last executing test programs: 7m54.290085647s ago: executing program 1 (id=224): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f00000000c0)) syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, &(0x7f0000000580)=ANY=[@ANYBLOB="26282dea4e3b93861c6f03f34e4f2a711f8fbdf6ca39b1b61809ec614bf8d5076b70fde6f76c87440d80eb0ff764eb284f1235b9020509c6d16c701552a586c191c0e8f12bf5d383ffc7adbc8745f9d69545ac3d963659422ec76757361598c0507a7e4463882a18dc62f6baaaa6856238d869539d3206ef4d991ed438c76521c800c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000006c0)={0x0, 0xa}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0xac, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x804}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x202}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x18}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x440}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x6}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x4040044) 7m50.465188631s ago: executing program 1 (id=240): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) (async) r1 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010100}}}], 0x20}}], 0x1, 0x40000c4) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) read(r1, &(0x7f0000000980)=""/169, 0xa9) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x2}) (async) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100005e9eb4104c053800f516010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000040)={0x2c, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x8, 0x1, 0x3}, 0x0, 0x0}) 7m47.356737219s ago: executing program 1 (id=259): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000000)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) getsockopt$ax25_int(r3, 0x101, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000080)=0x64a) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)=0xfffffffe) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/83, 0x53) syz_usb_connect(0x2, 0x2d, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES16], 0x0) 7m45.906926857s ago: executing program 1 (id=267): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a004e2400000044fe80000000000000000000000000002a37200000200002"], 0x6c}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)) r4 = socket(0x10, 0x3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r4, &(0x7f0000000140)="240000001e00fffffff881ff00081d000000000000000800090a00cf9aa5fba4dafbd70d", 0x24) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r6, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x820}, 0x20008844) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x54, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x90}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x95}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x144, r2, 0x800, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffeff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4d00da4c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x12}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4008800}, 0x20000001) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a004e2400000044fe80000000000000000000000000002a37200000200002"], 0x6c}}, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)) (async) socket(0x10, 0x3, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) (async) write(r4, &(0x7f0000000140)="240000001e00fffffff881ff00081d000000000000000800090a00cf9aa5fba4dafbd70d", 0x24) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r6, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x820}, 0x20008844) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x54, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x90}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x95}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x144, r2, 0x800, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffeff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4d00da4c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x12}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4008800}, 0x20000001) (async) 7m45.693999964s ago: executing program 1 (id=268): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="00220f000000540b0550182195f5"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x200, 0x207}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket(0x1, 0x3, 0x5) bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 7m44.571344667s ago: executing program 1 (id=271): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28018a2a6ddc30141e00000000"], 0x128}, 0x4004010) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r7, 0xffffffffffffffff, 0x2) dup3(r5, r7, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x2c, 0x3f, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x16}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) preadv(r8, &(0x7f0000000180)=[{&(0x7f00000022c0)=""/192, 0xc0}], 0x1, 0xb298, 0x4326) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b0400000000000000000200fffe2c0004802800018007000100637400001c0002800800014000000002080002400000000d05000300000000000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_procfs(r1, 0x0) 7m44.202112737s ago: executing program 32 (id=271): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28018a2a6ddc30141e00000000"], 0x128}, 0x4004010) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r7, 0xffffffffffffffff, 0x2) dup3(r5, r7, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x2c, 0x3f, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x16}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) preadv(r8, &(0x7f0000000180)=[{&(0x7f00000022c0)=""/192, 0xc0}], 0x1, 0xb298, 0x4326) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b0400000000000000000200fffe2c0004802800018007000100637400001c0002800800014000000002080002400000000d05000300000000000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_procfs(r1, 0x0) 3m29.844820187s ago: executing program 4 (id=1605): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c40000001900674c25bd700000000000fc00000000000200a2bd1d90b83900d2000000000000014c210000000000000a00000000000000000000000000000000f4426c2bdf07653aa5475f403ea8cfcd1065173db51c03652546b9e9879a9b9f303a28753cc5adfc20515888440fca8d500071573a3fd6e5de3994878141726cda4cfa9b19154a0a7eb53f7e992b01416052d91aa338fa8eef3394c9ae9b9161a3823a271e39ee2f10c864c91d80aaff26f72e0a51a15cedb4368c8ebb389820902caebcbf29f41c1e7a3630c63d0f42dcdb0854e046dd82dd16a0eeb17419b3890b0391c7efb936d8fb33dd24b193502596d22756ae", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01000000000000007f03000000000000fdffffffffffffff0000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0300000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000a0010000100000000000000"], 0xc4}}, 0x4c050) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x12, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='schedstat\x00') pread64(r3, &(0x7f0000000480)=""/14, 0xd, 0x8000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="440f3542a5c4c2d9bf32c744240098000000c7442402f6000000c7442406000000000f011c24c4a27d234227c4e179e722f2440f23a136660f38822c7fb9800000c00f3235010000000f3066ba430066ed", 0x51}], 0x1, 0x15, &(0x7f0000000140)=[@efer={0x2, 0x4001}, @dstype3={0x7, 0xc}], 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)={@val={0xa, 0x1a}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) 3m29.649521634s ago: executing program 4 (id=1606): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000180)={'fscrypt:', @auto=[0x34, 0x35, 0x30, 0x31, 0x32, 0xa1, 0x64, 0x36, 0x66, 0x32, 0x30, 0x62, 0x33, 0x32, 0x65, 0x31]}, &(0x7f00000001c0)={0x0, "5982eff81953ee2f04ef9eb1ba0f14aee1746ebfca4097b3ab75f63f221bfa43108e09ec28297f54d46b00a465dc9ab127f0e723844bdba22ef86e3d3e0cd032", 0x24}, 0x48, 0xfffffffffffffffc) syz_open_dev$sndctrl(&(0x7f0000002380), 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0xa, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x100f, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0xb, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x1, 0x400, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x2, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x805, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0xfffff800, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x7fffffff, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb5, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0xff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x10000226, 0x5, 0x3, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x1fd, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) keyctl$read(0xb, r0, &(0x7f0000000340)=""/120, 0x78) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200c8}, 0x80) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x9}, 0x1c) sendmmsg$inet(r6, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000040)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b", 0x15}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) 3m29.367860376s ago: executing program 4 (id=1609): r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) 3m29.141754306s ago: executing program 4 (id=1610): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000001240)={0x49834e15, 0x4f0, 0x9, 0x1, 0x81}, 0x14) (async) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0xcb, 0xa3, 0x70, 0x10, 0x525, 0xa4a0, 0x5cf5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0xd0, 0x5, [{{0x9, 0x4, 0xe7, 0xe6, 0x1, 0xfd, 0xae, 0x43, 0xaf, [], [{{0x9, 0x5, 0x9, 0x3, 0x20, 0x5, 0x5, 0xf4}}]}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) mkdir(&(0x7f00000001c0)='./file0\x00', 0x21) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 3m28.011077505s ago: executing program 4 (id=1616): r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x6, 0x7132c1) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x44048) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0400000000000000f71200000008000300", @ANYRES32=r5, @ANYBLOB="0400130006001a0102"], 0x48}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4000004) (async) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40044103, &(0x7f0000000080)) (async) recvmmsg(r1, &(0x7f0000000700)=[{{&(0x7f0000000240)=@l2, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/119, 0x77}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f0000000400)=""/56, 0x38}, {&(0x7f0000000440)=""/138, 0x8a}, {&(0x7f0000000500)=""/168, 0xa8}], 0x5, &(0x7f0000000640)=""/175, 0xaf}, 0x400}], 0x1, 0x10000, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'veth1_macvtap\x00', {0xb}, 0x9}) 3m26.148302159s ago: executing program 4 (id=1617): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) syz_usb_connect(0x5, 0x36, 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000200)={0xc0, 0x0, 0x1000}) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) bind$l2tp(r5, &(0x7f0000000080)={0x2, 0x0, @broadcast, 0x2}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f00000036c0)=0xffffffffffffffff) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r6, 0x0, {}, 0xfd}, 0x18) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) (async) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)="27f000000000004e0f000000000000261689b7762beab6fd63b21d77c0733cefbfdb5204749d553dec90c68fd790a2f6661fb7e8c5c90b7958b941a8207b3680c0c6367d91a822d37cc6f4a5b28e6b61ccad165fe254b8c1c74c7dde1ccdb1c38a331c302a16f48b5e5e1746e6c31bcd6d5ddb12f52836a4f45849eded5f08c30f6e7e11194260306e25bd1d37114a94da58c0693384b6e226114f84f10a", 0x9e}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 32) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r8 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) io_submit(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000380)="b924090000b800000000ba000000000f100f00da363e0f01c30f381ce366b816018ee8640f2190f30f1effb96c0bac450f01d9262e660f380bc166b8f80066ef66baf80cb820091a8def66bafc0c66edc4e2fd2062fe", 0x56}], 0x1, 0x40, 0x0, 0x0) (async) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x1f0003, 0x0, [0x6, 0x1, 0x98, 0x3, 0x6, 0xfffffffffffffc01, 0x0, 0x6]}) 3m10.947723772s ago: executing program 33 (id=1617): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) syz_usb_connect(0x5, 0x36, 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000200)={0xc0, 0x0, 0x1000}) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) bind$l2tp(r5, &(0x7f0000000080)={0x2, 0x0, @broadcast, 0x2}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f00000036c0)=0xffffffffffffffff) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r6, 0x0, {}, 0xfd}, 0x18) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) (async) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)="27f000000000004e0f000000000000261689b7762beab6fd63b21d77c0733cefbfdb5204749d553dec90c68fd790a2f6661fb7e8c5c90b7958b941a8207b3680c0c6367d91a822d37cc6f4a5b28e6b61ccad165fe254b8c1c74c7dde1ccdb1c38a331c302a16f48b5e5e1746e6c31bcd6d5ddb12f52836a4f45849eded5f08c30f6e7e11194260306e25bd1d37114a94da58c0693384b6e226114f84f10a", 0x9e}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 32) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r8 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) io_submit(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000380)="b924090000b800000000ba000000000f100f00da363e0f01c30f381ce366b816018ee8640f2190f30f1effb96c0bac450f01d9262e660f380bc166b8f80066ef66baf80cb820091a8def66bafc0c66edc4e2fd2062fe", 0x56}], 0x1, 0x40, 0x0, 0x0) (async) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x1f0003, 0x0, [0x6, 0x1, 0x98, 0x3, 0x6, 0xfffffffffffffc01, 0x0, 0x6]}) 54.57771854s ago: executing program 2 (id=2413): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKCRYPTOGENERATEKEY(r0, 0xc030128a, &(0x7f0000000080)={&(0x7f0000000040)=""/34, 0x22}) read(r0, &(0x7f00000000c0)=""/146, 0x92) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x6, 0x5c7bd5ac09b03d55) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f00000001c0), 0x4) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000200)) recvmsg$can_j1939(r0, &(0x7f0000000600)={&(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/87, 0x57}, {&(0x7f0000000340)=""/170, 0xaa}, {&(0x7f0000000400)=""/224, 0xe0}, {&(0x7f0000000500)}], 0x4, &(0x7f0000000580)=""/109, 0x6d}, 0x0) bind$inet6(r0, &(0x7f0000000640)={0xa, 0x4e22, 0xffff9b1a, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3ff}, 0x1c) sendto$l2tp6(r1, &(0x7f0000000680)="f2d2fe0f6ac23466fdd4cfd8aef0a506523f29e6a09d371ededfe875a96fa9e82fe6aec60d44676e5068b18e5571a979f76332dcf28bc221e972f754f17624910dec966847d545b6721763d4", 0x4c, 0x50, &(0x7f0000000700)={0xa, 0x0, 0x10001, @remote, 0x5, 0x2}, 0x20) write$UHID_INPUT(r0, &(0x7f0000000740)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000001940)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001900)={&(0x7f00000017c0)={0x108, 0x464, 0x800, 0x70bd27, 0x25dfdbfc, "8c83a09ba6714293efff8f1614349cd8fb8b372fdff1b76fd76624321e5a5f5543fd33f7620b832e4082f1ff8d4e6620003fbce9e2eafda9564ca859c2cd29963ab94b9482ac09ec2aac7638ee02dadadead431e659f7cc2823d5af5ecac734113159b78954e2e8c7f564060e36ee659eaa496c1f036b2d51cbcdeb61f6058ef5a0946fd3b9f460017e632ecdfecd6f24aee6af2d868d4d19319752ebd2162eb0540aa111358f959133c2a6584b3af311388179633971396532af90f4a63428aab7511eba835d35b6c3d03f3cdcbc93288f79ed37dfa2d6199f688f431a25954a26b75585475622fba62e75bbe44bbd51f4fa37348", ["", ""]}, 0x108}, 0x1, 0x0, 0x0, 0x8881}, 0x40891) fadvise64(r1, 0x7fffffff, 0x2, 0x3) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000001980)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f00000019c0)={0xfffffff7, 0x7, @name="7be52f59fcb6ba7930793dfcfb0d5f77f5f3fe33dc5f0ab6ea04806b864d2559"}) r3 = openat$cgroup(r0, &(0x7f0000001a00)='syz0\x00', 0x200002, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x13, r3, 0xc5898000) writev(r0, &(0x7f0000001d80)=[{&(0x7f0000001a40)="ea3e63faa3aee731884700de", 0xc}, {&(0x7f0000001a80)="7200cb7e238fb57af84d6f8e8dedc403f360f16b087cf066bc67a262341b1b77bf0d0abd5f8cd8f02e175de9b4d656811ed3f8dec77b49a7a5a49ea0b448835396b67d858c5cd48b0575195cdd00b1e3c10b2c7ac6539ccd7b11147262d50499808c4637", 0x64}, {&(0x7f0000001b00)}, {&(0x7f0000001b40)="e69ffdb9b206d7f0b7dc70b772b5f84b02e49973aef04f99ea01095eb2e7dc38756d165356b5154fe1fe7c8d46a8b5a6e6ac70537c7a6a74b5b12d3be0e1191d176b842b10f5b33426e209627856160fbd2eac355f07908db777e4fec02ac62bb62ac06a4d714bceb09e02bef506822003564fdc551afea2", 0x78}, {&(0x7f0000001bc0)="6878aa7a2d2bc9df6fde15060139673595982e8cbdd7b1c086103f0b996a95a45a871dce8b72eb96a0caa116471c875cdaae16d2e8a878d48a29644af477d79df45bdd3caeb190cc26f3834b90a124328d49fa521a1c9d93c5eaae7b77e635082cfffd57d6b726b84a7b1a662c0aa87e9ca737ce90208f6ec9a8e6b61d776a7eb9216796ae990c103653fec7e1263cc08d80209c261b5115560d286907ab19c4cb75b771ce6a52880cbb1f9f71d12a7e9728e6d5c241749c65dde545fd4d4fd5609f0db7666817a11ea90dae79f3e9a89b383cee368db39eee6d2d18ed3f35fdc5b763712aa5f48b815d542052b0", 0xee}, {&(0x7f0000001cc0)="65b729b1d25e9f4d22a5de36216338029ca760abf0bb2b580436e0af40e44c9be5bdc65a7927fae36aa26581e669c0324c53a8bc3715aebc9370b7008c68c880ba91d4b88ff3561deeeffb68a182ba953339df6febf04b4280dff81f6ca7624594ae2a584b020a43b0323b756c40d1b4a6c5beee3e2b1884a3f699b9dbe0d9b71431859ed7960023aeee1a32ab2e373416a0853d1ead7c32cd9c46a7887fe66f20ddcf3911ce272cae120cd29e86c9987dae37fa", 0xb4}], 0x6) bind$inet6(r2, &(0x7f0000001e00)={0xa, 0x4e22, 0x2, @remote, 0x8}, 0x1c) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e80), r1) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000001f80)={0x0, @in6={{0xa, 0x4e20, 0x8, @remote, 0x330}}, 0x7ff}, &(0x7f0000002040)=0x90) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000002080)={r5, 0x9}, &(0x7f00000020c0)=0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000002100)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0/../file0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000002180)={&(0x7f0000002140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) syncfs(r7) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f00000021c0)={'\x00', 0x3, 0x3, 0xb}) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000002640)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x108020}, 0xc, &(0x7f0000002600)={&(0x7f0000002280)={0x358, 0x12, 0x0, 0x70bd26, 0x25dfdbfe, {0x22, 0xb, 0xc, 0x2, {0x4e22, 0x4e20, [0x1, 0x6, 0x286b], [0x9, 0x9, 0x80000001, 0x22], 0x0, [0xe, 0x101]}, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x93, 0x1, "ea829d7f4a6d70df0f40a6dd57fc624a9ef193d1d63c2ec29cedf6f598b669547e1c0edc8bbe381adf9dd322bd8befbaab4ebb45997cae1c6c1701f6f1a99b4cebe18b24babf2dd8b9749d3c1f2958741e0136b8849037fc66e16b08f077b5d784d421a54deb6f0feec786bad751be077faf28380ab40d80c271a5b3c69068c8aa364a17053ff82a0ffdaa10ce112e"}, @INET_DIAG_REQ_BYTECODE={0xbc, 0x1, "7aa646e8c366eda1a8fedb860016b152b050aa46fb0997677e75419f4f58baa774c1323b7e9bef7d83fbee3860a2aa76302f151dbd2573c8546025528609972fccbbad56b27c2cacab2e91824a9f36e25075982ab830e7641e400bf4ffb4e10555c0d5c7aed131344c6e9c46c2b0d75450f0c968f6eac10f307351789c78a0b73f2da67d00bf5130a442baabad9a664081d28f2fbd1a74f373942e52d026e7fb624a9b0aabd65c851ff1da9ef65c7f6997eb278ed3a0ad77"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "1a5e786b357cf92439f2790b1dafeba192370647d85776bb5b17cbced802f6bd7a5b80604cb1c43169ed5be85e0631d8ede79ab85c00fdd17b968488f236e0000edc3b76b23218e3f4f9563fe4d062a058ce4938266c5c04b3492e29c8b97c1bc6abf65e477c5a0d9d6730d20ce53562720e4b565820db13a6b96e973114a177c771f511f4"}, @INET_DIAG_REQ_BYTECODE={0x8a, 0x1, "d0deb33ba33c96ed3597a4227755f27663077b848b43b5ed10a7094471766295ee66f7d67a2d40511eaa634310f91db365343391e50ae9720f269cb991e3321563850dc72c54e9ec813cb17c904cb4e95ba0b32a6650e6281f5299381683df28dc27913e915ed906790cfdc02f745612274b50039ebe64e0456fffb4a0e081a93e1f013ac8cf"}, @INET_DIAG_REQ_BYTECODE={0x27, 0x1, "d77b3654c4a90f43bd78cf66c8e4c54e6c541281204cf411d24938949a3fe984e7eef4"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "726a96b7247402f4c32532d073d3c105bace0a133026d054021d51ca5de6061b24e805459e07d865f52bff05ad9ddb2169b11b054d0e0215e5ee263851bc0e6e6c271ccb18cac68fda36223741675fb97c076a2021f13528bac19263fad975f25cb73d331d5a0a1019fdf052ea089136def4069857a2"}]}, 0x358}, 0x1, 0x0, 0x0, 0x800}, 0x200080c1) r8 = request_key(&(0x7f0000003700)='.dead\x00', &(0x7f0000003740)={'syz', 0x0}, &(0x7f0000003780)='\\]\x00', 0x0) add_key$user(&(0x7f0000002680), &(0x7f00000026c0)={'syz', 