f709984dffa652d124d627a49cff94c6e3e7cb891cc63d78899f1e4b264b70028b04d3930e45d919a901cdf8f5d0775ec5f01e1b282e876375fa98f72ce543a49fab51"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x1668, 0x1a, 0x0, 0x0, {{0xb}, {0x15dc, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x739, 0xe, 0x4, 0x1, 0x1, 0xa, 0x8, 0x4, 0x7342, 0x8b, 0x3, 0xb, 0xe, 0xffffffff, 0x7, 0x51, 0x7, 0x8, 0x1, 0x8, 0x0, 0x0, 0x6, 0x3, 0x7, 0x1, 0x0, 0xffff990b, 0x3, 0x7fff, 0x4, 0x9, 0x4, 0x40, 0x0, 0x5d, 0x3, 0x3, 0x1, 0x5, 0xefe, 0x10001, 0x2, 0xfffffffe, 0x7ff, 0x80000001, 0x8, 0xffffff7f, 0x9, 0x0, 0x1, 0x1, 0x485, 0x40, 0xb, 0x7, 0x5, 0xd, 0x2, 0x0, 0x0, 0x30000, 0x685, 0x2, 0xd, 0x91d3, 0x7544, 0x9, 0x5, 0x1, 0x8, 0x1, 0x7, 0x6, 0xedc, 0x2, 0x7, 0x8, 0x8, 0x4, 0x7fffffff, 0x6, 0x7, 0x80, 0x2, 0x9, 0x7, 0x8, 0x87f8, 0x8, 0x0, 0x294, 0x0, 0xe, 0x8, 0xc7e0, 0x1b41aa97, 0x8, 0x7, 0x2, 0x4, 0xffff, 0xffffffff, 0x0, 0xffff, 0xb, 0x6, 0x3d, 0x9, 0x5, 0x10001, 0x15, 0x1, 0x5, 0x7fff, 0x0, 0xdbd, 0x1, 0x32a, 0x100, 0xe50, 0xffffffff, 0xd52, 0x7, 0x4, 0x4, 0x8, 0x8000, 0x1, 0x3ff, 0x400, 0x5, 0x8, 0x3, 0x0, 0x7, 0x5, 0x5, 0x1, 0x4, 0x8001, 0xef3, 0xfffffffc, 0x8, 0x8d, 0x0, 0x4, 0x6, 0x3, 0x8, 0x1000, 0x7f, 0x8, 0xff, 0x8001, 0x4, 0x6, 0x8, 0x9e35, 0x8, 0x80000001, 0x101, 0x6, 0x101, 0xd28, 0x2, 0x4, 0x2, 0x6, 0x1, 0x4, 0xe5c5, 0xeb8, 0x9, 0x8, 0x8, 0x6, 0x2, 0xffffffff, 0x7c, 0x1, 0x5, 0x6, 0xcd6, 0x9, 0xff3, 0x1, 0x8, 0x5b59, 0x5c, 0x10000000, 0x86ad, 0x6, 0x0, 0xfffffffa, 0xff, 0x8, 0x218, 0x5d, 0x2, 0x8000, 0x5, 0x6, 0x1e, 0x0, 0x400, 0x2, 0x3d8, 0x80000000, 0x4, 0xb, 0x3, 0x0, 0x7, 0x2, 0x7f, 0x2, 0xffff, 0x5, 0x6, 0x9, 0x8000, 0x0, 0xb0, 0x7, 0xb, 0xfffffffe, 0x3, 0x3, 0x0, 0xe37, 0x5, 0xe, 0x5, 0x9, 0x8, 0x419f3a8b, 0x9, 0x2, 0x5, 0x101, 0x4, 0x40, 0x4, 0x101, 0x9, 0x7, 0xfffffff8, 0x401, 0xc0000, 0x4, 0xe, 0x715e, 0x4, 0xf, 0x706a]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x9ed, 0x10001, 0x4, 0x3ff, 0xfffffffc, 0xffffff6c, 0x0, 0x2, 0x331, 0x720, 0x3ff, 0x0, 0x3, 0xb, 0x2, 0x1, 0x5, 0x1c, 0xfffffffd, 0x9, 0xa, 0x8000, 0x5, 0x3, 0x1, 0x6, 0x0, 0x74f, 0x4, 0x6, 0x2, 0xb1, 0x1c000000, 0x2, 0x5, 0x6be455df, 0x100, 0x1, 0xfffff000, 0x3, 0x81, 0x1, 0x1400, 0x5, 0x7, 0x9, 0xe, 0x401, 0x10000, 0x7, 0x5, 0xcfca, 0x5, 0x61, 0x7fffffff, 0xe, 0x10000, 0x9, 0x800, 0xc, 0xe8d5, 0x9, 0x4, 0x2f03, 0x1, 0x7, 0x80000000, 0x7, 0xa, 0xf, 0xfff, 0x0, 0x3, 0x6, 0x1, 0x7, 0x7, 0x8, 0x4, 0x6, 0xfff, 0x2, 0x59d5, 0x3, 0x6, 0x0, 0x401, 0x8, 0x0, 0x1, 0xffffffc0, 0x10001, 0x2, 0x197, 0x3, 0x3, 0xc4, 0x3, 0x2, 0x4, 0x80000000, 0x3, 0x80000001, 0xfffffffc, 0x5, 0x101, 0x2, 0x1ff, 0x3ff, 0xe, 0x5ba, 0x15a, 0x2, 0x200, 0x0, 0x2, 0x4, 0x80000000, 0x0, 0x7, 0x2d4, 0x5, 0x5, 0x25, 0x2, 0xfff, 0x7e, 0xa, 0x0, 0x8000, 0x6, 0xfffffff9, 0x6, 0xfff, 0x4, 0x0, 0x7f, 0x9, 0x800, 0x0, 0x47, 0x9, 0x4, 0x0, 0x5, 0x1, 0x2, 0xd2f, 0x8000, 0x1, 0x7, 0x9, 0x6, 0xfffffff9, 0x5, 0x6, 0x101, 0x2, 0x9, 0x8, 0xffff3db2, 0x4, 0x3, 0xfffffffc, 0x81, 0x6, 0x2, 0x80, 0x8adc, 0x8000, 0x1, 0x4, 0xe, 0x3, 0x800, 0x9, 0x963, 0xfff, 0x6, 0x4, 0x2, 0x3, 0x800, 0x63, 0x0, 0x61e5, 0x2, 0x3, 0x8, 0x1, 0x2, 0x3, 0x1, 0x83c8151, 0x4, 0x7, 0x6, 0x9, 0x33, 0x7ff, 0x6, 0x9e2b, 0x2fef, 0x1, 0x7ff, 0xba6, 0x7ff, 0x2, 0x2, 0x5, 0x400, 0xa1, 0x84, 0xfffffffc, 0x4, 0x40, 0x2, 0x90e3, 0x0, 0x401, 0x8000, 0x95, 0xd, 0x0, 0x1, 0xffff, 0x9b, 0xffff, 0x1524985b, 0xf, 0x2, 0x4, 0x8, 0x6, 0x200, 0x2, 0x7, 0x5, 0x9, 0x0, 0x4, 0x3, 0x6, 0x2, 0x3, 0x7, 0x400, 0x5, 0x8, 0xfffffff5, 0x9, 0xd56b, 0x1ff, 0x7, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x4, 0x9, 0x7fffffff, 0x7, 0xef, 0x7, 0xfffff04d, 0x5, 0x2, 0x401, 0xb23, 0x7, 0x1, 0xffffffff, 0x3ff, 0x2be, 0x6, 0x0, 0x7, 0x3, 0x5, 0x8, 0xd, 0xffff4b4d, 0x2, 0x5, 0x9, 0x8, 0x8001, 0x0, 0x1, 0x94, 0xc87, 0x3800, 0x1, 0x0, 0x3, 0x0, 0x3, 0x2, 0x6, 0x4, 0x4, 0xfffffff1, 0x77000000, 0x6, 0x7, 0xfffffffc, 0x3, 0x6, 0xc, 0x9, 0x0, 0x1, 0x5, 0x6, 0x5, 0xcb, 0xff, 0x5, 0x8, 0x80000000, 0x1, 0xd, 0xffffffff, 0x6, 0x1, 0xe0, 0xfffffc01, 0x0, 0x8, 0x8, 0x1ff, 0x1ff, 0xfffffff5, 0x0, 0x7ff, 0x7fffffff, 0xd794, 0x38000, 0xf, 0x0, 0x6d, 0x40, 0x16, 0xc7, 0x8, 0x3ff, 0xdf9, 0x0, 0x80, 0x6, 0x9, 0x5, 0xa, 0x2, 0xfff, 0x9, 0x4, 0xb7, 0x4, 0x6f, 0x3, 0x4, 0x7, 0x3, 0x6, 0xe78, 0x9, 0x0, 0x8, 0x5, 0x6, 0x2, 0x5, 0x5837, 0x4, 0x3, 0x381, 0x0, 0x5, 0x6, 0x1, 0x8080, 0xffff, 0xa, 0x7, 0xfff, 0x2, 0x40, 0x9, 0xc, 0x1ff, 0x5, 0x800, 0x2, 0x5, 0xe41, 0x1, 0x2, 0x5, 0x9, 0x3, 0xfffffffb, 0x1, 0x9, 0x2, 0x9, 0xfffffff8, 0x8, 0x8, 0x0, 0x6ee4, 0xc, 0x9, 0x1, 0x2, 0x1, 0x1, 0x3, 0xffff, 0x2, 0x2, 0x3, 0x14, 0x8001, 0x9, 0xe5c3, 0xaa0e, 0x2, 0x8, 0xe, 0x4, 0x4, 0x4, 0x0, 0xfffffff9, 0x800, 0x100, 0xfffffffa, 0x6, 0x1, 0x6c6, 0x6, 0x9, 0x2, 0x7, 0x4, 0xa46b, 0x4, 0x80000001, 0x6, 0xd8, 0x4, 0xf, 0x1, 0x1316, 0x9, 0x2, 0x5b, 0x3, 0x3, 0x9, 0xffff, 0x9e, 0x9, 0x8, 0x4, 0x3ff, 0xfffffffc, 0x4, 0x8, 0x6, 0x11e, 0x88, 0x6, 0x4, 0x3bc09358, 0x48e, 0xdf800000, 0x6, 0x10001, 0x1, 0x5, 0x0, 0xf, 0x80000001, 0x5, 0x4, 0x8, 0x3, 0x3, 0xb8, 0xc, 0x1, 0xfffffffc, 0xe1e, 0x7, 0xffffce53, 0xb85, 0x6, 0xfffff800, 0x3, 0x2d94, 0xff, 0x7fff, 0x18, 0xffff, 0x5, 0x7f, 0x3, 0x2, 0x6, 0x400, 0xfffffffd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x8, 0xffffffff, 0x6, 0x7fff, {0x5f, 0x1, 0x81, 0xfff1, 0x8, 0x8}, {0x9, 0x2, 0x8001, 0x9, 0x7, 0x1}, 0x4, 0x3, 0x6}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x3, 0x2341, 0x0, 0x5, 0xffffffee, 0x2454f679, 0x3, 0x2, 0x6112, 0x76596141, 0x3, 0x5, 0x348d91d6, 0x9, 0x1, 0x4, 0x40, 0xf40, 0x800, 0x0, 0x5, 0x5, 0xfffffff7, 0x401, 0x0, 0x6, 0x8, 0x7, 0x2, 0x8, 0x0, 0x6, 0x8, 0x4, 0x200, 0x0, 0xfff, 0x295c, 0x1, 0x10, 0x3, 0x80000001, 0x88032a02, 0x8d9, 0x91, 0xffffa829, 0x11, 0x7fffffff, 0x10001, 0x8001, 0x110d106, 0x8, 0xcf, 0x0, 0xbde, 0xfffffffe, 0xbff7, 0x2, 0x4, 0x8, 0x200, 0x800, 0xf, 0x2, 0x10, 0xbca, 0x6, 0x0, 0x2, 0x1, 0xa, 0x3, 0x5, 0x8, 0x7, 0x19, 0x9, 0x5e8, 0x7, 0x7fffffff, 0x4, 0x528, 0xeaa, 0x7, 0x5bf, 0x3973, 0xbafd, 0x9, 0x800, 0x9, 0xffff, 0x8, 0x3ff, 0x2, 0x6, 0x4, 0x6, 0x6, 0x1, 0x6, 0xfff, 0x85, 0x2, 0x5, 0x8, 0xfffffffa, 0x8, 0x4, 0x100, 0x1, 0x7, 0x99, 0xfffffffa, 0xb596, 0x2, 0xde42, 0x81, 0x4, 0x4, 0x80000000, 0x401, 0xbc8, 0x2, 0x5, 0xfffffffd, 0x4, 0x2f86d40c, 0x9, 0x2, 0x46027052, 0x200, 0x101, 0xb58, 0x400, 0x1fb4e1f6, 0x3ff, 0x1, 0xff, 0xb8, 0x9, 0x1, 0x0, 0x40, 0x0, 0x9e38, 0x5, 0x1, 0x43, 0xea, 0xd, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6fc1, 0x3b, 0x10, 0x3, 0x7, 0x80000000, 0x4, 0x9, 0x4, 0x3ff, 0x6, 0xfffffff9, 0xa, 0x3, 0x16356831, 0x2, 0x0, 0x3fc0, 0x4, 0xff, 0xfffffffc, 0x8, 0x7, 0x22, 0x1ff, 0x8, 0x2, 0xf4, 0x0, 0x3, 0x8, 0x20000000, 0x2, 0x3, 0x81, 0x2ba5e079, 0x1, 0xffff, 0x2, 0x0, 0x6, 0x84, 0x8, 0xa3c2f8a5, 0x9, 0x685, 0x1, 0x0, 0x2, 0x8, 0x400, 0xeb, 0x1, 0xccc, 0x9, 0x10000, 0x7, 0x10000, 0x7ff, 0xf5, 0x0, 0x4, 0xfffffffe, 0x7f, 0xf5, 0x7, 0x2581, 0xc, 0x6, 0xd, 0x8001, 0xc, 0x6, 0x4f, 0x3ff, 0xfffffffa, 0x1, 0x2, 0x14800, 0xc64, 0x100, 0x8, 0xe23, 0xb5c, 0x80, 0x3, 0x7ff, 0x2, 0x67, 0x7, 0x1, 0x1, 0x400, 0x57, 0x9, 0x100, 0x401, 0x1, 0x400]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x7, 0xcca1, 0xd, 0x0, {0x9b, 0x1, 0x0, 0x5, 0x3b2, 0x4}, {0x4, 0x2, 0xc, 0x9fc, 0xc5, 0x3}, 0xcb, 0x4, 0xf18}}, @TCA_POLICE_RATE={0x404, 0x2, [0x40, 0x8001, 0x1, 0x5, 0x401, 0x124ab89f, 0x9, 0x4, 0x1, 0x4, 0x200, 0x9, 0xf8e, 0x71564db8, 0x14, 0xffffffff, 0x0, 0x1, 0xe3f, 0x2, 0x9, 0x78e, 0x5, 0x8, 0x7, 0x3, 0x3, 0xff, 0xfffffffd, 0xb, 0x3ec, 0x7, 0x8a, 0x993e, 0x1, 0x9, 0x268b, 0x5, 0xe, 0xfffffffc, 0x1, 0x8, 0x4, 0x8, 0x1, 0x231, 0x7, 0x9, 0xae, 0x0, 0x1e2d, 0x401, 0x5, 0x7f, 0x4, 0x8, 0x5, 0x8, 0x4, 0x0, 0x9, 0x400, 0x3, 0x7, 0x0, 0x1, 0xf5a9, 0x8, 0x6, 0x179, 0x1, 0x8a, 0xad, 0x9, 0x2, 0xa, 0x999, 0x9, 0x8, 0x7, 0x1, 0x0, 0x4, 0x200, 0x0, 0x1, 0xa1, 0x7b, 0x0, 0xd, 0x5, 0xffffff43, 0xd99, 0x8000, 0x10, 0x3, 0x5, 0x8, 0xafe1, 0x8000, 0xe, 0x6, 0x8, 0x1ff, 0x8, 0x8, 0x1, 0x10000, 0x80, 0xfffffff8, 0x1ff, 0x3, 0x7, 0x41ed, 0x6, 0xffffffff, 0x8, 0xf0000000, 0x9, 0x9, 0x4, 0xcc, 0xe, 0xb8, 0x4, 0x101, 0x4, 0x4, 0x5, 0xa, 0x6, 0x2, 0x9, 0x0, 0x5c9, 0x3, 0x80000001, 0x9, 0xfffff000, 0x8, 0x7, 0x2, 0x0, 0x3f, 0x2, 0x3, 0x7fffffff, 0x9, 0xb, 0xe2, 0x3ff, 0x8, 0x2, 0x0, 0x7f, 0x2, 0x53, 0x3, 0x16f2, 0x3, 0x8, 0xb0, 0xde, 0x10001, 0x81, 0x400, 0x6b, 0x2, 0x3ff, 0x7, 0x8, 0x3ff, 0xe5, 0x6, 0x8, 0x8, 0x101, 0x6, 0x51, 0x9, 0x3, 0x5c7, 0x7, 0x9, 0x4, 0xf, 0x1, 0x7, 0x200, 0x8, 0x7fff, 0x200, 0x6, 0x7, 0x40, 0xffff, 0x82, 0x9, 0x80, 0x8, 0x400, 0x6daebebd, 0x8000, 0x2, 0xffffffff, 0x1, 0x215, 0x3, 0x4, 0x6, 0xffffff01, 0x3d, 0x7f, 0x5, 0x4, 0x0, 0x6, 0xb639, 0x7, 0x1ff, 0x1, 0x9, 0x8001, 0xbc, 0xc, 0xb6f8, 0x9, 0x1, 0xc, 0x9, 0x8, 0x5, 0xa013, 0x10001, 0xb, 0x86, 0xbb, 0x3b, 0x27, 0x1, 0x200, 0x6, 0x5, 0x10e, 0x8, 0x4, 0xfb6, 0x1, 0x8, 0x2, 0xff, 0x800000, 0x0, 0x1253, 0xffffffff, 0xbd03]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x6, 0x4, 0x3, {0x6, 0x3, 0x401, 0x947, 0x81, 0x1}, {0x9, 0x1, 0x3, 0x2, 0x3, 0x7}, 0x3, 0x7f, 0x9}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xfb9a}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3ff, 0x10000000, 0x0, 0x6, 0x7, {0x1, 0x2, 0x9, 0x5, 0x9, 0x2}, {0xff, 0x0, 0x4, 0x8, 0x8, 0x99b7}, 0xac, 0x1, 0x101}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0x7, 0x9, 0x8, {0x1, 0x1, 0x78, 0x0, 0xdf, 0x16e6}, {0x1, 0x1, 0x4, 0x9, 0x9, 0x5}, 0x9, 0x13, 0x8}}]]}, {0x61, 0x6, "3630818b29313aa6ecceb24e73135657eb99b410aef1023580a3f631a857997e5e93b5be0e971ee6eee7a6a26f88ad804c5183c48de706d8db16ba6a04c1b385d09223710977b65de106012200b36d74ae77d3d217c7199d128e697dd9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_nat={0x19c, 0x8, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x80, 0x9, 0x2, 0xa, 0x7}, @multicast2, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x81, 0x7, 0x4, 0x3, 0x9}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff1, 0x7, 0x7, 0xa, 0x2}, @dev={0xac, 0x14, 0x14, 0x28}, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xfffff73f, 0x20000000, 0x40, 0x1}, @remote, @broadcast, 0xffffffff}}]}, {0xd4, 0x6, "a1362aae04f3ffbb7df26f183cc24e5c8dd966e62cd19a9eb1b9533e89b7afd015c483a1ebf98ac53b9782c4ccce594a146bf8158d81b1a11350dd3f883c31fdbdaccdf71dee72a69a94a09c18c900c3a0ee63b3736fc1df2904c2c1338c5b3e53fd2f91c5a2880ea38d53f0e19eaa3830d132dd953008cc50dcc98aaab3a17b1418cba8d56919a222dcc01725568ac739dcba803bb3681fd47d955d59be0bd06639844fcceef9bcbc6ac8639e7a9986c28e5587c17b30675a0595e6f9cfb890855a8d3f9667f8c3db3d0fd9b22dfb14"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x11c, 0xf, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x6, 0x7, 0x1, 0xffffffc0}, @multicast1, @local, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc7, 0xfffffd94, 0x20000000, 0x7, 0x8001}, @private=0xa010100, @empty}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x1, 0x0, 0x9, 0x1ff}, @multicast1, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xba, 0x4, 0x1, 0x10}, @loopback, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xce2a, 0x9, 0x10000000, 0x9, 0xe4db}, @remote, @local}}]}, {0x2c, 0x6, "08a39e0304d06ed73c62324cb0f81388fb22eae6663456999ae969c546ddf2c030e80d45d6e847b4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_gact={0xb4, 0xc, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x3e8, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x572, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x7fff, 0x1, 0x5, 0x9}}]}, {0x55, 0x6, "b32aa0f530161da462cee092d2dd2f4f22fe749d56d32f14937c47f7d748028d70704ab36b75046366acceced7d9709d2d76d8bd3436e761dcb4b204258a79a11e0b3b9b4ea43a4db5dafe007c2431e28a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0xb0, 0x20, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x9, 0x3, 0x1, 0x800}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x100, 0x9, 0x0, 0x1}, @remote, @remote, 0xffffff00}}]}, {0x37, 0x6, "29b41399bb52503e03342f9135694cfa2be70d4f2ea8d69809d3efd5c6650a78fb9c68bde36a4b3d4abd51d30ff0ee756a2c8c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_vlan={0x134, 0x1a, 0x0, 0x0, {{0x9}, {0x60, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x396}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x4454}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x3, 0xffffffffffffffff, 0x3, 0xfffffffb}, 0x2}}]}, {0xac, 0x6, "2856693ab073308c1f23a2e08b6d777afb0c70c63e60c9699719d962c6025f6f35a065ce8998eb706506ee8433aee287e0191e848e5926f1ede0ec090e084d46d00cb56634e39eacf8dfec4022b580c961ed55134e3693f022400bdc12bb8d903d10a16ce551c6e31af7379272f0d0beec4cb72528de0421ce4e8ca2309b2e0157c45d5fd44342cfa25ef9b95488bac6c3468c97869e4fbba16e9b36acd6b3694e86690a1990e6aa"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0xdc, 0x12, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x1, 0x0, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0xfff3}}]}, {0x76, 0x6, "1efc67503129cae0c44179abda2f7989b27a13bf299fc47273867692e723bf756bcee8ee4a1b1ce896dc8778199c37d20d872edfb192bd33dd9aac4834566abfefab76e0e17b13d69b7687302f14221e9fc21f789585558a15fda5692b464a280aee7e994d950e1bb0a75332bd18c82645d3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x299c, 0x2, [@TCA_ROUTE4_POLICE={0x60, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x5, 0x3, 0x1, 0x80000000, {0x8, 0x2, 0xd4, 0x0, 0xfffc, 0x3}, {0x4, 0x2, 0x4, 0x4, 0xc, 0x2}, 0x8, 0x4, 0x1}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x101}]}, @TCA_ROUTE4_ACT={0x11c, 0x6, [@m_gact={0xc4, 0x19, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2230, 0x7}}]}, {0x8a, 0x6, "e7ec361d9855cc8149ff92b30ae4e43cef93491850593158344ea502fb43ff4f544b12aa59eadbc69de54e61ef90dc14f74afea52c2fcb8a62c1fd8efcca4ccb646cd8ee48284e52f7beea0e4cd7d3c0070eecad58b5aff6c42b20b3249f76fbae3907a4edd9f11ed98434dc0e628a3938ab2fca2d88e7c0d4ef38376fd3ac3e5f1a24734c1b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_gact={0x54, 0x10, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x3, 0x10000000, 0xe89a, 0x6}}]}, {0x10, 0x6, "6eff634c0fa07ad003abd116"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_ROUTE4_POLICE={0x10d0, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x4, 0x80000000, 0xe95f, 0x4, 0x0, 0x7, 0x4, 0x1b4, 0x5, 0x545d, 0x3, 0x6, 0x2, 0x3, 0xd252, 0xd1, 0x5, 0x2, 0x2, 0x0, 0x4, 0x4, 0x2, 0x0, 0x7, 0x8000, 0x9, 0xfe79, 0xfffffffa, 0xd08, 0x7bc4, 0x8000, 0x656, 0x0, 0xa780, 0x450, 0x7, 0x7ff, 0x1, 0x9, 0x0, 0x7, 0x1, 0x527, 0x0, 0x9, 0x1ff, 0xffffffff, 0x4, 0x0, 0x8, 0x0, 0x3ff, 0x7, 0xf81, 0x7, 0x4, 0x31, 0x6b, 0x9, 0x9, 0x8, 0xa, 0xa, 0x800, 0x9, 0x4, 0x5, 0xd3, 0x3, 0x7af, 0x7f, 0x5, 0x6, 0x4, 0x3, 0x8, 0x2, 0xc7, 0x4, 0x1, 0x101, 0x3, 0x800, 0x6, 0x6, 0x7, 0x59, 0x2, 0xfffffff4, 0xb, 0x1, 0x0, 0xd1eb, 0x6, 0x4000, 0x4, 0x8001, 0x68d, 0x101, 0xffffffff, 0xd, 0x2, 0x4, 0x3ff, 0x6414c672, 0xffff0000, 0x610, 0x5, 0x67, 0x3, 0xfffffffe, 0x5, 0x6c, 0x0, 0x33, 0xe02, 0x0, 0xc0, 0x4, 0x8, 0x7fffffff, 0x7, 0x81, 0x0, 0x7fffffff, 0x8, 0x2, 0x7fffffff, 0x68150a19, 0xfffff771, 0x4, 0x6, 0x5, 0xc4, 0x1, 0x6c, 0x9, 0x2, 0xfffffffb, 0x9, 0x4746, 0x12000000, 0x401, 0x10001, 0x8, 0x6e, 0x3, 0x5, 0x3, 0x8, 0x7, 0xd16, 0x0, 0xe12b, 0x1, 0x7, 0x3ff, 0x153b60, 0x4, 0x5, 0xfffffffe, 0x4, 0x1, 0x4, 0x2, 0xdf4, 0xff, 0xe, 0x7, 0x5, 0x7, 0x0, 0x8, 0x0, 0x3, 0x7292, 0x1000, 0x113c, 0x4, 0x5, 0x9, 0x54b, 0x2, 0xfffffffc, 0x8, 0xff2, 0x64000000, 0xab, 0x72c7, 0x4, 0x10001, 0x4, 0xc, 0x4, 0x7f, 0x2, 0x2, 0x5c7, 0x10001, 0x3bf0, 0x0, 0x7, 0x0, 0x6, 0xd99a, 0x3ff, 0x6, 0x0, 0xffff, 0x5, 0x48, 0x7fffffff, 0x400, 0x0, 0x0, 0x6, 0x871, 0x7, 0x3, 0xfffffff7, 0x86f, 0x4, 0x100, 0x100, 0x3, 0x3, 0x5, 0x19e, 0x3, 0x4, 0x1ff, 0x3, 0x1, 0x2, 0x1, 0x81, 0x9, 0x7d, 0x4000, 0x1, 0xff, 0x8, 0x69, 0x7c06, 0xffffffff, 0x3ff, 0x44028068, 0x3, 0x0, 0x7, 0x82, 0xffffffff, 0x5, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x5a, 0x8, 0x7ff, {0x81, 0x1, 0x0, 0x2, 0x4, 0x5}, {0x3, 0x1, 0xb114, 0x8, 0x7, 0x9}, 0x7, 0x8, 0xcee}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x9, 0x660c, 0xb0a1, {0xf, 0x1, 0xb, 0xfffe, 0x7, 0x9}, {0x6, 0x1, 0xe0e, 0x141, 0x4, 0x3}, 0xb, 0xb540, 0x80000000}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x5, 0x5, 0x3, 0x5, {0x1, 0x0, 0x5, 0x0, 0x4, 0x15f4}, {0x4, 0x0, 0x1ff, 0x800, 0x2, 0x3}, 0x2, 0x7fff, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x307, 0x0, 0x0, 0x64a, 0x80000001, 0x662, 0x0, 0x39, 0x1, 0x4, 0x1, 0x101, 0x6, 0x9, 0x4, 0x2, 0x6, 0x457, 0x380, 0x0, 0x100, 0x0, 0x1, 0x7, 0x40db, 0xfffffffc, 0x2, 0x8, 0x7, 0x5, 0x1, 0x0, 0x5, 0x6, 0x5, 0x6, 0x3, 0x5, 0xc61, 0xe29, 0x8872772, 0x3, 0x200, 0xd6, 0x9, 0xa0e, 0xfffffffc, 0x4, 0x400, 0x0, 0xfffffff2, 0x9, 0x5, 0x80000001, 0x4, 0x1, 0x1ff, 0x0, 0x4, 0x9, 0x9, 0x5, 0x7, 0xfffff20e, 0xcc6, 0x9, 0x5ffe, 0x0, 0x2db, 0x81, 0x81, 0x8, 0x1, 0x6, 0x3, 0x6, 0x7f, 0x5, 0x8, 0x0, 0x10, 0x2, 0x9, 0x4, 0x4, 0x9a, 0x401, 0x400, 0x7, 0x4, 0x6, 0x5, 0x5, 0x10, 0xf59c, 0x5, 0xc, 0x4, 0x7, 0x9, 0x6, 0x1, 0x9, 0x84, 0x2, 0x7, 0xfffffff3, 0x9, 0x6, 0x4, 0x2, 0x6, 0x0, 0x8, 0x9, 0x811, 0x7f, 0x30, 0x4, 0x6, 0x6, 0x887e, 0x2, 0x20b, 0x5, 0xc4, 0x5c, 0x2, 0x6, 0x9, 0x4, 0x3ff, 0x80000001, 0x8, 0x1, 0xfffffffb, 0x2e2, 0x4, 0x7, 0x401, 0x3, 0xb55f, 0xff, 0xd9a, 0x7, 0xb, 0x2, 0x4, 0x2, 0x0, 0x9, 0xfffffffd, 0x2e, 0x1, 0x8, 0x3, 0x1, 0xffe00000, 0x4, 0x0, 0x40, 0x7, 0x101, 0x40c6, 0x0, 0x8, 0x2, 0x6, 0xfff, 0xd, 0xe000, 0x1, 0x8001, 0x8, 0x57, 0x1f, 0x10, 0x8, 0x80, 0x0, 0x2, 0xf, 0xfffffff0, 0x8, 0x6, 0x2, 0x2, 0x800, 0x2, 0x5, 0x36, 0x6, 0x5, 0x6, 0x0, 0x3, 0x40, 0x5, 0x400, 0x5, 0x6, 0x6, 0x3, 0x65, 0x10000, 0x101, 0x0, 0x4, 0x3, 0x4, 0x7, 0x5, 0x4, 0xf, 0xffff, 0x3, 0x4, 0x6, 0x400, 0xe5ae, 0x8, 0x2, 0x7fffffff, 0xe30, 0x9, 0x9, 0xbf0, 0x1, 0x2, 0x9, 0x1000, 0x5, 0x1, 0x9, 0x9, 0xfff, 0x6, 0x1ad, 0x2, 0x2, 0x5, 0x6, 0x7f, 0xb9f, 0x7f, 0xb, 0xfff, 0x3c, 0x8, 0x2, 0x4, 0xfffffff8, 0x7f, 0x0, 0xa6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x400, 0x8001, 0x5, 0x1, 0x7, 0x45, 0x10, 0x7, 0x0, 0x8, 0x7, 0x5, 0x80000001, 0x7, 0x7, 0x7f, 0x2e4, 0x0, 0xffff8000, 0x8001, 0xd, 0x6, 0x3, 0x1, 0x0, 0x3, 0x2, 0xf, 0x81, 0x5, 0x5, 0x3ff, 0x2, 0x3, 0x3, 0x7, 0x66737d43, 0x685a, 0x7, 0x5, 0x467, 0xa, 0x5b4, 0x4, 0x5, 0x8000, 0x4, 0x81, 0x7, 0x100, 0x1000, 0x0, 0x3, 0x1, 0x7, 0x4, 0x8000, 0x8, 0xf614b08, 0x9, 0x7f, 0x6, 0x64, 0x1ff, 0x2, 0x2, 0x2, 0x5, 0x8, 0xc, 0x9, 0x7, 0x4, 0x5, 0x2bf, 0x9, 0xfc, 0xfffffff7, 0x2, 0x0, 0x2, 0x3d8, 0x2, 0x10, 0x0, 0xf, 0xfffffffc, 0x2, 0x8, 0x6, 0x13, 0x1ff, 0xff, 0x27800000, 0xfffffff5, 0x10, 0x0, 0x9, 0x4, 0xaf9, 0x2, 0x7ff, 0x2, 0x80c, 0x200, 0x2, 0x8, 0x8a, 0x6, 0xc93, 0x6, 0x5, 0x3, 0x6, 0x8, 0x4, 0x0, 0x8001, 0x5, 0x0, 0x2, 0x100, 0x9, 0x5, 0x2, 0xf, 0x8, 0x8, 0x0, 0x6f2370b5, 0x83c, 0xff, 0x1ff, 0x1, 0x0, 0x8, 0x14028049, 0x3, 0x1, 0x400, 0x2, 0x9, 0x0, 0xe3eb, 0xfa9, 0x0, 0x1bc0, 0x200, 0xe8e3, 0x0, 0xffff, 0x2, 0x5, 0x7, 0xfffffff8, 0x7ff, 0x4, 0x6, 0x100, 0x5, 0x0, 0x3, 0x9, 0xff000000, 0x7fffffff, 0x50e, 0x0, 0x0, 0xe, 0x10, 0xfffffff9, 0x3, 0x8, 0x9, 0x3, 0xdd, 0x0, 0x22c, 0xbb13, 0xc65, 0xbc2e, 0xfffffffd, 0x5, 0x10001, 0x9, 0x9a, 0x81, 0x0, 0xbe6, 0xf339, 0x5e40dfe9, 0x5, 0xfff, 0x0, 0x3, 0xe0, 0x9, 0x1, 0x9f9, 0x2, 0x7, 0x6, 0xea, 0xff, 0x300f, 0x3, 0x9, 0x1, 0x8ea9, 0x7a723b27, 0xb82, 0x3, 0xfffffffe, 0x8001, 0x8, 0x3, 0x4, 0xe416, 0xa, 0x2, 0x0, 0x0, 0x3, 0x7, 0x6, 0x3, 0x8, 0x4, 0x81, 0x1, 0x5, 0xf, 0xc, 0x9, 0x6, 0x3, 0xd4d2, 0xa3, 0x80000000, 0x400, 0x2, 0x5, 0x130, 0x3, 0x7, 0x4, 0x8, 0x200, 0x8001, 0x3ff, 0x9, 0x670cebd6, 0x8, 0xfffffffc, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x811, 0xca, 0x5, 0x7, 0x0, 0x5, 0x40, 0x0, 0x401, 0x4d56, 0x6, 0x50, 0x4, 0x7fff, 0x5, 0x4, 0x1cc, 0x0, 0xffff7fff, 0x0, 0xcc36, 0x115, 0x4, 0x244, 0x2, 0x7, 0xf, 0x9, 0x4, 0x7, 0x1, 0x5, 0x9, 0x0, 0xb, 0x9, 0x8, 0x1c, 0x5, 0x8, 0x5, 0xffffffff, 0x100, 0xcc9, 0xffffff00, 0x1, 0x6, 0x7feb9e4c, 0x7, 0xd0, 0x2, 0x7, 0x3, 0x6, 0x61b0620d, 0x8, 0x7, 0xc3b, 0xd, 0x2, 0x9, 0xfffffff8, 0x2, 0x5e, 0x800, 0x4e, 0x1, 0x8, 0x4, 0x5, 0x8, 0x3, 0x0, 0x700, 0x5, 0x6, 0x7ff, 0x5, 0x5, 0x40, 0x800, 0x40, 0x6, 0x4, 0x9, 0x1c00, 0x38, 0x4, 0x4, 0x6, 0xffff, 0x8, 0x6, 0x80, 0x18d6, 0x6, 0xc4, 0x8000, 0x5, 0x5, 0x8, 0x5, 0xa1, 0x3, 0x7, 0x10001, 0x80000000, 0x9, 0x4, 0xca0684e0, 0x4, 0x9, 0x0, 0xb, 0x8001, 0x9, 0x7fff, 0x3, 0x9, 0x401, 0x9571, 0x2, 0xe, 0x0, 0x4, 0x1, 0xffffffac, 0x200, 0x2, 0x19cafe8b, 0x5, 0x2, 0x1000, 0xffffffff, 0x7000, 0x6, 0xfff, 0x1, 0x6, 0x7a6, 0xffffff7f, 0x2, 0x8, 0x6, 0x80000001, 0x8, 0x5, 0x8, 0xfffffff7, 0x9, 0x49, 0x0, 0x2, 0xd, 0x0, 0x0, 0x1, 0xc, 0x1929, 0x1, 0xfffff445, 0x7fffffff, 0x140000, 0x1, 0x0, 0xa, 0x9, 0x5, 0x8, 0x6, 0xff53, 0xd, 0x5ec9ff29, 0x6, 0x1, 0xcd, 0x80000001, 0x3, 0x8, 0x9, 0x6, 0x8, 0xc2, 0x0, 0x6, 0x8, 0x1, 0x6d1, 0x0, 0x4, 0x0, 0x81, 0x0, 0x5, 0x4, 0xd8, 0x51573ee6, 0x7, 0xffffffff, 0x6, 0x8, 0x7, 0x4, 0x0, 0x5, 0x1, 0x6, 0x5, 0x10, 0x5b, 0x8, 0x8, 0x8, 0x2b, 0x7f, 0xe, 0xef86, 0xc6b7, 0x5, 0x2, 0x9, 0x7, 0x1bc7, 0x1, 0x8000, 0x1ff, 0x3, 0x40, 0x80000001, 0x1ff, 0xfffffff7, 0x8, 0x8000, 0x8, 0x2, 0xfffffadf, 0x1, 0x8, 0x7fffffff, 0x2, 0x800, 0xfffffff5, 0x47, 0x5, 0xc7, 0xfffffff7, 0x0, 0x3, 0x8, 0xff, 0x257, 0x1, 0x1, 0x2, 0x4, 0x17]}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r4}, @TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_ACT={0x12c4, 0x6, [@m_pedit={0xf88, 0x12, 0x0, 0x0, {{0xa}, {0xe9c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x7, 0x4, 0x6, 0xa774000, 0x4}, 0xa, 0x6, [{0x4, 0x7ff, 0xfffffff8, 0x2, 0x4, 0x1a46}, {0xc51, 0x0, 0x6, 0x37f, 0x6d, 0x8}, {0x7, 0xc26e, 0x6, 0x8, 0x20000000, 0x8}, {0x80000001, 0xc, 0x402d79dd, 0x9, 0x3, 0x4}, {0x1642, 0x8, 0x10000000, 0x8, 0x44f, 0x7ff}]}, [{0xe8d, 0x5, 0x7, 0xe, 0x1, 0x7}, {0x2, 0xffffffd6, 0x0, 0x5, 0x4e8, 0x6}, {0xbc, 0xc, 0x5, 0x3, 0x7997, 0x1}, {0x9, 0x1, 0x1, 0x1, 0x200, 0x2}, {0x8, 0x10b6, 0x7, 0x6, 0x0, 0x9}, {0x5, 0x1, 0x5, 0x5, 0x1, 0x7}, {0x0, 0x0, 0x5, 0x8, 0x2, 0x7}, {0x7, 0x0, 0x100, 0x0, 0xa, 0xffff}, {0x2, 0xf, 0xc0, 0x5, 0x5, 0xe49}, {0x4, 0x4, 0x8, 0x8, 0x7, 0x4}, {0x7fffffff, 0x1, 0x4, 0xffffffff, 0x7ff, 0x900}, {0xed9b, 0x4f742310, 0x2, 0xc0, 0x1000, 0x3}, {0x10000, 0x5, 0x6, 0x4, 0x6, 0x9}, {0x9, 0x7, 0x2, 0x101, 0xffffffff, 0x9}, {0xfffffc00, 0x183, 0x7ff, 0x7, 0x0, 0x4}, {0x8, 0x1, 0x5, 0x40, 0x5, 0x6}, {0x10001, 0xf43, 0x3, 0x9, 0x9, 0x3}, {0x0, 0x1, 0x9, 0x8001, 0x8b, 0xcd3}, {0xffffc070, 0x3, 0x6, 0x9, 0xbb, 0x8}, {0x8, 0x4, 0x9, 0x10000, 0xf67}, {0xd2a8, 0x1, 0x5, 0x4000, 0x5, 0xffff}, {0x7fffffff, 0xfffffff9, 0x9, 0x2, 0x7, 0x7}, {0x5, 0x2, 0xfffff34b, 0x1, 0x8, 0x9}, {0x401, 0x1, 0x2, 0xee, 0x9, 0xfffffffe}, {0x3, 0x1, 0xa0, 0x4, 0x100, 0x6}, {0xffff8001, 0x101, 0xffff8001, 0x8001, 0x3, 0x1}, {0x2, 0x80000000, 0xfffffff8, 0x0, 0x1, 0x767f}, {0x6, 0x8000, 0x8, 0x9, 0x4, 0xd}, {0x1, 0x6a30, 0x6, 0x0, 0x0, 0x9}, {0x3, 0x2, 0x3, 0x83, 0x6, 0xfff}, {0xfab, 0x800, 0x7, 0x6, 0x100, 0x8}, {0x10000, 0x8, 0x8001, 0x5, 0x3, 0x4}, {0x8, 0x8, 0x9, 0x101, 0x7f, 0x6}, {0x8, 0x5, 0x3ff, 0x442, 0x0, 0xfffff001}, {0x1, 0x7, 0x90, 0x5, 0x7, 0x1}, {0x9, 0x0, 0x1000, 0x0, 0x37, 0xe}, {0x7, 0x3ca0, 0x10000, 0x71, 0x1020, 0x2952b671}, {0x200, 0x5, 0x1, 0x6, 0x3c2, 0xfff}, {0x2, 0xfffffffe, 0x4, 0x0, 0x9, 0x8}, {0x3, 0xfffffffe, 0x2, 0x7, 0x80, 0x7a}, {0x83, 0x116d, 0x2, 0x0, 0x3ff, 0x9}, {0x1, 0x1ff, 0x0, 0xff, 0x6, 0x5}, {0x2, 0x4, 0x0, 0x3, 0xfb63, 0xe}, {0x930, 0x1, 0x4, 0xfc, 0xf, 0x4}, {0x5, 0x81, 0xfffffe01, 0x4, 0x0, 0x1}, {0x100, 0x7, 0x19, 0x0, 0x38, 0x4000000}, {0x41, 0x4, 0x9, 0xfffffffc, 0x0, 0x1000}, {0x715, 0xffff, 0x5, 0x24, 0x7, 0x3}, {0x762b, 0x7ff, 0x4, 0x8000, 0x4}, {0x3ff, 0xcd88, 0xa, 0x7ff, 0x4, 0xfffff800}, {0x0, 0x5, 0x800, 0x5, 0xaf, 0x19dc6545}, {0xfffffffb, 0x4a23, 0x7, 0x1, 0x10001, 0x6ead}, {0xb, 0xa235, 0x7, 0x2, 0x8, 0x8}, {0xffffffff, 0x1, 0x7ff, 0x656e, 0x7, 0xfffffff9}, {0xffffffe3, 0x10001, 0x7ff, 0x6, 0x4, 0x1}, {0x2, 0x6cf4, 0x0, 0x3, 0x7, 0x7a8}, {0xfffffff6, 0x3, 0x7, 0x10000, 0x2, 0xb9b6}, {0x8d, 0xa7d, 0x2, 0xfffffff9, 0x2, 0xc85e}, {0x401, 0x1, 0xffff5fed, 0xfffffff7, 0x192, 0x6}, {0x4, 0x7, 0x6, 0x0, 0x3, 0x4}, {0x78a, 0x3, 0x80, 0x0, 0x6, 0x10}, {0x7, 0xdd, 0xffffffff, 0x6, 0x101, 0x6}, {0x2, 0xfd3d, 0x101, 0xa, 0x2, 0x2}, {0x40, 0xc8c6, 0x8, 0x10, 0x10001, 0x4}, {0xb, 0x4, 0x9, 0x1, 0x6, 0xf2}, {0x8000, 0x7, 0x3, 0x8, 0x10000, 0x2}, {0x4, 0xfffffffc, 0x4, 0x4, 0x10000, 0xb}, {0x1, 0x2, 0x10001, 0x80000001, 0xffff, 0xf}, {0x4, 0x31, 0x3, 0x3, 0x7fff, 0x4}, {0x7fff, 0x3, 0x101, 0x9, 0x100, 0x9c72}, {0x80000001, 0xcf5, 0x8, 0x10001, 0xc1}, {0x7, 0x10001, 0x9, 0x8, 0x6, 0x4}, {0xfe0, 0x2, 0x8b49, 0x200, 0x7}, {0x991, 0xff, 0x6, 0x2, 0x6d98, 0x8}, {0x5, 0x1, 0x2, 0x9, 0xd679, 0x7ff}, {0x7, 0x0, 0x6, 0x9, 0x5, 0x800}, {0x1, 0x8, 0x1, 0x0, 0xffffffff, 0x7}, {0x6, 0x4, 0xa, 0x9, 0x8, 0x6}, {0x3ff, 0x1, 0xfab1, 0x6, 0xc, 0x4}, {0x8, 0x3ff, 0xffffffff, 0x4, 0xfffffff8, 0x5}, {0x272, 0xffffa506, 0x8, 0x5, 0x3, 0x5}, {0x700000, 0x5, 0x7fff, 0x8001, 0x6, 0x10001}, {0xe8d, 0x0, 0x5, 0xffe00, 0x10000, 0xc530}, {0x6813, 0xc299, 0x9, 0x0, 0x400, 0x989}, {0xfffffffb, 0x0, 0x0, 0x101, 0x8}, {0xf, 0xcec, 0x45, 0x40000000, 0x8, 0xec}, {0x80, 0xfffffd20, 0x4, 0x7, 0x8, 0x500}, {0xfffffffa, 0x4, 0x0, 0x3, 0x0, 0x8}, {0x7, 0xfffffffc, 0x2, 0x5, 0x0, 0x4}, {0x800, 0xff, 0x4, 0x0, 0x7, 0x1}, {0x3, 0xd, 0xffffffff, 0x4, 0x80, 0x1}, {0x9, 0xfffffffc, 0x15, 0x2, 0x1, 0xfffff4a8}, {0x7, 0x2400, 0x80, 0x4, 0x9, 0x401}, {0x8, 0x0, 0x9, 0x9, 0x9, 0x6}, {0x7, 0x2, 0x2, 0xfffffff1, 0x8, 0x3}, {0x6, 0x1, 0x4, 0xfb21, 0x0, 0x1}, {0xffff, 0x8, 0x5, 0x6, 0x57fcc1b9, 0x1}, {0x10001, 0x6, 0x0, 0x200000, 0x1, 0x7fff}, {0x7, 0x1, 0x5, 0x7, 0x1ff, 0x6d00a9f7}, {0x2b, 0x3, 0x9, 0xb5a, 0x0, 0x9}, {0x3, 0x0, 0x8000, 0x80000000, 0x9, 0x8}, {0x3155, 0xfffffff4, 0x9, 0x4, 0x80000, 0x11f}, {0x40, 0x1, 0x3, 0x40, 0xa11, 0x2}, {0x1, 0x1, 0x3, 0x6, 0x8, 0x2}, {0x9, 0x3, 0xb3a, 0x10001, 0x1, 0x2}, {0x8297, 0x8, 0x0, 0x9, 0x79d9, 0x758}, {0x4, 0xf, 0xffffff11, 0x6, 0x1, 0xffffffff}, {0x9, 0xe, 0x2, 0x8, 0x102f29fa, 0x3}, {0x4, 0x200, 0x2, 0x78e, 0x5, 0x7}, {0x2, 0x1, 0x4, 0xdf, 0x7ff, 0x7}, {0xb, 0xeae, 0x100, 0x0, 0x7ff, 0xfffffffc}, {0x200, 0xf30, 0xa5f, 0xd33978fb, 0xff, 0x2310ac2c}, {0x7, 0x60b6, 0x6, 0xf87, 0x100, 0x5}, {0x9, 0x6, 0x1, 0x1, 0xffffffc2, 0xac}, {0x0, 0x8, 0x2, 0x9, 0x9, 0x7}, {0x5, 0xf06, 0x1, 0x4, 0x7, 0x9}, {0xfffffffd, 0x6, 0x1, 0xae, 0xfffffff9, 0xd1}, {0x8, 0x0, 0x68e1, 0x81c, 0x5, 0xffff}, {0x220, 0x4, 0x2, 0x3, 0x0, 0x4}, {0x3, 0x0, 0x5, 0x5, 0x0, 0x6bcd}, {0x3, 0x1, 0x10001, 0xd9, 0xe, 0x9}, {0x40, 0x2, 0x7, 0x401, 0x3371}, {0x7ff, 0x8000, 0x1, 0x4, 0x4, 0x7}, {0xfffffff8, 0x10001, 0xffff, 0x9, 0xffffffff, 0x864a}, {0x401, 0x1, 0x8001, 0xfff, 0x5, 0x8}, {0x7, 0x7, 0x6, 0x0, 0x2, 0x29}, {0xfffffff8, 0x0, 0x1, 0x4, 0x0, 0x3}, {0x1, 0x0, 0xceb, 0x4, 0xff, 0x4}], [{0x2}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x3}, {}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x1782c97104a5330, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x1}, {}, {}, {0x3}, {0x5}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x5}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x48df29acee60bda9, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1, 0x2}, {0x4}, {0x4}, {0x5}, {0x0, 0x1}, {}, {0x2}, {0x2}, {0x5}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0xcd5fcb8d93c7e29a}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x5}, {0x7abcc7e81905e60b, 0x1}, {0x1, 0x1}, {0x3, 0x2}, {}, {0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}], 0x1}}]}, {0xc1, 0x6, "b4f511f15f2aa440a1847ea93539979c0087bca15dccefba43bce3155ffa021b9ed4add4ed31c05985b2dafd3e18418902d75d980445b37352921eebff88aa351cabf690193df664cab039ceafebf96a6f662516b8ace59ba447f3551a17f629804749c5e946e0fd8e0ecb321f1f27828fa6ef8945d9c1ff6bc9132e1d9ff017ccbc2e99f7552317c77db920682700fec49cc0be58f3e1bac9ccf15f4206358b91cecc15ec2329d93ed6afe4c3bfaa8283bc2b19b7652e5cf868daaaf3"}, {0xc}, {0xc}}}, @m_ctinfo={0x120, 0x18, 0x0, 0x0, {{0xb}, {0x4}, {0xf2, 0x6, "7f8ef25160c97ea0da0159a9836c6b8c5e43ea8b52cd79a7ee15993656aea1e3cf18f887bdfdc935a55fb8929897b4e1d788102b96dec2e0b804093d089800f5191a5b5df82c4c030be229e8d921cab8c7310cabc575ab3e0c6cdf4bd3398c712b8a286b047adf400552f58ca50992ac163d9dd2fd97923db2619302c7880778547e0c88674421d75b0d3480971f2fde1492e8c462173ae30b208a68aa0f8fc662a0d0fd5f34662a1c3cb374e87bed2fbbe2c65ccf7c93d41a95d25c4beb5e3e57baa6d55eefaf007694c301e670f80a1e513d3bfd2e4804f9535933f94b277d4a6c675b1ff275ae9f67b2e8e2f0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0x144, 0x1a, 0x0, 0x0, {{0xf}, {0x64, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0x1, 0x10000000, 0x7fff, 0xffffff25}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x101, 0x5, 0x7, 0x7, 0x7ff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}]}, {0xb3, 0x6, "c15df4a0ff55102b7ab7679947fef657af71907bcba31c049ee59f7c99317fdbf9620cd6e3b86a9d4315bff751884d8f13510992f719f5d81134a67f0f856ca2a627bb443333dcf52fc5b21802c3c3eade47c6f33abd55ecf1dbe884307ba5402702de1e1585dbcda39e9101747554037be8696d215457f7950ce5d63d4d2225ebe3d5f1a59c3d7ab1bdde5aaf9c2c1d5b5ab496b249cd198beb6c5858a5965a2eb9940510d1da5072d3f150b60a9a"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_mpls={0xd4, 0x1a, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x10, 0x5, 0x1, 0x8, 0x8}, 0x2}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x15}]}, {0x84, 0x6, "38e179f603535891eea8df5b8eefaa7295d41a8f29948408abb50594febad8f729ac28fd6eef00cc918b67fbddf004fd4ec33a525e757242ed2f65826031a87a8ae781e62d0e39c0d8e587dcdbf0b6d5c05a7c1bfa27863c85ddf3692f6690b9e3ea61ff5dec52961cfbfd81b324ea38d76c3e5ef489f889fe66875c6e86a73b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_ROUTE4_POLICE={0x474, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7ff}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd, 0x10000000, 0x1000, 0xf, 0x5, {0x8, 0x0, 0x7, 0x5, 0x9, 0x4}, {0x81, 0x2, 0xc, 0xffff, 0x1, 0x6}, 0x80, 0x0, 0x5}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x800, 0xae01, 0x6a29, 0x373d, 0x3, 0x0, 0x2, 0x6, 0x9, 0x3, 0x3, 0xd, 0x8, 0x9, 0x862a, 0xffffffff, 0x3, 0x0, 0x5, 0x3, 0x9, 0x9, 0x6, 0x76, 0x7ff, 0x400, 0x5, 0x1, 0x200, 0x7fffffff, 0x8, 0x4, 0x7e4e, 0x1ff, 0x4, 0x4, 0x0, 0x5e, 0x4, 0x9, 0x1892, 0x4, 0x10001, 0x6, 0x9, 0x8001, 0xff, 0xfffffe01, 0x7, 0x57, 0x0, 0x12ba9e66, 0x7, 0xe, 0x20, 0x3, 0x4, 0x8001, 0x0, 0xd, 0x7, 0x7, 0x9, 0x7, 0x5, 0x5, 0x80000001, 0xfffffe00, 0xa, 0x3, 0x5, 0x2, 0xb93, 0x1, 0x400, 0xfffffffa, 0x5, 0x4, 0x200, 0x7, 0x9, 0xfffff000, 0x6, 0xffffffff, 0x2, 0x10001, 0x9, 0x6, 0x7, 0x4, 0x2, 0x7ff, 0xffffff81, 0x0, 0x1000, 0x11e, 0x0, 0x0, 0x5b39, 0x9, 0x80e, 0x0, 0x3, 0x10, 0x1, 0x9, 0x10001, 0x8, 0xa9, 0x4, 0x200, 0x3, 0x9, 0x8000, 0x9, 0x7, 0x7, 0x7, 0x972, 0xc, 0x80, 0xb5, 0xc, 0x1, 0x4, 0x5, 0x6, 0x247a, 0x5ea9, 0xd9, 0x930, 0x1, 0x5, 0xfffffffa, 0xf, 0xffff, 0xd, 0xc, 0x1, 0x4, 0x0, 0x6a6, 0x2, 0x9, 0x8, 0x40, 0x8f08, 0x0, 0x4, 0x0, 0x813, 0x100, 0x9, 0x8001, 0x7f, 0x7ff, 0x7fffffff, 0x7ff, 0xffff, 0xffffffc0, 0x9, 0x7, 0x9, 0xf, 0x9, 0xdd, 0xffff, 0x0, 0xc, 0xffffffff, 0xfffffffe, 0x2, 0x8000, 0x6, 0x7, 0xf74d, 0x0, 0x7, 0x2, 0x5, 0x5, 0x80000000, 0x0, 0x1ff, 0x8, 0x1, 0x8, 0x6, 0x80000000, 0x9, 0x7, 0x4, 0x5, 0x10000, 0x1, 0x8, 0x402, 0x7, 0x2, 0x0, 0x3, 0xc, 0x6, 0x5, 0x3ff, 0x4b1d, 0xd3be, 0x7, 0xfffffffa, 0x2135, 0x7, 0x7, 0x77c3, 0xa0, 0x0, 0x9, 0x7, 0xffffffff, 0x8, 0x7, 0x8, 0x8, 0x5, 0x8, 0x8c8, 0x7, 0x9, 0x100, 0x5, 0x6, 0x0, 0x3, 0x800, 0x8, 0x3d5, 0x2, 0x3, 0xeb, 0x3, 0x6, 0x10, 0x2, 0x10000, 0x7, 0x6, 0xc00, 0x401, 0x4, 0xffffffff, 0xca, 0xfffffff8, 0x8, 0xa, 0x4, 0xe]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x75}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_flow={{0x9}, {0x4c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x7, 0x10}}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff3, 0xf}}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x2}, @TCA_FLOW_POLICE={0x18, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x5e32}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_MODE={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x90}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x47ac}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) (async)
sendmsg$kcm(r5, &(0x7f0000000880)={&(0x7f00000008c0)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000980)="27030200affd14120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) (async)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64)
r10 = accept4(r9, 0x0, 0x0, 0x80000) (rerun: 64)
ioctl$int_in(r10, 0x5452, &(0x7f0000000180)=0xd)
sendmsg$BATADV_CMD_GET_GATEWAYS(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x0, 0x800, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4880}, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)

