last executing test programs: 14m57.471901788s ago: executing program 2 (id=155): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYRES32], 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_STAB={0x4}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a300000"], 0x110}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r0, 0x1, 0x0, 0x0, {0x3}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8}]}, 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 14m52.257792195s ago: executing program 2 (id=165): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14m50.949520639s ago: executing program 2 (id=167): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) 14m50.552471973s ago: executing program 2 (id=170): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000240)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b44ab", 0xffff, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}}, 0x0) open(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) close(r4) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x24, 0x42, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024882, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x109000}) 14m48.717084545s ago: executing program 2 (id=171): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = creat(0x0, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x18}, 0x20) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001b80)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',acc', @ANYRESDEC=0x0]) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) 14m47.246761078s ago: executing program 2 (id=174): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x890) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x3, 0xb, 0xff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x10) 14m30.89479917s ago: executing program 32 (id=174): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x890) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x3, 0xb, 0xff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x10) 11m4.911140625s ago: executing program 4 (id=514): openat$rtc(0xffffffffffffff9c, &(0x7f0000001680), 0x2800, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_kvm_add_vcpu$x86(0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4048aecb, &(0x7f00000034c0)) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 11m2.948419018s ago: executing program 4 (id=517): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000240)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b44ab", 0xffff, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}}, 0x0) open(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) close(r2) sendmsg$nl_generic(r1, 0x0, 0x4040) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024882, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x109000}) 11m2.678015572s ago: executing program 4 (id=518): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 11m2.24932649s ago: executing program 4 (id=520): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, 0x0, 0x0, 0x10000, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 11m1.100839376s ago: executing program 1 (id=522): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000001600), 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e"], 0xf8) 11m1.052728919s ago: executing program 4 (id=523): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040)=0x80, 0x4) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004780)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4085}, 0x4000) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000f00)={0x20, 0x1, 0x2, "eebf"}, 0x0}) 11m0.783790397s ago: executing program 1 (id=526): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x890) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62000000) r4 = socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x9, 0x6, 0x8, 0x209, 0x2]}, &(0x7f0000000180)=0x54) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x6, 0x73, 0x2, 0x3, 0x19, "88bd91aa90758062b5fffd9272e301aa98af75"}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) socket$nl_generic(0x10, 0x3, 0x10) 10m57.055243158s ago: executing program 1 (id=527): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) open(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) close(r4) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x24, 0x42, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024882, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x109000}) 10m56.121210837s ago: executing program 4 (id=529): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x3c000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = io_uring_setup(0x1b7b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000380)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) accept$netrom(0xffffffffffffffff, &(0x7f0000000400)={{}, [@netrom, @netrom, @remote, @bcast, @remote, @bcast, @netrom, @bcast]}, 0x0) 10m55.544358075s ago: executing program 33 (id=529): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x3c000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = io_uring_setup(0x1b7b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000380)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) accept$netrom(0xffffffffffffffff, &(0x7f0000000400)={{}, [@netrom, @netrom, @remote, @bcast, @remote, @bcast, @netrom, @bcast]}, 0x0) 10m52.778701666s ago: executing program 1 (id=535): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, 0x0, 0x0, 0x10000, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 10m52.644171847s ago: executing program 1 (id=538): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4600, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000880)={0x0, 0x2, 0x1, [0x1, 0xeb5b, 0x6, 0x3, 0x100000000], [0x1, 0x3, 0x4, 0x2ca, 0x4, 0x200, 0x5, 0x5631, 0x7, 0x5, 0xfffffffffffffff7, 0xaf, 0x100000001, 0x7, 0x6e0, 0x86e, 0x2, 0x4, 0x1, 0x2, 0xfffffffffffffff7, 0x7c, 0x8, 0x2ad6, 0x8, 0x157b84ad, 0x0, 0xa, 0x80000001, 0x9, 0x10001, 0xfffffffffffffff9, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x4, 0x3, 0x8, 0x7, 0xb, 0x3, 0x0, 0x9, 0x10000, 0x1000, 0x2, 0x8, 0x64, 0x280000000000, 0x2, 0x4, 0x7, 0xa, 0x3, 0x8, 0x2, 0x0, 0xa0000000000, 0xfffffffffffffff5, 0x7, 0x3, 0x176, 0x15f, 0x0, 0x5, 0x5, 0xfc72, 0x9, 0x7, 0x7, 0x2, 0x6, 0x81, 0x2, 0x1, 0x10000000100, 0x0, 0x9, 0x2ce1, 0x7f, 0x8, 0xeab5, 0xffffffffffffffff, 0xf000000000000000, 0x6, 0x10001, 0x2b6, 0x1, 0x2e06ffea, 0x10001, 0xf2d5, 0xffffffffffffffff, 0x2b6b, 0x1, 0x4, 0x5ac, 0x7f95, 0xd13, 0x2c, 0x1ff, 0x1000, 0xd05, 0x1, 0x9e, 0x8000000000000000, 0x3, 0x0, 0x3, 0x5, 0xc, 0x6, 0x6281, 0x10, 0x7f, 0x7, 0x3, 0x3, 0x7]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000280)={r4, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x3, 0x6]}}) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000100)) pipe2$9p(0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) prctl$PR_GET_TSC(0x43, 0x0) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a300000000005000740080000001400000011000100"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c819}, 0x40) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="083e0083", @ANYRES16], 0x54}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) socket$inet(0x2, 0x1, 0x100) close_range(r1, 0xffffffffffffffff, 0x0) 10m48.941680343s ago: executing program 1 (id=546): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000001600), 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e"], 0xf8) 10m48.510568488s ago: executing program 34 (id=546): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000001600), 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e"], 0xf8) 10m15.613341118s ago: executing program 0 (id=590): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xc, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x0, 0x1, 0x7}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) socket$key(0xf, 0x3, 0x2) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004780)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4085}, 0x4000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) 10m13.344380892s ago: executing program 7 (id=547): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, 0x0, 0x0, 0x10000, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 10m13.156976675s ago: executing program 7 (id=594): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000001600), 0x4) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r4, 0x8b2c, &(0x7f0000000040)) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x80, 0x3, 0xf, 0xd, 0xf6, 0x4, 0x10, 0x9d, 0x4, [0x1, 0x4, 0x1, 0x468, 0x80, 0x3, 0x9, 0x80]}}) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb6, 0xb6, 0x7, [@float={0xc, 0x0, 0x0, 0x10, 0x10}, @struct={0xf, 0x1, 0x0, 0x4, 0x0, 0x9, [{0xd, 0x0, 0xe57}]}, @enum={0x5}, @union={0x6, 0x3, 0x0, 0x5, 0x1, 0x1, [{0x7, 0x4, 0x1}, {0x6, 0x5, 0x8001}, {0x0, 0x4, 0x6}]}, @enum64={0x10, 0x1, 0x0, 0x13, 0x0, 0x1, [{0x6, 0x4}]}, @fwd={0x5}, @datasec={0xa, 0x3, 0x0, 0xf, 0x2, [{0x4, 0x10000, 0x6}, {0x1, 0x53f5, 0x100}, {0x1, 0x2, 0xc}], "81d1"}]}, {0x0, [0x5f, 0x2e, 0x61, 0x2e, 0x5f]}}, 0x0, 0xd7, 0x0, 0x1, 0xfffffff8}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}}, 0xc000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) 10m12.175100988s ago: executing program 0 (id=597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) getsockopt$inet6_int(r1, 0x29, 0x31, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) open(&(0x7f00000000c0)='./file0\x00', 0x43d040, 0x98) fcntl$setlease(r2, 0x400, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$nl_rdma(0x10, 0x3, 0x14) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) syz_init_net_socket$netrom(0x6, 0x5, 0x0) kexec_load(0x8, 0x1, &(0x7f0000000500)=[{&(0x7f0000000480)="a3", 0x1, 0x0, 0x10000}], 0x3e0000) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[], 0x98}}, 0x0) 10m11.608059829s ago: executing program 7 (id=598): r0 = syz_usb_connect(0x3, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000026c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x60, 0x3}, 0x0, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x2}}) 10m11.020569157s ago: executing program 35 (id=598): r0 = syz_usb_connect(0x3, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000026c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x60, 0x3}, 0x0, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x2}}) 10m11.012075465s ago: executing program 0 (id=600): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone3(&(0x7f00000001c0)={0x201180, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) 10m7.765112583s ago: executing program 0 (id=605): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r1 = open(0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 10m7.588675822s ago: executing program 0 (id=607): pipe2$watch_queue(0x0, 0x80) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x9, 0x2, 0x818, 0x0, 0x0, 0x0, 0x2, 0x7, 0x9, 0x8, 0x0, 0x8001, 0x6, 0x9, 0x0, 0x3, [0x1, 0x6]}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) socket(0x2, 0x80805, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r3, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) read$msr(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa10, 0x5) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000005667d1040206402d14e0102030109021b000100000000090400000190f19c000905"], 0x0) 10m4.269616306s ago: executing program 0 (id=612): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e25}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000007c0)}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) io_submit(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "2eb387e0", "11edf8da8e55bb27"}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r3}, &(0x7f0000000040)=0x0, &(0x7f0000000480)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340), 0x2, 0x3) io_uring_enter(r5, 0xf23, 0x0, 0xc, 0x0, 0x0) 10m3.057364432s ago: executing program 36 (id=612): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e25}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000007c0)}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) io_submit(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "2eb387e0", "11edf8da8e55bb27"}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r3}, &(0x7f0000000040)=0x0, &(0x7f0000000480)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340), 0x2, 0x3) io_uring_enter(r5, 0xf23, 0x0, 0xc, 0x0, 0x0) 30.080637192s ago: executing program 8 (id=1616): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) symlinkat(&(0x7f0000002740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00') 24.665712371s ago: executing program 8 (id=1626): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 17.879446499s ago: executing program 9 (id=1638): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000040)=0x80, 0x4) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004780)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4085}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x2b, 0x2, 0x3, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000f00)={0x20, 0x1, 0x2, "eebf"}, 0x0}) 15.862305275s ago: executing program 9 (id=1641): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x2c, r5, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}}, 0x18) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x53d040) dup3(0xffffffffffffffff, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f0000000080)={0x5, r2, 'id1\x00'}) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0xff, 0x0) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000380)='G') socket(0x10, 0x80002, 0x0) 15.757006434s ago: executing program 6 (id=1642): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1138}}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016", 0x33}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x8, [@float={0xc, 0x0, 0x0, 0x10, 0x10}, @enum={0x5}, @union={0x6, 0x3, 0x0, 0x5, 0x1, 0x1, [{0x7, 0x4, 0x1}, {0x2, 0x5, 0x8001}, {0x0, 0x4, 0x6}]}, @enum64={0x10, 0x2, 0x0, 0x13, 0x0, 0x1, [{0x9, 0x3, 0x8}, {0x6, 0x4}]}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x5f, 0x0, 0x2e, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000640)=""/160, 0x98, 0xa0, 0x1, 0xfffffff8}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="00022cbd7000fddbdf25080000000c00028005000d00010000"], 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 15.029079838s ago: executing program 6 (id=1644): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x2c, r4, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}}, 0x18) dup3(0xffffffffffffffff, r2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f0000000080)={0x5, r1, 'id1\x00'}) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, 0x0) 13.682942442s ago: executing program 6 (id=1647): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 13.008123795s ago: executing program 8 (id=1649): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 12.673938781s ago: executing program 6 (id=1650): socket$inet6(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000080)={0x1, 0x4000, 0x0, 0xffffffffffffffff, 0x8}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0xd3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x404) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) ioctl$KVM_GET_TSC_KHZ_vm(r2, 0xaea3) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x20004810) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf25020000000800080046"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x844) 11.053839276s ago: executing program 8 (id=1653): openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, 0x0, &(0x7f0000000040), 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 10.134060606s ago: executing program 9 (id=1656): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, 0x0, 0x0) 9.979414442s ago: executing program 9 (id=1657): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="370000001000010000000000000000000000000a78000000060a0b04000000000000000002000000500004804c00018011000100666c6f775f6f66666c6f616400000000340002800900010073797a30000000000900010073797a30000000000900010073797a30000000000900010073797a32000000000900010073797a300000000008000a7f61d68f0acb6d69001100010000000000000000000300000a"], 