last executing test programs: 30m14.984473777s ago: executing program 4 (id=345): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80) r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espint', 0x6) r2 = openat$vim2m(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0cc5604, &(0x7f0000000500)={0x2, @sliced={0xfff, [0xf7f0, 0x2, 0x5, 0x10, 0x69c, 0xf70, 0x7, 0x0, 0x7f, 0x5ecc, 0x3, 0x5, 0x2, 0x8, 0x4, 0x7, 0x5, 0x7, 0x9, 0x204, 0x1, 0x3, 0x1, 0x1, 0x7, 0x7, 0xf1, 0x2, 0x0, 0x7, 0xffff, 0xe, 0x4, 0x5, 0x8, 0x9d, 0x5, 0x8, 0x7, 0x8, 0x0, 0x9, 0x1, 0x9, 0x101, 0x8, 0x101, 0xfff], 0x1}}) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000140)=0x80000001, 0x4) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x8, 0x1c1, 0x2f4, 0x80, 0xf1, 0x9}}, 0x20) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d074200080002", @ANYBLOB="358749"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 30m13.029121614s ago: executing program 4 (id=350): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002f00090025bd700000000002040000000c000c00"], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) 30m12.452886035s ago: executing program 4 (id=355): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000000000000000180200", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 30m12.235773103s ago: executing program 4 (id=356): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) 30m12.047320247s ago: executing program 4 (id=359): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80) r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espint', 0x6) r2 = openat$vim2m(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0cc5604, &(0x7f0000000500)={0x2, @sliced={0xfff, [0xf7f0, 0x2, 0x5, 0x10, 0x69c, 0xf70, 0x7, 0x0, 0x7f, 0x5ecc, 0x3, 0x5, 0x2, 0x8, 0x4, 0x7, 0x5, 0x7, 0x9, 0x204, 0x1, 0x3, 0x1, 0x1, 0x7, 0x7, 0xf1, 0x2, 0x0, 0x7, 0xffff, 0xe, 0x4, 0x5, 0x8, 0x9d, 0x5, 0x8, 0x7, 0x8, 0x0, 0x9, 0x1, 0x9, 0x101, 0x8, 0x101, 0xfff], 0x1}}) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000140)=0x80000001, 0x4) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x8, 0x1c1, 0x2f4, 0x80, 0xf1, 0x9}}, 0x20) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358749"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 30m10.419381368s ago: executing program 4 (id=364): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) r1 = syz_open_procfs$namespace(0x0, 0x0) open_by_handle_at(r1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x28000600) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) gettimeofday(0x0, &(0x7f0000000140)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) r3 = msgget(0x3, 0x710) msgget(0x2, 0x624) bind$alg(0xffffffffffffffff, 0x0, 0x0) msgget(0x1, 0x240) msgctl$IPC_RMID(r3, 0x0) msgget(0x0, 0x200) 30m10.154025937s ago: executing program 32 (id=364): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) r1 = syz_open_procfs$namespace(0x0, 0x0) open_by_handle_at(r1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x28000600) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) gettimeofday(0x0, &(0x7f0000000140)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) r3 = msgget(0x3, 0x710) msgget(0x2, 0x624) bind$alg(0xffffffffffffffff, 0x0, 0x0) msgget(0x1, 0x240) msgctl$IPC_RMID(r3, 0x0) msgget(0x0, 0x200) 13m47.297474589s ago: executing program 5 (id=3501): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x39) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) r1 = syz_ublk_setup_io_uring(0x19, &(0x7f0000000040)={0x0, 0x2d72, 0x0, 0xfffffffd, 0x1ef}, &(0x7f0000000100)=0x0, 0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r1, r2, 0x0, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x200007, 0x255}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2000, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8801, 0x2, 0x134}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x630, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) 