6.188593581s ago: executing program 5 (id=3818):
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000140)='fus%\x00\x18\xf0,?\x1f\x7fb\xe7*\xf9I:\x80k\'~\xde\x9f`?\xf9q\xdf\x1e\xfb\xc4\xcaW\x9e\xe6\xaeM\xe5\xe7\x18\x1e\x83\xd9\xbdK\"yK\xa5\xc2\xfb\\\x92\x05\x1e\xfe\bx\\\x04d){\x88\x81\xe4a{w\xc5\xb5\xb8\xe1\x93\xd8\xdfh\xf0:c\xaf\xb6@\xdf\xe3l\x9c\x03]M\xac\xc2\xdao\x1d!l\xf3\x89\xc78\xdfQ\xe5\xb6\x01\x88\x8f\xc7T\xec\xa7\x99P2h\xe1\xb4\x1c\xa1yIA\xdb]\x87\xa4>[%\n\xf0g\r@\x05Xv\xb31\xe4\x94\x91\xd9\xfb(d\xea\xc0\x13\x1a\x15\xf38\xfa\r\xa00\xfe\xff\x12\xf9|\xc1\xad\xd1\xd0\t\xd7\xb1a\x8a`c\rj\xa1\xcb+)\xa6\x9e\xe9.?\x1ac\x05\xbe\xe3:/\xb5\b\x98\x9dx\x18\x19Um\xd8\x00Z\x9a{`S\xfafk\xfc\x9a\xd4\xc5\xaf\x84U\x88\x93\x7f\x9f\xe5_\xc7h>^o\x8cW\xd8>\x05z\x04\xbbU\xa1}\xe8\x03~_S\xe9O\x99\x16\x92._\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r')
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c00000015000100020000000000000008000000080001e8feffffff08000200010100020000030000000000"], 0x2c}}, 0x20000800)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0x8}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000a00)={0x2, 0x44, 0x0, 0xea95, 0x3}, &(0x7f0000000a40)=0x18)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000580)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', <r7=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a80)=@newqdisc={0x130, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x7fffd, {0x0, 0x0, 0x0, r7, {0x10, 0x9}, {0x1, 0xb}, {0x4, 0x1}}, [@TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x7, 0x8, 0x5759, 0x0, 0x3, 0x80000001, 0x5}}, {0xe, 0x2, [0x8, 0x9, 0x5, 0x0, 0x6]}}, {{0x1c, 0x1, {0x7, 0x9, 0x6, 0x8ca4, 0x2, 0x4, 0x6, 0x6}}, {0x10, 0x2, [0xe041, 0x81, 0x7, 0x40, 0x6, 0x1]}}, {{0x1c, 0x1, {0xf, 0x0, 0xb, 0x7, 0x1, 0x2, 0x8, 0x9}}, {0x16, 0x2, [0x200, 0x0, 0x4, 0xf9, 0x1, 0xc, 0xff, 0x8, 0x2]}}, {{0x1c, 0x1, {0x2, 0x3, 0x1, 0x0, 0x0, 0x3, 0x10, 0x7}}, {0x12, 0x2, [0x5, 0x3, 0x1, 0x7, 0x0, 0x7, 0x2]}}, {{0x1c, 0x1, {0x4, 0xb2, 0xae, 0x9, 0x1, 0x7, 0x8, 0x4}}, {0xc, 0x2, [0x7, 0x1ff, 0x5, 0x3]}}, {{0x1c, 0x1, {0xae, 0x20, 0x44, 0x1000, 0x2, 0x100, 0x1fc0, 0x2}}, {0x8, 0x2, [0xfdc, 0x159]}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000000)
sendto$packet(r6, &(0x7f00000006c0)="050306000000140000004788031c09102c28", 0x12, 0x4, &(0x7f0000000700)={0x11, 0x0, r7}, 0x14)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001400010000000000000000000a0000080002000100000000"], 0x1c}}, 0x0)
fsopen(&(0x7f00000000c0)='pvfs2\x00', 0x1)
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000002c0)={0x101ff, 0xa, 0xb000, 0x2000, &(0x7f0000003000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x18, 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000440)={<r11=>0x1}, &(0x7f0000000840)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000880)={r11, @in6={{0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, [0x16f, 0x4, 0x2, 0x2, 0xffffffff00000001, 0x40, 0x1, 0x9, 0x0, 0x8, 0x3, 0x3, 0x4000009, 0x4, 0x80001]}, &(0x7f0000000980)=0x100)