0xa0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r8, 0x0, 0x0) listen(r8, 0x0) setsockopt$bt_BT_VOICE(r8, 0x112, 0x13, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x125000, 0x49) io_setup(0x1, &(0x7f00000016c0)) sendfile(r4, r5, 0x0, 0x20000023896) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xfffc, 0x4e21, 0x18, 0x2, 0x0, 0x20, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0xfffffffc}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) 8.561938205s ago: executing program 6 (id=1659): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 7.846439196s ago: executing program 3 (id=1662): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xd, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 6.390669072s ago: executing program 5 (id=1664): r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d01, 0x0) 6.204241074s ago: executing program 5 (id=1665): getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x7140000000, 0x4d2400) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000240)={0x80000000, 0x0, &(0x7f0000000080)}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000003740)=""/102394, 0x18ffa}], 0x1, 0x0, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f00000000c0)) 5.017573211s ago: executing program 5 (id=1666): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) 4.80769663s ago: executing program 3 (id=1667): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, 0x0, 0x0) 4.781875603s ago: executing program 5 (id=1668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) getsockopt$inet6_int(r1, 0x29, 0x31, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) open(&(0x7f00000000c0)='./file0\x00', 0x43d040, 0x98) fcntl$setlease(r2, 0x400, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$nl_rdma(0x10, 0x3, 0x14) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) kexec_load(0x8, 0x1, &(0x7f0000000500)=[{&(0x7f0000000480)="a3", 0x1, 0x0, 0x10000}], 0x3e0000) connect$netrom(r5, 0x0, 0x0) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[], 0x98}}, 0x0) 4.653035532s ago: executing program 6 (id=1669): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000f00)={0x20, 0x1, 0x2, "eebf"}, 0x0}) 4.113634365s ago: executing program 3 (id=1670): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4600, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000880)={0x0, 0x2, 0x1, [0x1, 0xeb5b, 0x6, 0x3, 0x100000000], [0x1, 0x3, 0x4, 0x2ca, 0x4, 0x200, 0x5, 0x5631, 0x7, 0x5, 0xfffffffffffffff7, 0xaf, 0x100000001, 0x7, 0x6e0, 0x86e, 0x2, 0x4, 0x1, 0x2, 0xfffffffffffffff7, 0x7c, 0x8, 0x2ad6, 0x8, 0x157b84ad, 0x0, 0xa, 0x80000001, 0x9, 0x10001, 0xfffffffffffffff9, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x4, 0x3, 0x8, 0x7, 0xb, 0x3, 0x0, 0x9, 0x10000, 0x1000, 0x2, 0x8, 0x64, 0x280000000000, 0x2, 0x4, 0x7, 0xa, 0x3, 0x8, 0x2, 0x0, 0xa0000000000, 0xfffffffffffffff5, 0x7, 0x3, 0x176, 0x15f, 0x0, 0x5, 0x5, 0xfc72, 0x9, 0x7, 0x7, 0x2, 0x6, 0x81, 0x2, 0x1, 0x10000000100, 0x0, 0x9, 0x2ce1, 0x7f, 0x8, 0xeab5, 0xffffffffffffffff, 0xf000000000000000, 0x6, 0x10001, 0x2b6, 0x1, 0x2e06ffea, 0x10001, 0xf2d5, 0xffffffffffffffff, 0x2b6b, 0x1, 0x4, 0x5ac, 0x7f95, 0xd13, 0x2c, 0x1ff, 0x1000, 0xd05, 0x1, 0x9e, 0x8000000000000000, 0x3, 0x0, 0x3, 0x5, 0xc, 0x6, 0x6281, 0x10, 0x7f, 0x7, 0x3, 0x3, 0x7]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000280)={r4, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x3, 0x6]}}) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000100)) pipe2$9p(0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) prctl$PR_GET_TSC(0x43, 0x0) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a300000000005000740080000001400000011000100"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c819}, 0x40) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="083e0083", @ANYRES16=r7], 0x54}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) socket$inet(0x2, 0x1, 0x100) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4.003972s ago: executing program 9 (id=1671): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004780)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4085}, 0x4000) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x2b, 0x2, 0x3, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000f00)={0x20, 0x1, 0x2, "eebf"}, 0x0}) 2.528480075s ago: executing program 8 (id=1672): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) symlinkat(&(0x7f0000002740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00') 1.369077584s ago: executing program 3 (id=1673): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000040)) 1.341417848s ago: executing program 8 (id=1674): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000300)="fb55", 0x2}], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 1.327274645s ago: executing program 5 (id=1675): r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d01, 0x0) 1.19894151s ago: executing program 3 (id=1676): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f00000001c0)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000000), 0x5}) timer_settime(0x0, 0x0, 0x0, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r6, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) 665.105076ms ago: executing program 9 (id=1677): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYRES32], 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_STAB={0x4}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a300000"], 0x110}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r0, 0x1, 0x0, 0x0, {0x3}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 664.254453ms ago: executing program 5 (id=1678): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x8000) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000003, 0x100010, 0xffffffffffffffff, 0xee17000) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') mprotect(&(0x7f000009a000/0x1000)=nil, 0x1000, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f00000c7000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) preadv(r2, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) 0s ago: executing program 3 (id=1679): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) kernel console output (not intermixed with test programs): interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 645.156946][ T5882] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 645.156971][ T5882] usb 7-1: config 0 interface 0 has no altsetting 0 [ 645.161729][ T5882] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 645.161756][ T5882] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 645.161773][ T5882] usb 7-1: Product: syz [ 645.161784][ T5882] usb 7-1: Manufacturer: syz [ 645.161796][ T5882] usb 7-1: SerialNumber: syz [ 645.430808][ T9] hub 4-1:0.0: activate --> -90 [ 645.507790][ T5882] usb 7-1: config 0 descriptor?? [ 645.535189][ T5882] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 645.543904][ T5882] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 645.644009][ T9] hub 4-1:0.0: hub_ext_port_status failed (err = 2) [ 645.682085][ T9659] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 645.714907][ T9659] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 645.762546][ T9659] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 645.804020][ T5882] usb 7-1: USB disconnect, device number 12 [ 645.804182][ C1] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 645.832445][ T9659] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 645.954795][ T5794] usb 4-1: USB disconnect, device number 44 [ 646.021618][ T9601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.290008][ T9659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.350696][ T9659] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.391654][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.391824][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.479207][ T6034] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.479579][ T6034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.699653][ T9601] veth0_vlan: entered promiscuous mode [ 647.728321][ T9601] veth1_vlan: entered promiscuous mode [ 647.734391][ T5882] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 647.867060][ T9601] veth0_macvtap: entered promiscuous mode [ 648.125059][ T9601] veth1_macvtap: entered promiscuous mode [ 648.783363][ T9929] loop6: detected capacity change from 0 to 7 [ 648.791558][ C1] blk_print_req_error: 5 callbacks suppressed [ 648.791576][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 648.791604][ C1] buffer_io_error: 5 callbacks suppressed [ 648.791614][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.792994][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 648.793023][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.800588][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 648.800621][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.800933][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 648.800959][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.801252][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 648.801278][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.801551][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 648.801576][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.802143][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 648.802169][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.802270][ T9929] ldm_validate_partition_table(): Disk read failed. [ 648.802468][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 648.802493][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.802761][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 648.802785][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.803068][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 648.803092][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.803446][ T9929] Dev loop6: unable to read RDB block 0 [ 648.808832][ T9929] loop6: unable to read partition table [ 648.808981][ T9929] loop6: partition table beyond EOD, truncated [ 648.808993][ T9929] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 649.076557][ T9601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.266780][ T9601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.271774][ T5161] ldm_validate_partition_table(): Disk read failed. [ 649.272566][ T5161] Dev loop6: unable to read RDB block 0 [ 649.273174][ T5161] loop6: unable to read partition table [ 649.273390][ T5161] loop6: partition table beyond EOD, truncated [ 649.277914][ T9659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.176235][ T1516] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.179198][ T1516] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.180282][ T1516] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.180324][ T1516] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.900115][ T1516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.900137][ T1516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.356090][ T1516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.356112][ T1516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.755795][ T9659] veth0_vlan: entered promiscuous mode [ 651.917236][ T9659] veth1_vlan: entered promiscuous mode [ 652.071157][ T9963] netlink: 4 bytes leftover after parsing attributes in process `syz.8.599'. [ 652.149895][ T9659] veth0_macvtap: entered promiscuous mode [ 652.189869][ T9659] veth1_macvtap: entered promiscuous mode [ 652.298678][ T9659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.347585][ T9659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.762498][ T41] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.773259][ T41] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.810644][ T8701] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.816405][ T8701] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.174025][ T5799] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 653.174087][ T5799] Bluetooth: hci1: Malformed LE Event: 0x02 [ 653.866233][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.866253][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.067039][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.067060][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.403880][ T9997] netlink: 'syz.3.831': attribute type 1 has an invalid length. [ 656.345715][ T5799] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 656.345765][ T5799] Bluetooth: hci1: Malformed LE Event: 0x02 [ 657.021726][T10005] loop6: detected capacity change from 0 to 7 [ 657.022336][ C0] blk_print_req_error: 25 callbacks suppressed [ 657.022347][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 657.022361][ C0] buffer_io_error: 25 callbacks suppressed [ 657.022367][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 657.022585][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 657.022600][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 657.022755][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 657.022769][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 657.022913][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 657.022926][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 657.023081][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 657.023095][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 657.023245][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 657.023259][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 657.023399][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 657.023412][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 657.023463][T10005] ldm_validate_partition_table(): Disk read failed. [ 657.023571][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 657.023585][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 657.023724][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 657.023737][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 657.023875][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 657.023888][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 657.024047][T10005] Dev loop6: unable to read RDB block 0 [ 657.245980][T10005] loop6: unable to read partition table [ 657.246124][T10005] loop6: partition table beyond EOD, truncated [ 657.246151][T10005] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 658.951882][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.9.837'. [ 659.517605][T10029] netlink: 'syz.6.836': attribute type 3 has an invalid length. [ 659.778914][T10028] netlink: 'syz.9.838': attribute type 3 has an invalid length. [ 662.766469][T10069] loop6: detected capacity change from 0 to 7 [ 662.767046][ C1] blk_print_req_error: 5 callbacks suppressed [ 662.767060][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 662.767085][ C1] buffer_io_error: 5 callbacks suppressed [ 662.767094][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 662.767499][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 662.767524][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 662.767897][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 662.767930][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 662.768196][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 662.768219][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 662.768497][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 662.768522][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 662.768895][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 662.768929][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 662.769192][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 662.769215][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 662.769317][T10069] ldm_validate_partition_table(): Disk read failed. [ 662.769494][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 662.769518][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 