13m44.98905995s ago: executing program 5 (id=3503): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000440)={0xa0, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_IE={0x8a, 0x2a, [@perr={0x84, 0x1c, {0x6, 0x2, [{{}, @device_b, 0x6b07, @void, 0x25}, {{}, @device_a, 0x40, @void, 0xb}]}}, @supported_rates={0x1, 0x2, [{0x16}, {0x48}]}, @measure_req={0x26, 0x4a, {0xf, 0xf, 0xa9, "98efac3bc06212143a79e805829e0163d9c93a62cfdb1c8fe992578102f4883c3ae6df757a1205362b5ce589be30c07211ec3a68792c21310e7c8b3305d04ddaa169cce3a2db43"}}, @mesh_chsw={0x76, 0x6, {0xa, 0x1, 0x8, 0x9}}, @random_vendor={0xdd, 0x6, "823eee3d8ddd"}, @mesh_chsw={0x76, 0x6, {0xe, 0x7, 0x3a, 0x3}}]}]]}, 0xa0}, 0x1, 0x0, 0x0, 0x40080d0}, 0x4000880) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m44.625403795s ago: executing program 5 (id=3508): fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000)=0xfffffffc, 0x4) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sync() write$binfmt_aout(r1, 0x0, 0xffffffdb) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) unshare(0x28000600) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) 13m43.604848593s ago: executing program 5 (id=3514): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 13m43.265879027s ago: executing program 5 (id=3515): sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)='$', 0x1}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x40, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fffffff}}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x34, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 13m40.557043707s ago: executing program 5 (id=3525): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newqdisc={0xe4, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xb4, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1002}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x100}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x44, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x51}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcd}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8a}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9a}]}]}]}}]}, 0xe4}}, 0x0) 13m40.403880589s ago: executing program 33 (id=3525): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newqdisc={0xe4, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xb4, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1002}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x100}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x44, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x51}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcd}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8a}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9a}]}]}]}}]}, 0xe4}}, 0x0) 5m34.34964069s ago: executing program 1 (id=5356): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000001900000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008814) connect$unix(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000c140)={&(0x7f000000bf80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x100000001}, [{0x8000000000000000, 0x4}, {0x9, 0x8000000000000001}, {0xb7, 0x6}, {0xffffffff, 0x3}, {0x2f4, 0x40}, {0x1000, 0x98e}, {0x1, 0x6}, {0x2, 0x2}, {0x7}, {0xc, 0xffffffff80000000}, {0x800000000000, 0x1c}, {0xffffffffffffffff, 0x4}, {0x9, 0x9}, {0xe8b0, 0x3aac00000000000}, {0x69b7, 0x5f}, {0x0, 0x5}, {0xa, 0x2}, {0x7fff}, {0x7, 0x4}, {0x7ff, 0x3}, {0x1ff, 0x100000001}, {0xa2e, 0xe}, {0x30fe, 0x1}, {0x8, 0x4}, {0xff, 0x2}, {0xfb9, 0x1}, {0x6, 0x8}, {0x1, 0xfffffffffffffffc}, {0x7, 0x5}, {0x2, 0xffffffffffff7fff}, {0x9, 0x8}, {0x59f, 0x5ff5}, {0x7fff, 0x7}, {0x8, 0x3}, {0xc1d, 0x4077d962}, {0x139b, 0x1089}, {0x5, 0x81}, {0x0, 0x3}, {0x8, 0xb}, {0x5, 0x1}, {0x4a82, 0xb}, {0x200, 0x405}, {0x1c508f61, 0x1a5b5e17}, {0xc, 0x7fffffff}, {0xff, 0x7d71}, {0x8000000000000001}, {0x10, 0x6}, {0x7, 