last executing test programs: 1m21.26732825s ago: executing program 2 (id=473): r0 = socket(0xb, 0x80000, 0x95) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) sendmmsg$unix(r0, &(0x7f0000000000), 0x0, 0x94) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x100, 0x10, 0xae8, 0x4ea3}, &(0x7f0000000040)=0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) fcntl$getownex(r4, 0x10, &(0x7f0000000180)={0x0, 0x0}) sched_setattr(r5, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r8, 0xc010640c, &(0x7f0000000300)={0x15}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001680)="9d88e44f3908eca7b1cd86b110df5d2c4657388fd3e64ce36037a6b74daffe1c6466c2693c466b2e2eb1c8e593c0d87e955cdb38", 0x34}, {&(0x7f00000016c0)}, {0x0}, {&(0x7f0000001980)}], 0x4, &(0x7f0000002000)=ANY=[], 0x58, 0x4}}, {{&(0x7f0000001c40)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001480), 0x0, 0x40004}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000047c0)="19cbb4bc94f54ec7ed056051c3109de9dc57f38a61cdf7a29864b4744b88cdb2ad86a08ff6b425b12e7b65033850af61dbeb0bfb1480adcac2422e3dd9109ceb024b0f66d1993f196e82f524663cd89d987ea252e2500df5c748d3523c2bcb5d951e680e305b912865ec3ea97ff3e3e29e067fb9fea2cc4d6065c5822c0106291d7eec38df92f24cb8e38601e95f94a833cfc24c37b845625e3df5f663ca7da46aece22a00", 0xa5}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100005df5790f950bd7fa72d0ca88458a2ee096c3ab47daf6d6c1b4e518e704baa0c240e6f6b03fcc7a0adf8d956421acdf29b27b8d6d24bd656771cc2f54ea9a1bf3216baa788b7878c884eea3b9fa6ba31e9005b274076e6c0839b19a8e93bf6f03633bf9b9047eeeb57d0179db53a33008568115fae002c2f8f9e5edf215208d260258d311abff9277ec6cebedd65056e5c861496e5e3302923970e731fc42f944e5", @ANYRES32=r2, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r6, @ANYRES32=r6, @ANYRES32=r8, @ANYRES32=r3, @ANYRES32=r9, @ANYRES32=r4], 0x118, 0xc45}}], 0x3, 0x4000040) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r10, 0x5b14, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r11, 0x5) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1000}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}}, 0xfffffffa, 0x200, 0x8, 0x4, 0x1}, &(0x7f0000000080)=0x98) 1m18.012556533s ago: executing program 2 (id=484): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000040)=0x8, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000340)=[{0xffffffffffffffff, 0x410}, {r1, 0x2026}], 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socket(0x3, 0x80000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000340)={r9, 0x4}, 0x8) 1m13.506011228s ago: executing program 2 (id=493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000240)={0x3, 'bond0\x00', {0x6}, 0x2f56}) bind$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (fail_nth: 2) write$tcp_mem(r3, &(0x7f00000001c0)={0x9, 0x20, 0xec, 0x20, 0xe0}, 0x48) lstat(0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)=0x3) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001500)={&(0x7f0000000b80)={0x2c4, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x4}}, {{0x8}, {0x4}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xb6}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}]}}, {{0x8, 0x1, r6}, {0x4}}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c01", @ANYRES16=r7], 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 1m10.756703459s ago: executing program 2 (id=501): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB='\b\x00'], 0x78}}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e00010069703665727370616e00000018000280140018000000000000"], 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 1m10.675392423s ago: executing program 2 (id=502): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2542, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) timer_create(0x1, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000040), 0x4) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m7.481587601s ago: executing program 2 (id=507): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x2, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_NAT={0x44, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001380)) syz_open_dev$sndmidi(&(0x7f0000000140), 0x3, 0x400000) 52.387729374s ago: executing program 32 (id=507): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x2, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_NAT={0x44, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001380)) syz_open_dev$sndmidi(&(0x7f0000000140), 0x3, 0x400000) 34.90060469s ago: executing program 0 (id=603): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000f59ffc)=0x8, 0x45) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x35f, 0xe382) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r0) bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e20, 0x101, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000005480)=ANY=[@ANYBLOB="050000f78a"]) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x3}, 0x8) sendto$inet(r2, &(0x7f0000000080)="ab", 0x34000, 0x4004815, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) 34.776031605s ago: executing program 0 (id=604): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r2 = epoll_create1(0x80000) syz_usb_disconnect(r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x1}) syz_open_dev$vim2m(0x0, 0x3fe, 0x2) syz_usb_connect$cdc_ncm(0x1, 0x7b, &(0x7f0000000900)=ANY=[@ANYBLOB="12011001020000082505a1a44000010203010902690002010330000904000001020d00000a24060001ca195975b805240000010d240f0100000000fdffb4390506241a07003608241c5b000509000905810300040408d9090490fed2b02e22e422ef273eff010000020d00000904010102020d090009058202000280000009050302ff03070900"], &(0x7f00000004c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x5, 0x9, 0x0, 0x10}, 0x8, &(0x7f0000000200)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x42c}}, {0xed, &(0x7f0000000380)=@string={0xed, 0x3, "11b7d516c3c162cda012b99ecba1819ebd7617ec43db52b253d1ae02c360fd3fcce7b1506f67216c10649f0b6e9cd2d9d62b73052f0107fec307e355e198376a3babd1157f543e8acd3389091317787839a5c2990483c63bd422c6159da17afeefdcfc3f27559eeb26cb2be94384668ec304c2ac2a0859e29398d1cb663390d2e4096463bf7b2e99039e157b88e6708191c8fc57f1a2b0a1274a95f2164c2398cce24a38caf3e3f001bb81021663b85142902f94f32aeff4da8b39641c751da33cc732a7d164bc635a5b95563db199896fb5d46eb528b29c85ac740050969e7f6f8677099abe81c6fb06e8"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x43f}}, {0x101, &(0x7f00000005c0)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x426}}, {0xb6, &(0x7f0000000700)=@string={0xb6, 0x3, "4dcdc6107c406bae94d17181fe9412fa519efeac6bed17246da4b15516cc5de902ed5f8885dea9492599d8ca89c11630c1d5e6204bdfb5e0692fa2637ba0caf05d0435fec894bb2359ce706cfbde91f32bac6eaea96627426c98ff16715a9e34224967ba1de4374d9b67fee809be645a0857ded26182a76541d20a1ed6ef4e40d70ae9018220a0e26ff7e7a066ba019b2c7a7c26f3df9db539d29aedc1b87ad648a2821783bba4bf1a929842e1a5b9ef2906e96f"}}]}) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="1f00000034"], 0x20) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c0000001200010100"/56, @ANYRES32=0x0, @ANYBLOB="d5cf3f43bfb3b8c4a64bc0f1171c1b0a811dde5cb1b62f842b276d79bc6ca7775a6967cd49a49abf9761d54aa1e23f92c86753fed43eeca182e739342d459d65e6ecebfe5353901904e57c61b93a6b35453ace368df71b384ec18346cf102750717f02fbee06b056cc9fd75b15b0377b2ef5999a2960274185b639df80decca6b1e751d6abb6afbc0c90f89b042cfbb2b7347d1a9ba3e61aca3f9b27df000c3b0b87957b2459fcca931ffd18a6055287aed0e79732fa3afd5c90c92409735a4fd73decc1011aa75b4223d001ad38"], 0x4c}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x208fa000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r5, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r6, 0x802c550a, &(0x7f0000000540)=@urb_type_iso={0x0, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd3b8faf6, 0x1, 0x0, 0x8, 0x0, [{}]}) 31.676140272s ago: executing program 0 (id=610): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x8, 0x4a2402) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x519280) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x4, {0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0xe, 0x8, "4eb04da00c87b90753cfd70df7db90717211b708b475b5b4b9ef7849c64d64ba296d4ece19acf7824da1f3a07e952fe7c23eacd32533eec22dcdc7a43d49b250", "688c63797f046190dcfb53ad8b903a076f6b1ab924826faf6080354eccaf99b2a903a553c846dedd76e031490320f84571fcb04df159fc7a3fc995cf9723ec7f", "526619ef831f37d74fb1866bdd27b931d7f71ca09ae86214c1d8f4ed5520a4f3", [0xda, 0x2]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18300000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32, @ANYBLOB="0000000002000000b703000008000000850000006a00000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) 31.56909687s ago: executing program 0 (id=612): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x20000084}, 0x84) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) memfd_create(0x0, 0xe) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20000023896) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a"], 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004200010a000000eeffffffff09000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r0, 0x0, 0x4000800) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, &(0x7f0000000240)={0x1, [0x4, 0x1, 0xb], [{0x3ff, 0x3ff, 0x0, 0x0, 0x0, 0x1}, {0x10000, 0xb, 0x0, 0x0, 0x1}, {0x100, 0x7, 0x1, 0x1, 0x1, 0x1}, {0xcd, 0x6, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x7}, {0x5, 0xde1, 0x0, 0x1, 0x1, 0x1}, {0x4, 0x10000, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x3, 0x80000000, 0x1, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1}, {0x401, 0xfffffffd, 0x1, 0x1, 0x1}], 0x2}) r6 = io_uring_setup(0x30d5, &(0x7f00000001c0)) r7 = syz_open_dev$usbmon(&(0x7f0000007040), 0x3, 0x0) ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f00000070c0)={0x0, 0x0, 0x80}) close_range(r6, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000001080)={0x31, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r9, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0x18000}) 30.576532522s ago: executing program 1 (id=615): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x8c, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x101}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1ff}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40014}, 0x4009001) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) 30.067876925s ago: executing program 1 (id=616): getpid() shmat(0x0, &(0x7f00001d7000/0x2000)=nil, 0x5000) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x81001) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000086082b9827c186dd60cb3e0200403a00fc020000000000000000000000000000ff02000000000000000000000000000104009078000000006097436700001100fe8800000000000000000000000000000000000000000000aa0001000000000000013300"/118], 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) 29.552826843s ago: executing program 1 (id=617): fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) close(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r2 = getpid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sched_setattr(r2, 0x0, 0x0) setrlimit(0xf, 0x0) gettid() openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46040700030d0000000000000003000300060000000903000038000000000000000e00000000002000030005000000ff0f0000000002000000000000800900000000000100010000002d09000004000000fa000000000000"], 0x98) close(r4) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000300)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1, 0x4e20, 0x0, 0x4e22, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[], 0x0) 27.215850168s ago: executing program 0 (id=622): syz_clone3(&(0x7f0000000480)={0x42000200, 0x0, 0x0, 0x0, {0x4000019}, &(0x7f0000000340)=""/145, 0x9d, 0x0, 0x0}, 0xaf) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x20000000000001f6, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d000000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x20) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xc, 0x0, &(0x7f0000001580)="e0856497ba6cf0e81a000000", 0x0, 0x8, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndpcmc(0x0, 0x1, 0x202) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f0000000040)) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/188, 0xbc) write$char_usb(r3, &(0x7f00000000c0)="d5acd22cab360a52fde9d3ddff690993f53d44aefd781ec9750cb2755b25220f6121068fc066b134b3ff3e467faab7841de4daf1aca353aaf633bbd3639388f8b4a7544a8cc9330533be4746ee708da6ebb090bb785498667aef797c6c15358711106f67", 0x64) syz_usb_disconnect(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x3a, 0x4, @thr={&(0x7f0000000240)="139a2d0f0fe040b5d121b936a08abdde8cf80f07cff69cb49bf6a890dd886598c8ef573b436c9287c479f0100c6ddbc4a94e11e368495d910bef65163fa13d518415c71aa667305eb06ad3a7cc3c0d02e1342f674233", 0x0}}) semget$private(0x0, 0x6, 0x0) syz_usb_disconnect(r0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) io_uring_setup(0x13eb, &(0x7f0000000000)={0x0, 0x3e88, 0x400, 0x2, 0x26a}) 26.305953544s ago: executing program 1 (id=625): r0 = socket$alg(0x26, 0x5, 0x0) r1 = epoll_create(0xd92) r2 = syz_io_uring_complete(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x80000008}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="10000180040005"], 0x28}}, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 26.075335211s ago: executing program 3 (id=627): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 26.036429587s ago: executing program 1 (id=628): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000040)=0x8, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000340)=[{0xffffffffffffffff, 0x410}, {r1, 0x2026}], 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) socket(0x3, 0x80000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000340)={r9, 0x4}, 0x8) 24.694420674s ago: executing program 3 (id=630): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x82) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x81) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 24.559071523s ago: executing program 3 (id=631): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f0000000080)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)}, {&(0x7f0000000240)=""/132, 0x84}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, &(0x7f0000001300)=""/155, 0x9b}, 0x7}, {{&(0x7f00000013c0)=@hci, 0x80, &(0x7f0000001540)=[{&(0x7f0000004d80)=""/210, 0xd2}], 0x1, &(0x7f0000001440)=""/217, 0xd9}, 0xfffffffa}, {{&(0x7f0000001680)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001740)=""/187, 0xbb}, {&(0x7f0000001800)=""/231, 0xe7}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/65, 0x41}, {&(0x7f0000002980)=""/18, 0x12}, {&(0x7f00000029c0)=""/76, 0x4c}, {&(0x7f0000002a40)=""/22, 0x16}, {&(0x7f0000002a80)=""/124, 0x7c}, {&(0x7f0000002b00)=""/50, 0x32}], 0x9, &(0x7f0000002bc0)=""/116, 0x74}, 0x5e7}, {{&(0x7f0000002c40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002cc0)=""/200, 0xc8}], 0x1, &(0x7f0000002e00)=""/126, 0x7e}, 0x7}, {{&(0x7f0000002e80)=@rc={0x1f, @none}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002f00)=""/81, 0x51}], 0x1, &(0x7f0000002fc0)}, 0x3}, {{&(0x7f0000003000)=@isdn, 0x80, &(0x7f0000004440)=[{&(0x7f0000003080)=""/97, 0x61}, {&(0x7f0000003100)=""/246, 0xf6}, {&(0x7f0000003200)=""/233, 0xe9}, {&(0x7f0000003300)=""/40, 0xffffffffffffff9c}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000004340)=""/241, 0xf1}], 0x6, &(0x7f0000004480)=""/13, 0xd}, 0x6}, {{&(0x7f00000044c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000004600)=[{&(0x7f0000004540)=""/152, 0x98}], 0x1, &(0x7f0000004640)=""/25, 0x19}, 0x100}, {{0x0, 0x0, &(0x7f0000004740)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000046c0)=""/103, 0x67}], 0x2, &(0x7f0000004780)=""/77, 0x4d}, 0x6}, {{&(0x7f0000004800)=@phonet, 0x80, &(0x7f0000004b00)=[{&(0x7f0000004880)=""/91, 0x5b}, {&(0x7f0000004900)=""/74, 0x4a}, {&(0x7f0000004980)=""/103, 0x67}, {&(0x7f0000004a00)=""/54, 0x36}, {&(0x7f0000004a40)=""/145, 0x91}], 0x5}, 0x5}], 0x9, 0x40000130, 0x0) unshare(0xc040400) r1 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157) syz_clone3(&(0x7f0000005040)={0x3a0000080, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[], 0x1a3) write$binfmt_misc(r2, &(0x7f0000000040)="0db723740d6678af6874bb74fb7875012c7de0568a8315a6736b7635e00126b713064871082ef63a291542a0bbb266ec7c61a508716f1b1ea80046ef", 0xe5c) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2180) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) recvmsg$unix(r2, &(0x7f0000000200)={&(0x7f0000002b40), 0x6e, &(0x7f0000000040)=[{&(0x7f0000004e80)=""/126, 0x7e}, {&(0x7f0000004f00)=""/73, 0x49}, {&(0x7f0000004f80)=""/134, 0x86}], 0x3, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) 24.208616283s ago: executing program 3 (id=632): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030328bd70a6ff0000000a00000008000300", @ANYRES32=r1], 0x1c}}, 0x0) 23.913894143s ago: executing program 3 (id=634): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000600), 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vcsn(0x0, 0x3f0b, 0x117001) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340), 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x40000) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000140)={0x4000000}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x45) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x500, 0x40420f00}}}, 0x90) ioctl$LOOP_SET_DIRECT_IO(r5, 0x4c08, 0x1) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000040)={0x4000000}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000005cc96b560000000800040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf090000000000004509010000000000ac00000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x20000000) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x107342, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r11 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r11, r10, &(0x7f0000002080)=0x64, 0x23b) 23.148395786s ago: executing program 0 (id=635): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c00008008"], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x2, 0x100, 0x9, 0x7, 0xfffffffd}, &(0x7f0000000180)=0x14) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/257, 0x101}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2, 0x0, 0x0, r3}) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000440), 0x189040, 0x0) 22.362781597s ago: executing program 3 (id=636): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x48, 0x10, 0x401, 0x0, 0xfffffffc, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x5, 0x3, 0xf}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xd}]}]}, 0x48}}, 0x0) read$FUSE(r1, &(0x7f0000000540)={0x2020}, 0x2020) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="9cb91a700000125f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) futex(0x0, 0xa, 0x100000, 0x0, 0x0, 0x3000000) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)={0x4c, 0x13, 0xa03, 0x70bd2c, 0x25dfdbff, {0x6, 0x34, 0x9, 0x0, {0x4e20, 0x4e21, [0x3, 0x5, 0x5cf, 0x9], [0xd, 0x0, 0x7ff, 0x1], 0x0, [0x4, 0x7f]}, 0x401, 0x9}}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x141000, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r7, 0xc0045103, 0xfffffffffffffffc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) syz_clone(0x5200000, 0x0, 0x0, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80800) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x208002, 0x0) ioctl$PTP_PEROUT_REQUEST2(r8, 0x40383d0c, &(0x7f0000000100)={{0x9, 0xfffffffa}, {0x9, 0x1003ff}, 0xffffffff, 0x7}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 22.127269392s ago: executing program 1 (id=637): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (rerun: 32) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) io_uring_setup(0xfc2, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1}) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086552108cd0c6900556e01020301090212000100000000090400"], 0x0) (rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 32) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x100) (async, rerun: 32) ptrace(0x11, 0x0) ptrace(0x10, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x56, 0xc0, 0x83, 0x20, 0x7c0, 0x158a, 0xdd2e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x35, 0x2, 0x2, 0x77, 0x90, 0x64, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x10, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6", 0x90}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc402189195e92dc1d73fce0d96439a53073df328509806e960c2", 0x7e}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235", 0xcf}, {&(0x7f0000000f00)="397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfebf169e77257f308b498e5b417227094d569a4456954e58ea1850000000000000000355c5f42d9f2", 0x3c}, {&(0x7f0000000480)="3b98c053d6287182fb77fa2573c0", 0xe}], 0x5}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa", 0x7d}, {&(0x7f0000001000)="bd2f6aa36cea0e4bccda24dc5bd69ad762e998d923018ec9f30d63c7059c3c786069915581888508ff589f82857ff546b23b88d6bd61f1efc982005bf6c9abc4fe2caf32ef3ff105", 0x48}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000840)="3f1c4a04940ee0b20aec8b4090986a3bff84255d40657e7ee0d40a25584e869ef417cfb843df9bab6a733f72f13c385945fbe4f6592503b0013edc972aa7f382cfe6f924e9b3058c5dc3a39af5f6868c9031d7f0fba663fed16b868a4e53436b1be7a082f826014791", 0x69}, {&(0x7f00000008c0)="ab802595e16402267afad4132bae032aeebc5d3df8873915f385de7623fdcdbb497d2913cabe2bd146dee84fdcbeaa251db4f747090dc6c625ed3b915aae8dda1394c0d541055b3e89cab518a94118fb170c1d", 0x53}, {&(0x7f0000000940)="2c5e42e310fe2f095389d5264f44036f83f52415194225b1d75664af0bb8c7db4032895089bf7ed9c49da28ec002a2250c905af982041e9c842ea9dab20db6473e1556", 0x43}, {&(0x7f0000000b80)="5e93f51c80552080613760264b6008795ee1e8b689", 0x15}], 0x4}}], 0x3, 0xc0) 18.765346273s ago: executing program 4 (id=641): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = fcntl$dupfd(r4, 0x0, r4) write$binfmt_script(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x9f, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r7, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$SIOCSIFMTU(r3, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x6, 0x0, {0x8, @pix_mp={0x0, 0x0, 0x41415270, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x7}], 0x7}}, 0xfffffffc}) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x8001000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x344, 