662.769827][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 662.769853][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 662.770230][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 662.770255][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 662.770724][T10069] Dev loop6: unable to read RDB block 0 [ 662.772313][T10069] loop6: unable to read partition table [ 662.772467][T10069] loop6: partition table beyond EOD, truncated [ 662.772493][T10069] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 664.544845][ T31] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 664.724324][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 664.726744][ T31] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 664.726785][ T31] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 664.726810][ T31] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 664.726825][ T31] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 664.726840][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 664.731145][ T31] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 664.731170][ T31] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 664.731190][ T31] usb 4-1: Product: syz [ 664.731202][ T31] usb 4-1: Manufacturer: syz [ 664.731214][ T31] usb 4-1: SerialNumber: syz [ 664.745789][ T31] usb 4-1: config 0 descriptor?? [ 664.831999][ T31] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 664.845390][ T31] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 665.294890][ T9] usb 4-1: USB disconnect, device number 45 [ 665.294994][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 665.551995][T10109] netlink: 'syz.6.853': attribute type 1 has an invalid length. [ 667.075985][ T9] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 669.807020][T10128] loop6: detected capacity change from 0 to 7 [ 669.814396][ C1] blk_print_req_error: 10 callbacks suppressed [ 669.814416][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 669.814442][ C1] buffer_io_error: 10 callbacks suppressed [ 669.814451][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 669.816367][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 669.816397][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 669.816639][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 669.816664][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 669.824432][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 669.824470][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 669.824823][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 669.824852][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 669.825133][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 669.825159][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 669.825427][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 669.825453][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 669.825550][T10128] ldm_validate_partition_table(): Disk read failed. [ 669.825727][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 669.825753][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 669.826016][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 669.826041][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 669.826309][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 669.826336][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 669.826686][T10128] Dev loop6: unable to read RDB block 0 [ 669.827708][T10128] loop6: unable to read partition table [ 669.827873][T10128] loop6: partition table beyond EOD, truncated [ 669.827897][T10128] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 672.134746][ T5161] ldm_validate_partition_table(): Disk read failed. [ 672.135392][ T5161] Dev loop6: unable to read RDB block 0 [ 672.136049][ T5161] loop6: unable to read partition table [ 672.136270][ T5161] loop6: partition table beyond EOD, truncated [ 672.684874][ T31] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 672.945147][ T31] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 672.945166][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.947966][ T31] usb 7-1: config 0 descriptor?? [ 672.985588][ T31] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 673.280249][ T31] gp8psk: usb in 128 operation failed. [ 673.283876][ T31] gp8psk: usb in 137 operation failed. [ 673.283893][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 673.291121][ T31] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 673.291177][ T31] usb 7-1: media controller created [ 673.313404][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 673.435608][ T31] gp8psk_fe: Frontend attached [ 673.435663][ T31] usb 7-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 673.443840][ T31] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 673.857693][T10159] netlink: 'syz.9.863': attribute type 1 has an invalid length. [ 673.933195][ T31] gp8psk: usb in 137 operation failed. [ 673.933210][ T31] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 673.933217][ T31] gp8psk: found Genpix USB device pID = 203 (hex) [ 674.024832][ T31] usb 7-1: USB disconnect, device number 13 [ 674.403050][ T31] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 675.434345][T10168] vcan0: entered allmulticast mode [ 675.436495][T10169] vcan0: left allmulticast mode [ 682.544468][ T9074] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 682.710333][ T9074] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.710387][ T9074] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 682.710425][ T9074] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 682.710445][ T9074] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.718247][ T9074] usb 9-1: config 0 descriptor?? [ 682.819591][ T9074] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 683.197084][T10230] netlink: 860 bytes leftover after parsing attributes in process `syz.9.877'. [ 686.637409][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.880'. [ 686.653467][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.661868][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.856145][ T5882] usb 9-1: USB disconnect, device number 2 [ 692.986612][ T9092] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 692.986659][ T9092] Bluetooth: hci2: Malformed LE Event: 0x02 [ 699.249931][T10321] netlink: 'syz.6.892': attribute type 3 has an invalid length. [ 699.634248][ T31] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 699.764230][ T31] usb 9-1: device descriptor read/64, error -71 [ 700.044309][ T31] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 700.175643][ T31] usb 9-1: device descriptor read/64, error -71 [ 700.286041][ T31] usb usb9-port1: attempt power cycle [ 700.644321][ T31] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 700.667039][ T31] usb 9-1: device descriptor read/8, error -71 [ 700.934305][ T31] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 700.957285][ T31] usb 9-1: device descriptor read/8, error -71 [ 701.083179][ T31] usb usb9-port1: unable to enumerate USB device [ 701.514896][T10350] netlink: 8 bytes leftover after parsing attributes in process `syz.5.893'. [ 704.652596][ T9074] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 705.049307][ T9074] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.049342][ T9074] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.049366][ T9074] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 705.049411][ T9074] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 705.049435][ T9074] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.159732][ T9074] usb 9-1: config 0 descriptor?? [ 705.496042][ T5799] Bluetooth: hci5: unknown advertising packet type: 0x75 [ 705.496088][ T5799] Bluetooth: hci5: Malformed LE Event: 0x02 [ 705.878105][ T9074] usbhid 9-1:0.0: can't add hid device: -71 [ 705.878180][ T9074] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 705.914555][ T9074] usb 9-1: USB disconnect, device number 7 [ 706.338884][T10382] netlink: 'syz.3.901': attribute type 4 has an invalid length. [ 706.338907][T10382] netlink: 17 bytes leftover after parsing attributes in process `syz.3.901'. [ 706.420985][T10380] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.902'. [ 706.564950][T10382] delete_channel: no stack [ 707.354271][ T31] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 707.524243][ T31] usb 9-1: Using ep0 maxpacket: 8 [ 707.542510][ T31] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.542536][ T31] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 707.552758][ T31] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 707.552788][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.552808][ T31] usb 9-1: Product: syz [ 707.552820][ T31] usb 9-1: Manufacturer: syz [ 707.552832][ T31] usb 9-1: SerialNumber: syz [ 707.619889][ T31] usb 9-1: config 0 descriptor?? [ 707.714278][ T9375] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 707.997030][ T9375] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 707.997060][ T9375] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 707.997073][ T9375] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.000207][ T9375] usb 7-1: config 0 descriptor?? [ 708.003698][ T9375] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 708.205667][T10398] vcan0: entered allmulticast mode [ 708.219691][T10398] vcan0: left allmulticast mode [ 709.132468][T10402] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.906'. [ 710.126269][ T9375] usb 9-1: USB disconnect, device number 8 [ 713.470607][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.911'. [ 716.022468][ T9074] usb 7-1: USB disconnect, device number 14 [ 720.004291][ T5799] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 720.004334][ T5799] Bluetooth: hci1: Malformed LE Event: 0x02 [ 722.756009][T10508] netlink: 892 bytes leftover after parsing attributes in process `syz.3.927'. [ 723.037151][T10516] netlink: 'syz.8.926': attribute type 4 has an invalid length. [ 723.037174][T10516] netlink: 17 bytes leftover after parsing attributes in process `syz.8.926'. [ 723.081074][T10516] delete_channel: no stack [ 723.312907][ T5938] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 723.486593][ T5938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.486671][ T5938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.486693][ T5938] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 723.486736][ T5938] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 723.486759][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.500913][ T5938] usb 6-1: config 0 descriptor?? [ 723.614776][ T9375] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 723.780934][ T9375] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 723.847346][ T9375] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 723.847400][ T9375] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 723.847427][ T9375] usb 4-1: config 0 interface 0 has no altsetting 0 [ 723.849667][ T9375] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 723.849718][ T9375] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 723.849872][ T9375] usb 4-1: config 0 interface 0 has no altsetting 0 [ 723.851694][ T9375] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 723.851817][ T9375] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 723.851846][ T9375] usb 4-1: config 0 interface 0 has no altsetting 0 [ 723.853231][ T9375] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 723.853448][ T9375] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 723.853534][ T9375] usb 4-1: config 0 interface 0 has no altsetting 0 [ 723.967917][ T9375] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 723.967973][ T9375] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 723.968000][ T9375] usb 4-1: config 0 interface 0 has no altsetting 0 [ 723.974295][ T5799] Bluetooth: hci1: command 0x0406 tx timeout [ 724.014634][ T9375] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 724.014691][ T9375] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 724.014718][ T9375] usb 4-1: config 0 interface 0 has no altsetting 0 [ 724.016429][ T9375] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 724.016480][ T9375] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 724.016992][ T9375] usb 4-1: config 0 interface 0 has no altsetting 0 [ 724.023355][ T9375] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 724.060212][ T9375] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 724.064640][ T9375] usb 4-1: config 0 interface 0 has no altsetting 0 [ 724.113660][ T9375] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 724.113690][ T9375] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 724.113710][ T9375] usb 4-1: Product: syz [ 724.113723][ T9375] usb 4-1: Manufacturer: syz [ 724.113738][ T9375] usb 4-1: SerialNumber: syz [ 724.545740][ T5938] usbhid 6-1:0.0: can't add hid device: -71 [ 724.545870][ T5938] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 725.641647][ T5938] usb 6-1: USB disconnect, device number 51 [ 725.703469][ T9375] usb 4-1: config 0 descriptor?? [ 725.840602][ T9375] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 726.221950][ C0] usb 4-1: yurex_control_callback - control failed: -71 [ 726.222445][ T48] usb 4-1: USB disconnect, device number 46 [ 726.233080][ T48] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 727.404002][ T5799] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 727.404046][ T5799] Bluetooth: hci3: Malformed LE Event: 0x02 [ 729.203714][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 730.027571][ T48] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 730.137401][T10570] netlink: 892 bytes leftover after parsing attributes in process `syz.3.939'. [ 730.215749][ T48] usb 10-1: config 8 has an invalid interface number: 177 but max is 0 [ 730.215777][ T48] usb 10-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 730.215796][ T48] usb 10-1: config 8 has no interface number 0 [ 730.215849][ T48] usb 10-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 730.215876][ T48] usb 10-1: config 8 interface 177 has no altsetting 0 [ 730.215908][ T48] usb 10-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 730.215931][ T48] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.329587][ T48] ir_toy 10-1:8.177: required endpoints not found [ 730.539154][ T5857] usb 10-1: USB disconnect, device number 2 [ 731.944289][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 732.115170][ T9] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 732.116333][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 732.116365][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 732.116380][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 732.123555][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 732.123595][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 732.123610][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 732.180135][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 732.180185][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 732.180200][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 732.216210][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 732.216259][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 732.216274][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 732.243326][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 732.243361][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 732.243376][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 732.265557][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 732.265592][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 732.265607][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 732.294600][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 732.294637][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 732.294658][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 732.326936][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 732.326971][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 