0x2}, &(0x7f0000002700)="a93df7e37bddeb526049a05cc1490ac91f7aa22034d126461f96b39adc41bacff263c0c5ae6d0e01dbf20e55a9ae66e975b011f4fbb6bb79da7f0fb474d67b35750820780e6f57a9a9fdf9a2f5f8a1dfc260c7a7af721d1bf8ceac822fa5eac0e16c0ee6b7b3890a42e00955bd45f714af6b725ab06dbb59db6333393f902a4b0a467b296f7a488799522b30de9d15c3337dc0f9d807a35b557de91168b611406c0340d7853f8295fc5507df78cc169b41255ebf156d22686d95b87e1c5239d42921100076345c79cdc0a5ef63a0795fbe594727b90c662358e2d4524d14b2afb04309c7e4bcc418c29f6df95aa3363ca6ebfd144ab63f0d9dad514c0c1245cf7291e10872eff1af53f549563c3efa66839bb35beaf66276961537b103cb8d7c40821090872ba7a17360e7d2444084cbc80f1626fae1fef30bc4651e7b4667f8cda8c6747a087ee7cdc36c91f125520c8129f17c19c299befa902618f48e30b863a289a4ce40b1ae79d2d5268e2d661a34387e353208b727c9a6c04fc5bcfa98f43114b07ab1a7832963328bb4b5b401c7409b3fd27fbd05ff69b8f414a3eb821846fee046cd1976a48d118451523bf82e60e1566a3201f90766ebbe03edcf0a5e67572f32e82f27233ca0ccae43238dd64673db5d5d3b779eb6c6eb8e6b78df54e9594cd456e7888d09fdd99f5c16c8959f694118a0ca3285e9bb3912246ac517dd0e3456b215f889a417716dfe476d8a342345024b64e30c0a327d7396490a80818b0646f28898548a1ccf09a6de69543559e61f3d7a39c316616a2d6d40b6594528b8c38fb63b5046dcec4c5f079453053b012a861fdd44ee680668e053fb49790c6c590415fa079aece861ff58503205c2bd76f587d1442d6cb16749fc587df5fd2ca34009921ad8fc6afd2ba66f4805251067352b82033817a66130eb2a09e8b9aaaf2a296603f90baeecb683ade2dfedad5363e81244511041293c121c653c47980af43d43da11bca904fb017f75d0c1089ced420b8b5676df5dd88e2dd4526fe355a6e4d5cac9e7a488a32fac5d15e3315478b13c05771b6690b19c82ccd576ee809a36c7878cc8340628c0abeb759c23a2781a838e422234c4a6d2718f9b349a795ec532a4b1fa961dedf60764c7a84512ac16e07a28dd69e3bc558fac5efc3ea3e4553dd8300fbc0e63aae6a2565a726e029d53e8a193e9ff912f7a25350dadf01b3672d28d44a4456347d796fdd4f763bb7aab103e4cf0b4ef7c98d2429549e81e96fa312cffb0f2eb14c567941bf70da23415577ff677b0652473170e7a9f18e51df84670c908ccb33c6c54fb64d26d49e923f62a11003c1d6ee64f6b84bbee041262e419779f6e90564754e37279a0c11c06ea9a608265fe94f5b08a813cba44716b6ebde12b9511da566e6f92426213abe43e83befc48732547f25bf629fe6eef56ca17fb6cb8cbaacbe3ad2be12182943d2e734acc21d5331f1242a4ce0bd1a03dbf2e0ed177e734a9b7037692f7b5d663e96a9c880195cc4bf1be147d9bf935a3ea78027cc6f984ea2e159f14df6e16db26946a22e17828c1c3b08bb02484fb27f8001301e847ffb9ae497a0ff854ff427d040ab73b8e6ec75822031aeaec54ce352c0e55969358d0cd2c29b5866357591193962c1e32a26d0b8f4ddf87c4dd845c346c43d7b8f977785210a52638c262e7ae7732e920af85e66167bdd68243f1bde3127300956ea1eb1229fab076d5568f50cbdee86be8d43c520f15b9aa5436dee6055ead0c6edcfbd69ae871e5c675a38564435b803ce33e271a416d8b7aafdd4a31aab2cb210827df09498ce78033a7db5825a9cae80f082a4535d55ec56e4fea1c4fc82255a9f0d44b40bc4edc2c94350d6ba9061408fc27e6cc39dc8aa12dd00e252c31412a61d4f069f64d353a1a05de922e637c50c0a50420af15359e67efc8704aa12413375fd32d293f0789691b35d7a8bab88e55e3e3f46ebd87a3f4779a28a53196d38f006715c701cdcff61296f111ec22042fca6bcd9adca12f8a214fa590c91844c46602bbe22418c625f01e6cd407321fac860001c15caa95ef2c52bc9530f74682ba59ca79502e533009d3c7627c2d40e4815b1218477107828f01bdcafd31506958491db7edc0acb6d55eb6c3d18085eb7676b3ce8fde0ce56d8e30f797ed90dfa2fa878a56ae71d9ef4b6ec821b17174ac9bf84e9f49644d1e7ac7b500123cf27ba4e6f7f165b009af6c824d5c180534711005842eb94ae97560a37d835d83788e6a48dfe5c0c824ebcc56995278348557fdefd7e5a300521672975ed82f5ffeec8625a244536311b2bce9467ec03756db2edfffca7dc6b777ecadbfdc647091cb76dba94521700d91ff9cbd727d8791a37e030efca5b747f88f5cea96d7511acedf4a3bb0b7c8c3f443301eb88bdcf54f16263fdd4b10c739f106b3d3c1e1682695f855c09f279afae38d4a04f84f6985d543b7cd1f63803e5f695abb4dfb6d0e37e17570a0829a19bc1ff06c6b3cdfb637d1e295721de02318366ebd49f9d8fc1b9ceb91f1c5bb5c9f7850a61cd3f24660d009ce476c54ec624c0336c39c839da74c6e24f5d9b419fd63339ed44f8e02905d914c2843960e0e1a8ebb3914dbce5982ea4ba35dd04eb8bb24b9679baa92d0d7d459949e1356967f22bb5aa0148fa18ad657184bdbab3c1b6146e8378a44215b8468b2a24e2d01840c9b27b00ca11cea2ddbf611fcc5e395b4d3e561977898afb733e64f401cb72ccdff9cde5b820d74514437c0bd268bbdc067e797f61eef8f5f704e1eb88c658ed143ccc23bc87c40654767b52bfc1099c16c6216c44b1b04b6dd63949e342289bfe0d78750d19a9d44849c1576162f71567dc07cc6d8dbd1bd179f2ba4e9bf4ce909b02fa2e17219f6fa5b970dfe8fed3ea1dcf57fd8fddcf99626e1f10e1835a948ed9f8e4b11d9213721777628b3c5c83177a71edfafbf93df2b7869b5d7c76064ee3da7d820484b52f8de19f5c4d1ec0e41248a52822812c95889ca5f7fb053114a463da41a5b2e83cb6d8d5ec45fa1d32cce4caf88ef2920bc66695672f11b7483dbb32e2a194de918bb52bbb04ee125a15b211ca7a119e726e0865d69601911565ef001c1779478fc0b3b0d73507e453322355871e559f54489d62fbde996efc7e5837c4491d3b3d460d07476ab0c927a239d6aa87c0ae20d1f2c18a9cf7625dcf4e23a26c54ad84d71269ed1e0fb3c68692bced5a999e93be40e06731a072dceda4ba523168175df631fe71add0574e5a57fb908b2f7420b22d0ff0443c0ff82451c15d1539c99bdc0dcd59c6339a1975724648ec8a7409ba1b6d6910e81162ce5b555c025303462c59225d5c733cba1cdf4dfaa02ddbd6fd802322c328f35081921a6ee6eb9048e14e56ad7d0576fe53c8d9e75232975f01f5af0aac8956470b06cf3fcf7141ffa707f67b9a690f0c312de448cbc65752dafca60d63e0a1a397d2a7b9f92ecbc45f72e3f188d1a80ac01f0c0d996d129160f61d28d950bd9e548b1d6e3473c72402034124b1f2f7f275129a5d8c8f98555228ed2f98247344286c4ba55d65800f30ae410ad5ea35b87746c7aeadef830278e8eddcb9edf971bc3eb384326edd1a9f80b9ac43381eec4c5f93b348387d09397ef8476ec20d136216efbf96ef95ef7361fe198c5b02316479137198830002d5cf5fe5e5b441129e828bf01d34c445612b8e547e78b4193f2be90267e3cd06006af5171bed0e4fa44af66f9a0fd39557dd6911f6ad46c2b87f21e82e704dfe68022fe9f8018440e74889e78965b4bed66470db673f90d0b8e8f1bb390d73f986326562e190b7e2e6aebfe8cd80e5d5447a48e32c34d4b3fc4cfada3b25b45460f57aeef6b9f65c7eaa60a1c07199c96a46e25312e6938a732f73ac60c68f8d9aa76a7046793b35ada8054bf25b11141a7de3e20daa8e89064a36c5b6ebe7fe17a674e71c66ffab977762ef27f56f43c639b022e49e413b9511c5c1d9d1b325a8028c8835a2348d348413dcc07365b31640c6630827e9bf4d48b17780451077d244fc9b10feb8d17f882b8fd63607d7254fbc6df5a98ac7b54b7fd689abd882965182bff4e155a1cdf98e1a7a8f41b337feeca2f7633b58a79fdb718f0e2085b267cdbd5e06956b1489cc4711f80c29fc255be62d922b09b33d817671fd7f7eda33cd91c378a25f2c1e35040e3c439052a88fc1e62e5ac4c224995016a967e365679d0c1c1f95565606abd1b5cb6e9592b7a2f7e46db84a254881b2e467d09bcf19519edc792dae81325f331db2c626958112f4e945857c5381e0d10249adfc10b07b47d2bf5e165bbdf43fe482b03760fba80db8b471bfcaa384fc4c3a86d049d3528973922ca5b6b28ffa45a0f5c538f9374e8b3d94a9afdee1906c68d8b7ebf3605e877b7c122b98fe0eed00545116234fc27546a720184736c96f594880b0131c664bff1b470668dfa23566c678134ffdc5f813dd91f151acc642f7887b3230464b650486ad6f975f725124fda3f7a0815a18503809d427fb64ca120ae1f94c1b419a6eb4b98c4f2d9eab4642e09a58983c1a7791d18b0520acf7db3243fb57cfabaee46e0f0fc894235fea3ecfc0ce8993a952d24dd587eeca5203c9c697b2a1aaf968beaf82af300b28a926a7003ff4b8ce7d49e68782fd884081ac4c68faf4049591386c1b037abe61f82ee26659a3977cb7734a5346883f5598e7112cebdaaec7af00f06a2b55457dd603f1172c366570171cafc53a6ee0b0d53e806c93797db7c6634251a51ad3eb8d8ce325dfe57e0915f4825c525eb4eac4fe6bf78b0a5c3964f24e978b265ececead0eba7035f1049d3ab058cc3ab973f89c7e7a9fd833782c910226153e7d49a8aa9ecbf8935e734eb3c3f6210edfc7719cdfe8e43b9248c121b7920fa7d1aad1f93021b5ba00eb25366a04fc15b74a83d8d9422d189d2d60295fcb092f9b2c399e7a42e7fab71eea4d15aeeb3a2331806fe1378e8bd79a4ecdf6c7a1cf00c26e2db5ebf3a8cf4d246271dd1415a208a827f0eaddd1b83160dc75f4cc970bc484220ee4e8bcda22e055fa90b4638157c9eb8459f365bfb7021dd9510f284dfab42e79d8dfd3cf1c7ff93648ebde49bd4e71c30a78cb12ee9db5ade2247d8c93870bc4118f9862c33d32c6c442862d2d99799da3a117b82d672c503040923337aafc5f67af88c310bb14bcf22c77629945aef6e21cf9b9933142f172d8b6805a79bdc567a1de53611cc640e117a5aad6125096923c572ac9ef60ef6ce42ffbe01bc2a30338a6a0e8fff149fec8c9172af352b9434e2c05f0066c3cd2d4ae5b2e00fbec294ff300a0fb021ab167df6282b4b4c0aa99235fcb9587bcad0e6d9b483f246791b8d89437d258a22ec3069912cd4027020745333df1ddfeb10aa2c0f85b88c2598309ec3fd342578b25798ed6f6d82d56b4946bce80ff65b324e7c36b8699ac52d3971f12995fe3513fd97a41b48ac63c7a7acd27cb2f7bd578f6f6f2d3e57202ff31898038844d30dfbcbe0e4fc364cf05843df40ba95dca3ef0e8154c8beff74748947fa0a18f96c88fe7cc2ebc293b324e406221ab8ed85761e5489d46b623188269c0afd1082bd1c97765990a2a68e12f9629d45f27f5fbeb91285305867677ba5030ce61bd31bb991ab0de77ba3e0d84e005db3e98c5251787e5d7f21d29793f20933ac6b5091d8e1253ba7f768bf1736b2d420d382fffd5191b3d5380c94df796ae8f697dddb", 0x1000, r8) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000003880)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003840)={&(0x7f0000003800)={0x30, 0x1410, 0x1, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048010}, 0xc015) 54.526626078s ago: executing program 2 (id=2414): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x45e, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x4, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="40061c"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) 51.474897277s ago: executing program 2 (id=2432): syz_usb_connect(0x5, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000501a2920cc17001061c501020301090212000100001000090494020891858d00ca3f42c7f108daeddcd62f7d542a0da9ec52847821bb02edacf5de6b67e8a52680da3c1d017ba50d22c839b5c3ecb079ffd4ac683398681bdc3ae12d2e68d5f7d34ace97bd49cae1d08f1b33171c85c22b10b14de076f946948a16b0bc5310017590d8d7afdefc3800429403a4992f6ea59845fb12ea240fa1ce7733220c8ad88d4736f4ba251f5aacecaf2bca8dbdb9"], 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) syz_usb_connect$cdc_ncm(0x6, 0x91, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0x9, 0x20, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "f13b"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x6, 0x7fff, 0x6}, {0x6, 0x24, 0x1a, 0x8, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x4, 0xd0, 0x81}, @mdlm={0x15, 0x24, 0x12, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x7, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x6, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4a, 0x7, 0x7}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0xa, 0xb, 0x8, 0x10}, 0x112, &(0x7f00000001c0)={0x5, 0xf, 0x112, 0x5, [@generic={0x3a, 0x10, 0xb, "9b039c6f5aef78514cb343dad8a3085e2bcec5b75f0c2f6c7bdd410be774de4697c5701957b4e966d664a0afd9d861e0630dd4999c978b"}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "0cb1bb81d2ef5729011008f97c4bb098"}, @ptm_cap={0x3}, @generic={0xb5, 0x10, 0x1, "1ec728b27515b6d199676d0c4fbd2b365bfbe3d45eeb7fc18700c050fee705ed7648179be93c2cfb29cbb2b3a14c3b9fda1d3ab4c87f05f731d47aefde21a3946805499b268cd5ecca7a7a2922de97dad7fdd64b385a2d430df17a5221321c3b861e56eb1cdd1189bc4476d851440414b2fded72b510d53ebe38be46924a56c59b66cf98d7e618e9deced16d6308f7aa347dc64f7700ac7019a37610dfb7b5a99527ec92eb72c85663c2ad909c00a907dd65"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x4, 0x57}]}, 0x3, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x446}}]}) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0x80000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7cb, &(0x7f0000000140)={&(0x7f0000001080)={{@local}, {@hyper}, 0x400, "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"}, 0x418, 0x101}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = open(&(0x7f0000000440)='./file0\x00', 0x202000, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 51.391742203s ago: executing program 2 (id=2433): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$tmpfs(0x0, &(0x7f0000001100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0xf, 0x20a03243, 0x3, [0x2], [0x80ffff, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x3], [0xfff, 0x0, 0x0, 0x4]}) r1 = socket$inet6(0xa, 0x5, 0xfffffffe) r2 = socket(0x29, 0x80805, 0xb) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={r3, 0x0, 0x0}, 0x0) getsockopt$bt_hci(r1, 0x84, 0x1, &(0x7f0000001180)=""/4075, &(0x7f0000001140)=0xfffffffffffffd92) r4 = socket(0x15, 0x80005, 0x0) getsockopt(r4, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) r6 = fsmount(r5, 0x0, 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYRESHEX=r5], 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x4, 0xc67}, &(0x7f00000000c0)=0x8) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r9, 0xaea2, 0x80000000) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000240)={r7, 0x9e, "42cbac9c1b39f79580a29c38c0704c3396ba63d1b571e0a229f6f2fdab67b041607f9bc213ee972e53ad445327b780a4515a717ffeab6bdaf4ad92346a9943da1e99340e1ecaefaee6eea684dbf8e379d5b2261aa803a4941a7d98462241938534206f797304a23f053b8b84a7c431154a249b4f71984b2d75c90e106f539fb519c23aedf2b6e9485a981cf7cd77e1b9c7044765ef80bf5781a00b9a8d9e"}, &(0x7f0000000100)=0xa6) 48.303473265s ago: executing program 2 (id=2452): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "52dddc2e0fe0354add9a2c2a028e07598a134fc7080100fb00000017fffff300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000000)={"c28f23a31bde53c671b73a4d9900d802406eb9504303a192bbd42dc714ad5861", r1, 0xffffffffffffffff}) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x6, 0xf3, &(0x7f0000000540)=ANY=[], 0x0) ioctl$EVIOCRMFF(r3, 0x41015500, 0x0) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, 0x0) 47.91140872s ago: executing program 2 (id=2455): r0 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x4004, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f7f746d6f64653d30303030303030303030303030303030303032303030302c757365725fd3114b", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,blksize=0x0000000000000600,smackfstransmute=,\x00']) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) getsockopt$inet_opts(r0, 0x0, 0x6, 0x0, &(0x7f0000000080)) 47.510427961s ago: executing program 34 (id=2455): r0 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x4004, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f7f746d6f64653d30303030303030303030303030303030303032303030302c757365725fd3114b", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,blksize=0x0000000000000600,smackfstransmute=,\x00']) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) getsockopt$inet_opts(r0, 0x0, 0x6, 0x0, &(0x7f0000000080)) 5.11535702s ago: executing program 6 (id=2735): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x4c000, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r3, 0x505, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x720166479aac7f24}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x44081}, 0x40010) 4.553062044s ago: executing program 3 (id=2742): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000002880)=0x2, 0x4) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x0, 0xf, [{{0x9, 0x4, 0x0, 0x7e, 0x2, 0x7, 0x1, 0x2, 0x2d, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x8, 0x4, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0xf9, 0x3}}]}}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x15be}) 4.236253585s ago: executing program 6 (id=2743): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x247) syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="120100006e383a10d00701415cec010203010902240001000000000904"], 0x0) 3.393096555s ago: executing program 3 (id=2746): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000080)=""/130, 0x82}, {&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f00000001c0)=""/178, 0xb2}, {&(0x7f0000000280)=""/250, 0xfa}, {&(0x7f0000000380)=""/105, 0x69}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/189, 0xbd}], 0x9) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) 3.300179176s ago: executing program 3 (id=2747): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(r2, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000000)={0x1, 0x1fffffe, 0x7, 0x1bf, 0x9, 0x6, 0x3, 0x4, 0x0, 0x2, 0xfffff7fd, 0x2}) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) syz_usb_connect$uac1(0x3, 0xce, &(0x7f0000000000)={{0x12, 0x1, 0x3b575ca78cf6749b, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x3, 0x1, 0x4, 0x40, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x80, 0x9}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x200, 0x4, 0x1, 0x8000, 0x1, 0x50}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x2, 0x1002}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xf7, 0x2, 0x40, 0x2, "c54df7"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x3, 0xe, 0x0, "7cd8", '/'}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0x7f, 0x1, {0x7, 0x25, 0x1, 0x1, 0x1, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0x6, 0x4, "344d763e316c7599"}, @as_header={0x7, 0x24, 0x1, 0x25, 0x1e, 0x2}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x3, 0x10, 0x3, "863dfd"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xcdc, 0x2, 0x59, "1d19e6046673ea8b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6d, 0x2, 0x7, {0x7, 0x25, 0x1, 0x80, 0x7a, 0xfeff}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x9, 0x2, 0xf1, 0x20}, 0x1a, &(0x7f0000000140)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x64, 0x7f, 0xc, 0x5, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x10, 0x0, 0x6}]}, 0x9, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x410}}, {0xb3, &(0x7f0000000240)=@string={0xb3, 0x3, "7b2ff0aecb89ccdfa262be02f07d80e13ef5903315eaa4ab530030881ca86dac4d34d12c6816b4e0773251f954b8dcac5eb7a1fab793b697609d73585e72c40cc8ddb3ff6f023f384b9fde0bd5f225f7e50204b543b6c1d362cff949a7a421f8fb5b5fee9bfc27900452c1499df6eb9e58fe3c64bec0b2afc5da66ed68ad08fdbe3fce924da96f75802dee360dd42a5549d85a93a34957097332992c9b084676066a8091691cb9b98d4b3a439b1a7fe6af"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2250}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44b}}, {0x75, &(0x7f0000000380)=@string={0x75, 0x3, "06e355ca469fa8dd7ec2dd223f1eceaef372a3d620105ead9ecb43760fedd14e79c9b30742c1fc2149a0d448698c27b68cbc4d4c5a13b3c82cd3aac2b1f8d764ea1b41505c1ab81fbd967c4887b2cbbbcd9fd5c61acbe117a749e3e18d49ea3e128c0955a376421b9dbd7a37df6b2d065d7db7"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3ec07d7c23042a7c}}, {0x26, &(0x7f0000000440)=@string={0x26, 0x3, "de3c7edc93f1d79278024ee55fd48d4e462c327942e6af2c5b3f9ebe67fdfbd037369466"}}]}) 2.605044579s ago: executing program 6 (id=2748): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x1) (async) landlock_restrict_self(r1, 0x1) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x3564}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)={0x7849, {{0xa, 0x4e24, 0x4, @mcast1, 0x32}}, 0x1, 0x4, [{{0xa, 0x4e20, 0x0, @local, 0x4b}}, {{0xa, 0x4e22, 0x7fffffff, @empty, 0x1}}, {{0xa, 0x4e22, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}}, {{0xa, 0x4e22, 0x0, @mcast2, 0x2}}]}, 0x290) socket$unix(0x1, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1}, 0x6e) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @loopback, 0x6}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @loopback, 0x6}, 0x1c) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e", 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x8, 0x4) 2.555099814s ago: executing program 6 (id=2749): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r2 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0xfff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x7400}, 0x44010) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000580)=ANY=[], 0xfe33) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="42000000030000000000000000000000000000000000000021"], 0x42) r11 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_GETSHIFTSTATE(r11, 0x4b2f, 0x0) 2.496625129s ago: executing program 6 (id=2750): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2481000}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)={0xb0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6b05}, @CTA_EXPECT_HELP_NAME={0xfc5b, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0x6) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000001000000000000000f0ffffffffffffff1000000000000000ff"]) 2.397021271s ago: executing program 5 (id=2751): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r1, 0x400, 0x0) 2.370502689s ago: executing program 5 (id=2752): r0 = socket$nl_route(0x10, 0x3, 0x0) getpgrp(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYRES64=r0, @ANYRES32=r3, @ANYBLOB="0a003400020202020202000010004c0014ac0f000bac0f0013ac0f00"], 0x38}, 0x1, 0x0, 0x0, 0x44891}, 0x8060040) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000007100)="19", 0x1, 0x0, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x7d, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) io_setup(0x7e, &(0x7f0000000040)=0x0) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c64030005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000e86000)="002204", 0x7f8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) close_range(r8, r0, 0x2) recvmmsg(r9, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/3, 0x3}], 0x1}, 0x2}], 0x1, 0x10021, 0x0) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r9, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss, @sack_perm, @timestamp, @timestamp, @mss, @timestamp, @sack_perm], 0x20000000000000ec) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r9, &(0x7f0000000440)="137d27ca7717f53cbdbde63a7ed556161cdb056d6a89dc012165c256745da0924b88b31c93c6ba29da38eb5bd409d735722c7e7d39fe3c5b6a679f6e05b3cb00c2b735bc4f68e4bced4a58a2527a184df9afa5d5fdb78058", 0x58, 0x10, 0x0, 0x0) io_submit(r5, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x1, r8, &(0x7f0000000880)='\x00', 0x1, 0x3}]) 2.355672539s ago: executing program 6 (id=2753): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000000a0a0101"], 0x14}}, 0x10) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x40000200, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='\x00', 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xe4, 0x0, 0x42, 0x5c}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000180)=ANY=[@ANYBLOB="01004000000000000d0000000100245dc39185a4d7d6fffffcffffff01010000000100"/48]) ioctl$KVM_GET_XSAVE2(r4, 0x9000aecf, &(0x7f0000ffa000/0x4000)=nil) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="896dce6d9fc48f0b74affe6120b47b2fbb9734c5dda7d2c23457ccf61bdb29f25e122d83b50ab1f8107abfeee6c0389b70184461cd18b59e518287c61f6c3b8982c91f920ba73207e0ef53386235b09c334c3323d2f4a8559e3c3f0dc01696fc2f5448a45c2cb9ce7758964200ad0f47d45d03c359bcd3b1c66fe28b1f32ed99be77ce22b5c2e2fc8ecb4c4a3020f108873efe32713467579d311c83d73b4fbde86e2e3eb5504304d180314188a47ff71ccd985f23b0a71d4fbf4d1eccb1824387c7bf285806c87b486a9b0b26758d6859e6d9f1", @ANYRESHEX], 0x0) 2.165009936s ago: executing program 5 (id=2754): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000bfae5f88f19fda435a5e8f2fbbbb2297850e3bdbafc27b231aa59093b9cc11a023b60b4f7da4b71777b4fad12a26ec9052dd3efd859c49dcc101539b27335b84be6c69d30f25145274", @ANYRES16=r2, @ANYBLOB="010002000020000000002500000008000300", @ANYRES32=r3, @ANYBLOB="0a003400010101010101000008003500010000000a000600697aa80b9de90000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) r5 = accept4(r4, 0x0, 0x0, 0x80000) r6 = dup(r5) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0x1}], 0x1}}], 0x1, 0x0) r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x11ff, 0x3331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0xfa, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xf4f6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0x9}}}}}]}}]}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)={0x48, r10, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4d}, @val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x48}, 0x1, 0x0, 0x0, 0x8050}, 0x240048c0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "1a29b98c"}]}}, 0x0}, 0x0) 1.260953386s ago: executing program 0 (id=2757): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {}, 0x49, [0x0, 0x3, 0x403, 0x100000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x3, 0xffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1000000a, 0x0, 0x0, 0x80000007, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffffffff], [0xf33, 0xa82, 0x0, 0x1, 0x2, 0x733, 0x1, 0xedc0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x8, 0x0, 0x2000000, 0x0, 0x0, 0x9, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7fff0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x28220be6, 0x401, 0x0, 0x2, 0xfffffffc, 0x6, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x7, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffe, 0x7, 0x0, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x2, 0x89, 0x0, 0x800, 0x0, 0xfffffffb, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80008003, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0xfffffffe, 0xd, 0x0, 0x0, 0x6492, 0x8], [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xd2a, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0xfffffffc, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x3ff, 0x200000, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x8000006, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x8000008, 0x4, 0x1, 0x0, 0x0, 0x100000, 0xfffffffc]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.239692634s ago: executing program 0 (id=2758): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040f20421140000000000010902240001000050b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x95, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002020000082505a1a4400001020301090283000101008010090400fb020206000605f47afbcdbad87e29397217179d24060000052400210f0d240f01871d995d0500ff0f981524120700a317a88b045e4f01a607c0ffcb7ca2f5d07da87008c9c72c7e392a0c241b01010100050903000905240100a807240a050581001024070904000100c0ff89560f010e0001005a2e62f481fef2ed6236090581038c51000a0109058202104657f50abea70bb4ed6c8c5fee074781f6"], &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x10, 0x81, 0x4, 0x20, 0x6}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}}) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "1674f439"}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040f20421140000000000010902240001000050b109040000010300010009210101000122050009058103"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_connect$cdc_ecm(0x4, 0x95, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002020000082505a1a4400001020301090283000101008010090400fb020206000605f47afbcdbad87e29397217179d24060000052400210f0d240f01871d995d0500ff0f981524120700a317a88b045e4f01a607c0ffcb7ca2f5d07da87008c9c72c7e392a0c241b01010100050903000905240100a807240a050581001024070904000100c0ff89560f010e0001005a2e62f481fef2ed6236090581038c51000a0109058202104657f50abea70bb4ed6c8c5fee074781f6"], &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x10, 0x81, 0x4, 0x20, 0x6}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "1674f439"}]}}, 0x0}, 0x0) (async) 673.666674ms ago: executing program 0 (id=2759): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000000)=0x100000001) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x99b, 0x8, 0xc051, 0x3, 0x2, 0xff}, 0xc) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x2000, 0x80) r4 = socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f00000003c0)=0x3, 0x4) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000200)=0x1, 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r3, 0xc0245720, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0xfc, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 597.000733ms ago: executing program 0 (id=2760): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x28000000, 0x4, 0x3, 0x400000, 0x14, "3eccd800001f0000001f001000000004010100"}) (async) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000800), r0) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040004}, 0x800) 596.576482ms ago: executing program 0 (id=2761): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f0000004580)) r4 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x6, 0x8, 0xf6089bd778a18257}) write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6) syz_usb_control_io(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x12, r2, 0x0) 552.385035ms ago: executing program 5 (id=2762): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001840)={0x2c, r5, 0x221, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000000)={r9, 0xa2c8}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c0022803400008008000300000000000800050000000000080002000000000008000300000000000800020000000000080004000000000044000080080004000000000008000700000000000800060000000000080005"], 0xc0}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r10, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68) chdir(&(0x7f0000000080)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) 477.974081ms ago: executing program 5 (id=2763): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x4, 0x280800) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f0000000040)=0xffffff66) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000080)) (async) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000100)='connect aa:aa:aa:aa:aa:10 1', 0x1b) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0xf, 0xf5, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x8, 0xb, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x4, 0x4, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x10, 0x2b}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, r3, 0x10, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x80}, @ETHTOOL_A_LINKINFO_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xe}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) (async) r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r7 = dup3(r6, r1, 0x0) socket(0x26, 0x3, 0x51) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f00000004c0)=@arm64) (async) r8 = openat$cgroup_ro(r7, &(0x7f0000000500)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000540)={{r2}, "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"}) r9 = signalfd4(r2, &(0x7f0000001540)={[0x10]}, 0x8, 0x800) ioctl$HIDIOCGRDESC(r9, 0x90044802, &(0x7f0000001580)={0x269, "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"}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0xc018937a, &(0x7f0000001840)={{0x1, 0x1, 0x18, r9, {0xa36}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f0000001800), r10) (async) read(r1, &(0x7f0000001880)=""/4096, 0x1000) (async) sendmsg$nl_generic(r10, &(0x7f0000002940)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x40, 0x16, 0x700, 0x70bd28, 0x25dfdbfe, {0x1}, [@generic="66a6d33eadb75606ce9b4bcd38176eb9a95121a9aa15175d3a6ca38868970102cf74a04c44db6ee563"]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000002980)=0xd) (async) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) dup(r6) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f00000029c0)='/proc/cpuinfo\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r11, &(0x7f0000002b80)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002b40)={&(0x7f0000002a40)={0xc4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x7, 0x6}, {0x3, 0x4}, {0x6, 0x2}, {0x3, 0x7}, {0xd, 0x5}, {0x0, 0x6}, {0x5, 0x6}, {0x0, 0x6}, {0x7, 0x4}, {0xb4, 0x1}, {0x44}, {0xc, 0x6}, {0x2, 0x4}, {0xe0, 0x7}, {0x3, 0x2}, {0x9, 0x3}, {0xd, 0x5}, {0x2f, 0x2}], "c32f159e9108d60f"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x2, 0x3}, {0x5, 0x3}, {0x9, 0x7}, {0x9, 0x6}, {0x40, 0x2}, {0x6, 0x2}, {0xd5, 0x5}, {0x1, 0x7}, {0x1}, {0x7, 0x5}, {0x40, 0x7}, {0xc0, 0x3}, {0x4, 0x4}, {}, {0x3, 0x5}, {0x6d, 0x2}, {0x7f, 0x4}, {0x7e}, {0x2, 0x6}, {0xb, 0x1}, {0xf6, 0x6}], "007176b7648e5d75"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x6, 0x1}, {0x9}, {0x1, 0x4}, {0x80, 0x4}, {0x9, 0x6}, {0x6, 0x1}, {0x4, 0x2}, {0x6b, 0x3}, {0x9, 0x6}, {0x5, 0x6}], "cb931dd2944e0070"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x4, 0x5}, {0x3}, {0x4, 0x6}, {0x9d, 0x6}], "4b9dbf870d7ee897"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0xc, 0x2}, {0x1}, {0x2b, 0x4}], "1eec2eb873f91574"}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000002bc0)={0x0, 0x0, 0x9, 0x5}) (async) r12 = syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f0000002c00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x4, 0x2, 0x400, 0x9, 0x2, 0x4}, {0x9, 0x5, 0x80, 0x2, 0x10, 0x7, 0xe0, 0x7f}, {0x9, 0x5, 0x2, 0x3, 0x40, 0x1, 0x6e, 0x7}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r12, &(0x7f0000002d40)={0x14, &(0x7f0000002c40)={0x20, 0x4, 0x9a, {0x9a, 0x24, "6842acef6234ea0014590a7bb994b5170db385dbd59f4a1cbd0f607881aaa9f4930ecac94a25de3d461cb442004bcff101e6abadb9d6a8e3b8e650d9d665f8daf42650357d691fee9bcae48ba879d2bb26df4d1eb86bb36c36f98c0ff875036658a1899390889a9b31fc59b32fde85c776c2728d3a5be05ff79fc9e42611e89346c9925275f8140698326927e02031fee8fc357268f9cd0f"}}, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000003240)={0x1c, &(0x7f0000002d80)={0x0, 0xb, 0x28, "c333b559fa9ba8255138f9ea27c7b692b2bbf4bba53a2ba1fed9248e2a5583ebc533fb9f643417b3"}, &(0x7f0000002dc0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000003200)}) 397.290368ms ago: executing program 5 (id=2764): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e03"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109021b0001000000000904"], 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e03"], 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109021b0001000000000904"], 0x0) (async) 245.112546ms ago: executing program 3 (id=2765): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101201) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x307, 0xfffd, 0x0, 0x400, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000280)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x38) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1d6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 154.936851ms ago: executing program 3 (id=2766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000069c0)={0x0, 0x0, &(0x7f0000006980)={&(0x7f0000006900)={0x48, 0x0, 0x7, 0x107, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xbf}, @NFACCT_FILTER={0x4}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xa7}]}, 0x48}, 0x1, 0x0, 0x0, 0x40840}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r3, r3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async, rerun: 64) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000000)=0xf, 0x4) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_dev$video4linux(&(0x7f0000000400), 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r9, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x100a, 0xffffffffffffffff, 0x0, 0x0}) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x48, r7, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_bridge\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) prctl$PR_GET_NAME(0x10, 0x0) (async, rerun: 64) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x2040) (rerun: 64) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, r10, 0x300, 0x70bd2d, 0xa5dfdc01, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044010}, 0x801) 657.772µs ago: executing program 0 (id=2767): ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f00000010c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0xffffffff, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x1, 0x400}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) pipe2(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) read$eventfd(r3, &(0x7f0000001140), 0x8) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x3, 0x4200000, 0xf800, 0xfff9, 0xe, 0x800, 0x0, 0x0, 0x8, 0x9}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=fscache$\x00']) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) gettid() r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x8000) 0s ago: executing program 3 (id=2768): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c00080008ef"], 0x178}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x20, r2, 0x1, 0x70bd29, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x3, 0x55}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000}) kernel console output (not intermixed with test programs): dDevice=e2.3d [ 565.964250][T12713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.978155][T12713] usb 6-1: Product: syz [ 565.982397][T12713] usb 6-1: Manufacturer: syz [ 565.988131][T12713] usb 6-1: SerialNumber: syz [ 565.999394][T12713] r8152-cfgselector 6-1: Unknown version 0x0000 [ 566.005718][T12713] r8152-cfgselector 6-1: config 0 descriptor?? [ 566.427752][T12713] r8152-cfgselector 6-1: USB disconnect, device number 58 [ 566.517368][ T3093] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 566.528910][ T3093] gspca_sunplus: reg_w_riv err -71 [ 566.539764][ T3093] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 566.556673][ T3093] usb 4-1: USB disconnect, device number 107 [ 566.565999][ T6750] udevd[6750]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 566.956301][ T3093] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 567.116497][ T3093] usb 4-1: Using ep0 maxpacket: 8 [ 567.123805][ T3093] usb 4-1: unable to get BOS descriptor or descriptor too short [ 567.134043][ T3093] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 567.142314][ T3093] usb 4-1: config 0 has no interface number 0 [ 567.148510][ T3093] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 567.159729][ T3093] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 567.169632][ T3093] usb 4-1: config 0 interface 88 has no altsetting 0 [ 567.181081][ T3093] usb 4-1: language id specifier not provided by device, defaulting to English [ 567.199034][ T3093] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 567.208279][ T3093] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 567.216568][ T3093] usb 4-1: Product: syz [ 567.220850][ T3093] usb 4-1: SerialNumber: syz [ 567.228360][ T3093] usb 4-1: config 0 descriptor?? [ 567.266505][ T5866] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 567.446518][ T5866] usb 6-1: unable to get BOS descriptor or descriptor too short [ 567.457232][ T3093] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input73 [ 567.467898][ T5866] usb 6-1: not running at top speed; connect to a high speed hub [ 567.479054][ T5866] usb 6-1: config 9 has an invalid interface number: 49 but max is 0 [ 567.490695][ T5866] usb 6-1: config 9 has no interface number 0 [ 567.491878][ T3093] usb 4-1: USB disconnect, device number 108 [ 567.504326][ T5866] usb 6-1: config 9 interface 49 altsetting 3 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 567.516231][ T5866] usb 6-1: config 9 interface 49 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 567.528720][ T5866] usb 6-1: config 9 interface 49 altsetting 3 endpoint 0x6 has an invalid bInterval 191, changing to 4 [ 567.547076][ T5866] usb 6-1: config 9 interface 49 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 567.558252][ T5866] usb 6-1: config 9 interface 49 has no altsetting 0 [ 567.570268][ T5866] usb 6-1: New USB device found, idVendor=c251, idProduct=4003, bcdDevice= 1.00 [ 567.581376][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.590810][ T5866] usb 6-1: Product: syz [ 567.595009][ T5866] usb 6-1: Manufacturer: syz [ 567.599701][ T5866] usb 6-1: SerialNumber: syz [ 567.825245][ T5866] usb-storage 6-1:9.49: USB Mass Storage device detected [ 567.835822][ T5866] usb-storage 6-1:9.49: Quirks match for vid c251 pid 4003: 80 [ 567.882461][ T5866] usb 6-1: USB disconnect, device number 59 [ 567.991653][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 568.044119][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 568.102668][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 568.225542][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 568.466558][ T5868] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 568.596276][ T5866] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 568.621285][ T5868] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.633655][ T5868] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 568.652888][ T5868] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 568.663493][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.672829][ T5868] usb 4-1: Product: syz [ 568.677987][ T5868] usb 4-1: Manufacturer: syz [ 568.683012][ T5868] usb 4-1: SerialNumber: syz [ 568.699967][ T5868] cdc_mbim 4-1:1.0: skipping garbage [ 568.756298][ T5866] usb 6-1: Using ep0 maxpacket: 32 [ 568.771230][ T5866] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.785154][ T5866] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 568.804182][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.813499][ T5866] usb 6-1: Product: syz [ 568.818663][ T5866] usb 6-1: Manufacturer: syz [ 568.823504][ T5866] usb 6-1: SerialNumber: syz [ 568.836575][ T5866] usb 6-1: config 0 descriptor?? [ 568.844645][ T5866] usb 6-1: bad CDC descriptors [ 568.853648][ T5866] usb 6-1: unsupported MDLM descriptors [ 568.894765][T14223] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 569.048792][T12713] usb 6-1: USB disconnect, device number 60 [ 569.511493][T14223] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 569.524477][ T5868] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 569.557346][ T5868] wwan wwan0: port wwan0mbim0 attached [ 569.594839][ T5868] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 52:93:f3:d4:95:2b [ 569.625339][T14260] syzkaller1: entered promiscuous mode [ 569.636388][T14260] syzkaller1: entered allmulticast mode [ 569.683966][T14260] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2304'. [ 569.698548][T14261] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2304'. [ 569.728467][T14223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.740712][T14223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.816860][ T5866] usb 4-1: USB disconnect, device number 109 [ 569.837764][ T5866] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 569.881393][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 569.988217][T14275] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2306'. [ 570.021234][ T5866] wwan wwan0: port wwan0mbim0 disconnected [ 570.416976][ T5866] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 570.599710][ T5866] usb 4-1: Using ep0 maxpacket: 16 [ 570.611420][ T5866] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 570.633202][ T5866] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 570.645581][ T5866] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 570.660800][ T5866] usb 4-1: config 1 has no interface number 1 [ 570.667554][ T5866] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 570.681685][ T5866] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 570.699320][ T5866] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 570.708924][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.712188][ T5868] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 570.717489][ T5866] usb 4-1: Product: syz [ 570.729699][ T5866] usb 4-1: Manufacturer: syz [ 570.734679][ T5866] usb 4-1: SerialNumber: syz [ 570.887216][ T5868] usb 6-1: Using ep0 maxpacket: 32 [ 570.898789][ T5868] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.926251][ T5868] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.939793][T14315] bridge0: entered allmulticast mode [ 570.951070][T14315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2315'. [ 570.960684][T14315] team0: left allmulticast mode [ 570.965875][T14315] team_slave_0: left allmulticast mode [ 570.973140][T14315] team_slave_1: left allmulticast mode [ 570.980405][T14315] geneve1: left allmulticast mode [ 570.987463][ T5868] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 571.001444][T14315] bridge0: port 3(team0) entered disabled state [ 571.009256][ T5868] usb 6-1: config 0 interface 0 has no altsetting 0 [ 571.018221][ T5868] usb 6-1: New USB device found, idVendor=04b3, idProduct=3109, bcdDevice= 0.00 [ 571.029251][T14315] bridge_slave_1: left allmulticast mode [ 571.036048][T14315] bridge_slave_1: left promiscuous mode [ 571.038341][T14320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.045904][T14315] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.058472][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.074989][ T5868] usb 6-1: config 0 descriptor?? [ 571.083375][T14315] bridge_slave_0: left allmulticast mode [ 571.087653][T14320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.096393][T14315] bridge_slave_0: left promiscuous mode [ 571.113306][T14315] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.155542][T14315] bridge0 (unregistering): left allmulticast mode [ 571.276601][ T5866] usb 4-1: USB disconnect, device number 110 [ 571.304944][T14324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.329094][T14324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.849574][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 571.982410][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 572.223498][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 572.257597][T14336] netlink: 'syz.2.2319': attribute type 10 has an invalid length. [ 572.266611][T14336] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2319'. [ 572.397545][ T5868] usbhid 6-1:0.0: can't add hid device: -71 [ 572.426370][ T5868] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 572.452319][ T5868] usb 6-1: USB disconnect, device number 61 [ 572.796432][ T5868] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 572.904635][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 572.949248][ T5868] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.967499][ T5868] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 572.988821][ T5868] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 572.997711][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 573.008767][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.030058][ T5868] usb 6-1: Product: syz [ 573.040181][ T5868] usb 6-1: Manufacturer: syz [ 573.044833][ T5868] usb 6-1: SerialNumber: syz [ 573.069873][ T5868] cdc_mbim 6-1:1.0: skipping garbage [ 573.278388][T14350] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 573.284316][T14371] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2327'. [ 573.297752][T14371] unsupported nlmsg_type 40 [ 573.507469][ T5868] cdc_mbim 6-1:1.0: failed GET_NTB_PARAMETERS [ 573.514888][ T5868] cdc_mbim 6-1:1.0: bind() failure [ 573.518718][ T6750] udevd[6750]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 573.541936][ T5868] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 573.550508][ T5868] cdc_ncm 6-1:1.1: bind() failure [ 573.629435][ T6750] udevd[6750]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 573.910901][T14388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2333'. [ 574.047535][ T5868] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 574.216313][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 574.223786][ T5868] usb 4-1: config 8 has an invalid interface number: 161 but max is 0 [ 574.227129][ T5947] usb 6-1: USB disconnect, device number 62 [ 574.232724][ T5868] usb 4-1: config 8 has no interface number 0 [ 574.245105][ T5868] usb 4-1: config 8 interface 161 has no altsetting 0 [ 574.256741][ T5868] usb 4-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=60.da [ 574.268585][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.277281][ T5868] usb 4-1: Product: syz [ 574.284360][ T5868] usb 4-1: Manufacturer: syz [ 574.290151][ T5868] usb 4-1: SerialNumber: syz [ 574.696491][ T5947] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 574.856308][ T5947] usb 6-1: Using ep0 maxpacket: 32 [ 574.868853][ T5947] usb 6-1: unable to get BOS descriptor or descriptor too short [ 574.883453][ T5947] usb 6-1: config 14 has an invalid interface number: 115 but max is 0 [ 574.896101][ T5947] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 574.915956][ T5947] usb 6-1: config 14 has no interface number 0 [ 574.924472][ T5947] usb 6-1: config 14 interface 115 has no altsetting 0 [ 574.938881][ T5947] usb 6-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 574.948158][ T5947] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.956702][ T5947] usb 6-1: Product: syz [ 574.961020][ T5947] usb 6-1: Manufacturer: