last executing test programs: 18m23.386927786s ago: executing program 32 (id=1874): socket(0x200000000000011, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x12, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv6_delroute={0x54, 0x19, 0x100, 0x70bd26, 0x25dfdbfc, {0xa, 0x14, 0x10, 0x2, 0xff, 0x2, 0x0, 0xb}, [@RTA_EXPIRES={0x8, 0x17, 0x6}, @RTA_GATEWAY={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @RTA_EXPIRES={0x8, 0x17, 0x4}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x0, 0x10}}, @RTA_IIF={0x8}]}, 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) unshare(0x6a040000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 17m54.815490411s ago: executing program 33 (id=1997): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x14, 0x23, 0x409, 0x70bd25, 0x25dfd3ff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) 17m45.858869407s ago: executing program 1 (id=2025): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000700)={0x2, 0x4e24, @empty}, 0x10) listen(r2, 0x5) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000800)={0x2, 0x4e24, @loopback}, 0x10) accept4(r2, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x30}}, 0x0) 17m45.426297813s ago: executing program 1 (id=2026): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000f80)=ANY=[@ANYBLOB="1c0000002b0009002dbd7000fedbdf250500000008000100", @ANYRES32, @ANYBLOB="ef16305801f231bfc36764895562270becde73dc71176e64d640f0c1a60c167d23b6ce3491f03b50e8f200"/52], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x40070) recvmmsg(r2, &(0x7f0000003c00)=[{{&(0x7f0000000ac0)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/252, 0xfc}, {&(0x7f0000000c40)=""/156, 0x9c}, {&(0x7f0000000d00)=""/12, 0xc}], 0x3}, 0xd}, {{&(0x7f0000000d80)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/150, 0x96}, {&(0x7f0000000e00)=""/105, 0x69}, {&(0x7f0000000e80)=""/198, 0xc6}, {&(0x7f0000002ac0)}], 0x5, &(0x7f0000002b40)=""/210, 0xd2}, 0x1}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002c40)=""/240, 0xf0}, {&(0x7f0000002d40)=""/52, 0x34}, {&(0x7f0000002d80)=""/132, 0x84}, {&(0x7f0000002e80)=""/14, 0xe}, {&(0x7f0000002ec0)=""/191, 0xbf}], 0x5}, 0x5}, {{&(0x7f0000002fc0)=@generic, 0x80, &(0x7f0000003280)=[{&(0x7f0000003040)=""/124, 0x7c}, {&(0x7f00000030c0)=""/85, 0x55}, {&(0x7f0000003140)=""/161, 0xa1}, {&(0x7f0000003200)=""/85, 0x55}], 0x4}, 0x1bc4378c}, {{&(0x7f0000003300)=@generic, 0x80, &(0x7f0000003440)=[{&(0x7f0000003380)=""/139, 0x8b}], 0x1, &(0x7f0000003480)=""/224, 0xe0}, 0x800}, {{&(0x7f0000003580)=@ax25={{0x3, @bcast}, [@bcast, @remote, @rose, @remote, @rose, @rose, @default]}, 0x80, &(0x7f0000003980)=[{&(0x7f0000003600)=""/107, 0x6b}, {&(0x7f0000003680)=""/229, 0xe5}, {&(0x7f0000003780)=""/117, 0x75}, {&(0x7f0000003800)=""/80, 0x50}, {&(0x7f0000003880)=""/111, 0x6f}, {&(0x7f0000003900)=""/88, 0x58}], 0x6, &(0x7f00000039c0)=""/18, 0x12}, 0x4}], 0x6, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000016c0)={0x29, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}, {0xd100828e98ba2273, 0xef, &(0x7f00000015c0)=""/239}]}) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4001) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001c00"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRESOCT=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc, 0x2, 0xfffffffd}, 0x10, 0x0, r0}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r6, 0x107, 0xc, &(0x7f0000000000)=0x9, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket(0x2b, 0x1, 0x1) listen(r8, 0x5) 17m45.005916418s ago: executing program 34 (id=2027): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4655000) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {0x0, 0x0, 0xe06}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x20}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000080)=ANY=[@ANYRES16=r4, @ANYRESDEC=r5], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r7 = socket$inet6(0xa, 0x3, 0x3c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, 0x0, r6}) r8 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) ioctl(r8, 0x8916, &(0x7f0000000000)) setsockopt$packet_int(r8, 0x107, 0xe, &(0x7f0000000040)=0x7, 0x4) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x4000020001}]}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x2000) readv(r3, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1) 17m44.358630667s ago: executing program 1 (id=2029): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r0, {0x0, 0x8}, {0xffff, 0xffff}, {0x3, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x7, 0x4, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x49, 0x0, 0x3, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 17m44.230924031s ago: executing program 1 (id=2030): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 17m44.091584102s ago: executing program 1 (id=2031): socket$inet6(0xa, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRESDEC=r2], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r4 = socket$inet6(0xa, 0x3, 0x3c) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, 0x0, r3}) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8916, &(0x7f0000000000)) 17m43.247982053s ago: executing program 1 (id=2032): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000780)={0x0, 0x80, 0x1, 'queue0\x00', 0x101}) 17m42.887685878s ago: executing program 35 (id=2032): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000780)={0x0, 0x80, 0x1, 'queue0\x00', 0x101}) 16m21.360730402s ago: executing program 6 (id=2307): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @empty, 0x5}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x31, &(0x7f0000000280)="b74560dc", 0x4) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=ANY=[], 0x1cc}}], 0x1, 0x20080058) 16m21.121910311s ago: executing program 6 (id=2309): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) writev(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000580)="b1417232acef325f4a6f0232a181002e88780a6c523a03bd5969ee734e3384551f152457fd5cb8ab0c92782725c9743f987d56adb8da7dd0c7aeda899ca666a8512b8103b0ff129ea0345b712edff2fe349c89fba2dca130a31f4203e124fd5000fca5d33250ddff926ee69e68f8051e42ae7837becb3ebf77bfa0813a782bfe503ca83de81a5accf478d07e067f7c36bb78dc39c1f82f92af080f0217dcbe44f4944adee1e9e240e542736ecca1b9dc581c56d3a8c59d299001bc311b42842e9a9fa90815f85a4726c156007b", 0xcd}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r1, &(0x7f0000001b40)={0x2020}, 0x205c) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x9cd7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x200008}, 0x1c) 16m19.915970032s ago: executing program 8 (id=2314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(twofish-asm)\x00'}, 0x58) syz_usb_connect(0xe7af3cf0599a7105, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8dc3, 0x900) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000080)=0xffffbf7f) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x80}, {}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xec}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}}, 0x0) 16m19.728628333s ago: executing program 6 (id=2315): r0 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000680)='nqn=testnqn,transport=rdma,traddr=172.20.20.24,trsvcid=+', 0x38) 16m19.540195393s ago: executing program 6 (id=2317): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 16m19.475420284s ago: executing program 6 (id=2318): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1", 0x12) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[], 0xfffffdcf) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 16m18.313966329s ago: executing program 8 (id=2321): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff0200000000000000000000000000010000"], 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000) 16m18.258671373s ago: executing program 6 (id=2322): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) 16m17.976909849s ago: executing program 36 (id=2322): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) 16m17.625073012s ago: executing program 7 (id=2325): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) writev(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000580)="b1417232acef325f4a6f0232a181002e88780a6c523a03bd5969ee734e3384551f152457fd5cb8ab0c92782725c9743f987d56adb8da7dd0c7aeda899ca666a8512b8103b0ff129ea0345b712edff2fe349c89fba2dca130a31f4203e124fd5000fca5d33250ddff926ee69e68f8051e42ae7837becb3ebf77bfa0813a782bfe503ca83de81a5accf478d07e067f7c36bb78dc39c1f82f92af080f0217dcbe44f4944adee1e9e240e542736ecca1b9dc581c56d3a8c59d299001bc311b42842e9a9fa90815f85a4726c156007b", 0xcd}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r1, &(0x7f0000001b40)={0x2020}, 0x205c) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x9cd7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x200008}, 0x1c) 16m17.236396474s ago: executing program 8 (id=2326): socket$alg(0x26, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000240)={0x50, r1, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x24, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc2c45513, &(0x7f0000000040)={0x0, 0x3, 0x7fffff, 0xb, '\x00', 0x3}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x5, 0x0, 0x0, {0x8d7c68fc97a651b7, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x8}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffff7, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4025}, 0x8000) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000101, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x9, 0x0, 0x0, @fd=r5}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000300)={0xfffc, 0xc, 0x2, 0x2000}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x307, @rand_addr=' \x01\x00', 0x8}]}, &(0x7f0000000000)=0xc) r6 = getpid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000240)={0x2, r6}) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000027) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 16m15.894438117s ago: executing program 8 (id=2328): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 16m15.887072085s ago: executing program 7 (id=2329): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000003680)=[{0x0}], 0x1, 0xe) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='\b', 0x1}], 0x1, 0x0) 16m15.678851284s ago: executing program 8 (id=2330): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0xff70) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 16m14.847975143s ago: executing program 7 (id=2334): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f74120"], 0x7) socket$packet(0x11, 0x2, 0x300) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r3, r2, &(0x7f00000001c0)=0x1, 0x8) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f01000000000000000000090581034000000000090582"], 0x0) syz_usb_ep_write(r5, 0x82, 0x0, 0x0) r6 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) lseek(r6, 0x0, 0x1) ioctl$EVIOCRMFF(r4, 0x4004550f, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) write$sndseq(r7, 0x0, 0x0) poll(&(0x7f0000000000)=[{r7}], 0x1, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f0000001140)={0x80, 0x8b, 0x0, 0xffffffff}) 16m14.518766256s ago: executing program 8 (id=2335): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$xdp(0x2c, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 16m14.248573265s ago: executing program 37 (id=2335): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$xdp(0x2c, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 16m12.921058422s ago: executing program 7 (id=2339): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 16m12.759673867s ago: executing program 7 (id=2341): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) writev(r0, &(0x7f0000002280)=[{&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000001f40)="63e1cdd7ab4a630d476e262352eb0e175a7301d4e4bb04ce1eb7f17ddee5d6c454a8a3c987dff46fd48e7a7a3b1471798be560006f4706c454261a2759b22b12f7d4d7ff85ade903b31ce3f703766cab329bec483a44a9f213a64134878db418e512b6444b8027eca7c3d4455f52e9017c898e6918f2e29bd638f8d85c78c625035a814a1d88c9272833f3d739071ca744e540faeb0226902e2ba229d646e350656a19e49a2a8467e1afce2c1a7a2a", 0xaf}, {&(0x7f0000002000)="b319a9924c385488bb083f360a15c8e425823eaec020fe9134e1808de5d3f532496c82c418eee60c015532c0eb7868df43324a96397245526417ab315ac05e5261862b5e6d461635da7bcb6864d3d9274918bc1fa76b7757d4b1d9ee377d81205c657ba8f06444b7a805ffbbe3d87102dba6fee1ab1b00f94dcf82a81dcaca6d533703dbd4b2f0567518791a660067c95d2b1176b89b5d0fd4f38ecacb9de69b5afebf628d006722f6401d8c8a85c5", 0xaf}, {&(0x7f00000021c0)="439cfaafdcd48c3ec7fa541e4916925a9f76357afa532f1d6182f741aee0a6da7a2e7eb47305492270d56f8e45492b2ba4e4f8c70cbe939942f8592ea221f57e1bf9e7fd41faea7bba21cfcea92039bf35a4074b6060229193dee4", 0x5b}, {&(0x7f0000002240)="b35921846820cc52315c17fc843a623066a4d77a7276fa17a0affaf1c4194b1c1504d3b64e73", 0x26}], 0x5) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0x5, 0x7fff, 0x5, 0x7}, 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x143942, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$inet(0x2, 0xa, 0x8) write$tun(r3, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf250200000014000b00008800000000000000ade3000000000000000900030000000800090003000000080005000a01010214000b00"/78], 0x54}, 0x1, 0x0, 0x0, 0x40000814}, 0x48000) r6 = openat(r2, &(0x7f0000000e00)='nfsd.export/channel\x00', 0x2, 0x0) r7 = accept4$unix(r6, &(0x7f00000000c0), &(0x7f0000000280)=0x6e, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000002c0)='veth1_to_batadv\x00', 0x10) write(r6, &(0x7f0000000f00)='l', 0x1) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x2) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000008000001a000000", @ANYRES32=r1, @ANYBLOB="000000200000000000000000000000000000000055cd7dc4d9ca28cb398516746625b6a35dda23b7d9dd3d45cbe01bcec58432b3f45814625781d13949879dba1006059e8b91ee6e5b8273a2d5ad31ef433f97daf96b4ddb4050e22ff225cb62ba48642ba486f23cae8d19b8eef7db4b8869a17cc279404279d12bf2e290fa88a2261693318bd164b2aaed53c2fa995d4a33e3cf3b2a1071fede4f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00 \x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x54}}, {}, [@jmp={0x5, 0x0, 0x2, 0x9, 0x0, 0x4, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x10000000}}}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r9 = socket(0x2b, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) epoll_create1(0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x8000000, 0x2, 0x0, 0x18, 0x4, 0x3, 0xffa4}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9, r1}, 0x38) 16m11.324257514s ago: executing program 7 (id=2346): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x205c) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = fsmount(r1, 0x1, 0xa) fchdir(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r3, 0x2007ffb) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) fcntl$setsig(r4, 0xa, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 16m10.920509443s ago: executing program 38 (id=2346): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x205c) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = fsmount(r1, 0x1, 0xa) fchdir(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r3, 0x2007ffb) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) fcntl$setsig(r4, 0xa, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 4m12.895631797s ago: executing program 3 (id=6437): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008850) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r0 = io_uring_setup(0x7d1, &(0x7f0000000240)={0x0, 0xddf9, 0x100, 0xfffffffe, 0x183}) close_range(r0, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) read$FUSE(r2, &(0x7f0000002080)={0x2020}, 0x2020) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000100)=@deltclass={0x434, 0x29, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5e291e8239e04253, 0xffe0}, {0xffe0, 0xf}, {0xfff3, 0x6}}, [@c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xfffffffc, 0xc14, 0x6, 0xfffffff8, 0x101, 0x7, 0x2, 0xf, 0x27, 0x10001, 0x9, 0xfffffff9, 0x8001, 0x7fff, 0x5, 0xf, 0x6, 0x4, 0xe78, 0x1, 0xfffffff7, 0x4, 0xf9bb, 0x7d, 0x5, 0x8, 0xfa, 0xa, 0x8, 0x0, 0x1ff, 0x1, 0x400, 0x0, 0x9, 0x5, 0x8, 0x2, 0x9, 0x8, 0xb0bd, 0x9f8d, 0x8, 0x7ff, 0x7, 0x4, 0x3, 0x0, 0x5, 0x5, 0xfffffff7, 0x9, 0x4, 0xfffffffe, 0x80, 0xa6f, 0x76a9, 0x9, 0x3, 0x9, 0x7, 0x7, 0xae, 0x9, 0x5, 0xfffff0f3, 0x7, 0x8, 0x5, 0x10, 0x2, 0x4, 0x4, 0x10001, 0x9, 0x4, 0x8, 0x5, 0x7, 0x5, 0x7fffffff, 0x0, 0x6, 0xf, 0x4, 0x2, 0xa, 0x0, 0x0, 0x5, 0x9000000, 0xfffffff7, 0x3, 0x9, 0xcb, 0x1aed, 0x9b62, 0x4, 0x3, 0x9, 0xc2e, 0x0, 0x14000000, 0xc866, 0x4, 0x8, 0x0, 0x5, 0x3, 0x7, 0x7, 0x6, 0xb32c, 0x3, 0xfff, 0xcb, 0x10, 0xffff, 0xfffffffd, 0x100, 0x9, 0x1, 0xf, 0x40, 0x6, 0x6, 0x4, 0x40, 0x0, 0x9, 0x0, 0x4, 0x10, 0x72e3cc1, 0x6, 0x5, 0x1, 0x6, 0x7, 0x81, 0x9, 0x3, 0x80000001, 0x8, 0x6, 0x7, 0x50, 0x1, 0xffffff6a, 0xffff3c8b, 0x5913, 0x7, 0x10001, 0x7, 0x9, 0xe, 0xfffffffd, 0xc, 0x0, 0x400, 0x8, 0x8, 0x8, 0x100, 0x9, 0x8, 0xc043, 0x62da, 0x1, 0x4, 0xee4, 0x5, 0xaaa6, 0x3d66, 0x0, 0x4, 0x2, 0xabe, 0x80, 0x5, 0x8001, 0x1, 0x7fffffff, 0xfffffffe, 0x1000, 0x9, 0x5, 0x8001, 0x7, 0xffff, 0x6, 0xffff, 0x2, 0x777, 0xfffffff1, 0x40, 0xc, 0x3, 0xe, 0x1, 0x0, 0x9, 0x0, 0x3, 0x401, 0x6, 0x6, 0x221, 0x4, 0x2, 0x4, 0x0, 0x8, 0x9, 0xffffffff, 0x401, 0x6, 0xffffffff, 0x7, 0xab, 0x0, 0x4e7, 0x6db2, 0x280, 0x10000, 0x8, 0x0, 0xc5e, 0x89b7, 0x1, 0x2, 0x0, 0x9, 0x9, 0xc, 0x1000, 0x4, 0xd60, 0x9, 0x9, 0x4, 0x2, 0x7, 0x80000001, 0xff, 0x2, 0x6, 0x4, 0x6, 0x3, 0x8, 0xc00, 0x9, 0x80000000, 0x2c]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x3f, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000100), 0x6, 0x40) close(0x3) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) fanotify_init(0x0, 0x2) 4m11.909876337s ago: executing program 3 (id=6444): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000180)={0x40, 0x10, 0x2, "ece4"}, 0x0, 0x0, 0x0, 0x0}) 4m9.934338299s ago: executing program 3 (id=6455): syz_usb_connect$uac1(0x2, 0x7b, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3042, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x9, 0x0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x13}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x404, 0x5, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x5, 0xfd, {0x7, 0x25, 0x1, 0x0, 0xf0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x3, 0x1, {0x7, 0x25, 0x1, 0x4, 0x7, 0x9}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x4, 0x4, 0xa5, 0x20, 0x4}, 0x0, 0x0, 0x2, [{0x8a, &(0x7f0000000340)=@string={0x8a, 0x3, "bb3c5129a7d6aaeea801f4a889e5d2d2dc5563dabbb27fe8bf2597a6d13a01b120f7675d67e5a7824b8e228bb746a800000000000000007c0ca9f85a8c4595f3b25cc4f03f3f0e530b90cd6dfb6ce3124b244c31add573bc804670196d6558299378fdca4ac7d6c27d328113dd60c43fd621c25bc221631f1d7a4d27bd715ff0d61882395ae4c852"}}, {0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e0328f5edf7d7cd6a95dd048aee5f1c2c5e31aabfe27e930707936d915ca58a32eb4e44431e4e9fd0dc64005a73e1fa731d1b961ee5f0430500cbc8592ed732b97ef2ab8efa688cdff23ebad6bbbaa28e5afd18a93d085ff8b363db2b5e135c5e552b891719fda4"]}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbd}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x84}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0x80}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001fc0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1, 0x100004, 0x81) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40046607, &(0x7f0000000fc0)=0xfffffff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa340}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000180)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, '^', 0x3a, './file0', 0x3a, [0x4f, 0x4f]}, 0x35) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r9 = shmget(0x1, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r9, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r11, 0x4000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) write(r10, &(0x7f0000000080)='4', 0x1) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2, @local, {[@routing={0x84}], "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"}}}}}, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x154, r8, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x12d, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0xc4, {0x5, 0x97, 0x5, "840713d363c6724d98bf35001c09bfc3ef576ef4cbdedd44f1719d86e7202598ad5ab2b4e5dff62ed61751909b8422ef7be7fa9aeee03cce1881434df3bc53402458604b55890de2298e22ae5eb55d3e14358d8172d3caffea4c3165a9936a26aa4560071601df38cfb687a86ed61c704879c02c575dcc5f792ca84bd70fc9a24035370ffe3e5d14541c8831eed97732a996891591391a05b51387596e4634cf9ec3255fc6c4d68b86c2b73f110f4dc0b014af75ddf00689ee90b8c538f8b8c339"}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0x0, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) 4m7.540784487s ago: executing program 3 (id=6470): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 4m7.156977923s ago: executing program 3 (id=6471): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x28b, 0xfff, 0xa}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000340)={0x3, r1, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000001880)={0x3, r1, 0xfff, 0x3ff, 0x9, 0x944}) 4m5.040572577s ago: executing program 3 (id=6481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000301019e"], 0x38}}, 0x0) 4m4.276770977s ago: executing program 39 (id=6481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000301019e"], 0x38}}, 0x0) 17.08909618s ago: executing program 5 (id=7375): syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[], 0x0) 14.207810782s ago: executing program 0 (id=7381): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) writev(r0, &(0x7f0000003400)=[{&(0x7f00000010c0)="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", 0xb6e}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, 0x0, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x43, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, 0x0, 0x40) 13.96434569s ago: executing program 5 (id=7383): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff0905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f74120"], 0x7) socket$packet(0x11, 0x2, 0x300) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r3, r2, &(0x7f00000001c0)=0x1, 0x8) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f01000000000000000000090581034000000000090582"], 0x0) syz_usb_ep_write(r5, 0x82, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x1) ioctl$EVIOCRMFF(r4, 0x4004550f, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, &(0x7f00000003c0)={0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="000b0200000002"], 0x0}, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) write$sndseq(r6, 0x0, 0x0) poll(&(0x7f0000000000)=[{r6}], 0x1, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000001140)={0x80, 0x8b, 0x0, 0xffffffff}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000780)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 13.485846921s ago: executing program 0 (id=7384): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000800000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.887842455s ago: executing program 0 (id=7385): syz_open_dev$media(&(0x7f0000000380), 0x10, 0x101000) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000140)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "280991800000598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f000000155cc30cf11d0bc000", [0x4, 0x40000000000000]}}) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x205}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0xe, 0x0, 0xb49, 0x9, 0x8, 0x4, 0x3}, 0x0) r9 = fsopen(&(0x7f0000000200)='nfsd\x00', 0x1) fsmount(r9, 0x0, 0x1) landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x7, 0x0, 0x0, 0x0, 0x1}, 0x30, 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) 11.646775685s ago: executing program 9 (id=7389): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x2, 0x1, 0x0, 0x4}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0x9, 0x800000000000000, 0x4000}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, &(0x7f00000001c0), &(0x7f0000000200)='%ps \x00'}, 0x1c) socket$nl_audit(0x10, 0x3, 0x9) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x28b, 0xfff, 0xa}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000340)={0x3, r2, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000001880)={0x3, r2, 0xfff, 0x3ff, 0x9, 0x944}) 11.365885087s ago: executing program 0 (id=7390): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x1) r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r2, 0x81, 0x6, &(0x7f0000000080)="00012c615bc2") syz_usb_control_io(r2, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000340)={0x40, 0x6, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000480)=""/74, 0x49) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfffffffffffffffd) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[], 0xb4}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x4040080) socket(0x10, 0x3, 0x0) ioctl$OCFS2_IOC_INFO(r4, 0x80106f05, &(0x7f0000005f80)={&(0x7f0000005dc0)=[&(0x7f0000000080)=@label={{0x4f32494e, 0x4, 0x10, 0x40000001}}, &(0x7f0000000100)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000000}}, &(0x7f0000000140)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000000180)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xa0000001}}, &(0x7f00000001c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000000280)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}}, &(0x7f0000000480)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, &(0x7f0000000a80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x9, 0x1}, {0x800, 0x10001}, {0x8, 0xfffffffffffffffd}, {0xab, 0x7}, {0x8, 0x80000000}, {0x2, 0xfffffffffffffeff}, {0x8, 0x9}, {0x7, 0x9}, {0xfffffffffffffffe, 0x4}, {0x9bf7, 0x100}, {0x9f, 0x7}, {0x4, 0x1}, {0x80000000, 0xfffffffffffffffe}, {0x4fc, 0x7}, {0x101, 0x1}, {0x5, 0x6}, {0x101, 0x100000001}, {0x100000000, 0x1507}, {0x8, 0x7fff}, {0x8, 0x5}, {0xffffffff, 0x4}, {0x0, 0x4}, {0x7fff, 0xfffffffffffffff8}, {0x5, 0x19}, {0x3, 0x8}, {0x5, 0x9}, {0x9, 0xffff0000000000}, {0xa0, 0xfffffffffffffff9}, {0x823, 0x3}, {0x8, 0x4}, {0x1, 0x400}, {0x43}, {0x4d7, 0x800}, {0xeeb2, 0x1}, {0x2, 0xffffffffffffffff}, {0xdc, 0x8000}, {0xfb, 0x3}, {0x4, 0x5}, {0x3, 0x7fff}, {0x9, 0x9b}, {0xa9c0, 0x1}, {0xfffffffffffff800, 0x81}, {0xff, 0x9}, {0x0, 0x3}, {0x800, 0x2}, {0xe, 0x8000000000000000}, {0x2, 0x5}, {0x9, 0x9}, {0x7fff, 0x8}, {0xe655, 0x81}, {0x8000000000000001, 0xffffffffffffffff}, {0x8000, 0x1}, {0xfffffffffffffc00, 0x852d}, {0x0, 0x5}, {0x5, 0x8}, {0x5, 0xfffffffffffffff7}, {0x100000001, 0xffffffffffffffff}, {0xffffffffffffff80, 0xee3}, {0x0, 0xfffffffffffffc00}, {0x5, 0x100000000}, {0x3, 0x5}, {0x1, 0x1}, {0x4, 0xa}, {0x5, 0x2}, {0x2, 0x3a}, {0x2, 0x6}, {0x4cc, 0x8}, {0x5, 0x6}, {0x1, 0x4}, {0x3, 0xc}, {0x800, 0x3}, {0xbf, 0x6}, {0xffffffffffffffff, 0x8}, {0x0, 0x5}, {0xed6c, 0x9}, {0xc39, 0x9}, {0x9f2, 0x7}, {0x171e3d46}, {0x4, 0x80}, {0x6, 0x4}, {0xb, 0x9}, {0x1, 0x3}, {0x7fffffffffffffff}, {0x1ff, 0x7e6}, {0x6, 0xfffffffffffffff8}, {0xd}, {0x2, 0xfff}, {0xd35, 0x3}, {0x7, 0x4ef9}, {0x2}, {0x3, 0x8}, {0x3, 0x9e6}, {0x7, 0x2e}, {0x10000, 0x6}, {0x4, 0x9}, {0x6, 0x8}, {0x400, 0x9}, {0xffffffffffffffff, 0xf}, {0x9, 0x7}, {0x100000001, 0x7}, {0x9, 0x4}, {0x40, 0x8}, {0x3, 0x6}, {0x7fffffff, 0x40000000000}, {0x4, 0x5}, {0x8000000000000001, 0x100000000}, {0x9, 0x8}, {0x6, 0x51}, {0x6, 0x55}, {0x8, 0x6}, {0xa0, 0x9}, {0x1, 0x7fff}, {0x5, 0x27d}, {0x9, 0x9}, {0x1, 0x6f0}, {0x8}, {0x9, 0xac}, {0x19, 0xc98}, {0xffff, 0x10000}, {0x3, 0xb8a}, {0x6, 0x9e9}, {0x6ef9, 0x1}, {0x7fff, 0x6}, {0x7, 0x8}, {0xc, 0x3}, {0x0, 0x2}, {0x8, 0x7}, {0x5, 0xffffffff}, {0x62fd, 0x4}, {0x1000, 0xffff}, {0x7f, 0xfffffffffffffffc}, {0x80000000, 0x1}, {0x6962, 0x8}, {0x8fca, 0x8000000000000001}, {0x2, 0x10ae}, {0xfff, 0x800}, {0x8, 0x100}, {0x0, 0xa}, {0xa, 0x3}, {0x3ff, 0x4}, {0x1, 0x5}, {0x5, 0xa917}, {0x7, 0xfc0}, {0x401, 0xa7c}, {0x8001, 0xffffffffffffffff}, {0x4, 0x101}, {0x2c, 0x58538634}, {0x3a9, 0x7}, {0x101, 0x6b}, {0x5, 0x3}, {0x5, 0x8}, {0x8}, {0x7, 0x5}, {0x6, 0x9d89}, {0xb42, 0xc0}, {0x7, 0x7}, {0x4, 0x8}, {0x7, 0x7}, {0x400, 0x81}, {0x9, 0x8}, {0x0, 0x7}, {0x7, 0x2e88}, {0xc5c, 0x1d}, {0x794b, 0x5547}, {0x5, 0xffffffffffff24c4}, {0xc000000000000000, 0xcb4}, {0x6, 0x3}, {0x64ce098d, 0xf}, {0x6, 0xff}, {0x3000000000, 0x311d2d210000000}, {0x6, 0xf}, {0x4, 0x9}, {0x4, 0x2}, {0x3, 0x5d}, {0x4, 0x7}, {0x3, 0x81}, {0x0, 0x2}, {0x3, 0xe8d7}, {0x5, 0x2}, {0xd7c, 0xa}, {0x680, 0x5bc4}, {0x6, 0x7}, {0x0, 0xfffffffffffffffd}, {0x400, 0x5}, {0x4, 0x228}, {0x8, 0x2}, {0x2, 0x7fffffff}, {0x9, 0x81}, {0x101}, {0x1ff, 0x5}, {0x7fff, 0x6}, {0x9, 0xfffffffffffffff8}, {0x2, 0x10001}, {0x7, 0x800}, {0xd, 0x7}, {0x3d1f, 0x38c}, {0x1fffffffe000, 0x2}, {0x80, 0x6}, {0xffffffffffffab78, 0x3}, {0x31, 0x9}, {0x7e, 0xfffffffffffffffb}, {0xb, 0x6f}, {0x4, 0x14e9}, {0x4, 0x7}, {0x4, 0xf8f}, {0x33d4, 0x10001}, {0x800, 0x5466}, {0x5, 0x80000001}, {0xfffffffffffffffd, 0x173b04b9}, {0x7f, 0x2}, {0x8, 0x8}, {0x9, 0x7fffffff}, {0x7e, 0x7}, {0x4, 0x7}, {0x570, 0x2a}, {0x6, 0xd}, {0x6, 0x9}, {0x1, 0xebc}, {0x1ff, 0x3}, {0x1}, {0x400, 0x9}, {0x5, 0x6}, {0x9084, 0x8}, {0x8000, 0x2}, {0x1, 0x8000}, {0x81, 0xa3}, {0x5, 0x8}, {0x6, 0x10}, {0x7, 0xff}, {0x2, 0x4f}, {0x65d0f4c8, 0x1}, {0x5, 0x8001}, {0x10000, 0x5}, {0x8, 0x10001}, {0x7, 0x7}, {0xfffffffffffffffe, 0xffffffffffff8aaf}, {0x7fffffff, 0x4}, {0x35f4, 0x8}, {0x9, 0x8}, {0x3, 0xe}, {0x6, 0x4}, {0x3, 0x7}, {0xffffffffffffffb1, 0xffffffffffffff00}, {0x4, 0x8}, {0x8, 0xf}, {0x2, 0x80000000000}, {0x4, 0x9}, {0x100, 0x6}, {0x80000000, 0x2}, {0x8, 0xbe}, {0x8000, 0x1}, {0x8, 0x1655dd0}, {0xf1f, 0x3}, {0x9, 0x9}, {0x6d22, 0x1}]}, &(0x7f0000001ac0)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000001}}, &(0x7f0000001b00)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000001b40)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000001}, [{0xff, 0x6}, {0xff, 0xffff}, {0x8df3, 0x5d98}, {0x8, 0x1}, {0x2277, 0xfffffffffffffff9}, {0x9, 0x99}, {0x4, 0x2}, {0xffffffffffffffff, 0x7}, {0xffffffffffffff1e, 0x4}, {0x6, 0x8}, {0xffffffffffffffff, 0x81}, {0x1, 0x8001}, {0x8, 0x8}, {0xfffffffffffffffb, 0x9}, {0x189, 0xfffffffffffffffb}, {0x9, 0x3ff}, {0x8000000000000000, 0x4}, {0x1, 0x6}, {0x3}, {0x9, 0x6a6b}, {0x7fffffffffffffff, 0x5}, {0x0, 0x5}, {0xe, 0x4}, {0x9, 0xf}, {0x9, 0x800}, {0x1ff, 0xffffffffffff11a6}, {0x8}, {0xc, 0x6}, {0x80000001, 0x2}, {0x8, 0x9c5}, {0x1f, 0xfffffffffffff422}, {0x6, 0x8}, {0x1f, 0xe12c}, {0x4, 0x8}, {0xb, 0xfffffffffffffff2}, {0x0, 0x9}, {0xc5, 0x8}, {0x2, 0x7f88}, {0x4, 0x7}, {0x7}, {0x8, 0x29e}, {0x7, 0x9}, {0x6cbb, 0x3}, {0xfa, 0x7}, {0x5, 0x10001}, {0xfffffffffffffff8, 0x7}, {0x8000000000000000, 0x3}, {0xffffffffffffff97, 0x100}, {0x63dc, 0x4e8e}, {0x7, 0x8}, {0x81, 0xf}, {0xe7a1, 0x223e1302}, {0xfffffffffffffff7, 0x8}, {0xd2a, 0x2}, {0x2, 0x3da5}, {0x7, 0x7}, {0x0, 0xe}, {0x8, 0x8000000000000001}, {0x3, 0xd}, {0x6, 0x40}, {0x4, 0x142}, {0x1d3, 0xfffffffffffffff7}, {0x0, 0x2}, {0x5, 0x9}, {0x6, 0xfffffffffffffffd}, {0xffffffffffff7638, 0x4f}, {0xffffffff, 0x5}, {0xe00000000, 0x2}, {0x9, 0x1}, {0x7, 0x4}, {0x976, 0x7}, {0x7f, 0x63}, {0x4, 0x1000}, {0x8, 0x7f}, {0x19c, 0x2}, {0x18, 0x6}, {0x19}, {0x7, 0x80000000}, {0xd2}, {0xffffffffffff0ed7, 0x9}, {0x8, 0x8000000000000000}, {0x4, 0x8}, {0x1, 0x40}, {0x800, 0x7}, {0x0, 0x4}, {0x4, 0x3}, {0x7, 0x3}, {0x2, 0x1}, {0xe86a, 0xffff}, {0x7, 0x4b66}, {0x4, 0x4}, {0x2, 0x5}, {0xad, 0x785}, {0x7, 0x2}, {0x3, 0x9}, {0x1, 0x47}, {0xc, 0x100000001}, {0xf000000000000, 0x1}, {0x5, 0xffffffff}, {0x2de9, 0x23}, {0x2, 0xb01}, {0x8000, 0x80000000}, {0x3, 0x9}, {0x5, 0x8000000000000000}, {0x3}, {0x5, 0xfffffffffffff8d8}, {0xc, 0x6}, {0x0, 0x2}, {0x9, 0xa4}, {0xd, 0xc5}, {0x5, 0x1}, {0x4, 0x9}, {0x91, 0xc}, {0x0, 0x6b4}, {0x9, 0x3}, {0x140000000000000, 0x8}, {0x40}, {0x2, 0x6}, {0x5, 0x4}, {0xf, 0x5}, {0x5, 0x8}, {0x7, 0x6}, {0x1, 0x9}, {0x6, 0x101}, {0x4, 0x7}, {0x9, 0x80000001}, {0x6, 0x1}, {0x3, 0x9645}, {0x3, 0x100000000}, {0x5, 0xfffffffffffffffc}, {0x0, 0xe}, {0x4, 0x7}, {0x40, 0x10000}, {0xa, 0x80c5}, {0x2, 0x5}, {0x7ff, 0xe26}, {0x896, 0x2}, {0x800000000000000, 0x7fffffff}, {0x8000000000000001, 0x5a46}, {0x4, 0x64c8}, {0x45, 0x3}, {0x10, 0x1}, {0x3, 0x7}, {0x14, 0x4}, {0x2, 0x4}, {0x5, 0x336b}, {0x7, 0x6}, {0x1, 0x2}, {0x3fbc, 0x60}, {0x7, 0x7}, {0x1, 0x6}, {0x7, 0xa1a5}, {0x4, 0xa}, {0x2, 0x13a}, {0x7, 0x6a}, {0x2, 0xa}, {0x9, 0x80000000}, {0xffffffffffff2d7c, 0x5c}, {0x2, 0x1}, {0x6, 0x3}, {0x400, 0xfc}, {0xfff, 0x6}, {0x7, 0xa}, {0x9, 0x7}, {0x56, 0x8515}, {0x7, 0x5}, {0xf, 0x401}, {0x1, 0xfffffffffffffe42}, {0x2, 0x6}, {0x2, 0x4}, {0x1, 0x7000000000}, {0xa72b, 0x100000000}, {0xd24b, 0x1}, {0x97, 0x7fffffff}, {0x6, 0xe72c}, {0x1, 0x4}, {0x2, 0x5}, {0x80000001, 0x91}, {0x200, 0x7}, {0x2}, {0xffffffffffff5ab9}, {0x6}, {0x6, 0x3}, {0x3, 0x3}, {0x7, 0x4}, {0x7, 0x6}, {0x2, 0x6}, {0xffffffffffffffff, 0xb506}, {0x3000000000000000, 0x2}, {0x3, 0x9}, {0xa, 0x1}, {0x7fffffff, 0xfc00000000000000}, {0x1, 0x5}, {0xffffffffffff0001, 0x8da}, {0x7fffffff, 0x5}, {0x7fa, 0xad}, {0x4, 0x80000000}, {0x4, 0x8f7}, {0x6, 0x3}, {0x2ea, 0x3}, {0x91, 0x6}, {0x2, 0x5}, {0xfffffffffffffffe, 0x7d}, {0xff, 0x3}, {0x7, 0xd5f}, {0x7f}, {0x9, 0x6}, {0x4, 0x7}, {0x8, 0x63b5063b}, {0x7fff, 0x6}, {0x100, 0x3ff}, {0x800, 0x8}, {0x4, 0x8}, {0x10001, 0x5}, {0xe7a, 0x1}, {0xc618, 0x4}, {0x4, 0x9}, {0x0, 0xad2d}, {0x2, 0x80}, {0xc, 0x2}, {0x80000001, 0x3}, {0xb1aa, 0x57}, {0x2, 0xffffffffffffff00}, {0x5, 0x8}, {0x3}, {0x40, 0x1}, {0x1ce, 0x2}, {0x1ff}, {0x51c7b01f, 0x4}, {0x3, 0x7a20}, {0x8, 0x3130cb6a}, {0x5da0, 0xfffffffffffff4f3}, {0x6, 0xb2a1}, {0x5, 0xf129}, {0x4, 0x61}, {0x7, 0x3d7f}, {0x0, 0x5}, {0x0, 0x8}, {0x74, 0x8000000000000000}, {0x7fff, 0x100}, {0x7, 0x398}, {0x7, 0x2}, {}, {0x7fffffffffffffff, 0x4}, {0x8, 0x1}, {0xffffffffffffff7f, 0x6682}, {0x5, 0x4}, {0x5ae8, 0xb5}, {0x12f, 0x7f}, {0x100000000, 0x9}, {0x144, 0x7fffffff}, {0xa0, 0x800}, {0x1, 0xfffffffffffffc01}, {0x2, 0x33}, {0x7, 0x1}]}, &(0x7f0000002b80)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000001}}, &(0x7f0000002bc0)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000002c00)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000000}, [{0x400, 0x3}, {0x9, 0x7}, {0xb, 0xd415}, {0x7f, 0x1}, {0x1, 0xc9}, {0x4, 0x7fffffff}, {0x4, 0x10000}, {0x8, 0x6}, {0xca3, 0x6}, {0x7, 0x6}, {0x1ff, 0x10}, {0x592f, 0x8000000000000000}, {0x5, 0x7}, {0x5, 0x7}, {0x3, 0x2}, {0x8, 0xf}, {0x0, 0x1}, {0x4, 0x3}, {0x9, 0x16}, {0x9, 0xc1c8}, {0x2, 0x8}, {0x7ff, 0xfffffffeffffffff}, {0x9, 0x80000000}, {0x7627a8c7, 0x6d71}, {0x6, 0x7fffffffffffffff}, {}, {0x9, 0x7}, {0x7, 0x1}, {0x1, 0x7}, {0x7, 0x3}, {0x7, 0x9}, {0x4, 0xbca}, {0x7, 0x3}, {0xfff, 0x78}, {0x4, 0x8001}, {0xfffffffffffffff8, 0xe0000000000000}, {0x0, 0x74ed}, {0x80000001, 0x338}, {0x8, 0xfffffffffffffff3}, {0x7ff, 0x9}, {0x4, 0x1ff}, {0x0, 0x4}, {0x80, 0x7ff}, {0x2, 0xcf41}, {0x1, 0x6}, {0x7, 0x10000}, {0x7, 0xf716}, {0xfffffffffffffffa, 0x8}, {0x3, 0x5}, {0x643, 0x3}, {0xff, 0x7}, {0xe5, 0x7}, {0x0, 0x1000}, {0x6, 0x2}, {0x7f, 0x3eb242fe}, {0x6218, 0xcda2}, {0x7a849a81, 0x1}, {0x0, 0x9}, {0x9, 0xb9}, {0x2}, {0x3, 0xb70}, {0x6, 0x10000}, {0x5, 0x6}, {0x400, 0x4}, {0x5, 0x8}, {0xe, 0xa}, {0x5, 0x9}, {0x11d4eea9, 0x5}, {0x3ff, 0x2}, {0x2, 0x100000000}, {0x1, 0xd}, {0x1, 0x4}, {0x5, 0x2}, {0x8, 0x5}, {0x8, 0x6}, {0x1e, 0xc}, {0x100000001, 0x9}, {0x8, 0x8}, {0x0, 0x9}, {0x200}, {0x5, 0x91}, {0x8d80, 0x7aa6}, {0x9, 0x800}, {0x2, 0x4}, {0x1, 0xa}, {0x0, 0x8}, {0xba76, 0x2}, {0x1, 0x4}, {0x3, 0x1c}, {0x1, 0x3}, {0xe, 0x4}, {0x7, 0x3}, {0x100000001, 0x8000000000000000}, {0x7, 0x105}, {0x8001, 0x2}, {0x14c800, 0x1}, {0x9, 0x80000001}, {0x2, 0x5}, {0xb, 0x7fffffff}, {0x3, 0xd}, {0x2}, {0x1, 0xffffffffffffffff}, {0x81, 0x9c}, {0x5, 0x8}, {0x5, 0x6}, {0xe7e, 0x9c}, {0x4, 0x7}, {0x8, 0x2}, {0x1, 0x7}, {0x0, 0x5}, {0x1, 0x8000}, {0x43, 0x9}, {0x6, 0x7fffffffffffffff}, {0x9, 0xffff}, {}, {0xffffffff7fffffff, 0x2}, {0x9, 0x8001}, {0x4, 0x1}, {0x8, 0x5}, {0xc, 0x8}, {0x1, 0x4}, {0x5, 0x1}, {0xf, 0xbb8}, {0x6, 0x6}, {0x97b, 0x8}, {0xf, 0x7}, {0x8, 0x6}, {0xc00000, 0x8}, {0x42, 0x4}, {0xffffffffec01b36d, 0xfffffffffffffff7}, {0x8000000000000001, 0x7}, {0x49, 0x5b}, {0xf, 0x6}, {0x7ff, 0xd}, {0xfff, 0x100}, {0x401, 0x7}, {0x10001}, {0x0, 0x1}, {0x5366, 0x1}, {0x1, 0xb4}, {0x6, 0x4}, {0x9460c60, 0x9}, {0x7, 0x6857}, {0x9, 0x2}, {0x8000000000000001, 0x7}, {0x6, 0xff}, {0x8, 0x3}, {0xffffffffffffffff, 0x5}, {0x3ff, 0xb}, {0xffffffffffffff01, 0x3}, {0x7, 0x1}, {0x400, 0x40}, {0x80000001, 0x8001}, {0x55b, 0x8}, {0xfffffffffffff001}, {0x1, 0x4}, {0x101, 0x7f}, {0x5213, 0xff}, {0x6d, 0x2}, {0xffffffffffff46c1}, {0x7, 0x7}, {0x9, 0x800}, {0x9, 0x400}, {0x400}, {0x2, 0xe731}, {0x5, 0x7fff}, {0x10001, 0x1}, {0x4, 0x1}, {0x9, 0x1000}, {0xaa, 0x66}, {0x6, 0xff}, {0x6, 0xfff}, {0xffffffff917e4744, 0xe}, {0x9, 0x10}, {0x8ef, 0x7}, {0x1, 0x9}, {0x1ff, 0x81}, {0x4, 0x77b234f4}, {0x6da, 0x3}, {0x5, 0x7}, {0x8}, {0x6, 0x79}, {0x4, 0x2}, {0x5, 0x5}, {0x9}, {0x5, 0x6ef9}, {0xf9, 0x7}, {0xd, 0x3}, {0x3, 0x6}, {0xffffffffffffff81, 0x2641}, {0xffff, 0x1}, {0x3, 0x7f}, {0x7fffffff, 0x2}, {0x7ff, 0x3}, {0x3, 0xfe}, {0x6, 0x5ac}, {0x1, 0x1}, {0x5, 0x895c}, {0x7fffffffffffffff, 0x100000000}, {0x8, 0x400}, {0x287, 0x3}, {0xfffffffffffffffc, 0x7}, {0x7eb1, 0x10}, {0x2, 0xf}, {0x3, 0x1}, {0x7, 0x4}, {0x1, 0x8}, {0x3ff, 0x7fffffffffffffff}, {0xfff, 0x5}, {0xc130, 0x6}, {0x6, 0x8}, {0x1, 0x9}, {0x9, 0x5}, {0x100000000, 0x9}, {0x5, 0x5}, {0x80000000, 0x1}, {0x7f, 0x5}, {0x6a}, {0xf2c, 0x8}, {0x5, 0x10d8}, {0x7, 0xe5}, {0x3, 0x1}, {0xfffffffffffffff7, 0x8}, {0x10001, 0x9}, {0xffffffffffffff86, 0x101}, {0x6, 0xfffffffffffff469}, {0xffffffffffffffc0, 0x7}, {0x1, 0x7}, {0x9, 0x7ff}, {0x7fffffffffffffff, 0x3}, {0x58bd, 0x7f}, {0xe3, 0xf7f}, {0x1, 0x3}, {0x7f, 0x8}, {0x100000001, 0x800}, {0x6}, {0x592, 0x94}, {0x92, 0x1}, {0x6, 0xffffffffffffffff}, {0xa, 0x8}, {0x4, 0x4}, {0x4, 0xa2}, {0x6, 0x4}, {0x0, 0x100000001}, {0x1, 0x2}, {0x5, 0x1}, {0x2}, {0x401}, {0x4, 0x8}, {0x9, 0x5}, {0x8, 0x7fffffffffffffff}, {0xb, 0x8}, {0xffffffffffffffca, 0x10001}, {0x1000, 0x42a}, {0xffff, 0x100000000}]}, &(0x7f0000003c40)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000000}}, &(0x7f0000003c80)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000003cc0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000001}, {}, 0x57}, &(0x7f0000003e00)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f0000003e80)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f0000003f00)=@uuid={{0x4f32494e, 0x5, 0x10, 0xe0000001}}, &(0x7f0000003f40)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x963d37ca6035b0e0}}, &(0x7f0000003f80)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000003fc0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000002}}, &(0x7f0000004000)=@label={{0x4f32494e, 0x4, 0x10, 0x585c49cce1e0e575}}, &(0x7f0000004080)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f00000040c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000004100)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, 0x0, &(0x7f00000041c0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000001}, {}, 0x6}, 0x0, &(0x7f0000004440)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000001}}, 0x0, &(0x7f0000005500)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0x26c}, 0x0, 0x0, &(0x7f00000056c0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc037650cd2faa26c}, {}, 0x2}, &(0x7f0000005800)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000001}}, &(0x7f0000005840)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f0000005880)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f00000058c0)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000005900)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000001}, {}, 0x8}, &(0x7f0000005a40)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000001}}, &(0x7f0000005a80)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000001}}, &(0x7f0000005ac0)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000005b00)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x1}}, &(0x7f0000005b40)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x80000000}, &(0x7f0000005c80)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f0000005d00)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000005d40)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, 0x0], 0x32}) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x14) 10.895834403s ago: executing program 9 (id=7391): syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) mkdirat(0xffffffffffffff9c, 0x0, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000300)={r6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r7, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioprio_get$uid(0x3, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 9.338133327s ago: executing program 9 (id=7392): syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101001, 0x0) request_key(0x0, 0x0, &(0x7f0000001fee)='y\xa9n::e\x00'/18, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='sched\x00') ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 9.017024499s ago: executing program 5 (id=7394): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d893010203010902120001"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000400)={&(0x7f00000037c0)=[{0xffd7, 0x1210, 0x0, 0x0}, {0xff, 0x4200, 0x0, 0x0}], 0x2}) 8.91587889s ago: executing program 9 (id=7395): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x2c}}, 0x4800) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r5, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r9, &(0x7f00000002c0), 0x4, &(0x7f0000000400)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[{}, {}, {}, {}], &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x2, 0x3}) remap_file_pages(&(0x7f0000748000/0x3000)=nil, 0x3000, 0x1000006, 0x4, 0x3) 8.211176515s ago: executing program 2 (id=7397): syz_emit_ethernet(0x4a, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0xa, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r1 = openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x0) ftruncate(r1, 0x8800000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r2, r1, 0x0, 0x558410e9) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8101, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0xfffffffe, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x61) socket$kcm(0xa, 0x922000000003, 0x11) 7.962548918s ago: executing program 0 (id=7398): bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r3 = socket(0x10, 0x803, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000140)=0xfffffffe) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000000e0603000000000000000000000000020900020073797a300000d6000900020073797a3000000000050001"], 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r7, 0x0) timer_create(0x3, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x3938700}, {0x77359400}}, 0x0) 7.487923419s ago: executing program 5 (id=7399): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x2c}}, 0x4800) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r5, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a300000000020000000030a01010000000000040000010000000900030073797a32000000001c000000060a010300000000000000000100000108000b4000000000140000001100010000000000000000000700"], 0x84}, 0x1, 0x0, 0x0, 0x8}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) wait4(0x0, &(0x7f00000002c0), 0x4, &(0x7f0000000400)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 7.171111983s ago: executing program 2 (id=7400): syz_usb_connect$uac1(0x2, 0x7b, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3042, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x9, 0x0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x13}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x404, 0x5, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x5, 0xfd, {0x7, 0x25, 0x1, 0x0, 0xf0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x3, 0x1, {0x7, 0x25, 0x1, 0x4, 0x7, 0x9}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x4, 0x4, 0xa5, 0x20, 0x4}, 0x0, 0x0, 0x2, [{0x8a, &(0x7f0000000340)=@string={0x8a, 0x3, "bb3c5129a7d6aaeea801f4a889e5d2d2dc5563dabbb27fe8bf2597a6d13a01b120f7675d67e5a7824b8e228bb746a800000000000000007c0ca9f85a8c4595f3b25cc4f03f3f0e530b90cd6dfb6ce3124b244c31add573bc804670196d6558299378fdca4ac7d6c27d328113dd60c43fd621c25bc221631f1d7a4d27bd715ff0d61882395ae4c852"}}, {0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e0328f5edf7d7cd6a95dd048aee5f1c2c5e31aabfe27e930707936d915ca58a32eb4e44431e4e9fd0dc64005a73e1fa731d1b961ee5f0430500cbc8592ed732b97ef2ab8efa688cdff23ebad6bbbaa28e5afd18a93d085ff8b363db2b5e135c5e552b891719fda4"]}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbd}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x84}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0x80}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001fc0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1, 0x100004, 0x81) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40046607, &(0x7f0000000fc0)=0xfffffff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa340}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000180)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, '^', 0x3a, './file0', 0x3a, [0x4f, 0x4f]}, 0x35) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r8 = shmget(0x1, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r8, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r10, 0x4000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) write(r9, &(0x7f0000000080)='4', 0x1) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2, @local, {[@routing={0x84}], "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"}}}}}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x154, r7, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x12d, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0xc4, {0x5, 0x97, 