6.138913566s ago: executing program 1 (id=3819):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000200)={0x0, 0x0})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)

5.542101197s ago: executing program 4 (id=3820):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_team\x00', 0x10)
sendto$inet(r1, 0x0, 0x0, 0x804, &(0x7f00000000c0)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000100)=0x4fffc, 0x55)
recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x40010160, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}]}, 0x34}}, 0x0)

5.075662491s ago: executing program 1 (id=3821):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103080000000000000012000904"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
syz_usb_connect$uac1(0x0, 0xc7, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x323b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x3, 0x1, 0x1, 0x80, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x203, 0x1, 0xf7, 0x5, 0xc9, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x0, 0xff, 0x4}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x4, 0x2e, 0x9, "", "c6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xc, 0x4, 0x1, {0x7, 0x25, 0x1, 0x0, 0x6c, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x8, 0x3, 0xfa}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xc, 0x2, 0x0, 0x7e, "3a41423dfeea"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5a8b, 0x2, 0x9, 0x5b}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5f, 0x3, 0x10, 0x4}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x4, 0x7f, 0x40, "4b05"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xf, 0x80, 0x3, {0x7, 0x25, 0x1, 0x4, 0x7, 0xffff}}}}}}}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x250, 0x6, 0x6, 0x6, 0xff, 0x2}, 0x13a, &(0x7f0000000b80)={0x5, 0xf, 0x13a, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x2, 0x76, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x11, 0x7, 0x0, 0x2, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "34311fbe6e7b550f220e2ccba1c85f6e"}, @ss_cap={0xa, 0x10, 0x3, 0x289f9150a176dc46, 0x2, 0x0, 0x5, 0x9}, @generic={0x46, 0x10, 0x6bac38acfb71c133, "bae1410a6104890934848a18301c565c18541a2b663ef13e41e3812e0b919b76ce1bc6b4147804fa528a004b975ac748e236aaa05efb608bc71ee3560d330331457bb8"}, @generic={0xbc, 0x10, 0x4, "343499a06a3b81f49e63cf3029e13ac95d4824243d44ab56e4889f6b39174ad033a345726a6bae6ceb5232dd5839a42867c2666e53f7a0900825a8d23c8c2f01fcd072a9e7d23541d47ccaeb9a137b1244cbba9321b49480ce2749e7b082202fc5ac9f49362dca39bb6343c7064e53d3d2f54bac9be0246af3b9d1d703e987da8fa6c55ac4b414e20cde3636a6f89caaf1d7c8bf3dfce18fe95e7be6ce274529220311780f8e8b24b12c841510767de821dfcb4e751313c46b"}]}, 0x4, [{0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x3001}}, {0x35, &(0x7f0000000d40)=@string={0x35, 0x3, "99c4090ec42b4b687b9c1378b810b21627971823c6e35d6feb943328bcf855872ed7edc864b012274f20f6d20998f1c64999c4"}}, {0x95, &(0x7f0000000d80)=@string={0x95, 0x3, "c9c509e22cf03ccb5ce0fd3bd5bbec8adcc22f5810f2ddf509b2895deb9525214528b3132803730a623fecb4659ed1a89337c4972bf220fe6475e48008a003c08cdd7ec3c09338648441eedc0e50f517cd6a4a2ccd2dddb158307341b83e9d5c186de9ad2739a9d204a3e068b19485376540fcde379585530125c8f3b2bd5be88d6b00ed13caf76225755fa5510e8cf7347a9e"}}, {0x16, &(0x7f0000000e40)=ANY=[@ANYBLOB="1603575ef684be91bc06ebcedebb0c306295a01b3b32"]}]})
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c0c9}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000000)={0x40, 0xc}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r2 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2)
ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f0000000140)={0x0, 0xfffff230, 0xf, '\x00', &(0x7f0000000100)=0x7})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000240)={0x4800}, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0xffffffffffffff4a, &(0x7f0000000640)={&(0x7f0000000680)={0x18, 0x16, 0xa01}, 0x78}}, 0x0)
recvmmsg$unix(r3, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
r4 = syz_usb_connect$lan78xx(0x6, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10)
syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
sendto$inet(r5, &(0x7f00000004c0)="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", 0x145, 0x805, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}], 0x3}, 0x2}], 0x2, 0x22, 0x0)
syz_usb_control_io$lan78xx(r4, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x20, 0x9, 0xcd, {0xcd, 0x6, "7c3d99f8cc09cfb810ad6f4ce80d8de818d9d83ea9f30e774917d2a15962b2a787bf242b21bb3b807e64d93d40000508097bef51862758d86f464953c88406f20aef0605ababe86b78e76c3225696c33e7d65e801c9cdf0376e699a07d7e2f96cff4f8cb0bac3ebac9959add6b94bd254a3802cb0a22d0658b8bac0c604be86400ec5e90e1c13e1abfdfa672d0dc3c75613210c78a57edfd05ecd167a96555f6ca2c1ee88cb7bf40423d42ff6b7b442b9d68b69ce8ac93248e88ec5b043ed9a7897128e7a3c3d67182af00"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}}, &(0x7f0000000400)={0x34, &(0x7f0000000440)=ANY=[@ANYBLOB="201837000000425203235f40df6b2f70f326e95c686a05ab36028e705c126d57c7deb8e83cef5b7c1dde410c4988191180eeb2db3c0127d331219d8a5478945ea764c84dad8386756a1f231173179ccd4c6cf6e4ba2c9bca2dc03b673c2fbf62668c9bfad3797a4c9028ea192c344b4baa"], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000700)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000380)={0x40, 0xa0, 0x4, 0x3}, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)

4.189195149s ago: executing program 0 (id=3822):
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x1, 0x44, 0xfffffffffffffffc, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r4, &(0x7f0000000400)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x14, 0x3b, 0x301, 0x2270bc22, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x400440c0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000280)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000340)=0x1000)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000003c0)=@x86={0x5, 0x8, 0xfe, 0x0, 0x200, 0x2, 0xf, 0xd, 0x9, 0x2, 0xe8, 0x6, 0x0, 0xe5, 0x74, 0x7, 0x2, 0xd, 0x9, '\x00', 0x2, 0x7})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)

3.907437197s ago: executing program 0 (id=3823):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
dup(r0)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000640)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1f000000, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2103, 0x2d8, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2000, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

3.206776115s ago: executing program 0 (id=3824):
r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405205105500000102000109023e00010100803209040000040806620007050102000200042401000705820200020004240200070583020002000424030007050402000200042404"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x44, r2, 0x409, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "b1d53541efd240344fbeede3bb1bf311"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x36}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8810)
poll(0x0, 0x0, 0xa1)
r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_pts(r4, 0x40000)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)

1.962657641s ago: executing program 1 (id=3825):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x11c0, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0)
modify_ldt$write2(0x11, &(0x7f0000000400)={0x9, 0xffffffffdfffffff, 0x4000, 0x0, 0x3, 0x1, 0x0, 0x1}, 0x10)
modify_ldt$write2(0x11, &(0x7f0000000440)={0x0, 0x20000000, 0x400, 0x1, 0x3, 0x0, 0x1, 0x1}, 0x10)
r1 = fsopen(&(0x7f0000000480)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
symlinkat(&(0x7f00000004c0)='./file0/../file0/file0/file0\x00', r2, &(0x7f0000000500)='./file0\x00')
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x32, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000083ef0840cc7d6e67db7700000003090220000100000000090400000eef0101"], 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f00000006c0)={'syzkaller0\x00', @random="440000004ec6"})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x4044)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x22, 0x3, "91abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xa0}}, 0x0)
unlinkat(r2, &(0x7f00000008c0)='./file0/../file0/file0\x00', 0x0)
fsetxattr(r0, &(0x7f0000000280)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0)
fgetxattr(r0, &(0x7f00000002c0)=@known='user.incfs.size\x00', 0x0, 0xfc55)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40042, 0x102)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00')
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000180)={0x6000000d})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c4ea32a7c7c8835969c00d4962000796ba7bd7000fb0000007506000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)

740.326416ms ago: executing program 5 (id=3826):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc0}}, 0x0)

736.776315ms ago: executing program 4 (id=3827):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x68}}, 0x0)
bind$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x3a, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x10, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x8, 0x2000000000004}}}}}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x300, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x20)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@private2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20)
recvmmsg(r0, &(0x7f00000006c0), 0x400000000000338, 0x2, 0x0)

568.307863ms ago: executing program 3 (id=3828):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f00000001c0)={0x40, 0xd, 0x12, "e7af4f60c4911b3a3403f96b4a779e693daf"}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x1, 0x802) (async)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x10, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0) (async)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) (async)
write$tcp_mem(0xffffffffffffffff, 0x0, 0x0)
unshare(0x60000600)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x4008032, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async)
syz_clone(0x0, 0x0, 0x54, 0x0, 0x0, 0x0) (async)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1, 0x7, 0x10000)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) (async)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0) (async)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0) (async)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)

553.379168ms ago: executing program 4 (id=3829):
r0 = socket(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440))
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000480)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x2, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x501}]}, 0x34}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
wait4(0x0, 0x0, 0x2, 0x0)
ptrace$getregset(0x4204, r5, 0x201, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x42, 0xc8, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x706}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000200)=0x1002, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x4e20}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, r7, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r9 = getpgrp(0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r11=>0x0})
socket$xdp(0x2c, 0x3, 0x0)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r10, &(0x7f0000000240)={0x0, 0x48, &(0x7f0000000280)={&(0x7f00000002c0)={0x34, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xffffffff, 0x0]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x34}}, 0x0)
mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil)
r13 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$KDGKBDIACR(r13, 0x4bfa, &(0x7f0000000400)=""/54)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r7, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2}, @void, @val={0xc, 0x99, {0x1c000000, 0x2e}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x20}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000040)

535.727221ms ago: executing program 5 (id=3830):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x844)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket$packet(0x11, 0x3, 0x300)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x20000000}}], 0x1, 0x4018080)

432.396329ms ago: executing program 5 (id=3831):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000200)={0x0, 0x0})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)