syz [ 574.965641][ T5947] usb 6-1: SerialNumber: syz [ 575.188153][T14406] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 575.208310][ T5947] xr_serial 6-1:14.115: More than one union descriptor, skipping ... [ 575.216614][ T5947] xr_serial 6-1:14.115: skipping garbage [ 575.229087][ T5947] usb 6-1: USB disconnect, device number 63 [ 575.516390][ T5865] Bluetooth: hci4: command 0x0406 tx timeout [ 575.568564][T14423] netlink: 'syz.0.2344': attribute type 10 has an invalid length. [ 575.711218][T14423] team_slave_0: left promiscuous mode [ 575.720460][T14423] team0 (unregistering): Port device team_slave_0 removed [ 575.728822][T14423] team_slave_1: left promiscuous mode [ 575.737201][T14423] team0 (unregistering): Port device team_slave_1 removed [ 575.745211][T14423] geneve1: left promiscuous mode [ 575.752561][T14423] team0 (unregistering): Port device geneve1 removed [ 575.956409][T14434] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 576.046310][ T5866] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 576.074327][T14440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2349'. [ 576.099511][T14439] netlink: 'syz.0.2349': attribute type 4 has an invalid length. [ 576.200060][ T5866] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 576.208587][ T5866] usb 6-1: config 0 has no interface number 0 [ 576.214737][ T5866] usb 6-1: config 0 interface 48 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 576.227687][ T5866] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0006, bcdDevice= c.db [ 576.236921][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.244942][ T5866] usb 6-1: Product: syz [ 576.249306][ T5866] usb 6-1: Manufacturer: syz [ 576.253944][ T5866] usb 6-1: SerialNumber: syz [ 576.261674][ T5866] usb 6-1: config 0 descriptor?? [ 576.271252][ T5866] ati_remote 6-1:0.48: ati_remote_probe: Unexpected endpoint_in [ 576.471099][T14429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.480266][T14429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.507379][ T5866] usb 6-1: USB disconnect, device number 64 [ 576.664730][ T5868] net1080 4-1:8.161: probe with driver net1080 failed with error -22 [ 576.679892][ T5868] usb 4-1: USB disconnect, device number 111 [ 576.744576][ T6750] udevd[6750]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 576.866300][ T5866] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 576.949957][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 577.016328][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 577.020000][ T5866] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 577.053572][T14458] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2356'. [ 577.056288][ T5866] usb 6-1: config 0 has an invalid descriptor of length 94, skipping remainder of the config [ 577.081391][ T5866] usb 6-1: config 0 has no interface number 0 [ 577.089154][ T5866] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 23856, setting to 64 [ 577.102377][ T5866] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 577.142009][ T5866] usb 6-1: config 0 interface 52 has no altsetting 0 [ 577.160706][ T5866] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 577.175587][ T6750] udevd[6750]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 577.188316][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 577.201144][ T5866] usb 6-1: SerialNumber: syz [ 577.214463][ T5866] usb 6-1: config 0 descriptor?? [ 577.262193][ T6750] udevd[6750]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 577.422955][ T5866] usb 6-1: Can not set alternate setting to 1, error: -71 [ 577.434840][ T5866] synaptics_usb 6-1:0.52: probe with driver synaptics_usb failed with error -71 [ 577.457444][ T5866] usb 6-1: USB disconnect, device number 65 [ 577.506747][ T5906] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 577.669629][ T5906] usb 4-1: unable to get BOS descriptor or descriptor too short [ 577.678411][ T5906] usb 4-1: not running at top speed; connect to a high speed hub [ 577.687976][ T5906] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.698722][ T5906] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 577.711511][ T5906] usb 4-1: string descriptor 0 read error: -22 [ 577.718148][ T5906] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 577.727603][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.746238][ T5906] usb 4-1: 0:2 : does not exist [ 577.976837][ T5906] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 578.000690][ T5906] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 578.032044][ T5906] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 578.046931][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 578.099231][ T5906] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 578.131750][ T5906] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 578.147649][ T5906] usb 4-1: USB disconnect, device number 112 [ 578.296262][ T5868] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 578.448788][ T5868] usb 6-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 578.458655][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.467080][ T5906] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 578.478852][ T5868] usb 6-1: config 0 descriptor?? [ 578.489077][ T5868] pwc: Philips SPC 900NC USB webcam detected. [ 578.636299][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 578.645393][ T5906] usb 4-1: unable to get BOS descriptor or descriptor too short [ 578.659198][ T5906] usb 4-1: config 0 has an invalid interface number: 36 but max is 1 [ 578.669192][ T5906] usb 4-1: config 0 has an invalid interface number: 5 but max is 1 [ 578.677377][ T5906] usb 4-1: config 0 has an invalid interface number: 3 but max is 1 [ 578.689178][ T5868] pwc: Failed to set LED on/off time (-71) [ 578.695549][ T5906] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 578.710333][ T5868] pwc: send_video_command error -71 [ 578.716397][ T5868] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 578.724004][ T5906] usb 4-1: config 0 has no interface number 0 [ 578.730844][ T5868] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 578.741262][ T5906] usb 4-1: config 0 has no interface number 1 [ 578.748340][ T5906] usb 4-1: config 0 has no interface number 2 [ 578.757666][ T5868] usb 6-1: USB disconnect, device number 66 [ 578.765649][ T5906] usb 4-1: config 0 interface 36 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 578.781023][ T5906] usb 4-1: config 0 interface 36 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 578.794727][ T5906] usb 4-1: too many endpoints for config 0 interface 5 altsetting 156: 226, using maximum allowed: 30 [ 578.809680][ T5906] usb 4-1: config 0 interface 5 altsetting 156 has 1 endpoint descriptor, different from the interface descriptor's value: 226 [ 578.839656][ T5906] usb 4-1: config 0 interface 36 has no altsetting 0 [ 578.846925][ T5906] usb 4-1: config 0 interface 5 has no altsetting 0 [ 578.858194][ T5906] usb 4-1: string descriptor 0 read error: -22 [ 578.864746][ T5906] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=64.67 [ 578.884945][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.896802][ T5906] usb 4-1: config 0 descriptor?? [ 578.903874][T14487] sctp: [Deprecated]: syz.0.2366 (pid 14487) Use of int in maxseg socket option. [ 578.903874][T14487] Use struct sctp_assoc_value instead [ 579.133846][T14483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.156907][T14483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.676422][ T5906] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 579.832639][T14511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2370'. [ 579.852544][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 579.864317][ T5906] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 579.875480][ T5906] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 579.898223][ T5906] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 579.918891][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024 [ 579.931256][ T5906] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 579.948549][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 579.968760][ T5906] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 579.986776][ T5906] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 580.011474][ T5906] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 580.027733][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.051300][ T5906] usb 6-1: config 0 descriptor?? [ 580.067946][T14497] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 580.088636][ T5906] usblp0: Disabling reads from problematic bidirectional printer [ 580.289622][ T5906] usblp 6-1:0.0: usblp0: USB Unidirectional printer dev 67 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004 [ 580.329703][ T5906] usb 6-1: USB disconnect, device number 67 [ 580.353818][ T5906] usblp0: removed [ 580.366098][T14528] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2373'. [ 581.071317][T12713] usb 4-1: USB disconnect, device number 113 [ 581.214135][ T6235] udevd[6235]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 581.240135][T14554] netlink: 'syz.5.2378': attribute type 1 has an invalid length. [ 581.255345][T14554] netlink: 'syz.5.2378': attribute type 2 has an invalid length. [ 581.320178][T14554] binder: 14553:14554 ioctl c0306201 2000000004c0 returned -14 [ 581.380229][T14556] sp0: Synchronizing with TNC [ 581.498471][ T52] Bluetooth: hci4: unexpected event for opcode 0x040e [ 581.537945][T14558] sp0: Synchronizing with TNC [ 581.567743][T14565] overlayfs: failed to clone upperpath [ 581.776427][T12713] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 581.946813][T12713] usb 4-1: Using ep0 maxpacket: 16 [ 581.959686][T12713] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 581.982969][T12713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.998850][T12713] usb 4-1: Product: syz [ 582.013719][T12713] usb 4-1: Manufacturer: syz [ 582.020246][T12713] usb 4-1: SerialNumber: syz [ 582.041631][T12713] usb 4-1: config 0 descriptor?? [ 582.259862][T12713] speedtch 4-1:0.0: speedtch_bind: data interface not found! [ 582.286780][T12713] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 582.315597][T12713] usb 4-1: USB disconnect, device number 114 [ 583.370627][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 583.480466][T14605] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 583.520495][T14605] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2387'. [ 583.763119][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 584.095885][ T5906] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 584.267807][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 584.285906][ T5906] usb 4-1: config 3 has an invalid interface number: 45 but max is 0 [ 584.306639][ T5906] usb 4-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 584.315685][ T5906] usb 4-1: config 3 has no interface number 0 [ 584.339019][ T5906] usb 4-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 584.363864][ T5906] usb 4-1: config 3 interface 45 has no altsetting 0 [ 584.389770][ T5906] usb 4-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 584.406352][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.424998][ T5906] usb 4-1: Product: syz [ 584.439866][ T5906] usb 4-1: Manufacturer: syz [ 584.460758][ T5906] usb 4-1: SerialNumber: syz [ 584.470915][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2393'. [ 584.720537][ T5906] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 584.804389][ T5906] usb 4-1: USB disconnect, device number 115 [ 584.964673][ T6216] udevd[6216]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 585.332788][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 585.445307][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 585.527037][ T30] audit: type=1400 audit(6049336728.184:155): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14655 comm="syz.3.2397" [ 585.654429][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 585.891901][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 585.975556][ T5866] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 586.043780][T14674] tmpfs: Unknown parameter '0x0000000000000006' [ 586.155656][ T5866] usb 6-1: Using ep0 maxpacket: 8 [ 586.177014][ T5866] usb 6-1: unable to get BOS descriptor or descriptor too short [ 586.186204][T14681] overlay: ./bus is not a directory [ 586.186666][ T5866] usb 6-1: config 1 has an invalid interface number: 4 but max is 2 [ 586.202741][ T5866] usb 6-1: config 1 has an invalid interface descriptor of length 6, skipping [ 586.212258][ T5866] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.215338][ T5906] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 586.227592][ T5866] usb 6-1: config 1 has no interface number 1 [ 586.235696][T14681] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2404'. [ 586.240090][ T5866] usb 6-1: config 1 interface 4 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 586.259109][ T5866] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 586.270580][ T5866] usb 6-1: config 1 interface 4 has no altsetting 0 [ 586.281293][ T5866] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 586.291245][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.299900][ T5866] usb 6-1: Product: syz [ 586.304234][ T5866] usb 6-1: Manufacturer: syz [ 586.309729][ T5866] usb 6-1: SerialNumber: syz [ 586.380987][ T5906] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 586.394840][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.404094][ T5906] usb 4-1: Product: syz [ 586.410363][ T5906] usb 4-1: Manufacturer: syz [ 586.415456][ T5906] usb 4-1: SerialNumber: syz [ 586.423950][ T5906] usb 4-1: config 0 descriptor?? [ 586.561984][ T5866] usb 6-1: 2:1 : invalid UAC_AS_GENERAL desc [ 586.612481][ T5866] usb 6-1: USB disconnect, device number 68 [ 586.681958][ T6330] udevd[6330]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 587.020757][T14695] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2408'. [ 587.148989][T14700] netlink: 'syz.0.2410': attribute type 10 has an invalid length. [ 587.167930][T14700] macvlan0: entered promiscuous mode [ 587.173299][T14700] macvlan0: entered allmulticast mode [ 587.180615][T14700] veth1_vlan: entered allmulticast mode [ 587.191232][T14700] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 587.414902][T12713] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 587.564668][T12713] usb 6-1: Using ep0 maxpacket: 8 [ 587.577183][T12713] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 587.586590][T12713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.595010][T12713] usb 6-1: Product: syz [ 587.599393][T12713] usb 6-1: Manufacturer: syz [ 587.604002][T12713] usb 6-1: SerialNumber: syz [ 587.611950][T12713] usb 6-1: config 0 descriptor?? [ 587.621959][T12713] usb_ehset_test 6-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 587.822705][T14702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.831895][T14702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.844321][T14702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.853641][T14702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.871243][T12713] usb 6-1: USB disconnect, device number 69 [ 588.684105][ T5868] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 588.836282][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 588.847602][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.857906][ T5868] usb 6-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 588.867382][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.888364][ T5868] usb 6-1: config 0 descriptor?? [ 588.902732][ T5906] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 588.932577][ T5906] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 588.953175][ T5906] usb 4-1: USB disconnect, device number 116 [ 588.968964][ T6750] udevd[6750]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 589.311103][ T5868] bigben 0003:146B:0902.0041: unexpected rdesc, please submit for review [ 589.337222][ T5868] bigben 0003:146B:0902.0041: unbalanced collection at end of report description [ 589.348375][ T5868] bigben 0003:146B:0902.0041: parse failed [ 589.354689][ T5868] bigben 0003:146B:0902.0041: probe with driver bigben failed with error -22 [ 589.522604][ T3093] usb 6-1: USB disconnect, device number 70 [ 589.872694][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 589.874963][ T3093] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 589.919224][T14741] 9pnet_fd: Insufficient options for proto=fd [ 590.011023][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 590.047578][ T3093] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 590.056453][ T3093] usb 6-1: config 0 has no interface number 0 [ 590.057558][T14747] netlink: 'syz.0.2427': attribute type 27 has an invalid length. [ 590.072714][ T3093] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 590.082494][ T3093] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.094097][ T3093] usb 6-1: Product: syz [ 590.113045][ T3093] usb 6-1: Manufacturer: syz [ 590.122938][ T3093] usb 6-1: SerialNumber: syz [ 590.131757][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 590.147640][ T3093] usb 6-1: config 0 descriptor?? [ 590.240978][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 590.329037][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 590.337918][T14759] netlink: 'syz.3.2431': attribute type 3 has an invalid length. [ 590.348413][T14759] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2431'. [ 590.364815][ T3093] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 590.376721][ T3093] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 590.387483][ T3093] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 590.395681][ T3093] usb 6-1: media controller created [ 590.415503][ T3093] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 590.566407][T14732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.585500][T14732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.603890][ T3093] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 590.614221][ T5906] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 590.689610][ T3093] usb 6-1: USB disconnect, device number 71 [ 590.783128][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 590.792253][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.808352][ T5906] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 590.818365][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.828873][ T5906] usb 4-1: Product: syz [ 590.834203][ T5906] usb 4-1: Manufacturer: syz [ 590.839118][ T5906] usb 4-1: SerialNumber: syz [ 590.850245][ T5906] usb 4-1: config 0 descriptor?? [ 590.860088][ T5906] cdc_ether 4-1:0.0: probe with driver cdc_ether failed with error -22 [ 590.873613][ T5906] usb 4-1: unsupported MDLM descriptors [ 590.983067][T14775] overlayfs: failed to resolve './file0': -2 [ 591.060655][ T5866] usb 4-1: USB disconnect, device number 117 [ 591.337273][T14781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.346531][T14781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.436331][T14783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.526967][ T50] tipc: Subscription rejected, illegal request [ 591.596325][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 591.671242][T14790] netlink: 'syz.3.2441': attribute type 29 has an invalid length. [ 591.933908][ T5866] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 592.093479][ T5866] usb 4-1: Using ep0 maxpacket: 8 [ 592.116514][ T5866] usb 4-1: unable to get BOS descriptor or descriptor too short [ 592.136207][ T5866] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 592.148844][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 592.172355][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 592.194614][ T5866] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 592.208369][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 592.219239][ T5866] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 166 [ 592.232474][ T5866] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 592.241734][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.244307][T14804] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.2445'. [ 592.262394][ T5866] usb 4-1: Product: syz [ 592.266623][ T5866] usb 4-1: Manufacturer: syz [ 592.271367][ T5866] usb 4-1: SerialNumber: syz [ 592.279263][ T5866] usb 4-1: config 0 descriptor?? [ 592.287316][T14790] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 592.294929][T14790] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 592.306256][ T5866] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 592.702090][ T5866] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 592.803732][T14813] tmpfs: Bad value for 'mpol' [ 592.874977][ T5866] usb 6-1: config 5 has an invalid interface number: 123 but max is 0 [ 592.883270][ T5866] usb 6-1: config 5 has no interface number 0 [ 592.889556][ T5866] usb 6-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 592.901752][ T5866] usb 6-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 592.912944][ T5866] usb 6-1: config 5 interface 123 has no altsetting 0 [ 592.923954][ T5866] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 592.933238][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.941256][ T5866] usb 6-1: Product: syz [ 592.945533][ T5866] usb 6-1: Manufacturer: syz [ 592.950174][ T5866] usb 6-1: SerialNumber: syz [ 592.958129][T14809] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 593.178533][ T5866] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 593.193153][ T5866] usb 6-1: USB disconnect, device number 72 [ 593.993397][ T5865] Bluetooth: hci2: command 0x0405 tx timeout [ 594.228093][ T3483] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.390337][ T3483] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.496631][ T3483] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.644563][ T3483] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.680465][ T24] usb 4-1: USB disconnect, device number 118 [ 594.795448][ T6250] udevd[6250]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 595.068804][ T3483] bridge_slave_1: left allmulticast mode [ 595.077263][ T3483] bridge_slave_1: left promiscuous mode [ 595.092996][ T3483] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.128784][ T3483] bridge_slave_0: left allmulticast mode [ 595.150185][ T3483] bridge_slave_0: left promiscuous mode [ 595.158373][ T3483] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.194433][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 595.244517][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 595.263228][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 