732.326986][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 732.329694][ T9] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 732.329721][ T9] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 732.329742][ T9] usb 10-1: Product: syz [ 732.329754][ T9] usb 10-1: Manufacturer: syz [ 732.329766][ T9] usb 10-1: SerialNumber: syz [ 732.423566][ T9] usb 10-1: config 0 descriptor?? [ 732.459160][ T9] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 732.964069][ C0] usb 10-1: yurex_control_callback - control failed: -71 [ 732.986683][ T9] usb 10-1: USB disconnect, device number 3 [ 732.991903][ T9] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 733.937833][T10635] mkiss: ax0: crc mode is auto. [ 734.150893][T10643] netlink: 'syz.8.951': attribute type 4 has an invalid length. [ 734.150916][T10643] netlink: 17 bytes leftover after parsing attributes in process `syz.8.951'. [ 734.163856][T10643] delete_channel: no stack [ 736.757566][T10664] netlink: 868 bytes leftover after parsing attributes in process `syz.5.960'. [ 738.736527][T10680] netlink: 'syz.5.962': attribute type 4 has an invalid length. [ 746.408047][ T9092] Bluetooth: hci5: unknown advertising packet type: 0x75 [ 746.408098][ T9092] Bluetooth: hci5: Malformed LE Event: 0x02 [ 746.630672][T10735] netlink: 'syz.8.975': attribute type 4 has an invalid length. [ 747.264633][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.264675][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.975908][T10746] netlink: 'syz.5.978': attribute type 3 has an invalid length. [ 749.329774][T10750] netlink: 828 bytes leftover after parsing attributes in process `syz.6.981'. [ 758.153731][ T9092] Bluetooth: hci5: unknown advertising packet type: 0x75 [ 758.153774][ T9092] Bluetooth: hci5: Malformed LE Event: 0x02 [ 758.326789][T10804] loop6: detected capacity change from 0 to 7 [ 758.627565][ C1] blk_print_req_error: 30 callbacks suppressed [ 758.627622][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.627678][ C1] buffer_io_error: 30 callbacks suppressed [ 758.627729][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 758.695360][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.695455][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 758.698243][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.698275][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 758.699517][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.699560][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 758.700421][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.700476][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 758.701184][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.701209][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 758.702905][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.702971][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 758.703088][T10804] ldm_validate_partition_table(): Disk read failed. [ 758.704982][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.705034][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 758.708675][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.708722][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 758.710321][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.710366][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 758.711752][T10804] Dev loop6: unable to read RDB block 0 [ 758.716569][T10804] loop6: unable to read partition table [ 758.717999][T10804] loop6: partition table beyond EOD, truncated [ 758.718125][T10804] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 759.775245][ T9074] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 760.690350][ T9074] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 760.724281][ T9074] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 760.724356][ T9074] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 760.724384][ T9074] usb 10-1: config 0 interface 0 has no altsetting 0 [ 760.733654][ T9074] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 760.733707][ T9074] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 760.733723][ T9074] usb 10-1: config 0 interface 0 has no altsetting 0 [ 760.735204][ T9074] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 760.735235][ T9074] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 760.735250][ T9074] usb 10-1: config 0 interface 0 has no altsetting 0 [ 760.738565][ T9074] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 760.738617][ T9074] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 760.738645][ T9074] usb 10-1: config 0 interface 0 has no altsetting 0 [ 760.761662][ T9074] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 760.762333][ T9074] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 760.762362][ T9074] usb 10-1: config 0 interface 0 has no altsetting 0 [ 760.770322][ T9074] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 760.770378][ T9074] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 760.770404][ T9074] usb 10-1: config 0 interface 0 has no altsetting 0 [ 760.772530][ T9074] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 760.772582][ T9074] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 760.772607][ T9074] usb 10-1: config 0 interface 0 has no altsetting 0 [ 760.781866][ T9074] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 760.781924][ T9074] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 760.781951][ T9074] usb 10-1: config 0 interface 0 has no altsetting 0 [ 760.811686][ T9074] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 760.811717][ T9074] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 760.811737][ T9074] usb 10-1: Product: syz [ 760.811751][ T9074] usb 10-1: Manufacturer: syz [ 760.811765][ T9074] usb 10-1: SerialNumber: syz [ 761.009020][ T9074] usb 10-1: config 0 descriptor?? [ 762.538893][ T9074] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 762.626758][ T9074] usb 10-1: USB disconnect, device number 4 [ 762.635389][ T9074] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 764.811266][T10834] syz.8.1004 (10834): drop_caches: 2 [ 765.834310][ T5938] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 766.026483][ T5938] usb 7-1: Using ep0 maxpacket: 16 [ 766.103357][ T5938] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 766.120881][ T5938] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 766.120909][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.120919][ T5938] usb 7-1: Product: syz [ 766.120926][ T5938] usb 7-1: Manufacturer: syz [ 766.120934][ T5938] usb 7-1: SerialNumber: syz [ 766.175194][ T5938] usb 7-1: config 0 descriptor?? [ 766.915727][T10853] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.999'. [ 769.840679][ T9] usb 7-1: USB disconnect, device number 15 [ 773.074642][ T9092] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 773.074687][ T9092] Bluetooth: hci1: Malformed LE Event: 0x02 [ 777.318102][ T9074] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 777.774226][ T9074] usb 6-1: Using ep0 maxpacket: 16 [ 777.783084][ T9074] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 777.828826][ T9074] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 777.828844][ T9074] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.828855][ T9074] usb 6-1: Product: syz [ 777.828863][ T9074] usb 6-1: Manufacturer: syz [ 777.828870][ T9074] usb 6-1: SerialNumber: syz [ 777.886712][ T9074] usb 6-1: config 0 descriptor?? [ 779.332764][T10952] mkiss: ax0: crc mode is auto. [ 782.090686][ T5938] usb 6-1: USB disconnect, device number 52 [ 783.040666][ T9074] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 783.098132][ T5938] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 783.195996][ T9074] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.196024][ T9074] usb 10-1: config 0 has no interfaces? [ 783.196054][ T9074] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 783.196077][ T9074] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.199875][ T9074] usb 10-1: config 0 descriptor?? [ 783.458043][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.458077][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.458100][ T5938] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 783.458141][ T5938] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 783.458163][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.548276][ T5938] usb 4-1: config 0 descriptor?? [ 784.768655][ T5938] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 785.784010][ T5938] usb 4-1: USB disconnect, device number 47 [ 785.869743][ T48] usb 10-1: USB disconnect, device number 5 [ 785.933786][T11007] netlink: 'syz.5.1045': attribute type 3 has an invalid length. [ 786.502167][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1047'. [ 786.502202][T11019] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1047'. [ 786.639800][T11019] geneve2: entered promiscuous mode [ 786.639816][T11019] geneve2: entered allmulticast mode [ 787.374397][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 787.654298][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 787.659648][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 787.680831][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 787.680849][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.680860][ T9] usb 7-1: Product: syz [ 787.680868][ T9] usb 7-1: Manufacturer: syz [ 787.680875][ T9] usb 7-1: SerialNumber: syz [ 787.726209][ T9] usb 7-1: config 0 descriptor?? [ 789.697354][T11065] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1063'. [ 789.697389][T11065] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1063'. [ 791.976460][ T9] usb 7-1: USB disconnect, device number 16 [ 797.685976][T11129] loop6: detected capacity change from 0 to 7 [ 797.695481][ T9074] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 797.696000][ C1] blk_print_req_error: 10 callbacks suppressed [ 797.696049][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 797.696105][ C1] buffer_io_error: 10 callbacks suppressed [ 797.696146][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 797.696798][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 797.696838][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 797.697449][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 797.697475][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 797.698146][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 797.698201][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 797.698934][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 797.698993][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 797.699699][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 797.699763][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 797.700232][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 797.700285][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 797.700369][T11129] ldm_validate_partition_table(): Disk read failed. [ 797.700889][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 797.700949][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 797.702358][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 797.702518][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 797.703098][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 797.703160][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 797.703761][T11129] Dev loop6: unable to read RDB block 0 [ 797.721762][T11129] loop6: unable to read partition table [ 797.724022][T11129] loop6: partition table beyond EOD, truncated [ 797.724080][T11129] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 798.152015][ T9074] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.152035][ T9074] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.152048][ T9074] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 798.152072][ T9074] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 798.152085][ T9074] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.208233][ T9074] usb 10-1: config 0 descriptor?? [ 798.843142][ T9074] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 798.874593][T11127] syz.3.1083 (11127): drop_caches: 2 [ 799.396491][ T9074] usb 10-1: USB disconnect, device number 6 [ 800.484292][ T9978] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 800.698280][ T9978] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.698453][ T9978] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.698517][ T9978] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 800.698561][ T9978] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 800.698585][ T9978] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.705592][ T9978] usb 10-1: config 0 descriptor?? [ 801.904467][ T9978] usbhid 10-1:0.0: can't add hid device: -71 [ 801.904549][ T9978] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 801.983523][ T9978] usb 10-1: USB disconnect, device number 7 [ 803.185182][T11176] loop6: detected capacity change from 0 to 7 [ 803.406939][ C1] blk_print_req_error: 10 callbacks suppressed [ 803.406958][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 803.406993][ C1] buffer_io_error: 10 callbacks suppressed [ 803.407003][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 803.525446][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 803.525481][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 803.527986][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 803.528022][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 803.608762][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 803.608786][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 803.639981][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 803.640014][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 803.930852][ T9074] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 804.033305][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 804.033339][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 804.046185][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 804.046218][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 804.046398][T11176] ldm_validate_partition_table(): Disk read failed. [ 804.048929][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 804.048962][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 804.050607][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 804.050637][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 804.071054][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 804.071092][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 804.074908][T11176] Dev loop6: unable to read RDB block 0 [ 804.078642][T11176] loop6: unable to read partition table [ 804.082752][T11176] loop6: partition table beyond EOD, truncated [ 804.083033][T11176] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 804.174269][ T9074] usb 10-1: Using ep0 maxpacket: 32 [ 804.176660][ T9074] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 804.176700][ T9074] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 804.176738][ T9074] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 804.176763][ T9074] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 804.176790][ T9074] usb 10-1: config 0 interface 0 has no altsetting 0 [ 804.179344][ T9074] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 804.179371][ T9074] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 804.179392][ T9074] usb 10-1: Product: syz [ 804.179407][ T9074] usb 10-1: Manufacturer: syz [ 804.179421][ T9074] usb 10-1: SerialNumber: syz [ 804.336445][ T9074] usb 10-1: config 0 descriptor?? [ 804.528923][ T9074] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 804.558930][ T9074] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 804.694651][ T9978] usb 10-1: USB disconnect, device number 8 [ 804.694686][ C1] ldusb 10-1:0.0: usb_submit_urb failed (-19) [ 804.699732][ T9978] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 806.665969][ T9092] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 806.666194][ T9092] Bluetooth: hci1: Malformed LE