431.820409ms ago: executing program 4 (id=3832):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000ac0)={'syzkaller0\x00', 0x7101})
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3902, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x8, 0x3, 0x0, 0x9, 0xffffffffffffffff, 0xfdfffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendfile(r2, r2, 0x0, 0x20000005)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x800, 0xffffffff}, 0x0)
userfaultfd(0x801)
socket$nl_xfrm(0x10, 0x3, 0x6)
timer_create(0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_io_uring_setup(0x2f8d, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000180)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f00000001c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3, 0x200000000000000})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r5 = io_uring_setup(0x56a9, &(0x7f00000002c0)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5})
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000340)=@assoc_value, &(0x7f0000000380)=0x8)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000003c0)=0x1b, 0x4)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
fchdir(r1)

272.441209ms ago: executing program 0 (id=3833):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x10, 0x803, 0x0)
setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f00000000c0)=0xc, 0x4)
write(r3, &(0x7f00000001c0)="66000000220047000500fc0f8980e8ff06006d20002b1ffec0906849199f90e90101c7bb0000d3e7ff0b317cfdc617ab685b77fa89b5843e9fb69ea04aab8950a19d1cb58605cc23e7c515927d846ba9769d3cd91cfc183ce736f56a28e5145ba2f94812237d", 0x66)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x1685, &(0x7f00000003c0)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x3, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f00000005c0)=0xa, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100}, 0x50)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x4}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00)
syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a3730af541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)

0s ago: executing program 1 (id=3834):
syz_io_uring_setup(0x5d3b, &(0x7f0000000000)={0x0, 0x2, 0x100, 0x1, 0x29a}, &(0x7f0000000080)=<r0=>0x0, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000001000)=<r2=>0x0)
syz_io_uring_submit(r0, r1, r2, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x800000000000002, &(0x7f0000000280)={0x0, 0x989680}})
io_uring_enter(0xffffffffffffffff, 0x6515, 0xa87e, 0x49, 0x0, 0x0)
ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f00000000c0)=0x10000000010000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setresuid(0x0, 0xee01, 0x0)
r3 = socket(0xa, 0x3, 0xff)
connect$inet6(r3, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x40)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000240)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000300)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000340)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x22401, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000004c0)=[{{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4, 0x0, {0xa, 0x4e24, 0xe47, @local, 0x10}}}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffd06}}], 0x1, 0xc040)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00000008000000e27f000001", @ANYRES32], 0x50)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@text64={0x40, &(0x7f0000000680)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x0, 0x58, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r7, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000700)=[@textreal={0x8, 0x0}], 0x1, 0x21, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000740)=@x86={0x49, 0x3, 0x7, 0x0, 0xf84, 0x9a, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0xfc, 0x0, 0x0, '\x00', 0xd, 0x200})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c)
listen(r9, 0x0)

kernel console output (not intermixed with test programs):

e+0x2ad/0x570
[  819.397342][T18017]  ? tomoyo_encode+0x2ad/0x570
[  819.397356][T18017]  tomoyo_encode+0x2ad/0x570
[  819.397371][T18017]  tomoyo_realpath_from_path+0x5fa/0x640
[  819.397395][T18017]  ? tomoyo_path_number_perm+0x219/0x5f0
[  819.397426][T18017]  tomoyo_path_number_perm+0x246/0x5f0
[  819.397458][T18017]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  819.397482][T18017]  ? sb_end_write+0xe8/0x190
[  819.397497][T18017]  ? vfs_write+0x9ce/0xba0
[  819.397511][T18017]  ? hook_file_ioctl+0x1f2/0x600
[  819.397548][T18017]  ? ksys_write+0x1fc/0x270
[  819.397578][T18017]  security_file_ioctl+0xc3/0x2a0
[  819.397608][T18017]  __se_sys_ioctl+0x47/0x170
[  819.397629][T18017]  do_syscall_64+0x166/0x520
[  819.397644][T18017]  ? trace_irq_disable+0x3b/0x140
[  819.397656][T18017]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  819.397703][T18017]  ? clear_bhb_loop+0x70/0xc0
[  819.397729][T18017]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  819.397750][T18017] RIP: 0033:0x7f053259f559
[  819.397768][T18017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  819.397780][T18017] RSP: 002b:00007f053354d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  819.397793][T18017] RAX: ffffffffffffffda RBX: 00007f0532825fa0 RCX: 00007f053259f559
[  819.397801][T18017] RDX: 0000000000000000 RSI: 0000000000008983 RDI: 0000000000000003
[  819.397808][T18017] RBP: 00007f053354d090 R08: 0000000000000000 R09: 0000000000000000
[  819.397815][T18017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  819.397822][T18017] R13: 00007f0532826038 R14: 00007f0532825fa0 R15: 00007f053294fa48
[  819.397845][T18017]  </TASK>
[  819.397883][T18017] ERROR: Out of memory at tomoyo_realpath_from_path.
[  819.793863][ T5679] usb 1-1: USB disconnect, device number 33
[  820.170107][ T3109] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  820.320636][ T3109] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  820.322811][ T3109] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  820.322841][ T3109] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  820.322860][ T3109] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  820.322905][ T3109] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  820.325307][ T3109] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  820.325334][ T3109] usb 2-1: Product: syz
[  820.325349][ T3109] usb 2-1: Manufacturer: syz
[  820.427226][ T3109] cdc_wdm 2-1:1.0: skipping garbage
[  820.427248][ T3109] cdc_wdm 2-1:1.0: skipping garbage
[  820.442018][ T3109] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  820.442145][ T3109] cdc_wdm 2-1:1.0: Unknown control protocol
[  820.641682][ T3109] usb 2-1: USB disconnect, device number 76
[  820.835160][T18022] program syz.0.3553 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  821.090538][ T3109] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  821.117704][T18012] syz.4.3549 (18012): drop_caches: 2
[  821.241236][ T3109] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  821.245829][ T3109] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  821.245859][ T3109] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  821.245880][ T3109] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  821.245919][ T3109] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  821.247459][ T3109] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  821.247476][ T3109] usb 2-1: Product: syz
[  821.247490][ T3109] usb 2-1: Manufacturer: syz
[  821.310156][T14476] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  821.341119][ T3109] cdc_wdm 2-1:1.0: skipping garbage
[  821.341142][ T3109] cdc_wdm 2-1:1.0: skipping garbage
[  821.361190][ T3109] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  821.361214][ T3109] cdc_wdm 2-1:1.0: Unknown control protocol
[  821.398034][   T10] usbhid 4-1:0.0: can't add hid device: -71
[  821.398109][   T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  821.434173][   T10] usb 4-1: USB disconnect, device number 8
[  821.470758][T14476] usb 1-1: device descriptor read/64, error -71
[  821.641393][ T5693] usb 2-1: USB disconnect, device number 77
[  821.720065][T14476] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  821.860204][ T5614] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[  821.863219][T14476] usb 1-1: device descriptor read/64, error -71
[  821.970060][T14476] usb usb1-port1: attempt power cycle
[  822.009952][ T5614] usb 6-1: Using ep0 maxpacket: 32
[  822.016331][ T5614] usb 6-1: unable to get BOS descriptor or descriptor too short
[  822.016385][ T5614] usb 6-1: New USB device found, idVendor=12d1, idProduct=3e64, bcdDevice=81.16
[  822.025690][ T5614] usb 6-1: config index 0 descriptor too short (asked for 9, got 0)
[  822.025730][ T5614] usb 6-1: can't read configurations, error -22
[  822.150597][ T5614] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[  822.310793][ T5614] usb 6-1: Using ep0 maxpacket: 32
[  822.320186][ T5614] usb 6-1: unable to get BOS descriptor or descriptor too short
[  822.320237][ T5614] usb 6-1: New USB device found, idVendor=12d1, idProduct=3e64, bcdDevice=81.16
[  822.345889][ T5614] usb 6-1: config index 0 descriptor too short (asked for 9, got 0)
[  822.345928][ T5614] usb 6-1: can't read configurations, error -22
[  822.346196][ T5614] usb usb6-port1: attempt power cycle
[  822.352903][T14476] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  822.381507][T14476] usb 1-1: device descriptor read/8, error -71
[  822.493491][T17063] hid_parser_main: 5 callbacks suppressed
[  822.493507][T17063] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  822.493526][T17063] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  822.498791][T17063] hid-generic 0000:0000:0000.002B: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  822.631460][T14476] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  822.653168][T14476] usb 1-1: device descriptor read/8, error -71
[  822.655807][T18050] fido_id[18050]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  822.691939][ T5614] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[  822.713889][ T5614] usb 6-1: Using ep0 maxpacket: 32
[  822.727623][ T5614] usb 6-1: unable to get BOS descriptor or descriptor too short
[  822.727657][ T5614] usb 6-1: New USB device found, idVendor=12d1, idProduct=3e64, bcdDevice=81.16
[  822.749552][ T5614] usb 6-1: config index 0 descriptor too short (asked for 9, got 0)
[  822.749592][ T5614] usb 6-1: can't read configurations, error -22
[  822.771877][T14476] usb usb1-port1: unable to enumerate USB device
[  822.794407][T18052] ip_tables: iptables: counters copy to user failed while replacing table
[  822.827145][T18054] fuse: Unknown parameter '0x0000000000000003'
[  822.914881][ T5614] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[  822.932983][ T5614] usb 6-1: Using ep0 maxpacket: 32
[  822.956934][ T5614] usb 6-1: unable to get BOS descriptor or descriptor too short
[  822.956989][ T5614] usb 6-1: New USB device found, idVendor=12d1, idProduct=3e64, bcdDevice=81.16
[  822.981660][ T5614] usb 6-1: config index 0 descriptor too short (asked for 9, got 0)
[  822.981702][ T5614] usb 6-1: can't read configurations, error -22
[  822.982649][ T5614] usb usb6-port1: unable to enumerate USB device
[  823.505774][T18052] tipc: Resetting bearer <eth:team0>
[  823.721614][T18058] sg_write: data in/out 548876/136 bytes for SCSI command 0x0-- guessing data in;
[  823.721614][T18058]    program syz.4.3566 not setting count and/or reply_len properly
[  823.924759][T18066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3569'.
[  823.924777][T18066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3569'.
[  824.982349][T18073] fuse_uring_cmd: 12467 callbacks suppressed
[  824.982367][T18073] No fuse device found
[  824.982390][T18073] No fuse device found
[  824.982408][T18073] No fuse device found
[  824.982425][T18073] No fuse device found
[  824.982442][T18073] No fuse device found
[  824.982459][T18073] No fuse device found
[  824.982476][T18073] No fuse device found
[  824.982494][T18073] No fuse device found
[  824.982511][T18073] No fuse device found
[  824.982528][T18073] No fuse device found
[  825.212754][ T3109] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  825.212790][ T3109] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  825.219065][ T3109] hid-generic 0000:0000:0000.002C: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  825.350697][T18082] fido_id[18082]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  825.468817][T18085] fuse: Unknown parameter '0x0000000000000003'
[  825.674712][T18065] bridge0: port 2(bridge_slave_1) entered disabled state
[  825.675059][T18065] bridge0: port 1(bridge_slave_0) entered disabled state
[  825.750538][   T30] kauditd_printk_skb: 46 callbacks suppressed
[  825.750558][   T30] audit: type=1326 audit(1792588590.260:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18086 comm="syz.5.3576" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d519f559 code=0x7ffc0000
[  825.755901][   T30] audit: type=1326 audit(1792588590.260:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18086 comm="syz.5.3576" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fa2d519f559 code=0x7ffc0000
[  825.759946][   T10] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  825.817098][   T30] audit: type=1326 audit(1792588590.300:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18086 comm="syz.5.3576" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d519f559 code=0x7ffc0000
[  825.817131][   T30] audit: type=1326 audit(1792588590.300:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18086 comm="syz.5.3576" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d519f559 code=0x7ffc0000
[  825.881994][   T30] audit: type=1326 audit(1792588590.390:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18086 comm="syz.5.3576" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fa2d519f559 code=0x7ffc0000
[  825.882217][   T30] audit: type=1326 audit(1792588590.390:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18086 comm="syz.5.3576" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d519f559 code=0x7ffc0000
[  825.882353][   T30] audit: type=1326 audit(1792588590.390:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18086 comm="syz.5.3576" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d519f559 code=0x7ffc0000
[  825.887515][   T30] audit: type=1326 audit(1792588590.390:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18086 comm="syz.5.3576" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa2d519f559 code=0x7ffc0000
[  825.887645][   T30] audit: type=1326 audit(1792588590.390:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18086 comm="syz.5.3576" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d519f559 code=0x7ffc0000
[  825.940651][   T30] audit: type=1326 audit(1792588590.420:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18086 comm="syz.5.3576" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa2d515fd8e code=0x7ffc0000
[  826.028553][   T10] usb 2-1: Using ep0 maxpacket: 8
[  826.058814][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  826.058856][   T10] usb 2-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40
[  826.078107][   T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64
[  826.092438][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  826.092456][   T10] usb 2-1: Product: syz
[  826.092464][   T10] usb 2-1: Manufacturer: syz
[  826.092472][   T10] usb 2-1: SerialNumber: syz
[  826.329976][ T5679] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[  826.361223][   T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  826.361281][   T10] usb 2-1: MIDIStreaming interface descriptor not found
[  826.406788][T18097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3577'.
[  826.480487][ T5679] usb 6-1: Using ep0 maxpacket: 32
[  826.481321][ T5679] usb 6-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32
[  826.482709][ T5679] usb 6-1: config 0 has an invalid interface number: 86 but max is 0
[  826.482727][ T5679] usb 6-1: config 0 has no interface number 0
[  826.482750][ T5679] usb 6-1: config 0 interface 86 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  826.482764][ T5679] usb 6-1: config 0 interface 86 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0
[  826.482776][ T5679] usb 6-1: config 0 interface 86 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0
[  826.482789][ T5679] usb 6-1: config 0 interface 86 has no altsetting 0
[  826.488640][ T5679] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  826.488667][ T5679] usb 6-1: Product: syz
[  826.488683][ T5679] usb 6-1: Manufacturer: syz
[  826.488699][ T5679] usb 6-1: SerialNumber: syz
[  826.582651][ T5679] usb 6-1: config 0 descriptor??
[  826.585213][T18092] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  826.667387][   T10] usb 2-1: USB disconnect, device number 78
[  826.795301][T11254] udevd[11254]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  826.798789][T18091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3576'.
[  826.918687][T18065] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  827.017136][T18065] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  827.992590][ T1145] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  827.993867][ T1145] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  827.993912][ T1145] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  827.993951][ T1145] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  827.993989][ T1145] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  827.994026][ T1145] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  827.994063][ T1145] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  827.994100][ T1145] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  828.253649][T18091] bond3 (unregistering): Released all slaves
[  828.399119][ T5679] ljca 6-1:0.86: submit rx urb failed: -90
[  828.399158][ T5679] ljca 6-1:0.86: probe with driver ljca failed with error -90
[  828.436742][ T5679] usb 6-1: USB disconnect, device number 67
[  828.570046][   T10] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  828.700252][ T3109] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  828.730738][   T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  828.736905][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  828.736935][   T10] usb 5-1: Product: syz
[  828.736951][   T10] usb 5-1: Manufacturer: syz
[  828.736977][   T10] usb 5-1: SerialNumber: syz
[  828.762360][T14476] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  828.859831][ T3109] usb 4-1: Using ep0 maxpacket: 32
[  828.860430][   T10] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  828.860649][ T3109] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  828.861648][ T3109] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  828.865325][ T3109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  828.865351][ T3109] usb 4-1: Product: syz
[  828.865367][ T3109] usb 4-1: Manufacturer: syz
[  828.865381][ T3109] usb 4-1: SerialNumber: syz
[  828.930392][ T3109] usb 4-1: config 0 descriptor??
[  828.932555][ T3109] usb 4-1: No union descriptors
[  828.935381][ T3109] usb 4-1: unsupported MDLM descriptors
[  828.961968][T14476] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  828.981640][T14476] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  828.981663][T14476] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  828.981687][T14476] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  829.043012][T18111] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  829.065228][T14476] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  829.623515][T17063] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  829.623557][T17063] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  829.648963][T17063] hid-generic 0000:0000:0000.002D: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  829.928199][T17063] usb 5-1: USB disconnect, device number 43
[  830.073816][T18125] fido_id[18125]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  830.100433][   T10] usb 5-1: Service connection timeout for: 256
[  830.100452][   T10] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
[  830.100944][   T10] ath9k_htc: Failed to initialize the device
[  830.103237][T17063] usb 5-1: ath9k_htc: USB layer deinitialized
[  830.246164][T18128] fuse: Unknown parameter '0x0000000000000003'
[  830.867307][T18136] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3589'.
[  831.381713][   T52] Bluetooth: hci0: command 0x0406 tx timeout
[  831.450493][T14476] usb 4-1: USB disconnect, device number 9
[  831.476058][T17063] usb 1-1: USB disconnect, device number 38
[  831.595324][T18129] syz.1.3587 (18129): drop_caches: 2
[  832.217635][T18151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3592'.
[  832.822676][T17063] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  832.822701][T17063] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  832.869294][T17063] hid-generic 0000:0000:0000.002E: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  833.093908][T18168] fido_id[18168]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  833.617810][T18174] fuse: Unknown parameter 'fd0x0000000000000003'
[  834.061357][T17063] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  834.219836][T17063] usb 2-1: Using ep0 maxpacket: 8
[  834.220548][T17063] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  834.221582][T17063] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  834.221611][T17063] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  834.228599][T17063] usb 2-1: config 0 descriptor??
[  834.447632][T17063] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  834.904267][T18182] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[14570] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[18182]
[  838.162689][T18162] kthread_run failed with err -4
[  838.407681][   T10] usb 2-1: USB disconnect, device number 79
[  838.469799][ T3109] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  838.619809][ T3109] usb 1-1: Using ep0 maxpacket: 8
[  838.620602][ T3109] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  838.621850][ T3109] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  838.621877][ T3109] usb 1-1: config 0 has no interface number 0
[  838.621924][ T3109] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  838.621949][ T3109] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  838.621975][ T3109] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  838.622002][ T3109] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  838.622044][ T3109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  838.626292][ T3109] usb 1-1: config 0 descriptor??
[  838.726980][ T3109] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  838.745572][   T10] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  838.745596][   T10] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  838.754080][   T10] hid-generic 0000:0000:0000.002F: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  838.835846][T18202] fido_id[18202]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  838.917453][T18206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3608'.
[  838.974225][   T10] usb 1-1: USB disconnect, device number 39
[  838.974868][    C1] ldusb 1-1:0.55: usb_submit_urb failed (-19)
[  838.980005][T18186] ldusb 1-1:0.55: Couldn't submit interrupt_out_urb -19
[  838.988404][T18206] ldusb 1-1:0.55: Couldn't submit interrupt_in_urb -19
[  838.988716][   T10] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[  839.020490][ T5613] Bluetooth: hci1: unexpected event for opcode 0x201c
[  839.055224][T18212] fuse: Unknown parameter 'fd0x0000000000000003'
[  839.064843][T18186] random: crng reseeded on system resumption
[  839.099408][T18186] fuse: Bad value for 'fd'
[  839.235699][T18222] fuse: Unknown parameter 'nd'
[  839.265203][T18205] syz.4.3602 (18205): drop_caches: 2
[  839.609888][   T10] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  839.771199][   T10] usb 5-1: Using ep0 maxpacket: 8
[  839.771914][   T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  839.773407][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  839.773453][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  839.778257][   T10] usb 5-1: config 0 descriptor??
[  839.985936][   T10] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  840.258899][T18238] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[15880] was attempted by "                                                                                                                                
  ߂�\x07\x220   
\x09\x1b 
   