595.280271][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 595.296192][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 595.308601][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 595.397687][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 595.614863][ T3483] team0: Port device geneve0 removed [ 595.672785][ T5906] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 595.840518][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 595.863976][ T5906] usb 4-1: config 1 interface 0 altsetting 58 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 595.900444][ T5906] usb 4-1: config 1 interface 0 has no altsetting 0 [ 595.916958][ T5906] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.40 [ 595.926596][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.941542][ T5906] usb 4-1: Product: syz [ 595.945774][ T5906] usb 4-1: Manufacturer: syz [ 595.957629][ T5906] usb 4-1: SerialNumber: syz [ 596.203522][ T5906] usbhid 4-1:1.0: can't add hid device: -71 [ 596.218628][ T5906] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 596.227248][ T5868] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 596.250743][ T5906] usb 4-1: USB disconnect, device number 119 [ 596.394839][ T5868] usb 6-1: not running at top speed; connect to a high speed hub [ 596.422430][ T5868] usb 6-1: config index 0 descriptor too short (expected 2322, got 18) [ 596.441184][ T5868] usb 6-1: config 95 has an invalid interface number: 1 but max is 0 [ 596.465200][ T5868] usb 6-1: config 95 has no interface number 0 [ 596.475099][ T5868] usb 6-1: config 95 interface 1 has no altsetting 0 [ 596.503132][T14884] overlayfs: failed to clone upperpath [ 596.515520][ T5868] usb 6-1: string descriptor 0 read error: -22 [ 596.525644][ T5868] usb 6-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 596.540723][T14884] fuse: Bad value for 'group_id' [ 596.545712][T14884] fuse: Bad value for 'group_id' [ 596.582087][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.608062][T14855] chnl_net:caif_netlink_parms(): no params data found [ 596.766544][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 596.921813][T14855] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.929640][T14855] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.938969][T14855] bridge_slave_0: entered allmulticast mode [ 596.952005][T14855] bridge_slave_0: entered promiscuous mode [ 596.961292][T14855] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.968571][T14855] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.976305][T14855] bridge_slave_1: entered allmulticast mode [ 596.984803][T14855] bridge_slave_1: entered promiscuous mode [ 597.035937][ T5868] usb 6-1: USB disconnect, device number 73 [ 597.109988][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.125631][T14855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.140079][ T5866] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 597.163247][T14855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.232204][T14855] team0: Port device team_slave_0 added [ 597.243573][T14855] team0: Port device team_slave_1 added [ 597.307014][T14855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.314211][T14855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.341786][ T5866] usb 4-1: Using ep0 maxpacket: 16 [ 597.349933][ T52] Bluetooth: hci1: command tx timeout [ 597.365247][T14855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.382307][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.403834][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.414038][T14855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.423740][T14855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.450032][ T5866] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 597.466753][ T5866] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 597.479304][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.490578][T14855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.519322][ T5866] usb 4-1: config 0 descriptor?? [ 597.706970][T14855] hsr_slave_0: entered promiscuous mode [ 597.714646][T14855] hsr_slave_1: entered promiscuous mode [ 597.721559][T14855] debugfs: 'hsr0' already exists in 'hsr' [ 597.727323][T14855] Cannot create hsr debugfs directory [ 597.867261][T14922] overlayfs: failed to resolve './file1/file0': -2 [ 597.885226][T14922] orangefs_devreq_write_iter: total:0: must be at least:8240: [ 597.943717][ T5866] shield 0003:0955:7214.0042: unknown main item tag 0x0 [ 597.979860][ T5866] input: HID 0955:7214 Haptics as /devices/virtual/input/input76 [ 598.092525][ T5866] shield 0003:0955:7214.0042: Registered Thunderstrike controller [ 598.114355][ T5866] shield 0003:0955:7214.0042: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 598.144920][T14928] netlink: 'syz.5.2475': attribute type 21 has an invalid length. [ 598.162272][T14928] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2475'. [ 598.216114][T14928] netlink: 'syz.5.2475': attribute type 5 has an invalid length. [ 598.235404][ T5947] shield 0003:0955:7214.0042: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 598.266461][ T5866] usb 4-1: USB disconnect, device number 120 [ 598.267517][T14928] netlink: 'syz.5.2475': attribute type 6 has an invalid length. [ 598.293143][ T5947] shield 0003:0955:7214.0042: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 598.320439][T14928] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2475'. [ 598.322152][ T5947] shield 0003:0955:7214.0042: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 598.382367][ T5947] shield 0003:0955:7214.0042: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 598.772294][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 598.940820][T14855] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 599.003459][T14855] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 599.056691][T14855] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 599.079420][ T5868] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 599.105961][T14855] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 599.144670][ T3483] hsr_slave_0: left promiscuous mode [ 599.165192][ T3483] hsr_slave_1: left promiscuous mode [ 599.183725][ T3483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.194816][ T3483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.203274][ T3483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.238803][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 599.241114][ T3483] veth1_macvtap: left promiscuous mode [ 599.252603][ T3483] veth0_macvtap: left promiscuous mode [ 599.267835][ T5868] usb 4-1: config 162 has an invalid interface number: 3 but max is 0 [ 599.280949][ T5868] usb 4-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 599.291717][ T5868] usb 4-1: config 162 has no interface number 0 [ 599.298038][ T5868] usb 4-1: too many endpoints for config 162 interface 3 altsetting 3: 255, using maximum allowed: 30 [ 599.328877][ T5868] usb 4-1: config 162 interface 3 altsetting 3 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 599.360998][ T5868] usb 4-1: config 162 interface 3 altsetting 3 endpoint 0x85 has invalid wMaxPacketSize 0 [ 599.376780][ T5868] usb 4-1: config 162 interface 3 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 599.391351][ T5868] usb 4-1: config 162 interface 3 has no altsetting 0 [ 599.401874][ T5868] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 599.415045][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.423582][ T5868] usb 4-1: Product: syz [ 599.427964][ T5868] usb 4-1: Manufacturer: syz [ 599.432726][ T5868] usb 4-1: SerialNumber: syz [ 599.435290][ T52] Bluetooth: hci1: command tx timeout [ 599.453991][ T3483] pimreg3 (unregistering): left allmulticast mode [ 599.655818][ T5868] metro_usb 4-1:162.3: interrupt-out endpoint missing [ 599.698970][ T5868] usb 4-1: USB disconnect, device number 121 [ 599.914727][ T3483] team0 (unregistering): Port device team_slave_1 removed [ 599.971508][ T3483] team0 (unregistering): Port device team_slave_0 removed [ 600.252826][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 600.468255][ T5868] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 600.637042][ T5868] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 600.638331][ T5947] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 600.645717][ T5868] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 600.645749][ T5868] usb 4-1: config 0 has an invalid descriptor of length 150, skipping remainder of the config [ 600.645772][ T5868] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 600.645796][ T5868] usb 4-1: config 0 has no interface number 0 [ 600.645848][ T5868] usb 4-1: config 0 interface 156 altsetting 0 has an endpoint descriptor with address 0xF5, changing to 0x85 [ 600.645877][ T5868] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 600.645903][ T5868] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 600.645930][ T5868] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 600.645955][ T5868] usb 4-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 600.646002][ T5868] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 600.646028][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.649603][ T5868] usb 4-1: config 0 descriptor?? [ 600.775108][ T5868] gspca_main: spca561-2.14.0 probing abcd:cdee [ 600.818396][ T5947] usb 6-1: device descriptor read/64, error -71 [ 600.970775][T14978] trusted_key: encrypted_key: master key parameter 'defaultree_control' is invalid [ 601.026342][T14855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.035504][ T5868] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 601.054805][ T5868] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 601.078014][ T5947] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 601.090343][ T5868] usb 4-1: MIDIStreaming interface descriptor not found [ 601.102998][T14855] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.159136][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.166637][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.229027][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.236274][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.244193][ T5947] usb 6-1: device descriptor read/64, error -71 [ 601.299093][ T5868] usb 4-1: USB disconnect, device number 122 [ 601.358404][ T5947] usb usb6-port1: attempt power cycle [ 601.507755][ T52] Bluetooth: hci1: command tx timeout [ 601.604375][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 601.698931][T15005] tipc: Started in network mode [ 601.710570][T15005] tipc: Node identity ac14140f, cluster identity 4711 [ 601.739328][T15005] tipc: New replicast peer: 255.255.255.255 [ 601.748322][ T5947] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 601.766524][T15005] tipc: Enabled bearer , priority 10 [ 601.776054][ T5947] usb 6-1: device descriptor read/8, error -71 [ 601.906422][T14855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.908266][ T3093] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 602.017416][ T5947] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 602.058490][ T5947] usb 6-1: device descriptor read/8, error -71 [ 602.084574][ T3093] usb 4-1: Using ep0 maxpacket: 32 [ 602.106784][ T3093] usb 4-1: unable to get BOS descriptor or descriptor too short [ 602.118971][ T3093] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 602.123002][ T30] audit: type=1326 audit(6049336744.782:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15017 comm="syz.0.2490" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c5c98eba9 code=0x0 [ 602.135026][ T3093] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 602.180828][ T5947] usb usb6-port1: unable to enumerate USB device [ 602.192259][ T3093] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 602.202076][ T3093] usb 4-1: config 128 has no interface number 0 [ 602.213915][T15022] fuse: Bad value for 'fd' [ 602.218529][ T3093] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 602.273249][ T3093] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 602.297334][ T3093] usb 4-1: config 128 interface 127 has no altsetting 0 [ 602.330676][ T3093] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 602.342123][ T3093] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.351562][ T3093] usb 4-1: Product: syz [ 602.355770][ T3093] usb 4-1: Manufacturer: syz [ 602.399092][ T3093] usb 4-1: SerialNumber: syz [ 602.515655][T14855] veth0_vlan: entered promiscuous mode [ 602.534847][T14855] veth1_vlan: entered promiscuous mode [ 602.602664][T14855] veth0_macvtap: entered promiscuous mode [ 602.616344][T14855] veth1_macvtap: entered promiscuous mode [ 602.660253][T14855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.686434][ T3093] usb 4-1: USB disconnect, device number 123 [ 602.689260][T14855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.740534][ T6888] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.750474][ T6888] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.761870][ T6330] udevd[6330]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 602.784856][ T6888] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.794562][ T24] tipc: Node number set to 2886997007 [ 602.802827][ T6888] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.885068][ T6888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.895053][ T6888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.930923][ T6878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.940324][ T6878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.001571][ T6330] udevd[6330]: symlink '../../loop6' '/dev/disk/by-diskseq/81.tmp-b7:6' failed: Read-only file system [ 603.184867][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 603.256908][ T5868] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 603.419542][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.462444][ T5868] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 603.482440][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.500676][ T5868] usb 7-1: config 0 descriptor?? [ 603.587137][ T52] Bluetooth: hci1: command tx timeout [ 603.672499][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 603.796608][T15040] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 603.819870][ T30] audit: type=1326 audit(6049336746.483:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15064 comm="syz.0.2499" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c5c98eba9 code=0x0 [ 603.822279][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 603.930806][ T5868] keytouch 0003:0926:3333.0043: fixing up Keytouch IEC report descriptor [ 603.943209][ T5868] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0043/input/input77 [ 603.961734][T15040] usb 6-1: config 8 has an invalid interface number: 152 but max is 0 [ 603.974824][T15040] usb 6-1: config 8 has no interface number 0 [ 603.982524][T15040] usb 6-1: config 8 interface 152 has no altsetting 0 [ 603.993134][T15040] usb 6-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=57.b9 [ 604.003157][T15040] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.011390][T15040] usb 6-1: Product: syz [ 604.015599][T15040] usb 6-1: Manufacturer: syz [ 604.021294][T15040] usb 6-1: SerialNumber: syz [ 604.064423][ T5868] keytouch 0003:0926:3333.0043: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 604.097163][ T9] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 604.249182][T15050] netdevsim netdevsim5: Direct firmware load for ..€ failed with error -2 [ 604.260058][T15050] netdevsim netdevsim5: Falling back to sysfs fallback for: ..€ [ 604.260327][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 604.279318][ T9] usb 4-1: too many configurations: 91, using maximum allowed: 8 [ 604.292277][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 604.300670][ T9] usb 4-1: can't read configurations, error -61 [ 604.437518][ T9] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 604.519233][ T3093] usb 7-1: USB disconnect, device number 2 [ 604.597854][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 604.605509][ T9] usb 4-1: too many configurations: 91, using maximum allowed: 8 [ 604.622452][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 604.630865][ T9] usb 4-1: can't read configurations, error -61 [ 604.643269][ T9] usb usb4-port1: attempt power cycle [ 604.663057][T15073] netlink: 'syz.0.2501': attribute type 10 has an invalid length. [ 604.674606][T15073] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 604.986147][ T9] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 605.006737][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 605.012455][ T9] usb 4-1: too many configurations: 91, using maximum allowed: 8 [ 605.026100][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 605.033789][ T9] usb 4-1: can't read configurations, error -61 [ 605.088629][ T6330] udevd[6330]: symlink '../../loop6' '/dev/disk/by-diskseq/81.tmp-b7:6' failed: Read-only file system [ 605.146860][ T6330] udevd[6330]: symlink '../../loop6' '/dev/disk/by-diskseq/81.tmp-b7:6' failed: Read-only file system [ 605.166053][ T9] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 605.198524][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 605.204717][ T9] usb 4-1: too many configurations: 91, using maximum allowed: 8 [ 605.221551][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 605.230233][ T9] usb 4-1: can't read configurations, error -61 [ 605.233131][ T6330] udevd[6330]: symlink '../../loop6' '/dev/disk/by-diskseq/81.tmp-b7:6' failed: Read-only file system [ 605.237374][ T9] usb usb4-port1: unable to enumerate USB device [ 605.427577][ T6330] udevd[6330]: symlink '../../loop6' '/dev/disk/by-diskseq/81.tmp-b7:6' failed: Read-only file system [ 605.775653][ T9] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 605.930042][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 605.939494][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 605.950551][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 605.968427][ T9] usb 7-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 605.977968][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.987209][ T9] usb 7-1: Product: syz [ 605.991433][ T9] usb 7-1: Manufacturer: syz [ 605.996588][ T9] usb 7-1: SerialNumber: syz [ 606.006358][T15094] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 606.200861][T15103] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 606.281713][T15106] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 606.376583][ T9] usbhid 7-1:1.0: can't add hid device: -71 [ 606.382944][ T9] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 606.396726][ T9] usb 7-1: USB disconnect, device number 3 [ 606.472818][T15040] gspca_main: etoms-2.14.0 probing 102c:6251 [ 606.536304][T15040] usb 6-1: USB disconnect, device number 78 [ 606.853531][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 606.869794][T15040] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 607.002462][ T6330] udevd[6330]: symlink '../../loop6' '/dev/disk/by-diskseq/81.tmp-b7:6' failed: Read-only file system [ 607.036329][T15040] usb 6-1: Using ep0 maxpacket: 16 [ 607.043519][T15040] usb 6-1: config 0 has an invalid interface number: 124 but max is 0 [ 607.052096][T15040] usb 6-1: config 0 has no interface number 0 [ 607.060734][T15040] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db11, bcdDevice=f1.21 [ 607.070112][T15040] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.078432][T15040] usb 6-1: Product: syz [ 607.082682][T15040] usb 6-1: Manufacturer: syz [ 607.087456][T15040] usb 6-1: SerialNumber: syz [ 607.094362][T15040] usb 6-1: config 0 descriptor?? [ 607.108626][T15040] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (TH7579)' in warm state. [ 607.119125][T15040] dvb-usb: bulk message failed: -22 (2/0) [ 607.128321][T15040] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 607.138976][T15040] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (TH7579)) [ 607.148125][T15040] usb 6-1: media controller created [ 607.167899][T15040] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 607.192959][T15040] cxusb: set interface failed [ 607.197747][T15040] dvb-usb: bulk message failed: -22 (1/0) [ 607.249171][T15040] DVB: Unable to find symbol mt352_attach() [ 607.261584][T15040] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (TH7579)' [ 607.274784][ T3093] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 607.356282][T15040] rc_core: IR keymap rc-dvico-portable not found [ 607.363863][T15040] Registered IR keymap rc-empty [ 607.374256][T15040] rc rc0: DViCO FusionHDTV DVB-T USB (TH7579) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 607.387735][T15040] input: DViCO FusionHDTV DVB-T USB (TH7579) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input78 [ 607.400934][T15040] dvb-usb: schedule remote query interval to 100 msecs. [ 607.409402][T15040] dvb-usb: DViCO FusionHDTV DVB-T USB (TH7579) successfully initialized and connected. [ 607.434741][ T3093] usb 7-1: Using ep0 maxpacket: 8 [ 607.449076][ T3093] usb 7-1: unable to get BOS descriptor or descriptor too short [ 607.472552][ T3093] usb 7-1: config 11 has an invalid interface number: 244 but max is 0 [ 607.494663][ T3093] usb 7-1: config 11 has no interface number 0 [ 607.504862][ T3093] usb 7-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 607.518518][T15040] dvb-usb: bulk message failed: -22 (1/0) [ 607.544206][ T3093] usb 7-1: config 11 interface 244 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 607.566041][ T3093] usb 7-1: config 11 interface 244 has no altsetting 0 [ 607.590796][ T3093] usb 7-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 607.600110][ T3093] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.611281][ T3093] usb 7-1: Product: syz [ 607.619733][ T3093] usb 7-1: Manufacturer: syz [ 607.625528][ T3093] usb 7-1: SerialNumber: syz [ 607.645805][T15040] dvb-usb: bulk message failed: -22 (1/0) [ 607.719934][T15134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2522'. [ 607.733865][T15135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2522'. [ 607.755104][T15040] dvb-usb: bulk message failed: -22 (1/0) [ 607.793344][ T6750] udevd[6750]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 607.860616][T15117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.875208][T15040] dvb-usb: bulk message failed: -22 (1/0) [ 607.889933][T15117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.909641][T15117] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 607.928956][T15117] overlayfs: missing 'lowerdir' [ 607.953334][ T3093] peak_usb 7-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 