Event: 0x02 [ 811.010458][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 811.010529][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.644390][ T9978] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 813.074225][ T9978] usb 4-1: device not accepting address 48, error -71 [ 819.792009][T11286] netlink: 'syz.9.1123': attribute type 4 has an invalid length. [ 824.617846][T11316] syz.5.1131 (11316): drop_caches: 2 [ 827.794387][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 828.197388][ T9] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 828.197413][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.197425][ T9] usb 4-1: Product: syz [ 828.197433][ T9] usb 4-1: Manufacturer: syz [ 828.197440][ T9] usb 4-1: SerialNumber: syz [ 828.288343][ T9] usb 4-1: config 0 descriptor?? [ 828.333069][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 828.392931][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 828.422843][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 828.422889][ T9] usb 4-1: media controller created [ 828.935136][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 830.101355][ T9] DVB: Unable to find symbol mt352_attach() [ 830.647448][ T9] DVB: Unable to find symbol nxt6000_attach() [ 830.647461][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 830.650018][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 830.691209][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 830.691232][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 830.691248][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 830.691264][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 830.723799][ T9] usb 4-1: USB disconnect, device number 50 [ 830.965794][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 831.294269][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 831.494470][ T9] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 831.494499][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.494519][ T9] usb 4-1: Product: syz [ 831.494532][ T9] usb 4-1: Manufacturer: syz [ 831.494546][ T9] usb 4-1: SerialNumber: syz [ 831.501908][ T9] usb 4-1: config 0 descriptor?? [ 831.511021][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 831.616377][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 831.617275][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 831.617345][ T9] usb 4-1: media controller created [ 831.796013][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 832.511175][ T9] DVB: Unable to find symbol mt352_attach() [ 832.834395][ T9] DVB: Unable to find symbol nxt6000_attach() [ 832.834411][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 832.868267][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 832.904739][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 832.904764][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 832.904781][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 832.904798][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 834.074264][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 834.074286][ T9] dvb-usb: error while querying for an remote control event. [ 834.122749][ T9] usb 4-1: USB disconnect, device number 51 [ 834.487780][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 834.664274][ T9978] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 834.886449][ T9978] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 834.891538][ T9978] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 834.891556][ T9978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.891567][ T9978] usb 6-1: Product: syz [ 834.891574][ T9978] usb 6-1: Manufacturer: syz [ 834.891582][ T9978] usb 6-1: SerialNumber: syz [ 834.940338][ T9978] usb 6-1: config 0 descriptor?? [ 834.955258][ T9978] powermate 6-1:0.0: probe with driver powermate failed with error -22 [ 835.240795][ T9978] usb 6-1: USB disconnect, device number 53 [ 836.594438][ T9] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 836.796531][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.796559][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 836.796595][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 836.796625][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.801935][ T9] usb 6-1: config 0 descriptor?? [ 837.084345][ T5938] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 837.245274][ T5938] usb 9-1: no configurations [ 837.245293][ T5938] usb 9-1: can't read configurations, error -22 [ 838.437759][ T5938] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 838.585887][ T5938] usb 9-1: no configurations [ 838.585900][ T5938] usb 9-1: can't read configurations, error -22 [ 838.586186][ T5938] usb usb9-port1: attempt power cycle [ 838.691158][T11423] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1164'. [ 838.975112][ T5938] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 839.091699][ T5938] usb 9-1: no configurations [ 839.091712][ T5938] usb 9-1: can't read configurations, error -22 [ 839.214584][ T5938] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 839.237564][ T5938] usb 9-1: no configurations [ 839.237578][ T5938] usb 9-1: can't read configurations, error -22 [ 839.238578][ T5938] usb usb9-port1: unable to enumerate USB device [ 840.174246][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 840.344437][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 840.347026][ T9] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 840.347068][ T9] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 840.347117][ T9] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 840.347144][ T9] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 840.347171][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 840.350282][ T9] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 840.350311][ T9] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 840.350332][ T9] usb 7-1: Product: syz [ 840.350346][ T9] usb 7-1: Manufacturer: syz [ 840.350361][ T9] usb 7-1: SerialNumber: syz [ 840.539033][ T9] usb 7-1: config 0 descriptor?? [ 840.560111][ T9] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 840.577245][ T9] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 840.623954][ T5938] usb 6-1: USB disconnect, device number 54 [ 841.171436][ T5938] usb 7-1: USB disconnect, device number 17 [ 841.181702][ T5938] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 841.319500][T11462] netlink: 'syz.3.1173': attribute type 1 has an invalid length. [ 841.319516][T11462] netlink: 760 bytes leftover after parsing attributes in process `syz.3.1173'. [ 841.319535][T11462] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1173'. [ 841.674897][ T5938] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 842.053769][ T5938] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 842.053842][ T5938] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 842.053883][ T5938] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 842.053904][ T5938] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.115616][ T5938] usb 9-1: config 0 descriptor?? [ 842.122782][ T5938] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 842.338547][T11479] loop6: detected capacity change from 0 to 7 [ 842.355474][ C1] blk_print_req_error: 10 callbacks suppressed [ 842.355494][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 842.355522][ C1] buffer_io_error: 10 callbacks suppressed [ 842.356770][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 842.359511][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 842.359542][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 842.359990][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 842.360016][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 842.360361][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 842.360406][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 842.360761][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 842.360806][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 842.361167][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 842.361211][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 842.361425][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 842.361450][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 842.361531][T11479] ldm_validate_partition_table(): Disk read failed. [ 842.361823][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 842.361848][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 842.362443][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 842.362505][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 842.363381][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 842.363448][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 842.363941][T11479] Dev loop6: unable to read RDB block 0 [ 842.387632][T11479] loop6: unable to read partition table [ 842.387782][T11479] loop6: partition table beyond EOD, truncated [ 842.387802][T11479] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 845.084293][ T9] usb 9-1: USB disconnect, device number 13 [ 846.596034][T11508] netlink: 'syz.9.1189': attribute type 1 has an invalid length. [ 846.596052][T11508] netlink: 760 bytes leftover after parsing attributes in process `syz.9.1189'. [ 846.596061][T11508] netlink: 1 bytes leftover after parsing attributes in process `syz.9.1189'. [ 848.652355][ T9] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 849.363487][T11513] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1192'. [ 850.724357][ T9978] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 850.895628][ T9978] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.895669][ T9978] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 850.895694][ T9978] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 850.895706][ T9978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.900301][ T9978] usb 6-1: config 0 descriptor?? [ 850.975347][ T9978] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 853.449468][T11551] netlink: 'syz.3.1200': attribute type 1 has an invalid length. [ 853.449492][T11551] netlink: 760 bytes leftover after parsing attributes in process `syz.3.1200'. [ 853.449507][T11551] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1200'. [ 853.721665][ T5938] usb 6-1: USB disconnect, device number 55 [ 855.055558][T11562] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1205'. [ 860.053331][T11580] loop6: detected capacity change from 0 to 7 [ 860.069033][ C0] blk_print_req_error: 15 callbacks suppressed [ 860.069071][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 860.069132][ C0] buffer_io_error: 15 callbacks suppressed [ 860.069143][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 860.069849][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 860.069876][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 860.070339][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 860.070364][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 860.070858][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 860.070884][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 860.071391][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 860.071416][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 860.071868][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 860.071890][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 860.072097][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 860.072122][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 860.072187][T11580] ldm_validate_partition_table(): Disk read failed. [ 860.072568][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 860.072594][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 860.073023][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 860.073048][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 860.073452][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 860.073504][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 860.073911][T11580] Dev loop6: unable to read RDB block 0 [ 860.333286][T11580] loop6: unable to read partition table [ 860.334817][T11580] loop6: partition table beyond EOD, truncated [ 860.334929][T11580] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 860.603987][ T5161] ldm_validate_partition_table(): Disk read failed. [ 860.613786][ T5161] Dev loop6: unable to read RDB block 0 [ 860.622052][ T5161] loop6: unable to read partition table [ 860.622294][ T5161] loop6: partition table beyond EOD, truncated [ 861.304370][T11596] syz.9.1215 (11596): drop_caches: 2 [ 862.018634][T11610] mkiss: ax0: crc mode is auto. [ 862.088872][T11600] netlink: 'syz.8.1212': attribute type 3 has an invalid length. [ 863.862884][T11621] loop6: detected capacity change from 0 to 7 [ 863.867180][T11621] ldm_validate_partition_table(): Disk read failed. [ 863.868190][T11621] Dev loop6: unable to read RDB block 0 [ 863.869787][T11621] loop6: unable to read partition table [ 863.869941][T11621] loop6: partition table beyond EOD, truncated [ 863.869953][T11621] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 866.192574][ T9092] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 866.192748][ T9092] Bluetooth: hci2: Malformed LE Event: 0x02 [ 870.197743][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.197815][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.381338][T11659] loop6: detected capacity change from 0 to 7 [ 871.382297][ C1] blk_print_req_error: 40 callbacks suppressed [ 871.382313][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.382339][ C1] buffer_io_error: 40 callbacks suppressed [ 871.382350][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 871.424710][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.424746][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 871.427442][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.427478][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 871.494270][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.494306][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 871.498051][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.498084][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 871.498382][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.498407][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 871.498622][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.498647][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 871.498801][T11659] ldm_validate_partition_table(): Disk read failed. [ 871.499640][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.518132][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 871.659756][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.659791][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 871.660641][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.660671][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 871.666166][T11659] Dev loop6: unable to read RDB block 0 [ 871.708888][T11659] loop6: unable to read partition table [ 871.709072][T11659] loop6: partition table beyond EOD, truncated [ 871.709101][T11659] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 873.148643][T11676] loop6: detected capacity change from 0 to 7 [ 873.228752][T11676] ldm_validate_partition_table(): Disk read failed. [ 873.229318][T11676] Dev loop6: unable to read RDB block 0 [ 873.229842][T11676] loop6: unable to read partition table [ 873.229970][T11676] loop6: partition table beyond EOD, truncated [ 873.229981][T11676] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 874.825872][T11686] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1236'. [ 878.739519][T11716] netlink: 'syz.5.1245': attribute type 1 has an invalid length. [ 878.934946][T11718] loop6: detected capacity change from 0 to 7 [ 878.936614][ C0] blk_print_req_error: 30 callbacks suppressed [ 878.936626][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 878.936642][ C0] buffer_io_error: 30 callbacks suppressed [ 878.936647][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.939670][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 