0x5, "840713d363c6724d98bf35001c09bfc3ef576ef4cbdedd44f1719d86e7202598ad5ab2b4e5dff62ed61751909b8422ef7be7fa9aeee03cce1881434df3bc53402458604b55890de2298e22ae5eb55d3e14358d8172d3caffea4c3165a9936a26aa4560071601df38cfb687a86ed61c704879c02c575dcc5f792ca84bd70fc9a24035370ffe3e5d14541c8831eed97732a996891591391a05b51387596e4634cf9ec3255fc6c4d68b86c2b73f110f4dc0b014af75ddf00689ee90b8c538f8b8c339"}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0x0, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) 6.558699666s ago: executing program 4 (id=7402): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r0 = io_uring_setup(0x7d1, &(0x7f0000000240)={0x0, 0xddf9, 0x100, 0xfffffffe, 0x183}) close_range(r0, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) read$FUSE(r2, &(0x7f0000002080)={0x2020}, 0x2020) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) connect$inet6(r4, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000100)=@deltclass={0x434, 0x29, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5e291e8239e04253, 0xffe0}, {0xffe0, 0xf}, {0xfff3, 0x6}}, [@c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xfffffffc, 0xc14, 0x6, 0xfffffff8, 0x101, 0x7, 0x2, 0xf, 0x27, 0x10001, 0x9, 0xfffffff9, 0x8001, 0x7fff, 0x5, 0xf, 0x6, 0x4, 0xe78, 0x1, 0xfffffff7, 0x4, 0xf9bb, 0x7d, 0x5, 0x8, 0xfa, 0xa, 0x8, 0x0, 0x1ff, 0x1, 0x400, 0x0, 0x9, 0x5, 0x8, 0x2, 0x9, 0x8, 0xb0bd, 0x9f8d, 0x8, 0x7ff, 0x7, 0x4, 0x3, 0x0, 0x5, 0x5, 0xfffffff7, 0x9, 0x4, 0xfffffffe, 0x80, 0xa6f, 0x76a9, 0x9, 0x3, 0x9, 0x7, 0x7, 0xae, 0x9, 0x5, 0xfffff0f3, 0x7, 0x8, 0x5, 0x10, 0x2, 0x4, 0x4, 0x10001, 0x9, 0x4, 0x8, 0x5, 0x7, 0x5, 0x7fffffff, 0x0, 0x6, 0xf, 0x4, 0x2, 0xa, 0x0, 0x0, 0x5, 0x9000000, 0xfffffff7, 0x3, 0x9, 0xcb, 0x1aed, 0x9b62, 0x4, 0x3, 0x9, 0xc2e, 0x0, 0x14000000, 0xc866, 0x4, 0x8, 0x0, 0x5, 0x3, 0x7, 0x7, 0x6, 0xb32c, 0x3, 0xfff, 0xcb, 0x10, 0xffff, 0xfffffffd, 0x100, 0x9, 0x1, 0xf, 0x40, 0x6, 0x6, 0x4, 0x40, 0x0, 0x9, 0x0, 0x4, 0x10, 0x72e3cc1, 0x6, 0x5, 0x1, 0x6, 0x7, 0x81, 0x9, 0x3, 0x80000001, 0x8, 0x6, 0x7, 0x50, 0x1, 0xffffff6a, 0xffff3c8b, 0x5913, 0x7, 0x10001, 0x7, 0x9, 0xe, 0xfffffffd, 0xc, 0x0, 0x400, 0x8, 0x8, 0x8, 0x100, 0x9, 0x8, 0xc043, 0x62da, 0x1, 0x4, 0xee4, 0x5, 0xaaa6, 0x3d66, 0x0, 0x4, 0x2, 0xabe, 0x80, 0x5, 0x8001, 0x1, 0x7fffffff, 0xfffffffe, 0x1000, 0x9, 0x5, 0x8001, 0x7, 0xffff, 0x6, 0xffff, 0x2, 0x777, 0xfffffff1, 0x40, 0xc, 0x3, 0xe, 0x1, 0x0, 0x9, 0x0, 0x3, 0x401, 0x6, 0x6, 0x221, 0x4, 0x2, 0x4, 0x0, 0x8, 0x9, 0xffffffff, 0x401, 0x6, 0xffffffff, 0x7, 0xab, 0x0, 0x4e7, 0x6db2, 0x280, 0x10000, 0x8, 0x0, 0xc5e, 0x89b7, 0x1, 0x2, 0x0, 0x9, 0x9, 0xc, 0x1000, 0x4, 0xd60, 0x9, 0x9, 0x4, 0x2, 0x7, 0x80000001, 0xff, 0x2, 0x6, 0x4, 0x6, 0x3, 0x8, 0xc00, 0x9, 0x80000000, 0x2c]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x3f, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0) write$UHID_INPUT(r2, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) syz_open_dev$usbmon(&(0x7f0000000100), 0x6, 0x40) close(0x3) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) fanotify_init(0x0, 0x2) 5.469499176s ago: executing program 4 (id=7403): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32, @ANYBLOB="60005080110001004abee339084eeef16f1624"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.092862271s ago: executing program 4 (id=7404): r0 = socket(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}}, 0x1) r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/152, 0x98, 0x1, 0x0}, &(0x7f0000000180)=0x40) openat$mice(0xffffff9c, &(0x7f0000000540), 0x100) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r2, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_control_io(r2, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000340)={0x40, 0x6, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000480)=""/74, 0x49) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfffffffffffffffd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005fc0)={0x6, 0x13, &(0x7f0000000580)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0xd78e, 0xe7, &(0x7f0000000680)=""/231, 0x41100, 0x15, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x5, 0x10, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000840)=[{0x5, 0x5, 0x8, 0x4}, {0x0, 0x5, 0x6, 0xa}, {0x0, 0x2, 0x2, 0x7}, {0x2, 0x4, 0x10}, {0x1, 0x5, 0xd, 0x7}], 0x10, 0x80000001}, 0x94) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[], 0xb4}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r5 = socket(0x10, 0x3, 0x0) ioctl$OCFS2_IOC_INFO(r4, 0x80106f05, &(0x7f0000005f80)={&(0x7f0000005dc0)=[&(0x7f0000000080)=@label={{0x4f32494e, 0x4, 0x10, 0x40000001}}, &(0x7f0000000100)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000000}}, &(0x7f0000000140)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000000180)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xa0000001}}, &(0x7f00000001c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000000280)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}}, &(0x7f0000000480)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, &(0x7f0000000a80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x9, 0x1}, {0x800, 0x10001}, {0x8, 0xfffffffffffffffd}, {0xab, 0x7}, {0x8, 0x80000000}, {0x2, 0xfffffffffffffeff}, {0x8, 0x9}, {0x7, 0x9}, {0xfffffffffffffffe, 0x4}, {0x9bf7, 0x100}, {0x9f, 0x7}, {0x4, 0x1}, {0x80000000, 0xfffffffffffffffe}, {0x4fc, 0x7}, {0x101, 0x1}, {0x5, 0x6}, {0x101, 0x100000001}, {0x100000000, 0x1507}, {0x8, 0x7fff}, {0x8, 0x5}, {0xffffffff, 0x4}, {0x0, 0x4}, {0x7fff, 0xfffffffffffffff8}, {0x5, 0x19}, {0x3, 0x8}, {0x5, 0x9}, {0x9, 0xffff0000000000}, {0xa0, 0xfffffffffffffff9}, {0x823, 0x3}, {0x8, 0x4}, {0x1, 0x400}, {0x43}, {0x4d7, 0x800}, {0xeeb2, 0x1}, {0x2, 0xffffffffffffffff}, {0xdc, 0x8000}, {0xfb, 0x3}, {0x4, 0x5}, {0x3, 0x7fff}, {0x9, 0x9b}, {0xa9c0, 0x1}, {0xfffffffffffff800, 0x81}, {0xff, 0x9}, {0x0, 0x3}, {0x800, 0x2}, {0xe, 0x8000000000000000}, {0x2, 0x5}, {0x9, 0x9}, {0x7fff, 0x8}, {0xe655, 0x81}, {0x8000000000000001, 0xffffffffffffffff}, {0x8000, 0x1}, {0xfffffffffffffc00, 0x852d}, {0x0, 0x5}, {0x5, 0x8}, {0x5, 0xfffffffffffffff7}, {0x100000001, 0xffffffffffffffff}, {0xffffffffffffff80, 0xee3}, {0x0, 0xfffffffffffffc00}, {0x5, 0x100000000}, {0x3, 0x5}, {0x1, 0x1}, {0x4, 0xa}, {0x5, 0x2}, {0x2, 0x3a}, {0x2, 0x6}, {0x4cc, 0x8}, {0x5, 0x6}, {0x1, 0x4}, {0x3, 0xc}, {0x800, 0x3}, {0xbf, 0x6}, {0xffffffffffffffff, 0x8}, {0x0, 0x5}, {0xed6c, 0x9}, {0xc39, 0x9}, {0x9f2, 0x7}, {0x171e3d46}, {0x4, 0x80}, {0x6, 0x4}, {0xb, 0x9}, {0x1, 0x3}, {0x7fffffffffffffff}, {0x1ff, 0x7e6}, {0x6, 0xfffffffffffffff8}, {0xd}, {0x2, 0xfff}, {0xd35, 0x3}, {0x7, 0x4ef9}, {0x2}, {0x3, 0x8}, {0x3, 0x9e6}, {0x7, 0x2e}, {0x10000, 0x6}, {0x4, 0x9}, {0x6, 0x8}, {0x400, 0x9}, {0xffffffffffffffff, 0xf}, {0x9, 0x7}, {0x100000001, 0x7}, {0x9, 0x4}, {0x40, 0x8}, {0x3, 0x6}, {0x7fffffff, 0x40000000000}, {0x4, 0x5}, {0x8000000000000001, 0x100000000}, {0x9, 0x8}, {0x6, 0x51}, {0x6, 0x55}, {0x8, 0x6}, {0xa0, 0x9}, {0x1, 0x7fff}, {0x5, 0x27d}, {0x9, 0x9}, {0x1, 0x6f0}, {0x8}, {0x9, 0xac}, {0x19, 0xc98}, {0xffff, 0x10000}, {0x3, 0xb8a}, {0x6, 0x9e9}, {0x6ef9, 0x1}, {0x7fff, 0x6}, {0x7, 0x8}, {0xc, 0x3}, {0x0, 0x2}, {0x8, 0x7}, {0x5, 0xffffffff}, {0x62fd, 0x4}, {0x1000, 0xffff}, {0x7f, 0xfffffffffffffffc}, {0x80000000, 0x1}, {0x6962, 0x8}, {0x8fca, 0x8000000000000001}, {0x2, 0x10ae}, {0xfff, 0x800}, {0x8, 0x100}, {0x0, 0xa}, {0xa, 0x3}, {0x3ff, 0x4}, {0x1, 0x5}, {0x5, 0xa917}, {0x7, 0xfc0}, {0x401, 0xa7c}, {0x8001, 0xffffffffffffffff}, {0x4, 0x101}, {0x2c, 0x58538634}, {0x3a9, 0x7}, {0x101, 0x6b}, {0x5, 0x3}, {0x5, 0x8}, {0x8}, {0x7, 0x5}, {0x6, 0x9d89}, {0xb42, 0xc0}, {0x7, 0x7}, {0x4, 0x8}, {0x7, 0x7}, {0x400, 0x81}, {0x9, 0x8}, {0x0, 0x7}, {0x7, 0x2e88}, {0xc5c, 0x1d}, {0x794b, 0x5547}, {0x5, 0xffffffffffff24c4}, {0xc000000000000000, 0xcb4}, {0x6, 0x3}, {0x64ce098d, 0xf}, {0x6, 0xff}, {0x3000000000, 0x311d2d210000000}, {0x6, 0xf}, {0x4, 0x9}, {0x4, 0x2}, {0x3, 0x5d}, {0x4, 0x7}, {0x3, 0x81}, {0x0, 0x2}, {0x3, 0xe8d7}, {0x5, 0x2}, {0xd7c, 0xa}, {0x680, 0x5bc4}, {0x6, 0x7}, {0x0, 0xfffffffffffffffd}, {0x400, 0x5}, {0x4, 0x228}, {0x8, 0x2}, {0x2, 0x7fffffff}, {0x9, 0x81}, {0x101}, {0x1ff, 0x5}, {0x7fff, 0x6}, {0x9, 0xfffffffffffffff8}, {0x2, 0x10001}, {0x7, 0x800}, {0xd, 0x7}, {0x3d1f, 0x38c}, {0x1fffffffe000, 0x2}, {0x80, 0x6}, {0xffffffffffffab78, 0x3}, {0x31, 0x9}, {0x7e, 0xfffffffffffffffb}, {0xb, 0x6f}, {0x4, 0x14e9}, {0x4, 0x7}, {0x4, 0xf8f}, {0x33d4, 0x10001}, {0x800, 0x5466}, {0x5, 0x80000001}, {0xfffffffffffffffd, 0x173b04b9}, {0x7f, 0x2}, {0x8, 0x8}, {0x9, 0x7fffffff}, {0x7e, 0x7}, {0x4, 0x7}, {0x570, 0x2a}, {0x6, 0xd}, {0x6, 0x9}, {0x1, 0xebc}, {0x1ff, 0x3}, {0x1}, {0x400, 0x9}, {0x5, 0x6}, {0x9084, 0x8}, {0x8000, 0x2}, {0x1, 0x8000}, {0x81, 0xa3}, {0x5, 0x8}, {0x6, 0x10}, {0x7, 0xff}, {0x2, 0x4f}, {0x65d0f4c8, 0x1}, {0x5, 0x8001}, {0x10000, 0x5}, {0x8, 0x10001}, {0x7, 0x7}, {0xfffffffffffffffe, 0xffffffffffff8aaf}, {0x7fffffff, 0x4}, {0x35f4, 0x8}, {0x9, 0x8}, {0x3, 0xe}, {0x6, 0x4}, {0x3, 0x7}, {0xffffffffffffffb1, 0xffffffffffffff00}, {0x4, 0x8}, {0x8, 0xf}, {0x2, 0x80000000000}, {0x4, 0x9}, {0x100, 0x6}, {0x80000000, 0x2}, {0x8, 0xbe}, {0x8000, 0x1}, {0x8, 0x1655dd0}, {0xf1f, 0x3}, {0x9, 0x9}, {0x6d22, 0x1}]}, &(0x7f0000001ac0)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000001}}, &(0x7f0000001b00)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000001b40)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000001}, [{0xff, 0x6}, {0xff, 0xffff}, {0x8df3, 0x5d98}, {0x8, 0x1}, {0x2277, 0xfffffffffffffff9}, {0x9, 0x99}, {0x4, 0x2}, {0xffffffffffffffff, 0x7}, {0xffffffffffffff1e, 0x4}, {0x6, 0x8}, {0xffffffffffffffff, 0x81}, {0x1, 0x8001}, {0x8, 0x8}, {0xfffffffffffffffb, 0x9}, {0x189, 0xfffffffffffffffb}, {0x9, 0x3ff}, {0x8000000000000000, 0x4}, {0x1, 0x6}, {0x3}, {0x9, 0x6a6b}, {0x7fffffffffffffff, 0x5}, {0x0, 0x5}, {0xe, 0x4}, {0x9, 0xf}, {0x9, 0x800}, {0x1ff, 0xffffffffffff11a6}, {0x8}, {0xc, 0x6}, {0x80000001, 0x2}, {0x8, 0x9c5}, {0x1f, 0xfffffffffffff422}, {0x6, 0x8}, {0x1f, 0xe12c}, {0x4, 0x8}, {0xb, 0xfffffffffffffff2}, {0x0, 0x9}, {0xc5, 0x8}, {0x2, 0x7f88}, {0x4, 0x7}, {0x7}, {0x8, 0x29e}, {0x7, 0x9}, {0x6cbb, 0x3}, {0xfa, 0x7}, {0x5, 0x10001}, {0xfffffffffffffff8, 0x7}, {0x8000000000000000, 0x3}, {0xffffffffffffff97, 0x100}, {0x63dc, 0x4e8e}, {0x7, 0x8}, {0x81, 0xf}, {0xe7a1, 0x223e1302}, {0xfffffffffffffff7, 0x8}, {0xd2a, 0x2}, {0x2, 0x3da5}, {0x7, 0x7}, {0x0, 0xe}, {0x8, 0x8000000000000001}, {0x3, 0xd}, {0x6, 0x40}, {0x4, 0x142}, {0x1d3, 0xfffffffffffffff7}, {0x0, 0x2}, {0x5, 0x9}, {0x6, 0xfffffffffffffffd}, {0xffffffffffff7638, 0x4f}, {0xffffffff, 0x5}, {0xe00000000, 0x2}, {0x9, 0x1}, {0x7, 0x4}, {0x976, 0x7}, {0x7f, 0x63}, {0x4, 0x1000}, {0x8, 0x7f}, {0x19c, 0x2}, {0x18, 0x6}, {0x19}, {0x7, 0x80000000}, {0xd2}, {0xffffffffffff0ed7, 0x9}, {0x8, 0x8000000000000000}, {0x4, 0x8}, {0x1, 0x40}, {0x800, 0x7}, {0x0, 0x4}, {0x4, 0x3}, {0x7, 0x3}, {0x2, 0x1}, {0xe86a, 0xffff}, {0x7, 0x4b66}, {0x4, 0x4}, {0x2, 0x5}, {0xad, 0x785}, {0x7, 0x2}, {0x3, 0x9}, {0x1, 0x47}, {0xc, 0x100000001}, {0xf000000000000, 0x1}, {0x5, 0xffffffff}, {0x2de9, 0x23}, {0x2, 0xb01}, {0x8000, 0x80000000}, {0x3, 0x9}, {0x5, 0x8000000000000000}, {0x3}, {0x5, 0xfffffffffffff8d8}, {0xc, 0x6}, {0x0, 0x2}, {0x9, 0xa4}, {0xd, 0xc5}, {0x5, 0x1}, {0x4, 0x9}, {0x91, 0xc}, {0x0, 0x6b4}, {0x9, 0x3}, {0x140000000000000, 0x8}, {0x40}, {0x2, 0x6}, {0x5, 0x4}, {0xf, 0x5}, {0x5, 0x8}, {0x7, 0x6}, {0x1, 0x9}, {0x6, 0x101}, {0x4, 0x7}, {0x9, 0x80000001}, {0x6, 0x1}, {0x3, 0x9645}, {0x3, 0x100000000}, {0x5, 0xfffffffffffffffc}, {0x0, 0xe}, {0x4, 0x7}, {0x40, 0x10000}, {0xa, 0x80c5}, {0x2, 0x5}, {0x7ff, 0xe26}, {0x896, 0x2}, {0x800000000000000, 0x7fffffff}, {0x8000000000000001, 0x5a46}, {0x4, 0x64c8}, {0x45, 0x3}, {0x10, 0x1}, {0x3, 0x7}, {0x14, 0x4}, {0x2, 0x4}, {0x5, 0x336b}, {0x7, 0x6}, {0x1, 0x2}, {0x3fbc, 0x60}, {0x7, 0x7}, {0x1, 0x6}, {0x7, 0xa1a5}, {0x4, 0xa}, {0x2, 0x13a}, {0x7, 0x6a}, {0x2, 0xa}, {0x9, 0x80000000}, {0xffffffffffff2d7c, 0x5c}, {0x2, 0x1}, {0x6, 0x3}, {0x400, 0xfc}, {0xfff, 0x6}, {0x7, 0xa}, {0x9, 0x7}, {0x56, 0x8515}, {0x7, 0x5}, {0xf, 0x401}, {0x1, 0xfffffffffffffe42}, {0x2, 0x6}, {0x2, 0x4}, {0x1, 0x7000000000}, {0xa72b, 0x100000000}, {0xd24b, 0x1}, {0x97, 0x7fffffff}, {0x6, 0xe72c}, {0x1, 0x4}, {0x2, 0x5}, {0x80000001, 0x91}, {0x200, 0x7}, {0x2}, {0xffffffffffff5ab9}, {0x6}, {0x6, 0x3}, {0x3, 0x3}, {0x7, 0x4}, {0x7, 0x6}, {0x2, 0x6}, {0xffffffffffffffff, 0xb506}, {0x3000000000000000, 0x2}, {0x3, 0x9}, {0xa, 0x1}, {0x7fffffff, 0xfc00000000000000}, {0x1, 0x5}, {0xffffffffffff0001, 0x8da}, {0x7fffffff, 0x5}, {0x7fa, 0xad}, {0x4, 0x80000000}, {0x4, 0x8f7}, {0x6, 0x3}, {0x2ea, 0x3}, {0x91, 0x6}, {0x2, 0x5}, {0xfffffffffffffffe, 0x7d}, {0xff, 0x3}, {0x7, 0xd5f}, {0x7f}, {0x9, 0x6}, {0x4, 0x7}, {0x8, 0x63b5063b}, {0x7fff, 0x6}, {0x100, 0x3ff}, {0x800, 0x8}, {0x4, 0x8}, {0x10001, 0x5}, {0xe7a, 0x1}, {0xc618, 0x4}, {0x4, 0x9}, {0x0, 0xad2d}, {0x2, 0x80}, {0xc, 0x2}, {0x80000001, 0x3}, {0xb1aa, 0x57}, {0x2, 0xffffffffffffff00}, {0x5, 0x8}, {0x3}, {0x40, 0x1}, {0x1ce, 0x2}, {0x1ff}, {0x51c7b01f, 0x4}, {0x3, 0x7a20}, {0x8, 0x3130cb6a}, {0x5da0, 0xfffffffffffff4f3}, {0x6, 0xb2a1}, {0x5, 0xf129}, {0x4, 0x61}, {0x7, 0x3d7f}, {0x0, 0x5}, {0x0, 0x8}, {0x74, 0x8000000000000000}, {0x7fff, 0x100}, {0x7, 0x398}, {0x7, 0x2}, {}, {0x7fffffffffffffff, 0x4}, {0x8, 0x1}, {0xffffffffffffff7f, 0x6682}, {0x5, 0x4}, {0x5ae8, 0xb5}, {0x12f, 0x7f}, {0x100000000, 0x9}, {0x144, 0x7fffffff}, {0xa0, 0x800}, {0x1, 0xfffffffffffffc01}, {0x2, 0x33}, {0x7, 0x1}]}, &(0x7f0000002b80)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000001}}, &(0x7f0000002bc0)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000002c00)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000000}, [{0x400, 0x3}, {0x9, 0x7}, {0xb, 0xd415}, {0x7f, 0x1}, {0x1, 0xc9}, {0x4, 0x7fffffff}, {0x4, 0x10000}, {0x8, 0x6}, {0xca3, 0x6}, {0x7, 0x6}, {0x1ff, 0x10}, {0x592f, 0x8000000000000000}, {0x5, 0x7}, {0x5, 0x7}, {0x3, 0x2}, {0x8, 0xf}, {0x0, 0x1}, {0x4, 0x3}, {0x9, 0x16}, {0x9, 0xc1c8}, {0x2, 0x8}, {0x7ff, 0xfffffffeffffffff}, {0x9, 0x80000000}, {0x7627a8c7, 0x6d71}, {0x6, 0x7fffffffffffffff}, {}, {0x9, 0x7}, {0x7, 0x1}, {0x1, 0x7}, {0x7, 0x3}, {0x7, 0x9}, {0x4, 0xbca}, {0x7, 0x3}, {0xfff, 0x78}, {0x4, 0x8001}, {0xfffffffffffffff8, 0xe0000000000000}, {0x0, 0x74ed}, {0x80000001, 0x338}, {0x8, 0xfffffffffffffff3}, {0x7ff, 0x9}, {0x4, 0x1ff}, {0x0, 0x4}, {0x80, 0x7ff}, {0x2, 0xcf41}, {0x1, 0x6}, {0x7, 0x10000}, {0x7, 0xf716}, {0xfffffffffffffffa, 0x8}, {0x3, 0x5}, {0x643, 0x3}, {0xff, 0x7}, {0xe5, 0x7}, {0x0, 0x1000}, {0x6, 0x2}, {0x7f, 0x3eb242fe}, {0x6218, 0xcda2}, {0x7a849a81, 0x1}, {0x0, 0x9}, {0x9, 0xb9}, {0x2}, {0x3, 0xb70}, {0x6, 0x10000}, {0x5, 0x6}, {0x400, 0x4}, {0x5, 0x8}, {0xe, 0xa}, {0x5, 0x9}, {0x11d4eea9, 0x5}, {0x3ff, 0x2}, {0x2, 0x100000000}, {0x1, 0xd}, {0x1, 0x4}, {0x5, 0x2}, {0x8, 0x5}, {0x8, 0x6}, {0x1e, 0xc}, {0x100000001, 0x9}, {0x8, 0x8}, {0x0, 0x9}, {0x200}, {0x5, 0x91}, {0x8d80, 0x7aa6}, {0x9, 0x800}, {0x2, 0x4}, {0x1, 0xa}, {0x0, 0x8}, {0xba76, 0x2}, {0x1, 0x4}, {0x3, 0x1c}, {0x1, 0x3}, {0xe, 0x4}, {0x7, 0x3}, {0x100000001, 0x8000000000000000}, {0x7, 0x105}, {0x8001, 0x2}, {0x14c800, 0x1}, {0x9, 0x80000001}, {0x2, 0x5}, {0xb, 0x7fffffff}, {0x3, 0xd}, {0x2}, {0x1, 0xffffffffffffffff}, {0x81, 0x9c}, {0x5, 0x8}, {0x5, 0x6}, {0xe7e, 0x9c}, {0x4, 0x7}, {0x8, 0x2}, {0x1, 0x7}, {0x0, 0x5}, {0x1, 0x8000}, {0x43, 0x9}, {0x6, 0x7fffffffffffffff}, {0x9, 0xffff}, {}, {0xffffffff7fffffff, 0x2}, {0x9, 0x8001}, {0x4, 0x1}, {0x8, 0x5}, {0xc, 0x8}, {0x1, 0x4}, {0x5, 0x1}, {0xf, 0xbb8}, {0x6, 0x6}, {0x97b, 0x8}, {0xf, 0x7}, {0x8, 0x6}, {0xc00000, 0x8}, {0x42, 0x4}, {0xffffffffec01b36d, 0xfffffffffffffff7}, {0x8000000000000001, 0x7}, {0x49, 0x5b}, {0xf, 0x6}, {0x7ff, 0xd}, {0xfff, 0x100}, {0x401, 0x7}, {0x10001}, {0x0, 0x1}, {0x5366, 0x1}, {0x1, 0xb4}, {0x6, 0x4}, {0x9460c60, 0x9}, {0x7, 0x6857}, {0x9, 0x2}, {0x8000000000000001, 0x7}, {0x6, 0xff}, {0x8, 0x3}, {0xffffffffffffffff, 0x5}, {0x3ff, 0xb}, {0xffffffffffffff01, 0x3}, {0x7, 0x1}, {0x400, 0x40}, {0x80000001, 0x8001}, {0x55b, 0x8}, {0xfffffffffffff001}, {0x1, 0x4}, {0x101, 0x7f}, {0x5213, 0xff}, {0x6d, 0x2}, {0xffffffffffff46c1}, {0x7, 0x7}, {0x9, 0x800}, {0x9, 0x400}, {0x400}, {0x2, 0xe731}, {0x5, 0x7fff}, {0x10001, 0x1}, {0x4, 0x1}, {0x9, 0x1000}, {0xaa, 0x66}, {0x6, 0xff}, {0x6, 0xfff}, {0xffffffff917e4744, 0xe}, {0x9, 0x10}, {0x8ef, 0x7}, {0x1, 0x9}, {0x1ff, 0x81}, {0x4, 0x77b234f4}, {0x6da, 0x3}, {0x5, 0x7}, {0x8}, {0x6, 0x79}, {0x4, 0x2}, {0x5, 0x5}, {0x9}, {0x5, 0x6ef9}, {0xf9, 0x7}, {0xd, 0x3}, {0x3, 0x6}, {0xffffffffffffff81, 0x2641}, {0xffff, 0x1}, {0x3, 0x7f}, {0x7fffffff, 0x2}, {0x7ff, 0x3}, {0x3, 0xfe}, {0x6, 0x5ac}, {0x1, 0x1}, {0x5, 0x895c}, {0x7fffffffffffffff, 0x100000000}, {0x8, 0x400}, {0x287, 0x3}, {0xfffffffffffffffc, 0x7}, {0x7eb1, 0x10}, {0x2, 0xf}, {0x3, 0x1}, {0x7, 0x4}, {0x1, 0x8}, {0x3ff, 0x7fffffffffffffff}, {0xfff, 0x5}, {0xc130, 0x6}, {0x6, 0x8}, {0x1, 0x9}, {0x9, 0x5}, {0x100000000, 0x9}, {0x5, 0x5}, {0x80000000, 0x1}, {0x7f, 0x5}, {0x6a}, {0xf2c, 0x8}, {0x5, 0x10d8}, {0x7, 0xe5}, {0x3, 0x1}, {0xfffffffffffffff7, 0x8}, {0x10001, 0x9}, {0xffffffffffffff86, 0x101}, {0x6, 0xfffffffffffff469}, {0xffffffffffffffc0, 0x7}, {0x1, 0x7}, {0x9, 0x7ff}, {0x7fffffffffffffff, 0x3}, {0x58bd, 0x7f}, {0xe3, 0xf7f}, {0x1, 0x3}, {0x7f, 0x8}, {0x100000001, 0x800}, {0x6}, {0x592, 0x94}, {0x92, 0x1}, {0x6, 0xffffffffffffffff}, {0xa, 0x8}, {0x4, 0x4}, {0x4, 0xa2}, {0x6, 0x4}, {0x0, 0x100000001}, {0x1, 0x2}, {0x5, 0x1}, {0x2}, {0x401}, {0x4, 0x8}, {0x9, 0x5}, {0x8, 0x7fffffffffffffff}, {0xb, 0x8}, {0xffffffffffffffca, 0x10001}, {0x1000, 0x42a}, {0xffff, 0x100000000}]}, &(0x7f0000003c40)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000000}}, &(0x7f0000003c80)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000003cc0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000001}, {}, 0x57}, &(0x7f0000003e00)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f0000003e80)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f0000003f00)=@uuid={{0x4f32494e, 0x5, 0x10, 0xe0000001}}, &(0x7f0000003f40)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x963d37ca6035b0e0}}, &(0x7f0000003f80)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000003fc0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000002}}, &(0x7f0000004000)=@label={{0x4f32494e, 0x4, 0x10, 0x585c49cce1e0e575}}, &(0x7f0000004080)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f00000040c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000004100)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, 0x0, &(0x7f00000041c0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000001}, {}, 0x6}, 0x0, &(0x7f0000004440)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000001}}, 0x0, &(0x7f0000005500)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0x26c}, 0x0, 0x0, &(0x7f00000056c0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc037650cd2faa26c}, {}, 0x2}, &(0x7f0000005800)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000001}}, &(0x7f0000005840)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f0000005880)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f00000058c0)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000005900)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000001}, {}, 0x8}, &(0x7f0000005a40)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000001}}, &(0x7f0000005a80)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000001}}, &(0x7f0000005ac0)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000005b00)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x1}}, &(0x7f0000005b40)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x80000000}, &(0x7f0000005c80)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f0000005d00)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000005d40)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, 0x0], 0x32}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$TIOCSIG(r6, 0x40045436, 0x14) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000072009fb3000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0800010001"], 0x20}}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 4.061620371s ago: executing program 2 (id=7405): syz_emit_ethernet(0x4a, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket(0xa, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r1, 0x8800000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r2, r1, 0x0, 0x558410e9) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8101, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0xfffffffe, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x61) socket$kcm(0xa, 0x922000000003, 0x11) 3.756413385s ago: executing program 9 (id=7406): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x1000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 3.542478963s ago: executing program 0 (id=7407): bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r3 = socket(0x10, 0x803, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000140)=0xfffffffe) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000000e0603000000000000000000000000020900020073797a300000d6000900020073797a3000000000050001"], 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x803, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) timer_create(0x3, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x3938700}, {0x77359400}}, 0x0) 3.525971793s ago: executing program 9 (id=7408): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x2c}}, 0x4800) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r5, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r9, &(0x7f00000002c0), 0x4, &(0x7f0000000400)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[{}, {}, {}, {}], &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x2, 0x3}) remap_file_pages(&(0x7f0000748000/0x3000)=nil, 0x3000, 0x1000006, 0x4, 0x3) 2.977880606s ago: executing program 2 (id=7409): syz_emit_ethernet(0x4a, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0xa, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r1 = openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x0) ftruncate(r1, 0x8800000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r2, r1, 0x0, 0x558410e9) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8101, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0xfffffffe, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x61) socket$kcm(0xa, 0x922000000003, 0x11) 2.616798844s ago: executing program 4 (id=7410): syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000040)) 2.381332316s ago: executing program 4 (id=7411): syz_open_dev$vcsu(&(0x7f0000000180), 0x1, 0x2242) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2.348273612s ago: executing program 5 (id=7412): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004479bb10b10e07700002010203010902"], 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000000400"], 0x48) socket$pppoe(0x18, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 2.114310509s ago: executing program 4 (id=7413): lseek(0xffffffffffffffff, 0x20000000000002, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e427, [{{0x9, 0x2, 0x48}}]}}, 0x0) 2.008093251s ago: executing program 2 (id=7414): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x0) 