0x0, 0x11, 0x148, 0x220, 0x0, 0x2b0, 0x2a8, 0x2a8, 0x2b0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c0, 0x220, 0x4003, {}, [@common=@inet=@hashlimit2={{0x150}, {'wg1\x00', {0x80000, 0x7, 0x13, 0x3ff, 0x8, 0x6, 0x80000005, 0x18, 0x8}, {0x7}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x1, 0x6, 0x3, 0x2], 0x5, 0x1}, {0x0, [0x0, 0x6, 0x0, 0x1, 0x0, 0x1], 0x3, 0x1}}}}, {{@ip={@empty, @empty, 0x0, 0xffffff00, 'vlan0\x00', 'netdevsim0\x00', {0xff}, {}, 0x0, 0x0, 0x3d}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3a0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYRES8], 0x14}}, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r8, 0xc0345642, &(0x7f0000000200)={0x8, "c40af20d770688d885e785aaf07bb73a3bed99fa01b2dfbd9997b46543a160e5", 0x2, 0x1}) 15.611291183s ago: executing program 4 (id=642): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00&'], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (fail_nth: 7) 15.212579956s ago: executing program 4 (id=643): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x8, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e20, 0xfffffffb, @dev={0xfe, 0x80, '\x00', 0xb}, 0x800}}, @sadb_x_filter={0x5, 0x1a, @in6=@dev={0xfe, 0x80, '\x00', 0x8}, @in=@dev={0xac, 0x14, 0x14, 0x17}, 0x15, 0x14, 0x14}, @sadb_address={0x3, 0x5, 0x2b, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010100}}]}, 0x78}}, 0x40008000) 15.210868396s ago: executing program 4 (id=644): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002640)=@newtfilter={0x3688, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x3658, 0x2, [@TCA_CGROUP_POLICE={0x24, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xc0000000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}]}, @TCA_CGROUP_EMATCHES={0x300, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}, @TCA_EMATCH_TREE_LIST={0x184, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x7}, {0x4, 0x1000, 0x73, 0x1}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x7}, {0x1, 0x1, 0x1, "cb"}}}, @TCF_EM_META={0xec, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR='n', @TCF_META_TYPE_VAR="832e8239c9098d", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="6fcd5ad09e6bdc71"]}, @TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_VAR='\"', @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="a69420", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="04f99a29c6525b7e0b"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x1, 0x2}, {0x55, 0x40, 0x1}}}, @TCA_EM_META_LVALUE={0x31, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="f48a140119", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="dc7f1975c3", @TCF_META_TYPE_VAR="ba", @TCF_META_TYPE_VAR="fefd4aeb1d68639ef012"]}, @TCA_EM_META_RVALUE={0x1b, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="365eb05d42c3c894f0", @TCF_META_TYPE_VAR="f667", @TCF_META_TYPE_VAR="bab5f594", @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_VAR="c9daabb212497a", @TCF_META_TYPE_VAR="ffd1", @TCF_META_TYPE_VAR="14fe289f33561004", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_META={0x64, 0x3, 0x0, 0x0, {{0x3f, 0x4, 0x7ff}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0xc, 0x2}, {0x3ff, 0x0, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x4}, {0x8, 0x1c, 0x1}}}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="b4381454ea7d256309", @TCF_META_TYPE_VAR="a0f81634"]}, @TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="463fe817b7", @TCF_META_TYPE_VAR="3c13bc4971fa0d", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="5a6cdda0a238"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x168, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xf4, 0x1, 0x0, 0x0, {{0x9, 0x9, 0x200}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0xaa, 0x5, "ea88b02c25949f47026ef5f903f47ce1a75170b6a5a59299434312c8c48c3b4a45a3c21a2f5922a9981431812bf89da60b51a1628a4449e38d2a3ae012cbc9f334969ebc191a4db7039b85066beb122b24a4e230be5946b2658b860072c48abeb6456d74848e8f37e530c9de95fc1658777827b887d2cc7bca7fcb3ffe9a973fcf7d2b634dba2497a4bd09b05ca3dc5b3104d0247bcbd14080f4f4e9c73469149a987af1709d"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x0, 0x1, 0x5}, {0x4, 0x176, 0x8, 0x7, 0x8, 0x2, 0x1}}}, @TCF_EM_META={0x44, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR="2f61a5d9246b1a04", @TCF_META_TYPE_VAR="723aab34cfdf04f6ff"]}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="390a5deddd0ee4"]}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2a, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x0, 0x1, 0x1}}}}]}]}, @TCA_CGROUP_ACT={0x22f4, 0x1, [@m_vlan={0xcc, 0x15, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1a0, 0x0, 0xffffffffffffffff, 0x3}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4a4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x6a, 0x6, "60f981e7ec8bb50633f42eb7313e01f57cec1428d2c38b25ef6c9c3ac27df3a251fdad2d38d279b24c1ee0869e751dd2fe969f6cef0db68092ff7f4fe4e65f24f685095cd1547fc325353c92c60ea332ad1fdb2032bbd69cd2d19351c9e765057071dfbf08ab"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0x10c, 0x3, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0xb2, 0x6, "deb917fac4a185e0485cacdddc99aba893b29462674284d670b881fea79aa90a3852e5d690d6caf00df3c8ed5dcfd7ce0060fc682596d936334b04bdcf29900a7637db4ac08fc58ee4fe997649beab556f305db2292d24333bfa8c155219e6b24c72671408b3456b13382df80afc3d09f507f6145e17b1895892f7d9a4221e6caf9d8b093dd5454352e680e16be77792962f863fd5aa20c35dcfc722a57b62eceb30394fadf0a49d28c1fe1bc814"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_pedit={0x1e04, 0x13, 0x0, 0x0, {{0xa}, {0x1cec, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x2, 0xfffffffa, 0x2, 0x10000, 0x7}, 0x47, 0xf2, [{0x5, 0x80000001, 0x7, 0x4, 0xffffffff, 0x1}, {0x3, 0x5, 0x7, 0xffff, 0x8, 0xffffffff}, {0xa, 0x3, 0x0, 0x0, 0x979d, 0x10}]}, [{0x6, 0x6, 0x0, 0xffffe063, 0x200, 0x3}, {0x0, 0x7, 0xec2, 0x7, 0x4a2, 0x80000000}, {0x4, 0x7, 0x800, 0x2, 0x6, 0xe}, {0x10000000, 0x2, 0x401, 0x8, 0x3, 0x7}, {0x9, 0x3, 0x606a77a4, 0x9a4, 0x80, 0x5}, {0x0, 0x6, 0x7, 0x4, 0xda1a, 0xd4b6}, {0x7, 0x6, 0x9, 0xa57d, 0x80000001, 0x4}, {0x1, 0x400, 0xe0, 0x8a5, 0x2, 0xb87b}, {0x8, 0x39, 0x8, 0xfff, 0x6, 0x8}, {0x10001, 0x800000, 0x400, 0xc0d6, 0x6, 0x3}, {0xfffffffc, 0x6, 0x2, 0x4, 0x2, 0x9}, {0x1000, 0x7fffffff, 0x7, 0x3, 0x7, 0x100}, {0x5, 0x2, 0x1, 0x5, 0xd, 0x8}, {0x2, 0x733, 0x7, 0x1, 0x1, 0x2}, {0x95a, 0x1, 0x81, 0x10001, 0x9, 0x8}, {0x8, 0xfffffff7, 0x5, 0x9, 0x2, 0xa1b6}, {0xfffffffc, 0x1c6, 0xf, 0xfffffffb, 0x10000, 0x1}, {0x3, 0x8, 0x3, 0x10001, 0xd0000000, 0x7}, {0xfff, 0xf, 0x9ae6, 0x800, 0x2, 0x7f}, {0x3, 0x0, 0x40, 0x9, 0x663, 0x8000}, {0x0, 0x100, 0x235, 0xffff, 0x8, 0xfffffff8}, {0x3f, 0x1, 0x7ff, 0x8, 0x3, 0x5}, {0x800, 0x3, 0x0, 0x7, 0x9, 0x4}, {0xa, 0x4, 0xa, 0x1000, 0x9, 0x6}, {0x5, 0x6, 0x2, 0x8, 0xa, 0x6}, {0x2, 0x0, 0x0, 0x7, 0x2, 0x4}, {0x3, 0x0, 0x1, 0x10001, 0x3, 0x3}, {0x100, 0x6, 0x10, 0xfffffff7, 0x3ff, 0x1}, {0x4, 0x3, 0x800, 0x3, 0x2, 0x81}, {0x40, 0xa, 0x7, 0x0, 0x6, 0x7}, {0x2, 0x4, 0xb7e, 0x8, 0x4, 0x6}, {0x3ff, 0xc, 0x8, 0x3, 0x5293, 0x7}, {0x18, 0x0, 0x0, 0xffffff7f, 0x4, 0x4}, {0x6, 0x7, 0x4, 0x5, 0x1, 0x2}, {0x1ff, 0x4, 0x1, 0xfffffff9, 0x7f, 0x1}, {0x9, 0x7, 0x1, 0x80, 0x2, 0x5}, {0xfffffff7, 0x94, 0x1, 0xf, 0xcb1, 0xff}, {0xfff, 0x4, 0x5834, 0xf3, 0x436c, 0x7}, {0x7ff, 0x6b6056ca, 0x8, 0x40, 0x6, 0x5}, {0xb, 0x3, 0x2, 0x8, 0x1, 0x8}, {0x9, 0xb, 0x6, 0x7, 0x2, 0x4}, {0xffffffff, 0x0, 0xfffffff8, 0x44, 0x1, 0xeca7}, {0x5, 0x7, 0xe, 0x3, 0x0, 0x7f}, {0xffffff80, 0x5, 0x1, 0xe7, 0x9, 0x6}, {0x278, 0x0, 0x5, 0x431, 0x1, 0xf}, {0xb8e, 0x6c9, 0xe33, 0x4, 0x89, 0x1000}, {0xf0, 0x9, 0xffff7df9, 0x5be4, 0x8, 0xe}, {0x8, 0x8, 0x8, 0x561, 0x1, 0x4}, {0x8, 0x0, 0x5, 0x8, 0x5, 0xffffff80}, {0x10001, 0x9, 0x1, 0x4, 0x7, 0x9}, {0x7, 0x8, 0xffff, 0x0, 0x3, 0x605}, {0xcb50, 0x8, 0x6, 0x6, 0x5, 0x4}, {0x9, 0x3, 0x401, 0x7, 0xa6, 0xca}, {0x10000, 0x6, 0x5, 0x4, 0x1, 0x5}, {0x3, 0xf7a8f82, 0x6, 0x1, 0x8, 0x3}, {0x1ff, 0x8, 0x3, 0x5, 0x1a1d, 0x8}, {0x2, 0x1fe867ad, 0x6, 0x401, 0x7, 0x52}, {0x44, 0x991bf20, 0x0, 0x2, 0x3, 0xfffffff8}, {0x3, 0x1, 0xfffffff9, 0x7, 0x101, 0x1}, {0x3, 0xfb8, 0xb, 0x6, 0x81, 0x2}, {0x85cb, 0xb, 0x7, 0x7, 0x2}, {0x1, 0x8, 0x5, 0x7, 0x9dc, 0x101}, {0x7, 0x5, 0x7, 0x4, 0x2, 0x2}, {0x2, 0x6, 0x7e38, 0x1e000, 0x6, 0x1000}, {0x8000, 0x8, 0xb, 0x10001, 0x8, 0x7}, {0x0, 0x76, 0x0, 0x7fc3, 0xfffffffc, 0x8}, {0x81, 0x2, 0x7df8, 0x3, 0x0, 0xcd}, {0x15, 0x1, 0x4, 0xff, 0x7, 0x2}, {0x0, 0x2, 0xfffffc00, 0x45b2, 0x12, 0x4}, {0xc52, 0x2, 0x1, 0x0, 0x200000, 0x4}, {0x6, 0x0, 0x3, 0x9, 0x10, 0x6}, {0x8, 0xc1b, 0x56b, 0x9, 0x0, 0x10000}, {0xffffffda, 0x7, 0xf, 0x800, 0xffffffe8, 0xffffffff}, {0x6, 0x1, 0x3ff, 0x4, 0x825, 0x1ff}, {0xdf, 0x5, 0x0, 0x8001, 0x8001, 0xccef}, {0x0, 0x7, 0x3, 0x7ff, 0xb8e, 0x8c}, {0xfc67, 0x6, 0xff, 0x7ff, 0xfff, 0x902}, {0x4, 0x3000, 0x53e, 0x1, 0x3ff, 0x3}, {0x5, 0x7, 0x9, 0xfffffffe, 0x2, 0x24bf47cb}, {0x0, 0x8, 0x9, 0x0, 0x3, 0x1}, {0x0, 0x8, 0x5, 0xffff, 0x3, 0xff}, {0xa00, 0x5, 0x29c, 0x7ff, 0x3, 0x6}, {0x6, 0x6, 0x9, 0x1, 0x6, 0x9}, {0x468a, 0x99, 0x99d, 0x7, 0x231, 0x7f}, {0x2, 0x9, 0x5, 0x2, 0x2d51f1e1}, {0x5, 0xd, 0x10001, 0x7, 0x7c, 0x9}, {0x8, 0xba, 0x40, 0x40, 0xffff8001, 0x217}, {0x8000, 0x1, 0xfffffffb, 0x200000, 0x4}, {0xf01, 0x80000001, 0x800, 0x9454, 0x2, 0xfe}, {0x1, 0x3, 0x7ff, 0x10000, 0x13, 0x15d7}, {0x3, 0x21, 0x4, 0x7f, 0x8, 0x7}, {0x6d, 0x6, 0x0, 0x2, 0x6, 0x7}, {0x8000, 0x7fffffff, 0x140000, 0x4, 0x800, 0x7}, {0x4, 0xffff, 0x25, 0x76, 0x4, 0x6}, {0x8, 0x2, 0x6fd, 0xdf, 0x0, 0x7fff}, {0xa0c, 0xfffff000, 0x3ff, 0xffffffff, 0x6, 0x7}, {0x7, 0x4, 0x7, 0xd7, 0x1, 0x4}, {0x7ff, 0x7aaa, 0xffffff7f, 0x91, 0xf, 0x5}, {0x88d, 0x7b7, 0x5, 0xf2000, 0x9, 0x7}, {0x6, 0x5, 0x8, 0x7, 0x8, 0x7}, {0xfff0, 0x5fd7, 0x928, 0x0, 0x0, 0x80000000}, {0x7f, 0x2, 0x5, 0x2, 0x8, 0x9}, {0x80000000, 0x962, 0x0, 0x8, 0x7f, 0x5}, {0x1, 0x1, 0xfffffffe, 0x11, 0x6, 0x10001}, {0x8, 0xaad1, 0x3, 0x8f, 0x1000, 0x400}, {0x1, 0x5, 0xd3b, 0x5, 0x42, 0x8}, {0x0, 0xa, 0x7f, 0x9, 0x9, 0x80000000}, {0xd1ca, 0x3, 0x7, 0x9, 0x2, 0xc9}, {0x800, 0xaf, 0x9, 0x7f, 0x6, 0x40000000}, {0x5, 0x10, 0xe21, 0x0, 0x200, 0x81}, {0x8, 0xb, 0x5, 0x7fffffff, 0x0, 0x7}, {0x24000, 0x6, 0x4, 0xb7, 0xfff, 0xfffffffb}, {0xdb, 0x100, 0xd6f1, 0x5, 0x81, 0x401}, {0x6, 0x1, 0x22a, 0xaaf, 0x4, 0x2}, {0xf, 0x1d79, 0x2, 0x8ec, 0x3, 0x6}, {0x100, 0x5, 0xa6, 0x9, 0x3f, 0x6}, {0x80, 0x1, 0x30, 0x81, 0x5, 0xa457}, {0x2c1, 0x6, 0x9, 0xdc8, 0x1, 0x2}, {0x7, 0x6, 0x8e, 0x4435, 0x4, 0x10}, {0x1, 0xb, 0x4, 0x4, 0x4, 0x8}, {0x80000000, 0x5, 0xffffff29, 0x4, 0x0, 0x8}, {0x1, 0x86ee, 0x8, 0x6, 0x5}, {0xea0e15b, 0xdb20, 0x10, 0x1, 0x2, 0xfff}, {0x7, 0x8, 0x3, 0x2a2, 0xfffffffd, 0xe}, {0x5, 0xfffffe00, 0x3, 0x0, 0x2782, 0x800}, {0x8, 0xffff, 0x401, 0x9, 0x9, 0xfffffffe}, {0x10001, 0xe, 0x2bca, 0x9, 0x7, 0x6442}, {0xbae, 0x5, 0x4, 0xc, 0x5, 0xfc1d}], [{}, {0x3}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x3}, {0x2}, {0xd123dd0aaf6caf01, 0x1}, {0x2, 0x1}, {0x4}, {0x6, 0x1}, {0x3}, {0x3}, {0x4}, {}, {0x5, 0x1}, {}, {0x1}, {0x98ca9089aa896fb6}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x2}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x4}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x4}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x2}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0xff8390847305d2c5}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5, 0x18b48fa659cdbdbf}, {0x0, 0x1}, {}, {0x5}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {}, {0x5, 0x1}]}}, @TCA_PEDIT_PARMS={0xe80, 0x2, {{{0xd5, 0xffffffff, 0x4, 0x7, 0xf5}, 0xff, 0x3, [{0x0, 0x81, 0x8, 0x1, 0x18, 0xffffffff}, {0x3, 0x2, 0x1000000, 0x8, 0x6, 0x56}, {0x9, 0x7, 0xe, 0x9, 0x1, 0xcc04}, {0x7fffffff, 0x101, 0x0, 0x3961, 0x2, 0x3}]}, [{0x4, 0x1ff, 0x1ff, 0xd, 0x1, 0x1}, {0x6, 0x0, 0x2, 0x2, 0x4, 0x2}, {0x3, 0xcd0, 0x8, 0x3, 0x6, 0x1ff}, {0x8000, 0x3, 0x9, 0x101, 0x8, 0x8}, {0x2, 0x200, 0x1, 0x9, 0x401, 0x3}, {0x2, 0x40, 0x9, 0x8, 0x9, 0x1}, {0xd2b, 0xd, 0x3, 0x0, 0x7f, 0x3}, {0x8c, 0x8, 0xe, 0x2, 0x2b55, 0x2}, {0xa51, 0x10001, 0x1000, 0xa, 0x40, 0x81}, {0x20, 0x9, 0x2, 0xa, 0x952, 0x8}, {0x3, 0x3, 0xeaaf, 0x9, 0x4, 0x7ce}, {0x40c, 0x8, 0x0, 0x3ff, 0x5, 0x7ff}, {0x81, 0xa5ee, 0x8, 0x8, 0x2, 0x7}, {0x8001, 0x890, 0x9, 0x8, 0x9, 0x9}, {0x18b0caa9, 0x10001, 0x8, 0xfffffffa, 0x6, 0xb80}, {0xeee, 0x6, 0xffffffff, 0x9, 0x9, 0x8}, {0x7067, 0x9, 0x2, 0xe5, 0x4, 0x8}, {0x0, 0xe, 0x3, 0x9e6, 0x3650, 0xf71}, {0x83, 0x401000, 0x58e, 0x100, 0x2, 0x7ff}, {0x0, 0x40, 0x100, 0x6, 0x8, 0xe6}, {0x100, 0x0, 0xe7c, 0x81, 0x3, 0x7fffffff}, {0x3, 0x41b, 0x6, 0x4, 0xa37, 0x3}, {0x3, 0x1, 0x80000001, 0x7f, 0x8, 0x876}, {0xffffffff, 0x2, 0x10000, 0xf5, 0x4, 0x34000}, {0x7fff, 0xb13c, 0x5, 0xd, 0xf, 0xe40}, {0x454e, 0x10, 0x1, 0x4cdd, 0x4, 0x4}, {0x3, 0x3, 0x9, 0x3, 0xffffffff, 0x1}, {0x66d7800, 0x4, 0xffff, 0x7, 0x5, 0x9}, {0x391, 0xfffffff7, 0x1, 0x7fffffff, 0x4114, 0x4}, {0x7f, 0xfffffff5, 0xa38b, 0x6, 0x2, 0xd}, {0x41c5a5e, 0x4, 0x6, 0xffffff81, 0x5, 0x800}, {0xd3, 0x10000, 0x7fff, 0xffffffff, 0x8001, 0x1}, {0x0, 0x725, 0x5e, 0xfffffffa, 0x2, 0x47b}, {0xd, 0x4, 0x1, 0xd, 0xfffffffb, 0x4}, {0x3, 0xfff, 0x22e5, 0x400, 0x7, 0x8000}, {0x7, 0x401, 0x2, 0xfffffff8, 0x6, 0x2d2}, {0x8, 0x45, 0x8, 0x4, 0x8, 0x5}, {0x7fffffff, 0xfffffffe, 0x3, 0x2, 0x2ea1d9d5, 0x427}, {0x200, 0x2d8f, 0x3ff, 0x10001, 0x7fffffff, 0x40}, {0x1, 0x1ff, 0x3, 0x45b5, 0x3, 0x1}, {0x4, 0x10001, 0x6, 0x8d, 0x0, 0x6}, {0x7e818970, 0x5, 0xfff, 0x7, 0x8, 0x7}, {0xfffffff9, 0x2, 0x3, 0x80, 0x5, 0x650}, {0x97c, 0x7fffffff, 0x66, 0x5, 0x20000000, 0x80000000}, {0x4, 0x40000, 0x40, 0xfffff800, 0x2, 0x6}, {0x0, 0x0, 0x50, 0x5, 0x24d, 0x7ff}, {0x8, 0x5, 0xdea, 0x4, 0x0, 0x8001}, {0x6, 0x8, 0xf, 0x80000000, 0x7, 0xff}, {0x200, 0x200, 0x80000000, 0x5, 0x3ff, 0x5}, {0x1, 0x2, 0xffffa9ae, 0x2, 0x100, 0xffffffd5}, {0xe9, 0x8, 0xfffffffe, 0x9, 0x6, 0x10001}, {0x1, 0xf0, 0x81, 0x6, 0x1, 0xe950}, {0x200, 0x30, 0xfffffff8, 0x4, 0x80000000, 0xe}, {0xbb, 0x0, 0x7, 0x1, 0x400, 0x8000}, {0x4, 0xd, 0x4, 0x2, 0x7, 0x9}, {0xa, 0x10001, 0x2, 0x1000, 0x148a}, {0x5, 0x7fffffff, 0x6, 0xffffc230, 0xffff, 0x1}, {0x3, 0x6, 0x4, 0x3ff, 0x9, 0x9}, {0x9, 0x200000, 0x6, 0x4, 0x9, 0xf8c3eb3a}, {0x7fff, 0x3, 0xfffffffe, 0x7, 0x3, 0x7187}, {0x5, 0x6, 0x6, 0x7d06, 0x10000, 0x1}, {0x4, 0x4, 0x1, 0x7, 0x2, 0x3ff}, {0x7ff, 0x7, 0x0, 0x2, 0x3}, {0x0, 0x6, 0xfffffff8, 0x1, 0x3, 0x200}, {0x6, 0x81, 0x7fff, 0x6b1e, 0x2, 0xb11}, {0xfffffffb, 0xfffffffa, 0x6, 0x5, 0x1, 0x9}, {0x2, 0x8, 0xfffffff3, 0x819, 0x101}, {0x2, 0x10, 0x9, 0x6, 0x5, 0x7ff}, {0x6f8, 0x80000000, 0x59, 0x10000, 0xfff, 0xa9}, {0x0, 0xd, 0x0, 0x1ff, 0x4, 0x6}, {0x0, 0x6c, 0x4, 0x4, 0xfff, 0x9}, {0x80000001, 0x1ea, 0x9, 0x200, 0x4, 0xffff}, {0x1, 0x0, 0x10000000, 0x9, 0x6, 0x5cb}, {0xa, 0x8, 0x6, 0x9, 0xff, 0x3}, {0xd, 0x0, 0x9139, 0x5, 0x9b9}, {0xffffffff, 0x8, 0x1, 0x6, 0x831b, 0x8000}, {0x9, 0x4, 0x80000001, 0x9, 0x3, 0x7fffffff}, {0x9, 0xfff, 0x4, 0xc, 0x7, 0x5}, {0xc21, 0x6, 0x0, 0x4, 0x2}, {0x4, 0x0, 0x8, 0x401, 0x0, 0x326}, {0x5, 0x8290, 0x8, 0x81f, 0x101, 0x4}, {0x552, 0x5, 0x5, 0xfc, 0x6, 0x17}, {0x697, 0x1000, 0x4, 0x8000, 0xb, 0x1}, {0x2, 0xfffffffe, 0x4, 0x4, 0x400, 0x101}, {0x7fffffff, 0x4bf7, 0x4, 0x7, 0x9, 0x100}, {0x4, 0x9, 0x400, 0x81, 0x5}, {0x800, 0x7f7, 0x8fb, 0x5, 0x7, 0x4}, {0xffffffff, 0x40000000, 0x1, 0x3, 0x4, 0x5}, {0x8, 0x1000, 0x2, 0xb8f6ba6, 0xa3, 0x5}, {0x2, 0x8, 0x3, 0x1ff, 0x5, 0xe}, {0x8, 0x1537, 0x10, 0x9, 0x1, 0x3}, {0xe, 0xa8e4, 0x115, 0x3, 0x100, 0x3}, {0x1, 0x0, 0x401, 0x7, 0x7ff, 0x2}, {0x1, 0x6, 0x9, 0x8, 0x1}, {0x7, 0x1, 0xc4, 0x7f, 0x1, 0x80}, {0x0, 0x9, 0x100, 0x6, 0x7ff, 0x9}, {0xfffffffb, 0x401, 0x9, 0xfffffff4, 0xda0f, 0x2}, {0x0, 0x7, 0x7fffffff, 0xbcdd, 0x7, 0x4}, {0x7, 0x4, 0xfffffff8, 0x89, 0xffffffa3, 0x6a0}, {0x1, 0x3, 0x8, 0x5, 0x3, 0xce59}, {0xe38, 0x8, 0x1, 0x70bd9e7f, 0xfffffe01}, {0x81, 0xf, 0x3, 0x1, 0xf1b4, 0x401}, {0x6, 0x9, 0x0, 0xffffffff, 0x0, 0x4}, {0x7, 0x8, 0x8, 0x1, 0x1, 0x3ca8}, {0x5, 0x5, 0x1, 0x7, 0xffffffff, 0xa023}, {0x5, 0xfffff363, 0x101, 0xde42, 0x5, 0xffffffff}, {0x4, 0xf, 0x1, 0xe, 0x400, 0x1}, {0x6, 0x70, 0x824, 0x1, 0x10, 0x3}, {0x7ff, 0x9, 0x1, 0x4, 0x5, 0x7}, {0xfff, 0x2, 0x39800, 0x4, 0xaaf5, 0x8}, {0x6, 0x0, 0xfffff801, 0x5, 0x800, 0x3}, {0x7, 0x4, 0xa7, 0x2, 0x0, 0x4}, {0x0, 0x8, 0x800, 0x3, 0x9, 0x7}, {0xfffffffd, 0x6, 0xff, 0x9, 0xa, 0x7}, {0xfffffff9, 0x4, 0xde5, 0x3, 0x5, 0x7ff}, {0x5, 0x7a0, 0x3, 0x5, 0x2, 0x6}, {0x400, 0x5, 0x5, 0x0, 0x7f, 0x10001}, {0x6, 0xa, 0x1, 0x400, 0x8, 0x46e}, {0x6, 0x2, 0x1, 0x9, 0x9, 0x3}, {0xfde, 0x8, 0x4, 0x7, 0xe, 0x3}, {0x4, 0xb30c, 0x3, 0xea62, 0x6, 0x5}, {0x90000000, 0xfffffff9, 0x9, 0x7fff80, 0x3, 0x5}, {0x5, 0x0, 0x2, 0xff, 0x7, 0xffffffff}, {0x2, 0x1, 0x40000, 0x7, 0x81, 0x6}, {0x1, 0x7, 0x600000, 0x7, 0x4, 0x80}, {0x8, 0x0, 0x1, 0x89, 0x4, 0x400}, {0x3, 0x7, 0x200, 0xfffffff8, 0x7ff}, {0x5, 0x0, 0x6, 0x101, 0x8, 0x6}], [{0x3, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x395c6a32b72dd2f2}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x5}, {0x5}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x4, 0x2}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x4, 0xc404b07f910d8bd}, {0x5, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x77d64fc880254829, 0x1}, {0x1}, {0x1, 0x1}, {0xf}, {0x2, 0x1}, {}, {0x5}, {0x3, 0x1}, {0x7, 0x1}, {}, {0x1}, {0x2}, {0x5}, {0x4, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x1}, {0x2}, {0x4}, {0x2}, {}, {0x0, 0x1}, {0x2, 0x1}], 0x1}}]}, {0xee, 0x6, "b6e42fb3accdee07008045a293bf14b9a4e67396e1f554f6a4d516d6b7e7e336c5861372a527811458ee0dd326e562e9cf9ac9f98956c04519b92b51fd465e6c337b7136130b076eede4ce5591c0e5dbb8d77aa2b2f61e82bf99de9240796ba272c0ce0bc113864ef128de4412bb52c0df979740dfc1e0bf9ec86661c3effb9a03d2e35268b58906006674b41a969ad2980723c40360394415b712ac894bcfe98d7a90f752a3bcc60e81f89a84740bfd81ca061be304b1bd5550a6652f9888494c2889bd34e2744c120768c56643791e9a4e59883f1f05bd1aa3463398fd5947880062391a25516ba5c6"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_vlan={0x168, 0x1b, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x7, 0x7, 0x0, 0x3}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1000, 0xd831, 0x8, 0x80000000, 0x3}, 0x3}}]}, {0xf4, 0x6, "541966fdc11c038875dcdb1ec0837314afdd9abf84b326e4e5f71a1119a36a62821964b943579900c92c45a5143399896d214c988a758f617d68148d82fd22d42f6c0c409f2b2c1e81c442a5e6e9462656e9e379ed4760b7681b43afb4185a835cfa79b57dce865e369dbb08d5af9128546a37e31a7c3144288c1b35b1da046418e6619cd927e5a3356e496013ce15ee25625f9a4edc50e6b592d180b5fb98609db75eeb1d1be448e6a7e7c22dde4ef066babc17fd12a1194c4fe4991400abb66eaae203f0597bd20f925617fdc011ba7547f5ebc47391af52c1aa844b1ab3b334d2e643d28ee7f7e7ed5f83618b907b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0xd0, 0x14, 0x0, 0x0, {{0x8}, {0x84, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x90a, 0x1, 0x7, 0x1ff}, {0xadf1, 0x1, 0x40, 0x5}, {0x400, 0xe, 0x9, 0x101}, {0xb, 0x4b, 0x50, 0x1}, {0x200, 0x5, 0x9, 0xff}, {0x3, 0x1, 0x6, 0x9}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x2, 0x98, 0x7, 0xfffffffb}, {0x6, 0x5, 0x9, 0x4}, {0x3b, 0x5, 0x2, 0x7}, {0xb49, 0xd2, 0xc, 0x95}, {0xffff, 0x7f, 0xe, 0x400}, {0x1000, 0x1, 0x80, 0x5}]}]}, {0x27, 0x6, "a08c27affd4fc3ef60d1f42d72abd7ba2f6eafe526d40f3a157d7b5888977e134fc17b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xdc, 0x1e, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xb, 0x3, 0x2, 0x2, 0xfa56}}, @TCA_DEF_PARMS={0x18, 0x2, {0xaa, 0x5, 0x5, 0x5, 0xa47}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7f, 0x400, 0x4, 0x2, 0x1}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x60, 0x6, "fa9686b742f37271e203359b7dd09de627e50db9a633d2ac526fb38240b06e4870e26be5dec75c8a55495f233feec72e92e54ed18a7bd6e158e0d196bbef48a139a4b8a5bfb8630903ff6df879d6a48661a7374c3c65d7c07255ca8d"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_CGROUP_POLICE={0x18, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8ce}]}, @TCA_CGROUP_POLICE={0x1024, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0x0, 0xe, 0x5, 0xf, 0x1, 0x400, 0x1, 0x5, 0x7, 0xffff, 0x8, 0x0, 0x7, 0xfff, 0x4, 0xc00000, 0xe, 0x22c, 0x22b, 0xfffffff7, 0xdc0, 0x5, 0x5, 0xb92, 0x9a3, 0x401, 0x10000, 0x100, 0x5, 0x9, 0x101, 0x4, 0xda9d, 0x6, 0x3ab, 0xe022, 0x3, 0x7, 0x8, 0x0, 0x80000000, 0x1, 0x4, 0x5, 0x0, 0x80, 0xf857, 0x8001, 0xe0e, 0xdacd, 0x1, 0x400, 0x7e60, 0xd, 0x7ff, 0x40, 0xe, 0x2, 0x1000, 0x5, 0x5, 0x0, 0xd, 0x5, 0x3, 0x6, 0x947, 0x4, 0xfffffffd, 0xe, 0x5197, 0x80000001, 0x0, 0xffffffff, 0x100, 0x1, 0x0, 0x401, 0x3, 0x8, 0x2, 0x9, 0x10, 0x9, 0x80, 0x9, 0x10001, 0x3, 0x5, 0x80000000, 0x8000, 0x1, 0x5963, 0x7, 0x3, 0x9, 0xe6, 0x2, 0x3, 0x2, 0x800000, 0x4, 0x1, 0x5, 0xb7, 0xfffff2b9, 0x4, 0x1, 0x9, 0x300, 0x7, 0x0, 0xfda, 0x4, 0x401, 0x0, 0x3, 0x4bb6, 0x81, 0x2, 0xb, 0x75e, 0xfffff6df, 0x0, 0xfffffffe, 0x0, 0x6, 0x6, 0x7, 0xfffffff9, 0x0, 0x6, 0x3, 0x1, 0x101, 0x7fffffff, 0x0, 0x0, 0xa1e, 0x9, 0xfa, 0x5, 0x71, 0x7, 0x2, 0x100, 0x4, 0x7, 0x80000000, 0xe427, 0x0, 0x8001, 0xc63, 0x7, 0x9, 0x9, 0x1, 0x551, 0x8, 0x5426, 0x9, 0xffffffff, 0x24000, 0x1, 0xff, 0xce, 0x6, 0xffff, 0x1, 0x8, 0x3, 0xb996, 0x40, 0x3, 0x46, 0x8, 0x9, 0x1, 0x82, 0x1, 0x0, 0xd, 0x2, 0x3, 0xac, 0xd, 0x7, 0x10, 0x2, 0xa66, 0x3, 0x5, 0x1, 0x1, 0x8, 0x4, 0x1, 0x6, 0x7, 0xffff, 0x8001, 0x4, 0x6c4180e0, 0x91c, 0x1, 0x4, 0xfffeffff, 0xffff7301, 0x8, 0x10001, 0xd, 0x7, 0xe, 0x8, 0x5, 0x81, 0xffffffff, 0x1, 0x6, 0x6, 0x1, 0x1, 0x55, 0xffff, 0x0, 0x2, 0x80000001, 0x5, 0xffffffff, 0x4, 0x7fff, 0x74, 0xa3, 0x7, 0x4, 0x8001, 0x3, 0x9, 0x4, 0x9, 0x2bc, 0x5b, 0x7, 0xd36, 0x0, 0xfffffffc, 0xd, 0x5, 0xfff, 0x4, 0x7, 0x26, 0x8, 0x1, 0x75]}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0x1, 0x0, 0x2, 0x80, 0x7, 0x0, 0xd44, 0x72, 0x6, 0x6, 0x60, 0xcf, 0x1, 0x9, 0x9, 0x2f, 0x100, 0xd18, 0x3, 0x10001, 0x9, 0x7, 0x9, 0x4, 0x0, 0x5309, 0x4, 0x59e, 0x8, 0x9, 0x5, 0xffffffff, 0xd, 0x4, 0x9, 0xffff8fbb, 0x7, 0xfffff800, 0x7f, 0x8, 0xfffffffd, 0x6, 0x4, 0x7, 0x970c, 0x10000, 0x2, 0x4, 0x8000, 0x3, 0x800, 0x9, 0x7, 0x2, 0x10, 0x8, 0x4, 0x1, 0x5, 0x10, 0x4, 0x8, 0x8b, 0x10000, 0x0, 0x9, 0x6, 0xfffffe01, 0x3, 0x0, 0x200, 0x8, 0x8, 0x2, 0x3, 0x9, 0x1, 0x4, 0x80000000, 0x0, 0x73bf, 0x8, 0x9, 0xfff, 0x7, 0x2, 0x8000, 0x9, 0x7fff, 0x3, 0x3, 0x0, 0xfffffff9, 0x1ff, 0x3, 0x3ff, 0x7, 0x7, 0x8, 0x1649, 0x9, 0x4, 0x1, 0x79736b40, 0x6, 0x1, 0x7, 0x1000, 0x2, 0xf, 0x6, 0xb, 0x3, 0xcdf8, 0x1, 0x2, 0x4, 0xfffffffd, 0xea50, 0x874c, 0x6, 0x9, 0x1, 0x3, 0x4, 0x3, 0x5, 0x2, 0xff, 0xf, 0x7, 0xfffffffb, 0x9, 0xc73, 0x4, 0x5, 0xd, 0x9, 0x1, 0x10, 0x5, 0x7fffffff, 0x143f1801, 0x0, 0xe, 0x8, 