\x09  
��\x0d \x09�I                                        
      
                                       ^                                                               /dev/video#                                                     net/dev                                                                                                                                0       0    0    0    0     0       0          0\x0agretap0:       0       0    0    0    0     0          0         0        0       0   12    0    0     0       0          0\x0aerspan0:       0       0    0    0    0     0          0         0        0       0   12    0    0     0       0          0\x0aip_vti0:       0       0    0    0    0     0          0         0        0       0 1659  
[  840.478755][ T3109] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0
[  840.478806][ T3109] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0
[  840.612253][   T10] usb 6-1: new full-speed USB device number 68 using dummy_hcd
[  840.630060][ T3109] hid-generic 0000:0000:0000.0030: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  840.689087][T18245] FAULT_INJECTION: forcing a failure.
[  840.689087][T18245] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  840.689127][T18245] CPU: 0 UID: 0 PID: 18245 Comm: syz.0.3620 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  840.689155][T18245] Tainted: [L]=SOFTLOCKUP
[  840.689163][T18245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  840.689175][T18245] Call Trace:
[  840.689183][T18245]  <TASK>
[  840.689193][T18245]  dump_stack_lvl+0xe8/0x150
[  840.689226][T18245]  should_fail_ex+0x410/0x560
[  840.689261][T18245]  _copy_from_user+0x2d/0xb0
[  840.689283][T18245]  ___sys_sendmsg+0x1c6/0x360
[  840.689307][T18245]  ? __lock_acquire+0x747/0x2de0
[  840.689335][T18245]  ? __pfx____sys_sendmsg+0x10/0x10
[  840.689392][T18245]  ? __fget_files+0x3a2/0x420
[  840.689413][T18245]  ? __fget_files+0x2a/0x420
[  840.689441][T18245]  __x64_sys_sendmsg+0x1b1/0x290
[  840.689468][T18245]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  840.689512][T18245]  do_syscall_64+0x166/0x520
[  840.689538][T18245]  ? trace_irq_disable+0x3b/0x140
[  840.689561][T18245]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  840.689594][T18245]  ? clear_bhb_loop+0x70/0xc0
[  840.689628][T18245]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  840.689649][T18245] RIP: 0033:0x7f57d679f559
[  840.689668][T18245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  840.689682][T18245] RSP: 002b:00007f57d76c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  840.689701][T18245] RAX: ffffffffffffffda RBX: 00007f57d6a25fa0 RCX: 00007f57d679f559
[  840.689715][T18245] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  840.689727][T18245] RBP: 00007f57d76c2090 R08: 0000000000000000 R09: 0000000000000000
[  840.689739][T18245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  840.689759][T18245] R13: 00007f57d6a26038 R14: 00007f57d6a25fa0 R15: 00007f57d6b4fa48
[  840.689788][T18245]  </TASK>
[  840.752761][   T10] usb 6-1: device descriptor read/64, error -71
[  840.919955][ T3109] usb 5-1: USB disconnect, device number 44
[  840.947938][T18246] fido_id[18246]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  840.973539][T18249] fuse: Unknown parameter 'fd0x0000000000000003'
[  840.981793][   T10] usb 6-1: new full-speed USB device number 69 using dummy_hcd
[  841.121348][   T10] usb 6-1: device descriptor read/64, error -71
[  841.230097][   T10] usb usb6-port1: attempt power cycle
[  841.495269][T18251] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  841.495797][T18251] fuse: Unknown parameter 'groepBid'
[  841.581038][   T10] usb 6-1: new full-speed USB device number 70 using dummy_hcd
[  841.603228][   T10] usb 6-1: device descriptor read/8, error -71
[  841.617866][T18255] syz.1.3623 (18255): drop_caches: 2
[  841.629802][ T5613] Bluetooth: hci4: command 0x0406 tx timeout
[  841.705405][T18261] FAULT_INJECTION: forcing a failure.
[  841.705405][T18261] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  841.705442][T18261] CPU: 0 UID: 0 PID: 18261 Comm: syz.3.3625 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  841.705466][T18261] Tainted: [L]=SOFTLOCKUP
[  841.705473][T18261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  841.705483][T18261] Call Trace:
[  841.705490][T18261]  <TASK>
[  841.705498][T18261]  dump_stack_lvl+0xe8/0x150
[  841.705526][T18261]  should_fail_ex+0x410/0x560
[  841.705564][T18261]  prepare_alloc_pages+0x21e/0x5f0
[  841.705591][T18261]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  841.705616][T18261]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  841.705637][T18261]  ? __alloc_frozen_pages_noprof+0x29e/0x5a0
[  841.705661][T18261]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  841.705686][T18261]  ? __pfx_policy_nodemask+0x10/0x10
[  841.705714][T18261]  __alloc_pages_noprof+0x10/0x100
[  841.705737][T18261]  alloc_pages_bulk_noprof+0x5fa/0x7c0
[  841.705765][T18261]  ? alloc_pages_noprof+0x140/0x2b0
[  841.705792][T18261]  __kasan_populate_vmalloc+0xb7/0x1c0
[  841.705818][T18261]  alloc_vmap_area+0xd10/0x1410
[  841.705847][T18261]  ? __pfx_alloc_vmap_area+0x10/0x10
[  841.705862][T18261]  ? __kmalloc_cache_node_noprof+0x3cc/0x620
[  841.705884][T18261]  ? __kmalloc_cache_node_noprof+0x1f2/0x620
[  841.705903][T18261]  ? __get_vm_area_node+0x155/0x2f0
[  841.705927][T18261]  __get_vm_area_node+0x200/0x2f0
[  841.705950][T18261]  __vmalloc_node_range_noprof+0x343/0x1540
[  841.705969][T18261]  ? bpf_prog_calc_tag+0x51/0x370
[  841.705992][T18261]  ? __x64_sys_bpf+0xba/0xd0
[  841.706009][T18261]  ? do_syscall_64+0x166/0x520
[  841.706035][T18261]  ? __kasan_kmalloc+0x93/0xb0
[  841.706058][T18261]  ? bpf_prog_load+0x14d6/0x1c20
[  841.706078][T18261]  ? __sys_bpf+0xd0d/0xd90
[  841.706096][T18261]  ? __x64_sys_bpf+0xba/0xd0
[  841.706124][T18261]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  841.706152][T18261]  ? bpf_prog_calc_tag+0x51/0x370
[  841.706172][T18261]  __vmalloc_noprof+0xd2/0x120
[  841.706189][T18261]  ? bpf_prog_calc_tag+0x51/0x370
[  841.706213][T18261]  bpf_prog_calc_tag+0x51/0x370
[  841.706234][T18261]  ? __pfx_cmp_subprogs+0x10/0x10
[  841.706259][T18261]  check_and_resolve_insns+0xbb/0x21d0
[  841.706284][T18261]  ? add_subprog+0x2e2/0x3f0
[  841.706308][T18261]  ? __pfx_check_and_resolve_insns+0x10/0x10
[  841.706339][T18261]  bpf_check+0x18f7/0x2ef0
[  841.706374][T18261]  ? __pfx_bpf_check+0x10/0x10
[  841.706396][T18261]  ? bpf_obj_name_cpy+0x194/0x1e0
[  841.706425][T18261]  bpf_prog_load+0x14d6/0x1c20
[  841.706456][T18261]  ? __pfx_bpf_prog_load+0x10/0x10
[  841.706499][T18261]  __sys_bpf+0xd0d/0xd90
[  841.706531][T18261]  ? __pfx___sys_bpf+0x10/0x10
[  841.706566][T18261]  ? __fget_files+0x2a/0x420
[  841.706601][T18261]  ? rcu_is_watching+0x16/0xb0
[  841.706629][T18261]  __x64_sys_bpf+0xba/0xd0
[  841.706650][T18261]  do_syscall_64+0x166/0x520
[  841.706670][T18261]  ? trace_irq_disable+0x3b/0x140
[  841.706689][T18261]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  841.706707][T18261]  ? clear_bhb_loop+0x70/0xc0
[  841.706727][T18261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  841.706744][T18261] RIP: 0033:0x7fcb9959f559
[  841.706760][T18261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  841.706775][T18261] RSP: 002b:00007fcb9a4af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  841.706795][T18261] RAX: ffffffffffffffda RBX: 00007fcb99825fa0 RCX: 00007fcb9959f559
[  841.706808][T18261] RDX: 0000000000000094 RSI: 000020000001a0c0 RDI: 0000000000000005
[  841.706820][T18261] RBP: 00007fcb9a4af090 R08: 0000000000000000 R09: 0000000000000000
[  841.706831][T18261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  841.706843][T18261] R13: 00007fcb99826038 R14: 00007fcb99825fa0 R15: 00007fcb9994fa48
[  841.706869][T18261]  </TASK>
[  841.707012][T18261] syz.3.3625: vmalloc error: size 88, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  841.707070][T18261] CPU: 0 UID: 0 PID: 18261 Comm: syz.3.3625 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  841.707096][T18261] Tainted: [L]=SOFTLOCKUP
[  841.707104][T18261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  841.707116][T18261] Call Trace:
[  841.707124][T18261]  <TASK>
[  841.707132][T18261]  dump_stack_lvl+0xe8/0x150
[  841.707163][T18261]  warn_alloc+0x24d/0x270
[  841.707188][T18261]  ? lockdep_hardirqs_on+0x7b/0x110
[  841.707217][T18261]  ? __pfx_warn_alloc+0x10/0x10
[  841.707240][T18261]  ? kfree+0x1c5/0x650
[  841.707267][T18261]  ? __get_vm_area_node+0x219/0x2f0
[  841.707296][T18261]  __vmalloc_node_range_noprof+0x36b/0x1540
[  841.707320][T18261]  ? __x64_sys_bpf+0xba/0xd0
[  841.707340][T18261]  ? do_syscall_64+0x166/0x520
[  841.707371][T18261]  ? __kasan_kmalloc+0x93/0xb0
[  841.707397][T18261]  ? bpf_prog_load+0x14d6/0x1c20
[  841.707422][T18261]  ? __sys_bpf+0xd0d/0xd90
[  841.707444][T18261]  ? __x64_sys_bpf+0xba/0xd0
[  841.707480][T18261]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  841.707514][T18261]  ? bpf_prog_calc_tag+0x51/0x370
[  841.707545][T18261]  __vmalloc_noprof+0xd2/0x120
[  841.707567][T18261]  ? bpf_prog_calc_tag+0x51/0x370
[  841.707596][T18261]  bpf_prog_calc_tag+0x51/0x370
[  841.707621][T18261]  ? __pfx_cmp_subprogs+0x10/0x10
[  841.707651][T18261]  check_and_resolve_insns+0xbb/0x21d0
[  841.707682][T18261]  ? add_subprog+0x2e2/0x3f0
[  841.707712][T18261]  ? __pfx_check_and_resolve_insns+0x10/0x10
[  841.707749][T18261]  bpf_check+0x18f7/0x2ef0
[  841.707793][T18261]  ? __pfx_bpf_check+0x10/0x10
[  841.707820][T18261]  ? bpf_obj_name_cpy+0x194/0x1e0
[  841.707856][T18261]  bpf_prog_load+0x14d6/0x1c20
[  841.707894][T18261]  ? __pfx_bpf_prog_load+0x10/0x10
[  841.707947][T18261]  __sys_bpf+0xd0d/0xd90
[  841.707981][T18261]  ? __pfx___sys_bpf+0x10/0x10
[  841.708021][T18261]  ? __fget_files+0x2a/0x420
[  841.708064][T18261]  ? rcu_is_watching+0x16/0xb0
[  841.708097][T18261]  __x64_sys_bpf+0xba/0xd0
[  841.708124][T18261]  do_syscall_64+0x166/0x520
[  841.708148][T18261]  ? trace_irq_disable+0x3b/0x140
[  841.708170][T18261]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  841.708191][T18261]  ? clear_bhb_loop+0x70/0xc0
[  841.708238][T18261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  841.708260][T18261] RIP: 0033:0x7fcb9959f559
[  841.708279][T18261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  841.708296][T18261] RSP: 002b:00007fcb9a4af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  841.708315][T18261] RAX: ffffffffffffffda RBX: 00007fcb99825fa0 RCX: 00007fcb9959f559
[  841.708331][T18261] RDX: 0000000000000094 RSI: 000020000001a0c0 RDI: 0000000000000005
[  841.708344][T18261] RBP: 00007fcb9a4af090 R08: 0000000000000000 R09: 0000000000000000
[  841.708357][T18261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  841.708370][T18261] R13: 00007fcb99826038 R14: 00007fcb99825fa0 R15: 00007fcb9994fa48
[  841.708403][T18261]  </TASK>
[  841.708477][T18261] Mem-Info:
[  841.708487][T18261] active_anon:11824 inactive_anon:23 isolated_anon:0
[  841.708487][T18261]  active_file:566 inactive_file:16570 isolated_file:0
[  841.708487][T18261]  unevictable:0 dirty:52 writeback:0
[  841.708487][T18261]  slab_reclaimable:8337 slab_unreclaimable:109147
[  841.708487][T18261]  mapped:33125 shmem:6830 pagetables:2419
[  841.708487][T18261]  sec_pagetables:0 bounce:0
[  841.708487][T18261]  kernel_misc_reclaimable:0
[  841.708487][T18261]  free:1119654 free_pcp:8201 free_cma:0
[  841.708547][T18261] Node 0 active_anon:47296kB inactive_anon:92kB active_file:2264kB inactive_file:66128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:132492kB dirty:208kB writeback:0kB shmem:27320kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14596kB pagetables:9516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  841.708601][T18261] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:152kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  841.708653][T18261] Node 0 DMA free:15260kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:100kB local_pcp:0kB free_cma:0kB
[  841.708713][T18261] lowmem_reserve[]: 0 2468 2468 2468 2468
[  841.708751][T18261] Node 0 DMA32 free:527944kB boost:10240kB min:44224kB low:52720kB high:61216kB reserved_highatomic:0kB free_highatomic:0kB active_anon:47296kB inactive_anon:92kB active_file:2264kB inactive_file:66128kB unevictable:0kB writepending:208kB zspages:896kB present:3129332kB managed:2527456kB mlocked:0kB bounce:0kB free_pcp:30656kB local_pcp:14176kB free_cma:0kB
[  841.708815][T18261] lowmem_reserve[]: 0 0 0 0 0
[  841.708848][T18261] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  841.708899][T18261] lowmem_reserve[]: 0 0 0 0 0
[  841.708931][T18261] Node 1 Normal free:3935412kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:152kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:2048kB free_cma:0kB
[  841.708983][T18261] lowmem_reserve[]: 0 0 0 0 0
[  841.709035][T18261] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 1*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 1*1024kB (U) 2*2048kB (UM) 2*4096kB (UM) = 15260kB
[  841.709203][T18261] Node 0 DMA32: 8900*4kB (UME) 6659*8kB (UME) 4270*16kB (UME) 2422*32kB (UME) 871*64kB (UME) 328*128kB (UME) 126*256kB (UME) 55*512kB (UME) 14*1024kB (UM) 11*2048kB (UM) 24*4096kB (UM) = 528008kB
[  841.709368][T18261] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  841.709469][T18261] Node 1 Normal: 3*4kB (U) 11*8kB (UM) 19*16kB (UM) 11*32kB (UM) 7*64kB (UM) 8*128kB (UM) 4*256kB (UM) 4*512kB (UM) 4*1024kB (UM) 3*2048kB (UM) 957*4096kB (UM) = 3935412kB
[  841.717991][T18261] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  841.718095][T18261] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  841.718113][T18261] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  841.718129][T18261] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  841.718145][T18261] 23989 total pagecache pages
[  841.718154][T18261] 11 pages in swap cache
[  841.718162][T18261] Free swap  = 124608kB
[  841.718169][T18261] Total swap = 124996kB
[  841.718179][T18261] 2097051 pages RAM
[  841.718185][T18261] 0 pages HighMem/MovableOnly
[  841.718193][T18261] 433571 pages reserved
[  841.718201][T18261] 0 pages cma reserved
[  841.862003][   T10] usb 6-1: new full-speed USB device number 71 using dummy_hcd
[  841.897328][   T10] usb 6-1: device descriptor read/8, error -71
[  842.020207][   T10] usb usb6-port1: unable to enumerate USB device
[  843.067374][T18271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3629'.
[  843.068597][T18271] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3629'.
[  843.345943][T14476] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0
[  843.345983][T14476] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0
[  843.377452][T14476] hid-generic 0000:0000:0000.0031: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  843.409884][   T10] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  843.520033][ T3109] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  843.562346][T18280] fido_id[18280]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  843.566206][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  843.566240][   T10] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[  843.567454][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  843.567471][   T10] usb 2-1: config 0 has no interfaces?
[  843.569878][  T189] usb 6-1: new full-speed USB device number 72 using dummy_hcd
[  843.573972][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  843.573999][   T10] usb 2-1: Product: syz
[  843.574013][   T10] usb 2-1: Manufacturer: syz
[  843.574030][   T10] usb 2-1: SerialNumber: syz
[  843.611173][   T10] usb 2-1: config 0 descriptor??
[  843.720679][  T189] usb 6-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00
[  843.721990][  T189] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  843.722033][  T189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  843.728765][  T189] usb 6-1: config 0 descriptor??
[  843.764900][ T3109] usb 1-1: Using ep0 maxpacket: 16
[  843.766129][ T3109] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  843.799547][ T3109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  843.799576][ T3109] usb 1-1: Product: syz
[  843.799591][ T3109] usb 1-1: Manufacturer: syz
[  843.799606][ T3109] usb 1-1: SerialNumber: syz
[  844.062783][   T10] usb 2-1: USB disconnect, device number 80
[  844.080307][T18188] udevd[18188]: setting mode of /dev/bus/usb/002/080 to 020664 failed: No such file or directory
[  844.080422][T18188] udevd[18188]: setting owner of /dev/bus/usb/002/080 to uid=0, gid=0 failed: No such file or directory
[  844.121861][ T3109] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  844.126316][ T3109] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  844.127520][ T3109] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  844.127652][ T3109] usb 1-1: media controller created
[  844.178630][ T3109] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  844.237485][  T189] input: HID 0458:5005 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5005.0032/input/input77
[  844.352946][T18287] x_tables: duplicate entry at hook 2
[  844.371569][  T189] input: HID 0458:5005 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5005.0032/input/input78
[  844.418964][T18278] fuse: Unknown parameter '0x0000000000000005'
[  844.445601][T18278] fuse: Bad value for 'group_id'
[  844.445622][T18278] fuse: Bad value for 'group_id'
[  844.501612][  T189] kye 0003:0458:5005.0032: input,hiddev0,hidraw0: USB HID v7f.fd Device [HID 0458:5005] on usb-dummy_hcd.5-1/input0
[  844.519923][   T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  844.538338][  T189] usb 6-1: USB disconnect, device number 72
[  844.668153][T18289] fido_id[18289]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  844.672072][   T10] usb 4-1: Using ep0 maxpacket: 8
[  844.685975][   T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  844.695677][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  844.695728][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  844.705005][   T10] usb 4-1: config 0 descriptor??
[  844.712588][ T3109] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  844.738190][ T3109] usb 1-1: USB disconnect, device number 40
[  844.938875][   T10] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  844.973373][T18294] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  845.242276][T18303] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[16269] was attempted by "                                                                                                                                
  ߂�\x07\x220   
\x09\x1b 
   
\x09  
��\x0d \x09�I                                        
      
                                       ^                                                               /dev/video#                                                     net/dev                                                                                                                                0       0    0    0    0     0       0          0\x0agretap0:       0       0    0    0    0     0          0         0        0       0   15    0    0     0       0          0\x0aerspan0:       0       0    0    0    0     0          0         0        0       0   12    0    0     0       0          0\x0aip_vti0:       0       0    0    0    0     0          0         0        0       0    0  
[  845.549947][T17066] usb 5-1: new full-speed USB device number 45 using dummy_hcd
[  845.709174][T18308] bridge1: entered promiscuous mode
[  845.709200][T18308] bridge1: entered allmulticast mode
[  845.722993][T14476] usb 4-1: USB disconnect, device number 10
[  845.736998][T18308] team0: Port device bridge1 added
[  845.746543][T17066] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  845.759042][T17066] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  845.759071][T17066] usb 5-1: config 0 has no interfaces?
[  845.792043][T17066] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  845.792074][T17066] usb 5-1: Product: syz
[  845.792087][T17066] usb 5-1: Manufacturer: syz
[  845.792102][T17066] usb 5-1: SerialNumber: syz
[  845.824006][T17066] usb 5-1: config 0 descriptor??
[  845.927668][T18299] syz.1.3638 (18299): drop_caches: 2
[  846.001058][  T189] usb 1-1: new full-speed USB device number 41 using dummy_hcd
[  846.123430][   T10] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0
[  846.123468][   T10] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0
[  846.130886][   T10] hid-generic 0000:0000:0000.0033: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  846.152756][  T189] usb 1-1: New USB device found, idVendor=04b4, idProduct=9320, bcdDevice= 0.40
[  846.153763][  T189] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 252, changing to 4
[  846.165150][  T189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  846.165177][  T189] usb 1-1: Product: syz
[  846.165191][  T189] usb 1-1: Manufacturer: שּׂトNjￕᏐ䞷뇄㆚冨㷐⾟岟︗꿩鑽淤찡쒭칼굂茥ᶅ밧
[  846.165210][  T189] usb 1-1: SerialNumber: syz
[  846.313900][T18316] fido_id[18316]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  846.318906][T18319] sg_write: data in/out 563552/136 bytes for SCSI command 0x0-- guessing data in;
[  846.318906][T18319]    program syz.1.3644 not setting count and/or reply_len properly
[  846.393744][  T189] usb 1-1: Audio class v2/v3 interfaces need an interface association
[  846.486025][  T189] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  846.487921][  T189] usb 1-1: can't set first interface for hiFace device.
[  846.488006][  T189] snd-usb-hiface 1-1:1.0: probe with driver snd-usb-hiface failed with error -5
[  846.497398][  T189] usb 1-1: can't set first interface for hiFace device.
[  846.497428][  T189] snd-usb-hiface 1-1:1.1: probe with driver snd-usb-hiface failed with error -5
[  846.507405][  T189] usb 1-1: can't set first interface for hiFace device.
[  846.507435][  T189] snd-usb-hiface 1-1:1.2: probe with driver snd-usb-hiface failed with error -5
[  846.516744][  T189] usb 1-1: USB disconnect, device number 41
[  846.576820][T18290] udevd[18290]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  846.661161][T18313] --map-set only usable from mangle table
[  846.760252][T18330] fuse: Unknown parameter '000000
'
[  846.762999][T18330] ipt_ECN: cannot use operation on non-tcp rule
[  846.995558][T18334] bridge0: port 3(ip6gretap0) entered blocking state
[  846.995767][T18334] bridge0: port 3(ip6gretap0) entered disabled state
[  846.995893][T18334] ip6gretap0: entered allmulticast mode
[  846.996940][T18334] ip6gretap0: entered promiscuous mode
[  847.269940][T17066] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  847.420087][T17066] usb 1-1: Using ep0 maxpacket: 16
[  847.422161][T17066] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76
[  847.428115][T17066] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  847.428272][T17066] usb 1-1: Product: syz
[  847.428289][T17066] usb 1-1: Manufacturer: syz
[  847.428302][T17066] usb 1-1: SerialNumber: syz
[  847.432000][T17066] usb 1-1: config 0 descriptor??
[  847.538408][T18338] syz.1.3651 (18338): drop_caches: 2
[  847.636323][T18334] bridge0: port 4(bond0) entered blocking state
[  847.636892][T18334] bridge0: port 4(bond0) entered disabled state
[  847.663457][T18334] bond0: entered allmulticast mode
[  847.663482][T18334] bond_slave_0: entered allmulticast mode
[  847.663501][T18334] bond_slave_1: entered allmulticast mode
[  847.666534][T18334] bond0: entered promiscuous mode
[  847.666555][T18334] bond_slave_0: entered promiscuous mode
[  847.666736][T18334] bond_slave_1: entered promiscuous mode
[  847.668962][T18334] bridge0: port 5(team0) entered blocking state
[  847.669191][T18334] bridge0: port 5(team0) entered disabled state
[  847.669324][T18334] team0: entered allmulticast mode
[  847.669341][T18334] team_slave_0: entered allmulticast mode
[  847.669358][T18334] team_slave_1: entered allmulticast mode
[  847.792043][T18334] team0: entered promiscuous mode
[  847.792060][T18334] team_slave_0: entered promiscuous mode
[  847.792182][T18334] team_slave_1: entered promiscuous mode
[  847.914149][ T3109] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0
[  847.914187][ T3109] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0
[  847.959608][ T3109] hid-generic 0000:0000:0000.0034: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  847.981583][T17066] usb_8dev 1-1:0.0 can0: sending command message failed
[  847.981611][T17066] usb_8dev 1-1:0.0 can0: can't get firmware version
[  848.054093][T17063] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  848.085309][ T3109] usb 5-1: USB disconnect, device number 45
[  848.114932][T17066] usb_8dev 1-1:0.0: probe with driver usb_8dev failed with error -22
[  848.138546][T17066] usb 1-1: USB disconnect, device number 42
[  848.151519][T14476] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[  848.207018][T18350] fido_id[18350]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  848.232986][T17063] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[  848.233616][T17063] usb 4-1: config 0 has no interfaces?
[  848.233639][T17063] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  848.240232][T17063] usb 4-1: config 0 descriptor??
[  848.300022][T14476] usb 6-1: Using ep0 maxpacket: 8
[  848.300912][T14476] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  848.303495][T14476] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  848.303544][T14476] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  848.307456][T14476] usb 6-1: config 0 descriptor??
[  848.364590][T18356] batadv_slave_1: entered promiscuous mode
[  848.365926][T18356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3656'.
[  848.366084][T18356] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  848.447349][T18356] batman_adv: batadv0: Removing interface: batadv_slave_0
[  848.457900][   T10] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  848.516329][T14476] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  848.547920][T18355] batadv_slave_1: left promiscuous mode
[  848.604558][T18358] openvswitch: netlink: IP tunnel dst address not specified
[  848.617203][   T10] usb 2-1: Using ep0 maxpacket: 8
[  848.622992][   T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  848.624487][   T10] usb 2-1: config 0 has an invalid interface number: 186 but max is 0
[  848.624515][   T10] usb 2-1: config 0 has no interface number 0
[  848.624554][   T10] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  848.624577][   T10] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  848.624600][   T10] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  848.624624][   T10] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  848.624647][   T10] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  848.626920][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  848.626948][   T10] usb 2-1: Product: syz
[  848.626963][   T10] usb 2-1: Manufacturer: syz
[  848.626978][   T10] usb 2-1: SerialNumber: syz
[  848.713105][   T10] usb 2-1: config 0 descriptor??
[  848.901617][T18362] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[14396] was attempted by "                                                                                                                                
  ߂�\x07\x220   
\x09\x1b 
   