1.83247705s ago: executing program 2 (id=7415): syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) 0s ago: executing program 5 (id=7416): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r0 = io_uring_setup(0x7d1, &(0x7f0000000240)={0x0, 0xddf9, 0x100, 0xfffffffe, 0x183}) close_range(r0, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) read$FUSE(r2, &(0x7f0000002080)={0x2020}, 0x2020) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) sendmsg$nl_route_sched_retired(r3, 0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x3f, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0) write$UHID_INPUT(r2, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) syz_open_dev$usbmon(&(0x7f0000000100), 0x6, 0x40) close(0x3) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) fanotify_init(0x0, 0x2) kernel console output (not intermixed with test programs): mode [ 1293.387995][T27147] bridge_slave_0: left promiscuous mode [ 1293.409554][T27147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.493779][T27152] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7043'. [ 1293.597764][T27147] bridge_slave_1: left allmulticast mode [ 1293.597787][T27147] bridge_slave_1: left promiscuous mode [ 1293.597952][T27147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.794299][T27147] bond0: (slave bond_slave_0): Releasing backup interface [ 1293.913233][T27147] team0: Port device team_slave_0 removed [ 1294.078238][T27147] team0: Port device team_slave_1 removed [ 1294.081884][T27147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1294.081910][T27147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1294.147560][T27147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1294.147580][T27147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1294.212904][T27147] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1294.949051][ T5725] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1295.059461][ T821] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1295.099615][ T5725] usb 5-1: Using ep0 maxpacket: 16 [ 1295.103409][ T5725] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1295.103438][ T5725] usb 5-1: config 0 has no interface number 0 [ 1295.103484][ T5725] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.103501][ T5725] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1295.103532][ T5725] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1295.103547][ T5725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.127280][ T5725] usb 5-1: config 0 descriptor?? [ 1295.253322][ T821] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1295.257277][ T821] usb 10-1: config 211 has an invalid interface number: 123 but max is 0 [ 1295.257306][ T821] usb 10-1: config 211 has no interface number 0 [ 1295.257340][ T821] usb 10-1: config 211 interface 123 has no altsetting 0 [ 1295.297548][ T821] usb 10-1: New USB device found, idVendor=07c4, idProduct=a4a5, bcdDevice=52.ed [ 1295.297577][ T821] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.297597][ T821] usb 10-1: Product: syz [ 1295.297606][ T821] usb 10-1: Manufacturer: syz [ 1295.297614][ T821] usb 10-1: SerialNumber: syz [ 1295.481680][ T5725] usbhid 5-1:0.1: can't add hid device: -71 [ 1295.481803][ T5725] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 1295.531643][ T5725] usb 5-1: USB disconnect, device number 53 [ 1295.607279][T27172] loop9: detected capacity change from 0 to 7 [ 1295.625818][T27172] buffer_io_error: 9 callbacks suppressed [ 1295.625838][T27172] Buffer I/O error on dev loop9, logical block 0, async page read [ 1295.625884][T27172] Buffer I/O error on dev loop9, logical block 0, async page read [ 1295.625935][T27172] Buffer I/O error on dev loop9, logical block 0, async page read [ 1295.625971][T27172] Buffer I/O error on dev loop9, logical block 0, async page read [ 1295.626027][T27172] Buffer I/O error on dev loop9, logical block 0, async page read [ 1295.626076][T27172] Buffer I/O error on dev loop9, logical block 0, async page read [ 1295.626112][T27172] Buffer I/O error on dev loop9, logical block 0, async page read [ 1295.626131][T27172] ldm_validate_partition_table(): Disk read failed. [ 1295.626161][T27172] Buffer I/O error on dev loop9, logical block 0, async page read [ 1295.626196][T27172] Buffer I/O error on dev loop9, logical block 0, async page read [ 1295.626228][T27172] Buffer I/O error on dev loop9, logical block 0, async page read [ 1295.626266][T27172] Dev loop9: unable to read RDB block 0 [ 1295.626343][T27172] loop9: unable to read partition table [ 1295.626583][T27172] loop9: partition table beyond EOD, truncated [ 1295.626952][T27172] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1295.626952][T27172] ) failed (rc=-5) [ 1295.844278][ T821] usb-storage 10-1:211.123: USB Mass Storage device detected [ 1295.916613][ T821] usb-storage 10-1:211.123: Quirks match for vid 07c4 pid a4a5: 420 [ 1296.054940][ T821] usb 10-1: USB disconnect, device number 43 [ 1296.538350][T27189] ALSA: mixer_oss: invalid OSS volume 'OGADCaptuO'.L*8P88re' [ 1296.538389][T27189] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 1296.589145][ T5725] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1296.742563][ T5725] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1296.744105][ T5725] usb 6-1: config 211 has an invalid interface number: 123 but max is 0 [ 1296.744134][ T5725] usb 6-1: config 211 has no interface number 0 [ 1296.744168][ T5725] usb 6-1: config 211 interface 123 has no altsetting 0 [ 1296.779425][ T5725] usb 6-1: New USB device found, idVendor=07c4, idProduct=a4a5, bcdDevice=52.ed [ 1296.779457][ T5725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.779481][ T5725] usb 6-1: Product: syz [ 1296.779497][ T5725] usb 6-1: Manufacturer: syz [ 1296.779513][ T5725] usb 6-1: SerialNumber: syz [ 1296.969023][T17294] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1297.068994][ T821] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1297.142896][T17294] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1297.142928][T17294] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1297.142949][T17294] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1297.143003][T17294] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1297.143032][T17294] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1297.146320][T17294] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1297.146349][T17294] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1297.146389][T17294] usb 3-1: Product: syz [ 1297.146404][T17294] usb 3-1: Manufacturer: syz [ 1297.191251][ T5725] usb-storage 6-1:211.123: USB Mass Storage device detected [ 1297.228978][ T5624] Bluetooth: hci0: command 0x0406 tx timeout [ 1297.245452][ T5725] usb-storage 6-1:211.123: Quirks match for vid 07c4 pid a4a5: 420 [ 1297.259536][ T821] usb 5-1: Using ep0 maxpacket: 16 [ 1297.262422][ T821] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1297.262457][ T821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1297.297234][ T821] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1297.297265][ T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.297287][ T821] usb 5-1: Product: syz [ 1297.297303][ T821] usb 5-1: Manufacturer: syz [ 1297.297319][ T821] usb 5-1: SerialNumber: syz [ 1297.311045][ T821] usb 5-1: config 0 descriptor?? [ 1297.350502][T17294] cdc_wdm 3-1:1.0: skipping garbage [ 1297.350523][T17294] cdc_wdm 3-1:1.0: skipping garbage [ 1297.354140][ T821] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1297.354176][ T821] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1297.591698][T17294] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1297.591720][T17294] cdc_wdm 3-1:1.0: Unknown control protocol [ 1297.837607][ T5725] usb 6-1: USB disconnect, device number 33 [ 1298.008025][ T821] em28xx 5-1:0.0: chip ID is em2828X [ 1298.240918][ T5725] usb 5-1: USB disconnect, device number 54 [ 1298.247243][ T5725] em28xx 5-1:0.0: Disconnecting em28xx [ 1298.326792][T14668] usb 3-1: USB disconnect, device number 55 [ 1298.362658][ T5725] em28xx 5-1:0.0: Freeing device [ 1298.789160][ T821] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 1298.919230][T14668] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1298.944826][ T821] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1298.961209][ T821] usb 6-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 1298.961229][ T821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.961242][ T821] usb 6-1: Product: syz [ 1298.961252][ T821] usb 6-1: Manufacturer: 췗镪ӝᱟ帬ꨱ鍾܇涓岑誥䑎ṃ齎d獚﫡ᵳ阛䏰죋⹙㋗纹꯲搜豨먾믖ꊺ媎᣽㶩弈돸師尓啞褫ᤗꓽ [ 1298.961265][ T821] usb 6-1: SerialNumber: syz [ 1299.098959][T14668] usb 10-1: Using ep0 maxpacket: 32 [ 1299.104363][T14668] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1299.104391][T14668] usb 10-1: config 0 has no interface number 0 [ 1299.107738][T14668] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1299.107768][T14668] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.107790][T14668] usb 10-1: Product: syz [ 1299.107806][T14668] usb 10-1: Manufacturer: syz [ 1299.107822][T14668] usb 10-1: SerialNumber: syz [ 1299.178460][T14668] usb 10-1: config 0 descriptor?? [ 1299.191844][T14668] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1299.191872][T14668] usb 10-1: selecting invalid altsetting 1 [ 1299.191890][T14668] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1299.224200][T14668] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1299.224594][T14668] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1299.224652][T14668] usb 10-1: media controller created [ 1299.281613][T14668] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1299.417914][T14668] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1299.417986][T14668] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1299.418469][T14668] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1299.520638][T14668] usb 10-1: USB disconnect, device number 44 [ 1299.542491][T12802] udevd[12802]: setting owner of /dev/bus/usb/010/044 to uid=0, gid=0 failed: No such file or directory [ 1299.761630][T27240] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1300.157186][T27246] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7076'. [ 1300.270863][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.448973][ T5867] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1300.605538][ T5867] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1300.605600][ T5867] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 1300.605613][ T5867] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1300.605650][ T5867] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1300.609045][ T5867] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1300.609073][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1300.609093][ T5867] usb 3-1: Product: syz [ 1300.609162][ T5867] usb 3-1: Manufacturer: syz [ 1300.767922][ T5867] cdc_wdm 3-1:1.0: skipping garbage [ 1300.767949][ T5867] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1301.050155][ T821] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1301.052871][ T821] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1301.159203][T27263] loop9: detected capacity change from 0 to 7 [ 1301.159894][T27263] buffer_io_error: 9 callbacks suppressed [ 1301.159913][T27263] Buffer I/O error on dev loop9, logical block 0, async page read [ 1301.159953][T27263] Buffer I/O error on dev loop9, logical block 0, async page read [ 1301.159993][T27263] Buffer I/O error on dev loop9, logical block 0, async page read [ 1301.160028][T27263] Buffer I/O error on dev loop9, logical block 0, async page read [ 1301.160083][T27263] Buffer I/O error on dev loop9, logical block 0, async page read [ 1301.160133][T27263] Buffer I/O error on dev loop9, logical block 0, async page read [ 1301.160166][T27263] Buffer I/O error on dev loop9, logical block 0, async page read [ 1301.160182][T27263] ldm_validate_partition_table(): Disk read failed. [ 1301.160205][T27263] Buffer I/O error on dev loop9, logical block 0, async page read [ 1301.160232][T27263] Buffer I/O error on dev loop9, logical block 0, async page read [ 1301.160257][T27263] Buffer I/O error on dev loop9, logical block 0, async page read [ 1301.160285][T27263] Dev loop9: unable to read RDB block 0 [ 1301.160353][T27263] loop9: unable to read partition table [ 1301.160521][T27263] loop9: partition table beyond EOD, truncated [ 1301.160542][T27263] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1301.160542][T27263] ) failed (rc=-5) [ 1301.212955][ T821] usb 6-1: USB disconnect, device number 34 [ 1301.384844][T12824] udevd[12824]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1301.839019][ T821] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1302.028994][T14668] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1302.088983][ T821] usb 5-1: Using ep0 maxpacket: 16 [ 1302.091127][ T821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.091184][ T821] usb 5-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1302.091214][ T821] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1302.091251][ T821] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1302.091277][ T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.193392][ T821] usb 5-1: config 0 descriptor?? [ 1302.232366][T14668] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1302.232398][T14668] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1302.232419][T14668] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1302.232470][T14668] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1302.232494][T14668] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1302.234364][ T821] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1302.235804][T14668] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1302.235822][T14668] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1302.235843][T14668] usb 6-1: Product: syz [ 1302.235852][T14668] usb 6-1: Manufacturer: syz [ 1302.357059][T14668] cdc_wdm 6-1:1.0: skipping garbage [ 1302.357081][T14668] cdc_wdm 6-1:1.0: skipping garbage [ 1302.369967][T27279] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7084'. [ 1302.386006][T14668] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1302.386029][T14668] cdc_wdm 6-1:1.0: Unknown control protocol [ 1302.828946][ T821] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1302.979023][ T821] usb 10-1: Using ep0 maxpacket: 32 [ 1302.985132][ T821] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1302.985160][ T821] usb 10-1: config 0 has no interface number 0 [ 1303.013139][ T821] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1303.013171][ T821] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.013193][ T821] usb 10-1: Product: syz [ 1303.013210][ T821] usb 10-1: Manufacturer: syz [ 1303.013226][ T821] usb 10-1: SerialNumber: syz [ 1303.064452][ T821] usb 10-1: config 0 descriptor?? [ 1303.084244][ T821] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1303.084272][ T821] usb 10-1: selecting invalid altsetting 1 [ 1303.084290][ T821] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1303.131295][ T821] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1303.131737][ T821] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1303.131795][ T821] usb 10-1: media controller created [ 1303.215129][T13263] usb 3-1: USB disconnect, device number 56 [ 1303.232740][ T821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1303.335825][T14668] usb 6-1: USB disconnect, device number 35 [ 1303.410496][ T821] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1303.410557][ T821] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1303.412078][ T821] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1303.507481][ T821] usb 10-1: USB disconnect, device number 45 [ 1303.730724][T13263] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1303.731037][ T821] usb 5-1: USB disconnect, device number 55 [ 1303.888995][T13263] usb 3-1: Using ep0 maxpacket: 8 [ 1303.892407][T13263] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1303.892469][T13263] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1303.892494][T13263] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1303.892521][T13263] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1303.892553][T13263] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1303.892598][T13263] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1303.892623][T13263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.269755][T26679] Bluetooth: hci5: unexpected event for opcode 0x2041 [ 1304.271729][T13263] usb 3-1: usb_control_msg returned -32 [ 1304.271781][T13263] usbtmc 3-1:16.0: can't read capabilities [ 1304.484637][T27295] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7087'. [ 1304.488981][ T5875] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1304.649751][T27302] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7090'. [ 1304.678943][ T5875] usb 6-1: Using ep0 maxpacket: 32 [ 1304.703320][ T5875] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1304.703349][ T5875] usb 6-1: config 0 has no interface number 0 [ 1304.725797][ T5875] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1304.725836][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.725859][ T5875] usb 6-1: Product: syz [ 1304.725875][ T5875] usb 6-1: Manufacturer: syz [ 1304.725890][ T5875] usb 6-1: SerialNumber: syz [ 1304.771957][ T5875] usb 6-1: config 0 descriptor?? [ 1304.776147][ T5875] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1304.776165][ T5875] usb 6-1: selecting invalid altsetting 1 [ 1304.776175][ T5875] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1304.807426][ T5875] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1304.807864][ T5875] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1304.807920][ T5875] usb 6-1: media controller created [ 1304.867366][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1305.179049][ T5875] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1305.179113][ T5875] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1305.179780][ T5875] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1305.295773][ T5875] usb 6-1: USB disconnect, device number 36 [ 1305.380126][ T821] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1305.529062][ T821] usb 5-1: Using ep0 maxpacket: 16 [ 1305.533433][ T821] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1024 [ 1305.533456][ T821] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1305.533471][ T821] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1305.537013][ T821] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1305.537032][ T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.537044][ T821] usb 5-1: Product: syz [ 1305.537053][ T821] usb 5-1: Manufacturer: ﮄឦ끳䡲䖟宒⮝麨밯穆곛ᖓ叻樿襤凤숄䓗矚 [ 1305.537063][ T821] usb 5-1: SerialNumber: syz [ 1305.982216][ T821] cdc_ncm 5-1:1.0: bind() failure [ 1306.040313][ T821] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1306.040344][ T821] cdc_ncm 5-1:1.1: bind() failure [ 1306.101269][ T821] usb 5-1: USB disconnect, device number 56 [ 1306.249126][T27313] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7095'. [ 1306.513425][ T5875] usb 3-1: USB disconnect, device number 57 [ 1306.941722][T27322] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7099'. [ 1306.949193][T14668] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1307.035309][ T5875] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1307.129127][T14668] usb 6-1: Using ep0 maxpacket: 16 [ 1307.150607][T14668] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1307.150639][T14668] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.150661][T14668] usb 6-1: Product: syz [ 1307.150677][T14668] usb 6-1: Manufacturer: syz [ 1307.150693][T14668] usb 6-1: SerialNumber: syz [ 1307.221846][ T5875] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.221863][ T5875] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1307.252641][ T5875] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1307.252660][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.252673][ T5875] usb 3-1: Product: syz [ 1307.252682][ T5875] usb 3-1: Manufacturer: syz [ 1307.252691][ T5875] usb 3-1: SerialNumber: syz [ 1307.306179][ T5875] usb 3-1: config 0 descriptor?? [ 1307.581203][ T5875] usb 3-1: USB disconnect, device number 58 [ 1308.926857][T14668] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1308.926917][T14668] usb 6-1: MIDIStreaming interface descriptor not found [ 1309.240058][ T821] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1309.395640][ T821] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1309.395672][ T821] usb 1-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1309.395693][ T821] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1309.395762][ T821] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1309.398306][ T821] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1309.398336][ T821] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1309.398358][ T821] usb 1-1: Product: syz [ 1309.398374][ T821] usb 1-1: Manufacturer: syz [ 1309.485469][ T821] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1309.863049][T27349] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7106'. [ 1310.119235][ T821] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1310.198325][T27362] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7110'. [ 1310.268954][ T821] usb 10-1: Using ep0 maxpacket: 8 [ 1310.270900][ T821] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1310.270959][ T821] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1310.270983][ T821] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1310.271002][ T821] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1310.271016][ T821] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1310.271042][ T821] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1310.271056][ T821] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.379235][T13221] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1310.506347][T26679] Bluetooth: hci4: unexpected event for opcode 0x2041 [ 1310.506780][ T821] usb 10-1: usb_control_msg returned -32 [ 1310.506830][ T821] usbtmc 10-1:16.0: can't read capabilities [ 1310.531803][T13221] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1310.533123][T13221] usb 3-1: config 211 has an invalid interface number: 123 but max is 0 [ 1310.533141][T13221] usb 3-1: config 211 has no interface number 0 [ 1310.533223][T13221] usb 3-1: config 211 interface 123 has no altsetting 0 [ 1310.536191][T13221] usb 3-1: New USB device found, idVendor=07c4, idProduct=a4a5, bcdDevice=52.ed [ 1310.536307][T13221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.536321][T13221] usb 3-1: Product: syz [ 1310.536330][T13221] usb 3-1: Manufacturer: syz [ 1310.536339][T13221] usb 3-1: SerialNumber: syz [ 1310.682718][ T821] usb 6-1: USB disconnect, device number 37 [ 1311.041579][T13221] usb-storage 3-1:211.123: USB Mass Storage device detected [ 1311.076313][T13221] usb-storage 3-1:211.123: Quirks match for vid 07c4 pid a4a5: 420 [ 1311.263648][T13221] usb 3-1: USB disconnect, device number 59 [ 1311.892196][ T5875] usb 1-1: USB disconnect, device number 33 [ 1313.529083][T17294] usb 10-1: USB disconnect, device number 46 [ 1314.101269][T27390] program syz.9.7118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1314.102155][T27390] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1314.959296][T14668] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1314.994050][T27394] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7120'. [ 1315.129220][T14668] usb 1-1: Using ep0 maxpacket: 16 [ 1315.131987][T14668] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1315.132023][T14668] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1315.136621][T14668] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1315.136652][T14668] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.136676][T14668] usb 1-1: Product: syz [ 1315.136692][T14668] usb 1-1: Manufacturer: syz [ 1315.136708][T14668] usb 1-1: SerialNumber: syz [ 1315.166440][T13221] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1315.210941][T14668] usb 1-1: config 0 descriptor?? [ 1315.241622][T14668] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1315.241650][T14668] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1315.358905][T13221] usb 3-1: Using ep0 maxpacket: 16 [ 1315.362073][T13221] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1315.362107][T13221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1315.399679][T13221] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1315.399712][T13221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.399742][T13221] usb 3-1: Product: syz [ 1315.399759][T13221] usb 3-1: Manufacturer: syz [ 1315.399776][T13221] usb 3-1: SerialNumber: syz [ 1315.444768][T13221] usb 3-1: config 0 descriptor?? [ 1315.459568][T13221] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1315.459604][T13221] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1315.572875][T27402] netlink: 'syz.5.7123': attribute type 2 has an invalid length. [ 1315.928648][T14668] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1315.929383][T14668] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1315.929792][T14668] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 1315.929807][T14668] em28xx 1-1:0.0: No AC97 audio processor [ 1316.111378][T13221] em28xx 3-1:0.0: chip ID is em2828X [ 1316.130327][T14668] usb 1-1: USB disconnect, device number 34 [ 1316.182820][T14668] em28xx 1-1:0.0: Disconnecting em28xx [ 1316.261307][T14668] em28xx 1-1:0.0: Freeing device [ 1316.452840][ T821] usb 3-1: USB disconnect, device number 60 [ 1316.485764][ T821] em28xx 3-1:0.0: Disconnecting em28xx [ 1316.535569][ T821] em28xx 3-1:0.0: Freeing device [ 1316.609042][T17294] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1316.766142][T17294] usb 6-1: Using ep0 maxpacket: 32 [ 1316.777203][T17294] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1316.777240][T17294] usb 6-1: config 0 has no interface number 0 [ 1316.789591][T17294] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1316.789619][T17294] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.789639][T17294] usb 6-1: Product: syz [ 1316.789654][T17294] usb 6-1: Manufacturer: syz [ 1316.789668][T17294] usb 6-1: SerialNumber: syz [ 1316.832489][T17294] usb 6-1: config 0 descriptor?? [ 1316.847917][T17294] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1316.847935][T17294] usb 6-1: selecting invalid altsetting 1 [ 1316.847945][T17294] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1316.887190][T17294] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1316.888668][T17294] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1316.888728][T17294] usb 6-1: media controller created [ 1316.987393][T17294] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1317.150542][T17294] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1317.150602][T17294] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1317.151096][T17294] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1317.272850][T17294] usb 6-1: USB disconnect, device number 38 [ 1317.329799][ T821] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 1317.365096][T27416] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1317.453255][ T5875] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1317.485023][ T821] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1317.500234][ T821] usb 3-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 1317.500266][ T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.500289][ T821] usb 3-1: Product: syz [ 1317.500305][ T821] usb 3-1: Manufacturer: 췗镪ӝᱟ帬ꨱ鍾܇涓岑誥䑎ṃ齎d獚﫡ᵳ阛䏰죋⹙㋗纹꯲搜豨먾믖ꊺ媎᣽㶩弈돸師尓啞褫ᤗꓽ [ 1317.500330][ T821] usb 3-1: SerialNumber: syz [ 1317.619011][ T5875] usb 1-1: Using ep0 maxpacket: 8 [ 1317.622005][ T5875] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1317.622061][ T5875] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1317.622087][ T5875] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1317.622113][ T5875] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1317.622138][ T5875] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1317.622169][ T5875] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1317.622183][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.868919][ T5875] usb 1-1: usb_control_msg returned -32 [ 1317.868967][ T5875] usbtmc 1-1:16.0: can't read capabilities [ 1318.248930][T13263] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1318.455893][T13263] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1318.455925][T13263] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1318.455947][T13263] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1318.456001][T13263] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1318.456030][T13263] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1318.458313][T13263] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1318.458344][T13263] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1318.458367][T13263] usb 6-1: Product: syz [ 1318.458382][T13263] usb 6-1: Manufacturer: syz [ 1318.508754][T13263] cdc_wdm 6-1:1.0: skipping garbage [ 1318.508773][T13263] cdc_wdm 6-1:1.0: skipping garbage [ 1318.527629][T13263] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 1318.527650][T13263] cdc_wdm 6-1:1.0: Unknown control protocol [ 1318.568389][ T821] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1318.579480][ T821] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1318.656604][ T821] usb 3-1: USB disconnect, device number 61 [ 1318.771553][T12802] udevd[12802]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1319.263020][T27449] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1319.298406][T27444] netlink: 52 bytes leftover after parsing attributes in process `syz.9.7136'. [ 1319.881719][T27463] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7141'. [ 1319.883596][ T5867] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1320.028954][ T5867] usb 5-1: Using ep0 maxpacket: 16 [ 1320.032546][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1320.032567][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1320.037396][ T5867] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1320.037426][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.037449][ T5867] usb 5-1: Product: syz [ 1320.037466][ T5867] usb 5-1: Manufacturer: syz [ 1320.037483][ T5867] usb 5-1: SerialNumber: syz [ 1320.112561][ T5867] usb 5-1: config 0 descriptor?? [ 1320.126684][ T5867] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1320.126711][ T5867] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1320.309261][T14668] usb 1-1: USB disconnect, device number 35 [ 1320.848311][ T5867] em28xx 5-1:0.0: chip ID is em2828X [ 1320.992877][T27469] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1321.035941][T13263] usb 6-1: USB disconnect, device number 39 [ 1321.086734][T17294] usb 5-1: USB disconnect, device number 57 [ 1321.089449][T17294] em28xx 5-1:0.0: Disconnecting em28xx [ 1321.114173][T17294] em28xx 5-1:0.0: Freeing device [ 1321.719013][ T5725] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1321.868919][ T5725] usb 1-1: Using ep0 maxpacket: 8 [ 1321.871545][ T5725] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1321.871582][ T5725] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1321.871596][ T5725] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1321.871611][ T5725] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1321.871625][ T5725] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1321.871650][ T5725] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1321.871665][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.287107][T26679] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 1322.303505][ T5725] usb 1-1: usb_control_msg returned -32 [ 1322.303559][ T5725] usbtmc 1-1:16.0: can't read capabilities [ 1322.638300][T27476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.648719][T27476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.786129][T27490] netlink: 'syz.5.7149': attribute type 2 has an invalid length. [ 1323.103066][T27500] netlink: 'syz.5.7152': attribute type 1 has an invalid length. [ 1323.104357][T27500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7152'. [ 1323.104392][T27500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7152'. [ 1323.104832][T27500] 8021q: VLANs not supported on ipvlan1 [ 1323.530701][T27509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.531380][T27509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.994332][T13263] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1324.175954][T13263] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1324.177375][T13263] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1324.177402][T13263] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1324.177459][T13263] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1324.177488][T13263] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1324.200590][T13263] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1324.201115][T13263] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1324.201142][T13263] usb 5-1: Product: syz [ 1324.201159][T13263] usb 5-1: Manufacturer: syz [ 1324.336052][T13263] cdc_wdm 5-1:1.0: skipping garbage [ 1324.336067][T13263] cdc_wdm 5-1:1.0: skipping garbage [ 1324.353456][T13263] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 1324.353495][T13263] cdc_wdm 5-1:1.0: Unknown control protocol [ 1324.778027][T13221] usb 1-1: USB disconnect, device number 36 [ 1324.843685][T27527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7157'. [ 1325.139292][T27540] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7160'. [ 1325.387068][T13221] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1325.539040][T13221] usb 6-1: Using ep0 maxpacket: 16 [ 1325.543390][T13221] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1325.543423][T13221] usb 6-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1325.543440][T13221] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1325.543461][T13221] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1325.543475][T13221] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.547748][T13221] usb 6-1: config 0 descriptor?? [ 1325.554779][T13221] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1325.579038][T13263] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1325.738927][T13263] usb 10-1: Using ep0 maxpacket: 8 [ 1325.741332][T13263] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1325.741393][T13263] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1325.741420][T13263] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1325.741447][T13263] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1325.741473][T13263] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1325.741520][T13263] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1325.741611][T13263] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.271591][T27545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1326.272688][T27545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1326.310956][T13263] usb 10-1: usb_control_msg returned -71 [ 1326.310988][T13263] usbtmc 10-1:16.0: can't read capabilities [ 1326.396588][T13263] usb 10-1: USB disconnect, device number 47 [ 1326.657790][T13263] usb 5-1: USB disconnect, device number 58 [ 1326.911254][T27550] netlink: 'syz.4.7163': attribute type 2 has an invalid length. [ 1327.108214][T27552] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7164'. [ 1327.470592][T27556] program syz.4.7165 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1327.471227][T27556] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1328.470958][T13221] usb 6-1: USB disconnect, device number 40 [ 1328.557758][T27560] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7167'. [ 1328.850782][ T5875] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1329.070211][ T5875] usb 10-1: Using ep0 maxpacket: 16 [ 1329.076723][ T5875] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1329.076757][ T5875] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1329.205577][ T5875] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1329.205607][ T5875] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.205638][ T5875] usb 10-1: Product: syz [ 1329.205653][ T5875] usb 10-1: Manufacturer: syz [ 1329.205669][ T5875] usb 10-1: SerialNumber: syz [ 1329.268756][ T5875] usb 10-1: config 0 descriptor?? [ 1329.328042][ T5875] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1329.328080][ T5875] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1329.557569][T27570] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7171'. [ 1329.720791][T27572] bond1: (slave syz_tun): Releasing backup interface [ 1329.957216][T27572] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1329.977936][ T5875] em28xx 10-1:0.0: chip ID is em2828X [ 1330.029837][T13221] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1330.192829][T13221] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1330.192861][T13221] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1330.192883][T13221] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1330.192939][T13221] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1330.192967][T13221] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1330.196008][T13221] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1330.196038][T13221] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1330.196059][T13221] usb 6-1: Product: syz [ 1330.196075][T13221] usb 6-1: Manufacturer: syz [ 1330.268194][ T5725] usb 10-1: USB disconnect, device number 48 [ 1330.295055][T13221] cdc_wdm 6-1:1.0: skipping garbage [ 1330.295075][T13221] cdc_wdm 6-1:1.0: skipping garbage [ 1330.321228][ T5725] em28xx 10-1:0.0: Disconnecting em28xx [ 1330.328275][T13221] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1330.328296][T13221] cdc_wdm 6-1:1.0: Unknown control protocol [ 1330.348697][ T5725] em28xx 10-1:0.0: Freeing device [ 1331.268471][T17294] usb 6-1: USB disconnect, device number 41 [ 1331.283278][T27589] netlink: 'syz.0.7177': attribute type 1 has an invalid length. [ 1331.350857][T27592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7177'. [ 1331.350892][T27592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7177'. [ 1331.505027][T27589] bond1: entered promiscuous mode [ 1331.505818][T27589] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1331.620406][T27595] bond1: (slave bridge1): making interface the new active one [ 1331.620431][T27595] bridge1: entered promiscuous mode [ 1331.622621][T27595] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1331.675532][T27599] netlink: 'syz.2.7179': attribute type 2 has an invalid length. [ 1331.728948][ T5875] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1331.887484][ T5875] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1331.887516][ T5875] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1331.887537][ T5875] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1331.887591][ T5875] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1331.887621][ T5875] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1331.981073][ T5875] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1331.981108][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1331.981138][ T5875] usb 5-1: Product: syz [ 1331.981154][ T5875] usb 5-1: Manufacturer: syz [ 1332.025899][ T5875] cdc_wdm 5-1:1.0: skipping garbage [ 1332.025921][ T5875] cdc_wdm 5-1:1.0: skipping garbage [ 1332.042867][ T5875] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1332.042890][ T5875] cdc_wdm 5-1:1.0: Unknown control protocol [ 1332.778357][T27617] netlink: 'syz.0.7183': attribute type 2 has an invalid length. [ 1333.012675][T13221] usb 5-1: USB disconnect, device number 59 [ 1333.453638][T27632] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7186'. [ 1333.988974][ T5867] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 1334.078921][ T5875] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1334.143255][ T5867] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1334.161006][ T5867] usb 6-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 1334.161028][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.161040][ T5867] usb 6-1: Product: syz [ 1334.161049][ T5867] usb 6-1: Manufacturer: 췗镪ӝᱟ帬ꨱ鍾܇涓岑誥䑎ṃ齎d獚﫡ᵳ阛䏰죋⹙㋗纹꯲搜豨먾믖ꊺ媎᣽㶩弈돸師尓啞褫ᤗꓽ [ 1334.161062][ T5867] usb 6-1: SerialNumber: syz [ 1334.212709][T14668] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1334.238925][ T5875] usb 5-1: Using ep0 maxpacket: 8 [ 1334.242310][ T5875] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1334.242352][ T5875] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1334.242378][ T5875] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1334.242405][ T5875] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1334.242430][ T5875] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1334.242472][ T5875] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1334.242491][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.368975][T14668] usb 3-1: Using ep0 maxpacket: 16 [ 1334.375957][T14668] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1334.375993][T14668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1334.420697][T14668] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1334.420730][T14668] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.420817][T14668] usb 3-1: Product: syz [ 1334.420834][T14668] usb 3-1: Manufacturer: syz [ 1334.420850][T14668] usb 3-1: SerialNumber: syz [ 1334.468684][T14668] usb 3-1: config 0 descriptor?? [ 1334.535465][T14668] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1334.535506][T14668] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1334.657713][ T5875] usb 5-1: usb_control_msg returned -32 [ 1334.657767][ T5875] usbtmc 5-1:16.0: can't read capabilities [ 1334.675050][T26679] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 1334.972901][ T5867] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1334.974817][ T5867] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1335.054756][T27642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.058010][T27642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.190749][T14668] em28xx 3-1:0.0: chip ID is em2828X [ 1335.243053][ T5867] usb 6-1: USB disconnect, device number 42 [ 1335.391188][T12802] udevd[12802]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1335.442247][T13221] usb 3-1: USB disconnect, device number 62 [ 1335.477307][T13221] em28xx 3-1:0.0: Disconnecting em28xx [ 1335.535397][T13221] em28xx 3-1:0.0: Freeing device [ 1335.884728][T27650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.885100][T27650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1337.386456][ T5867] usb 5-1: USB disconnect, device number 60 [ 1338.240582][T27679] loop5: detected capacity change from 0 to 7 [ 1338.452015][T27679] Dev loop5: unable to read RDB block 7 [ 1338.452055][T27679] loop5: AHDI p1 p2 p3 [ 1338.452077][T27679] loop5: partition table partially beyond EOD, truncated [ 1338.452348][T27679] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1338.452370][T27679] loop5: p3 start 335544320 is beyond EOD, truncated [ 1339.412440][T27696] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7207'. [ 1339.489003][ T5867] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1339.639157][ T5867] usb 10-1: Using ep0 maxpacket: 32 [ 1339.645880][ T5867] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1339.645898][ T5867] usb 10-1: config 0 has no interface number 0 [ 1339.657205][ T5867] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1339.657233][ T5867] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.657253][ T5867] usb 10-1: Product: syz [ 1339.657268][ T5867] usb 10-1: Manufacturer: syz [ 1339.657282][ T5867] usb 10-1: SerialNumber: syz [ 1339.698671][ T5867] usb 10-1: config 0 descriptor?? [ 1339.723214][ T5867] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1339.723232][ T5867] usb 10-1: selecting invalid altsetting 1 [ 1339.723242][ T5867] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1339.771019][ T5867] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1339.772266][ T5867] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1339.772315][ T5867] usb 10-1: media controller created [ 1339.876839][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1340.648972][ T5875] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1340.799154][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 1340.801471][ T5875] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1340.801529][ T5875] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1340.801553][ T5875] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1340.801568][ T5875] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1340.801587][ T5875] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1340.801633][ T5875] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1340.801658][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.979261][T27695] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1341.002795][ T5867] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1341.002848][ T5867] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1341.003898][ T5867] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1341.124828][ T5875] usb 3-1: usb_control_msg returned -32 [ 1341.124881][ T5875] usbtmc 3-1:16.0: can't read capabilities [ 1341.125830][T26679] Bluetooth: hci5: unexpected event for opcode 0x2041 [ 1341.250605][ T5867] usb 10-1: USB disconnect, device number 49 [ 1341.386448][T27707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.386840][T27707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.718950][ T5867] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1341.753056][T27718] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7215'. [ 1341.871133][ T5867] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1341.871153][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.889740][ T5867] usb 6-1: config 0 descriptor?? [ 1341.914840][ T5867] cp210x 6-1:0.0: cp210x converter detected [ 1341.989030][ T5725] usb 10-1: new full-speed USB device number 50 using dummy_hcd [ 1342.141518][ T5725] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1342.154584][ T5725] usb 10-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 1342.154612][ T5725] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.154688][ T5725] usb 10-1: Product: syz [ 1342.154705][ T5725] usb 10-1: Manufacturer: 췗镪ӝᱟ帬ꨱ鍾܇涓岑誥䑎ṃ齎d獚﫡ᵳ阛䏰죋⹙㋗纹꯲搜豨먾믖ꊺ媎᣽㶩弈돸師尓啞褫ᤗꓽ [ 1342.154730][ T5725] usb 10-1: SerialNumber: syz [ 1342.257640][T27725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1342.276513][T27725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1342.931860][ T5725] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1342.936432][ T5725] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1342.940463][ T5867] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1342.940484][ T5867] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 1342.949906][ T5867] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1342.985840][ T5867] usb 6-1: USB disconnect, device number 43 [ 1343.076869][ T5867] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1343.132025][ T5867] cp210x 6-1:0.0: device disconnected [ 1343.209914][ T5725] usb 10-1: USB disconnect, device number 50 [ 1343.422366][T13234] udevd[13234]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1343.493470][ T5867] usb 3-1: USB disconnect, device number 63 [ 1344.018992][ T5867] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1344.049686][T14668] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1344.153175][T27745] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7222'. [ 1344.172705][ T5867] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1344.172726][ T5867] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1344.172737][ T5867] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1344.172768][ T5867] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1344.172784][ T5867] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1344.175604][ T5867] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1344.175635][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1344.175655][ T5867] usb 3-1: Product: syz [ 1344.175671][ T5867] usb 3-1: Manufacturer: syz [ 1344.243979][ T5867] cdc_wdm 3-1:1.0: skipping garbage [ 1344.243997][ T5867] cdc_wdm 3-1:1.0: skipping garbage [ 1344.258541][ T5867] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1344.258560][ T5867] cdc_wdm 3-1:1.0: Unknown control protocol [ 1344.311916][T14668] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1344.313243][T14668] usb 6-1: config 211 has an invalid interface number: 123 but max is 0 [ 1344.313270][T14668] usb 6-1: config 211 has no interface number 0 [ 1344.313304][T14668] usb 6-1: config 211 interface 123 has no altsetting 0 [ 1344.352622][T14668] usb 6-1: New USB device found, idVendor=07c4, idProduct=a4a5, bcdDevice=52.ed [ 1344.352654][T14668] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.352676][T14668] usb 6-1: Product: syz [ 1344.352693][T14668] usb 6-1: Manufacturer: syz [ 1344.352708][T14668] usb 6-1: SerialNumber: syz [ 1344.794985][T14668] usb-storage 6-1:211.123: USB Mass Storage device detected [ 1344.833354][T14668] usb-storage 6-1:211.123: Quirks match for vid 07c4 pid a4a5: 420 [ 1345.124443][T14668] usb 6-1: USB disconnect, device number 44 [ 1345.378254][T17294] usb 3-1: USB disconnect, device number 64 [ 1345.838916][ T821] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1345.989266][ T821] usb 10-1: Using ep0 maxpacket: 16 [ 1345.994874][ T821] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.994910][ T821] usb 10-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1345.994927][ T821] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1345.994948][ T821] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1345.994962][ T821] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.020028][ T821] usb 10-1: config 0 descriptor?? [ 1346.067343][ T821] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1346.440456][ T5875] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1346.598903][ T5875] usb 3-1: Using ep0 maxpacket: 32 [ 1346.601368][ T5875] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1346.601396][ T5875] usb 3-1: config 0 has no interface number 0 [ 1346.606658][ T5875] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1346.606840][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.606854][ T5875] usb 3-1: Product: syz [ 1346.606863][ T5875] usb 3-1: Manufacturer: syz [ 1346.606872][ T5875] usb 3-1: SerialNumber: syz [ 1346.674928][ T5875] usb 3-1: config 0 descriptor?? [ 1346.697202][ T5875] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1346.698305][ T5875] usb 3-1: selecting invalid altsetting 1 [ 1346.698327][ T5875] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1346.768309][ T5875] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1346.781273][ T5875] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1346.781359][ T5875] usb 3-1: media controller created [ 1346.821818][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1347.309213][ T821] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1347.338949][ T5725] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1347.459535][ T821] usb 6-1: Using ep0 maxpacket: 8 [ 1347.466215][ T821] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1347.466278][ T821] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1347.466305][ T821] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1347.466331][ T821] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1347.466357][ T821] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1347.466403][ T821] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1347.466428][ T821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.491879][ T5725] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1347.491907][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.592895][ T5725] usb 1-1: config 0 descriptor?? [ 1347.655633][ T5725] cp210x 1-1:0.0: cp210x converter detected [ 1347.694654][ T821] usb 6-1: usb_control_msg returned -32 [ 1347.694705][ T821] usbtmc 6-1:16.0: can't read capabilities [ 1347.909135][T13263] usb 10-1: USB disconnect, device number 51 [ 1347.941088][ T5875] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1347.941185][ T5875] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1347.960967][T27767] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1347.981830][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 1348.003242][T27775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.019904][T27775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.242320][ T5875] usb 3-1: USB disconnect, device number 65 [ 1348.523627][ T5725] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1348.523660][ T5725] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1348.528622][ T5725] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1348.557032][ T5725] usb 1-1: USB disconnect, device number 37 [ 1348.582731][ T5725] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1348.585522][ T5725] cp210x 1-1:0.0: device disconnected [ 1348.836544][T27789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.837422][T27789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.884896][T13221] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1348.949008][ T5875] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1349.032782][T13221] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1349.032813][T13221] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1349.032826][T13221] usb 10-1: Product: syz [ 1349.032835][T13221] usb 10-1: SerialNumber: syz [ 1349.037015][T13221] usb 10-1: config 0 descriptor?? [ 1349.098888][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 1349.100966][ T5875] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1349.101000][ T5875] usb 5-1: config 0 has no interface number 0 [ 1349.103641][ T5875] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1349.103668][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.103689][ T5875] usb 5-1: Product: syz [ 1349.103701][ T5875] usb 5-1: Manufacturer: syz [ 1349.103711][ T5875] usb 5-1: SerialNumber: syz [ 1349.161227][ T5875] usb 5-1: config 0 descriptor?? [ 1349.178726][ T5875] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1349.178754][ T5875] usb 5-1: selecting invalid altsetting 1 [ 1349.193484][ T5875] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1349.207373][ T5875] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1349.207772][ T5875] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1349.207841][ T5875] usb 5-1: media controller created [ 1349.249036][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1349.583311][T25581] usb 10-1: USB disconnect, device number 52 [ 1349.942751][T27806] netlink: 'syz.0.7237': attribute type 1 has an invalid length. [ 1349.985933][T27806] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1350.129114][T14668] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1350.137527][T13221] usb 6-1: USB disconnect, device number 45 [ 1350.284363][T14668] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1350.291389][T14668] usb 3-1: config 211 has an invalid interface number: 123 but max is 0 [ 1350.291415][T14668] usb 3-1: config 211 has no interface number 0 [ 1350.291447][T14668] usb 3-1: config 211 interface 123 has no altsetting 0 [ 1350.310861][T14668] usb 3-1: New USB device found, idVendor=07c4, idProduct=a4a5, bcdDevice=52.ed [ 1350.311105][T14668] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.311126][T14668] usb 3-1: Product: syz [ 1350.311140][T14668] usb 3-1: Manufacturer: syz [ 1350.311154][T14668] usb 3-1: SerialNumber: syz [ 1350.361171][ T5875] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1350.361252][ T5875] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1350.384988][T27785] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1350.476629][ T5875] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1350.887858][T14668] usb-storage 3-1:211.123: USB Mass Storage device detected [ 1350.912135][ T5875] usb 5-1: USB disconnect, device number 61 [ 1350.914306][T14668] usb-storage 3-1:211.123: Quirks match for vid 07c4 pid a4a5: 420 [ 1351.091164][T14668] usb 3-1: USB disconnect, device number 66 [ 1351.763959][T27832] program syz.0.7245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1351.764341][T27832] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1352.059009][T14668] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1352.219004][T14668] usb 10-1: Using ep0 maxpacket: 8 [ 1352.220880][T14668] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1352.221012][T14668] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1352.221039][T14668] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1352.221064][T14668] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1352.221087][T14668] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1352.221118][T14668] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1352.221132][T14668] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.409120][T17293] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1352.528935][T26679] Bluetooth: hci4: unexpected event for opcode 0x2041 [ 1352.531647][T14668] usb 10-1: usb_control_msg returned -32 [ 1352.531698][T14668] usbtmc 10-1:16.0: can't read capabilities [ 1352.589028][T17293] usb 6-1: Using ep0 maxpacket: 16 [ 1352.594191][T17293] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1352.594227][T17293] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1352.598576][T17293] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1352.598605][T17293] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.598626][T17293] usb 6-1: Product: syz [ 1352.598641][T17293] usb 6-1: Manufacturer: syz [ 1352.598657][T17293] usb 6-1: SerialNumber: syz [ 1352.625468][T17293] usb 6-1: config 0 descriptor?? [ 1352.686025][T17293] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1352.686059][T17293] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1352.989404][T14668] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1353.148217][T27841] netlink: 'syz.0.7248': attribute type 1 has an invalid length. [ 1353.169198][T14668] usb 3-1: Using ep0 maxpacket: 8 [ 1353.174941][T14668] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1353.175086][T14668] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1353.175113][T14668] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1353.175140][T14668] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1353.175229][T14668] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1353.175277][T14668] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1353.175304][T14668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.236752][T27841] bond3: entered promiscuous mode [ 1353.237764][T27841] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1353.290415][T17293] em28xx 6-1:0.0: chip ID is em2828X [ 1353.310637][T27841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7248'. [ 1353.310672][T27841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7248'. [ 1353.412261][T27841] bond3: (slave bridge2): making interface the new active one [ 1353.412278][T27841] bridge2: entered promiscuous mode [ 1353.420871][T27841] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 1353.460294][T26679] Bluetooth: hci5: unexpected event for opcode 0x2041 [ 1353.461334][T14668] usb 3-1: usb_control_msg returned -32 [ 1353.461386][T14668] usbtmc 3-1:16.0: can't read capabilities [ 1353.506410][T27839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.509478][T27839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.526356][T17293] usb 6-1: USB disconnect, device number 46 [ 1353.551633][T17293] em28xx 6-1:0.0: Disconnecting em28xx [ 1353.558505][T17293] em28xx 6-1:0.0: Freeing device [ 1354.109221][T13221] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1354.259231][T13221] usb 1-1: Using ep0 maxpacket: 8 [ 1354.263378][T13221] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1354.263440][T13221] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1354.263466][T13221] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1354.263492][T13221] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1354.263514][T13221] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1354.263570][T13221] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1354.263698][T13221] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.352039][T13221] usbtmc 1-1:16.0: bulk endpoints not found [ 1354.471805][T27855] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7251'. [ 1354.478264][T27855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.507168][T27855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.610922][T14668] usb 10-1: USB disconnect, device number 53 [ 1354.729245][T17293] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1354.880603][T17293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1354.880640][T17293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1354.880669][T17293] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1354.880683][T17293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.913983][T17293] usb 5-1: config 0 descriptor?? [ 1354.916169][T26679] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 1355.261529][T27868] netlink: 52 bytes leftover after parsing attributes in process `syz.9.7254'. [ 1355.317773][T27870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1355.336566][T27870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.348087][T17293] usbhid 5-1:0.0: can't add hid device: -71 [ 1355.348164][T17293] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1355.382143][T17293] usb 5-1: USB disconnect, device number 62 [ 1355.844073][T13221] usb 3-1: USB disconnect, device number 67 [ 1356.254445][T17293] usb 1-1: USB disconnect, device number 38 [ 1356.911427][T27890] netlink: 'syz.2.7258': attribute type 1 has an invalid length. [ 1356.976311][T27892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7258'. [ 1356.976337][T27892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7258'. [ 1357.207307][T27890] bond4: entered promiscuous mode [ 1357.208723][T27896] netlink: 'syz.0.7259': attribute type 1 has an invalid length. [ 1357.237163][T27890] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1357.314327][T27893] bond4: (slave bridge3): making interface the new active one [ 1357.314352][T27893] bridge3: entered promiscuous mode [ 1357.332574][T27893] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 1357.587122][T27896] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1357.939704][ T5875] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1358.122697][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 1358.144260][ T5875] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1358.144289][ T5875] usb 5-1: config 0 has no interface number 0 [ 1358.152014][ T5875] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1358.152043][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.152063][ T5875] usb 5-1: Product: syz [ 1358.152079][ T5875] usb 5-1: Manufacturer: syz [ 1358.152094][ T5875] usb 5-1: SerialNumber: syz [ 1358.244012][ T5875] usb 5-1: config 0 descriptor?? [ 1358.287125][ T5875] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1358.287154][ T5875] usb 5-1: selecting invalid altsetting 1 [ 1358.287171][ T5875] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1358.302895][ T5875] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1358.313111][ T5875] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1358.313164][ T5875] usb 5-1: media controller created [ 1358.470660][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1358.577148][T27919] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7265'. [ 1358.831249][T27917] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7264'. [ 1359.544239][T27901] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1359.560351][ T5875] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1359.560387][ T5875] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1359.567371][ T5875] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1359.778960][ T5875] usb 5-1: USB disconnect, device number 63 [ 1360.668967][ T5875] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1360.830724][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1360.830748][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1360.830772][ T5875] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1360.830786][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.905236][ T5875] usb 5-1: config 0 descriptor?? [ 1361.118957][T25581] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1361.306695][T25581] usb 10-1: Using ep0 maxpacket: 8 [ 1361.331682][T25581] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1361.331745][T25581] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1361.331769][T25581] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1361.331794][T25581] usb 10-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1361.331817][T25581] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1361.331925][T25581] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1361.331953][T25581] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.439633][T25581] usbtmc 10-1:16.0: bulk endpoints not found [ 1361.524719][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1361.533304][ T5875] usbhid 5-1:0.0: can't add hid device: -71 [ 1361.533419][ T5875] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1361.565935][ T5875] usb 5-1: USB disconnect, device number 64 [ 1361.749886][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.797233][T27931] bridge_slave_0: left allmulticast mode [ 1361.797258][T27931] bridge_slave_0: left promiscuous mode [ 1361.797424][T27931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.028167][T26679] Bluetooth: hci4: unexpected event for opcode 0x2041 [ 1362.039800][T27931] bridge_slave_1: left allmulticast mode [ 1362.039823][T27931] bridge_slave_1: left promiscuous mode [ 1362.045288][T27931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.253838][T27931] bond0: (slave bond_slave_0): Releasing backup interface [ 1362.277054][T27933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1362.277802][T27933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1362.357999][T27931] bond0: (slave bond_slave_1): Releasing backup interface [ 1362.473920][T27931] team0: Port device team_slave_0 removed [ 1362.557398][T27931] team0: Port device team_slave_1 removed [ 1362.558102][T27931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1362.558120][T27931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1362.610748][T27931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1362.610776][T27931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1362.679433][T27931] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1363.236204][T27948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1363.236804][T27948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1363.548940][ T5867] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1363.699092][ T5867] usb 3-1: Using ep0 maxpacket: 8 [ 1363.709569][ T5867] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1363.709629][ T5867] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1363.709644][ T5867] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1363.709659][ T5867] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1363.709674][ T5867] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1363.709700][ T5867] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1363.709714][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.739333][T17276] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1363.790888][T25581] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1363.809818][T14668] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1363.892723][T17276] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1363.892755][T17276] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1363.892778][T17276] usb 6-1: Product: syz [ 1363.892794][T17276] usb 6-1: SerialNumber: syz [ 1363.900616][T17276] usb 6-1: config 0 descriptor?? [ 1363.939009][T25581] usb 1-1: Using ep0 maxpacket: 16 [ 1363.941564][T25581] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1363.941597][T25581] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1363.945383][T25581] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1363.945402][T25581] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.945414][T25581] usb 1-1: Product: syz [ 1363.945637][T25581] usb 1-1: Manufacturer: syz [ 1363.945656][T25581] usb 1-1: SerialNumber: syz [ 1363.978882][T14668] usb 5-1: Using ep0 maxpacket: 32 [ 