607.961957][ T3093] peak_usb 7-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 607.995193][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 608.016741][ T3093] peak_usb 7-1:11.244: probe with driver peak_usb failed with error -71 [ 608.040473][ T3093] usb 7-1: USB disconnect, device number 4 [ 608.106969][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 608.204636][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 608.221024][T15149] netlink: 'syz.0.2526': attribute type 6 has an invalid length. [ 608.230264][T15040] dvb-usb: bulk message failed: -22 (1/0) [ 608.294092][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 608.344305][ T3093] dvb-usb: bulk message failed: -22 (1/0) [ 608.360126][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 608.412904][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 608.465710][ T3093] dvb-usb: bulk message failed: -22 (1/0) [ 608.522767][ T6330] udevd[6330]: symlink '../../loop6' '/dev/disk/by-diskseq/81.tmp-b7:6' failed: Read-only file system [ 608.576636][ T3093] dvb-usb: bulk message failed: -22 (1/0) [ 608.603083][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 608.637610][T15165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2532'. [ 608.685833][T15040] dvb-usb: bulk message failed: -22 (1/0) [ 608.806913][T15040] dvb-usb: bulk message failed: -22 (1/0) [ 608.905964][T15180] kAFS: unparsable volume name [ 608.914053][T15040] dvb-usb: bulk message failed: -22 (1/0) [ 609.029696][T15040] dvb-usb: bulk message failed: -22 (1/0) [ 609.163824][T15040] dvb-usb: bulk message failed: -22 (1/0) [ 609.294152][ T3093] dvb-usb: bulk message failed: -22 (1/0) [ 609.403714][ T3093] dvb-usb: bulk message failed: -22 (1/0) [ 609.514632][ T3093] dvb-usb: bulk message failed: -22 (1/0) [ 609.559383][ T9] usb 6-1: USB disconnect, device number 79 [ 609.706574][ T9] dvb-usb: DViCO FusionHDTV DVB-T USB (TH7579) successfully deinitialized and disconnected. [ 609.730233][T15229] netlink: 'syz.3.2550': attribute type 3 has an invalid length. [ 609.748874][T15229] netlink: 766 bytes leftover after parsing attributes in process `syz.3.2550'. [ 609.850408][T15229] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2550'. [ 609.891288][T15237] vivid-003: ================= START STATUS ================= [ 609.903825][T15237] vivid-003: Radio HW Seek Mode: Bounded [ 609.919838][T15237] vivid-003: Radio Programmable HW Seek: false [ 609.939283][T15237] vivid-003: RDS Rx I/O Mode: Block I/O [ 609.946371][T15237] vivid-003: Generate RBDS Instead of RDS: false [ 609.976222][T15237] vivid-003: RDS Reception: true [ 609.976339][T15237] vivid-003: RDS Program Type: 0 inactive [ 610.017949][T15229] hsr_slave_1 (unregistering): left promiscuous mode [ 610.018063][T15237] vivid-003: RDS PS Name: inactive [ 610.030993][T15237] vivid-003: RDS Radio Text: inactive [ 610.036702][T15237] vivid-003: RDS Traffic Announcement: false inactive [ 610.044029][ T9] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 610.047824][T15237] vivid-003: RDS Traffic Program: false inactive [ 610.061042][T15237] vivid-003: RDS Music: false inactive [ 610.071580][T15237] vivid-003: ================== END STATUS ================== [ 610.223433][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 610.240908][ T9] usb 6-1: config 249 has an invalid interface number: 212 but max is 0 [ 610.259279][ T9] usb 6-1: config 249 contains an unexpected descriptor of type 0x2, skipping [ 610.283507][ T9] usb 6-1: config 249 contains an unexpected descriptor of type 0x1, skipping [ 610.303121][ T9] usb 6-1: config 249 has no interface number 0 [ 610.310287][ T9] usb 6-1: config 249 interface 212 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 610.334264][ T9] usb 6-1: config 249 interface 212 has no altsetting 0 [ 610.345706][ T9] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=96.8f [ 610.356347][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.365045][ T9] usb 6-1: Product: syz [ 610.370137][ T9] usb 6-1: Manufacturer: syz [ 610.396737][ T9] usb 6-1: SerialNumber: syz [ 610.461349][T15267] overlayfs: failed to clone upperpath [ 610.467070][ T3093] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 610.622551][T15227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.644282][T15227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.653093][ T3093] usb 4-1: Using ep0 maxpacket: 32 [ 610.669802][ T3093] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 610.675760][ T9] peak_usb 6-1:249.212 can0: unable to request usb[type=0 value=1] err=-71 [ 610.684292][ T3093] usb 4-1: config 0 interface 0 has no altsetting 0 [ 610.692573][ T9] peak_usb 6-1:249.212: unable to read PCAN-USB Pro firmware info (err -71) [ 610.704560][ T3093] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 610.719007][ T3093] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.732233][ T3093] usb 4-1: config 0 descriptor?? [ 610.763280][ T5948] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 610.765439][ T9] peak_usb 6-1:249.212: probe with driver peak_usb failed with error -71 [ 610.787509][ T9] usb 6-1: USB disconnect, device number 80 [ 610.933249][ T5948] usb 7-1: Using ep0 maxpacket: 16 [ 610.947345][ T5948] usb 7-1: unable to get BOS descriptor or descriptor too short [ 610.957116][ T5948] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 610.964929][ T5948] usb 7-1: can't read configurations, error -71 [ 611.156250][ T3093] corsair-cpro 0003:1B1C:0C10.0044: unknown main item tag 0x0 [ 611.164043][ T3093] corsair-cpro 0003:1B1C:0C10.0044: unknown main item tag 0x0 [ 611.171549][ T3093] corsair-cpro 0003:1B1C:0C10.0044: unknown main item tag 0x0 [ 611.179420][ T3093] corsair-cpro 0003:1B1C:0C10.0044: unknown main item tag 0x0 [ 611.189509][ T3093] corsair-cpro 0003:1B1C:0C10.0044: unknown main item tag 0x0 [ 611.202437][ T3093] corsair-cpro 0003:1B1C:0C10.0044: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 611.268892][T15277] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2566'. [ 611.284996][T15277] 0ªî{: renamed from macvtap0 (while UP) [ 611.292825][ T3093] corsair-cpro 0003:1B1C:0C10.0044: probe with driver corsair-cpro failed with error -38 [ 611.306114][T15277] 0ªî{: entered allmulticast mode [ 611.311187][T15277] veth0_macvtap: entered allmulticast mode [ 611.324891][T15277] A link change request failed with some changes committed already. Interface 30ªî{ may have been left with an inconsistent configuration, please check. [ 611.372965][T15249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.388725][T15249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.401228][ T9] usb 4-1: USB disconnect, device number 2 [ 611.464994][T15283] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2567'. [ 611.475411][T15282] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2567'. [ 611.516612][T15286] fuse: Unknown parameter 'group_Gd' [ 611.784357][ T5868] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 611.942503][ T5868] usb 6-1: Using ep0 maxpacket: 16 [ 611.958864][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 611.959838][T15294] netlink: 'syz.3.2571': attribute type 10 has an invalid length. [ 611.974554][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 611.996442][ T5868] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 612.012229][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.023742][ T5868] usb 6-1: Product: syz [ 612.027997][ T5868] usb 6-1: Manufacturer: syz [ 612.035008][ T5868] usb 6-1: SerialNumber: syz [ 612.050364][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 612.067316][ T5868] usb 6-1: config 0 descriptor?? [ 612.084774][ T5868] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 612.094962][ T5868] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 612.302760][ T3093] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 612.465038][ T3093] usb 4-1: Using ep0 maxpacket: 8 [ 612.478829][ T3093] usb 4-1: config 148 has an invalid interface number: 46 but max is 0 [ 612.488004][ T3093] usb 4-1: config 148 has no interface number 0 [ 612.494811][ T3093] usb 4-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=30.8d [ 612.506304][ T3093] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.695766][ T5868] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 612.725085][ T3093] dvb-usb: found a 'DiBcom TFE7790P reference design' in warm state. [ 612.738605][ T3093] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 612.750310][ T3093] dvbdev: DVB: registering new adapter (DiBcom TFE7790P reference design) [ 612.759189][ T3093] usb 4-1: media controller created [ 612.784890][ T3093] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 612.848254][ T3093] DVB: Unable to find symbol dib7000p_attach() [ 612.854983][ T3093] dvb-usb: no frontend was attached by 'DiBcom TFE7790P reference design' [ 612.928791][T15298] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 612.937543][ T3093] rc_core: IR keymap rc-dib0700-rc5 not found [ 612.945606][ T3093] Registered IR keymap rc-empty [ 612.950670][ T3093] dvb-usb: could not initialize remote control. [ 612.959011][ T3093] dvb-usb: DiBcom TFE7790P reference design successfully initialized and connected. [ 613.119226][ T5868] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 613.129268][ T5868] em28xx 6-1:0.0: board has no eeprom [ 613.423871][ T5868] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 613.437274][ T5868] em28xx 6-1:0.0: dvb set to bulk mode. [ 613.444001][T12713] em28xx 6-1:0.0: Binding DVB extension [ 613.760575][ T5948] usb 6-1: USB disconnect, device number 81 [ 613.789032][ T5948] em28xx 6-1:0.0: Disconnecting em28xx [ 613.888582][T12713] em28xx 6-1:0.0: Registering input extension [ 613.898344][ T5948] em28xx 6-1:0.0: Closing input extension [ 613.947554][ T5948] em28xx 6-1:0.0: Freeing device [ 614.374458][T15341] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2579'. [ 614.971246][T12713] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 615.136715][ T3093] usb 4-1: USB disconnect, device number 3 [ 615.147202][T12713] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 615.171572][T12713] usb 7-1: config 4 interface 0 has no altsetting 0 [ 615.178309][T12713] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 615.205406][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 615.231656][T12713] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.299563][ T3093] dvb-usb: DiBcom TFE7790P reference design successfully deinitialized and disconnected. [ 615.458969][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 615.479961][T15353] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2583'. [ 615.516422][T15383] binder: 15382:15383 ioctl 40489426 200000000100 returned -22 [ 615.540030][T12713] usb 7-1: string descriptor 0 read error: -71 [ 615.556324][T12713] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 615.763106][ T5906] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 615.788507][T15389] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 615.930588][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 615.942493][ T5906] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 615.957315][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.982235][ T5906] usb 4-1: config 0 descriptor?? [ 616.003870][ T5906] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 616.150477][ T9] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 616.313829][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 616.335732][ T9] usb 6-1: config 64 has an invalid interface number: 130 but max is 0 [ 616.335799][ T9] usb 6-1: config 64 has no interface number 0 [ 616.335835][ T9] usb 6-1: config 64 interface 130 has no altsetting 0 [ 616.338756][ T9] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0122, bcdDevice=6d.4e [ 616.371978][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.372036][ T9] usb 6-1: Product: syz [ 616.372053][ T9] usb 6-1: Manufacturer: syz [ 616.372068][ T9] usb 6-1: SerialNumber: syz [ 616.394385][ T5906] gspca_nw80x: reg_r err -71 [ 616.394480][ T5906] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 616.399995][ T5906] usb 4-1: USB disconnect, device number 4 [ 616.448810][ T6250] udevd[6250]: symlink '../../loop7' '/dev/disk/by-diskseq/87.tmp-b7:7' failed: Read-only file system [ 616.615581][ T9] option 6-1:64.130: GSM modem (1-port) converter detected [ 616.637486][T12713] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 616.660914][T12713] stv0680 7-1:4.0: STV(e): camera ping failed!! [ 616.677456][ T9] usb 6-1: USB disconnect, device number 82 [ 616.690266][T12713] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 616.705037][T12713] stv0680 7-1:4.0: last error: 0, command = 0x0 [ 616.717692][T12713] usb 7-1: USB disconnect, device number 7 [ 616.732027][ T9] option 6-1:64.130: device disconnected [ 616.995613][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 617.155917][ T6750] udevd[6750]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 617.200036][T15443] netlink: 'syz.3.2601': attribute type 1 has an invalid length. [ 617.303244][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 617.342668][T15451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.354601][T15451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.559841][ T3093] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 617.561094][T12713] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 617.689578][ T9] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 617.722656][ T3093] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.724248][T12713] usb 4-1: config 0 has an invalid interface number: 93 but max is 0 [ 617.734980][ T3093] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 617.743659][T12713] usb 4-1: config 0 has no interface number 0 [ 617.751709][ T3093] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.766672][T12713] usb 4-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 617.769187][ T3093] usb 7-1: config 0 descriptor?? [ 617.783713][T12713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.793781][T12713] usb 4-1: Product: syz [ 617.797988][T12713] usb 4-1: Manufacturer: syz [ 617.803094][T12713] usb 4-1: SerialNumber: syz [ 617.814606][T12713] usb 4-1: config 0 descriptor?? [ 617.839577][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 617.846812][ T9] usb 6-1: config 53 has an invalid interface number: 240 but max is 0 [ 617.855808][ T9] usb 6-1: config 53 has no interface number 0 [ 617.862244][ T9] usb 6-1: too many endpoints for config 53 interface 240 altsetting 0: 234, using maximum allowed: 30 [ 617.874598][ T9] usb 6-1: config 53 interface 240 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 617.886557][ T9] usb 6-1: config 53 interface 240 altsetting 0 endpoint 0x82 has invalid maxpacket 33307, setting to 1024 [ 617.898179][ T9] usb 6-1: config 53 interface 240 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 617.908935][ T9] usb 6-1: config 53 interface 240 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 234 [ 617.925239][ T9] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=51.95 [ 617.934518][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.942820][ T9] usb 6-1: Product: syz [ 617.947046][ T9] usb 6-1: Manufacturer: syz [ 617.951991][ T9] usb 6-1: SerialNumber: syz [ 617.962691][T15455] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 617.986776][ T3093] usbhid 7-1:0.0: can't add hid device: -71 [ 617.993108][ T3093] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 618.005018][ T3093] usb 7-1: USB disconnect, device number 8 [ 618.026828][T12713] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 618.043497][T12713] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 618.055330][T12713] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 618.064827][T12713] usb 4-1: media controller created [ 618.075991][T12713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 618.132526][T12713] DVB: Unable to find symbol dib7000p_attach() [ 618.138955][T12713] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 618.148663][T12713] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 618.158172][T12713] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 618.167348][T12713] usb 4-1: media controller created [ 618.178308][T12713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 618.197157][T12713] dib0700: the master dib7090 has to be initialized first [ 618.204579][T12713] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 618.220436][ T9] kvaser_usb 6-1:53.240: error -ENODEV: Cannot get usb endpoint(s) [ 618.244874][ T9] usb 6-1: USB disconnect, device number 83 [ 618.281420][T15449] devtmpfs: Bad value for 'nr_inodes' [ 618.383453][T12713] rc_core: IR keymap rc-dib0700-rc5 not found [ 618.390018][T12713] Registered IR keymap rc-empty [ 618.395073][T12713] dvb-usb: could not initialize remote control. [ 618.402011][T12713] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 618.415682][T12713] usb 4-1: USB disconnect, device number 5 [ 618.471463][T12713] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 618.689127][ T9] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 618.839059][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 618.848316][ T9] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 618.858791][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.868128][ T9] usb 6-1: Product: syz [ 618.873744][ T9] usb 6-1: Manufacturer: syz [ 618.878635][ T9] usb 6-1: SerialNumber: syz [ 618.883529][T12713] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 618.897831][ T9] usb 6-1: config 0 descriptor?? [ 618.913777][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 618.948360][ T6750] udevd[6750]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 619.049187][T12713] usb 7-1: Using ep0 maxpacket: 8 [ 619.056200][T12713] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 619.067343][T12713] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 619.079406][T12713] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 619.090969][T12713] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 619.102603][T12713] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 619.122032][T12713] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 619.131304][T12713] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.139453][T12713] usb 7-1: Product: syz [ 619.143679][T12713] usb 7-1: Manufacturer: syz [ 619.148310][T12713] usb 7-1: SerialNumber: syz [ 619.156190][T12713] usb 7-1: config 0 descriptor?? [ 619.178847][T15040] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 619.232240][T12713] rc_core: IR keymap rc-imon-rsc not found [ 619.238344][T12713] Registered IR keymap rc-empty [ 619.244720][T12713] rc rc0: iMON Station as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 619.255777][T12713] input: iMON Station as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input83 [ 619.340445][T15040] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 619.354807][T15040] usb 4-1: config 0 has no interface number 0 [ 619.361547][T15040] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 619.376863][T15040] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 619.379377][ T5906] usb 7-1: USB disconnect, device number 9 [ 619.391925][T15040] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 619.409552][T15040] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.417635][T15040] usb 4-1: Product: syz [ 619.432862][T15040] usb 4-1: Manufacturer: syz [ 619.437834][T15040] usb 4-1: SerialNumber: syz [ 619.458842][T15040] usb 4-1: config 0 descriptor?? [ 619.466749][T15476] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 619.477125][T15040] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 619.492375][T15040] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 619.641338][ T9] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input84 [ 619.842987][T15481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.852442][T15481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.894326][ T9] usb 4-1: USB disconnect, device number 6 [ 619.907748][ T9] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 619.922790][ T9] cyberjack 4-1:0.69: device disconnected [ 620.218454][T15040] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 620.373552][T15040] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 620.383158][T15040] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.391755][T15040] usb 7-1: Product: syz [ 620.396529][T15040] usb 7-1: Manufacturer: syz [ 620.401299][T15040] usb 7-1: SerialNumber: syz [ 620.455410][ T6750] udevd[6750]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 620.718798][ T5906] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 620.761541][T15495] futex_wake_op: syz.0.2620 tries to shift op by -1; fix this program [ 620.823408][T15497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2621'. [ 620.880569][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 620.902283][ T5906] usb 4-1: config 5 has an invalid interface number: 168 but max is 0 [ 620.910932][ T5906] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 620.921810][ T5906] usb 4-1: config 5 has no interface number 0 [ 620.921836][T15497] bond0: (slave bond_slave_0): Releasing backup interface [ 620.928394][ T5906] usb 4-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 620.948686][ T5906] usb 4-1: config 5 interface 168 altsetting 7 endpoint 0x8B has invalid wMaxPacketSize 0 [ 620.959175][ T5906] usb 4-1: config 5 interface 168 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 620.972601][ T5906] usb 4-1: config 5 interface 168 has no altsetting 0 [ 620.983192][ T5906] usb 4-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 620.992987][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.002245][ T5906] usb 4-1: Product: syz [ 621.006453][ T5906] usb 4-1: Manufacturer: syz [ 621.012416][ T5906] usb 4-1: SerialNumber: syz [ 621.234773][T15491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.244311][T15491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.270320][T15491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.280903][T15491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.293995][ T5906] pn533_usb 4-1:5.168: NFC: Could not find bulk-in or bulk-out endpoint [ 621.316344][ T5906] usb 4-1: USB disconnect, device number 7 [ 621.400911][ T5926] usb 6-1: USB disconnect, device number 84 [ 621.787631][ T5926] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 621.824253][T15040] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 621.884605][ T6750] udevd[6750]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 621.937530][ T5926] usb 6-1: Using ep0 maxpacket: 