0x81, 0x2, 0x81, 0x7, 0x1, 0xa37, 0x2, 0x256f, 0x9, 0x9, 0x4530, 0x0, 0x7, 0x4, 0x0, 0x5, 0x2, 0x2, 0x8, 0x3, 0x200, 0x8128, 0x10, 0x101, 0xbb61, 0x0, 0x400, 0x7, 0x4, 0x5, 0xc1, 0x4, 0x1ff, 0x1, 0x7, 0x81, 0x0, 0x7, 0x8, 0x9, 0x4, 0x9, 0xa71, 0x0, 0xbf, 0xfffffc01, 0x6, 0x8, 0x9, 0xfffffff8, 0x6, 0x5, 0x8, 0x6, 0x800, 0x7, 0x2, 0xe, 0x5, 0x10, 0x6000, 0x764, 0x4, 0x620, 0x5, 0x4, 0xfffffff9, 0x9, 0x1, 0x7, 0x0, 0x1, 0x9, 0x1, 0x800, 0x8, 0x1, 0x10001, 0xd, 0x0, 0x7, 0x3, 0x10000, 0x1, 0x5f22, 0x6, 0x400, 0x6, 0x9, 0xfffff1aa, 0xc058, 0x52af, 0xf23a, 0x4, 0x6, 0x6, 0xb1, 0x5, 0x101, 0x984, 0x0, 0xa7c, 0x8, 0x9, 0xcb15, 0x0, 0x3, 0x2, 0x401]}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc, 0xfffffffb, 0xd, 0x4, 0x2, 0x8000, 0x0, 0xfffffffa, 0xfffffff8, 0x3, 0x4, 0x800, 0x929, 0xd6fc, 0x5, 0xfffffffd, 0x7fff, 0x0, 0x8, 0x2, 0x5, 0x5, 0x2, 0x4, 0x8, 0x0, 0x3ff, 0x0, 0x2, 0x2e53, 0x7, 0x0, 0x4, 0x7, 0x87ca, 0x15, 0x7, 0xfffffffe, 0x5000000, 0x276d, 0x80000000, 0x0, 0x0, 0x3, 0xbeca, 0x326, 0x9, 0xffff, 0xf, 0x8a, 0x4e87, 0x5, 0x5, 0x0, 0x12, 0x65, 0xd1, 0x2, 0x1000, 0x0, 0x320, 0x462, 0x8000, 0x6003259e, 0x7, 0x9c4, 0x0, 0xffffffff, 0x5, 0x0, 0x5, 0xfffffffd, 0xffff3b8c, 0x2, 0x0, 0x5, 0x6, 0x7, 0x3ff, 0x6, 0x0, 0x7, 0x17, 0x9cf, 0x100, 0x80, 0x3, 0x8000, 0x48a7, 0x40, 0x2c0, 0x4, 0x200, 0x93, 0x3, 0x8, 0x7, 0xc1a, 0x2, 0x7, 0x3ff, 0x0, 0x7, 0x1, 0x1f04, 0x9, 0x0, 0x4, 0x4, 0x7, 0x80, 0x9, 0x800, 0x2, 0x4, 0xdf, 0x1, 0x5, 0x7, 0x7, 0xa8ed, 0x5017, 0x9, 0x5, 0x4, 0x9, 0x1, 0x2, 0x7fffffff, 0x2, 0xffffffff, 0xfffffffe, 0x81, 0x400, 0xff, 0x2, 0x9, 0x40, 0xc9, 0x0, 0x3c, 0x4, 0x4, 0x0, 0x56, 0x7f, 0x40, 0x0, 0x7fffffff, 0x5, 0x1, 0x7, 0x10, 0xfffffffb, 0x80, 0x8, 0x200, 0xa0a6, 0x1, 0x3c, 0x8001, 0x2, 0x1c9, 0x4f, 0x89, 0x2, 0x40, 0xf, 0x5, 0x0, 0x8, 0x7, 0x2, 0x9, 0x3ff, 0xaaac, 0x9, 0x8, 0x7, 0xfffff40b, 0x6, 0x1, 0x2, 0x7, 0x6, 0x6, 0x7ce, 0x7, 0x3, 0x8, 0xb979, 0x7, 0x0, 0xb45, 0x3f, 0x0, 0xfffffff0, 0xfffffff5, 0x4, 0xc47, 0x8, 0xc, 0x0, 0x7fffffff, 0x6, 0x1, 0x6, 0x7, 0x5, 0x2, 0x63a0, 0x1, 0x4, 0x4, 0x9, 0x7, 0x5, 0x1, 0x600000, 0x0, 0x800, 0x0, 0x101, 0x3, 0x1, 0x4, 0x4, 0xffffff59, 0x8, 0x7fff, 0x9, 0x5, 0x7fff, 0x9, 0x1, 0x942, 0x0, 0xfffff927, 0x9, 0xb8, 0x100, 0x9, 0x7ff, 0x5ebb, 0x6, 0x6, 0xa7, 0x3, 0x0, 0x6, 0x2400, 0x1, 0xd43, 0x800, 0x1, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x0, 0x3, 0x6, 0x3, 0x5, 0x4, 0x2, 0x7, 0xfffffffb, 0x42c, 0xffffffff, 0x9, 0x7, 0x101, 0x8, 0x9, 0x4679, 0xff, 0x7, 0x7, 0x5, 0x800, 0x8, 0x92, 0xffffffff, 0x458b, 0x96, 0x4, 0x4, 0x2, 0x800, 0x2, 0x800, 0x593f, 0xff, 0x5, 0xa58, 0x6, 0x3, 0x2, 0x2, 0x4, 0x8, 0x3, 0x1d5, 0x4, 0x3, 0x7, 0x8, 0x1ff, 0xff, 0xe, 0xb6e2, 0x485c2798, 0x7, 0xa, 0x8001, 0x3, 0x9, 0xfffffbff, 0x7, 0x6, 0x8, 0x0, 0x1, 0x4, 0x3ff, 0x9, 0x400, 0x49306614, 0x7, 0x10000, 0x5, 0x8, 0x0, 0x0, 0x3, 0x200, 0x1, 0x2, 0x9, 0x6, 0xc3, 0x6, 0x10001, 0x3ff, 0x5, 0xda2c, 0x4, 0x100, 0x1, 0x0, 0xf3, 0x6, 0x30000000, 0x8, 0x4, 0x8000, 0x3, 0xb3, 0x400, 0x9, 0x1, 0x7, 0xffff3f4b, 0x3b3, 0x0, 0xffffffc8, 0x4, 0x7, 0x0, 0x3, 0x5, 0x1000, 0x5, 0x0, 0x5, 0xc16b, 0x1, 0x100, 0x1ff, 0x0, 0xffffffff, 0x3, 0x800, 0x280, 0x80000000, 0x5, 0x0, 0x7, 0x7f, 0x3, 0x523, 0x81, 0x101, 0xffff2ac9, 0xee1, 0x9, 0x9, 0x401, 0x81, 0x0, 0x1, 0x7, 0x7, 0xff, 0x1, 0x1, 0x7, 0x8, 0x9, 0x9, 0x42, 0x92e7, 0x7, 0x9, 0x3, 0x10, 0x4c3, 0x1, 0xffff, 0x9, 0x7, 0xfffffff7, 0xfffffffa, 0x2, 0x40, 0x10, 0x5, 0x1ff, 0x3, 0x8, 0x3, 0x7, 0x3, 0x9, 0x8, 0x0, 0xafe, 0x4, 0xfffffff1, 0xba, 0x3ff, 0x7, 0x800, 0x9, 0x6, 0x6, 0x8, 0x100, 0x2, 0x7, 0x7fffffff, 0x1, 0x800, 0x1, 0x2, 0x7ff, 0x6, 0x9, 0x800, 0x2, 0x5, 0x3, 0x0, 0x4, 0x6, 0xc96, 0xffffffff, 0x6, 0x7, 0x0, 0x9, 0x0, 0xd9, 0x7, 0x401, 0x0, 0x1, 0xabead7c2, 0x7, 0x2, 0x7fffffff, 0x10000, 0xffff8f32, 0xfffffeff, 0x3, 0x7fffffff, 0x2, 0xb, 0x972, 0x8000, 0x9, 0x6, 0x0, 0x800, 0x80000000, 0x10000, 0xfffffffb, 0x4, 0x1000, 0x2, 0x4, 0x440, 0x8000, 0x7, 0x400, 0x7f71, 0x8, 0x100, 0x9, 0x3, 0x7, 0x7, 0x1]}]}]}}]}, 0x3688}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 15.169496509s ago: executing program 4 (id=645): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000580)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "04c2ad", 0x10, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x4e21, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x300}}}}}}}}, 0x0) 15.129745355s ago: executing program 4 (id=646): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000040)=0x8, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000340)=[{0xffffffffffffffff, 0x410}, {r1, 0x2026}], 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) socket(0x3, 0x80000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000340)={r9, 0x4}, 0x8) 8.008913387s ago: executing program 33 (id=635): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c00008008"], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x2, 0x100, 0x9, 0x7, 0xfffffffd}, &(0x7f0000000180)=0x14) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/257, 0x101}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2, 0x0, 0x0, r3}) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000440), 0x189040, 0x0) 7.008556615s ago: executing program 34 (id=637): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (rerun: 32) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) io_uring_setup(0xfc2, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1}) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086552108cd0c6900556e01020301090212000100000000090400"], 0x0) (rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 32) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x100) (async, rerun: 32) ptrace(0x11, 0x0) ptrace(0x10, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x56, 0xc0, 0x83, 0x20, 0x7c0, 0x158a, 0xdd2e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x35, 0x2, 0x2, 0x77, 0x90, 0x64, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x10, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6", 0x90}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc402189195e92dc1d73fce0d96439a53073df328509806e960c2", 0x7e}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235", 0xcf}, {&(0x7f0000000f00)="397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfebf169e77257f308b498e5b417227094d569a4456954e58ea1850000000000000000355c5f42d9f2", 0x3c}, {&(0x7f0000000480)="3b98c053d6287182fb77fa2573c0", 0xe}], 0x5}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa", 0x7d}, {&(0x7f0000001000)="bd2f6aa36cea0e4bccda24dc5bd69ad762e998d923018ec9f30d63c7059c3c786069915581888508ff589f82857ff546b23b88d6bd61f1efc982005bf6c9abc4fe2caf32ef3ff105", 0x48}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000840)="3f1c4a04940ee0b20aec8b4090986a3bff84255d40657e7ee0d40a25584e869ef417cfb843df9bab6a733f72f13c385945fbe4f6592503b0013edc972aa7f382cfe6f924e9b3058c5dc3a39af5f6868c9031d7f0fba663fed16b868a4e53436b1be7a082f826014791", 0x69}, {&(0x7f00000008c0)="ab802595e16402267afad4132bae032aeebc5d3df8873915f385de7623fdcdbb497d2913cabe2bd146dee84fdcbeaa251db4f747090dc6c625ed3b915aae8dda1394c0d541055b3e89cab518a94118fb170c1d", 0x53}, {&(0x7f0000000940)="2c5e42e310fe2f095389d5264f44036f83f52415194225b1d75664af0bb8c7db4032895089bf7ed9c49da28ec002a2250c905af982041e9c842ea9dab20db6473e1556", 0x43}, {&(0x7f0000000b80)="5e93f51c80552080613760264b6008795ee1e8b689", 0x15}], 0x4}}], 0x3, 0xc0) 6.961815023s ago: executing program 35 (id=636): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x48, 0x10, 0x401, 0x0, 0xfffffffc, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x5, 0x3, 0xf}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xd}]}]}, 0x48}}, 0x0) read$FUSE(r1, &(0x7f0000000540)={0x2020}, 0x2020) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="9cb91a700000125f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) futex(0x0, 0xa, 0x100000, 0x0, 0x0, 0x3000000) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)={0x4c, 0x13, 0xa03, 0x70bd2c, 0x25dfdbff, {0x6, 0x34, 0x9, 0x0, {0x4e20, 0x4e21, [0x3, 0x5, 0x5cf, 0x9], [0xd, 0x0, 0x7ff, 0x1], 0x0, [0x4, 0x7f]}, 0x401, 0x9}}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x141000, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r7, 0xc0045103, 0xfffffffffffffffc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) syz_clone(0x5200000, 0x0, 0x0, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80800) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x208002, 0x0) ioctl$PTP_PEROUT_REQUEST2(r8, 0x40383d0c, &(0x7f0000000100)={{0x9, 0xfffffffa}, {0x9, 0x1003ff}, 0xffffffff, 0x7}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 36 (id=646): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000040)=0x8, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000340)=[{0xffffffffffffffff, 0x410}, {r1, 0x2026}], 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) socket(0x3, 0x80000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000340)={r9, 0x4}, 0x8) kernel console output (not intermixed with test programs): new high-speed USB device number 26 using dummy_hcd [ 161.069467][ T7032] tipc: Started in network mode [ 161.078219][ T7032] tipc: Node identity ac1414aa, cluster identity 4711 [ 161.089599][ T7032] tipc: Enabled bearer , priority 10 [ 161.104279][ T7032] tipc: Disabling bearer [ 161.173218][ T5928] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 161.273186][ T5888] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 161.324246][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 161.338501][ T5928] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c4.18 [ 161.349367][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.369752][ T5928] usb 4-1: Product: syz [ 161.374831][ T5928] usb 4-1: Manufacturer: syz [ 161.379539][ T5928] usb 4-1: SerialNumber: syz [ 161.413749][ T5928] usb 4-1: config 0 descriptor?? [ 161.431918][ T5928] esd_usb 4-1:0.0: sending version message failed [ 161.471165][ T5888] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 161.490946][ T5928] esd_usb 4-1:0.0: probe with driver esd_usb failed with error -22 [ 161.514306][ T5888] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 161.542367][ T5888] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 161.555797][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.574922][ T7029] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 161.586068][ T5888] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 161.637170][ T7028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.649610][ T7028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.717827][ T5888] usb 4-1: USB disconnect, device number 18 [ 161.819511][ T7029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.829495][ T7029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.152711][ T7042] FAULT_INJECTION: forcing a failure. [ 162.152711][ T7042] name failslab, interval 1, probability 0, space 0, times 0 [ 162.173899][ T5887] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 162.203603][ T7042] CPU: 0 UID: 0 PID: 7042 Comm: syz.4.303 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 162.203641][ T7042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 162.203651][ T7042] Call Trace: [ 162.203659][ T7042] [ 162.203666][ T7042] dump_stack_lvl+0x241/0x360 [ 162.203705][ T7042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.203730][ T7042] ? __pfx__printk+0x10/0x10 [ 162.203757][ T7042] ? __pfx___might_resched+0x10/0x10 [ 162.203783][ T7042] should_fail_ex+0x424/0x570 [ 162.203807][ T7042] should_failslab+0xac/0x100 [ 162.203833][ T7042] __kmalloc_noprof+0xdf/0x4d0 [ 162.203853][ T7042] ? tomoyo_init_log+0x1bae/0x2150 [ 162.203882][ T7042] tomoyo_init_log+0x1bae/0x2150 [ 162.203926][ T7042] ? __pfx_tomoyo_init_log+0x10/0x10 [ 162.203948][ T7042] ? tomoyo_profile+0x11/0x50 [ 162.203971][ T7042] ? tomoyo_profile+0x11/0x50 [ 162.204003][ T7042] tomoyo_supervisor+0x3c0/0x18b0 [ 162.204033][ T7042] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 162.204048][ T7042] ? lockdep_hardirqs_on+0x9d/0x150 [ 162.204078][ T7042] ? tomoyo_print_ulong+0x27/0xa0 [ 162.204095][ T7042] ? __pfx_snprintf+0x10/0x10 [ 162.204114][ T7042] ? tomoyo_check_acl+0x385/0x400 [ 162.204141][ T7042] tomoyo_path_number_perm+0x557/0x790 [ 162.204166][ T7042] ? tomoyo_path_number_perm+0x215/0x790 [ 162.204190][ T7042] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 162.204218][ T7042] ? ksys_write+0x24e/0x2d0 [ 162.204245][ T7042] ? __lock_acquire+0xad5/0xd80 [ 162.204282][ T7042] ? __fget_files+0x2a/0x420 [ 162.204296][ T7042] ? __fget_files+0x2a/0x420 [ 162.204315][ T7042] ? __fget_files+0x2a/0x420 [ 162.204335][ T7042] security_file_ioctl+0xc6/0x2a0 [ 162.204356][ T7042] __se_sys_ioctl+0x46/0x160 [ 162.204378][ T7042] do_syscall_64+0xf3/0x230 [ 162.204398][ T7042] ? clear_bhb_loop+0x45/0xa0 [ 162.204418][ T7042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.204435][ T7042] RIP: 0033:0x7feb2958d169 [ 162.204450][ T7042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.204464][ T7042] RSP: 002b:00007feb2a45b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.204484][ T7042] RAX: ffffffffffffffda RBX: 00007feb297a5fa0 RCX: 00007feb2958d169 [ 162.204496][ T7042] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000006 [ 162.204508][ T7042] RBP: 00007feb2a45b090 R08: 0000000000000000 R09: 0000000000000000 [ 162.204519][ T7042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.204529][ T7042] R13: 0000000000000000 R14: 00007feb297a5fa0 R15: 00007feb298cfa28 [ 162.204557][ T7042] [ 162.584323][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 162.669196][ T5887] usb 2-1: unable to get BOS descriptor or descriptor too short [ 162.696412][ T5887] usb 2-1: config 1 interface 0 has no altsetting 0 [ 162.711645][ T5887] usb 2-1: string descriptor 0 read error: -22 [ 162.720165][ T5887] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 162.729292][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.733250][ T5929] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 163.890063][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 163.934928][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.008829][ T5929] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 164.076511][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.171675][ T5929] usb 5-1: config 0 descriptor?? [ 164.745614][ T10] usb 3-1: USB disconnect, device number 21 [ 164.767009][ T5929] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 165.160705][ T5890] usb 5-1: USB disconnect, device number 27 [ 165.480560][ T5887] usbhid 2-1:1.0: can't add hid device: -71 [ 165.492434][ T5887] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 165.522229][ T5887] usb 2-1: USB disconnect, device number 26 [ 165.599847][ T7080] netlink: 116 bytes leftover after parsing attributes in process `syz.1.314'. [ 166.280949][ T7083] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 166.590350][ T5890] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 166.634332][ T5890] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 166.993290][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 167.362982][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 167.402717][ T24] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 167.447050][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 167.489772][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.524850][ T7110] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 167.546483][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 167.593628][ T7115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.675804][ T7115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.761758][ T7107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.771492][ T7107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.833698][ T5890] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 168.113186][ T5890] usb 2-1: device descriptor read/64, error -71 [ 168.373307][ T5890] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 169.032731][ T7124] delete_channel: no stack [ 169.722858][ T7136] netlink: 'syz.4.328': attribute type 34 has an invalid length. [ 170.036113][ T5929] usb 1-1: USB disconnect, device number 25 [ 170.113522][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 170.283287][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 170.305425][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 170.318171][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 170.332425][ T24] usb 5-1: config 7 has an invalid interface number: 87 but max is 0 [ 170.360370][ T24] usb 5-1: config 7 has no interface number 0 [ 170.384531][ T24] usb 5-1: config 7 interface 87 altsetting 128 endpoint 0x6 has an invalid bInterval 125, changing to 10 [ 170.450476][ T24] usb 5-1: config 7 interface 87 altsetting 128 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 170.475431][ T10] usb 3-1: config 0 has no interfaces? [ 170.495496][ T24] usb 5-1: config 7 interface 87 has no altsetting 0 [ 170.497690][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 170.511302][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.527589][ T24] usb 5-1: New USB device found, idVendor=12d1, idProduct=796e, bcdDevice=2d.c0 [ 170.540916][ T10] usb 3-1: Product: syz [ 170.550049][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=13 [ 170.556574][ T10] usb 3-1: Manufacturer: syz [ 170.573804][ T10] usb 3-1: SerialNumber: syz [ 170.578486][ T24] usb 5-1: Product: syz [ 170.594994][ T24] usb 5-1: Manufacturer: syz [ 170.599844][ T10] usb 3-1: config 0 descriptor?? [ 170.629048][ T24] usb 5-1: SerialNumber: syz [ 170.931135][ T7136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.943683][ T7136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.973897][ T7136] netlink: 'syz.4.328': attribute type 4 has an invalid length. [ 171.029981][ T7149] netlink: 'syz.4.328': attribute type 4 has an invalid length. [ 171.080735][ T7136] ip_vti0: entered promiscuous mode [ 171.090249][ T7136] ip_vti0: entered allmulticast mode [ 171.243335][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 171.395143][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 171.404948][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 171.442010][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 171.489828][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 171.503680][ T5890] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 171.521257][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.545866][ T10] usb 2-1: config 0 descriptor?? [ 171.697360][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.725483][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.746484][ T5890] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.760899][ T5888] usb 2-1: USB disconnect, device number 29 [ 171.772890][ T5890] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 171.795625][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.819433][ T5890] usb 1-1: config 0 descriptor?? [ 172.276210][ T5890] dragonrise 0003:0079:0011.0004: unknown main item tag 0x1 [ 172.291905][ T5890] dragonrise 0003:0079:0011.0004: reserved main item tag 0xe [ 172.320715][ T5890] dragonrise 0003:0079:0011.0004: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.0-1/input0 [ 172.533072][ T5929] usb 1-1: USB disconnect, device number 26 [ 172.715114][ T24] hub 5-1:7.87: bad descriptor, ignoring hub [ 172.761886][ T24] hub 5-1:7.87: probe with driver hub failed with error -5 [ 172.764542][ T5890] usb 3-1: USB disconnect, device number 22 [ 172.771056][ T24] option 5-1:7.87: GSM modem (1-port) converter detected [ 172.857943][ T24] usb 5-1: USB disconnect, device number 28 [ 172.898418][ T24] option 5-1:7.87: device disconnected [ 173.046786][ T7169] team_slave_0: entered promiscuous mode [ 173.052520][ T7169] team_slave_1: entered promiscuous mode [ 173.117935][ T7169] team0: Device macsec2 is already an upper device of the team interface [ 173.128980][ T7168] syz.2.338 (7168): drop_caches: 2 [ 173.135043][ T7168] syz.2.338 (7168): drop_caches: 2 [ 173.209235][ T7169] team_slave_0: left promiscuous mode [ 173.214814][ T7169] team_slave_1: left promiscuous mode [ 173.503498][ T24] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 173.673079][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 173.684069][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.742789][ T7174] fuse: Bad value for 'fd' [ 173.749265][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 173.947259][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 173.956794][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.965257][ T24] usb 5-1: Product: syz [ 173.969494][ T24] usb 5-1: Manufacturer: syz [ 173.979617][ T24] usb 5-1: SerialNumber: syz [ 174.011953][ T24] usb 5-1: config 0 descriptor?? [ 174.325170][ T10] usb 5-1: USB disconnect, device number 29 [ 175.161480][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 175.343453][ T10] usb 1-1: device descriptor read/64, error -71 [ 175.393602][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 175.572457][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 175.589594][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.640811][ T24] usb 5-1: config 0 has no interfaces? [ 175.657337][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 175.680455][ T24] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 175.701833][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.723592][ T24] usb 5-1: Product: syz [ 175.730600][ T24] usb 5-1: Manufacturer: syz [ 175.743458][ T24] usb 5-1: SerialNumber: syz [ 175.781975][ T24] usb 5-1: config 0 descriptor?? [ 175.813196][ T10] usb 1-1: device descriptor read/64, error -71 [ 175.902066][ T7207] input: syz1 as /devices/virtual/input/input14 [ 175.987086][ T10] usb usb1-port1: attempt power cycle [ 176.359025][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 176.397759][ T10] usb 1-1: device descriptor read/8, error -71 [ 176.673583][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 176.746474][ T10] usb 1-1: device descriptor read/8, error -71 [ 176.872314][ T10] usb usb1-port1: unable to enumerate USB device [ 178.386837][ T10] usb 5-1: USB disconnect, device number 30 [ 178.525153][ T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 178.544892][ T7234] FAULT_INJECTION: forcing a failure. [ 178.544892][ T7234] name failslab, interval 1, probability 0, space 0, times 0 [ 178.573620][ T7234] CPU: 0 UID: 0 PID: 7234 Comm: syz.4.356 