1364.015363][T14668] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1364.015391][T14668] usb 5-1: config 0 has no interface number 0 [ 1364.025203][T14668] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1364.025234][T14668] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.026545][T14668] usb 5-1: Product: syz [ 1364.026562][T14668] usb 5-1: Manufacturer: syz [ 1364.029823][T14668] usb 5-1: SerialNumber: syz [ 1364.065050][T26679] Bluetooth: hci5: unexpected event for opcode 0x2041 [ 1364.065500][ T5867] usb 3-1: usb_control_msg returned -32 [ 1364.065550][ T5867] usbtmc 3-1:16.0: can't read capabilities [ 1364.077206][T14668] usb 5-1: config 0 descriptor?? [ 1364.091522][T25581] usb 1-1: config 0 descriptor?? [ 1364.116805][T25581] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1364.116842][T25581] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1364.148343][T14668] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1364.148370][T14668] usb 5-1: selecting invalid altsetting 1 [ 1364.148655][T14668] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1364.274250][T14668] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1364.276936][T14668] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1364.277392][T14668] usb 5-1: media controller created [ 1364.416122][T27950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1364.419511][T27950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1364.444578][T14668] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1364.501916][T14668] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1364.501979][T14668] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1364.502500][T14668] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1364.503561][ T5867] usb 10-1: USB disconnect, device number 54 [ 1364.574502][T13221] usb 6-1: USB disconnect, device number 47 [ 1364.882997][T25581] em28xx 1-1:0.0: chip ID is em2828X [ 1364.931604][T14668] usb 5-1: USB disconnect, device number 65 [ 1364.983236][T27966] program syz.9.7279 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1364.983551][T27966] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1365.110052][T13263] usb 1-1: USB disconnect, device number 39 [ 1365.121515][T13263] em28xx 1-1:0.0: Disconnecting em28xx [ 1365.176293][T13263] em28xx 1-1:0.0: Freeing device [ 1365.383776][T27970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1365.386321][T27970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1365.672994][T27974] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7281'. [ 1366.068993][T25581] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 1366.218703][T27979] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1366.243413][T25581] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1366.243440][T25581] usb 1-1: config 0 has no interface number 0 [ 1366.260139][T25581] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1366.260170][T25581] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.260190][T25581] usb 1-1: Product: syz [ 1366.260204][T25581] usb 1-1: Manufacturer: syz [ 1366.260218][T25581] usb 1-1: SerialNumber: syz [ 1366.307720][T25581] usb 1-1: config 0 descriptor?? [ 1366.333310][T25581] usb 1-1: selecting invalid altsetting 1 [ 1366.333495][T25581] dvb_ttusb_budget: ttusb_init_controller: error [ 1366.333510][T25581] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1366.495928][T25581] DVB: Unable to find symbol stv0299_attach() [ 1366.589465][T25581] DVB: Unable to find symbol tda8083_attach() [ 1366.589481][T25581] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1366.619155][T25581] usb 1-1: USB disconnect, device number 40 [ 1366.774914][T14668] usb 3-1: USB disconnect, device number 68 [ 1368.611021][T28004] loop9: detected capacity change from 0 to 7 [ 1368.611489][T28004] buffer_io_error: 9 callbacks suppressed [ 1368.611501][T28004] Buffer I/O error on dev loop9, logical block 0, async page read [ 1368.611526][T28004] Buffer I/O error on dev loop9, logical block 0, async page read [ 1368.611547][T28004] Buffer I/O error on dev loop9, logical block 0, async page read [ 1368.611567][T28004] Buffer I/O error on dev loop9, logical block 0, async page read [ 1368.611598][T28004] Buffer I/O error on dev loop9, logical block 0, async page read [ 1368.611626][T28004] Buffer I/O error on dev loop9, logical block 0, async page read [ 1368.611645][T28004] Buffer I/O error on dev loop9, logical block 0, async page read [ 1368.611656][T28004] ldm_validate_partition_table(): Disk read failed. [ 1368.611673][T28004] Buffer I/O error on dev loop9, logical block 0, async page read [ 1368.611692][T28004] Buffer I/O error on dev loop9, logical block 0, async page read [ 1368.611711][T28004] Buffer I/O error on dev loop9, logical block 0, async page read [ 1368.611732][T28004] Dev loop9: unable to read RDB block 0 [ 1368.611774][T28004] loop9: unable to read partition table [ 1368.611896][T28004] loop9: partition table beyond EOD, truncated [ 1368.611907][T28004] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1368.611907][T28004] ) failed (rc=-5) [ 1368.756161][T27997] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1369.788996][T17276] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1370.000434][T17276] usb 5-1: Using ep0 maxpacket: 32 [ 1370.003185][T17276] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1370.003214][T17276] usb 5-1: config 0 has no interface number 0 [ 1370.006659][T17276] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1370.006689][T17276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.006710][T17276] usb 5-1: Product: syz [ 1370.006725][T17276] usb 5-1: Manufacturer: syz [ 1370.006739][T17276] usb 5-1: SerialNumber: syz [ 1370.017158][T17276] usb 5-1: config 0 descriptor?? [ 1370.051089][T17276] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1370.051114][T17276] usb 5-1: selecting invalid altsetting 1 [ 1370.051129][T17276] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1370.063042][T17276] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1370.069053][T17276] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1370.069107][T17276] usb 5-1: media controller created [ 1370.135968][T17276] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1370.259140][ T5875] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1370.378946][T17293] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1370.442942][ T5875] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1370.442966][ T5875] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1370.448757][ T5875] usb 1-1: string descriptor 0 read error: -22 [ 1370.450412][ T5875] usb 1-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1370.450441][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.560496][T17293] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1370.560526][T17293] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1370.560546][T17293] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1370.561345][T17293] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1370.561379][T17293] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1370.577166][T17293] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1370.577431][T17293] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1370.577455][T17293] usb 6-1: Product: syz [ 1370.577471][T17293] usb 6-1: Manufacturer: syz [ 1370.696971][T17293] cdc_wdm 6-1:1.0: skipping garbage [ 1370.696992][T17293] cdc_wdm 6-1:1.0: skipping garbage [ 1370.747718][ T5875] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1370.748481][ T5875] usb 1-1: MIDIStreaming interface descriptor not found [ 1370.787129][T17293] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1370.791963][T17293] cdc_wdm 6-1:1.0: Unknown control protocol [ 1371.130638][T28036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7300'. [ 1371.256381][ T5875] usb 1-1: USB disconnect, device number 41 [ 1371.320023][T17276] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1371.320100][T17276] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1371.342658][T28015] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1371.735561][ T5867] usb 6-1: USB disconnect, device number 48 [ 1371.824550][T17276] usb 5-1: USB disconnect, device number 66 [ 1372.601369][T17276] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1372.669330][ T5875] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1372.760385][T17276] usb 5-1: Using ep0 maxpacket: 16 [ 1372.764606][T17276] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1372.764640][T17276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1372.789743][T17276] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1372.789772][T17276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.789791][T17276] usb 5-1: Product: syz [ 1372.789805][T17276] usb 5-1: Manufacturer: syz [ 1372.789819][T17276] usb 5-1: SerialNumber: syz [ 1372.836934][T17276] usb 5-1: config 0 descriptor?? [ 1372.848977][ T5875] usb 10-1: Using ep0 maxpacket: 32 [ 1372.852811][ T5875] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1372.852835][ T5875] usb 10-1: config 0 has no interface number 0 [ 1372.901887][ T5875] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1372.901918][ T5875] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.901940][ T5875] usb 10-1: Product: syz [ 1372.901957][ T5875] usb 10-1: Manufacturer: syz [ 1372.901973][ T5875] usb 10-1: SerialNumber: syz [ 1372.953511][T17276] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1372.953548][T17276] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1372.998045][ T5875] usb 10-1: config 0 descriptor?? [ 1373.041116][ T5875] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1373.041135][ T5875] usb 10-1: selecting invalid altsetting 1 [ 1373.041145][ T5875] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1373.094726][ T5875] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1373.095953][ T5875] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1373.096548][ T5875] usb 10-1: media controller created [ 1373.194281][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1373.476027][T17276] em28xx 5-1:0.0: chip ID is em2828X [ 1373.515376][T28056] binder: 28055:28056 ioctl 4018620d 0 returned -22 [ 1373.708740][T25581] usb 5-1: USB disconnect, device number 67 [ 1373.736166][T25581] em28xx 5-1:0.0: Disconnecting em28xx [ 1373.788485][T25581] em28xx 5-1:0.0: Freeing device [ 1374.050414][T26679] Bluetooth: hci1: command 0x0406 tx timeout [ 1374.347482][T28051] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1374.449427][ T5875] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1374.449492][ T5875] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1374.449989][ T5875] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1374.621131][ T5875] usb 10-1: USB disconnect, device number 55 [ 1375.164511][T28071] nvme_fabrics: unknown parameter or missing value 'traddr=' in ctrl creation request [ 1375.547178][T28081] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1375.733205][T28085] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7316'. [ 1375.974215][T28091] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7319'. [ 1377.459554][T28111] nvme_fabrics: unknown parameter or missing value 'traddr=' in ctrl creation request [ 1378.108894][ T5727] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1378.109028][T14668] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1378.260135][ T5727] usb 6-1: Using ep0 maxpacket: 16 [ 1378.274686][ T5727] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1378.274708][ T5727] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1378.303495][ T5727] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1378.303526][ T5727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.303546][ T5727] usb 6-1: Product: syz [ 1378.303561][ T5727] usb 6-1: Manufacturer: syz [ 1378.303573][ T5727] usb 6-1: SerialNumber: syz [ 1378.304402][T14668] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1378.304434][T14668] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1378.304475][T14668] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1378.304500][T14668] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.356739][T14668] usb 1-1: config 0 descriptor?? [ 1378.401802][ T5727] usb 6-1: config 0 descriptor?? [ 1378.408344][ T5727] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1378.408380][ T5727] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1378.720415][T28118] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7328'. [ 1378.826632][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1378.827102][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1378.827469][T14668] usbhid 1-1:0.0: can't add hid device: -32 [ 1378.827597][T14668] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 1378.848341][T14668] usb 1-1: USB disconnect, device number 42 [ 1379.059138][ T5727] em28xx 6-1:0.0: chip ID is em2828X [ 1379.293025][ T5727] usb 6-1: USB disconnect, device number 49 [ 1379.305750][ T5727] em28xx 6-1:0.0: Disconnecting em28xx [ 1379.317923][ T5727] em28xx 6-1:0.0: Freeing device [ 1379.807599][T28124] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7330'. [ 1379.826681][T28130] netlink: 'syz.9.7331': attribute type 1 has an invalid length. [ 1379.883902][T28132] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7331'. [ 1379.883938][T28132] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7331'. [ 1380.052504][T28130] bond7: entered promiscuous mode [ 1380.057742][T28130] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1380.370924][T28144] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7334'. [ 1380.422700][T28148] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7333'. [ 1380.541783][T28135] bond7: (slave bridge3): making interface the new active one [ 1380.541808][T28135] bridge3: entered promiscuous mode [ 1380.545262][T28135] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 1382.529019][ T5867] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 1382.684319][ T5867] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1382.710477][ T5867] usb 10-1: config 211 has an invalid interface number: 123 but max is 0 [ 1382.710497][ T5867] usb 10-1: config 211 has no interface number 0 [ 1382.710518][ T5867] usb 10-1: config 211 interface 123 has no altsetting 0 [ 1382.727033][ T5867] usb 10-1: New USB device found, idVendor=07c4, idProduct=a4a5, bcdDevice=52.ed [ 1382.727053][ T5867] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.727066][ T5867] usb 10-1: Product: syz [ 1382.727075][ T5867] usb 10-1: Manufacturer: syz [ 1382.727083][ T5867] usb 10-1: SerialNumber: syz [ 1383.045853][ T5867] usb-storage 10-1:211.123: USB Mass Storage device detected [ 1383.095002][ T5867] usb-storage 10-1:211.123: Quirks match for vid 07c4 pid a4a5: 420 [ 1383.125965][T28165] netlink: 'syz.0.7338': attribute type 1 has an invalid length. [ 1383.208994][ T5867] usb 10-1: USB disconnect, device number 56 [ 1383.239859][T28166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7338'. [ 1383.239893][T28166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7338'. [ 1383.456575][T28165] bond5: entered promiscuous mode [ 1383.474566][T28165] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1383.677729][T28169] bond5: (slave bridge3): making interface the new active one [ 1383.677755][T28169] bridge3: entered promiscuous mode [ 1383.696656][T28169] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 1384.198991][ T5727] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1384.360803][ T5727] usb 5-1: Using ep0 maxpacket: 16 [ 1384.365118][ T5727] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1384.365148][ T5727] usb 5-1: config 0 has no interface number 0 [ 1384.365197][ T5727] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1384.365226][ T5727] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1384.365270][ T5727] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1384.365302][ T5727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.461910][ T5727] usb 5-1: config 0 descriptor?? [ 1384.807655][ T5875] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1384.871330][ T5727] usbhid 5-1:0.1: can't add hid device: -71 [ 1384.871413][ T5727] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 1384.929968][ T5727] usb 5-1: USB disconnect, device number 68 [ 1384.948962][T25581] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1385.040687][ T5875] usb 6-1: config 0 has an invalid interface number: 192 but max is 2 [ 1385.040721][ T5875] usb 6-1: config 0 has an invalid interface number: 176 but max is 2 [ 1385.040745][ T5875] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1385.040774][ T5875] usb 6-1: config 0 has an invalid interface descriptor of length 2, skipping [ 1385.040794][ T5875] usb 6-1: config 0 has an invalid interface number: 211 but max is 2 [ 1385.040815][ T5875] usb 6-1: config 0 has no interface number 0 [ 1385.040833][ T5875] usb 6-1: config 0 has no interface number 1 [ 1385.040849][ T5875] usb 6-1: config 0 has no interface number 2 [ 1385.040927][ T5875] usb 6-1: config 0 interface 192 altsetting 240 has an invalid descriptor for endpoint zero, skipping [ 1385.040951][ T5875] usb 6-1: config 0 interface 192 altsetting 240 endpoint 0x3 has an invalid bInterval 75, changing to 10 [ 1385.040979][ T5875] usb 6-1: config 0 interface 192 altsetting 240 has an invalid descriptor for endpoint zero, skipping [ 1385.041001][ T5875] usb 6-1: config 0 interface 192 altsetting 240 has an invalid descriptor for endpoint zero, skipping [ 1385.041026][ T5875] usb 6-1: config 0 interface 192 altsetting 240 endpoint 0x88 has invalid maxpacket 1023, setting to 64 [ 1385.041056][ T5875] usb 6-1: config 0 interface 192 altsetting 240 has a duplicate endpoint with address 0x3, skipping [ 1385.041084][ T5875] usb 6-1: config 0 interface 192 altsetting 240 endpoint 0x1 has invalid maxpacket 983, setting to 64 [ 1385.041113][ T5875] usb 6-1: config 0 interface 192 altsetting 240 bulk endpoint 0xE has invalid maxpacket 24 [ 1385.041155][ T5875] usb 6-1: config 0 interface 176 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1385.041178][ T5875] usb 6-1: config 0 interface 176 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 1385.041203][ T5875] usb 6-1: config 0 interface 176 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 1385.041228][ T5875] usb 6-1: config 0 interface 176 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 1385.041256][ T5875] usb 6-1: config 0 interface 176 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 1385.041279][ T5875] usb 6-1: config 0 interface 176 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1385.041302][ T5875] usb 6-1: config 0 interface 176 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 1385.041326][ T5875] usb 6-1: config 0 interface 176 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 1385.041351][ T5875] usb 6-1: config 0 interface 176 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 1385.041374][ T5875] usb 6-1: config 0 interface 176 altsetting 3 has an endpoint descriptor with address 0x4F, changing to 0xF [ 1385.041401][ T5875] usb 6-1: config 0 interface 176 altsetting 3 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1385.041431][ T5875] usb 6-1: config 0 interface 176 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 1385.041457][ T5875] usb 6-1: config 0 interface 192 has no altsetting 0 [ 1385.041476][ T5875] usb 6-1: config 0 interface 176 has no altsetting 0 [ 1385.041496][ T5875] usb 6-1: config 0 interface 211 has no altsetting 0 [ 1385.064344][T28188] netlink: 'syz.9.7345': attribute type 1 has an invalid length. [ 1385.118961][T25581] usb 1-1: Using ep0 maxpacket: 16 [ 1385.122006][T28190] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7345'. [ 1385.122037][T28190] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7345'. [ 1385.126994][T28188] bond8: entered promiscuous mode [ 1385.127708][T28188] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1385.135015][ T5875] usb 6-1: New USB device found, idVendor=1266, idProduct=1009, bcdDevice=24.08 [ 1385.135046][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.135068][ T5875] usb 6-1: Product: syz [ 1385.135084][ T5875] usb 6-1: Manufacturer: syz [ 1385.135099][ T5875] usb 6-1: SerialNumber: syz [ 1385.209633][T25581] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1024 [ 1385.209665][T25581] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1385.209689][T25581] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1385.212475][T25581] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1385.212501][T25581] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.212520][T25581] usb 1-1: Product: syz [ 1385.212534][T25581] usb 1-1: Manufacturer: ﮄឦ끳䡲䖟宒⮝麨밯穆곛ᖓ叻樿襤凤숄䓗矚 [ 1385.212552][T25581] usb 1-1: SerialNumber: syz [ 1385.447994][T28188] bond8: (slave bridge4): making interface the new active one [ 1385.448016][T28188] bridge4: entered promiscuous mode [ 1385.458091][T28188] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 1385.524419][ T5875] usb 6-1: config 0 descriptor?? [ 1385.529815][T28184] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1385.637762][T25581] cdc_ncm 1-1:1.0: bind() failure [ 1385.682740][T25581] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1385.682789][T25581] cdc_ncm 1-1:1.1: bind() failure [ 1385.727688][T25581] usb 1-1: USB disconnect, device number 43 [ 1385.752799][T28184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.759826][T28184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.891810][ T5875] option 6-1:0.192: GSM modem (1-port) converter detected [ 1385.954103][ T5875] usb 6-1: USB disconnect, device number 50 [ 1385.973567][ T5875] option 6-1:0.192: device disconnected [ 1386.446661][T28203] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7347'. [ 1386.661156][T28208] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1386.860618][T28216] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7351'. [ 1387.201838][T28219] program syz.4.7353 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1387.202569][T28219] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1388.488486][T28224] netlink: 'syz.4.7355': attribute type 1 has an invalid length. [ 1388.539066][T28227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7355'. [ 1388.539141][T28227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7355'. [ 1388.585182][T28222] binder: 28220:28222 ioctl 4018620d 0 returned -22 [ 1388.648227][T28224] bond6: entered promiscuous mode [ 1388.648558][T28224] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1389.079553][T28228] bond6: (slave bridge2): making interface the new active one [ 1389.079576][T28228] bridge2: entered promiscuous mode [ 1389.083216][T28228] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 1389.245397][T28237] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1390.179456][ T5727] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1390.269493][ T5875] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1390.330800][ T5727] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1390.330819][ T5727] usb 5-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1390.330831][ T5727] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1390.330859][ T5727] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1390.333235][ T5727] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1390.333252][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1390.333264][ T5727] usb 5-1: Product: syz [ 1390.333273][ T5727] usb 5-1: Manufacturer: syz [ 1390.409032][ T5727] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1390.568874][ T5875] usb 6-1: Using ep0 maxpacket: 16 [ 1390.572745][ T5875] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1390.572774][ T5875] usb 6-1: config 0 has no interface number 0 [ 1390.572824][ T5875] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1390.572853][ T5875] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1390.572894][ T5875] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1390.572919][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.648269][ T5875] usb 6-1: config 0 descriptor?? [ 1390.944107][ T5875] usbhid 6-1:0.1: can't add hid device: -71 [ 1390.944468][ T5875] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 1390.974540][ T5875] usb 6-1: USB disconnect, device number 51 [ 1391.908992][ T5727] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1392.009038][T17294] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1392.058902][ T5727] usb 1-1: Using ep0 maxpacket: 16 [ 1392.061033][ T5727] usb 1-1: config 0 has no interfaces? [ 1392.063536][ T5727] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1392.063564][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.063584][ T5727] usb 1-1: Product: syz [ 1392.063598][ T5727] usb 1-1: Manufacturer: syz [ 1392.063607][ T5727] usb 1-1: SerialNumber: syz [ 1392.068424][ T5727] usb 1-1: config 0 descriptor?? [ 1392.193687][T17294] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1392.193718][T17294] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1392.193739][T17294] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1392.193793][T17294] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1392.193822][T17294] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1392.196205][T17294] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1392.196236][T17294] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1392.196259][T17294] usb 6-1: Product: syz [ 1392.196274][T17294] usb 6-1: Manufacturer: syz [ 1392.287396][T17294] cdc_wdm 6-1:1.0: skipping garbage [ 1392.287417][T17294] cdc_wdm 6-1:1.0: skipping garbage [ 1392.307530][T17294] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1392.307552][T17294] cdc_wdm 6-1:1.0: Unknown control protocol [ 1392.328339][ T5727] usb 1-1: USB disconnect, device number 44 [ 1392.891935][T28277] netlink: 'syz.0.7369': attribute type 1 has an invalid length. [ 1392.947893][T28280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7369'. [ 1392.947930][T28280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7369'. [ 1392.973008][ T5867] usb 5-1: USB disconnect, device number 69 [ 1393.027691][T28277] bond6: entered promiscuous mode [ 1393.080841][T28277] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1393.157076][T28282] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7368'. [ 1393.539541][T28281] bond6: (slave bridge4): making interface the new active one [ 1393.539569][T28281] bridge4: entered promiscuous mode [ 1393.552712][ T5867] usb 10-1: new full-speed USB device number 57 using dummy_hcd [ 1393.584423][T28281] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 1393.673402][T25581] usb 6-1: USB disconnect, device number 52 [ 1393.701821][ T5867] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1393.723846][ T5867] usb 10-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 1393.723879][ T5867] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.723900][ T5867] usb 10-1: Product: syz [ 1393.723917][ T5867] usb 10-1: Manufacturer: 췗镪ӝᱟ帬ꨱ鍾܇涓岑誥䑎ṃ齎d獚﫡ᵳ阛䏰죋⹙㋗纹꯲搜豨먾믖ꊺ媎᣽㶩弈돸師尓啞褫ᤗꓽ [ 1393.723941][ T5867] usb 10-1: SerialNumber: syz [ 1394.206970][T28298] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7372'. [ 1394.849477][T17294] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1395.008962][T17294] usb 1-1: Using ep0 maxpacket: 8 [ 1395.013796][T17294] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1395.013850][T17294] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1395.013865][T17294] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1395.013880][T17294] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1395.013904][T17294] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1395.014022][T17294] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1395.014047][T17294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.139084][T13221] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1395.315231][T13221] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1395.317975][T13221] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1395.318009][T13221] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1395.318028][T13221] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.449518][T13221] usb 6-1: config 0 descriptor?? [ 1395.475922][T17294] usb 1-1: usb_control_msg returned -32 [ 1395.475973][T17294] usbtmc 1-1:16.0: can't read capabilities [ 1395.480459][ T5624] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 1395.826755][T28304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.831874][T28304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.917041][T13221] usbhid 6-1:0.0: can't add hid device: -71 [ 1395.917174][T13221] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1395.968069][T13221] usb 6-1: USB disconnect, device number 53 [ 1396.191023][ T5867] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1396.192389][ T5867] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1396.401172][ T5867] usb 10-1: USB disconnect, device number 57 [ 1396.561529][T12802] udevd[12802]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1397.117637][T28315] program syz.4.7376 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1397.120641][T28315] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1398.139031][T17276] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1398.298884][T17276] usb 6-1: device descriptor read/64, error -71 [ 1398.372855][ T5867] usb 1-1: USB disconnect, device number 45 [ 1398.538959][T17276] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1398.557931][T28322] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7377'. [ 1398.559971][T28324] netlink: 'syz.0.7379': attribute type 1 has an invalid length. [ 1398.642970][T28326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7379'. [ 1398.643008][T28326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7379'. [ 1398.668993][T17276] usb 6-1: device descriptor read/64, error -71 [ 1398.713684][T28324] bond7: entered promiscuous mode [ 1398.714710][T28324] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1398.787955][T17276] usb usb6-port1: attempt power cycle [ 1398.929231][T28328] bond7: (slave bridge5): making interface the new active one [ 1398.929256][T28328] bridge5: entered promiscuous mode [ 1398.984736][T28328] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 1399.149090][T17276] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1399.179865][T17276] usb 6-1: device descriptor read/8, error -71 [ 1399.418977][T17276] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1399.439912][T17276] usb 6-1: device descriptor read/8, error -71 [ 1399.549276][T17276] usb usb6-port1: unable to enumerate USB device [ 1399.678977][ T5875] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 1399.833228][ T5875] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1399.837774][ T5875] usb 5-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 1399.837805][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.837828][ T5875] usb 5-1: Product: syz [ 1399.837844][ T5875] usb 5-1: Manufacturer: 췗镪ӝᱟ帬ꨱ鍾܇涓岑誥䑎ṃ齎d獚﫡ᵳ阛䏰죋⹙㋗纹꯲搜豨먾믖ꊺ媎᣽㶩弈돸師尓啞褫ᤗꓽ [ 1399.837868][ T5875] usb 5-1: SerialNumber: syz [ 1400.070038][T17276] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1400.239152][T17276] usb 6-1: Using ep0 maxpacket: 8 [ 1400.244279][T17276] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1400.244358][T17276] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1400.244373][T17276] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1400.244387][T17276] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1400.244400][T17276] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1400.244426][T17276] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1400.244440][T17276] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.354540][T17276] usbtmc 6-1:16.0: bulk endpoints not found [ 1400.983139][ T5875] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1400.999341][ T5624] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 1401.001081][ T5875] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1401.035785][T28351] loop9: detected capacity change from 0 to 7 [ 1401.067185][T28351] buffer_io_error: 9 callbacks suppressed [ 1401.067204][T28351] Buffer I/O error on dev loop9, logical block 0, async page read [ 1401.067251][T28351] Buffer I/O error on dev loop9, logical block 0, async page read [ 1401.067289][T28351] Buffer I/O error on dev loop9, logical block 0, async page read [ 1401.067323][T28351] Buffer I/O error on dev loop9, logical block 0, async page read [ 1401.067379][T28351] Buffer I/O error on dev loop9, logical block 0, async page read [ 1401.067429][T28351] Buffer I/O error on dev loop9, logical block 0, async page read [ 1401.067462][T28351] Buffer I/O error on dev loop9, logical block 0, async page read [ 1401.067500][T28351] ldm_validate_partition_table(): Disk read failed. [ 1401.067532][T28351] Buffer I/O error on dev loop9, logical block 0, async page read [ 1401.067567][T28351] Buffer I/O error on dev loop9, logical block 0, async page read [ 1401.067610][T28351] Buffer I/O error on dev loop9, logical block 0, async page read [ 1401.067649][T28351] Dev loop9: unable to read RDB block 0 [ 1401.067724][T28351] loop9: unable to read partition table [ 1401.067963][T28351] loop9: partition table beyond EOD, truncated [ 1401.067996][T28351] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1401.067996][T28351] ) failed (rc=-5) [ 1401.321285][T28350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1401.357993][T28350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1401.435567][ T5875] usb 5-1: USB disconnect, device number 70 [ 1401.638967][T17276] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1401.693129][T12824] udevd[12824]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1401.799830][T17276] usb 3-1: Using ep0 maxpacket: 8 [ 1401.803179][T17276] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1401.803221][T17276] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1401.803235][T17276] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1401.803250][T17276] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1401.803264][T17276] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1401.803290][T17276] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1401.803304][T17276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.152818][T17276] usb 3-1: usb_control_msg returned -32 [ 1402.152871][T17276] usbtmc 3-1:16.0: can't read capabilities [ 1402.176891][ T5624] Bluetooth: hci5: unexpected event for opcode 0x2041 [ 1402.213525][T28363] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7388'. [ 1402.393439][T28369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1402.413473][T28369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.558408][T28358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1402.559431][T28358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.718996][T25581] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1402.871949][T25581] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1402.871981][T25581] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1402.872003][T25581] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1402.872060][T25581] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1402.872088][T25581] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1402.875654][T25581] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1402.875673][T25581] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1402.875686][T25581] usb 1-1: Product: syz [ 1402.875695][T25581] usb 1-1: Manufacturer: syz [ 1402.885694][T25581] cdc_wdm 1-1:1.0: skipping garbage [ 1402.885712][T25581] cdc_wdm 1-1:1.0: skipping garbage [ 1402.888423][T25581] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1402.888484][T25581] cdc_wdm 1-1:1.0: Unknown control protocol [ 1403.187536][T28378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1403.188000][T28378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1404.530359][T17276] usb 3-1: USB disconnect, device number 69 [ 1404.651241][ T5727] usb 6-1: USB disconnect, device number 58 [ 1405.169050][ T5727] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1405.197477][T28394] netlink: 52 bytes leftover after parsing attributes in process `syz.9.7395'. [ 1405.320567][ T5727] usb 6-1: Using ep0 maxpacket: 32 [ 1405.323137][ T5727] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1405.323163][ T5727] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1405.326777][ T5727] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1405.326807][ T5727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.326829][ T5727] usb 6-1: Product: syz [ 1405.326844][ T5727] usb 6-1: Manufacturer: syz [ 1405.326853][ T5727] usb 6-1: SerialNumber: syz [ 1405.360723][ T5727] usb 6-1: config 0 descriptor?? [ 1405.610010][T17294] usb 6-1: USB disconnect, device number 59 [ 1405.713313][ T5875] usb 1-1: USB disconnect, device number 46 [ 1406.083829][T28410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7398'. [ 1406.365897][T28415] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7399'. [ 1406.899071][ T5875] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1407.071628][ T5875] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1407.073996][ T5875] usb 3-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 1407.074016][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.074028][ T5875] usb 3-1: Product: syz [ 1407.074037][ T5875] usb 3-1: Manufacturer: 췗镪ӝᱟ帬ꨱ鍾܇涓岑誥䑎ṃ齎d獚﫡ᵳ阛䏰죋⹙㋗纹꯲搜豨먾믖ꊺ媎᣽㶩弈돸師尓啞褫ᤗꓽ [ 1407.074050][ T5875] usb 3-1: SerialNumber: syz [ 1408.922159][ T5875] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1408.923599][ T5875] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1409.108977][ T5867] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1409.139594][ T5875] usb 3-1: USB disconnect, device number 70 [ 1409.271644][ T5867] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1409.271676][ T5867] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1409.271696][ T5867] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1409.271732][ T5867] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1409.271754][ T5867] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1409.278017][ T5867] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1409.278049][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1409.278071][ T5867] usb 5-1: Product: syz [ 1409.278087][ T5867] usb 5-1: Manufacturer: syz [ 1409.360235][ T5867] cdc_wdm 5-1:1.0: skipping garbage [ 1409.361655][ T5867] cdc_wdm 5-1:1.0: skipping garbage [ 1409.387922][T12824] udevd[12824]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1409.398234][ T5867] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1409.398253][ T5867] cdc_wdm 5-1:1.0: Unknown control protocol [ 1410.398678][ T5875] usb 5-1: USB disconnect, device number 71 [ 1410.584544][T28449] netlink: 52 bytes leftover after parsing attributes in process `syz.9.7408'. [ 1410.606138][T28450] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7407'. [ 1411.710934][T25581] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1411.868972][T25581] usb 6-1: Using ep0 maxpacket: 16 [ 1411.874040][T25581] usb 6-1: config 0 has no interfaces? [ 1411.878703][T25581] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1411.878724][T25581] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.878736][T25581] usb 6-1: Product: syz [ 1411.878745][T25581] usb 6-1: Manufacturer: syz [ 1411.879166][T25581] usb 6-1: SerialNumber: syz [ 1411.899087][ T5727] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1411.911369][T25581] usb 6-1: config 0 descriptor?? [ 1412.052735][ T5727] usb 5-1: too many configurations: 39, using maximum allowed: 8 [ 1412.077963][ T5727] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1412.077983][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.077995][ T5727] usb 5-1: Product: syz [ 1412.078004][ T5727] usb 5-1: Manufacturer: syz [ 1412.078013][ T5727] usb 5-1: SerialNumber: syz [ 1412.182233][ T5867] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1412.222991][T13221] usb 6-1: USB disconnect, device number 60 [ 1412.309347][ T5867] usb 3-1: device descriptor read/64, error -71 [ 1412.361198][T25581] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1412.550414][ T5867] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1413.546839][ T5875] usb 5-1: USB disconnect, device number 72 [ 1413.598914][ T5867] usb 3-1: device descriptor read/64, error -71 [ 1413.709430][ T5867] usb usb3-port1: attempt power cycle [ 1413.748942][T25581] usb 5-1: ath9k_htc: Unable to allocate URBs [ 1413.749543][ T5875] usb 5-1: ath9k_htc: USB layer deinitialized [ 1413.939399][ T5875] ================================================================== [ 1413.939476][ T5875] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 1413.939589][ T5875] Read of size 8 at addr ffffc90015d36008 by task kworker/0:8/5875 [ 1413.939605][ T5875] [ 1413.939700][ T5875] CPU: 0 UID: 0 PID: 5875 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1413.939741][ T5875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1413.939754][ T5875] Workqueue: usb_hub_wq hub_event [ 1413.939800][ T5875] Call Trace: [ 1413.939828][ T5875] [ 1413.939871][ T5875] dump_stack_lvl+0xe8/0x150 [ 1413.939998][ T5875] print_address_description+0x55/0x1e0 [ 1413.940030][ T5875] ? __list_add_valid_or_report+0x4e/0x130 [ 1413.940067][ T5875] print_report+0x58/0x70 [ 1413.940093][ T5875] kasan_report+0x117/0x150 [ 1413.940184][ T5875] ? __list_add_valid_or_report+0x4e/0x130 [ 1413.940205][ T5875] __list_add_valid_or_report+0x4e/0x130 [ 1413.940224][ T5875] kcov_remote_stop+0x457/0x680 [ 1413.940308][ T5875] hub_event+0x4789/0x4cf0 [ 1413.940331][ T5875] ? __lock_acquire+0x683/0x2ce0 [ 1413.940386][ T5875] ? register_lock_class+0x31/0x2e0 [ 1413.940416][ T5875] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1413.940443][ T5875] ? __pfx_hub_event+0x10/0x10 [ 1413.940462][ T5875] ? process_scheduled_works+0xa20/0x14e0 [ 1413.940530][ T5875] ? rcu_is_watching+0x15/0xb0 [ 1413.940595][ T5875] ? process_scheduled_works+0xa20/0x14e0 [ 1413.940615][ T5875] process_scheduled_works+0xa8e/0x14e0 [ 1413.940647][ T5875] ? __pfx_process_scheduled_works+0x10/0x10 [ 1413.940670][ T5875] ? assign_work+0x3cf/0x5d0 [ 1413.940691][ T5875] worker_thread+0xa47/0xfb0 [ 1413.940718][ T5875] ? __kthread_parkme+0x71/0x1f0 [ 1413.940762][ T5875] kthread+0x388/0x470 [ 1413.940786][ T5875] ? __pfx_worker_thread+0x10/0x10 [ 1413.940806][ T5875] ? __pfx_kthread+0x10/0x10 [ 1413.940831][ T5875] ret_from_fork+0x514/0xb70 [ 1413.940886][ T5875] ? __pfx_ret_from_fork+0x10/0x10 [ 1413.940912][ T5875] ? __switch_to+0xc89/0x1420 [ 1413.940960][ T5875] ? __pfx_kthread+0x10/0x10 [ 1413.941001][ T5875] ret_from_fork_asm+0x1a/0x30 [ 1413.941030][ T5875] [ 1413.941060][ T5875] [ 1413.941066][ T5875] The buggy address belongs to a vmalloc virtual mapping [ 1413.941104][ T5875] Memory state around the buggy address: [ 1413.941139][ T5875] ffffc90015d35f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1413.941154][ T5875] ffffc90015d35f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1413.941169][ T5875] >ffffc90015d36000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1413.941181][ T5875] ^ [ 1413.941193][ T5875] ffffc90015d36080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1413.941208][ T5875] ffffc90015d36100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1413.941219][ T5875] ================================================================== [ 1413.943815][ T5875] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1413.943832][ T5875] CPU: 0 UID: 0 PID: 5875 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1413.943848][ T5875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1413.943857][ T5875] Workqueue: usb_hub_wq hub_event [ 1413.943875][ T5875] Call Trace: [ 1413.943880][ T5875] [ 1413.943885][ T5875] vpanic+0x56c/0xa60 [ 1413.943900][ T5875] ? __pfx_vpanic+0x10/0x10 [ 1413.943912][ T5875] ? __pfx___schedule+0x10/0x10 [ 1413.943972][ T5875] panic+0xc5/0xd0 [ 1413.943989][ T5875] ? __pfx_panic+0x10/0x10 [ 1413.944001][ T5875] ? preempt_schedule_thunk+0x16/0x40 [ 1413.944059][ T5875] ? __list_add_valid_or_report+0x4e/0x130 [ 1413.944073][ T5875] check_panic_on_warn+0x89/0xb0 [ 1413.944103][ T5875] ? __list_add_valid_or_report+0x4e/0x130 [ 1413.944116][ T5875] end_report+0x73/0x170 [ 1413.944130][ T5875] ? __list_add_valid_or_report+0x4e/0x130 [ 1413.944142][ T5875] kasan_report+0x128/0x150 [ 1413.944156][ T5875] ? __list_add_valid_or_report+0x4e/0x130 [ 1413.944171][ T5875] __list_add_valid_or_report+0x4e/0x130 [ 1413.944184][ T5875] kcov_remote_stop+0x457/0x680 [ 1413.944204][ T5875] hub_event+0x4789/0x4cf0 [ 1413.944219][ T5875] ? __lock_acquire+0x683/0x2ce0 [ 1413.944232][ T5875] ? register_lock_class+0x31/0x2e0 [ 1413.944251][ T5875] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1413.944270][ T5875] ? __pfx_hub_event+0x10/0x10 [ 1413.944283][ T5875] ? process_scheduled_works+0xa20/0x14e0 [ 1413.944299][ T5875] ? rcu_is_watching+0x15/0xb0 [ 1413.944314][ T5875] ? process_scheduled_works+0xa20/0x14e0 [ 1413.944328][ T5875] process_scheduled_works+0xa8e/0x14e0 [ 1413.944349][ T5875] ? __pfx_process_scheduled_works+0x10/0x10 [ 1413.944365][ T5875] ? assign_work+0x3cf/0x5d0 [ 1413.944380][ T5875] worker_thread+0xa47/0xfb0 [ 1413.944398][ T5875] ? __kthread_parkme+0x71/0x1f0 [ 1413.944416][ T5875] kthread+0x388/0x470 [ 1413.944434][ T5875] ? __pfx_worker_thread+0x10/0x10 [ 1413.944448][ T5875] ? __pfx_kthread+0x10/0x10 [ 1413.944465][ T5875] ret_from_fork+0x514/0xb70 [ 1413.944488][ T5875] ? __pfx_ret_from_fork+0x10/0x10 [ 1413.944506][ T5875] ? __switch_to+0xc89/0x1420 [ 1413.944523][ T5875] ? __pfx_kthread+0x10/0x10 [ 1413.944541][ T5875] ret_from_fork_asm+0x1a/0x30 [ 1413.944557][ T5875] [ 1413.944822][ T5875] Kernel Offset: disabled