0x8}, {0x5, 0x200}, {0xfffffffffffffffb, 0x6}, {0x7f, 0x6}, {0x80000001, 0x1}, {0x70, 0x9}, {0x1, 0x1}, {0x3, 0x2}, {0x81, 0x5}, {0x5, 0x9}, {0x8, 0x101}, {0x3, 0x7}, {0x9, 0x3}, {0x180, 0x59f}, {0xffff, 0x2}, {0x5}, {0x7, 0x80000000}, {0x10, 0x7fffffff}, {0x9, 0x9}, {0x1, 0x6}, {0x76, 0xfffffffffffffffc}, {0x40, 0x6}, {0x100000000, 0x200}, {0x4, 0x8}, {0x0, 0xf}, {0xd9, 0x63da50e0}, {0x2, 0xa987}, {0xf, 0xf800000000000000}, {0x8, 0xf405}, {0x2, 0x4}, {0x0, 0x80000001}, {0x2, 0x9}, {0x0, 0x2}, {0x5, 0x4}, {0x5, 0x7}, {0x2, 0x80000000}, {0x400000000000, 0xdb6}, {0x34c0}, {0x94, 0xfffffffffffffffa}, {0x0, 0xead5}, {0x7ff, 0x8001}, {0x5, 0x2}, {0xffffffffffff7fff}, {0xa, 0x1}, {0x0, 0x99}, {0xb9, 0x8001}, {0x7, 0x6de}, {0x2}, {0xfffffffffffffff7, 0x99b1}, {0x6, 0x4}, {0xda, 0x5}, {0x2, 0x8}, {0xd8, 0x4}, {0x8, 0xb6ea}, {0x4, 0xc27}, {0x2, 0x8000000000000000}, {0x3, 0x1}, {0x4, 0x6}, {0x2125, 0xffffffffffffff14}, {0x0, 0x7}, {0x0, 0x80}, {0x2, 0xfffffc0000000000}, {0x4e9a, 0x7}, {0x10001, 0x8}, {0x7fff, 0x200}, {0x5, 0x3}, {0x7, 0x3}, {0x100, 0x3}, {0x8, 0x5}, {0x3, 0x8000000000000000}, {0x4, 0x200}, {0x5, 0x5}, {0x2, 0x6}, {0x9, 0x9}, {0xa, 0x5}, {0x7, 0xd97}, {0xff, 0x5173}, {0x2}, {0x1, 0x81}, {0x6, 0x1ff}, {0x0, 0x6}, {0x9, 0x140000000000}, {0x26, 0x7}, {0x4, 0x6}, {0x0, 0xa}, {0x3}, {0xb, 0x5}, {0x9, 0x7}, {0x7, 0x1}, {0x1, 0x1}, {0x1e12, 0x5}, {0x5, 0x4}, {0x3, 0x6}, {0x5, 0x3}, {0x4003, 0xffffffff}, {0x1, 0x5}, {0x100000000, 0x3}, {0x90a6, 0x9}, {0x9, 0x107}, {0xf, 0x80000000}, {0x9, 0x101}, {0x9, 0x7fff}, {0x0, 0x1}, {0x6, 0x40}, {0x2, 0x10001}, {0x7, 0x6}, {0x200}, {0x3, 0xffff}, {0x5, 0x793}, {0x6, 0x100000000}, {0x3, 0xda}, {0xb0, 0xffffffff}, {0x6, 0x2}, {0x6, 0x2}, {0x4, 0x1}, {0x6, 0xa}, {0x5d, 0x8001}, {0x38, 0x5f0}, {0x4, 0x7}, {0xffffffff, 0x5a2}, {0x1, 0x2}, {0x8, 0x1}, {0xe9, 0xfffffffffffff7b6}, {0x8e, 0x7fff}, {0x80000000, 0x8000000000000001}, {0xffffffff, 0xfda9}, {0xe5, 0xffffffffffffff41}, {0x24, 0x8}, {0x5, 0x4}, {0x187, 0xa2}, {0xd6, 0xffffffffffffffa3}, {0x1, 0xa807}, {0x3723, 0x6}, {0xfffffffffffff801, 0xa9}, {}, {0x2, 0xfffffffffffffffa}, {0x10001, 0x8000000000}, {0xfffffffffffff000, 0x3}, {0x3, 0xf9e}, {0x2321, 0x8}, {0x7ff}, {0x10001, 0xffffffff}, {0x5, 0x3}, {0x7ff, 0x9}, {0x4, 0x3e}, {0x3bd14045, 0x8001}, {0xff, 0x7}, {0x8, 0xffff}, {0x575, 0x2}, {0x3, 0x2}, {0x1, 0xe}, {0x5, 0xe}, {0x7, 0x9c}, {0x3ff, 0x8001}, {0x8, 0xffffffffffff0001}, {0x0, 0x7}, {0x3, 0x1}, {0xfffffffffffffffb, 0x4}, {0x7, 0x9}, {0x7, 0x1649}, {0x3ff, 0x7}, {0x4f, 0xe6a}, {0x8, 0x1}, {0x10000, 0x5}, {0x7, 0x6}, {0x1, 0xb5}, {0x7, 0xdd1}, {0xffff, 0x66e}, {0x0, 0x4}, {0x3, 0x30580c97}, {0x8001, 0xf6}, {0x6, 0x800}, {0xcaa, 0x5}, {0x9, 0xb}, {0x0, 0xb12}, {0x7, 0x8}, {0xfaa, 0x6}, {0x8, 0x5}, {0xfffffffffffff801, 0x951}, {0x7, 0x101}, {0x7, 0x910000}, {0x2, 0x5b}, {0xa8, 0x8}, {0x619, 0x1}, {0x8, 0xfffffffffffff775}, {0x3, 0x3}, {0x1ff, 0x8}, {0x2000000000000, 0x80000000}, {0xfff, 0x1}, {0x2, 0x868}, {0x2ef, 0x2}, {0x0, 0x8000000000000000}, {0x3, 0xfffffffffffffffc}, {0x1, 0x1}, {0x7, 0x7}, {0x57, 0x7}, {0x401, 0x6}, {0x5, 0x73}, {0x80000001, 0xc91}, {0x800, 0x7ff}, {0x777b, 0x9}, {0xb3, 0x8}, {0x4, 0x1}, {0x7, 0x6}, {0xd5}, {0x3, 0x401}, {0x1, 0x2}, {0x2, 0xfffffffffffff27a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 5m32.804392416s ago: executing program 1 (id=5360): ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc25c4111, &(0x7f00000001c0)={0x6, [[0xfff, 0xa, 0x101, 0x6, 0x3, 0x5, 0x2, 0x1], [0x0, 0x8c1b, 0x0, 0x6, 0x0, 0x100, 0x9, 0x2], [0x10001, 0x200, 0x6, 0x1ff, 0x80000000, 0xa, 0x4, 0x6]], '\x00', [{0xa, 0x3, 0x0, 0x1}, {0x80, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x3, 0x1, 0x1, 0x0, 0x1}, {0x14a, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x0, 0x6}, {0x2, 0x5, 0x0, 0x1, 0x1}, {0x6, 0xc}, {0x4, 0x9, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x80000000, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x45580895, 