\x09  
��\x0d \x09�I                                        
      
                                       ^                                                               /dev/video#                                                     net/dev                                                                                                                                0       0    1    0    0     0       1          0\x0agretap0:      60       1    0    0    0     0          0         1        0       0   17    0    1     0       0          0\x0aerspan0:       0       0    0    0    0     0          0         0        0       0   14    1    0     0       0          0\x0aip_vti0:       0       0    0    0    0     0          0         0        0       0    4  
[  849.044713][   T10] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior1
[  849.248224][   T10] usb 6-1: USB disconnect, device number 73
[  849.664095][   T10] usb 4-1: USB disconnect, device number 11
[  849.749862][T17066] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[  849.911906][T17066] usb 1-1: unable to get BOS descriptor or descriptor too short
[  849.912385][T17066] usb 1-1: not running at top speed; connect to a high speed hub
[  849.912416][T17066] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  849.912441][T17066] usb 1-1: too many configurations: 56, using maximum allowed: 8
[  849.914833][T17066] usb 1-1: unable to read config index 0 descriptor/start: -61
[  849.914855][T17066] usb 1-1: can't read configurations, error -61
[  850.050042][T17066] usb 1-1: new full-speed USB device number 44 using dummy_hcd
[  850.212707][T17066] usb 1-1: unable to get BOS descriptor or descriptor too short
[  850.213316][T17066] usb 1-1: not running at top speed; connect to a high speed hub
[  850.213349][T17066] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  850.213383][T17066] usb 1-1: too many configurations: 56, using maximum allowed: 8
[  850.215496][T17066] usb 1-1: unable to read config index 0 descriptor/start: -61
[  850.215518][T17066] usb 1-1: can't read configurations, error -61
[  850.215945][T17066] usb usb1-port1: attempt power cycle
[  850.559833][T17066] usb 1-1: new full-speed USB device number 45 using dummy_hcd
[  850.593504][T17066] usb 1-1: unable to get BOS descriptor or descriptor too short
[  850.594306][T17066] usb 1-1: not running at top speed; connect to a high speed hub
[  850.594339][T17066] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  850.594383][T17066] usb 1-1: too many configurations: 56, using maximum allowed: 8
[  850.596661][T17066] usb 1-1: unable to read config index 0 descriptor/start: -61
[  850.596695][T17066] usb 1-1: can't read configurations, error -61
[  850.598581][T18391] batman_adv: batadv0: Adding interface: dummy0
[  850.598596][T18391] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  850.598625][T18391] batman_adv: batadv0: Interface activated: dummy0
[  850.739897][T17066] usb 1-1: new full-speed USB device number 46 using dummy_hcd
[  850.763194][T17066] usb 1-1: unable to get BOS descriptor or descriptor too short
[  850.764082][T17066] usb 1-1: not running at top speed; connect to a high speed hub
[  850.764104][T17066] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  850.764125][T17066] usb 1-1: too many configurations: 56, using maximum allowed: 8
[  850.765761][T17066] usb 1-1: unable to read config index 0 descriptor/start: -61
[  850.766213][T17066] usb 1-1: can't read configurations, error -61
[  850.766667][T17066] usb usb1-port1: unable to enumerate USB device
[  850.940801][T18388] syz.3.3664 (18388): drop_caches: 2
[  851.207734][  T189] usb 2-1: USB disconnect, device number 81
[  851.290967][T17066] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[  851.441981][T17066] usb 6-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00
[  851.460037][T17066] usb 6-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  851.462954][T17066] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  851.462972][T17066] usb 6-1: Product: syz
[  851.462981][T17066] usb 6-1: Manufacturer: syz
[  851.462989][T17066] usb 6-1: SerialNumber: syz
[  851.611044][  T189] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  851.770614][  T189] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  851.771660][  T189] usb 2-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  851.771691][  T189] usb 2-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  851.771730][  T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  851.784779][  T189] pl2303 2-1:1.0: required endpoints missing
[  851.793043][  T189] pl2303 2-1:1.1: pl2303 converter detected
[  851.811733][  T189] usb 2-1: pl2303 converter now attached to ttyUSB0
[  851.965984][T18411] FAULT_INJECTION: forcing a failure.
[  851.965984][T18411] name failslab, interval 1, probability 0, space 0, times 0
[  851.966011][T18411] CPU: 0 UID: 0 PID: 18411 Comm: syz.3.3672 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  851.966026][T18411] Tainted: [L]=SOFTLOCKUP
[  851.966031][T18411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  851.966038][T18411] Call Trace:
[  851.966043][T18411]  <TASK>
[  851.966050][T18411]  dump_stack_lvl+0xe8/0x150
[  851.966084][T18411]  should_fail_ex+0x410/0x560
[  851.966120][T18411]  should_failslab+0xa8/0x100
[  851.966147][T18411]  __kmalloc_cache_noprof+0x9e/0x600
[  851.966160][T18411]  ? __kmalloc_cache_noprof+0x148/0x600
[  851.966172][T18411]  ? sctp_add_bind_addr+0x8c/0x370
[  851.966187][T18411]  ? sctp_add_bind_addr+0x8c/0x370
[  851.966214][T18411]  sctp_add_bind_addr+0x8c/0x370
[  851.966248][T18411]  sctp_copy_local_addr_list+0x31a/0x4e0
[  851.966282][T18411]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  851.966301][T18411]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  851.966318][T18411]  ? sctp_v6_is_any+0x64/0x80
[  851.966330][T18411]  ? sctp_copy_one_addr+0x93/0x360
[  851.966348][T18411]  sctp_bind_addr_copy+0xb3/0x3c0
[  851.966377][T18411]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  851.966416][T18411]  sctp_connect_new_asoc+0x2ff/0x6b0
[  851.966442][T18411]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  851.966473][T18411]  ? __local_bh_enable_ip+0xd6/0x140
[  851.966501][T18411]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  851.966513][T18411]  ? security_sctp_bind_connect+0x7e/0x2c0
[  851.966537][T18411]  sctp_sendmsg+0x159b/0x2d00
[  851.966572][T18411]  ? __pfx_sctp_sendmsg+0x10/0x10
[  851.966617][T18411]  ? aa_sock_msg_perm+0xf5/0x210
[  851.966637][T18411]  ? sock_rps_record_flow+0x19/0x350
[  851.966657][T18411]  ? inet_sendmsg+0x298/0x320
[  851.966674][T18411]  ? __pfx_inet_sendmsg+0x10/0x10
[  851.966689][T18411]  sock_sendmsg_nosec+0x10e/0x180
[  851.966714][T18411]  ____sys_sendmsg+0x54e/0x850
[  851.966744][T18411]  ? __pfx_____sys_sendmsg+0x10/0x10
[  851.966778][T18411]  ? import_iovec+0x73/0xa0
[  851.966796][T18411]  ___sys_sendmsg+0x2a5/0x360
[  851.966807][T18411]  ? __lock_acquire+0x747/0x2de0
[  851.966823][T18411]  ? __pfx____sys_sendmsg+0x10/0x10
[  851.966859][T18411]  ? __fget_files+0x3a2/0x420
[  851.966880][T18411]  ? __fget_files+0x2a/0x420
[  851.966907][T18411]  __x64_sys_sendmsg+0x1b1/0x290
[  851.966934][T18411]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  851.966960][T18411]  do_syscall_64+0x166/0x520
[  851.966974][T18411]  ? trace_irq_disable+0x3b/0x140
[  851.966986][T18411]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  851.966998][T18411]  ? clear_bhb_loop+0x70/0xc0
[  851.967022][T18411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  851.967043][T18411] RIP: 0033:0x7fcb9959f559
[  851.967062][T18411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  851.967080][T18411] RSP: 002b:00007fcb9a4af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  851.967096][T18411] RAX: ffffffffffffffda RBX: 00007fcb99825fa0 RCX: 00007fcb9959f559
[  851.967104][T18411] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000003
[  851.967111][T18411] RBP: 00007fcb9a4af090 R08: 0000000000000000 R09: 0000000000000000
[  851.967118][T18411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  851.967124][T18411] R13: 00007fcb99826038 R14: 00007fcb99825fa0 R15: 00007fcb9994fa48
[  851.967142][T18411]  </TASK>
[  852.072902][T18414] netlink: 'syz.1.3669': attribute type 11 has an invalid length.
[  852.103677][T17063] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  852.289919][  T189] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  852.302340][T17063] usb 5-1: Using ep0 maxpacket: 16
[  852.353006][T17063] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87
[  852.355910][T17063] usb 5-1: config 127 has an invalid interface number: 124 but max is 0
[  852.355961][T17063] usb 5-1: config 127 has no interface number 0
[  852.355991][T17063] usb 5-1: config 127 interface 124 has no altsetting 0
[  852.358992][T17063] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  852.359040][T17063] usb 5-1: Product: syz
[  852.359049][T17063] usb 5-1: Manufacturer: syz
[  852.359057][T17063] usb 5-1: SerialNumber: syz
[  852.459890][  T189] usb 4-1: Using ep0 maxpacket: 8
[  852.461888][  T189] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  852.464305][  T189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  852.464353][  T189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  852.468281][  T189] usb 4-1: config 0 descriptor??
[  852.544892][T18416] netlink: 'syz.0.3674': attribute type 21 has an invalid length.
[  852.544910][T18416] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3674'.
[  852.545012][T18416] netlink: 'syz.0.3674': attribute type 5 has an invalid length.
[  852.545026][T18416] netlink: 'syz.0.3674': attribute type 6 has an invalid length.
[  852.545037][T18416] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3674'.
[  852.677833][  T189] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  852.954333][T18422] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[16269] was attempted by "                                                                                                                                
  ߂�\x07\x220   
\x09\x1b 
   
\x09  
��\x0d \x09�I                                        
      
                                       ^                                                               /dev/video#                                                     net/dev                                                                                                                                0       0    0    0    0     0       0          0\x0agretap0:       0       0    0    0    0     0          0         0        0       0   15    0    0     0       0          0\x0aerspan0:       0       0    0    0    0     0          0         0        0       0   12    0    0     0       0          0\x0aip_vti0:       0       0    0    0    0     0          0         0        0       0    0  
[  853.158628][ T5679] usb 2-1: USB disconnect, device number 82
[  853.282285][ T5679] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  853.284783][ T5679] pl2303 2-1:1.1: device disconnected
[  853.318665][ T3109] usb 4-1: USB disconnect, device number 12
[  853.330575][T17063] usb 5-1: reset high-speed USB device number 46 using dummy_hcd
[  853.498671][T17063] usb 5-1: device firmware changed
[  853.519380][T17063] usb 5-1: USB disconnect, device number 46
[  853.679845][T17063] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  853.849865][T17063] usb 5-1: Using ep0 maxpacket: 16
[  853.851798][T17063] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87
[  853.854578][T17063] usb 5-1: config 127 has an invalid interface number: 124 but max is 0
[  853.854648][T17063] usb 5-1: config 127 has no interface number 0
[  853.854710][T17063] usb 5-1: config 127 interface 124 has no altsetting 0
[  853.901163][T17063] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  853.901195][T17063] usb 5-1: Product: 阨ꆁ䑫ਏ桵殥疇悴鎤䨫ꕍ딣쇆䡼﹍᤼䙧㴄濊햯戺椲￵쬖ￖ쉜匆叿贯⣹뤳쒧勤阍鑿莼
[  853.901239][T17063] usb 5-1: SerialNumber: ࠇ
[  854.046090][T17066] usb 6-1: USB disconnect, device number 74
[  854.138694][T18429] syz.0.3678 (18429): drop_caches: 2
[  854.195873][T18409] netlink: 'syz.4.3671': attribute type 11 has an invalid length.
[  854.488567][T18409] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  854.495605][T11214] bridge0: port 2(bridge_slave_1) entered blocking state
[  854.495722][T11214] bridge0: port 2(bridge_slave_1) entered forwarding state
[  855.040033][T17066] usb 2-1: new low-speed USB device number 83 using dummy_hcd
[  855.163896][T18464] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3688'.
[  855.180111][T17066] usb 2-1: device descriptor read/64, error -71
[  855.439878][T17066] usb 2-1: new low-speed USB device number 84 using dummy_hcd
[  855.579811][T17066] usb 2-1: device descriptor read/64, error -71
[  855.579839][T14476] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  855.690160][T17066] usb usb2-port1: attempt power cycle
[  855.729818][T14476] usb 1-1: Using ep0 maxpacket: 8
[  855.730544][T14476] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  855.733427][T14476] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  855.733475][T14476] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  855.737806][T14476] usb 1-1: config 0 descriptor??
[  855.825741][T18477] netlink: 'syz.3.3694': attribute type 16 has an invalid length.
[  855.825778][T18477] netlink: 'syz.3.3694': attribute type 17 has an invalid length.
[  855.886992][T18477] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  855.948379][T14476] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  855.980730][T17063] usb 5-1: reset high-speed USB device number 47 using dummy_hcd
[  855.981536][T17063] usb 5-1: device reset changed ep0 maxpacket size!
[  855.989152][T17063] usb 5-1: USB disconnect, device number 47
[  856.059808][T17066] usb 2-1: new low-speed USB device number 85 using dummy_hcd
[  856.082050][T17066] usb 2-1: device descriptor read/8, error -71
[  856.113282][T18473] syz.5.3692 (18473): drop_caches: 2
[  856.118058][T18482] syzkaller0: entered promiscuous mode
[  856.118090][T18482] syzkaller0: entered allmulticast mode
[  856.149844][T17063] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  856.303711][T18484] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[16398] was attempted by "                                                                                                                                
  ߂�\x07\x220   
\x09\x1b 
   