32 [ 621.955724][ T5926] usb 6-1: config 0 has an invalid interface number: 54 but max is 0 [ 621.960786][ T6750] udevd[6750]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 621.975047][ T5926] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.993132][ T5926] usb 6-1: config 0 has no interface number 0 [ 621.999689][ T5926] usb 6-1: too many endpoints for config 0 interface 54 altsetting 205: 134, using maximum allowed: 30 [ 622.012743][ T5926] usb 6-1: config 0 interface 54 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 134 [ 622.026361][ T5926] usb 6-1: config 0 interface 54 has no altsetting 0 [ 622.040984][T15040] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 622.045124][ T5926] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 622.060740][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.076897][T15040] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 622.080305][ T5926] usb 6-1: Product: syz [ 622.090704][T15040] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 622.093551][ T5926] usb 6-1: Manufacturer: syz [ 622.104038][T15040] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 622.118837][ T5926] usb 6-1: SerialNumber: syz [ 622.121322][T15040] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 622.127112][ T5926] usb 6-1: config 0 descriptor?? [ 622.146776][ T5926] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 622.150070][T15040] usb 7-1: USB disconnect, device number 10 [ 622.154933][ T5926] usb 6-1: MIDIStreaming interface descriptor not found [ 622.297379][T12713] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 622.349890][ T5906] usb 6-1: USB disconnect, device number 85 [ 622.459632][T12713] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 622.471605][T12713] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 622.481690][T12713] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 622.490926][T12713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.501755][T15510] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 622.514860][T12713] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 622.625984][T15515] fuse: Unknown parameter '' [ 622.715863][T15510] dvmrp1: left allmulticast mode [ 622.796567][T12713] usb 4-1: USB disconnect, device number 8 [ 622.957051][ T3093] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 623.126937][ T3093] usb 7-1: Using ep0 maxpacket: 8 [ 623.141402][ T3093] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.163113][ T3093] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 623.189616][ T3093] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.210102][ T3093] usb 7-1: config 0 descriptor?? [ 623.224871][ T3093] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 623.514674][T15552] Bluetooth: MGMT ver 1.23 [ 623.522216][ T6750] udevd[6750]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 623.602310][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 624.155027][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 624.386836][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 624.429185][T15519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.438736][T15519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.452110][ T3093] gspca_vc032x: reg_w err -71 [ 624.468237][ T3093] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 624.487117][ T3093] usb 7-1: USB disconnect, device number 11 [ 624.548436][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.558765][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 624.576974][ T9] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 624.586429][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.607642][ T9] usb 4-1: config 0 descriptor?? [ 624.622921][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.629456][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.794872][ T52] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 624.798556][ T52] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 624.817324][ T9] Bluetooth: Can't get version to change to load ram patch err [ 624.834809][ T9] Bluetooth: Loading patch file failed [ 624.841110][ T9] ath3k 4-1:0.0: probe with driver ath3k failed with error -121 [ 625.027774][ T7746] usb 4-1: USB disconnect, device number 9 [ 625.081370][T15599] netlink: 'syz.0.2654': attribute type 5 has an invalid length. [ 625.089692][T15599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2654'. [ 625.100118][ T9] usb 6-1: new full-speed USB device number 86 using dummy_hcd [ 625.269684][ T9] usb 6-1: config 16 has an invalid interface number: 19 but max is 0 [ 625.278910][ T9] usb 6-1: config 16 has no interface number 0 [ 625.289380][ T9] usb 6-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 625.298966][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.307056][ T9] usb 6-1: Product: syz [ 625.311232][ T9] usb 6-1: Manufacturer: syz [ 625.315891][ T9] usb 6-1: SerialNumber: syz [ 625.317305][ T3093] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 625.485764][ T3093] usb 7-1: Using ep0 maxpacket: 16 [ 625.494383][ T3093] usb 7-1: config 0 descriptor has 1 excess byte, ignoring [ 625.501909][ T3093] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 625.513163][ T3093] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 625.523214][ T3093] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 188 [ 625.547015][ T3093] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 625.565699][ T3093] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.573779][ T3093] usb 7-1: Product: syz [ 625.579321][ T3093] usb 7-1: Manufacturer: syz [ 625.584432][ T3093] usb 7-1: SerialNumber: syz [ 625.596986][ T3093] usb 7-1: config 0 descriptor?? [ 625.608366][T15597] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 625.635814][T15597] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 625.670509][ C1] mcba_usb 7-1:0.0 can0: Tx URB aborted (-71) [ 625.676994][ T6235] udevd[6235]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 625.693310][ T3093] mcba_usb 7-1:0.0: Microchip CAN BUS Analyzer connected [ 625.700535][ C1] mcba_usb 7-1:0.0 can0: Tx URB aborted (-71) [ 625.792829][ T9] usb 6-1: USB disconnect, device number 86 [ 625.853954][ T6330] udevd[6330]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 625.873819][ T3093] usb 7-1: USB disconnect, device number 12 [ 625.903901][ T3093] mcba_usb 7-1:0.0 can0: device disconnected [ 626.440732][T15633] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 626.571686][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 626.666713][T15641] batadv_slave_0: entered promiscuous mode [ 626.692014][T15636] batadv_slave_0: left promiscuous mode [ 626.819668][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 626.855137][ T3093] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 627.008477][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 627.050655][ T3093] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 627.072308][ T3093] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.095534][ T3093] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 627.104723][ T3093] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.136884][ T3093] usb 7-1: config 0 descriptor?? [ 627.156638][ T3093] hub 7-1:0.0: USB hub found [ 627.245244][ T7746] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 627.349729][ T3093] hub 7-1:0.0: 3 ports detected [ 627.384779][ T7746] usb 4-1: device descriptor read/64, error -71 [ 627.532559][T15679] virtiofs: Bad value for 'dax' [ 627.541964][ T52] Bluetooth: hci4: unexpected event 0x2f length: 763 > 260 [ 627.563480][ T3093] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 627.588915][ T3093] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 627.606285][ T3093] usbhid 7-1:0.0: can't add hid device: -71 [ 627.612528][ T3093] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 627.635333][ T7746] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 627.671351][ T3093] usb 7-1: USB disconnect, device number 13 [ 627.774682][ T7746] usb 4-1: device descriptor read/64, error -71 [ 627.897725][ T7746] usb usb4-port1: attempt power cycle [ 628.122281][ T5906] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 628.254684][ T7746] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 628.295288][ T7746] usb 4-1: device descriptor read/8, error -71 [ 628.308488][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 628.319091][ T5906] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 628.337903][ T5906] usb 6-1: config 0 has no interface number 0 [ 628.354306][ T5906] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 628.374228][ T5906] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 628.394194][ T5906] usb 6-1: config 0 interface 126 has no altsetting 0 [ 628.404763][ T5906] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 628.423471][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.432121][ T5906] usb 6-1: Product: syz [ 628.434347][ T3093] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 628.436755][ T5906] usb 6-1: Manufacturer: syz [ 628.449042][ T5906] usb 6-1: SerialNumber: syz [ 628.459378][ T5906] usb 6-1: config 0 descriptor?? [ 628.466440][T15694] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 628.475732][T15694] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 628.534179][ T7746] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 628.557538][ T7746] usb 4-1: device descriptor read/8, error -71 [ 628.607440][ T3093] usb 7-1: config 0 has an invalid interface number: 254 but max is 0 [ 628.616491][ T3093] usb 7-1: config 0 has no interface number 0 [ 628.622672][ T3093] usb 7-1: config 0 interface 254 has no altsetting 0 [ 628.644623][ T3093] usb 7-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice=54.79 [ 628.653864][ T3093] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.661950][ T3093] usb 7-1: Product: syz [ 628.668684][ T3093] usb 7-1: Manufacturer: syz [ 628.673513][ T3093] usb 7-1: SerialNumber: syz [ 628.680548][ T7746] usb usb4-port1: unable to enumerate USB device [ 628.695813][ T3093] usb 7-1: config 0 descriptor?? [ 628.899509][ T5906] ir_usb 6-1:0.126: IR Dongle converter detected [ 628.911267][T15700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.927036][T15700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.948333][ T3093] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 628.988197][ T3093] snd-usb-audio 7-1:0.254: probe with driver snd-usb-audio failed with error -2 [ 629.007199][ T3093] usb 7-1: USB disconnect, device number 14 [ 629.040405][ T6750] udevd[6750]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.254/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 629.101389][ T5906] usb 6-1: IR Dongle converter now attached to ttyUSB0 [ 629.313482][T15694] netlink: 'syz.5.2677': attribute type 1 has an invalid length. [ 629.336583][T15694] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2677'. [ 629.358609][T15694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.384102][T15694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.764190][ T5906] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 629.903564][ T5906] usb 7-1: device descriptor read/64, error -71 [ 630.067111][T15723] batadv_slave_1: entered promiscuous mode [ 630.073238][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 630.080909][T15723] batadv_slave_1: left promiscuous mode [ 630.143438][ T5906] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 630.275584][ T5906] usb 7-1: device descriptor read/64, error -71 [ 630.383818][ T5906] usb usb7-port1: attempt power cycle [ 630.723129][ T5906] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 630.744165][ T5906] usb 7-1: device descriptor read/8, error -71 [ 630.803120][ T3093] usb 6-1: USB disconnect, device number 87 [ 630.822591][ T3093] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 630.837957][ T3093] ir_usb 6-1:0.126: device disconnected [ 630.870599][T15737] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2695'. [ 630.938493][T15742] netlink: 'syz.5.2696': attribute type 32 has an invalid length. [ 630.983072][ T5906] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 631.004564][ T5906] usb 7-1: device descriptor read/8, error -71 [ 631.044782][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 631.097501][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 631.114977][ T5906] usb usb7-port1: unable to enumerate USB device [ 631.282924][ T3093] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 631.432872][ T3093] usb 6-1: Using ep0 maxpacket: 16 [ 631.439426][ T3093] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 631.447760][ T3093] usb 6-1: config 0 has no interface number 0 [ 631.453902][ T3093] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 631.463856][ T3093] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 631.477305][ T3093] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 631.486934][ T3093] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.495040][ T3093] usb 6-1: Product: syz [ 631.499231][ T3093] usb 6-1: Manufacturer: syz [ 631.503881][ T3093] usb 6-1: SerialNumber: syz [ 631.511507][ T3093] usb 6-1: config 0 descriptor?? [ 631.517738][T15743] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 631.525556][T15743] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 631.676859][ T6750] udevd[6750]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 631.734988][T15743] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 631.743654][T15743] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 631.759852][ T6750] udevd[6750]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 631.791898][ T3093] asix 6-1:0.251: probe with driver asix failed with error -71 [ 631.861548][ T3093] usb 6-1: USB disconnect, device number 88 [ 631.932021][T15758] block nbd3: Attempted send on invalid socket [ 631.940594][T15758] blk_print_req_error: 138 callbacks suppressed [ 631.940616][T15758] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 631.959363][T15758] block nbd3: Attempted send on invalid socket [ 631.966178][T15758] I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 631.978494][T15758] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 632.013016][T15768] 9pnet_fd: Insufficient options for proto=fd [ 632.038894][T15758] block nbd3: Send control failed (result -32) [ 632.062746][T15758] block nbd3: Request send failed, requeueing [ 632.073072][ T56] block nbd3: Dead connection, failed to find a fallback [ 632.080497][ T56] block nbd3: shutting down sockets [ 632.090656][ T56] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 632.103095][T15758] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 632.115009][T15758] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 632.127762][T15758] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 632.137885][T15758] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 632.148045][T15758] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 632.157803][T15758] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 632.170576][T15758] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 632.180858][T15758] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 632.190775][T15758] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 632.201360][T15758] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 632.211485][T15758] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 632.222109][T15758] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 632.232152][T15758] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 632.243294][T15758] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 632.253134][T15758] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 632.408531][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 632.612309][ T3093] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 632.682162][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 632.765056][ T3093] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 632.775039][ T3093] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 632.788427][ T3093] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 632.797626][ T3093] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.805904][ T3093] usb 6-1: Product: syz [ 632.810326][ T3093] usb 6-1: Manufacturer: syz [ 632.815002][ T3093] usb 6-1: SerialNumber: syz [ 632.822975][ T3093] usb 6-1: config 0 descriptor?? [ 632.852872][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 632.860234][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 632.873051][ T9] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 632.884356][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.892561][ T9] usb 4-1: Product: syz [ 632.896924][ T9] usb 4-1: Manufacturer: syz [ 632.901638][ T9] usb 4-1: SerialNumber: syz [ 632.912626][ T9] usb 4-1: config 0 descriptor?? [ 632.920616][ T9] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 632.930011][ T9] usb 4-1: Detected FT232R [ 633.611174][ T3093] usb 6-1: USB disconnect, device number 89 [ 633.654721][ T6216] udevd[6216]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 633.794889][T15792] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2713'. [ 634.630379][T15801] cgroup: none used incorrectly [ 635.091750][T15813] netlink: zone id is out of range [ 635.097048][T15813] netlink: zone id is out of range [ 635.104338][T15813] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2721'. [ 635.151333][ T3093] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 635.310856][ T3093] usb 6-1: Using ep0 maxpacket: 32 [ 635.318236][ T3093] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 635.326796][ T3093] usb 6-1: config 0 has no interface number 0 [ 635.335862][ T3093] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 635.349583][ T3093] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.357692][ T3093] usb 6-1: Product: syz [ 635.361975][ T3093] usb 6-1: Manufacturer: syz [ 635.366606][ T3093] usb 6-1: SerialNumber: syz [ 635.375723][ T3093] usb 6-1: config 0 descriptor?? [ 635.385315][ T3093] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 635.439619][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 635.449272][ T9] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 635.459139][ T9] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 635.476200][ T9] usb 4-1: USB disconnect, device number 14 [ 635.489238][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 635.501316][ T9] ftdi_sio 4-1:0.0: device disconnected [ 635.578475][ T6235] udevd[6235]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 635.607695][ T3093] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 635.648914][ T3093] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 635.776763][T15824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.787781][T15824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.928780][T15830] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.938127][T15830] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.948455][T15830] bridge0: entered promiscuous mode [ 635.954668][T15830] bridge0: entered allmulticast mode [ 635.970818][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 636.137244][ T9] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 636.149397][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.158394][ T9] usb 4-1: Product: syz [ 636.163029][ T9] usb 4-1: Manufacturer: syz [ 636.167669][ T9] usb 4-1: SerialNumber: syz [ 636.176770][ T9] usb 4-1: config 0 descriptor?? [ 636.193174][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 636.199150][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 636.207345][ T9] f81232 4-1:0.0: f81534a converter detected [ 636.230795][ T3093] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 636.399080][ T9] f81534a ttyUSB2: f81232_set_register failed status: -71 [ 636.408422][ T9] f81534a ttyUSB2: probe with driver f81534a failed with error -5 [ 636.412129][ T3093] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 636.428602][ T3093] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 636.439665][ T3093] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 636.447803][ T9] usb 4-1: USB disconnect, device number 15 [ 636.463413][ T3093] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 636.471624][ T9] f81232 4-1:0.0: device disconnected [ 636.473555][ T3093] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 636.494355][ T3093] usb 7-1: Product: syz [ 636.498759][ T3093] usb 7-1: Manufacturer: syz [ 636.503949][ T3093] usb 7-1: SerialNumber: syz [ 636.552478][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 636.552956][T12713] usb 6-1: USB disconnect, device number 90 [ 636.577017][T12713] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 636.603839][T12713] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 636.627224][T12713] quatech2 6-1:0.51: device disconnected [ 636.724073][ T3093] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 636.764913][ T3093] usb 7-1: USB disconnect, device number 19 [ 636.796880][ T3093] usblp0: removed [ 636.859144][T15853] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2732'. [ 636.861880][T15854] netlink: 14505 bytes leftover after parsing attributes in process `syz.5.2733'. [ 636.989194][T15857] block nbd5: Attempted send on invalid socket [ 636.997041][T15857] blk_print_req_error: 2 callbacks suppressed [ 636.997063][T15857] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 637.021792][T15857] hpfs: hpfs_map_sector(): read error [ 637.116527][T15865] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2737'. [ 637.143007][T15867] befs: (nbd5): No write support. Marking filesystem read-only [ 637.155338][T15867] block nbd5: Attempted send on invalid socket [ 637.158285][T15865] 0·: renamed from hsr0 [ 637.177470][T15867] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 637.201466][T15865] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 637.205007][T15867] befs: (nbd5): unable to read superblock [ 637.229119][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 637.248396][T15865] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 637.248454][T15865] 0·: entered allmulticast mode [ 637.248471][T15865] hsr_slave_0: entered allmulticast mode [ 637.248487][T15865] hsr_slave_1: entered allmulticast mode [ 637.256362][T15873] netlink: 'syz.3.2739': attribute type 64 has an invalid length. [ 637.256389][T15873] netlink: 'syz.3.2739': attribute type 4 has an invalid length. [ 637.256405][T15873] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2739'. [ 637.257330][T15865] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 637.290401][ T7746] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 637.332029][T15874] 9pnet: Could not find request transport: Œ³´lfdno=0x0000000000000006 [ 637.457409][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 637.689643][ T3093] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 637.842283][ T3093] usb 4-1: unable to get BOS descriptor or descriptor too short [ 637.852010][ T3093] usb 4-1: not running at top speed; connect to a high speed hub [ 637.861757][ T3093] usb 4-1: config 1 interface 0 has no altsetting 0 [ 637.872466][ T3093] usb 4-1: string descriptor 0 read error: -22 [ 637.878825][ T3093] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 637.888363][ T3093] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.907174][ T3093] usblp0: Disabling reads from problematic bidirectional printer [ 638.106770][ T3093] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 126 proto 2 vid 0x03F0 pid 0x0004 [ 638.125517][ T3093] usb 4-1: USB disconnect, device number 16 [ 638.136675][ T3093] usblp0: removed [ 638.170640][ T7746] usb 7-1: device descriptor read/64, error -71 [ 638.419249][ T7746] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 638.549145][ T5866] usb 6-1: new full-speed USB device number 91 using dummy_hcd [ 638.569153][ T7746] usb 7-1: Using ep0 maxpacket: 16 [ 638.576601][ T7746] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.589370][ T7746] usb 7-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 638.598621][ T7746] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.606742][ T7746] usb 7-1: Product: syz [ 638.611963][ T7746] usb 7-1: Manufacturer: syz [ 638.616594][ T7746] usb 7-1: SerialNumber: syz [ 638.625279][ T7746] usb 7-1: config 0 descriptor?? [ 638.649991][ T7746] cypress_m8 7-1:0.0: Nokia CA-42 V2 Adapter converter detected [ 638.664198][ T7746] nokiaca42v2 ttyUSB0: required endpoint is missing [ 638.675718][ T6750] udevd[6750]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 638.702263][ T5866] usb 6-1: config 0 has an invalid interface number: 230 but max is 0 [ 638.710750][ T5866] usb 6-1: config 0 has no interface number 0 [ 638.716993][ T5866] usb 6-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 638.730356][ T5866] usb 6-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 638.742298][ T5866] usb 6-1: config 0 interface 230 has no altsetting 0 [ 638.752847][ T5866] usb 6-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 638.772604][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 638.784087][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.793152][ T5866] usb 6-1: Product: syz [ 638.797466][ T5866] usb 6-1: Manufacturer: syz [ 638.802286][ T5866] usb 6-1: SerialNumber: syz [ 638.809257][ T5866] usb 6-1: config 0 descriptor?? [ 638.815175][T15890] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 638.822860][T15890] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 638.832185][ T5866] ums-usbat 6-1:0.230: USB Mass Storage device detected [ 638.842372][ T5866] ums-usbat 6-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 638.862702][ T7746] usb 7-1: USB disconnect, device number 21 [ 638.872403][ T7746] cypress_m8 7-1:0.0: device disconnected [ 639.009018][T12713] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 639.036308][T15890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.046431][T15890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.092908][ T5866] ums-usbat 6-1:0.230: probe with driver ums-usbat failed with error -5 [ 639.112322][ T5866] usb 6-1: USB disconnect, device number 91 [ 639.140452][T12713] usb 4-1: device descriptor read/64, error -71 [ 639.378852][T12713] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 639.521457][T12713] usb 4-1: device descriptor read/64, error -71 [ 639.587551][T15905] kvm: user requested TSC rate below hardware speed [ 639.639148][T12713] usb usb4-port1: attempt power cycle [ 640.010243][T12713] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 640.039608][T12713] usb 4-1: device descriptor read/8, error -71 [ 640.045941][ T5906] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 640.088582][ T9] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 640.178414][ T5906] usb 7-1: device descriptor read/64, error -71 [ 640.272693][ T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 640.282291][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.291138][T12713] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 640.298776][ T9] usb 6-1: Product: syz [ 640.303053][ T9] usb 6-1: Manufacturer: syz [ 640.307653][ T9] usb 6-1: SerialNumber: syz [ 640.316408][ T9] usb 6-1: config 0 descriptor?? [ 640.324830][ T9] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 640.332255][T12713] usb 4-1: device descriptor read/8, error -71 [ 640.438339][ T5906] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 640.452211][T12713] usb usb4-port1: unable to enumerate USB device [ 640.578277][ T5906] usb 7-1: device descriptor read/64, error -71 [ 640.710843][ T5906] usb usb7-port1: attempt power cycle [ 640.731291][ T9] input: sonixb as /devices/platform/dummy_hcd.5/usb6/6-1/input/input86 [ 640.933569][T15914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.943041][T15914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.963547][ T9] usb 6-1: USB disconnect, device number 92 [ 641.047906][ T5906] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 641.068581][ T5906] usb 7-1: device descriptor read/8, error -71 [ 641.307848][ T5906] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 641.329064][ T5906] usb 7-1: device descriptor read/8, error -71 [ 641.439586][ T5906] usb usb7-port1: unable to enumerate USB device [ 641.503771][T15936] binder_alloc: 15935: pid 15935 spamming oneway? 1 buffers allocated for a total size of 4096 [ 641.820054][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 641.829946][T15945] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 641.845568][T15945] overlayfs: overlapping lowerdir path [ 641.845649][ T5906] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 641.901455][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 642.022439][ T5906] usb 6-1: Using ep0 maxpacket: 8 [ 642.040868][ T5906] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 642.047527][ T5865] Bluetooth: hci2: command 0x0405 tx timeout [ 642.057790][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 642.059966][ T52] [ 642.071110][ T52] ====================================================== [ 642.078146][ T52] WARNING: possible circular locking dependency detected [ 642.085184][ T52] syzkaller #0 Not tainted [ 642.089707][ T52] ------------------------------------------------------ [ 642.096763][ T52] kworker/u9:0/52 is trying to acquire lock: [ 642.102844][ T52] ffff88801b6ffa20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 642.113412][ T52] [ 642.113412][ T52] but task is already holding lock: [ 642.120789][ T52] ffff88801b6ff988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 642.131104][ T52] [ 642.131104][ T52] which lock already depends on the new lock. [ 642.131104][ T52] [ 642.141623][ T52] [ 642.141623][ T52] the existing dependency chain (in reverse order) is: [ 642.150751][ T52] [ 642.150751][ T52] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 642.158963][ T52] lock_acquire+0x120/0x360 [ 642.164021][ T52] down_write+0x96/0x1f0 [ 642.168815][ T52] kernfs_add_one+0x41/0x520 [ 642.173964][ T52] kernfs_create_dir_ns+0xde/0x130 [ 642.179615][ T52] internal_create_group+0x419/0x1110 [ 642.185527][ T52] cpuhp_invoke_callback+0x445/0x860 [ 642.191372][ T52] cpuhp_issue_call+0x430/0x7a0 [ 642.196776][ T52] __cpuhp_setup_state_cpuslocked+0x3df/0x6c0 [ 642.203396][ T52] __cpuhp_setup_state+0x3f/0x60 [ 642.208883][ T52] do_one_initcall+0x236/0x820 [ 642.214192][ T52] do_initcall_level+0x104/0x190 [ 642.219680][ T52] do_initcalls+0x59/0xa0 [ 642.224555][ T52] kernel_init_freeable+0x334/0x4b0 [ 642.230388][ T52] kernel_init+0x1d/0x1d0 [ 642.235263][ T52] ret_from_fork+0x4bc/0x870 [ 642.240394][ T52] ret_from_fork_asm+0x1a/0x30 [ 642.245700][ T52] [ 642.245700][ T52] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 642.253663][ T52] [ 642.253663][ T52] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 642.261419][ T52] lock_acquire+0x120/0x360 [ 642.266633][ T52] cpus_read_lock+0x42/0x160 [ 642.271898][ T52] static_key_slow_inc+0x12/0x30 [ 642.277461][ T52] setup_udp_tunnel_sock+0x34f/0x550 [ 642.283282][ T52] l2tp_tunnel_register+0xcb6/0x1320 [ 642.289111][ T52] pppol2tp_connect+0x87c/0x1750 [ 642.294592][ T52] __sys_connect+0x316/0x440 [ 642.299719][ T52] __x64_sys_connect+0x7a/0x90 [ 642.305030][ T52] do_syscall_64+0xfa/0xfa0 [ 642.310162][ T52] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.316593][ T52] [ 642.316593][ T52] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 642.324279][ T52] lock_acquire+0x120/0x360 [ 642.329322][ T52] lock_sock_nested+0x48/0x100 [ 642.334623][ T52] tcp_sendmsg+0x21/0x50 [ 642.339402][ T52] __sock_sendmsg+0x19c/0x270 [ 642.344725][ T52] sock_sendmsg+0x158/0x230 [ 642.349767][ T52] __sock_xmit+0x1c1/0x470 [ 642.354826][ T52] nbd_send_cmd+0x863/0x1ba0 [ 642.360046][ T52] nbd_queue_rq+0xcdb/0xf10 [ 642.365093][ T52] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 642.371267][ T52] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 642.378135][ T52] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 642.384742][ T52] blk_mq_run_hw_queue+0x348/0x4f0 [ 642.390401][ T52] blk_mq_dispatch_list+0xd0c/0xe00 [ 642.396135][ T52] blk_mq_flush_plug_list+0x469/0x550 [ 642.402043][ T52] __blk_flush_plug+0x3d3/0x4b0 [ 642.407433][ T52] __submit_bio+0x2d3/0x5a0 [ 642.412558][ T52] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 642.418897][ T52] __bread_gfp+0x216/0x3c0 [ 642.423849][ T52] udf_read_tagged+0xad/0xe00 [ 642.429064][ T52] udf_check_anchor_block+0x99/0x550 [ 642.434980][ T52] udf_load_vrs+0xa83/0xf20 [ 642.440027][ T52] udf_fill_super+0x5ad/0x17a0 [ 642.445333][ T52] get_tree_bdev_flags+0x40e/0x4d0 [ 642.451078][ T52] vfs_get_tree+0x92/0x2b0 [ 642.456034][ T52] do_new_mount+0x302/0xa10 [ 642.461084][ T52] __se_sys_mount+0x313/0x410 [ 642.466317][ T52] do_syscall_64+0xfa/0xfa0 [ 642.471463][ T52] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.477896][ T52] [ 642.477896][ T52] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 642.485566][ T52] lock_acquire+0x120/0x360 [ 642.490642][ T52] __mutex_lock+0x187/0x1350 [ 642.495775][ T52] nbd_queue_rq+0x257/0xf10 [ 642.500831][ T52] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 642.506911][ T52] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 642.513784][ T52] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 642.520312][ T52] blk_mq_run_hw_queue+0x348/0x4f0 [ 642.525965][ T52] blk_mq_dispatch_list+0xd0c/0xe00 [ 642.531703][ T52] blk_mq_flush_plug_list+0x469/0x550 [ 642.537611][ T52] __blk_flush_plug+0x3d3/0x4b0 [ 642.543002][ T52] __submit_bio+0x2d3/0x5a0 [ 642.548213][ T52] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 642.554380][ T52] block_read_full_folio+0x599/0x830 [ 642.560201][ T52] filemap_read_folio+0x117/0x380 [ 642.565770][ T52] do_read_cache_folio+0x350/0x590 [ 642.571437][ T52] read_part_sector+0xb6/0x2b0 [ 642.576736][ T52] adfspart_check_ICS+0xa4/0xa50 [ 642.582217][ T52] bdev_disk_changed+0x75f/0x14b0 [ 642.587782][ T52] blkdev_get_whole+0x380/0x510 [ 642.593355][ T52] bdev_open+0x31e/0xd30 [ 642.598144][ T52] blkdev_open+0x457/0x600 [ 642.603106][ T52] do_dentry_open+0x953/0x13f0 [ 642.608406][ T52] vfs_open+0x3b/0x340 [ 642.613015][ T52] path_openat+0x2ee5/0x3830 [ 642.618143][ T52] do_filp_open+0x1fa/0x410 [ 642.623279][ T52] do_sys_openat2+0x121/0x1c0 [ 642.628489][ T52] __x64_sys_openat+0x138/0x170 [ 642.633874][ T52] do_syscall_64+0xfa/0xfa0 [ 642.638920][ T52] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.645351][ T52] [ 642.645351][ T52] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 642.652677][ T52] lock_acquire+0x120/0x360 [ 642.657824][ T52] __mutex_lock+0x187/0x1350 [ 642.662958][ T52] nbd_queue_rq+0xc8/0xf10 [ 642.667928][ T52] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 642.674097][ T52] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 642.680965][ T52] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 642.687486][ T52] blk_mq_run_hw_queue+0x348/0x4f0 [ 642.693151][ T52] blk_mq_dispatch_list+0xd0c/0xe00 [ 642.698892][ T52] blk_mq_flush_plug_list+0x469/0x550 [ 642.704807][ T52] __blk_flush_plug+0x3d3/0x4b0 [ 642.710200][ T52] __submit_bio+0x2d3/0x5a0 [ 642.715238][ T52] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 642.721403][ T52] __bread_gfp+0x216/0x3c0 [ 642.726360][ T52] udf_load_vrs+0x365/0xf20 [ 642.731496][ T52] udf_fill_super+0x5ad/0x17a0 [ 642.736811][ T52] get_tree_bdev_flags+0x40e/0x4d0 [ 642.742464][ T52] vfs_get_tree+0x92/0x2b0 [ 642.747443][ T52] do_new_mount+0x302/0xa10 [ 642.752483][ T52] __se_sys_mount+0x313/0x410 [ 642.757683][ T52] do_syscall_64+0xfa/0xfa0 [ 642.762746][ T52] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.769187][ T52] [ 642.769187][ T52] -> #4 (set->srcu){.+.+}-{0:0}: [ 642.776392][ T52] lock_sync+0xba/0x160 [ 642.781068][ T52] __synchronize_srcu+0x96/0x3a0 [ 642.786540][ T52] elevator_switch+0x12b/0x640 [ 642.791826][ T52] elevator_change+0x315/0x4c0 [ 642.797121][ T52] elevator_set_default+0x186/0x260 [ 642.802862][ T52] blk_register_queue+0x34e/0x3f0 [ 642.808426][ T52] __add_disk+0x677/0xd50 [ 642.813287][ T52] add_disk_fwnode+0xfc/0x480 [ 642.818678][ T52] nbd_dev_add+0x717/0xae0 [ 642.823616][ T52] nbd_init+0x168/0x1f0 [ 642.828308][ T52] do_one_initcall+0x236/0x820 [ 642.833693][ T52] do_initcall_level+0x104/0x190 [ 642.839151][ T52] do_initcalls+0x59/0xa0 [ 642.844003][ T52] kernel_init_freeable+0x334/0x4b0 [ 642.849828][ T52] kernel_init+0x1d/0x1d0 [ 642.854684][ T52] ret_from_fork+0x4bc/0x870 [ 642.859813][ T52] ret_from_fork_asm+0x1a/0x30 [ 642.865301][ T52] [ 642.865301][ T52] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 642.873169][ T52] lock_acquire+0x120/0x360 [ 642.878220][ T52] __mutex_lock+0x187/0x1350 [ 642.883348][ T52] elevator_change+0x1e5/0x4c0 [ 642.888720][ T52] elevator_set_none+0x42/0xb0 [ 642.893999][ T52] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 642.900318][ T52] nbd_start_device+0x17f/0xb10 [ 642.905948][ T52] nbd_genl_connect+0x135b/0x18f0 [ 642.911486][ T52] genl_family_rcv_msg_doit+0x215/0x300 [ 642.917554][ T52] genl_rcv_msg+0x60e/0x790 [ 642.922616][ T52] netlink_rcv_skb+0x208/0x470 [ 642.927893][ T52] genl_rcv+0x28/0x40 [ 642.932400][ T52] netlink_unicast+0x82f/0x9e0 [ 642.937780][ T52] netlink_sendmsg+0x805/0xb30 [ 642.943068][ T52] __sock_sendmsg+0x21c/0x270 [ 642.948263][ T52] ____sys_sendmsg+0x505/0x830 [ 642.953546][ T52] ___sys_sendmsg+0x21f/0x2a0 [ 642.958825][ T52] __x64_sys_sendmsg+0x19b/0x260 [ 642.964453][ T52] do_syscall_64+0xfa/0xfa0 [ 642.969472][ T52] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.975897][ T52] [ 642.975897][ T52] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 642.984676][ T52] lock_acquire+0x120/0x360 [ 642.989710][ T52] blk_alloc_queue+0x538/0x620 [ 642.995084][ T52] __blk_mq_alloc_disk+0x15c/0x340 [ 643.000725][ T52] nbd_dev_add+0x46c/0xae0 [ 643.005679][ T52] nbd_init+0x168/0x1f0 [ 643.010443][ T52] do_one_initcall+0x236/0x820 [ 643.015740][ T52] do_initcall_level+0x104/0x190 [ 643.021204][ T52] do_initcalls+0x59/0xa0 [ 643.026314][ T52] kernel_init_freeable+0x334/0x4b0 [ 643.032213][ T52] kernel_init+0x1d/0x1d0 [ 643.037061][ T52] ret_from_fork+0x4bc/0x870 [ 643.042164][ T52] ret_from_fork_asm+0x1a/0x30 [ 643.047459][ T52] [ 643.047459][ T52] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 643.054692][ T52] lock_acquire+0x120/0x360 [ 643.059726][ T52] fs_reclaim_acquire+0x72/0x100 [ 643.065203][ T52] kmem_cache_alloc_noprof+0x45/0x6e0 [ 643.071116][ T52] __kernfs_iattrs+0xd9/0x320 [ 643.076329][ T52] kernfs_iop_setattr+0xea/0x3f0 [ 643.081891][ T52] notify_change+0xc1a/0xf40 [ 643.087013][ T52] do_truncate+0x1a4/0x220 [ 643.091965][ T52] path_openat+0x306c/0x3830 [ 643.097077][ T52] do_filp_open+0x1fa/0x410 [ 643.102101][ T52] do_sys_openat2+0x121/0x1c0 [ 643.107286][ T52] __x64_sys_openat+0x138/0x170 [ 643.112649][ T52] do_syscall_64+0xfa/0xfa0 [ 643.117660][ T52] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.124060][ T52] [ 643.124060][ T52] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 643.132565][ T52] validate_chain+0xb9b/0x2140 [ 643.137871][ T52] __lock_acquire+0xab9/0xd20 [ 643.143077][ T52] lock_acquire+0x120/0x360 [ 643.148095][ T52] down_write+0x96/0x1f0 [ 643.152877][ T52] kernfs_unlink_sibling+0x71/0x180 [ 643.158592][ T52] __kernfs_remove+0x353/0x570 [ 643.164073][ T52] kernfs_remove_by_name_ns+0xaf/0x130 [ 643.170127][ T52] sysfs_unmerge_group+0xd4/0x140 [ 643.175676][ T52] dpm_sysfs_remove+0x76/0xd0 [ 643.180882][ T52] device_del+0x251/0x8e0 [ 643.185831][ T52] device_unregister+0x20/0xc0 [ 643.191223][ T52] hci_conn_del+0xc33/0x11b0 [ 643.196335][ T52] hci_abort_conn_sync+0x658/0xe30 [ 643.202138][ T52] hci_cmd_sync_work+0x213/0x3a0 [ 643.207603][ T52] process_scheduled_works+0xae1/0x17b0 [ 643.213664][ T52] worker_thread+0x8a0/0xda0 [ 643.218778][ T52] kthread+0x711/0x8a0 [ 643.223398][ T52] ret_from_fork+0x4bc/0x870 [ 643.228518][ T52] ret_from_fork_asm+0x1a/0x30 [ 643.233899][ T52] [ 643.233899][ T52] other info that might help us debug this: [ 643.233899][ T52] [ 643.244212][ T52] Chain exists of: [ 643.244212][ T52] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 643.244212][ T52] [ 643.258715][ T52] Possible unsafe locking scenario: [ 643.258715][ T52] [ 643.266172][ T52] CPU0 CPU1 [ 643.271969][ T52] ---- ---- [ 643.277340][ T52] lock(&root->kernfs_rwsem); [ 643.282101][ T52] lock(cpuhp_state_mutex); [ 643.289209][ T52] lock(&root->kernfs_rwsem); [ 643.296485][ T52] lock(&root->kernfs_iattr_rwsem); [ 643.301788][ T52] [ 643.301788][ T52] *** DEADLOCK *** [ 643.301788][ T52] [ 643.309923][ T52] 5 locks held by kworker/u9:0/52: [ 643.315023][ T52] #0: ffff88807ef0d948 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 643.325803][ T52] #1: ffffc90000bc7ba0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 643.338343][ T52] #2: ffff8880313a4dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 643.348275][ T52] #3: ffff8880313a40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 643.358028][ T52] #4: ffff88801b6ff988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 643.368760][ T52] [ 643.368760][ T52] stack backtrace: [ 643.374646][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 643.374663][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 643.374672][ T52] Workqueue: hci2 hci_cmd_sync_work [ 643.374693][ T52] Call Trace: [ 643.374699][ T52] [ 643.374705][ T52] dump_stack_lvl+0x189/0x250 [ 643.374720][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 643.374731][ T52] ? __pfx__printk+0x10/0x10 [ 643.374747][ T52] ? print_lock_name+0xde/0x100 [ 643.374763][ T52] print_circular_bug+0x2ee/0x310 [ 643.374779][ T52] check_noncircular+0x134/0x160 [ 643.374796][ T52] validate_chain+0xb9b/0x2140 [ 643.374815][ T52] __lock_acquire+0xab9/0xd20 [ 643.374829][ T52] ? kernfs_unlink_sibling+0x71/0x180 [ 643.374844][ T52] lock_acquire+0x120/0x360 [ 643.374856][ T52] ? kernfs_unlink_sibling+0x71/0x180 [ 643.374876][ T52] down_write+0x96/0x1f0 [ 643.374892][ T52] ? kernfs_unlink_sibling+0x71/0x180 [ 643.374906][ T52] ? __pfx_down_write+0x10/0x10 [ 643.374920][ T52] ? kernfs_root+0x1c/0x230 [ 643.374932][ T52] ? kernfs_root+0x1c/0x230 [ 643.374944][ T52] ? kernfs_root+0x1ea/0x230 [ 643.374956][ T52] kernfs_unlink_sibling+0x71/0x180 [ 643.374971][ T52] __kernfs_remove+0x353/0x570 [ 643.374986][ T52] kernfs_remove_by_name_ns+0xaf/0x130 [ 643.375002][ T52] sysfs_unmerge_group+0xd4/0x140 [ 643.375015][ T52] dpm_sysfs_remove+0x76/0xd0 [ 643.375028][ T52] device_del+0x251/0x8e0 [ 643.375046][ T52] ? __pfx_device_del+0x10/0x10 [ 643.375062][ T52] ? __pfx_sco_connect_cfm+0x10/0x10 [ 643.375078][ T52] device_unregister+0x20/0xc0 [ 643.375094][ T52] hci_conn_del+0xc33/0x11b0 [ 643.375109][ T52] ? hci_abort_conn_sync+0x24e/0xe30 [ 643.375123][ T52] hci_abort_conn_sync+0x658/0xe30 [ 643.375139][ T52] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 643.375153][ T52] ? hci_conn_valid+0x21/0x230 [ 643.375169][ T52] ? hci_conn_valid+0x21/0x230 [ 643.375193][ T52] ? hci_conn_valid+0x21/0x230 [ 643.375208][ T52] ? hci_conn_valid+0x211/0x230 [ 643.375224][ T52] ? __pfx_abort_conn_sync+0x10/0x10 [ 643.375240][ T52] hci_cmd_sync_work+0x213/0x3a0 [ 643.375257][ T52] ? process_scheduled_works+0x9ef/0x17b0 [ 643.375272][ T52] process_scheduled_works+0xae1/0x17b0 [ 643.375292][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 643.375309][ T52] worker_thread+0x8a0/0xda0 [ 643.375329][ T52] kthread+0x711/0x8a0 [ 643.375346][ T52] ? __pfx_worker_thread+0x10/0x10 [ 643.375360][ T52] ? __pfx_kthread+0x10/0x10 [ 643.375376][ T52] ? _raw_spin_unlock_irq+0x23/0x50 [ 643.375388][ T52] ? lockdep_hardirqs_on+0x9c/0x150 [ 643.375401][ T52] ? __pfx_kthread+0x10/0x10 [ 643.375416][ T52] ret_from_fork+0x4bc/0x870 [ 643.375431][ T52] ? __pfx_ret_from_fork+0x10/0x10 [ 643.375445][ T52] ? __switch_to_asm+0x39/0x70 [ 643.375457][ T52] ? __switch_to_asm+0x33/0x70 [ 643.375468][ T52] ? __pfx_kthread+0x10/0x10 [ 643.375483][ T52] ret_from_fork_asm+0x1a/0x30 [ 643.375500][ T52] [ 643.375515][ C0] vkms_vblank_simulate: vblank timer overrun [ 643.671840][ C0] vkms_vblank_simulate: vblank timer overrun [ 643.679421][ T5906] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.689669][ T5906] usb 6-1: config 0 has no interface number 0 [ 643.695799][ T5906] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 643.707336][ T5906] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 643.718383][ T5906] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 643.728283][ T5906] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 643.737370][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.752806][T15951] 9p: Unknown Cache mode or invalid value fscache$ [ 643.761722][ T5906] usb 6-1: config 0 descriptor?? [ 643.769133][ T5906] ldusb 6-1:0.55: Interrupt in endpoint not found [ 643.978445][T15943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.109901][T15943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.142960][T15943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.156012][T15955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.167576][T15943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.205450][T15955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.215507][ T5906] usb 6-1: USB disconnect, device number 93 [ 644.312248][ T6330] udevd[6330]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system