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 178.573646][ T7234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 178.573656][ T7234] Call Trace: [ 178.573664][ T7234] [ 178.573671][ T7234] dump_stack_lvl+0x241/0x360 [ 178.573702][ T7234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.573726][ T7234] ? __pfx__printk+0x10/0x10 [ 178.573754][ T7234] ? __pfx___might_resched+0x10/0x10 [ 178.573782][ T7234] should_fail_ex+0x424/0x570 [ 178.573805][ T7234] should_failslab+0xac/0x100 [ 178.573830][ T7234] kmem_cache_alloc_noprof+0x78/0x390 [ 178.573851][ T7234] ? ep_ptable_queue_proc+0x5b/0x210 [ 178.573880][ T7234] ep_ptable_queue_proc+0x5b/0x210 [ 178.573902][ T7234] ? af_alg_poll+0xaf/0x240 [ 178.573923][ T7234] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 178.573945][ T7234] af_alg_poll+0xbf/0x240 [ 178.573968][ T7234] sock_poll+0x34d/0x410 [ 178.573993][ T7234] ? __pfx_sock_poll+0x10/0x10 [ 178.574014][ T7234] ep_insert+0x1147/0x1ac0 [ 178.574053][ T7234] ? __pfx_ep_insert+0x10/0x10 [ 178.574075][ T7234] ? __pfx___mutex_lock+0x10/0x10 [ 178.574097][ T7234] ? __fget_files+0x2a/0x420 [ 178.574114][ T7234] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 178.574138][ T7234] ? __fget_files+0x2a/0x420 [ 178.574164][ T7234] do_epoll_ctl+0x8bc/0xf70 [ 178.574195][ T7234] __x64_sys_epoll_ctl+0x163/0x1a0 [ 178.574227][ T7234] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 178.574256][ T7234] ? do_syscall_64+0xb6/0x230 [ 178.574280][ T7234] do_syscall_64+0xf3/0x230 [ 178.574300][ T7234] ? clear_bhb_loop+0x45/0xa0 [ 178.574321][ T7234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.574337][ T7234] RIP: 0033:0x7feb2958d169 [ 178.574352][ T7234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.574366][ T7234] RSP: 002b:00007feb2a45b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 178.574384][ T7234] RAX: ffffffffffffffda RBX: 00007feb297a5fa0 RCX: 00007feb2958d169 [ 178.574397][ T7234] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 178.574407][ T7234] RBP: 00007feb2a45b090 R08: 0000000000000000 R09: 0000000000000000 [ 178.574417][ T7234] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000001 [ 178.574428][ T7234] R13: 0000000000000000 R14: 00007feb297a5fa0 R15: 00007feb298cfa28 [ 178.574456][ T7234] [ 178.818218][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.908568][ T24] usb 2-1: no configurations [ 178.918920][ T24] usb 2-1: can't read configurations, error -22 [ 179.308586][ T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 179.395407][ T7254] netlink: 28 bytes leftover after parsing attributes in process `syz.0.362'. [ 179.563416][ T24] usb 2-1: no configurations [ 179.568063][ T24] usb 2-1: can't read configurations, error -22 [ 179.623254][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 179.635629][ T24] usb usb2-port1: attempt power cycle [ 179.773511][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 179.794129][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 179.811720][ T10] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 179.842760][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.883199][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 179.912660][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.951773][ T10] usbtmc 5-1:16.0: bulk endpoints not found [ 180.083310][ T24] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 180.136019][ T24] usb 2-1: no configurations [ 180.140654][ T24] usb 2-1: can't read configurations, error -22 [ 180.171705][ T7255] loop9: detected capacity change from 0 to 7 [ 180.179259][ T7255] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.243261][ T7255] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.253877][ T7255] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.262230][ T7255] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.334229][ T24] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 180.342955][ T7255] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.383037][ T7255] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.401934][ T24] usb 2-1: no configurations [ 180.414967][ T24] usb 2-1: can't read configurations, error -22 [ 180.421669][ T7255] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.452103][ T24] usb usb2-port1: unable to enumerate USB device [ 180.479714][ T7255] ldm_validate_partition_table(): Disk read failed. [ 180.496020][ T7255] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.513170][ T5929] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 180.521896][ T7255] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.532072][ T7255] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.550646][ T7255] Dev loop9: unable to read RDB block 0 [ 180.558710][ T7255] loop9: unable to read partition table [ 180.586233][ T7255] loop9: partition table beyond EOD, truncated [ 180.609875][ T7255] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 180.773062][ T5929] usb 3-1: unable to get BOS descriptor or descriptor too short [ 181.009107][ T5929] usb 3-1: config 7 has an invalid interface number: 67 but max is 0 [ 181.021421][ T5929] usb 3-1: config 7 has no interface number 0 [ 181.033998][ T5929] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 181.043850][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.051908][ T5929] usb 3-1: Product: 㯑 [ 181.056210][ T5929] usb 3-1: Manufacturer: ë–’ [ 181.659671][ T5929] usb 3-1: USB disconnect, device number 23 [ 182.206847][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 182.451860][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 182.543188][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.565771][ T10] usb 2-1: config 0 has no interfaces? [ 182.675074][ T10] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 182.697522][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.817792][ T5929] usb 5-1: USB disconnect, device number 31 [ 182.833201][ T10] usb 2-1: Product: syz [ 182.868604][ T10] usb 2-1: Manufacturer: syz [ 182.900968][ T10] usb 2-1: SerialNumber: syz [ 182.940863][ T10] usb 2-1: config 0 descriptor?? [ 183.283565][ T5929] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 183.457362][ T5929] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 183.463230][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 183.474423][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.542825][ T5929] usb 3-1: config 0 descriptor?? [ 183.556227][ T5929] cp210x 3-1:0.0: cp210x converter detected [ 183.755368][ T10] usb 5-1: config 0 has no interfaces? [ 183.766986][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 183.777268][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.800782][ T10] usb 5-1: Product: syz [ 183.810459][ T10] usb 5-1: Manufacturer: syz [ 183.819571][ T10] usb 5-1: SerialNumber: syz [ 183.842758][ T10] usb 5-1: config 0 descriptor?? [ 183.965408][ T5929] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 184.037508][ T5929] usb 3-1: cp210x converter now attached to ttyUSB0 [ 184.120361][ T7304] netlink: 56 bytes leftover after parsing attributes in process `syz.4.374'. [ 184.226280][ T5890] usb 3-1: USB disconnect, device number 24 [ 184.414744][ T5890] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 184.452577][ T5890] cp210x 3-1:0.0: device disconnected [ 184.568585][ T7308] netlink: 'syz.0.375': attribute type 10 has an invalid length. [ 184.616383][ T7308] netlink: 152 bytes leftover after parsing attributes in process `syz.0.375'. [ 185.125401][ T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 185.170368][ T7319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.182129][ T7319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.295565][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 185.303774][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 185.347742][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 185.365012][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 185.408912][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 185.459312][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 185.473651][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 185.483440][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.504343][ T7324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.381'. [ 185.504960][ T24] usb 1-1: config 0 descriptor?? [ 185.542644][ T5150] Bluetooth: hci5: urb ffff888029dc5500 submission failed (90) [ 185.679937][ T24] usb 2-1: USB disconnect, device number 34 [ 186.151248][ T5890] usb 1-1: USB disconnect, device number 31 [ 186.494540][ T5887] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 186.778907][ T5887] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 186.907954][ T5887] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 186.913257][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 186.982986][ T5887] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 187.203342][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 187.232443][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 187.243353][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.252993][ T24] usb 4-1: config 7 has an invalid interface number: 111 but max is 0 [ 187.261294][ T24] usb 4-1: config 7 has no interface number 0 [ 187.274142][ T24] usb 4-1: New USB device found, idVendor=0481, idProduct=9f2e, bcdDevice=75.5b [ 187.285609][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.297788][ T24] usb 4-1: Product: syz [ 187.308389][ T24] usb 4-1: Manufacturer: syz [ 187.317562][ T24] usb 4-1: SerialNumber: syz [ 187.354389][ T7304] dccp_close: ABORT with 56 bytes unread [ 187.373754][ T5928] usb 5-1: USB disconnect, device number 32 [ 187.881645][ T24] usb 4-1: bad CDC descriptors [ 187.922812][ T24] usb 4-1: USB disconnect, device number 19 [ 187.960702][ T7341] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 187.987642][ T5887] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 188.118958][ T5928] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 188.205207][ T7341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.216063][ T7341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.273251][ T5928] usb 5-1: device descriptor read/64, error -71 [ 188.523360][ T5928] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 188.732455][ T5928] usb 5-1: device descriptor read/64, error -71 [ 188.863968][ T5928] usb usb5-port1: attempt power cycle [ 189.273292][ T5928] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 189.306814][ T5928] usb 5-1: device descriptor read/8, error -71 [ 189.313261][ T5888] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 189.485298][ T5888] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 189.505529][ T5888] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 189.517932][ T5888] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 189.527321][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.553646][ T5928] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 189.583902][ T5928] usb 5-1: device descriptor read/8, error -71 [ 189.717899][ T5928] usb usb5-port1: unable to enumerate USB device [ 189.910092][ T5928] usb 2-1: USB disconnect, device number 35 [ 190.142437][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 190.142455][ T30] audit: type=1800 audit(1744391562.456:23): pid=7386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.399" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 190.270923][ T5888] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 190.423319][ T5928] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 190.633424][ T5928] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 190.806490][ T5888] usb 3-1: config 0 has no interfaces? [ 190.821532][ T5928] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 190.870854][ T5888] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 190.892205][ T5928] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 190.908642][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.951399][ T5890] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 190.966600][ T5928] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 190.998074][ T5888] usb 3-1: Product: syz [ 191.008210][ T5888] usb 3-1: Manufacturer: syz [ 191.020979][ T5928] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 191.032544][ T5888] usb 3-1: SerialNumber: syz [ 191.060219][ T5888] usb 3-1: config 0 descriptor?? [ 191.082607][ T5928] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 191.125226][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 191.133961][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 191.141218][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 191.157203][ T5928] usb 1-1: Product: syz [ 191.157837][ T5890] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 191.207577][ T5928] usb 1-1: Manufacturer: syz [ 191.221444][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.239974][ T5928] cdc_wdm 1-1:1.0: skipping garbage [ 191.274638][ T5928] cdc_wdm 1-1:1.0: skipping garbage [ 191.274653][ T5890] usb 5-1: Product: syz [ 191.320390][ T5928] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 191.322333][ T5890] usb 5-1: Manufacturer: syz [ 191.394887][ T5890] usb 5-1: SerialNumber: syz [ 191.418026][ T5928] cdc_wdm 1-1:1.0: Unknown control protocol [ 191.419297][ T5890] usb 5-1: config 0 descriptor?? [ 191.888132][ T5890] ath6kl: Failed to read usb control message: -71 [ 191.894828][ T5890] ath6kl: Unable to read the bmi data from the device: -71 [ 191.902144][ T5890] ath6kl: Unable to recv target info: -71 [ 191.926378][ T5890] ath6kl: Failed to init ath6kl core: -71 [ 191.992089][ T5890] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 192.036490][ T5890] usb 5-1: USB disconnect, device number 37 [ 192.099542][ T7401] fuse: Bad value for 'fd' [ 192.893204][ T5928] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 192.971293][ T5890] usb 1-1: USB disconnect, device number 32 [ 193.209654][ T5928] usb 5-1: config 0 has no interfaces? [ 193.229699][ T5890] usb 4-1: USB disconnect, device number 20 [ 193.258872][ T5928] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 193.299553][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.385064][ T5928] usb 5-1: Product: syz [ 193.417828][ T10] usb 3-1: USB disconnect, device number 25 [ 193.455105][ T5928] usb 5-1: Manufacturer: syz [ 193.623439][ T5887] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 193.643077][ T5928] usb 5-1: SerialNumber: syz [ 193.654095][ T5928] usb 5-1: config 0 descriptor?? [ 193.993670][ T5890] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 194.199561][ T5887] usb 2-1: config 0 has no interfaces? [ 194.213555][ T5887] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 194.238367][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.268477][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.275168][ T5890] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 194.288438][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.296922][ T5887] usb 2-1: Product: syz [ 194.301132][ T5887] usb 2-1: Manufacturer: syz [ 194.511592][ T5887] usb 2-1: SerialNumber: syz [ 194.517145][ T5890] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 194.550751][ T5890] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 194.552843][ T5887] usb 2-1: config 0 descriptor?? [ 194.567348][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.731223][ T7422] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 194.766988][ T5890] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 194.933231][ T5843] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 194.985798][ T7417] xt_TCPMSS: Only works on TCP SYN packets [ 195.046307][ T7422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.062166][ T7422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.120350][ T5843] usb 3-1: config 0 has no interfaces? [ 195.138191][ T5843] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 195.147497][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.181941][ T5843] usb 3-1: Product: syz [ 195.196495][ T5843] usb 3-1: Manufacturer: syz [ 195.208903][ T5843] usb 3-1: SerialNumber: syz [ 195.237821][ T5843] usb 3-1: config 0 descriptor?? [ 195.494593][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.411'. [ 195.668947][ T5888] usb 5-1: USB disconnect, device number 38 [ 196.253193][ T5888] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 196.344099][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 196.375915][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 196.381974][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 196.389990][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 196.395045][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 196.658281][ T5888] usb 5-1: config 0 has no interfaces? [ 196.676440][ T5888] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 196.685758][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.695890][ T5888] usb 5-1: Product: syz [ 196.708000][ T5888] usb 5-1: Manufacturer: syz [ 196.722671][ T5888] usb 5-1: SerialNumber: syz [ 196.785044][ T5888] usb 5-1: config 0 descriptor?? [ 196.913443][ T5888] usb 4-1: USB disconnect, device number 21 [ 196.930177][ T5887] usb 2-1: USB disconnect, device number 36 [ 197.168239][ T7441] usb usb8: usbfs: process 7441 (syz.3.415) did not claim interface 0 before use [ 197.736794][ T7450] usb usb8: usbfs: process 7450 (syz.3.418) did not claim interface 0 before use [ 197.873191][ T5843] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 198.079628][ T5843] usb 2-1: config 0 has no interfaces? [ 198.147687][ T7455] ip6t_srh: unknown srh invflags 7D00 [ 198.197057][ T5843] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 198.225233][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.234154][ T5843] usb 2-1: Product: syz [ 198.238653][ T5843] usb 2-1: Manufacturer: syz [ 198.244385][ T5843] usb 2-1: SerialNumber: syz [ 199.010369][ T5843] usb 2-1: config 0 descriptor?? [ 199.024810][ T5928] usb 3-1: USB disconnect, device number 26 [ 199.296858][ T7461] netlink: 28 bytes leftover after parsing attributes in process `syz.0.422'. [ 199.355551][ T7461] netlink: 20 bytes leftover after parsing attributes in process `syz.0.422'. [ 199.397312][ T7461] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=63 (63 ns) > initial count (56 ns). Using initial count to start timer. [ 199.561598][ T5843] usb 5-1: USB disconnect, device number 39 [ 200.543225][ T5928] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 200.662741][ T7482] usb usb8: usbfs: process 7482 (syz.3.428) did not claim interface 0 before use [ 200.685503][ T5843] usb 2-1: USB disconnect, device number 37 [ 200.775917][ T5928] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 200.805465][ T5928] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 200.818550][ T5928] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 200.859167][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.020466][ T7478] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 201.100986][ T5928] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 201.245674][ T7478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.254775][ T7478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.773368][ T5887] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 201.933447][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 201.940693][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.981740][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 202.037096][ T7490] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 202.049304][ T7490] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 202.086749][ T5887] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 202.098162][ T7490] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 202.131856][ T7490] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 202.156856][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.189562][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.432'. [ 202.226739][ T5887] usb 4-1: config 0 descriptor?? [ 202.244355][ T7490] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 202.296164][ T7490] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 202.369739][ T7490] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 202.382972][ T7490] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 202.415683][ T7490] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 202.453213][ T7490] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 202.753262][ T5887] usbhid 4-1:0.0: can't add hid device: -71 [ 202.775382][ T5887] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 202.873700][ T5887] usb 4-1: USB disconnect, device number 22 [ 203.241646][ T5888] usb 1-1: USB disconnect, device number 33 [ 203.463252][ T5928] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 203.633344][ T5928] usb 2-1: Using ep0 maxpacket: 8 [ 203.644031][ T5928] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 203.658756][ T5928] usb 2-1: config 179 has no interface number 0 [ 203.673278][ T5928] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 203.699117][ T5928] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 203.710443][ T5928] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 203.721669][ T5928] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 203.751028][ T5928] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 203.760212][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.789658][ T7512] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 204.041888][ T5928] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input18 [ 204.240808][ T10] usb 2-1: USB disconnect, device number 38 [ 204.240864][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 204.255706][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 204.285511][ T10] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 204.333297][ T5929] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 204.424829][ T7519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.479097][ T7529] usb usb8: usbfs: process 7529 (syz.3.441) did not claim interface 0 before use [ 204.561498][ T5929] usb 5-1: config 0 has no interfaces? [ 204.885090][ T7533] libceph: resolve ' [ 204.885090][ T7533] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 204.885090][ T7533] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 204.930825][ T5929] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 204.946024][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.044937][ T5929] usb 5-1: Product: syz [ 205.147406][ T5929] usb 5-1: Manufacturer: syz [ 205.178965][ T5929] usb 5-1: SerialNumber: syz [ 205.211244][ T5929] usb 5-1: config 0 descriptor?? [ 205.639296][ T5887] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 206.087173][ T5887] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 206.104701][ T5887] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 206.128587][ T5887] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 206.149705][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.305268][ T7544] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 206.322161][ T5887] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 206.556534][ T7544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.566708][ T7544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.679896][ T5887] usb 5-1: USB disconnect, device number 40 [ 208.556689][ T5887] usb 1-1: USB disconnect, device number 34 [ 208.624518][ T5929] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 208.813651][ T7586] usb usb8: usbfs: process 7586 (syz.0.454) did not claim interface 0 before use [ 208.929053][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 209.007109][ T5929] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 209.055473][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.117381][ T5929] usb 2-1: config 0 descriptor?? [ 209.236853][ T7580] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 209.353260][ T5887] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 209.523267][ T5928] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 209.532111][ T5887] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 209.543837][ T5887] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 209.556755][ T5887] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 209.603208][ T5888] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 209.605589][ T5887] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 209.715415][ T5928] usb 3-1: config 0 has no interfaces? [ 209.733379][ T5928] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 209.742828][ T5929] elan 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 209.755004][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.763730][ T5928] usb 3-1: Product: syz [ 209.770288][ T5928] usb 3-1: Manufacturer: syz [ 209.778070][ T5887] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 209.783341][ T5928] usb 3-1: SerialNumber: syz [ 209.804604][ T5888] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 209.813490][ T5888] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 209.824021][ T5888] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 209.832960][ T5888] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 209.862043][ T5928] usb 3-1: config 0 descriptor?? [ 209.919075][ T5888] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 209.932138][ T5887] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 209.938441][ T5928] usb 2-1: USB disconnect, device number 39 [ 209.949021][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 209.982831][ T5887] usb 5-1: Product: syz [ 209.992164][ T5888] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 210.003317][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 210.019019][ T5887] usb 5-1: Manufacturer: syz [ 210.020100][ T5888] usb 4-1: Product: syz [ 210.028842][ T5888] usb 4-1: Manufacturer: syz [ 210.046792][ T5888] cdc_wdm 4-1:1.0: skipping garbage [ 210.056113][ T5887] cdc_wdm 5-1:1.0: skipping garbage [ 210.061323][ T5887] cdc_wdm 5-1:1.0: skipping garbage [ 210.062469][ T5888] cdc_wdm 4-1:1.0: skipping garbage [ 210.076444][ T5888] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 210.123063][ T5888] cdc_wdm 4-1:1.0: Unknown control protocol [ 210.246164][ T5887] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 210.252123][ T5887] cdc_wdm 5-1:1.0: Unknown control protocol [ 210.339594][ T7606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.414803][ T7606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.521477][ T7610] netlink: 'syz.1.462': attribute type 2 has an invalid length. [ 211.293372][ T5887] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 211.474934][ T5887] usb 1-1: config 0 has no interfaces? [ 211.482734][ T5887] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 211.543376][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.553234][ T5887] usb 1-1: Product: syz [ 211.558518][ T5887] usb 1-1: Manufacturer: syz [ 211.568148][ T5887] usb 1-1: SerialNumber: syz [ 211.595932][ T5887] usb 1-1: config 0 descriptor?? [ 211.604076][ T5843] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 211.796466][ T5843] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 211.807841][ T5843] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 211.864107][ T5843] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 211.896753][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.922605][ T7620] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 211.937527][ T5843] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 212.100722][ T5843] usb 5-1: USB disconnect, device number 41 [ 212.146123][ T7620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.156133][ T7620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.533057][ T5843] usb 4-1: USB disconnect, device number 23 [ 213.002925][ T5843] usb 3-1: USB disconnect, device number 27 [ 213.062810][ T7631] netlink: 16 bytes leftover after parsing attributes in process `syz.3.467'. [ 213.117044][ T7632] loop9: detected capacity change from 0 to 7 [ 213.143012][ T7632] Dev loop9: unable to read RDB block 7 [ 213.265564][ T7632] loop9: unable to read partition table [ 213.288515][ T7632] loop9: partition table beyond EOD, truncated [ 213.306117][ T7632] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 213.341297][ T7634] sctp: [Deprecated]: syz.2.468 (pid 7634) Use of int in maxseg socket option. [ 213.341297][ T7634] Use struct sctp_assoc_value instead [ 213.483798][ T10] usb 1-1: USB disconnect, device number 35 [ 213.890360][ T30] audit: type=1326 audit(1744391586.206:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28af78d169 code=0x7ffc0000 [ 213.960401][ T30] audit: type=1326 audit(1744391586.236:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28af78d169 code=0x7ffc0000 [ 213.988700][ T30] audit: type=1326 audit(1744391586.236:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f28af78d169 code=0x7ffc0000 [ 214.011332][ T30] audit: type=1326 audit(1744391586.236:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28af78d169 code=0x7ffc0000 [ 214.048959][ T30] audit: type=1326 audit(1744391586.236:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28af78d169 code=0x7ffc0000 [ 214.128243][ T30] audit: type=1326 audit(1744391586.246:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f28af78d169 code=0x7ffc0000 [ 214.155228][ T30] audit: type=1326 audit(1744391586.246:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28af78d169 code=0x7ffc0000 [ 214.190568][ T30] audit: type=1326 audit(1744391586.246:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28af78d169 code=0x7ffc0000 [ 214.218784][ T30] audit: type=1326 audit(1744391586.256:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f28af7bfa25 code=0x7ffc0000 [ 214.269031][ T30] audit: type=1326 audit(1744391586.256:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f28af78d169 code=0x7ffc0000 [ 214.463383][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 214.623241][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 214.632592][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 214.644330][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 214.664647][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 214.674764][ T5843] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 214.693818][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.718598][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 214.737916][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.848055][ T5843] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 214.860669][ T5843] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 214.882176][ T5843] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 214.908021][ T5843] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 214.963288][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 214.976221][ T10] usbtmc 3-1:16.0: can't read capabilities [ 214.982106][ T5843] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 215.088350][ T5843] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 215.097686][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 215.108672][ T5843] usb 1-1: Product: syz [ 215.114636][ T5843] usb 1-1: Manufacturer: syz [ 215.131437][ T5843] cdc_wdm 1-1:1.0: skipping garbage [ 215.155893][ T5843] cdc_wdm 1-1:1.0: skipping garbage [ 215.196179][ T5888] usb 2-1: USB disconnect, device number 40 [ 215.228740][ T5843] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 215.243199][ T5928] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 215.261028][ T5843] cdc_wdm 1-1:1.0: Unknown control protocol [ 215.281136][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'. [ 215.290776][ T7667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'. [ 215.308725][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'. [ 215.319355][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'. [ 215.350925][ T7669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.478'. [ 215.394738][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 215.401887][ T7669] netlink: 24 bytes leftover after parsing attributes in process `syz.4.478'. [ 215.421983][ T5928] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.464816][ T7675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.474021][ T7675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.510481][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 215.522310][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 215.524720][ T7669] qrtr: Invalid version 0 [ 215.533665][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 50939, setting to 1024 [ 215.549583][ T5928] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.583638][ T5928] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 215.592926][ T5928] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 215.601348][ T5928] usb 4-1: Manufacturer: syz [ 215.608545][ T5928] usb 4-1: config 0 descriptor?? [ 215.761120][ T7681] pimreg: entered allmulticast mode [ 215.840938][ T5888] usb 4-1: USB disconnect, device number 24 [ 215.883192][ T5928] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 215.983695][ T7686] pimreg: entered allmulticast mode [ 215.991276][ T7686] pimreg: left allmulticast mode [ 216.065235][ T7684] dvmrp0: left allmulticast mode [ 216.070398][ T7684] pimreg: left allmulticast mode [ 216.226960][ T5928] usb 2-1: config 0 has no interfaces? [ 216.242573][ T5928] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 216.251894][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.261247][ T5928] usb 2-1: Product: syz [ 216.265901][ T5928] usb 2-1: Manufacturer: syz [ 216.307185][ T5928] usb 2-1: SerialNumber: syz [ 216.397956][ T5928] usb 2-1: config 0 descriptor?? [ 217.163915][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 217.234451][ T5843] usb 3-1: USB disconnect, device number 28 [ 217.356425][ T10] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 217.369847][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 217.388976][ T10] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 217.428578][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 217.455046][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.505282][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 217.514329][ T10] usb 5-1: invalid MIDI out EP 0 [ 217.570914][ T10] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 217.596606][ T6023] udevd[6023]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.668215][ T5843] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 217.824717][ T5843] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 217.835694][ T5843] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 217.851941][ T5843] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 217.867960][ T5843] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 217.912469][ T5843] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 217.959135][ T10] usb 1-1: USB disconnect, device number 36 [ 217.996259][ T5843] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 218.012375][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 218.013732][ T5928] usb 5-1: USB disconnect, device number 42 [ 218.070087][ T5843] usb 3-1: Product: syz [ 218.078682][ T5843] usb 3-1: Manufacturer: syz [ 218.251272][ T5843] cdc_wdm 3-1:1.0: skipping garbage [ 218.271048][ T5843] cdc_wdm 3-1:1.0: skipping garbage [ 218.280214][ T5843] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 218.287210][ T5843] cdc_wdm 3-1:1.0: Unknown control protocol [ 218.595758][ T7709] team_slave_0: entered promiscuous mode [ 218.601475][ T7709] team_slave_1: entered promiscuous mode [ 218.614986][ T7709] team0: Device macsec1 is already an upper device of the team interface [ 218.674631][ T7709] team_slave_0: left promiscuous mode [ 218.680158][ T7709] team_slave_1: left promiscuous mode [ 218.726133][ T7710] syz.3.486 (7710): drop_caches: 2 [ 218.752325][ T7710] syz.3.486 (7710): drop_caches: 2 [ 219.425079][ T10] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 219.608594][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 219.673290][ T5928] usb 2-1: USB disconnect, device number 41 [ 219.686572][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 219.757919][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 219.797218][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.967943][ T7721] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 220.001851][ T7725] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.009438][ T7725] IPv6: NLM_F_CREATE should be set when creating new route [ 220.016688][ T7725] IPv6: NLM_F_CREATE should be set when creating new route [ 220.023940][ T7725] IPv6: NLM_F_CREATE should be set when creating new route [ 220.036452][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 220.262283][ T7721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.273379][ T7721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.833518][ T5928] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 220.920286][ T7735] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 220.993458][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 221.021914][ T7736] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 221.108348][ T5928] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 221.144713][ T7735] netlink: 'syz.1.491': attribute type 39 has an invalid length. [ 221.322878][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.491'. [ 221.593349][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.602338][ T5928] usb 4-1: Product: syz [ 221.606596][ T5928] usb 4-1: Manufacturer: syz [ 221.612153][ T5928] usb 4-1: SerialNumber: syz [ 221.620958][ T5928] usb 4-1: config 0 descriptor?? [ 221.772920][ T10] usb 3-1: USB disconnect, device number 29 [ 221.870624][ T7732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.880572][ T7732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.188305][ T5843] usb 5-1: USB disconnect, device number 43 [ 222.323264][ T5890] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 222.393493][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 222.473680][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 222.481990][ T5890] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.500021][ T5890] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.510797][ T5890] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 222.529983][ T5890] usb 2-1: config 0 interface 0 has no altsetting 0 [ 222.537203][ T5890] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 222.548672][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.588494][ T10] usb 3-1: config 0 has no interfaces? [ 222.608656][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 222.630300][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.638636][ T5843] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 222.678436][ T5890] usb 2-1: config 0 descriptor?? [ 222.707159][ T10] usb 3-1: Product: syz [ 222.813703][ T10] usb 3-1: Manufacturer: syz [ 222.823267][ T10] usb 3-1: SerialNumber: syz [ 222.845086][ T5843] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 222.863564][ T5843] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 222.921006][ T10] usb 3-1: config 0 descriptor?? [ 222.926483][ T5843] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 222.936008][ T5843] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 222.948869][ T5843] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 222.962824][ T5843] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 222.972992][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 222.981884][ T5843] usb 5-1: Product: syz [ 222.986851][ T5843] usb 5-1: Manufacturer: syz [ 223.008344][ T5843] cdc_wdm 5-1:1.0: skipping garbage [ 223.015577][ T5843] cdc_wdm 5-1:1.0: skipping garbage [ 223.035581][ T5843] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 223.045101][ T5890] usbhid 2-1:0.0: can't add hid device: -71 [ 223.055768][ T5890] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 223.076943][ T5843] cdc_wdm 5-1:1.0: Unknown control protocol [ 223.096724][ T5890] usb 2-1: USB disconnect, device number 42 [ 223.165503][ T7743] FAULT_INJECTION: forcing a failure. [ 223.165503][ T7743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.179038][ T7743] CPU: 0 UID: 0 PID: 7743 Comm: syz.2.493 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 223.179060][ T7743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 223.179071][ T7743] Call Trace: [ 223.179078][ T7743] [ 223.179086][ T7743] dump_stack_lvl+0x241/0x360 [ 223.179118][ T7743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.179142][ T7743] ? __pfx__printk+0x10/0x10 [ 223.179177][ T7743] should_fail_ex+0x424/0x570 [ 223.179200][ T7743] strncpy_from_user+0x36/0x280 [ 223.179221][ T7743] getname_flags+0xf0/0x530 [ 223.179252][ T7743] do_sys_openat2+0xbf/0x1d0 [ 223.179278][ T7743] ? __pfx_do_sys_openat2+0x10/0x10 [ 223.179306][ T7743] ? __x64_sys_openat+0x208/0x2a0 [ 223.179328][ T7743] ? __x64_sys_openat+0x1b7/0x2a0 [ 223.179356][ T7743] __x64_sys_openat+0x249/0x2a0 [ 223.179381][ T7743] ? __pfx___x64_sys_openat+0x10/0x10 [ 223.179409][ T7743] ? do_syscall_64+0xb6/0x230 [ 223.179428][ T7743] do_syscall_64+0xf3/0x230 [ 223.179443][ T7743] ? clear_bhb_loop+0x45/0xa0 [ 223.179458][ T7743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.179471][ T7743] RIP: 0033:0x7fdf5618d169 [ 223.179482][ T7743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.179493][ T7743] RSP: 002b:00007fdf56f54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 223.179508][ T7743] RAX: ffffffffffffffda RBX: 00007fdf563a6160 RCX: 00007fdf5618d169 [ 223.179518][ T7743] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 223.179535][ T7743] RBP: 00007fdf56f54090 R08: 0000000000000000 R09: 0000000000000000 [ 223.179543][ T7743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.179551][ T7743] R13: 0000000000000000 R14: 00007fdf563a6160 R15: 00007fdf564cfa28 [ 223.179572][ T7743] [ 223.364413][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.438025][ T5843] usb 4-1: USB disconnect, device number 25 [ 223.541759][ T7757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.554615][ T7757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.123324][ T5928] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 224.433310][ T5928] usb 4-1: config 0 has no interfaces? [ 224.445548][ T5928] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 224.455788][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.481481][ T5843] usb 3-1: USB disconnect, device number 30 [ 224.482833][ T5928] usb 4-1: Product: syz [ 224.499255][ T5928] usb 4-1: Manufacturer: syz [ 224.539026][ T5928] usb 4-1: SerialNumber: syz [ 224.586917][ T5928] usb 4-1: config 0 descriptor?? [ 226.816218][ T10] usb 4-1: USB disconnect, device number 26 [ 227.117205][ T7782] sctp: [Deprecated]: syz.3.504 (pid 7782) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.117205][ T7782] Use struct sctp_sack_info instead [ 227.370219][ T5928] usb 5-1: USB disconnect, device number 44 [ 227.879985][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.503'. [ 227.973246][ T5929] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 228.227364][ T5929] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 228.294074][ T5929] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 228.343207][ T5890] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 228.383298][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 228.424711][ T5929] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 228.466961][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.501820][ T7792] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 228.522539][ T5929] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 228.567660][ T9] usb 4-1: config 0 has an invalid interface number: 37 but max is 0 [ 228.578230][ T5890] usb 5-1: no configurations [ 228.615474][ T9] usb 4-1: config 0 has no interface number 0 [ 228.637670][ T5890] usb 5-1: can't read configurations, error -22 [ 228.745726][ T9] usb 4-1: New USB device found, idVendor=2639, idProduct=0003, bcdDevice=fd.62 [ 228.755454][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.771053][ T9] usb 4-1: Product: syz [ 228.786267][ T9] usb 4-1: Manufacturer: syz [ 228.791490][ T9] usb 4-1: SerialNumber: syz [ 228.811457][ T9] usb 4-1: config 0 descriptor?? [ 228.862399][ T7803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.873540][ T5890] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 228.889538][ T7803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.029509][ T5928] usb 4-1: USB disconnect, device number 27 [ 229.116385][ T5890] usb 5-1: no configurations [ 229.131581][ T5890] usb 5-1: can't read configurations, error -22 [ 229.157311][ T5890] usb usb5-port1: attempt power cycle [ 229.545337][ T5890] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 229.575475][ T5890] usb 5-1: no configurations [ 229.580190][ T5890] usb 5-1: can't read configurations, error -22 [ 229.707878][ T7805] delete_channel: no stack [ 229.779214][ T5890] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 229.815312][ T5890] usb 5-1: no configurations [ 229.820361][ T5890] usb 5-1: can't read configurations, error -22 [ 229.829890][ T5890] usb usb5-port1: unable to enumerate USB device [ 230.013546][ T5928] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 230.173460][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 230.192407][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.210415][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.223181][ T5928] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 230.232472][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.246618][ T5928] usb 4-1: config 0 descriptor?? [ 230.500684][ T5928] usbhid 4-1:0.0: can't add hid device: -71 [ 230.524432][ T5928] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 230.572500][ T5928] usb 4-1: USB disconnect, device number 28 [ 230.749320][ T7815] netlink: 24 bytes leftover after parsing attributes in process `syz.4.512'. [ 230.833551][ T5929] usb 1-1: USB disconnect, device number 37 [ 230.938762][ T5928] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 230.942087][ T7818] vlan2: entered promiscuous mode [ 231.266027][ T5928] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.277109][ T5928] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 231.396344][ T5928] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 231.426234][ T5928] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 231.437127][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.446923][ T5928] usb 4-1: Product: syz [ 231.455278][ T5928] usb 4-1: Manufacturer: syz [ 231.475115][ T5928] usb 4-1: SerialNumber: syz [ 231.596483][ T5929] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 231.809926][ T5928] usb 4-1: cannot find UAC_HEADER [ 231.829772][ T5929] usb 1-1: config 0 has no interfaces? [ 231.838155][ T5928] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 231.869155][ T5928] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 231.877219][ T5928] usb 4-1: MIDIStreaming interface descriptor not found [ 231.895046][ T5929] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 231.904432][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.913542][ T5929] usb 1-1: Product: syz [ 231.923086][ T5929] usb 1-1: Manufacturer: syz [ 231.929930][ T5929] usb 1-1: SerialNumber: syz [ 231.944265][ T5929] usb 1-1: config 0 descriptor?? [ 231.953386][ T9] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 231.955142][ T5928] usb 4-1: USB disconnect, device number 29 [ 232.155508][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 232.166104][ T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 232.183389][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 232.198742][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 232.216740][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 232.239435][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 232.260008][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 232.265957][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.294155][ T9] usb 5-1: Product: syz [ 232.395167][ T9] usb 5-1: Manufacturer: syz [ 232.408011][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 232.414005][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 232.499949][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 232.533037][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 232.864768][ T7839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.024577][ T7839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.347361][ T7846] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 233.364736][ T7846] tipc: Enabling of bearer rejected, failed to enable media [ 233.973368][ T5928] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 234.195230][ T5928] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 234.203778][ T5928] usb 2-1: can't read configurations, error -61 [ 234.333544][ T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 234.759730][ T5889] usb 5-1: USB disconnect, device number 49 [ 234.773181][ T5929] usb 1-1: USB disconnect, device number 38 [ 234.871426][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 234.904261][ T5928] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 234.940547][ T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 234.983361][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 235.067184][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.109245][ T7857] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 235.122807][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 235.213852][ T5928] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 235.243917][ T5928] usb 2-1: can't read configurations, error -61 [ 235.260575][ T5928] usb usb2-port1: attempt power cycle [ 235.336783][ T7856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.353558][ T7856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.613270][ T5928] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 235.653172][ T5928] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 235.660855][ T5928] usb 2-1: can't read configurations, error -61 [ 235.793291][ T5928] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 235.829956][ T5928] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 235.837729][ T5928] usb 2-1: can't read configurations, error -61 [ 235.844704][ T5928] usb usb2-port1: unable to enumerate USB device [ 237.019254][ T5928] usb 4-1: USB disconnect, device number 30 [ 237.520505][ T7894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.534'. [ 237.529646][ T7894] netlink: 36 bytes leftover after parsing attributes in process `syz.1.534'. [ 237.843204][ T5928] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 238.003211][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 238.304684][ T5928] usb 4-1: unable to get BOS descriptor or descriptor too short [ 238.320439][ T5928] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.334416][ T5928] usb 4-1: config 0 has no interfaces? [ 238.344414][ T5928] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 238.355934][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.366844][ T5928] usb 4-1: Product: syz [ 238.513339][ T5889] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 238.552808][ T5928] usb 4-1: Manufacturer: syz [ 238.575639][ T5928] usb 4-1: SerialNumber: syz [ 238.600437][ T5928] usb 4-1: config 0 descriptor?? [ 238.676407][ T5889] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 238.686263][ T5889] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 238.708208][ T5889] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 238.744729][ T24] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 238.838824][ T5889] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 238.854321][ T5889] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 238.890094][ T5889] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 238.902881][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 238.917277][ T5889] usb 2-1: Product: syz [ 238.922364][ T5889] usb 2-1: Manufacturer: syz [ 238.945921][ T24] usb 5-1: config 0 has no interfaces? [ 238.957303][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 238.966505][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.978331][ T24] usb 5-1: Product: syz [ 238.981394][ T5889] cdc_wdm 2-1:1.0: skipping garbage [ 238.982521][ T24] usb 5-1: Manufacturer: syz [ 238.992548][ T5889] cdc_wdm 2-1:1.0: skipping garbage [ 239.022081][ T24] usb 5-1: SerialNumber: syz [ 239.032432][ T24] usb 5-1: config 0 descriptor?? [ 239.062932][ T5889] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 239.075035][ T5889] cdc_wdm 2-1:1.0: Unknown control protocol [ 239.295469][ T7905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.583786][ T7905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.378845][ T5928] usb 4-1: USB disconnect, device number 31 [ 241.113251][ T5889] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 241.350687][ T9] usb 2-1: USB disconnect, device number 47 [ 241.358125][ T5889] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 241.389336][ T5889] usb 1-1: can't read configurations, error -61 [ 241.563207][ T5889] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 241.823301][ T24] usb 5-1: USB disconnect, device number 50 [ 241.903288][ T5929] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 242.133876][ T5929] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 242.183464][ T5929] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 242.187305][ T5889] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 242.206524][ T5889] usb 1-1: can't read configurations, error -61 [ 242.217661][ T5889] usb usb1-port1: attempt power cycle [ 242.236466][ T5929] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 242.267590][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.300759][ T7925] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 242.332886][ T5929] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 242.529619][ T7925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.538746][ T7925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.578709][ T5889] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 242.617010][ T5889] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 242.626892][ T5889] usb 1-1: can't read configurations, error -61 [ 242.764720][ T5889] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 242.827097][ T5889] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 242.854618][ T5889] usb 1-1: can't read configurations, error -61 [ 242.875655][ T5889] usb usb1-port1: unable to enumerate USB device [ 243.583246][ T5890] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 243.758039][ T5890] usb 5-1: config 0 has no interfaces? [ 243.798624][ T5890] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 243.826604][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.869935][ T5890] usb 5-1: Product: syz [ 243.890117][ T5890] usb 5-1: Manufacturer: syz [ 243.900915][ T5890] usb 5-1: SerialNumber: syz [ 243.958452][ T5890] usb 5-1: config 0 descriptor?? [ 244.803214][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 244.881359][ T5890] usb 2-1: USB disconnect, device number 48 [ 245.023454][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 245.075934][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 245.094476][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.111555][ T9] usb 1-1: Product: syz [ 245.119442][ T9] usb 1-1: Manufacturer: syz [ 245.136981][ T9] usb 1-1: SerialNumber: syz [ 245.158638][ T7976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.562'. [ 245.175166][ T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input22 [ 245.202965][ T7976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.562'. [ 245.246732][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 245.358861][ T7976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.562'. [ 245.386915][ T7969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.397005][ T7976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.562'. [ 245.413570][ T7969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.429388][ T7969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.449186][ T7969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.492989][ T7969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.532746][ T7969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.562756][ T7969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.591226][ T7969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.636056][ T7969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.660873][ T7969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.746359][ T7976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.562'. [ 245.756695][ T7976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.562'. [ 246.029948][ T7984] team_slave_0: entered promiscuous mode [ 246.035705][ T7984] team_slave_1: entered promiscuous mode [ 246.043965][ T7984] team0: Device macsec1 is already an upper device of the team interface [ 246.094141][ T7984] team_slave_0: left promiscuous mode [ 246.099655][ T7984] team_slave_1: left promiscuous mode [ 246.322691][ T7985] syz.1.563 (7985): drop_caches: 2 [ 246.383721][ T5890] usb 5-1: USB disconnect, device number 51 [ 246.425556][ T7985] syz.1.563 (7985): drop_caches: 2 [ 246.984789][ T5890] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 246.998599][ T5195] bcm5974 1-1:1.0: could not read from device [ 247.055024][ T5195] bcm5974 1-1:1.0: could not read from device [ 247.072249][ T5195] bcm5974 1-1:1.0: could not read from device [ 247.081951][ T9] usb 1-1: USB disconnect, device number 43 [ 247.165920][ T5890] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 247.176598][ T5890] usb 5-1: can't read configurations, error -61 [ 247.313338][ T5890] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 247.439794][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 247.439807][ T30] audit: type=1326 audit(1744391619.756:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7997 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0cd8d169 code=0x7ffc0000 [ 247.472595][ T7998] xt_ecn: cannot match TCP bits for non-tcp packets [ 247.481030][ T8000] xt_ecn: cannot match TCP bits for non-tcp packets [ 247.503780][ T30] audit: type=1326 audit(1744391619.786:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7997 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9c0cd8d169 code=0x7ffc0000 [ 247.605469][ T30] audit: type=1326 audit(1744391619.786:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7997 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0cd8d169 code=0x7ffc0000 [ 247.628401][ T30] audit: type=1326 audit(1744391619.786:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7997 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f9c0cd8d169 code=0x7ffc0000 [ 247.657679][ T5890] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 247.665825][ T5890] usb 5-1: can't read configurations, error -61 [ 247.672997][ T30] audit: type=1326 audit(1744391619.786:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7997 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0cd8d169 code=0x7ffc0000 [ 247.695077][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.717790][ T5890] usb usb5-port1: attempt power cycle [ 247.755751][ T30] audit: type=1326 audit(1744391619.786:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7997 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9c0cd8d169 code=0x7ffc0000 [ 247.801628][ T30] audit: type=1326 audit(1744391619.786:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7997 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0cd8d169 code=0x7ffc0000 [ 247.868510][ T30] audit: type=1326 audit(1744391619.786:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7997 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c0cd8d169 code=0x7ffc0000 [ 247.946187][ T30] audit: type=1326 audit(1744391619.786:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7997 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0cd8d169 code=0x7ffc0000 [ 247.976605][ T30] audit: type=1326 audit(1744391619.786:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7997 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9c0cd8d169 code=0x7ffc0000 [ 247.998560][ C1] vkms_vblank_simulate: vblank timer overrun [ 248.073619][ T5890] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 248.113458][ T5889] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 248.131479][ T5890] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 248.140241][ T5890] usb 5-1: can't read configurations, error -61 [ 248.283308][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 248.288437][ T5890] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 248.303231][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 248.311349][ T5889] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 240, changing to 11 [ 248.335876][ T5889] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.366368][ T5889] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 248.473346][ T5889] usb 2-1: config 0 interface 0 has no altsetting 0 [ 248.485915][ T5889] usb 2-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 248.557234][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 248.615438][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 248.625495][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.636287][ T5889] usb 2-1: config 0 descriptor?? [ 248.758403][ T5890] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 248.766088][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 248.803232][ T5890] usb 5-1: can't read configurations, error -61 [ 248.842032][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.854028][ T5890] usb usb5-port1: unable to enumerate USB device [ 248.966476][ T8009] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 248.973896][ T5928] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 249.036064][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 249.196555][ T5928] usb 4-1: config 0 has no interfaces? [ 249.206397][ T5928] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 249.215763][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.229084][ T5928] usb 4-1: Product: syz [ 249.241722][ T5928] usb 4-1: Manufacturer: syz [ 249.263417][ T8009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.312810][ T5889] elecom 0003:056E:011C.0006: item fetching failed at offset 2/5 [ 249.329452][ T8009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.351777][ T5928] usb 4-1: SerialNumber: syz [ 249.368409][ T5889] elecom 0003:056E:011C.0006: probe with driver elecom failed with error -22 [ 249.392234][ T5928] usb 4-1: config 0 descriptor?? [ 249.449985][ T5889] usb 2-1: USB disconnect, device number 49 [ 250.303257][ T5889] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 250.393235][ T5928] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 250.443192][ T5889] usb 2-1: device descriptor read/64, error -71 [ 250.569971][ T5928] usb 5-1: config 0 has no interfaces? [ 250.586718][ T5928] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 250.598436][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.609724][ T5928] usb 5-1: Product: syz [ 250.616162][ T5928] usb 5-1: Manufacturer: syz [ 250.624677][ T5928] usb 5-1: SerialNumber: syz [ 250.637979][ T5928] usb 5-1: config 0 descriptor?? [ 250.695392][ T5889] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 250.834358][ T5889] usb 2-1: device descriptor read/64, error -71 [ 250.962770][ T5889] usb usb2-port1: attempt power cycle [ 251.029002][ T9] usb 1-1: USB disconnect, device number 44 [ 251.303212][ T5889] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 251.323843][ T5889] usb 2-1: device descriptor read/8, error -71 [ 251.563405][ T5889] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 251.582019][ T5928] usb 4-1: USB disconnect, device number 32 [ 251.598549][ T5889] usb 2-1: device descriptor read/8, error -71 [ 251.645255][ T8031] FAULT_INJECTION: forcing a failure. [ 251.645255][ T8031] name failslab, interval 1, probability 0, space 0, times 0 [ 251.658986][ T8031] CPU: 1 UID: 0 PID: 8031 Comm: syz.3.578 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 251.659010][ T8031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 251.659034][ T8031] Call Trace: [ 251.659041][ T8031] [ 251.659048][ T8031] dump_stack_lvl+0x241/0x360 [ 251.659080][ T8031] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.659095][ T8031] ? __pfx__printk+0x10/0x10 [ 251.659111][ T8031] ? __pfx___might_resched+0x10/0x10 [ 251.659125][ T8031] should_fail_ex+0x424/0x570 [ 251.659139][ T8031] should_failslab+0xac/0x100 [ 251.659154][ T8031] kmem_cache_alloc_noprof+0x78/0x390 [ 251.659167][ T8031] ? io_submit_one+0x156/0x18b0 [ 251.659179][ T8031] io_submit_one+0x156/0x18b0 [ 251.659193][ T8031] ? __lock_acquire+0xad5/0xd80 [ 251.659206][ T8031] ? __pfx_io_submit_one+0x10/0x10 [ 251.659223][ T8031] ? __might_fault+0xaa/0x120 [ 251.659239][ T8031] __se_sys_io_submit+0x17a/0x2e0 [ 251.659253][ T8031] ? __pfx___se_sys_io_submit+0x10/0x10 [ 251.659265][ T8031] ? ksys_write+0x275/0x2d0 [ 251.659282][ T8031] ? do_syscall_64+0xb6/0x230 [ 251.659296][ T8031] do_syscall_64+0xf3/0x230 [ 251.659307][ T8031] ? clear_bhb_loop+0x45/0xa0 [ 251.659326][ T8031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.659339][ T8031] RIP: 0033:0x7f9c0cd8d169 [ 251.659349][ T8031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.659357][ T8031] RSP: 002b:00007f9c0dbda038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 251.659369][ T8031] RAX: ffffffffffffffda RBX: 00007f9c0cfa5fa0 RCX: 00007f9c0cd8d169 [ 251.659376][ T8031] RDX: 00002000000003c0 RSI: 0000000000000019 RDI: 00007f9c0dbb9000 [ 251.659382][ T8031] RBP: 00007f9c0dbda090 R08: 0000000000000000 R09: 0000000000000000 [ 251.659388][ T8031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.659394][ T8031] R13: 0000000000000000 R14: 00007f9c0cfa5fa0 R15: 00007f9c0d0cfa28 [ 251.659409][ T8031] [ 251.859109][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.866672][ T5889] usb usb2-port1: unable to enumerate USB device [ 252.283228][ T5889] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 252.323227][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 252.413275][ T5889] usb 1-1: device descriptor read/64, error -71 [ 252.475144][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 252.483956][ T9] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 252.494366][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 252.503416][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 252.514410][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 252.527306][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 252.536566][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 252.544637][ T9] usb 4-1: Product: syz [ 252.548799][ T9] usb 4-1: Manufacturer: syz [ 252.558365][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 252.563642][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 252.569893][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 252.576018][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 252.653428][ T5889] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 252.783436][ T5889] usb 1-1: device descriptor read/64, error -71 [ 252.874826][ T8039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.888636][ T8039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.896811][ T5889] usb usb1-port1: attempt power cycle [ 253.141058][ T5928] usb 5-1: USB disconnect, device number 56 [ 253.284641][ T5889] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 253.345376][ T5889] usb 1-1: device descriptor read/8, error -71 [ 253.633250][ T5889] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 253.653954][ T5889] usb 1-1: device descriptor read/8, error -71 [ 253.745653][ T5928] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 253.763673][ T5889] usb usb1-port1: unable to enumerate USB device [ 253.948325][ T5928] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 253.956083][ T5928] usb 5-1: can't read configurations, error -61 [ 254.103225][ T5928] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 254.164142][ T5889] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 254.279882][ T5928] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 254.291678][ T5928] usb 5-1: can't read configurations, error -61 [ 254.308581][ T5928] usb usb5-port1: attempt power cycle [ 254.324315][ T5889] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 254.347538][ T5889] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 254.367596][ T5889] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 254.400252][ T5889] usb 2-1: config 0 interface 0 has no altsetting 0 [ 254.419954][ T5889] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 254.438245][ T5889] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 254.458981][ T5889] usb 2-1: config 0 interface 0 has no altsetting 0 [ 254.478155][ T5889] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 254.492610][ T5889] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 254.503745][ T5889] usb 2-1: config 0 interface 0 has no altsetting 0 [ 254.530728][ T5889] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 254.540066][ T5889] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 254.551520][ T5889] usb 2-1: config 0 interface 0 has no altsetting 0 [ 254.559959][ T5889] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 254.569579][ T5889] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 254.585673][ T5889] usb 2-1: config 0 interface 0 has no altsetting 0 [ 254.596439][ T5889] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 254.605848][ T5889] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 254.617361][ T5889] usb 2-1: config 0 interface 0 has no altsetting 0 [ 254.625613][ T5889] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 254.637049][ T5889] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 254.649006][ T5889] usb 2-1: config 0 interface 0 has no altsetting 0 [ 254.653291][ T5928] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 254.666504][ T5889] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 254.676211][ T5889] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 254.688066][ T5889] usb 2-1: config 0 interface 0 has no altsetting 0 [ 254.699999][ T5889] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 254.709328][ T5889] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 254.719812][ T5889] usb 2-1: Product: syz [ 254.726959][ T5889] usb 2-1: Manufacturer: syz [ 254.733418][ T5889] usb 2-1: SerialNumber: syz [ 254.739342][ T5928] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 254.751287][ T5928] usb 5-1: can't read configurations, error -61 [ 254.761651][ T5889] usb 2-1: config 0 descriptor?? [ 254.781266][ T5889] yurex 2-1:0.0: USB YUREX device now attached to Yurex #1 [ 254.883370][ T5928] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 254.916974][ T5928] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 254.924690][ T5928] usb 5-1: can't read configurations, error -61 [ 254.931237][ T5928] usb usb5-port1: unable to enumerate USB device [ 255.105144][ T8049] FAULT_INJECTION: forcing a failure. [ 255.105144][ T8049] name failslab, interval 1, probability 0, space 0, times 0 [ 255.118158][ T8049] CPU: 1 UID: 0 PID: 8049 Comm: syz.0.585 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 255.118182][ T8049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 255.118193][ T8049] Call Trace: [ 255.118202][ T8049] [ 255.118209][ T8049] dump_stack_lvl+0x241/0x360 [ 255.118241][ T8049] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.118266][ T8049] ? __pfx__printk+0x10/0x10 [ 255.118303][ T8049] should_fail_ex+0x424/0x570 [ 255.118328][ T8049] should_failslab+0xac/0x100 [ 255.118353][ T8049] __kmalloc_cache_noprof+0x73/0x370 [ 255.118374][ T8049] ? sctp_add_bind_addr+0x89/0x3a0 [ 255.118390][ T8049] sctp_add_bind_addr+0x89/0x3a0 [ 255.118405][ T8049] sctp_copy_local_addr_list+0x313/0x500 [ 255.118419][ T8049] ? sctp_copy_local_addr_list+0xad/0x500 [ 255.118440][ T8049] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 255.118465][ T8049] ? sctp_v6_is_any+0x60/0x70 [ 255.118490][ T8049] ? sctp_copy_one_addr+0x94/0x360 [ 255.118516][ T8049] sctp_bind_addr_copy+0xad/0x3b0 [ 255.118531][ T8049] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 255.118545][ T8049] sctp_connect_new_asoc+0x337/0x700 [ 255.118556][ T8049] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 255.118569][ T8049] ? sctp_get_af_specific+0x2a/0x80 [ 255.118585][ T8049] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 255.118606][ T8049] __sctp_connect+0x6ab/0xe60 [ 255.118636][ T8049] ? __pfx___sctp_connect+0x10/0x10 [ 255.118660][ T8049] ? _copy_from_user+0x95/0xb0 [ 255.118677][ T8049] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 255.118689][ T8049] sctp_getsockopt_connectx3+0x46e/0x730 [ 255.118701][ T8049] ? __local_bh_enable_ip+0x168/0x200 [ 255.118713][ T8049] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 255.118725][ T8049] ? __local_bh_enable_ip+0x168/0x200 [ 255.118742][ T8049] ? sctp_getsockopt+0x13a/0xbb0 [ 255.118766][ T8049] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 255.118795][ T8049] sctp_getsockopt+0x8de/0xbb0 [ 255.118818][ T8049] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 255.118835][ T8049] do_sock_getsockopt+0x391/0x740 [ 255.118848][ T8049] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 255.118858][ T8049] ? __pfx_do_sys_openat2+0x10/0x10 [ 255.118883][ T8049] __x64_sys_getsockopt+0x2a3/0x370 [ 255.118909][ T8049] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 255.118950][ T8049] ? do_syscall_64+0xb6/0x230 [ 255.119007][ T8049] do_syscall_64+0xf3/0x230 [ 255.119030][ T8049] ? clear_bhb_loop+0x45/0xa0 [ 255.119049][ T8049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.119064][ T8049] RIP: 0033:0x7f28af78d169 [ 255.119079][ T8049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.119092][ T8049] RSP: 002b:00007f28b06ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 255.119111][ T8049] RAX: ffffffffffffffda RBX: 00007f28af9a5fa0 RCX: 00007f28af78d169 [ 255.119123][ T8049] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 255.119134][ T8049] RBP: 00007f28b06ac090 R08: 0000200000000080 R09: 0000000000000000 [ 255.119145][ T8049] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000002 [ 255.119156][ T8049] R13: 0000000000000000 R14: 00007f28af9a5fa0 R15: 00007f28afacfa28 [ 255.119175][ T8049] [ 255.469161][ T5928] usb 4-1: USB disconnect, device number 33 [ 255.708087][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.714451][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.771498][ T8050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.787847][ T8050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.801897][ T8050] fuse: Bad value for 'fd' [ 255.809989][ T8050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.821825][ T8050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.913278][ T5890] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 256.067359][ T5890] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 256.084461][ T5890] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 256.101103][ T5890] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 256.113152][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.157491][ T8058] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 256.171485][ T5890] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 256.379048][ T8058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.388094][ T8058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.664089][ T5928] usb 2-1: USB disconnect, device number 54 [ 257.687242][ T5928] yurex 2-1:0.0: USB YUREX #1 now disconnected [ 258.153246][ T5928] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 258.307258][ T5928] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 258.318970][ T5928] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 258.330010][ T5928] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 258.342599][ T5928] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 258.356436][ T5928] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 258.369228][ T5928] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 258.378453][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 258.386478][ T5928] usb 2-1: Product: syz [ 258.390649][ T5928] usb 2-1: Manufacturer: syz [ 258.401157][ T5928] cdc_wdm 2-1:1.0: skipping garbage [ 258.406502][ T5928] cdc_wdm 2-1:1.0: skipping garbage [ 258.413341][ T5928] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 258.419675][ T5928] cdc_wdm 2-1:1.0: Unknown control protocol [ 258.617039][ T9] usb 4-1: USB disconnect, device number 34 [ 258.741513][ T8091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.750685][ T8091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.293351][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 259.458976][ T9] usb 4-1: config 0 has no interfaces? [ 259.477503][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 259.488930][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.505948][ T9] usb 4-1: Product: syz [ 259.511124][ T9] usb 4-1: Manufacturer: syz [ 259.525529][ T9] usb 4-1: SerialNumber: syz [ 259.549027][ T9] usb 4-1: config 0 descriptor?? [ 260.113665][ T9] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 260.515879][ T9] usb 5-1: config 0 has no interfaces? [ 260.649488][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 260.660056][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.679295][ T9] usb 5-1: Product: syz [ 260.692127][ T9] usb 5-1: Manufacturer: syz [ 260.708198][ T9] usb 5-1: SerialNumber: syz [ 260.727064][ T9] usb 5-1: config 0 descriptor?? [ 260.834594][ T5929] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 260.998841][ T5929] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 261.013323][ T5929] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 261.024006][ T5929] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 261.033467][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.051840][ T8110] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 261.068698][ T5929] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 261.273489][ T5929] usb 1-1: USB disconnect, device number 49 [ 261.403755][ T6023] udevd[6023]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.543594][ T5889] usb 2-1: USB disconnect, device number 55 [ 261.670097][ T8112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.706769][ T8112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.714919][ T5929] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 261.876713][ T5929] usb 1-1: Invalid ep0 maxpacket: 64 [ 261.983225][ T5889] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 262.003412][ T5929] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 262.104726][ T9] usb 4-1: USB disconnect, device number 35 [ 262.153522][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 262.166497][ T5889] usb 2-1: config 0 has an invalid interface number: 231 but max is 1 [ 262.166886][ T5929] usb 1-1: Invalid ep0 maxpacket: 64 [ 262.184044][ T5929] usb usb1-port1: attempt power cycle [ 262.216792][ T5889] usb 2-1: config 0 has no interface number 1 [ 262.227557][ T5889] usb 2-1: too many endpoints for config 0 interface 231 altsetting 15: 203, using maximum allowed: 30 [ 262.239626][ T5889] usb 2-1: config 0 interface 231 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 203 [ 262.257008][ T5889] usb 2-1: config 0 interface 231 has no altsetting 0 [ 262.268608][ T5889] usb 2-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 262.282697][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.291128][ T5889] usb 2-1: Product: syz [ 262.311155][ T5889] usb 2-1: Manufacturer: syz [ 262.315921][ T5889] usb 2-1: SerialNumber: syz [ 262.336962][ T5889] usb 2-1: config 0 descriptor?? [ 262.533213][ T5929] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 262.555772][ T5929] usb 1-1: Invalid ep0 maxpacket: 64 [ 262.657153][ T5889] usb 2-1: Could not set interface, error -71 [ 262.668320][ T5889] usb 2-1: USB disconnect, device number 56 [ 262.703277][ T5929] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 262.726228][ T5929] usb 1-1: Invalid ep0 maxpacket: 64 [ 262.731803][ T5929] usb usb1-port1: unable to enumerate USB device [ 263.163202][ T5929] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 263.325532][ T5929] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 263.377833][ T24] usb 5-1: USB disconnect, device number 61 [ 263.409563][ T5929] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 263.429306][ T5929] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 263.439198][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.459008][ T8120] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 263.470132][ T5929] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 263.513425][ T5889] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 263.716989][ T8120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.734107][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 263.742694][ T5889] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 263.771544][ T5889] usb 2-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 263.796435][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.811356][ T5889] usb 2-1: Product: syz [ 263.816977][ T8120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.839226][ T5889] usb 2-1: Manufacturer: syz [ 263.852276][ T5889] usb 2-1: SerialNumber: syz [ 263.897969][ T5889] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input27 [ 264.149208][ T5889] bcm5974 2-1:1.0: could not read from device [ 264.168471][ T5195] bcm5974 2-1:1.0: could not read from device [ 264.192245][ T5889] input: failed to attach handler mousedev to device input27, error: -5 [ 264.193662][ T24] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 264.301760][ T5889] usb 2-1: USB disconnect, device number 57 [ 264.308502][ T5195] bcm5974 2-1:1.0: could not read from device [ 264.355801][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 264.379177][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 264.387992][ T24] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 264.401886][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 264.415209][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 264.466395][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 264.479710][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 264.490134][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 264.508983][ T24] usb 5-1: Product: syz [ 264.514000][ T24] usb 5-1: Manufacturer: syz [ 264.530017][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 264.539753][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 264.548616][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 264.555980][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 264.587202][ T9] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 264.606915][ T9] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 264.636790][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 264.647067][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.707189][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 264.752971][ T9] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 264.789503][ T6685] udevd[6685]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 265.111596][ T8144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.120882][ T8144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.257231][ T8140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.269176][ T8140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.890988][ T24] usb 4-1: USB disconnect, device number 36 [ 266.623308][ T5928] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 266.673343][ T24] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 267.066105][ T5928] usb 2-1: config 0 has no interfaces? [ 267.080439][ T5928] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 267.097965][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.118456][ T5928] usb 2-1: Product: syz [ 267.122653][ T5928] usb 2-1: Manufacturer: syz [ 267.141862][ T5928] usb 2-1: SerialNumber: syz [ 267.161659][ T5928] usb 2-1: config 0 descriptor?? [ 267.273802][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 267.281555][ T24] usb 4-1: can't read configurations, error -61 [ 267.359661][ T5928] usb 5-1: USB disconnect, device number 62 [ 267.413255][ T24] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 267.569402][ T8159] bridge0: entered promiscuous mode [ 267.583675][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 267.591423][ T24] usb 4-1: can't read configurations, error -61 [ 267.630825][ T8155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.639664][ T8155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.665627][ T24] usb usb4-port1: attempt power cycle [ 267.672574][ T8159] bridge0: port 3(macsec1) entered blocking state [ 267.684256][ T8159] bridge0: port 3(macsec1) entered disabled state [ 267.699679][ T8159] macsec1: entered allmulticast mode [ 267.705999][ T8159] bridge0: entered allmulticast mode [ 267.717424][ T8159] macsec1: left allmulticast mode [ 267.722587][ T8159] bridge0: left allmulticast mode [ 267.731378][ T8159] bridge0: left promiscuous mode [ 268.013223][ T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 268.095141][ T5928] usb 1-1: USB disconnect, device number 54 [ 268.185137][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 268.195803][ T24] usb 4-1: can't read configurations, error -61 [ 268.299380][ T8169] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 268.393279][ T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 268.448854][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 268.489583][ T24] usb 4-1: can't read configurations, error -61 [ 268.503527][ T24] usb usb4-port1: unable to enumerate USB device [ 268.648337][ T5928] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 268.813327][ T5928] usb 1-1: Using ep0 maxpacket: 32 [ 268.820729][ T5928] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 268.835303][ T5928] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 268.846634][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 268.855129][ T5928] usb 1-1: Product: syz [ 268.859424][ T5928] usb 1-1: Manufacturer: syz [ 268.879822][ T5928] usb 1-1: SerialNumber: syz [ 268.982539][ T5889] usb 2-1: USB disconnect, device number 58 [ 269.006410][ T5928] usb 1-1: config 0 descriptor?? [ 269.018379][ T8167] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 269.027273][ T5928] hub 1-1:0.0: bad descriptor, ignoring hub [ 269.033295][ T5928] hub 1-1:0.0: probe with driver hub failed with error -5 [ 269.663324][ T24] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 270.017229][ T5929] usb 1-1: USB disconnect, device number 55 [ 270.461321][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 270.500650][ T24] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 270.533182][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 270.542199][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 270.554015][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 270.567868][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 270.577445][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 270.585479][ T24] usb 2-1: Product: syz [ 270.589649][ T24] usb 2-1: Manufacturer: syz [ 270.622824][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 270.633198][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 270.643815][ T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 270.649735][ T24] cdc_wdm 2-1:1.0: Unknown control protocol [ 270.849236][ T8194] loop8: detected capacity change from 0 to 7 [ 270.862433][ T8194] Dev loop8: unable to read RDB block 7 [ 270.869267][ T8194] loop8: AHDI p1 p3 p4 [ 270.874668][ T8194] loop8: partition table partially beyond EOD, truncated [ 270.884742][ T8194] loop8: p1 start 975770946 is beyond EOD, truncated [ 270.891557][ T8194] loop8: p3 start 6514546 is beyond EOD, truncated [ 270.989250][ T8197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.999864][ T8197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.718672][ T8207] team_slave_0: entered promiscuous mode [ 271.724451][ T8207] team_slave_1: entered promiscuous mode [ 271.745165][ T8207] team0: Device macsec1 is already an upper device of the team interface [ 271.836836][ T8208] syz.3.634 (8208): drop_caches: 2 [ 271.855885][ T8208] syz.3.634 (8208): drop_caches: 2 [ 271.875460][ T8207] team_slave_0: left promiscuous mode [ 271.880958][ T8207] team_slave_1: left promiscuous mode [ 272.624806][ T5889] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 272.821084][ T5889] usb 1-1: config 0 has no interfaces? [ 272.835038][ T5889] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 272.844301][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.852320][ T5889] usb 1-1: Product: syz [ 272.858701][ T5889] usb 1-1: Manufacturer: syz [ 272.875169][ T5889] usb 1-1: SerialNumber: syz [ 272.891830][ T5889] usb 1-1: config 0 descriptor?? [ 273.142994][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 273.143426][ T24] usb 2-1: USB disconnect, device number 59 [ 273.149812][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 273.161630][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 273.170760][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.246315][ T8216] dummy0: entered promiscuous mode [ 273.259746][ T8216] dummy0: left promiscuous mode [ 273.303379][ T5889] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 273.454764][ T5889] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 273.466629][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.479413][ T5889] usb 4-1: config 0 descriptor?? [ 273.633229][ T24] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 273.693743][ T8214] netlink: 'syz.3.636': attribute type 3 has an invalid length. [ 273.783183][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 273.791958][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 273.801473][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.809841][ T24] usb 2-1: Product: syz [ 273.814066][ T24] usb 2-1: Manufacturer: syz [ 273.818889][ T24] usb 2-1: SerialNumber: syz [ 273.826734][ T24] usb 2-1: config 0 descriptor?? [ 276.688389][ T8239] @: renamed from vlan0 (while UP) [ 278.744846][ T5889] [drm] vendor descriptor length:92 data:00 00 00 00 00 00 00 00 00 00 00 [ 278.754943][ T5889] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 278.766159][ T5889] [drm:udl_init] *ERROR* Selecting channel failed [ 278.785381][ T5889] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 278.792090][ T5889] [drm] Initialized udl on minor 2 [ 278.799429][ T5889] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 278.809264][ T5889] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 278.817311][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 278.836572][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 278.845495][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 278.896178][ T24] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 278.905806][ T24] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 279.723517][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.642'. [ 279.733002][ T8241] FAULT_INJECTION: forcing a failure. [ 279.733002][ T8241] name failslab, interval 1, probability 0, space 0, times 0 [ 279.746778][ T8241] CPU: 1 UID: 0 PID: 8241 Comm: syz.4.642 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 279.746801][ T8241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 279.746810][ T8241] Call Trace: [ 279.746817][ T8241] [ 279.746824][ T8241] dump_stack_lvl+0x241/0x360 [ 279.746855][ T8241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.746878][ T8241] ? __pfx__printk+0x10/0x10 [ 279.746906][ T8241] ? __pfx___might_resched+0x10/0x10 [ 279.746933][ T8241] should_fail_ex+0x424/0x570 [ 279.746955][ T8241] should_failslab+0xac/0x100 [ 279.746980][ T8241] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 279.747004][ T8241] ? __alloc_skb+0x1c2/0x480 [ 279.747018][ T8241] ? __dev_queue_xmit+0x1780/0x3f60 [ 279.747042][ T8241] __alloc_skb+0x1c2/0x480 [ 279.747058][ T8241] ? do_syscall_64+0xf3/0x230 [ 279.747082][ T8241] ? __pfx___alloc_skb+0x10/0x10 [ 279.747104][ T8241] ? netlink_ack_tlv_len+0x6e/0x200 [ 279.747129][ T8241] netlink_ack+0x147/0xa70 [ 279.747152][ T8241] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 279.747187][ T8241] netlink_rcv_skb+0x296/0x480 [ 279.747210][ T8241] ? __pfx_genl_rcv_msg+0x10/0x10 [ 279.747230][ T8241] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 279.747275][ T8241] ? netlink_deliver_tap+0x2e/0x1b0 [ 279.747306][ T8241] genl_rcv+0x28/0x40 [ 279.747322][ T8241] netlink_unicast+0x7f8/0x9a0 [ 279.747353][ T8241] ? __pfx_netlink_unicast+0x10/0x10 [ 279.747376][ T8241] ? skb_put+0x114/0x1f0 [ 279.747396][ T8241] netlink_sendmsg+0x8c3/0xcd0 [ 279.747431][ T8241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.747458][ T8241] ? aa_sock_msg_perm+0x91/0x160 [ 279.747485][ T8241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.747506][ T8241] __sock_sendmsg+0x221/0x270 [ 279.747529][ T8241] ____sys_sendmsg+0x523/0x860 [ 279.747556][ T8241] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.747572][ T8241] ? __fget_files+0x2a/0x420 [ 279.747590][ T8241] ? __fget_files+0x2a/0x420 [ 279.747615][ T8241] __sys_sendmsg+0x271/0x360 [ 279.747645][ T8241] ? __pfx___sys_sendmsg+0x10/0x10 [ 279.747716][ T8241] ? do_syscall_64+0xb6/0x230 [ 279.747740][ T8241] do_syscall_64+0xf3/0x230 [ 279.747760][ T8241] ? clear_bhb_loop+0x45/0xa0 [ 279.747781][ T8241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.747797][ T8241] RIP: 0033:0x7feb2958d169 [ 279.747813][ T8241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.747826][ T8241] RSP: 002b:00007feb2a45b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.747844][ T8241] RAX: ffffffffffffffda RBX: 00007feb297a5fa0 RCX: 00007feb2958d169 [ 279.747857][ T8241] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 279.747867][ T8241] RBP: 00007feb2a45b090 R08: 0000000000000000 R09: 0000000000000000 [ 279.747877][ T8241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.747887][ T8241] R13: 0000000000000000 R14: 00007feb297a5fa0 R15: 00007feb298cfa28 [ 279.747914][ T8241] [ 288.976496][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 299.221715][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 309.459966][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 317.141019][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.147377][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.698587][ T5889] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 329.954080][ T5885] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 340.180353][ T24] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 350.418147][ T5888] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 360.659022][ T5928] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 370.901835][ T5928] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 372.173221][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 372.180791][ T31] Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 [ 372.188463][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.197156][ T31] task:kworker/0:1 state:D stack:20288 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 372.209231][ T31] Workqueue: events rfkill_sync_work [ 372.214569][ T31] Call Trace: [ 372.217856][ T31] [ 372.220793][ T31] __schedule+0x1b88/0x5240 [ 372.226271][ T31] ? __pfx_try_to_wake_up+0x10/0x10 [ 372.231495][ T31] ? schedule+0x163/0x360 [ 372.235881][ T31] ? __pfx___schedule+0x10/0x10 [ 372.240715][ T31] ? preempt_schedule+0xe4/0xf0 [ 372.245650][ T31] ? schedule+0x90/0x360 [ 372.249895][ T31] ? schedule+0x90/0x360 [ 372.254418][ T31] schedule+0x163/0x360 [ 372.258582][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 372.263391][ T31] schedule_preempt_disabled+0x13/0x30 [ 372.268851][ T31] __mutex_lock+0x805/0x10c0 [ 372.273485][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 372.278258][ T31] ? nfc_rfkill_set_block+0x50/0x310 [ 372.283615][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 372.288655][ T31] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 372.294587][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 372.300915][ T31] ? __lock_acquire+0xad5/0xd80 [ 372.305813][ T31] nfc_rfkill_set_block+0x50/0x310 [ 372.310939][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 372.316680][ T31] rfkill_set_block+0x1f1/0x440 [ 372.321540][ T31] rfkill_sync_work+0x12c/0x220 [ 372.326431][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 372.332151][ T31] process_scheduled_works+0xac3/0x18e0 [ 372.337793][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 372.343835][ T31] ? assign_work+0x367/0x3d0 [ 372.348445][ T31] worker_thread+0x870/0xd50 [ 372.353057][ T31] ? __kthread_parkme+0x1a8/0x200 [ 372.358144][ T31] ? __pfx_worker_thread+0x10/0x10 [ 372.363308][ T31] kthread+0x7b7/0x940 [ 372.367394][ T31] ? __pfx_worker_thread+0x10/0x10 [ 372.372507][ T31] ? __pfx_kthread+0x10/0x10 [ 372.377118][ T31] ? __pfx_kthread+0x10/0x10 [ 372.381714][ T31] ? __pfx_kthread+0x10/0x10 [ 372.386343][ T31] ? __pfx_kthread+0x10/0x10 [ 372.390940][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 372.396190][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 372.401391][ T31] ? __pfx_kthread+0x10/0x10 [ 372.406017][ T31] ret_from_fork+0x4b/0x80 [ 372.410436][ T31] ? __pfx_kthread+0x10/0x10 [ 372.415089][ T31] ret_from_fork_asm+0x1a/0x30 [ 372.419863][ T31] [ 372.422960][ T31] INFO: task kworker/0:3:5843 blocked for more than 143 seconds. [ 372.430724][ T31] Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 [ 372.438369][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.447066][ T31] task:kworker/0:3 state:D stack:19384 pid:5843 tgid:5843 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 372.459097][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 372.465830][ T31] Call Trace: [ 372.469107][ T31] [ 372.472022][ T31] __schedule+0x1b88/0x5240 [ 372.476577][ T31] ? schedule+0x163/0x360 [ 372.480911][ T31] ? __pfx___schedule+0x10/0x10 [ 372.485845][ T31] ? schedule+0x90/0x360 [ 372.490100][ T31] ? schedule+0x90/0x360 [ 372.494405][ T31] schedule+0x163/0x360 [ 372.498566][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 372.503376][ T31] schedule_preempt_disabled+0x13/0x30 [ 372.508818][ T31] __mutex_lock+0x805/0x10c0 [ 372.513445][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 372.518213][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 372.524505][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 372.529532][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 372.534784][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 372.540503][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 372.546614][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 372.552342][ T31] process_scheduled_works+0xac3/0x18e0 [ 372.557940][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 372.563984][ T31] ? assign_work+0x367/0x3d0 [ 372.568579][ T31] worker_thread+0x870/0xd50 [ 372.574187][ T31] ? __kthread_parkme+0x1a8/0x200 [ 372.579241][ T31] ? __pfx_worker_thread+0x10/0x10 [ 372.584731][ T31] kthread+0x7b7/0x940 [ 372.588827][ T31] ? __pfx_worker_thread+0x10/0x10 [ 372.593987][ T31] ? __pfx_kthread+0x10/0x10 [ 372.598583][ T31] ? __pfx_kthread+0x10/0x10 [ 372.603223][ T31] ? __pfx_kthread+0x10/0x10 [ 372.607827][ T31] ? __pfx_kthread+0x10/0x10 [ 372.612429][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 372.617678][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 372.622881][ T31] ? __pfx_kthread+0x10/0x10 [ 372.627507][ T31] ret_from_fork+0x4b/0x80 [ 372.631926][ T31] ? __pfx_kthread+0x10/0x10 [ 372.636556][ T31] ret_from_fork_asm+0x1a/0x30 [ 372.641329][ T31] [ 372.644417][ T31] INFO: task syz.2.507:7795 blocked for more than 143 seconds. [ 372.651959][ T31] Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 [ 372.659610][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.668308][ T31] task:syz.2.507 state:D stack:24616 pid:7795 tgid:7795 ppid:5850 task_flags:0x400040 flags:0x00004004 [ 372.680234][ T31] Call Trace: [ 372.683568][ T31] [ 372.686500][ T31] __schedule+0x1b88/0x5240 [ 372.690995][ T31] ? schedule+0x163/0x360 [ 372.695382][ T31] ? __pfx___schedule+0x10/0x10 [ 372.700235][ T31] ? register_lock_class+0x54/0x330 [ 372.705480][ T31] ? schedule+0x90/0x360 [ 372.709727][ T31] ? schedule+0x90/0x360 [ 372.713995][ T31] schedule+0x163/0x360 [ 372.718153][ T31] schedule_timeout+0xb1/0x2b0 [ 372.722904][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 372.728340][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 372.733580][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 372.738783][ T31] ? wait_for_completion+0x2d4/0x600 [ 372.744111][ T31] wait_for_completion+0x32f/0x600 [ 372.749253][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 372.754956][ T31] ? __flush_work+0xee/0xc60 [ 372.759554][ T31] __flush_work+0xa48/0xc60 [ 372.764093][ T31] ? __flush_work+0xee/0xc60 [ 372.768692][ T31] ? __pfx___flush_work+0x10/0x10 [ 372.773756][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 372.779048][ T31] ? __pfx___cancel_work+0x10/0x10 [ 372.784199][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 372.789225][ T31] ? nfc_genl_device_removed+0x266/0x380 [ 372.794914][ T31] __cancel_work_sync+0xbc/0x110 [ 372.799858][ T31] rfkill_unregister+0x96/0x230 [ 372.804769][ T31] nfc_unregister_device+0x96/0x2a0 [ 372.809979][ T31] virtual_ncidev_close+0x56/0x90 [ 372.815116][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 372.820844][ T31] __fput+0x3e9/0x9f0 [ 372.824871][ T31] task_work_run+0x251/0x310 [ 372.829477][ T31] ? _raw_spin_unlock+0x28/0x50 [ 372.834377][ T31] ? __pfx_task_work_run+0x10/0x10 [ 372.839499][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 [ 372.845255][ T31] syscall_exit_to_user_mode+0x13f/0x340 [ 372.850894][ T31] do_syscall_64+0x100/0x230 [ 372.855504][ T31] ? clear_bhb_loop+0x45/0xa0 [ 372.860188][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.866120][ T31] RIP: 0033:0x7fdf5618d169 [ 372.870531][ T31] RSP: 002b:00007fdf564cfb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 372.879002][ T31] RAX: 0000000000000000 RBX: 00007fdf563a7ba0 RCX: 00007fdf5618d169 [ 372.887037][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 372.895060][ T31] RBP: 00007fdf563a7ba0 R08: 0000000000003b7c R09: 00000004564cfe7f [ 372.903038][ T31] R10: 00000000005f96f4 R11: 0000000000000246 R12: 0000000000037d36 [ 372.911058][ T31] R13: 00007fdf563a6080 R14: ffffffffffffffff R15: 00007fdf564cfca0 [ 372.919090][ T31] [ 372.922139][ T31] [ 372.922139][ T31] Showing all locks held in the system: [ 372.929887][ T31] 4 locks held by kworker/0:1/10: [ 372.934926][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 372.945942][ T31] #1: ffffc900000f7c60 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 372.958332][ T31] #2: ffffffff903d83c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x23/0x220 [ 372.968395][ T31] #3: ffff88802237d100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x310 [ 372.978096][ T31] 1 lock held by khungtaskd/31: [ 372.982940][ T31] #0: ffffffff8ed3dfa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 372.992833][ T31] 2 locks held by getty/5596: [ 372.997529][ T31] #0: ffff88814cf340a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 373.007313][ T31] #1: ffffc9000334b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 373.017469][ T31] 3 locks held by kworker/0:3/5843: [ 373.022645][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 373.033637][ T31] #1: ffffc9000438fc60 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 373.047183][ T31] #2: ffffffff903d83c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 373.058574][ T31] 1 lock held by syz.2.507/7795: [ 373.063537][ T31] #0: ffff88802237d100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 373.073373][ T31] 2 locks held by syz-executor/7946: [ 373.078655][ T31] #0: ffff8880300f3118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 373.088712][ T31] #1: ffffffff903d83c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 373.098684][ T31] 2 locks held by syz.0.635/8212: [ 373.103746][ T31] #0: ffffffff8f5af5a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 373.112210][ T31] #1: ffffffff903d83c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x131/0x850 [ 373.122251][ T31] 1 lock held by syz.0.635/8221: [ 373.127218][ T31] #0: ffffffff8f5af5a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 373.135719][ T31] 1 lock held by syz.3.636/8222: [ 373.140649][ T31] #0: ffffffff8f5af5a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 373.149135][ T31] 1 lock held by syz.1.637/8217: [ 373.154113][ T31] #0: ffffffff8f5af5a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 373.162578][ T31] 1 lock held by syz.4.646/8249: [ 373.167536][ T31] #0: ffffffff8f5af5a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 373.176076][ T31] 1 lock held by syz-executor/8250: [ 373.181253][ T31] #0: ffffffff8f5af5a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 373.189723][ T31] 1 lock held by syz-executor/8251: [ 373.194994][ T31] #0: ffffffff8f5af5a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 373.203490][ T31] 1 lock held by syz-executor/8252: [ 373.208689][ T31] #0: ffffffff8f5af5a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 373.217220][ T31] 1 lock held by syz-executor/8253: [ 373.222408][ T31] #0: ffffffff8f5af5a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 373.230869][ T31] [ 373.233237][ T31] ============================================= [ 373.233237][ T31] [ 373.241651][ T31] NMI backtrace for cpu 1 [ 373.241666][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 373.241678][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 373.241684][ T31] Call Trace: [ 373.241689][ T31] [ 373.241693][ T31] dump_stack_lvl+0x241/0x360 [ 373.241711][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.241724][ T31] ? __pfx__printk+0x10/0x10 [ 373.241742][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 373.241755][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 373.241762][ T31] ? _printk+0xd5/0x120 [ 373.241774][ T31] ? touch_all_softlockup_watchdogs+0x4a/0xf0 [ 373.241786][ T31] ? __wake_up_klogd+0xcc/0x110 [ 373.241804][ T31] ? __pfx__printk+0x10/0x10 [ 373.241817][ T31] ? debug_show_all_locks+0x30/0x180 [ 373.241828][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 373.241838][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 373.241850][ T31] watchdog+0x1058/0x10a0 [ 373.241860][ T31] ? watchdog+0x1ea/0x10a0 [ 373.241872][ T31] ? __pfx_watchdog+0x10/0x10 [ 373.241882][ T31] kthread+0x7b7/0x940 [ 373.241896][ T31] ? __pfx_watchdog+0x10/0x10 [ 373.241906][ T31] ? __pfx_kthread+0x10/0x10 [ 373.241917][ T31] ? __pfx_kthread+0x10/0x10 [ 373.241929][ T31] ? __pfx_kthread+0x10/0x10 [ 373.241941][ T31] ? __pfx_kthread+0x10/0x10 [ 373.241953][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.241962][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 373.241973][ T31] ? __pfx_kthread+0x10/0x10 [ 373.241986][ T31] ret_from_fork+0x4b/0x80 [ 373.241995][ T31] ? __pfx_kthread+0x10/0x10 [ 373.242008][ T31] ret_from_fork_asm+0x1a/0x30 [ 373.242024][ T31] [ 373.242027][ T31] Sending NMI from CPU 1 to CPUs 0: [ 373.413724][ C0] NMI backtrace for cpu 0 [ 373.413738][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 373.413756][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 373.413765][ C0] Workqueue: bat_events batadv_nc_worker [ 373.413784][ C0] RIP: 0010:check_preemption_disabled+0x1e/0x120 [ 373.413804][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 41 54 53 48 83 ec 10 49 c7 c4 20 a0 68 93 65 49 8b 04 24 48 89 44 24 08 <65> 8b 1d 7f e0 37 07 65 8b 05 74 e0 37 07 a9 ff ff ff 7f 74 24 65 [ 373.413816][ C0] RSP: 0018:ffffc90000127a10 EFLAGS: 00000082 [ 373.413828][ C0] RAX: da68555289db9200 RBX: ffffffff9368a020 RCX: 0000000000000002 [ 373.413839][ C0] RDX: 0000000000000000 RSI: ffffffff8e4fd5dc RDI: ffffffff8ca1b4a0 [ 373.413849][ C0] RBP: ffff88801c688b40 R08: ffffffff8bfaa6be R09: 0000000000000000 [ 373.413860][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff9368a020 [ 373.413869][ C0] R13: ffff88801c688000 R14: 0000000000000206 R15: ffffffff8ed3dfa0 [ 373.413880][ C0] FS: 0000000000000000(0000) GS:ffff888124f96000(0000) knlGS:0000000000000000 [ 373.413892][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 373.413903][ C0] CR2: 0000559a53e4b600 CR3: 000000000eb38000 CR4: 00000000003526f0 [ 373.413916][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 373.413924][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 373.413934][ C0] Call Trace: [ 373.413940][ C0] [ 373.413947][ C0] lock_release+0x204/0x3e0 [ 373.413963][ C0] ? batadv_nc_worker+0xcb/0x610 [ 373.413977][ C0] ? batadv_nc_worker+0xcb/0x610 [ 373.413991][ C0] batadv_nc_worker+0x28b/0x610 [ 373.414005][ C0] ? batadv_nc_worker+0xcb/0x610 [ 373.414020][ C0] ? process_scheduled_works+0x9cb/0x18e0 [ 373.414035][ C0] process_scheduled_works+0xac3/0x18e0 [ 373.414060][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 373.414079][ C0] ? assign_work+0x367/0x3d0 [ 373.414095][ C0] worker_thread+0x870/0xd50 [ 373.414116][ C0] ? __kthread_parkme+0x1a8/0x200 [ 373.414134][ C0] ? __pfx_worker_thread+0x10/0x10 [ 373.414150][ C0] kthread+0x7b7/0x940 [ 373.414169][ C0] ? __pfx_worker_thread+0x10/0x10 [ 373.414186][ C0] ? __pfx_kthread+0x10/0x10 [ 373.414202][ C0] ? __pfx_kthread+0x10/0x10 [ 373.414220][ C0] ? __pfx_kthread+0x10/0x10 [ 373.414238][ C0] ? __pfx_kthread+0x10/0x10 [ 373.414255][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.414269][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 373.414284][ C0] ? __pfx_kthread+0x10/0x10 [ 373.414303][ C0] ret_from_fork+0x4b/0x80 [ 373.414317][ C0] ? __pfx_kthread+0x10/0x10 [ 373.414335][ C0] ret_from_fork_asm+0x1a/0x30 [ 373.414353][ C0] [ 373.414720][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 373.689629][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 373.701412][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 373.711451][ T31] Call Trace: [ 373.714719][ T31] [ 373.717638][ T31] dump_stack_lvl+0x241/0x360 [ 373.722309][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.727762][ T31] ? __pfx__printk+0x10/0x10 [ 373.732344][ T31] ? vscnprintf+0x5d/0x90 [ 373.736662][ T31] panic+0x349/0x880 [ 373.740547][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 373.746690][ T31] ? __pfx_panic+0x10/0x10 [ 373.751098][ T31] ? irq_work_queue+0xd1/0x150 [ 373.755846][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 373.761810][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 373.767773][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 373.773746][ T31] ? nmi_trigger_cpumask_backtrace+0x251/0x320 [ 373.779885][ T31] watchdog+0x1097/0x10a0 [ 373.784202][ T31] ? watchdog+0x1ea/0x10a0 [ 373.788609][ T31] ? __pfx_watchdog+0x10/0x10 [ 373.793270][ T31] kthread+0x7b7/0x940 [ 373.797328][ T31] ? __pfx_watchdog+0x10/0x10 [ 373.801993][ T31] ? __pfx_kthread+0x10/0x10 [ 373.806569][ T31] ? __pfx_kthread+0x10/0x10 [ 373.811146][ T31] ? __pfx_kthread+0x10/0x10 [ 373.815724][ T31] ? __pfx_kthread+0x10/0x10 [ 373.820305][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.825491][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 373.830675][ T31] ? __pfx_kthread+0x10/0x10 [ 373.835253][ T31] ret_from_fork+0x4b/0x80 [ 373.839653][ T31] ? __pfx_kthread+0x10/0x10 [ 373.844236][ T31] ret_from_fork_asm+0x1a/0x30 [ 373.848996][ T31] [ 373.852240][ T31] Kernel Offset: disabled [ 373.856550][ T31] Rebooting in 86400 seconds..