\x09  
��\x0d \x09�I                                        
      
                                       ^                                                               /dev/video#                                                     net/dev                                                                                                                                0       0    0    0    0     0       0          0\x0agretap0:       0       0    0    0    0     0          0         0        0       0   11    0    0     0       0          0\x0aerspan0:       0       0    0    0    0     0          0         0        0       0   12    0    0     0       0          0\x0aip_vti0:       0       0    0    0    0     0          0         0        0       0    0  
[  856.312167][T17063] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  856.313521][T17063] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  856.313546][T17063] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  856.315750][T17063] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  856.315774][T17063] usb 5-1: Product: syz
[  856.315789][T17063] usb 5-1: Manufacturer: syz
[  856.315804][T17063] usb 5-1: SerialNumber: syz
[  856.417012][T17066] usb 2-1: new low-speed USB device number 86 using dummy_hcd
[  856.480776][T17066] usb 2-1: device descriptor read/8, error -71
[  856.489161][T17063] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  856.525293][T17063] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  856.525293][T17063]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  856.590161][T17066] usb usb2-port1: unable to enumerate USB device
[  856.629300][ T3109] usb 1-1: USB disconnect, device number 47
[  856.708623][T18475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  856.711024][T18475] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  856.714304][T18475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  856.714708][T18475] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  856.869930][T17066] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[  857.019817][T17066] usb 6-1: Using ep0 maxpacket: 16
[  857.021038][T17066] usb 6-1: New USB device found, idVendor=05d1, idProduct=2002, bcdDevice= 5.00
[  857.023264][T17066] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  857.023286][T17066] usb 6-1: Product: syz
[  857.023294][T17066] usb 6-1: SerialNumber: syz
[  857.025498][T17066] usb 6-1: config 0 descriptor??
[  857.029157][T17066] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  857.045029][T17066] usb 6-1: Detected FT2232C/D
[  857.232022][T18488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  857.232482][T18488] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  857.235336][T17066] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  857.235827][T17066] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  857.256981][T17066] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  857.282961][T17066] usb 6-1: USB disconnect, device number 75
[  857.289544][T17066] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  857.306397][T17066] ftdi_sio 6-1:0.0: device disconnected
[  857.356000][T17063] scsi host1: usb-storage 5-1:1.0
[  857.372936][T17063] usb 5-1: USB disconnect, device number 48
[  857.785136][T18501] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3702'.
[  857.859960][T14476] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  858.011535][T14476] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  858.012576][T14476] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  858.012609][T14476] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  858.012635][T14476] usb 4-1: config 0 interface 0 has no altsetting 0
[  858.012659][T14476] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  858.017842][T14476] usb 4-1: config 0 descriptor??
[  858.355554][T18499] bridge0: port 3(syz_tun) entered disabled state
[  858.367647][T18499] bridge0: port 2(bridge_slave_1) entered disabled state
[  858.368305][T18499] bridge0: port 1(bridge_slave_0) entered disabled state
[  858.506914][T18515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  858.528193][T18515] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  858.553971][T14476] hid-multitouch 0003:0EEF:72C4.0035: unbalanced collection at end of report description
[  858.558855][T14476] hid-multitouch 0003:0EEF:72C4.0035: probe with driver hid-multitouch failed with error -22
[  858.669562][T18499] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  858.691782][T18499] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  858.978514][T18523] FAULT_INJECTION: forcing a failure.
[  858.978514][T18523] name failslab, interval 1, probability 0, space 0, times 0
[  858.978551][T18523] CPU: 1 UID: 0 PID: 18523 Comm: syz.5.3708 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  858.978579][T18523] Tainted: [L]=SOFTLOCKUP
[  858.978587][T18523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  858.978600][T18523] Call Trace:
[  858.978608][T18523]  <TASK>
[  858.978617][T18523]  dump_stack_lvl+0xe8/0x150
[  858.978653][T18523]  should_fail_ex+0x410/0x560
[  858.978689][T18523]  should_failslab+0xa8/0x100
[  858.978721][T18523]  ? anon_vma_fork+0x88/0x540
[  858.978742][T18523]  kmem_cache_alloc_noprof+0x9c/0x600
[  858.978762][T18523]  ? trace_kmem_cache_alloc+0x29/0xe0
[  858.978781][T18523]  ? vm_area_dup+0x28/0x760
[  858.978803][T18523]  ? anon_vma_fork+0x88/0x540
[  858.978830][T18523]  anon_vma_fork+0x88/0x540
[  858.978850][T18523]  ? anon_vma_name+0x61/0x210
[  858.978876][T18523]  ? dup_userfaultfd+0xa7/0x610
[  858.978906][T18523]  ? dup_mmap+0x875/0x1dc0
[  858.978929][T18523]  dup_mmap+0x954/0x1dc0
[  858.978965][T18523]  ? __pfx_dup_mmap+0x10/0x10
[  858.978985][T18523]  ? do_raw_spin_lock+0x12b/0x2f0
[  858.979029][T18523]  ? lock_acquire+0x115/0x350
[  858.979065][T18523]  copy_mm+0x115/0x470
[  858.979096][T18523]  copy_process+0x1ed1/0x44b0
[  858.979138][T18523]  ? copy_process+0xd1c/0x44b0
[  858.979181][T18523]  ? __pfx_copy_process+0x10/0x10
[  858.979211][T18523]  ? get_pid_task+0x20/0x1f0
[  858.979230][T18523]  ? get_pid_task+0x20/0x1f0
[  858.979260][T18523]  kernel_clone+0x2d7/0x940
[  858.979295][T18523]  ? __pfx_kernel_clone+0x10/0x10
[  858.979355][T18523]  __x64_sys_clone+0x1b6/0x230
[  858.979388][T18523]  ? __pfx___x64_sys_clone+0x10/0x10
[  858.979437][T18523]  ? __pfx_ksys_write+0x10/0x10
[  858.979473][T18523]  do_syscall_64+0x166/0x520
[  858.979498][T18523]  ? trace_irq_disable+0x3b/0x140
[  858.979521][T18523]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  858.979542][T18523]  ? clear_bhb_loop+0x70/0xc0
[  858.979567][T18523]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  858.979587][T18523] RIP: 0033:0x7fa2d519f559
[  858.979606][T18523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  858.979624][T18523] RSP: 002b:00007fa2d6105fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  858.979647][T18523] RAX: ffffffffffffffda RBX: 00007fa2d5425fa0 RCX: 00007fa2d519f559
[  858.979663][T18523] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  858.979675][T18523] RBP: 00007fa2d6106090 R08: 0000000000000000 R09: 0000000000000000
[  858.979685][T18523] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002
[  858.979696][T18523] R13: 00007fa2d5426038 R14: 00007fa2d5425fa0 R15: 00007fa2d554fa48
[  858.979728][T18523]  </TASK>
[  859.480936][T12022] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  859.481547][T12022] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  859.481576][T12022] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  859.481597][T12022] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  859.553673][ T3109] usb 4-1: USB disconnect, device number 13
[  859.566542][T18521] batman_adv: batadv0: Adding interface: dummy0
[  859.566561][T18521] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  859.568993][T18521] batman_adv: batadv0: Interface activated: dummy0
[  861.596032][T18564] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[16269] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[18564]
[  861.825337][T18567] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3721'.
[  862.458288][T17063] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  862.519213][T18578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3724'.
[  862.629869][T17063] usb 1-1: Using ep0 maxpacket: 32
[  862.630710][T17063] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  862.631905][T17063] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  862.631935][T17063] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  862.631973][T17063] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  862.633656][T17063] usb 1-1: config 0 descriptor??
[  863.085106][T17063] ft260 0003:0403:6030.0036: unknown main item tag 0x0
[  863.085132][T17063] ft260 0003:0403:6030.0036: unknown main item tag 0x0
[  863.261138][T17063] ft260 0003:0403:6030.0036: chip code: 0000 0000
[  863.456790][T18594] syz.5.3728 (18594): drop_caches: 2
[  863.471105][T17063] ft260 0003:0403:6030.0036: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0
[  863.673095][T17063] ft260 0003:0403:6030.0036: failed to retrieve status: -32, no wakeup
[  863.905270][T17063] usb 1-1: USB disconnect, device number 48
[  864.524212][T18606] netlink: 'syz.5.3734': attribute type 2 has an invalid length.
[  864.597113][T18606] : entered promiscuous mode
[  864.620438][T18608] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  864.821415][   T10] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  864.859827][T14476] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  864.949918][   T10] usb 1-1: device descriptor read/64, error -71
[  865.009830][T14476] usb 5-1: Using ep0 maxpacket: 32
[  865.010552][T14476] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  865.014190][T14476] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  865.014216][T14476] usb 5-1: Product: syz
[  865.014232][T14476] usb 5-1: Manufacturer: syz
[  865.014248][T14476] usb 5-1: SerialNumber: syz
[  865.023294][T14476] usb 5-1: config 0 descriptor??
[  865.144519][T18602] syz.3.3732 (18602): drop_caches: 2
[  865.148087][T18625] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3738'.
[  865.201090][   T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  865.238501][T14476] airspy 5-1:0.0: usb_control_msg() failed -71 request 09
[  865.238521][T14476] airspy 5-1:0.0: Could not detect board
[  865.238576][T14476] airspy 5-1:0.0: probe with driver airspy failed with error -71
[  865.248347][T14476] usb 5-1: USB disconnect, device number 49
[  865.331248][   T10] usb 1-1: device descriptor read/64, error -71
[  865.411747][  T189] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[  865.442148][   T10] usb usb1-port1: attempt power cycle
[  865.559794][  T189] usb 6-1: Using ep0 maxpacket: 32
[  865.560406][  T189] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  865.562657][  T189] usb 6-1: config 2 has an invalid interface number: 88 but max is 0
[  865.562683][  T189] usb 6-1: config 2 has no interface number 0
[  865.562737][  T189] usb 6-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[  865.562758][  T189] usb 6-1: config 2 interface 88 has no altsetting 0
[  865.567404][  T189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  865.567588][  T189] usb 6-1: Product: syz
[  865.567605][  T189] usb 6-1: Manufacturer: syz
[  865.567620][  T189] usb 6-1: SerialNumber: syz
[  865.580027][T18623] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  865.780038][   T10] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  865.783398][  T189] asix 6-1:2.88: probe with driver asix failed with error -71
[  865.800795][  T189] usb 6-1: USB disconnect, device number 76
[  865.801647][   T10] usb 1-1: device descriptor read/8, error -71
[  865.860933][T14476] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  866.021809][T14476] usb 4-1: unable to get BOS descriptor or descriptor too short
[  866.021860][T14476] usb 4-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[  866.024366][T14476] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  866.024393][T14476] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  866.024418][T14476] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  866.026537][T14476] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  866.026554][T14476] usb 4-1: Product: syz
[  866.026562][T14476] usb 4-1: Manufacturer: syz
[  866.041399][   T10] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  866.068400][   T10] usb 1-1: device descriptor read/8, error -71
[  866.124986][T14476] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (8086:0ad2)
[  866.170088][   T10] usb usb1-port1: unable to enumerate USB device
[  866.219817][T17063] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  866.372355][T17063] usb 5-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 1.00
[  866.390930][T17063] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  866.390961][T17063] usb 5-1: Product: syz
[  866.390976][T17063] usb 5-1: Manufacturer: syz
[  866.390993][T17063] usb 5-1: SerialNumber: syz
[  866.413267][T18634] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3741'.
[  866.436002][T17063] digi_acceleport 5-1:1.0: Digi 2 port USB adapter converter detected
[  866.459222][T17063] usb 5-1: Digi 2 port USB adapter converter now attached to ttyUSB0
[  866.476308][T17063] usb 5-1: Digi 2 port USB adapter converter now attached to ttyUSB1
[  866.490788][T17063] usb 5-1: Digi 2 port USB adapter converter now attached to ttyUSB2
[  866.765998][T17063] usb 5-1: USB disconnect, device number 50
[  866.821693][T17063] digi_2 ttyUSB0: Digi 2 port USB adapter converter now disconnected from ttyUSB0
[  866.826770][T17063] digi_2 ttyUSB1: Digi 2 port USB adapter converter now disconnected from ttyUSB1
[  866.853847][T17063] digi_2 ttyUSB2: Digi 2 port USB adapter converter now disconnected from ttyUSB2
[  866.855400][T17063] digi_acceleport 5-1:1.0: device disconnected
[  868.203103][T14476] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 2 on unit 49: -71 (exp. 1).
[  868.204126][T14476] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 49: -71 (exp. 1).
[  868.206677][T14476] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 6 on unit 49: -71 (exp. 1).
[  868.207960][T14476] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 8 on unit 49: -71 (exp. 1).
[  868.209073][T14476] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 49: -71 (exp. 1).
[  868.209484][T14476] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 49: -71 (exp. 1).
[  868.213187][T14476] uvcvideo 4-1:1.0: Failed to query (GET_CUR) UVC control 5 on unit 49: -71 (exp. 1).
[  868.213625][T14476] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 11 on unit 49: -71 (exp. 1).
[  868.214098][T14476] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 13 on unit 49: -71 (exp. 1).
[  868.214303][T14476] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770.
[  868.227508][T14476] usb 4-1: USB disconnect, device number 14
[  868.379972][T17063] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  868.382240][T18677] fuse: Bad value for 'fd'
[  868.384700][T18677] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  868.389838][  T189] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  868.529824][T17063] usb 5-1: Using ep0 maxpacket: 32
[  868.531073][T17063] usb 5-1: New USB device found, idVendor=5543, idProduct=f142, bcdDevice= 0.af
[  868.532129][T17063] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  868.532185][T17063] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  868.537746][T17063] usb 5-1: config 0 descriptor??
[  868.551466][  T189] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  868.567067][  T189] usb 2-1: unable to read config index 0 descriptor/start: -61
[  868.567103][  T189] usb 2-1: can't read configurations, error -61
[  868.690652][  T189] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  868.841362][  T189] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  868.844028][  T189] usb 2-1: unable to read config index 0 descriptor/start: -61
[  868.844057][  T189] usb 2-1: can't read configurations, error -61
[  868.844949][  T189] usb usb2-port1: attempt power cycle
[  868.940954][T18661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3748'.
[  868.965648][T17063] hid-generic 0003:5543:F142.0037: unknown main item tag 0x0
[  868.965674][T17063] hid-generic 0003:5543:F142.0037: unknown main item tag 0x0
[  868.965690][T17063] hid-generic 0003:5543:F142.0037: unknown main item tag 0x0
[  868.965706][T17063] hid-generic 0003:5543:F142.0037: unknown main item tag 0x0
[  868.965731][T17063] hid-generic 0003:5543:F142.0037: unknown main item tag 0x0
[  868.965746][T17063] hid-generic 0003:5543:F142.0037: unknown main item tag 0x0
[  868.965762][T17063] hid-generic 0003:5543:F142.0037: unknown main item tag 0x0
[  868.965777][T17063] hid-generic 0003:5543:F142.0037: unknown main item tag 0x0
[  868.965793][T17063] hid-generic 0003:5543:F142.0037: unknown main item tag 0x0
[  868.965808][T17063] hid-generic 0003:5543:F142.0037: unknown main item tag 0x0
[  868.966365][T17063] hid-generic 0003:5543:F142.0037: reserved main item tag 0xe
[  868.969559][T17063] hid-generic 0003:5543:F142.0037: item fetching failed at offset 186/234
[  869.040703][T17063] hid-generic 0003:5543:F142.0037: probe with driver hid-generic failed with error -22
[  869.151343][T17066] usb 5-1: USB disconnect, device number 51
[  869.187510][  T189] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  869.219385][  T189] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  869.232554][  T189] usb 2-1: unable to read config index 0 descriptor/start: -61
[  869.232593][  T189] usb 2-1: can't read configurations, error -61
[  869.296120][T18682] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  869.360118][  T189] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  869.381989][  T189] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  869.384291][  T189] usb 2-1: unable to read config index 0 descriptor/start: -61
[  869.384328][  T189] usb 2-1: can't read configurations, error -61
[  869.384585][  T189] usb usb2-port1: unable to enumerate USB device
[  869.540958][   T10] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  869.690698][   T10] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  869.694250][   T10] usb 1-1: config 1 has an invalid interface number: 3 but max is 0
[  869.694278][   T10] usb 1-1: config 1 has no interface number 0
[  869.697309][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  869.697335][   T10] usb 1-1: Product: syz
[  869.697350][   T10] usb 1-1: Manufacturer: syz
[  869.697365][   T10] usb 1-1: SerialNumber: syz
[  869.724214][   T10] usb 1-1: 3:1 : does not exist
[  869.724539][   T10] usb 1-1: 3:2 : does not exist
[  869.726008][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3756'.
[  869.910125][  T189] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  869.912197][   T10] usb 1-1: USB disconnect, device number 53
[  870.061100][  T189] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  870.062146][  T189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  870.062175][  T189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  870.062198][  T189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  870.064883][  T189] usb 4-1: config 0 descriptor??
[  870.261491][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  870.261592][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  870.686976][  T189] usb 4-1: string descriptor 0 read error: -22
[  870.701832][   T10] usb 1-1: new full-speed USB device number 54 using dummy_hcd
[  870.806850][T18704] tipc: Started in network mode
[  870.806885][T18704] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711
[  870.809009][T18704] tipc: Enabled bearer <eth:batadv0>, priority 13
[  870.857319][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00
[  870.858889][   T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30
[  870.858945][   T10] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  870.858999][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  870.859035][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  870.883722][   T10] usb 1-1: config 0 descriptor??
[  870.939510][T18708] FAULT_INJECTION: forcing a failure.
[  870.939510][T18708] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  870.939537][T18708] CPU: 0 UID: 0 PID: 18708 Comm: syz.4.3765 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  870.939552][T18708] Tainted: [L]=SOFTLOCKUP
[  870.939557][T18708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  870.939564][T18708] Call Trace:
[  870.939569][T18708]  <TASK>
[  870.939576][T18708]  dump_stack_lvl+0xe8/0x150
[  870.939597][T18708]  should_fail_ex+0x410/0x560
[  870.939616][T18708]  _copy_from_user+0x2d/0xb0
[  870.939628][T18708]  ___sys_recvmsg+0x173/0x5a0
[  870.939645][T18708]  ? __pfx____sys_recvmsg+0x10/0x10
[  870.939661][T18708]  ? lock_acquire+0x115/0x350
[  870.939701][T18708]  do_recvmmsg+0x31a/0x7f0
[  870.939730][T18708]  ? __pfx_do_recvmmsg+0x10/0x10
[  870.939754][T18708]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  870.939771][T18708]  ? fdget+0x1ac/0x250
[  870.939786][T18708]  __x64_sys_recvmmsg+0x198/0x250
[  870.939800][T18708]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  870.939819][T18708]  do_syscall_64+0x166/0x520
[  870.939833][T18708]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  870.939844][T18708]  ? clear_bhb_loop+0x70/0xc0
[  870.939858][T18708]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  870.939868][T18708] RIP: 0033:0x7fa87fb9f559
[  870.939880][T18708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  870.939890][T18708] RSP: 002b:00007fa8809ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  870.939903][T18708] RAX: ffffffffffffffda RBX: 00007fa87fe25fa0 RCX: 00007fa87fb9f559
[  870.939911][T18708] RDX: 0000000000000a0d RSI: 0000200000000540 RDI: 0000000000000004
[  870.939926][T18708] RBP: 00007fa8809ae090 R08: 0000000000000000 R09: 0000000000000000
[  870.939933][T18708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  870.939939][T18708] R13: 00007fa87fe26038 R14: 00007fa87fe25fa0 R15: 00007fa87ff4fa48
[  870.939956][T18708]  </TASK>
[  870.975021][  T189] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0038/input/input80
[  871.219085][  T189] uclogic 0003:256C:006D.0038: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0
[  871.265946][T18706] fuse: Unknown parameter '�DA��r��l>F\��>��(��'������7�2�>��).h&����B�yYޅ�Y�_��	��tF�?�#�o���I��m���y/��?��V'
[  871.304913][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  871.304933][   T30] audit: type=1326 audit(1792588635.810:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.3.3757" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9959f559 code=0x7ffc0000
[  871.305064][   T30] audit: type=1326 audit(1792588635.810:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.3.3757" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9959f559 code=0x7ffc0000
[  871.309192][T18715] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3766'.
[  871.398175][   T30] audit: type=1326 audit(1792588635.900:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.3.3757" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9959f559 code=0x7ffc0000
[  871.398309][   T30] audit: type=1326 audit(1792588635.900:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.3.3757" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9959f559 code=0x7ffc0000
[  871.400436][   T10] logitech 0003:046D:C211.0039: hidraw1: USB HID vff.fe Device [HID 046d:c211] on usb-dummy_hcd.0-1/input0
[  871.400549][   T10] logitech 0003:046D:C211.0039: no inputs found
[  871.420214][   T30] audit: type=1326 audit(1792588635.910:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.3.3757" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcb9959f559 code=0x7ffc0000
[  871.420265][   T30] audit: type=1326 audit(1792588635.910:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.3.3757" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9959f559 code=0x7ffc0000
[  871.420302][   T30] audit: type=1326 audit(1792588635.910:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.3.3757" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9959f559 code=0x7ffc0000
[  871.420341][   T30] audit: type=1326 audit(1792588635.920:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.3.3757" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9959f559 code=0x7ffc0000
[  871.420378][   T30] audit: type=1326 audit(1792588635.920:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.3.3757" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9959f559 code=0x7ffc0000
[  871.420416][   T30] audit: type=1326 audit(1792588635.920:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.3.3757" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fcb9959f559 code=0x7ffc0000
[  871.579221][   T10] usb 1-1: USB disconnect, device number 54
[  871.835218][T18719] fido_id[18719]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  871.921738][   T10] tipc: Node number set to 8432298
[  872.457339][T18743] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  872.709867][T17063] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[  872.867300][ T3109] usb 4-1: USB disconnect, device number 15
[  872.889910][T17063] usb 6-1: Using ep0 maxpacket: 16
[  872.894824][T17063] usb 6-1: unable to get BOS descriptor or descriptor too short
[  872.894879][T17063] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  872.896687][T17063] usb 6-1: config index 0 descriptor too short (expected 50286, got 110)
[  872.897005][T17063] usb 6-1: config 115 has too many interfaces: 100, using maximum allowed: 32
[  872.897026][T17063] usb 6-1: config 115 has an invalid descriptor of length 0, skipping remainder of the config
[  872.897046][T17063] usb 6-1: config 115 has 0 interfaces, different from the descriptor's value: 100
[  872.970727][T17063] usb 6-1: language id specifier not provided by device, defaulting to English
[  873.000298][T17063] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=36
[  873.000353][T17063] usb 6-1: SerialNumber: syz
[  873.292253][T12022] IPVS: starting estimator thread 0...
[  873.307771][T17063] usb 6-1: USB disconnect, device number 77
[  873.379840][T18751] IPVS: using max 52 ests per chain, 124800 per kthread
[  873.492501][T18758] FAULT_INJECTION: forcing a failure.
[  873.492501][T18758] name failslab, interval 1, probability 0, space 0, times 0
[  873.492539][T18758] CPU: 1 UID: 0 PID: 18758 Comm: syz.4.3776 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  873.492567][T18758] Tainted: [L]=SOFTLOCKUP
[  873.492576][T18758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  873.492589][T18758] Call Trace:
[  873.492598][T18758]  <TASK>
[  873.492607][T18758]  dump_stack_lvl+0xe8/0x150
[  873.492642][T18758]  should_fail_ex+0x410/0x560
[  873.492678][T18758]  should_failslab+0xa8/0x100
[  873.492708][T18758]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[  873.492741][T18758]  kmem_cache_alloc_noprof+0x9c/0x600
[  873.492765][T18758]  ? __kvmalloc_node_noprof+0x340/0x820
[  873.492790][T18758]  ? __kvm_mmu_topup_memory_cache+0x461/0x600
[  873.492821][T18758]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[  873.492861][T18758]  __kvm_mmu_topup_memory_cache+0x1b2/0x600
[  873.492906][T18758]  mmu_topup_memory_caches+0x21/0x1a0
[  873.492932][T18758]  kvm_mmu_load+0x9d/0x21e0
[  873.492958][T18758]  ? kvm_msr_allowed+0x9a/0x490
[  873.492980][T18758]  ? kvm_msr_allowed+0x9a/0x490
[  873.493003][T18758]  ? kvm_msr_allowed+0x9a/0x490
[  873.493023][T18758]  ? kvm_msr_allowed+0x3f4/0x490
[  873.493043][T18758]  ? kvm_msr_allowed+0x9a/0x490
[  873.493063][T18758]  ? kvm_apic_has_interrupt+0x740/0x770
[  873.493105][T18758]  vcpu_run+0x4f7e/0x7aa0
[  873.493138][T18758]  ? __lock_acquire+0x747/0x2de0
[  873.493224][T18758]  ? __pfx_vcpu_run+0x10/0x10
[  873.493245][T18758]  ? lock_acquire+0x115/0x350
[  873.493295][T18758]  kvm_arch_vcpu_ioctl_run+0xe87/0x19c0
[  873.493321][T18758]  ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0
[  873.493345][T18758]  ? kvm_vcpu_ioctl+0xe8f/0xfd0
[  873.493375][T18758]  kvm_vcpu_ioctl+0xa61/0xfd0
[  873.493405][T18758]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  873.493427][T18758]  ? hook_file_ioctl+0x1f2/0x600
[  873.493478][T18758]  ? __fget_files+0x2a/0x420
[  873.493503][T18758]  ? __fget_files+0x2a/0x420
[  873.493527][T18758]  ? __fget_files+0x2a/0x420
[  873.493552][T18758]  ? bpf_lsm_file_ioctl+0x9/0x20
[  873.493573][T18758]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  873.493597][T18758]  __se_sys_ioctl+0xfc/0x170
[  873.493624][T18758]  do_syscall_64+0x166/0x520
[  873.493674][T18758]  ? trace_irq_disable+0x3b/0x140
[  873.493696][T18758]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  873.493716][T18758]  ? clear_bhb_loop+0x70/0xc0
[  873.493741][T18758]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  873.493761][T18758] RIP: 0033:0x7fa87fb9f559
[  873.493779][T18758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  873.493796][T18758] RSP: 002b:00007fa88098d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  873.493818][T18758] RAX: ffffffffffffffda RBX: 00007fa87fe26090 RCX: 00007fa87fb9f559
[  873.493833][T18758] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a
[  873.493844][T18758] RBP: 00007fa88098d090 R08: 0000000000000000 R09: 0000000000000000
[  873.493855][T18758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  873.493867][T18758] R13: 00007fa87fe26128 R14: 00007fa87fe26090 R15: 00007fa87ff4fa48
[  873.493900][T18758]  </TASK>
[  873.831586][T18763] FAULT_INJECTION: forcing a failure.
[  873.831586][T18763] name failslab, interval 1, probability 0, space 0, times 0
[  873.831621][T18763] CPU: 1 UID: 0 PID: 18763 Comm: syz.0.3779 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  873.831648][T18763] Tainted: [L]=SOFTLOCKUP
[  873.831656][T18763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  873.831668][T18763] Call Trace:
[  873.831676][T18763]  <TASK>
[  873.831685][T18763]  dump_stack_lvl+0xe8/0x150
[  873.831719][T18763]  should_fail_ex+0x410/0x560
[  873.831756][T18763]  should_failslab+0xa8/0x100
[  873.831786][T18763]  __kvmalloc_node_noprof+0x171/0x820
[  873.831814][T18763]  ? __kvmalloc_node_noprof+0x340/0x820
[  873.831844][T18763]  ? bpf_compute_postorder+0xda/0x970
[  873.831866][T18763]  ? bpf_compute_postorder+0xda/0x970
[  873.831896][T18763]  bpf_compute_postorder+0xda/0x970
[  873.831921][T18763]  ? __pfx_check_and_resolve_insns+0x10/0x10
[  873.831949][T18763]  ? add_kfuncs+0x251/0x2e0
[  873.831975][T18763]  bpf_check+0x261d/0x2ef0
[  873.832011][T18763]  ? __pfx_bpf_check+0x10/0x10
[  873.832036][T18763]  ? bpf_obj_name_cpy+0x194/0x1e0
[  873.832066][T18763]  bpf_prog_load+0x14d6/0x1c20