878.939703][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.939996][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 878.940021][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.940283][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 878.940302][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.940568][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 878.940589][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.940873][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 878.940897][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.941187][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 878.941211][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.941312][T11718] ldm_validate_partition_table(): Disk read failed. [ 878.941509][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 878.941533][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.941800][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 878.941824][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.942091][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 878.942115][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.942465][T11718] Dev loop6: unable to read RDB block 0 [ 878.943495][T11718] loop6: unable to read partition table [ 878.943650][T11718] loop6: partition table beyond EOD, truncated [ 878.943676][T11718] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 880.494263][ T5794] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 880.646113][ T5794] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.646145][ T5794] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 880.646168][ T5794] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 880.646208][ T5794] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 880.646230][ T5794] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.751437][ T5794] usb 10-1: config 0 descriptor?? [ 881.138933][T11741] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1244'. [ 881.524661][ T9] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 881.932123][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.932165][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 881.932191][ T9] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 881.932236][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.947364][ T9] usb 9-1: config 0 descriptor?? [ 882.040236][ T5794] usbhid 10-1:0.0: can't add hid device: -71 [ 882.040362][ T5794] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 882.045698][ T9] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 882.071197][ T5794] usb 10-1: USB disconnect, device number 9 [ 883.474268][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 884.494242][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.494271][ T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 884.494308][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 884.494332][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.543192][ T9] usb 7-1: config 0 descriptor?? [ 884.574957][ T9] usb 9-1: USB disconnect, device number 15 [ 885.998419][T11769] loop6: detected capacity change from 0 to 7 [ 886.001007][ C0] blk_print_req_error: 10 callbacks suppressed [ 886.001019][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 886.001036][ C0] buffer_io_error: 10 callbacks suppressed [ 886.001042][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 886.001248][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 886.001265][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 886.001430][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 886.001444][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 886.001609][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 886.001623][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 886.001813][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 886.001827][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 886.002077][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 886.002092][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 886.002292][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 886.002314][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 886.002365][T11769] ldm_validate_partition_table(): Disk read failed. [ 886.002544][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 886.002564][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 886.002752][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 886.002766][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 886.002948][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 886.002961][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 886.003235][T11769] Dev loop6: unable to read RDB block 0 [ 886.004086][T11769] loop6: unable to read partition table [ 886.004302][T11769] loop6: partition table beyond EOD, truncated [ 886.004314][T11769] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 886.646863][T11775] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1262'. [ 886.664861][T11775] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.667950][T11775] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.241915][ T9] usb 7-1: USB disconnect, device number 18 [ 888.166763][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1266'. [ 888.289168][T11794] netlink: 'syz.6.1264': attribute type 1 has an invalid length. [ 889.320089][ T9375] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 889.465228][ T9375] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 889.466992][ T9375] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 889.467027][ T9375] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 889.467041][ T9375] usb 4-1: config 0 interface 0 has no altsetting 0 [ 889.468108][ T9375] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 889.468140][ T9375] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 889.468154][ T9375] usb 4-1: config 0 interface 0 has no altsetting 0 [ 889.469535][ T9375] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 889.469584][ T9375] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 889.469609][ T9375] usb 4-1: config 0 interface 0 has no altsetting 0 [ 889.470844][ T9375] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 889.470894][ T9375] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 889.470919][ T9375] usb 4-1: config 0 interface 0 has no altsetting 0 [ 889.472475][ T9375] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 889.472526][ T9375] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 889.472662][ T9375] usb 4-1: config 0 interface 0 has no altsetting 0 [ 889.474013][ T9375] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 889.474062][ T9375] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 889.474087][ T9375] usb 4-1: config 0 interface 0 has no altsetting 0 [ 889.478988][ T9375] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 889.479097][ T9375] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 889.479124][ T9375] usb 4-1: config 0 interface 0 has no altsetting 0 [ 889.480927][ T9375] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 889.480957][ T9375] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 889.480972][ T9375] usb 4-1: config 0 interface 0 has no altsetting 0 [ 889.491185][ T9375] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 889.491204][ T9375] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 889.491215][ T9375] usb 4-1: Product: syz [ 889.491223][ T9375] usb 4-1: Manufacturer: syz [ 889.491230][ T9375] usb 4-1: SerialNumber: syz [ 889.510093][ T9375] usb 4-1: config 0 descriptor?? [ 889.559878][ T9375] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 889.759479][ T5938] usb 4-1: USB disconnect, device number 52 [ 889.771225][ T5938] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 889.961537][T11808] loop6: detected capacity change from 0 to 7 [ 889.964606][T11808] ldm_validate_partition_table(): Disk read failed. [ 889.969686][T11808] Dev loop6: unable to read RDB block 0 [ 889.970942][T11808] loop6: unable to read partition table [ 889.971100][T11808] loop6: partition table beyond EOD, truncated [ 889.971124][T11808] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 893.084301][ T5938] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 893.317992][ T5938] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 893.318063][ T5938] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 893.318236][ T5938] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 893.318304][ T5938] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.568977][T11832] netlink: 'syz.5.1275': attribute type 4 has an invalid length. [ 894.314903][ T5938] usb 10-1: config 0 descriptor?? [ 896.225089][T11854] loop6: detected capacity change from 0 to 7 [ 896.225684][ C1] blk_print_req_error: 30 callbacks suppressed [ 896.225695][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 896.225709][ C1] buffer_io_error: 30 callbacks suppressed [ 896.225715][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.225899][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 896.225913][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.226071][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 896.226085][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.226230][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 896.226243][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.226405][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 896.226419][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.226568][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 896.226581][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.226776][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 896.226790][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.226837][T11854] ldm_validate_partition_table(): Disk read failed. [ 896.226952][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 896.226965][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.227095][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 896.227108][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.227231][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 896.227244][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.227428][T11854] Dev loop6: unable to read RDB block 0 [ 896.228003][T11854] loop6: unable to read partition table [ 896.228129][T11854] loop6: partition table beyond EOD, truncated [ 896.228139][T11854] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 896.902882][ T5881] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 896.975149][ T5794] usb 10-1: USB disconnect, device number 10 [ 897.046514][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 897.046547][ T5881] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 897.046571][ T5881] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 897.046583][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.050324][ T5881] usb 4-1: config 0 descriptor?? [ 897.103785][ T5881] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 897.711775][ T5881] usb 4-1: USB disconnect, device number 53 [ 900.967362][T11882] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1290'. [ 902.068391][T11892] loop6: detected capacity change from 0 to 7 [ 902.081731][ C1] blk_print_req_error: 10 callbacks suppressed [ 902.081797][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 902.081826][ C1] buffer_io_error: 10 callbacks suppressed [ 902.081836][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 902.082583][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 902.082634][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 902.083173][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 902.083200][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 902.083795][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 902.083843][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 902.119152][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 902.119249][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 902.171769][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 902.171870][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 902.182352][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 902.182386][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 902.182633][T11892] ldm_validate_partition_table(): Disk read failed. [ 902.187171][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 902.187206][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 902.210410][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 902.210443][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 902.214383][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 902.214457][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 902.215655][T11892] Dev loop6: unable to read RDB block 0 [ 902.218117][T11892] loop6: unable to read partition table [ 902.219671][T11892] loop6: partition table beyond EOD, truncated [ 902.219776][T11892] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 904.108292][T11896] syz.8.1293 (11896): drop_caches: 2 [ 905.167539][T11901] syz.9.1295 (11901): drop_caches: 2 [ 905.312577][ T9375] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 906.079048][T11905] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1287'. [ 906.082222][T11905] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1287'. [ 906.169186][ T9375] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.169213][ T9375] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 906.169249][ T9375] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 906.169270][ T9375] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.214550][ T9375] usb 6-1: config 0 descriptor?? [ 906.787207][T11909] netlink: 'syz.6.1297': attribute type 3 has an invalid length. [ 907.808196][ T9092] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 907.808230][ T9092] Bluetooth: hci3: Malformed LE Event: 0x02 [ 908.393886][ T5794] usb 6-1: USB disconnect, device number 56 [ 911.372752][ T9092] Bluetooth: hci5: unknown advertising packet type: 0x75 [ 911.372933][ T9092] Bluetooth: hci5: Malformed LE Event: 0x02 [ 912.264782][ T5794] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 912.474870][ T5794] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 912.474921][ T5794] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 912.474946][ T5794] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 912.474958][ T5794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.312217][ T5794] usb 6-1: config 0 descriptor?? [ 913.332130][ T5794] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 915.409871][T11960] netlink: 'syz.6.1309': attribute type 10 has an invalid length. [ 915.418548][T11960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.421651][T11960] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 916.167586][ T5794] usb 6-1: USB disconnect, device number 57 [ 919.405969][T11993] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1318'. [ 920.752784][T12008] netlink: 'syz.9.1308': attribute type 10 has an invalid length. [ 920.837951][T12008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 920.868572][T12008] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 921.045612][ T9092] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 922.164282][ T5881] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 922.314292][ T5881] usb 6-1: Using ep0 maxpacket: 16 [ 922.316120][ T5881] usb 6-1: too many configurations: 14, using maximum allowed: 8 [ 922.324424][ T9074] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 922.352901][ T5881] usb 6-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 922.352929][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.352948][ T5881] usb 6-1: Product: syz [ 922.352961][ T5881] usb 6-1: Manufacturer: syz [ 922.352974][ T5881] usb 6-1: SerialNumber: syz [ 922.542611][ T5794] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 923.362100][ T5881] usb 6-1: config 0 descriptor?? [ 923.954210][ T5794] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 923.954287][ T9074] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 923.954347][ T9074] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 923.954387][ T9074] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 923.954409][ T9074] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.958791][ T5794] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 923.958869][ T5794] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 923.958896][ T5794] usb 10-1: config 0 interface 0 has no altsetting 0 [ 923.959943][ T5794] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 923.959993][ T5794] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 923.960020][ T5794] usb 10-1: config 0 interface 0 has no altsetting 0 [ 923.961116][ T5794] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 923.961168][ T5794] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 923.961194][ T5794] usb 10-1: config 0 interface 0 has no altsetting 0 [ 923.962857][ T5794] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 923.962907][ T5794] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 923.962933][ T5794] usb 10-1: config 0 interface 0 has no altsetting 0 [ 923.965552][ T5794] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 923.965602][ T5794] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 923.965627][ T5794] usb 10-1: config 0 interface 0 has no altsetting 0 [ 923.980525][ T5794] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 923.980579][ T5794] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 923.980605][ T5794] usb 10-1: config 0 interface 0 has no altsetting 0 [ 923.982891][ T5794] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 923.982944][ T5794] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 923.982970][ T5794] usb 10-1: config 0 interface 0 has no altsetting 0 [ 923.989642][ T5794] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 923.989702][ T5794] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 923.989728][ T5794] usb 10-1: config 0 interface 0 has no altsetting 0 [ 923.997240][ T5794] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 923.997269][ T5794] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 923.997289][ T5794] usb 10-1: Product: syz [ 923.997303][ T5794] usb 10-1: Manufacturer: syz [ 923.997318][ T5794] usb 10-1: SerialNumber: syz [ 924.244039][T12026] netlink: 'syz.8.1326': attribute type 10 has an invalid length. [ 924.288860][T12026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 924.306901][T12026] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 924.440063][ T9092] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 924.865585][ T9074] usb 4-1: config 0 descriptor?? [ 925.098939][ T5794] usb 10-1: config 0 descriptor?? [ 925.104223][ T9978] usb 6-1: USB disconnect, device number 58 [ 925.232473][ T9074] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 925.342388][ T9375] usb 4-1: USB disconnect, device number 54 [ 925.869079][ T5794] usb 10-1: can't set config #0, error -71 [ 925.952308][ T5794] usb 10-1: USB disconnect, device number 11 [ 928.579501][T12063] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 929.323298][T12074] netlink: 'syz.9.1339': attribute type 10 has an invalid length. [ 929.469960][ T9092] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 930.245809][T12076] netlink: 'syz.3.1340': attribute type 1 has an invalid length. [ 930.245833][T12076] netlink: 760 bytes leftover after parsing attributes in process `syz.3.1340'. [ 930.245850][T12076] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1340'. [ 930.613868][T12078] overlayfs: missing 'lowerdir' [ 930.760538][T12081] fuse: Unknown parameter 'group_i00000000000000000000' [ 931.813881][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.813959][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.786744][T12111] loop6: detected capacity change from 0 to 7 [ 933.841061][ C0] blk_print_req_error: 10 callbacks suppressed [ 933.841100][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 933.841169][ C0] buffer_io_error: 10 callbacks suppressed [ 933.841181][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 933.856644][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 933.856685][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 933.864680][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 933.864730][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 933.865295][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 933.865359][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 933.866007][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 933.866066][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 933.875349][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 933.875403][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 933.875880][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 933.875923][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 933.876014][T12111] ldm_validate_partition_table(): Disk read failed. [ 933.882436][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 933.882470][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 933.887799][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 933.887851][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 933.897326][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 933.897361][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 933.902857][T12111] Dev loop6: unable to read RDB block 0 [ 933.913679][T12111] loop6: unable to read partition table [ 933.915408][T12111] loop6: partition table beyond EOD, truncated [ 933.915562][T12111] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 935.817223][T12127] netlink: 'syz.5.1352': attribute type 1 has an invalid length. [ 935.817245][T12127] netlink: 760 bytes leftover after parsing attributes in process `syz.5.1352'. [ 935.817260][T12127] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1352'. [ 937.436282][T12140] netlink: 'syz.6.1356': attribute type 10 has an invalid length. [ 938.477633][ T9092] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 938.477674][ T9092] Bluetooth: hci1: Malformed LE Event: 0x02 [ 938.477788][ T9092] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 942.188892][ T9074] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 943.174861][ T9074] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.174889][ T9074] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 943.174904][ T9074] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 943.174928][ T9074] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 943.174940][ T9074] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.179145][ T9074] usb 9-1: config 0 descriptor?? [ 943.714527][ T9074] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 946.141488][ T9074] usb 9-1: USB disconnect, device number 16 [ 946.248237][T12172] fido_id[12172]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 948.088977][T12190] netlink: 'syz.9.1369': attribute type 3 has an invalid length. [ 948.144316][ T9074] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 948.306989][ T9074] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.307010][ T9074] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.307022][ T9074] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 948.307046][ T9074] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 948.307058][ T9074] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.309992][ T9074] usb 4-1: config 0 descriptor?? [ 949.330541][ T9074] usbhid 4-1:0.0: can't add hid device: -71 [ 949.330670][ T9074] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 949.349556][ T9074] usb 4-1: USB disconnect, device number 55 [ 949.996873][T12206] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.1373'. [ 952.902475][T12226] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1379'. [ 963.546443][ T9375] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 963.800892][ T9375] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 963.800912][ T9375] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 963.800925][ T9375] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 963.800948][ T9375] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 963.800961][ T9375] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.869130][ T9375] usb 6-1: config 0 descriptor?? [ 964.636751][ T9375] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 964.880854][T12304] netlink: 'syz.6.1401': attribute type 1 has an invalid length. [ 964.914277][ T9074] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 965.290247][ T9074] usb 10-1: config 8 has an invalid interface number: 177 but max is 0 [ 965.290277][ T9074] usb 10-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 965.290295][ T9074] usb 10-1: config 8 has no interface number 0 [ 965.290336][ T9074] usb 10-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 965.290363][ T9074] usb 10-1: config 8 interface 177 has no altsetting 0 [ 965.290396][ T9074] usb 10-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 965.290418][ T9074] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.627892][ T9375] usb 10-1: USB disconnect, device number 12 [ 965.705694][ T5938] usb 6-1: USB disconnect, device number 59 [ 969.370024][T12350] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 969.687135][ T9375] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 969.750248][T12359] netlink: 'syz.6.1419': attribute type 10 has an invalid length. [ 970.664292][T12145] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 970.794592][ T9375] usb 4-1: device descriptor read/64, error -71 [ 971.094337][ T9375] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 971.397659][T12367] syz.9.1421 (12367): drop_caches: 2 [ 971.564255][ T9375] usb 4-1: device descriptor read/64, error -71 [ 971.715001][ T9375] usb usb4-port1: attempt power cycle [ 972.245401][ T9375] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 972.275744][ T9375] usb 4-1: device descriptor read/8, error -71 [ 972.614289][ T9375] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 972.759162][ T9375] usb 4-1: device descriptor read/8, error -71 [ 972.864815][ T9375] usb usb4-port1: unable to enumerate USB device [ 976.844285][ T5938] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 976.864256][ T9375] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 977.058197][ T9375] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 977.058216][ T9375] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.058227][ T9375] usb 7-1: Product: syz [ 977.058234][ T9375] usb 7-1: Manufacturer: syz [ 977.058242][ T9375] usb 7-1: SerialNumber: syz [ 977.099724][ T5938] usb 9-1: Using ep0 maxpacket: 16 [ 977.105918][ T5938] usb 9-1: too many configurations: 14, using maximum allowed: 8 [ 977.841618][ T9375] usb 7-1: config 0 descriptor?? [ 977.887873][ T5938] usb 9-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 977.887902][ T5938] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.887922][ T5938] usb 9-1: Product: syz [ 977.887936][ T5938] usb 9-1: Manufacturer: syz [ 977.887950][ T5938] usb 9-1: SerialNumber: syz [ 977.938507][ T9375] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 977.966286][ T9375] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 977.967145][ T9375] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 977.967199][ T9375] usb 7-1: media controller created [ 977.973502][ T5938] usb 9-1: config 0 descriptor?? [ 978.012836][ T9375] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 980.301080][ T9375] DVB: Unable to find symbol mt352_attach() [ 980.355053][ T5881] usb 9-1: USB disconnect, device number 17 [ 980.605061][ T9375] DVB: Unable to find symbol nxt6000_attach() [ 980.605072][ T9375] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 980.611427][ T9375] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input20 [ 980.656463][ T9375] dvb-usb: schedule remote query interval to 1000 msecs. [ 980.656487][ T9375] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 980.656504][ T9375] dvb-usb: bulk message failed: -22 (7/0) [ 980.656520][ T9375] dvb-usb: bulk message failed: -22 (7/0) [ 980.785299][ T5881] usb 7-1: USB disconnect, device number 19 [ 981.478410][ T5881] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 984.107638][T12440] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 985.314355][ T9375] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 985.454356][ T5881] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 985.481987][ T9375] usb 10-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 985.482020][ T9375] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.482040][ T9375] usb 10-1: Product: syz [ 985.482055][ T9375] usb 10-1: Manufacturer: syz [ 985.482069][ T9375] usb 10-1: SerialNumber: syz [ 985.536558][ T9375] usb 10-1: config 0 descriptor?? [ 985.543367][ T9375] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 985.563258][ T9375] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 985.573803][ T9375] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 985.573865][ T9375] usb 10-1: media controller created [ 985.605089][ T9375] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 985.746046][ T5881] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.746077][ T5881] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 985.746118][ T5881] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 985.746138][ T5881] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.019261][ T5881] usb 9-1: config 0 descriptor?? [ 987.037241][ T5881] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 987.172427][ T9375] DVB: Unable to find symbol mt352_attach() [ 987.250239][ T9375] DVB: Unable to find symbol nxt6000_attach() [ 987.250255][ T9375] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 987.274674][ T9375] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input21 [ 987.298460][ T9375] dvb-usb: schedule remote query interval to 1000 msecs. [ 987.298482][ T9375] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 987.298499][ T9375] dvb-usb: bulk message failed: -22 (7/0) [ 987.298514][ T9375] dvb-usb: bulk message failed: -22 (7/0) [ 988.132043][ T5938] usb 10-1: USB disconnect, device number 13 [ 988.214277][ T9375] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 988.378048][ T9375] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.378139][ T9375] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 988.378211][ T9375] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 988.378233][ T9375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.761658][ T9375] usb 4-1: config 0 descriptor?? [ 988.858144][ T9375] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 988.922902][ T5938] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 989.356074][ T5938] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 989.461680][ T9074] usb 4-1: USB disconnect, device number 60 [ 989.627226][ T5938] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 989.627258][ T5938] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.627278][ T5938] usb 10-1: Product: syz [ 989.627293][ T5938] usb 10-1: Manufacturer: syz [ 989.627308][ T5938] usb 10-1: SerialNumber: syz [ 989.636957][ T5938] usb 10-1: config 0 descriptor?? [ 990.366533][ T5938] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 990.721865][ T9074] usb 9-1: USB disconnect, device number 18 [ 990.963754][ T5938] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 992.414633][ T5938] usb 10-1: USB disconnect, device number 14 [ 992.627161][T12524] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1462'. [ 992.963703][ T5938] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 993.028357][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.028400][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.190034][ T5938] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.190125][ T5938] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 993.190205][ T5938] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 993.190526][ T5938] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 993.190606][ T5938] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.430405][ T5938] usb 10-1: config 0 descriptor?? [ 995.219841][ T5938] usbhid 10-1:0.0: can't add hid device: -71 [ 995.219980][ T5938] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 995.263655][ T5938] usb 10-1: USB disconnect, device number 15 [ 995.787319][T12558] netlink: 'syz.8.1472': attribute type 10 has an invalid length. [ 996.036138][T12145] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 997.026819][T12570] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.1475'. [ 997.094967][ T5938] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 997.834598][ T5938] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 997.834627][ T5938] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.834647][ T5938] usb 10-1: Product: syz [ 997.834661][ T5938] usb 10-1: Manufacturer: syz [ 997.834675][ T5938] usb 10-1: SerialNumber: syz [ 997.843573][ T5938] usb 10-1: config 0 descriptor?? [ 998.053684][ T5938] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 998.277142][ T5938] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 998.287449][T12579] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.1476'. [ 999.891680][ T9375] usb 10-1: USB disconnect, device number 16 [ 1000.154448][ T5794] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1000.450526][ T5794] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.450556][ T5794] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.450578][ T5794] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1000.450620][ T5794] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1000.450640][ T5794] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.453838][ T5794] usb 9-1: config 0 descriptor?? [ 1000.564201][T12609] netlink: 'syz.9.1485': attribute type 10 has an invalid length. [ 1001.456109][T12145] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1002.583247][ T5794] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1003.104819][ T5794] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1004.139891][ T5794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.139925][ T5794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1004.139947][ T5794] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1004.139988][ T5794] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1004.140011][ T5794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.213148][ T5794] usb 4-1: config 0 descriptor?? [ 1004.708345][ T5794] plantronics 0003:047F:FFFF.0025: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1004.831440][ T5938] usb 9-1: USB disconnect, device number 19 [ 1006.709967][ T9074] usb 4-1: USB disconnect, device number 61 [ 1006.875001][T12649] netlink: 'syz.9.1497': attribute type 10 has an invalid length. [ 1007.784431][ T5799] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1009.694250][ T9375] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1010.251894][ T9375] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.251929][ T9375] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1010.251950][ T9375] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1010.251993][ T9375] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1010.252015][ T9375] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.261156][ T9375] usb 10-1: config 0 descriptor?? [ 1010.810807][ T9375] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1011.024259][ T9375] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1011.180956][ T9375] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.181005][ T9375] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1011.181043][ T9375] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1011.181119][ T9375] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1011.181157][ T9375] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.247018][ T9375] usb 7-1: config 0 descriptor?? [ 1011.802566][ T5794] usb 10-1: USB disconnect, device number 17 [ 1012.055190][ T9375] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1012.626355][ T9375] usb 7-1: USB disconnect, device number 20 [ 1016.644255][ T5794] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1016.979385][ T5794] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.979421][ T5794] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.979443][ T5794] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1016.979485][ T5794] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1016.979509][ T5794] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.005604][ T5794] usb 9-1: config 0 descriptor?? [ 1019.405722][ T5794] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1021.704249][ T5938] usb 9-1: reset high-speed USB device number 20 using dummy_hcd [ 1022.501242][T12786] netlink: 'syz.6.1538': attribute type 10 has an invalid length. [ 1023.446702][ T5799] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 1026.404403][ T5881] usb 9-1: USB disconnect, device number 20 [ 1027.874430][ T5794] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1028.126928][ T5794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.126961][ T5794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1028.126980][ T5794] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1028.127004][ T5794] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1028.127016][ T5794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.158264][ T5794] usb 4-1: config 0 descriptor?? [ 1034.727379][ T5794] usbhid 4-1:0.0: can't add hid device: -32 [ 1034.729943][ T5794] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1034.830243][ T5881] usb 4-1: USB disconnect, device number 62 [ 1039.668396][T12899] netlink: 35 bytes leftover after parsing attributes in process `syz.8.1570'. [ 1043.438895][T12949] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.1587'. [ 1049.884269][ T5881] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1050.054771][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.054796][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.054809][ T5881] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1050.054833][ T5881] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1050.054845][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.152864][ T5881] usb 4-1: config 0 descriptor?? [ 1052.474954][ T5881] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1052.634845][ T5881] usb 4-1: USB disconnect, device number 63 [ 1052.936511][T13022] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1608'. [ 1053.234431][ T9375] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 1053.406201][ T9375] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1053.406231][ T9375] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.406244][ T9375] usb 10-1: Product: syz [ 1053.406251][ T9375] usb 10-1: Manufacturer: syz [ 1053.406259][ T9375] usb 10-1: SerialNumber: syz [ 1053.409589][ T9375] usb 10-1: config 0 descriptor?? [ 1053.637371][ T9375] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1054.584795][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.584869][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.253588][T13021] syz.8.1607 (13021): drop_caches: 2 [ 1055.800346][ T9375] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1055.804353][ T9375] usb 10-1: USB disconnect, device number 18 [ 1056.286003][T13056] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1619'. [ 1056.287669][ T9375] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1056.861401][ T9375] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.861434][ T9375] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1056.861446][ T9375] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1056.861471][ T9375] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1056.861483][ T9375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.924361][ T9375] usb 4-1: config 0 descriptor?? [ 1057.390408][ T9375] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1059.944260][ T5938] usb 4-1: reset high-speed USB device number 64 using dummy_hcd [ 1064.035020][ T5881] usb 4-1: USB disconnect, device number 64 [ 1066.222640][ T5799] Bluetooth: Unexpected start frame (len 16) [ 1066.222691][ T5799] Bluetooth: Frame is too long (len 16, expected len 4) [ 1072.478625][T13147] syz.8.1626 (13147): drop_caches: 2 [ 1074.192584][T13165] syz.8.1649 (13165): drop_caches: 2 [ 1075.614326][ T5794] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1075.787622][ T5794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1075.787656][ T5794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1075.787677][ T5794] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1075.787703][ T5794] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1075.787716][ T5794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.796322][ T5794] usb 4-1: config 0 descriptor?? [ 1076.332043][ T5794] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1076.504707][T13192] netlink: 35 bytes leftover after parsing attributes in process `syz.9.1657'. [ 1077.054967][ T5881] usb 4-1: USB disconnect, device number 65 [ 1077.191961][T13195] fido_id[13195]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1078.184290][ T5881] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1078.288790][T13220] netlink: 'syz.5.1663': attribute type 10 has an invalid length. [ 1078.348134][T13220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1078.370587][T13220] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1079.204639][ T5799] Bluetooth: hci5: unexpected event for opcode 0x2003 [ 1079.246107][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1079.246128][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1079.246141][ T5881] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1079.246164][ T5881] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1079.246176][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.303591][ T5881] usb 4-1: config 0 descriptor?? [ 1079.766620][T13218] syz.6.1659 (13218): drop_caches: 2 [ 1080.328122][ T5881] usbhid 4-1:0.0: can't add hid device: -71 [ 1080.328258][ T5881] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1080.360132][ T5881] usb 4-1: USB disconnect, device number 66 [ 1081.884294][ T5794] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1082.856872][ T5794] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1082.856907][ T5794] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1082.856929][ T5794] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1082.856971][ T5794] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1082.856993][ T5794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.862147][ T5794] usb 7-1: config 0 descriptor?? [ 1083.197755][ T9375] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1084.246930][ T9375] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.246964][ T9375] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1084.247035][ T9375] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1084.247078][ T9375] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1084.247101][ T9375] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.384217][ T9375] usb 10-1: config 0 descriptor?? [ 1084.487097][ T5794] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1085.014385][ T9375] usbhid 10-1:0.0: can't add hid device: -71 [ 1085.014509][ T9375] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1085.028210][ T9375] usb 10-1: USB disconnect, device number 19 [ 1085.776800][ T5794] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN PTI [ 1085.776824][ T5794] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 1085.776849][ T5794] CPU: 0 UID: 0 PID: 5794 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1085.776868][ T5794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1085.776880][ T5794] Workqueue: events __usb_queue_reset_device [ 1085.776910][ T5794] RIP: 0010:usb_gadget_udc_reset+0x27/0x60 [ 1085.776931][ T5794] Code: 90 90 90 f3 0f 1e fa 41 56 53 49 89 f6 48 89 fb e8 ce d1 c0 fa 49 83 c6 40 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 cb da 26 fb 4d 8b 1e 48 89 df 2e 2e [ 1085.776946][ T5794] RSP: 0018:ffffc9000460f3c8 EFLAGS: 00010202 [ 1085.776961][ T5794] RAX: 0000000000000008 RBX: ffff88802889cc40 RCX: dffffc0000000000 [ 1085.776973][ T5794] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1085.776984][ T5794] RBP: ffff88805f2b316c R08: ffffffff8f6a25b7 R09: 1ffffffff1ed44b6 [ 1085.776996][ T5794] R10: dffffc0000000000 R11: fffffbfff1ed44b7 R12: ffff88802889cc40 [ 1085.777008][ T5794] R13: 1ffff110053c44a1 R14: 0000000000000040 R15: 1ffff11005113987 [ 1085.777020][ T5794] FS: 0000000000000000(0000) GS:ffff888126343000(0000) knlGS:0000000000000000 [ 1085.777035][ T5794] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1085.777047][ T5794] CR2: 00007ff4e7fcda08 CR3: 000000004e352000 CR4: 00000000003526f0 [ 1085.777063][ T5794] Call Trace: [ 1085.777073][ T5794] [ 1085.777082][ T5794] set_link_state+0x80b/0x1220 [ 1085.777112][ T5794] dummy_hub_control+0xa09/0x1a00 [ 1085.777129][ T5794] ? usb_hcd_submit_urb+0x786/0x1b50 [ 1085.777157][ T5794] usb_hcd_submit_urb+0xdbe/0x1b50 [ 1085.777188][ T5794] usb_start_wait_urb+0x12b/0x510 [ 1085.777210][ T5794] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1085.777238][ T5794] usb_control_msg+0x232/0x3e0 [ 1085.777262][ T5794] hub_port_reset+0x3c7/0x1820 [ 1085.777294][ T5794] hub_port_init+0x299/0x28c0 [ 1085.777321][ T5794] ? usb_enable_endpoint+0x104/0x1b0 [ 1085.777345][ T5794] usb_reset_and_verify_device+0x4ea/0x1af0 [ 1085.777376][ T5794] ? __pfx_usb_reset_and_verify_device+0x10/0x10 [ 1085.777401][ T5794] ? lockdep_hardirqs_on+0x7a/0x110 [ 1085.777422][ T5794] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1085.777444][ T5794] ? mutex_lock_nested+0x152/0x1d0 [ 1085.777459][ T5794] ? usb_reset_device+0x548/0xb40 [ 1085.777481][ T5794] usb_reset_device+0x551/0xb40 [ 1085.777507][ T5794] __usb_queue_reset_device+0x73/0xa0 [ 1085.777529][ T5794] ? process_scheduled_works+0xa25/0x1830 [ 1085.777561][ T5794] process_scheduled_works+0xb02/0x1830 [ 1085.777593][ T5794] ? __pfx_process_scheduled_works+0x10/0x10 [ 1085.777617][ T5794] ? assign_work+0x3d5/0x5e0 [ 1085.777639][ T5794] worker_thread+0xa50/0xfc0 [ 1085.777669][ T5794] kthread+0x388/0x470 [ 1085.777686][ T5794] ? __pfx_worker_thread+0x10/0x10 [ 1085.777706][ T5794] ? __pfx_kthread+0x10/0x10 [ 1085.777722][ T5794] ret_from_fork+0x51e/0xb90 [ 1085.777746][ T5794] ? __pfx_ret_from_fork+0x10/0x10 [ 1085.777767][ T5794] ? __switch_to+0xc7d/0x1450 [ 1085.777790][ T5794] ? __pfx_kthread+0x10/0x10 [ 1085.777807][ T5794] ret_from_fork_asm+0x1a/0x30 [ 1085.777828][ T5794] [ 1085.777841][ T5794] Modules linked in: [ 1085.777862][ T5794] ---[ end trace 0000000000000000 ]--- [ 1085.777872][ T5794] RIP: 0010:usb_gadget_udc_reset+0x27/0x60 [ 1085.777892][ T5794] Code: 90 90 90 f3 0f 1e fa 41 56 53 49 89 f6 48 89 fb e8 ce d1 c0 fa 49 83 c6 40 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 cb da 26 fb 4d 8b 1e 48 89 df 2e 2e [ 1085.777906][ T5794] RSP: 0018:ffffc9000460f3c8 EFLAGS: 00010202 [ 1085.777920][ T5794] RAX: 0000000000000008 RBX: ffff88802889cc40 RCX: dffffc0000000000 [ 1085.777932][ T5794] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1085.777943][ T5794] RBP: ffff88805f2b316c R08: ffffffff8f6a25b7 R09: 1ffffffff1ed44b6 [ 1085.777956][ T5794] R10: dffffc0000000000 R11: fffffbfff1ed44b7 R12: ffff88802889cc40 [ 1085.777968][ T5794] R13: 1ffff110053c44a1 R14: 0000000000000040 R15: 1ffff11005113987 [ 1085.777980][ T5794] FS: 0000000000000000(0000) GS:ffff888126343000(0000) knlGS:0000000000000000 [ 1085.777993][ T5794] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1085.778005][ T5794] CR2: 00007ff4e7fcda08 CR3: 000000004e352000 CR4: 00000000003526f0 [ 1085.778027][ T5794] Kernel panic - not syncing: Fatal exception [ 1085.778452][ T5794] Kernel Offset: disabled