[  873.832100][T18763]  ? __pfx_bpf_prog_load+0x10/0x10
[  873.832144][T18763]  ? __sanitizer_cov_trace_pc+0x49/0x80
[  873.832170][T18763]  __sys_bpf+0xd0d/0xd90
[  873.832201][T18763]  ? __pfx___sys_bpf+0x10/0x10
[  873.832238][T18763]  ? __fget_files+0x2a/0x420
[  873.832285][T18763]  ? ksys_write+0x242/0x270
[  873.832310][T18763]  ? __pfx_ksys_write+0x10/0x10
[  873.832338][T18763]  __x64_sys_bpf+0xba/0xd0
[  873.832365][T18763]  do_syscall_64+0x166/0x520
[  873.832390][T18763]  ? trace_irq_disable+0x3b/0x140
[  873.832413][T18763]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  873.832435][T18763]  ? clear_bhb_loop+0x70/0xc0
[  873.832460][T18763]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  873.832480][T18763] RIP: 0033:0x7f57d679f559
[  873.832500][T18763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  873.832532][T18763] RSP: 002b:00007f57d76c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  873.832555][T18763] RAX: ffffffffffffffda RBX: 00007f57d6a25fa0 RCX: 00007f57d679f559
[  873.832570][T18763] RDX: 0000000000000094 RSI: 0000200000000700 RDI: 0000000000000005
[  873.832583][T18763] RBP: 00007f57d76c2090 R08: 0000000000000000 R09: 0000000000000000
[  873.832597][T18763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  873.832609][T18763] R13: 00007f57d6a26038 R14: 00007f57d6a25fa0 R15: 00007f57d6b4fa48
[  873.832644][T18763]  </TASK>
[  873.864580][T18754] syzkaller0: entered promiscuous mode
[  873.864603][T18754] syzkaller0: entered allmulticast mode
[  874.206807][T18770] syz_tun: entered allmulticast mode
[  874.395060][T18772] loop4: detected capacity change from 0 to 7
[  874.396751][T18772] Dev loop4: unable to read RDB block 7
[  874.396794][T18772]  loop4: unable to read partition table
[  874.396989][T18772] loop4: partition table beyond EOD, truncated
[  874.397654][T18772] loop_reread_partitions: partition scan of loop4 (�被x������ ) failed (rc=-5)
[  874.735400][T18777] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3785'.
[  874.738096][T18777] bridge0: port 3(veth0) entered disabled state
[  874.738643][T18777] bridge0: port 2(bridge_slave_1) entered disabled state
[  874.739196][T18777] bridge0: port 1(bridge_slave_0) entered disabled state
[  874.864842][T18779] FAULT_INJECTION: forcing a failure.
[  874.864842][T18779] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  874.864880][T18779] CPU: 0 UID: 0 PID: 18779 Comm: syz.3.3786 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  874.864908][T18779] Tainted: [L]=SOFTLOCKUP
[  874.864915][T18779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  874.864928][T18779] Call Trace:
[  874.864937][T18779]  <TASK>
[  874.864946][T18779]  dump_stack_lvl+0xe8/0x150
[  874.864980][T18779]  should_fail_ex+0x410/0x560
[  874.865015][T18779]  _copy_from_iter+0x1d3/0x1660
[  874.865042][T18779]  ? skb_set_owner_w+0x263/0x3d0
[  874.865076][T18779]  ? _copy_from_iter+0x21b/0x1660
[  874.865104][T18779]  ? __pfx__copy_from_iter+0x10/0x10
[  874.865143][T18779]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  874.865171][T18779]  skb_copy_datagram_from_iter+0xe6/0x720
[  874.865301][T18779]  ? skb_put+0x112/0x210
[  874.865327][T18779]  tun_get_user+0x14fd/0x4450
[  874.865372][T18779]  ? aa_file_perm+0x18b/0x15f0
[  874.865399][T18779]  ? aa_file_perm+0x4ed/0x15f0
[  874.865422][T18779]  ? __pfx_tun_get_user+0x10/0x10
[  874.865456][T18779]  ? __lock_acquire+0x747/0x2de0
[  874.865482][T18779]  ? kstrtoull+0x137/0x1d0
[  874.865516][T18779]  ? ref_tracker_alloc+0x341/0x4b0
[  874.865535][T18779]  ? lock_acquire+0x115/0x350
[  874.865558][T18779]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  874.865580][T18779]  ? lock_acquire+0x115/0x350
[  874.865603][T18779]  ? tun_get+0x1c/0x2f0
[  874.865636][T18779]  ? tun_get+0x1c/0x2f0
[  874.865664][T18779]  ? tun_get+0x1c/0x2f0
[  874.865703][T18779]  tun_chr_write_iter+0x113/0x200
[  874.865734][T18779]  vfs_write+0x612/0xba0
[  874.865765][T18779]  ? __pfx_vfs_write+0x10/0x10
[  874.865790][T18779]  ? __fget_files+0x3a2/0x420
[  874.865809][T18779]  ? __fget_files+0x2a/0x420
[  874.865832][T18779]  ? fdget+0x1ac/0x250
[  874.865859][T18779]  ksys_write+0x150/0x270
[  874.865881][T18779]  ? __pfx_ksys_write+0x10/0x10
[  874.865914][T18779]  do_syscall_64+0x166/0x520
[  874.865939][T18779]  ? trace_irq_disable+0x3b/0x140
[  874.865961][T18779]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  874.865983][T18779]  ? clear_bhb_loop+0x70/0xc0
[  874.866009][T18779]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  874.866029][T18779] RIP: 0033:0x7fcb9959f559
[  874.866049][T18779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  874.866067][T18779] RSP: 002b:00007fcb9a4af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  874.866089][T18779] RAX: ffffffffffffffda RBX: 00007fcb99825fa0 RCX: 00007fcb9959f559
[  874.866105][T18779] RDX: 0000000000000fce RSI: 0000200000001880 RDI: 0000000000000003
[  874.866120][T18779] RBP: 00007fcb9a4af090 R08: 0000000000000000 R09: 0000000000000000
[  874.866133][T18779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  874.866145][T18779] R13: 00007fcb99826038 R14: 00007fcb99825fa0 R15: 00007fcb9994fa48
[  874.866178][T18779]  </TASK>
[  875.226807][T18790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3787'.
[  876.472112][T18810] FAULT_INJECTION: forcing a failure.
[  876.472112][T18810] name failslab, interval 1, probability 0, space 0, times 0
[  876.472151][T18810] CPU: 0 UID: 0 PID: 18810 Comm: syz.1.3794 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  876.472176][T18810] Tainted: [L]=SOFTLOCKUP
[  876.472183][T18810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  876.472195][T18810] Call Trace:
[  876.472203][T18810]  <TASK>
[  876.472212][T18810]  dump_stack_lvl+0xe8/0x150
[  876.472246][T18810]  should_fail_ex+0x410/0x560
[  876.472283][T18810]  should_failslab+0xa8/0x100
[  876.472310][T18810]  ? __pmd_alloc+0xc1/0x5c0
[  876.472329][T18810]  kmem_cache_alloc_noprof+0x9c/0x600
[  876.472349][T18810]  ? alloc_pages_mpol+0x256/0x390
[  876.472379][T18810]  ? __pmd_alloc+0xc1/0x5c0
[  876.472403][T18810]  __pmd_alloc+0xc1/0x5c0
[  876.472426][T18810]  copy_pmd_range+0x57f8/0x5c00
[  876.472449][T18810]  ? register_lock_class+0x31/0x2e0
[  876.472507][T18810]  ? __pfx_copy_pmd_range+0x10/0x10
[  876.472526][T18810]  ? do_raw_spin_lock+0x12b/0x2f0
[  876.472565][T18810]  ? do_raw_spin_unlock+0xf5/0x200
[  876.472596][T18810]  ? _raw_spin_unlock+0x28/0x50
[  876.472617][T18810]  ? __pud_alloc+0x348/0x460
[  876.472640][T18810]  copy_page_range+0xc7d/0x1280
[  876.472684][T18810]  ? __pfx_copy_page_range+0x10/0x10
[  876.472726][T18810]  dup_mmap+0xf17/0x1dc0
[  876.472768][T18810]  ? __pfx_dup_mmap+0x10/0x10
[  876.472789][T18810]  ? do_raw_spin_lock+0x12b/0x2f0
[  876.472832][T18810]  ? lock_acquire+0x115/0x350
[  876.472872][T18810]  copy_mm+0x115/0x470
[  876.472900][T18810]  copy_process+0x1ed1/0x44b0
[  876.472947][T18810]  ? copy_process+0xd1c/0x44b0
[  876.472991][T18810]  ? __pfx_copy_process+0x10/0x10
[  876.473018][T18810]  ? get_pid_task+0x20/0x1f0
[  876.473036][T18810]  ? get_pid_task+0x20/0x1f0
[  876.473064][T18810]  kernel_clone+0x2d7/0x940
[  876.473097][T18810]  ? __pfx_kernel_clone+0x10/0x10
[  876.473130][T18810]  __x64_sys_clone+0x1b6/0x230
[  876.473148][T18810]  ? __pfx___x64_sys_clone+0x10/0x10
[  876.473172][T18810]  ? __pfx_ksys_write+0x10/0x10
[  876.473192][T18810]  do_syscall_64+0x166/0x520
[  876.473206][T18810]  ? trace_irq_disable+0x3b/0x140
[  876.473219][T18810]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  876.473230][T18810]  ? clear_bhb_loop+0x70/0xc0
[  876.473244][T18810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  876.473255][T18810] RIP: 0033:0x7f053259f559
[  876.473267][T18810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  876.473278][T18810] RSP: 002b:00007f053354cfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  876.473291][T18810] RAX: ffffffffffffffda RBX: 00007f0532825fa0 RCX: 00007f053259f559
[  876.473299][T18810] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000640c7400
[  876.473306][T18810] RBP: 00007f053354d090 R08: 0000000000000000 R09: 0000000000000000
[  876.473313][T18810] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002
[  876.473320][T18810] R13: 00007f0532826038 R14: 00007f0532825fa0 R15: 00007f053294fa48
[  876.473338][T18810]  </TASK>
[  876.851404][T18818] ip_tables: iptables: counters copy to user failed while replacing table
[  877.081157][   T30] kauditd_printk_skb: 351 callbacks suppressed
[  877.081171][   T30] audit: type=1326 audit(1792588641.590:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.3.3802" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9959f559 code=0x7ffc0000
[  877.084043][   T30] audit: type=1326 audit(1792588641.590:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.3.3802" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9959f559 code=0x7ffc0000
[  877.155291][   T30] audit: type=1326 audit(1792588641.660:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.3.3802" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcb9959f559 code=0x7ffc0000
[  877.155607][   T30] audit: type=1326 audit(1792588641.660:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.3.3802" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9959f559 code=0x7ffc0000
[  877.155757][   T30] audit: type=1326 audit(1792588641.660:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.3.3802" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9959f559 code=0x7ffc0000
[  877.157121][   T30] audit: type=1326 audit(1792588641.660:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.3.3802" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcb9959f559 code=0x7ffc0000
[  877.157148][   T30] audit: type=1326 audit(1792588641.660:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.3.3802" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9959f559 code=0x7ffc0000
[  877.157704][   T30] audit: type=1326 audit(1792588641.660:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.3.3802" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9959f559 code=0x7ffc0000
[  877.158165][   T30] audit: type=1326 audit(1792588641.660:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.3.3802" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcb9959f559 code=0x7ffc0000
[  877.158635][   T30] audit: type=1326 audit(1792588641.660:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.3.3802" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9959f559 code=0x7ffc0000
[  877.311027][ T3109] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[  877.522137][ T3109] usb 6-1: Using ep0 maxpacket: 16
[  877.522724][ T3109] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  877.529397][ T3109] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  877.529427][ T3109] usb 6-1: Product: syz
[  877.529442][ T3109] usb 6-1: Manufacturer: syz
[  877.529457][ T3109] usb 6-1: SerialNumber: syz
[  877.539404][T18837] binder: 18836:18837 ioctl c0306201 200000000100 returned -14
[  877.563883][T18838] binder: 18836:18838 ioctl c0306201 200000000200 returned -14
[  877.592326][ T3109] usb 6-1: config 0 descriptor??
[  877.601583][T18838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  877.601984][T18838] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  877.650023][T17066] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  877.653876][T18842] ip_tables: iptables: counters copy to user failed while replacing table
[  877.801125][   T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  877.805190][T18822] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  877.824575][T17066] usb 1-1: Using ep0 maxpacket: 16
[  877.832325][T17066] usb 1-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20
[  877.833706][T17066] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  877.833737][T17066] usb 1-1: config 0 interface 0 has no altsetting 0
[  877.836531][T17066] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  877.836556][T17066] usb 1-1: Product: syz
[  877.836571][T17066] usb 1-1: Manufacturer: syz
[  877.836586][T17066] usb 1-1: SerialNumber: syz
[  877.851084][T17066] usb 1-1: config 0 descriptor??
[  877.951995][   T10] usb 4-1: Using ep0 maxpacket: 32
[  877.952708][   T10] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[  877.954537][   T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  877.957626][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  877.957652][   T10] usb 4-1: Product: syz
[  877.957667][   T10] usb 4-1: Manufacturer: syz
[  877.957682][   T10] usb 4-1: SerialNumber: syz
[  877.972952][   T10] snd-ua101 4-1:1.1: sample format descriptor not found
[  877.973004][   T10] snd-ua101 4-1:1.0: invalid num_altsetting
[  878.096960][    C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  878.107228][T17066] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input82
[  878.123055][ T3109] dvb_usb_dtv5100 6-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110
[  878.150253][ T3109] usb 6-1: USB disconnect, device number 78
[  878.158930][T17066] imon:send_packet: packet tx failed (-71)
[  878.171346][   T10] usb 4-1: USB disconnect, device number 16
[  878.177898][T17066] imon 1-1:0.0: panel buttons/knobs setup failed
[  878.239808][T17066] rc_core: IR keymap rc-imon-pad not found
[  878.239831][T17066] Registered IR keymap rc-empty
[  878.239907][T17066] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  878.239925][T17066] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  878.240222][T17066] imon:send_packet: packet tx failed (-71)
[  878.273144][T17066] imon 1-1:0.0: remote input dev register failed
[  878.275783][T17066] imon 1-1:0.0: imon_init_intf0: rc device setup failed
[  878.321787][T17066] imon 1-1:0.0: unable to initialize intf0, err 0
[  878.321811][T17066] imon:imon_probe: failed to initialize context!
[  878.321824][T17066] imon 1-1:0.0: unable to register, err -19
[  878.325527][T17066] usb 1-1: USB disconnect, device number 55
[  878.640126][T17066] usb 1-1: new full-speed USB device number 56 using dummy_hcd
[  878.801778][T17066] usb 1-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20
[  878.802822][T17066] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  878.802856][T17066] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64
[  878.802884][T17066] usb 1-1: config 0 interface 0 has no altsetting 0
[  878.805240][T17066] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  878.805266][T17066] usb 1-1: Product: syz
[  878.805282][T17066] usb 1-1: Manufacturer: syz
[  878.805298][T17066] usb 1-1: SerialNumber: syz
[  878.831137][T17066] usb 1-1: config 0 descriptor??
[  878.832195][T18833] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  879.042611][    C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  879.056299][T17066] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input84
[  879.135173][T18877] syzkaller0: entered promiscuous mode
[  879.135198][T18877] syzkaller0: entered allmulticast mode
[  879.199824][T17066] rc_core: IR keymap rc-imon-pad not found
[  879.199844][T17066] Registered IR keymap rc-empty
[  879.199923][T17066] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  879.199943][T17066] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  879.262444][T17066] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  879.273261][T17066] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input85
[  879.308100][T17066] imon 1-1:0.0: iMON device (15c2:0045, intf0) on usb<1:56> initialized
[  879.436648][T18890] imon:display_open: display port is already open
[  879.436981][T18890] imon:display_open: display port is already open
[  879.491243][T18890] imon:display_open: display port is already open
[  879.491697][T18890] imon:display_open: display port is already open
[  879.492064][T18890] imon:display_open: display port is already open
[  879.492398][T18890] imon:display_open: display port is already open
[  879.492703][T18890] imon:display_open: display port is already open
[  879.493041][T18890] imon:display_open: display port is already open
[  879.493391][T18890] imon:display_open: display port is already open
[  879.493750][T18890] imon:display_open: display port is already open
[  879.494074][T18890] imon:display_open: display port is already open
[  879.494377][T18890] imon:display_open: display port is already open
[  879.494709][T18890] imon:display_open: display port is already open
[  879.495097][T18890] imon:display_open: display port is already open
[  879.495417][T18890] imon:display_open: display port is already open
[  879.495727][T18890] imon:display_open: display port is already open
[  879.496027][T18890] imon:display_open: display port is already open
[  879.496314][T18890] imon:display_open: display port is already open
[  879.496652][T18890] imon:display_open: display port is already open
[  879.496941][T18890] imon:display_open: display port is already open
[  879.497237][T18890] imon:display_open: display port is already open
[  879.497540][T18890] imon:display_open: display port is already open
[  879.497852][T18890] imon:display_open: display port is already open
[  879.498159][T18890] imon:display_open: display port is already open
[  879.498514][T18890] imon:display_open: display port is already open
[  879.498823][T18890] imon:display_open: display port is already open
[  879.499110][T18890] imon:display_open: display port is already open
[  879.499451][T18890] imon:display_open: display port is already open
[  879.661844][T18890] imon:display_open: display port is already open
[  879.662212][T18890] imon:display_open: display port is already open
[  879.669514][T18890] imon:display_open: display port is already open
[  879.670079][T18890] imon:display_open: display port is already open
[  880.356119][T17066] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  880.539838][T17066] usb 2-1: Using ep0 maxpacket: 32
[  880.540636][T17066] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice= 0.08
[  880.540673][T17066] usb 2-1: no configurations
[  880.540713][T17066] usb 2-1: can't read configurations, error -22
[  880.669872][T17066] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  880.819855][T17066] usb 2-1: Using ep0 maxpacket: 32
[  880.821061][T17066] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice= 0.08
[  880.821101][T17066] usb 2-1: no configurations
[  880.821114][T17066] usb 2-1: can't read configurations, error -22
[  880.821448][T17066] usb usb2-port1: attempt power cycle
[  880.913215][T17063] usb 1-1: USB disconnect, device number 56
[  881.182209][T17066] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  881.206796][T17066] usb 2-1: Using ep0 maxpacket: 32
[  881.207284][T17066] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice= 0.08
[  881.207320][T17066] usb 2-1: no configurations
[  881.207331][T17066] usb 2-1: can't read configurations, error -22
[  881.349914][T17066] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  881.370459][T17066] usb 2-1: Using ep0 maxpacket: 32
[  881.371011][T17066] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice= 0.08
[  881.371048][T17066] usb 2-1: no configurations
[  881.371061][T17066] usb 2-1: can't read configurations, error -22
[  881.371275][T17066] usb usb2-port1: unable to enumerate USB device
[  882.239829][T17063] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  882.429133][T17063] usb 1-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00
[  882.448302][T17063] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  882.448333][T17063] usb 1-1: Product: syz
[  882.448349][T17063] usb 1-1: Manufacturer: syz
[  883.002067][T17063] scsi host1: uas
[  883.549922][T17063] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  883.710326][T17063] usb 2-1: New USB device found, idVendor=7dcc, idProduct=676e, bcdDevice=77.db
[  883.711422][T17063] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  883.711467][T17063] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14
[  883.712387][T17063] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  883.712430][T17063] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14
[  883.713507][T17063] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  883.713557][T17063] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14
[  883.713599][T17063] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  883.716125][T17063] usb 2-1: config 0 descriptor??
[  883.815172][T17063] rndis_host 2-1:0.0: rndis: master #0/ffff88802a003000 slave #1/0000000000000000
[  884.325603][    C0] usb 1-1: stat urb: status -71
[  884.325706][    C0] usb 1-1: cmd cmplt err -71
[  884.326238][   T10] usb 1-1: USB disconnect, device number 57
[  884.330950][   T10] scsi 1:0:0:0: tag#0 uas_zap_pending 0 uas-tag 1 inflight: CMD 
[  884.331006][   T10] scsi 1:0:0:0: tag#0 CDB: Inquiry 12 00 00 00 24 00
[  884.395462][  T189] usb 2-1: USB disconnect, device number 95
[  884.850386][  T189] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  885.002719][  T189] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  885.005177][  T189] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  885.005214][  T189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  885.049187][  T189] as10x_usb: device has been detected
[  885.051483][  T189] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  885.084032][  T189] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  885.225863][T18939] ------------[ cut here ]------------
[  885.225874][T18939] DEBUG_LOCKS_WARN_ON(lock->magic != lock)
[  885.225885][T18939] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x132a/0x15a0, CPU#1: syz.3.3828/18939
[  885.247549][T18939] Modules linked in:
[  885.251479][T18939] CPU: 1 UID: 0 PID: 18939 Comm: syz.3.3828 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  885.262434][T18939] Tainted: [L]=SOFTLOCKUP
[  885.266758][T18939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  885.276828][T18939] RIP: 0010:__mutex_lock+0x1331/0x15a0
[  885.282392][T18939] Code: 99 7a 91 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 46 02 00 00 83 3d 63 b7 8e 05 00 75 13 48 8d 3d 86 b5 91 05 48 c7 c6 e0 20 0d 8c <67> 48 0f b9 3a 90 e9 1d ee ff ff 90 0f 0b 90 e9 f0 f1 ff ff 90 0f
[  885.302249][T18939] RSP: 0018:ffffc900038df6a0 EFLAGS: 00010246
[  885.308325][T18939] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888035dc3e80
[  885.316427][T18939] RDX: 0000000000000000 RSI: ffffffff8c0d20e0 RDI: ffffffff917d97f0
[  885.324488][T18939] RBP: ffffc900038df840 R08: ffffffff917a99c3 R09: 1ffffffff22f5338
[  885.332597][T18939] R10: dffffc0000000000 R11: fffffbfff22f5339 R12: ffff8880202d6010
[  885.340887][T18939] R13: 0000000000000000 R14: 1ffff9200071bee8 R15: 0000000000000000
[  885.343014][  T189] as10x_usb: error during firmware upload part1
[  885.343431][  T189] Registered device Abilis Systems DVB-Titan
[  885.355381][T18939] FS:  00007fcb9a46d6c0(0000) GS:ffff888123bb1000(0000) knlGS:0000000000000000
[  885.370506][T18939] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  885.377112][T18939] CR2: 00007fcb9a46cff8 CR3: 000000006d900000 CR4: 00000000003526f0
[  885.385156][T18939] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002
[  885.393207][T18939] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  885.401227][T18939] Call Trace:
[  885.404528][T18939]  <TASK>
[  885.407463][T18939]  ? __lock_acquire+0x747/0x2de0
[  885.412408][T18939]  ? as102_stream_ctrl+0x27/0xc0
[  885.417430][T18939]  ? trace_contention_end+0x3d/0x140
[  885.422781][T18939]  ? __pfx___mutex_lock+0x10/0x10
[  885.427808][T18939]  ? __mutex_lock+0x305/0x15a0
[  885.432618][T18939]  ? __mutex_unlock_slowpath+0x731/0x900
[  885.438246][T18939]  ? lock_acquire+0x115/0x350
[  885.442950][T18939]  as102_stream_ctrl+0x27/0xc0
[  885.447712][T18939]  __dvb_frontend_open+0x2e9/0xca0
[  885.452932][T18939]  ? dvb_frontend_open+0x1ce/0x870
[  885.458035][T18939]  ? down_read+0x2b9/0x320
[  885.462479][T18939]  ? __pfx_dvb_frontend_open+0x10/0x10
[  885.467949][T18939]  dvb_device_open+0x24f/0x340
[  885.472914][T18939]  chrdev_open+0x4d9/0x600
[  885.477320][T18939]  ? __pfx_chrdev_open+0x10/0x10
[  885.482270][T18939]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  885.488583][T18939]  ? devcgroup_check_permission+0x31/0x8f0
[  885.494406][T18939]  ? __pfx_chrdev_open+0x10/0x10
[  885.499349][T18939]  do_dentry_open+0x80e/0x1360
[  885.504150][T18939]  vfs_open_consume+0x4a/0x350
[  885.508908][T18939]  ? path_openat+0x16e5/0x20f0
[  885.513706][T18939]  path_openat+0x1700/0x20f0
[  885.518291][T18939]  do_file_open+0x23e/0x4a0
[  885.523497][T18939]  ? __pfx_do_file_open+0x10/0x10
[  885.528535][T18939]  ? _raw_spin_unlock+0x28/0x50
[  885.533434][T18939]  ? alloc_fd+0x6af/0x760
[  885.537779][T18939]  do_sys_openat2+0x115/0x200
[  885.542602][T18939]  ? _raw_spin_unlock_irq+0x2e/0x50
[  885.547804][T18939]  ? __pfx_do_sys_openat2+0x10/0x10
[  885.553298][T18939]  ? do_user_addr_fault+0xd3f/0x1480
[  885.558612][T18939]  __x64_sys_openat+0x138/0x170
[  885.563510][T18939]  do_syscall_64+0x166/0x520
[  885.568131][T18939]  ? trace_irq_disable+0x3b/0x140
[  885.573214][T18939]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  885.579304][T18939]  ? clear_bhb_loop+0x70/0xc0
[  885.584147][T18939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  885.590288][T18939] RIP: 0033:0x7fcb9955fd8e
[  885.594827][T18939] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  885.614576][T18939] RSP: 002b:00007fcb9a46cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  885.623156][T18939] RAX: ffffffffffffffda RBX: 00007fcb9a46d6c0 RCX: 00007fcb9955fd8e
[  885.631203][T18939] RDX: 0000000000000802 RSI: 00007fcb9a46cc00 RDI: ffffffffffffff9c
[  885.639198][T18939] RBP: 00007fcb9a46cc00 R08: 0000000000000000 R09: 0000000000000000
[  885.647236][T18939] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  885.655290][T18939] R13: 00007fcb99826218 R14: 00007fcb99826180 R15: 00007fcb9994fa48
[  885.663347][T18939]  </TASK>
[  885.666404][T18939] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  885.673698][T18939] CPU: 1 UID: 0 PID: 18939 Comm: syz.3.3828 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  885.684654][T18939] Tainted: [L]=SOFTLOCKUP
[  885.688995][T18939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  885.699065][T18939] Call Trace:
[  885.702357][T18939]  <TASK>
[  885.705303][T18939]  vpanic+0x56d/0xa60
[  885.709315][T18939]  ? __pfx__printk+0x10/0x10
[  885.713926][T18939]  ? __pfx_vpanic+0x10/0x10
[  885.718454][T18939]  ? is_bpf_text_address+0x292/0x2b0
[  885.723808][T18939]  ? is_bpf_text_address+0x26/0x2b0
[  885.729121][T18939]  panic+0xc5/0xd0
[  885.732870][T18939]  ? __pfx_panic+0x10/0x10
[  885.737317][T18939]  __warn+0x315/0x4c0
[  885.741322][T18939]  ? __mutex_lock+0x132a/0x15a0
[  885.746235][T18939]  ? __mutex_lock+0x132a/0x15a0
[  885.751118][T18939]  __report_bug+0x276/0x570
[  885.755748][T18939]  ? __mutex_lock+0x132a/0x15a0
[  885.760626][T18939]  ? __pfx___report_bug+0x10/0x10
[  885.765680][T18939]  ? __lock_acquire+0x747/0x2de0
[  885.770646][T18939]  report_bug_entry+0x19b/0x290
[  885.775529][T18939]  ? __mutex_lock+0x1331/0x15a0
[  885.780410][T18939]  ? __mutex_lock+0x1336/0x15a0
[  885.785288][T18939]  handle_bug+0xce/0x200
[  885.789553][T18939]  exc_invalid_op+0x1a/0x50
[  885.794081][T18939]  asm_exc_invalid_op+0x1a/0x20
[  885.798959][T18939] RIP: 0010:__mutex_lock+0x1331/0x15a0
[  885.804445][T18939] Code: 99 7a 91 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 46 02 00 00 83 3d 63 b7 8e 05 00 75 13 48 8d 3d 86 b5 91 05 48 c7 c6 e0 20 0d 8c <67> 48 0f b9 3a 90 e9 1d ee ff ff 90 0f 0b 90 e9 f0 f1 ff ff 90 0f
[  885.824074][T18939] RSP: 0018:ffffc900038df6a0 EFLAGS: 00010246
[  885.830253][T18939] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888035dc3e80
[  885.838252][T18939] RDX: 0000000000000000 RSI: ffffffff8c0d20e0 RDI: ffffffff917d97f0
[  885.846248][T18939] RBP: ffffc900038df840 R08: ffffffff917a99c3 R09: 1ffffffff22f5338
[  885.854245][T18939] R10: dffffc0000000000 R11: fffffbfff22f5339 R12: ffff8880202d6010
[  885.862323][T18939] R13: 0000000000000000 R14: 1ffff9200071bee8 R15: 0000000000000000
[  885.870327][T18939]  ? __lock_acquire+0x747/0x2de0
[  885.875380][T18939]  ? as102_stream_ctrl+0x27/0xc0
[  885.880342][T18939]  ? trace_contention_end+0x3d/0x140
[  885.885658][T18939]  ? __pfx___mutex_lock+0x10/0x10
[  885.890709][T18939]  ? __mutex_lock+0x305/0x15a0
[  885.895503][T18939]  ? __mutex_unlock_slowpath+0x731/0x900
[  885.901165][T18939]  ? lock_acquire+0x115/0x350
[  885.905875][T18939]  as102_stream_ctrl+0x27/0xc0
[  885.910669][T18939]  __dvb_frontend_open+0x2e9/0xca0
[  885.915805][T18939]  ? dvb_frontend_open+0x1ce/0x870
[  885.920946][T18939]  ? down_read+0x2b9/0x320
[  885.925391][T18939]  ? __pfx_dvb_frontend_open+0x10/0x10
[  885.930880][T18939]  dvb_device_open+0x24f/0x340
[  885.935677][T18939]  chrdev_open+0x4d9/0x600
[  885.940127][T18939]  ? __pfx_chrdev_open+0x10/0x10
[  885.945091][T18939]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  885.951440][T18939]  ? devcgroup_check_permission+0x31/0x8f0
[  885.957278][T18939]  ? __pfx_chrdev_open+0x10/0x10
[  885.962244][T18939]  do_dentry_open+0x80e/0x1360
[  885.967036][T18939]  vfs_open_consume+0x4a/0x350
[  885.971826][T18939]  ? path_openat+0x16e5/0x20f0
[  885.976610][T18939]  path_openat+0x1700/0x20f0
[  885.981235][T18939]  do_file_open+0x23e/0x4a0
[  885.985763][T18939]  ? __pfx_do_file_open+0x10/0x10
[  885.990818][T18939]  ? _raw_spin_unlock+0x28/0x50
[  885.995691][T18939]  ? alloc_fd+0x6af/0x760
[  886.000071][T18939]  do_sys_openat2+0x115/0x200
[  886.004778][T18939]  ? _raw_spin_unlock_irq+0x2e/0x50
[  886.009999][T18939]  ? __pfx_do_sys_openat2+0x10/0x10
[  886.015232][T18939]  ? do_user_addr_fault+0xd3f/0x1480
[  886.020543][T18939]  __x64_sys_openat+0x138/0x170
[  886.025423][T18939]  do_syscall_64+0x166/0x520
[  886.030043][T18939]  ? trace_irq_disable+0x3b/0x140
[  886.035093][T18939]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  886.041275][T18939]  ? clear_bhb_loop+0x70/0xc0
[  886.046012][T18939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  886.051928][T18939] RIP: 0033:0x7fcb9955fd8e
[  886.056360][T18939] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  886.075994][T18939] RSP: 002b:00007fcb9a46cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  886.084428][T18939] RAX: ffffffffffffffda RBX: 00007fcb9a46d6c0 RCX: 00007fcb9955fd8e
[  886.092576][T18939] RDX: 0000000000000802 RSI: 00007fcb9a46cc00 RDI: ffffffffffffff9c
[  886.100569][T18939] RBP: 00007fcb9a46cc00 R08: 0000000000000000 R09: 0000000000000000
[  886.108559][T18939] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  886.116547][T18939] R13: 00007fcb99826218 R14: 00007fcb99826180 R15: 00007fcb9994fa48
[  886.124548][T18939]  </TASK>
[  886.127727][T18939] Kernel Offset: disabled
[  886.132044][T18939] Rebooting in 86400 seconds..