0x0, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3ff, 0x1, 0x1}, {0x80000001, 0x1, 0x1, 0x0, 0x0, 0x1}], '\x00', 0x4}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004500)={0x14, 0x0, &(0x7f0000004400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000312000000"], 0x0, 0x0}, 0x0) 5m28.480310055s ago: executing program 1 (id=5368): socket$inet6(0xa, 0x2, 0x0) fanotify_init(0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x4001af84, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) close(0x3) socket$inet_tcp(0x2, 0x1, 0x0) r2 = fanotify_init(0x1a, 0x800) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r2, 0x1, 0x20, r3, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) 5m23.060934394s ago: executing program 1 (id=5380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x401, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000400180006"], 0xac}}, 0x0) 5m22.052643565s ago: executing program 1 (id=5386): mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='bfq', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='1\n', 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r4, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/7, 0x7, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r5, 0x0, 0x0, 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5m20.293059454s ago: executing program 1 (id=5390): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x7f) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_open_dev$evdev(0x0, 0x800000000000044b, 0x200) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000300)=""/227, 0xe3) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x3e, 0x208604) syz_usb_disconnect(0xffffffffffffffff) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) syz_open_dev$hiddev(0x0, 0x7f, 0x2000) syz_usb_disconnect(r0) 5m4.207270687s ago: executing program 34 (id=5390): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x7f) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_open_dev$evdev(0x0, 0x800000000000044b, 0x200) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000300)=""/227, 0xe3) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x3e, 0x208604) syz_usb_disconnect(0xffffffffffffffff) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) syz_open_dev$hiddev(0x0, 0x7f, 0x2000) syz_usb_disconnect(r0) 1m21.698840144s ago: executing program 3 (id=5899): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) 1m18.159994237s ago: executing program 3 (id=5903): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) socket(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) 1m17.42199491s ago: executing program 3 (id=5904): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x40) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x80) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x4044890}, 0x200480b8) 1m12.676363988s ago: executing program 3 (id=5912): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3ea, 0x4, 0x70bd29, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20008010) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000001c0)={0x0, [], 0x5, "db2c26981eca26"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0) 1m11.153351335s ago: executing program 3 (id=5916): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x1}}]}}]}, 0x40}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f0000000500)={0x11, 0x0, r3}, 0x14) sendto(r5, &(0x7f0000000600)='\x00', 0x1, 0x0, 0x0, 0x0) 1m10.137175689s ago: executing program 3 (id=5918): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a000000"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12.385802679s ago: executing program 2 (id=6040): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f00002a7000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f00001d3000/0x1000)=nil) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 12.210568547s ago: executing program 0 (id=6041): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000e0)='./file0\x00', 0x1ed) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/afs/cells\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='add syz0 127.0.0.1+70', 0x15) close(0xffffffffffffffff) mount$afs(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000600), 0x0, &(0x7f0000000700)={[{@dyn}]}) 10.424644596s ago: executing program 0 (id=6043): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x21, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x8, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 9.569648153s ago: executing program 0 (id=6044): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x20040010) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, 0x0, 0x1) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000600)={0x1ff, 0x7, 0x7, 0x3f, 0x0, 0x0, 0x0, 0x34, &(0x7f00000005c0)=""/52}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) futex(0x0, 0x86, 0x8, 0x0, 0x0, 0x4) 9.024806837s ago: executing program 2 (id=6046): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 5.922127681s ago: executing program 2 (id=6053): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x8000001, 0x158}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, 0x0, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x8, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 5.56895572s ago: executing program 2 (id=6055): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f00002a7000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f00001d3000/0x1000)=nil) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 5.175292235s ago: executing program 6 (id=6058): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) read$dsp(r0, &(0x7f0000000280)=""/79, 0x4f) 4.612457452s ago: executing program 6 (id=6060): socket$inet6(0x2d, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = io_uring_setup(0x3824, 0x0) syz_io_uring_setup(0x249a, &(0x7f0000000280)={0x0, 0x1ff, 0x20, 0x1, 0x151}, 0x0, 0x0, &(0x7f0000000380)) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000001b00)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xffd}, 0x2d, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x3fff}) 4.558594898s ago: executing program 7 (id=6061): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) semtimedop(0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x121302, 0x0) write$cgroup_subtree(r2, &(0x7f0000002140)=ANY=[], 0xe) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf22, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x700}}, [@generic={0x76, 0x7, 0x1, 0x4, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0xd4, &(0x7f0000000040)=""/212}, 0x25) 4.39129432s ago: executing program 0 (id=6062): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="580000001800050401000000000000000a800000fe040001000000001400010020010db800000000000000000000000106001500070000001800160008000100010000000c000b0000000100020000000800040001000000", 0x58) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r3, &(0x7f0000000180), 0x1000) mkdir(&(0x7f0000000080)='./trace/trace\x00', 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 3.380255742s ago: executing program 6 (id=6063): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3.105032558s ago: executing program 7 (id=6064): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x8000001, 0x158}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, 0x0, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x8, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 2.51265604s ago: executing program 0 (id=6065): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) set_mempolicy_home_node(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3ffffffffffd, 0x0) readv(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}, {0x0}], 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1) 2.306791032s ago: executing program 2 (id=6066): io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x800) eventfd(0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r4) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672ba2600fb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close_range(r2, 0xffffffffffffffff, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000200)={0x5, 0xa9, 0x3}) ioprio_set$pid(0x3, 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x842, r1, 0x0, 0x0, 0x34}, &(0x7f00000000c0)={0x0, 0x0, 0x8000000, 0x7, 0x3, r1, 0x0, 0x0, 0x3, 0x0, 0x1, r1}]) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a010c005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99080805", @ANYRES16], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r7, 0xca289435, &(0x7f0000000500)={0x3, 0x3ff, @status={[0x3, 0xb78f, 0xc, 0x100, 0x2, 0x7ff]}, [0x7, 0xe1, 0xded9, 0x43, 0x7, 0x2, 0x7dbd, 0x8000000000000001, 0x0, 0x6f, 0x2, 0x5, 0x35, 0x3ff, 0x8, 0x7fffffffffffffff, 0x4, 0xb, 0x8, 0x100000001, 0xb, 0x9, 0x2, 0x6, 0x6, 0x2365, 0x2f, 0x9, 0x4, 0xfff, 0x6, 0x8, 0xa62, 0x6, 0x6, 0x101, 0x40, 0x6, 0x28000000000000, 0x81a8, 0xffffffffffffffff, 0x1ff, 0x100000000, 0x81, 0x3, 0x10001, 0x3, 0x7, 0x40, 0x80000001, 0x80, 0x8000, 0x31c, 0x1000000, 0x33, 0x2, 0x5, 0x7fffffffffffffff, 0x10, 0xffe, 0x10, 0xbf, 0x3, 0x8]}) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000140)=""/238, 0xee}, {0x0}], 0x2) 2.184935098s ago: executing program 7 (id=6067): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) socket$vsock_stream(0x28, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe}, 0x1c}}, 0x0) 2.046501985s ago: executing program 7 (id=6068): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 1.875212222s ago: executing program 7 (id=6069): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) read$dsp(r0, &(0x7f0000000280)=""/79, 0x4f) 1.682001879s ago: executing program 6 (id=6070): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000040000000f"], 0x50) syz_open_procfs(0x0, &(0x7f0000000400)='net/vlan/config\x00') r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) openat2$dir(0xffffff9c, &(0x7f0000000000)='./dir\x00', &(0x7f0000000140)={0x404100, 0x156, 0xb}, 0x18) mount(0x0, &(0x7f0000000040)='./dir\x00', &(0x7f0000000080)='smb3\x00', 0x2000000, &(0x7f00000000c0)='vers=2.0,sec=ntlmssp,ip=127.0/0.1,port=20000,nodfs,username=root,passworD=root\x00') 1.357819916s ago: executing program 7 (id=6071): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x20040010) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, 0x0, 0x1) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000600)={0x1ff, 0x7, 0x7, 0x3f, 0x0, 0x0, 0x0, 0x34, &(0x7f00000005c0)=""/52}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) futex(0x0, 0x86, 0x8, 0x0, 0x0, 0x4) 1.283397653s ago: executing program 6 (id=6072): socket$inet6(0x2d, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = io_uring_setup(0x3824, 0x0) syz_io_uring_setup(0x249a, &(0x7f0000000280)={0x0, 0x1ff, 0x20, 0x1, 0x151}, 0x0, 0x0, &(0x7f0000000380)) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000001b00)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xffd}, 0x2d, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x3fff}) 105.829433ms ago: executing program 6 (id=6073): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) semtimedop(0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x121302, 0x0) write$cgroup_subtree(r2, &(0x7f0000002140)=ANY=[], 0xe) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf22, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x700}}, [@generic={0x76, 0x7, 0x1, 0x4, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0xd4, &(0x7f0000000040)=""/212}, 0x25) 12.939575ms ago: executing program 0 (id=6074): unshare(0x64000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3bd4, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x6001}, 0x0) 0s ago: executing program 2 (id=6075): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mremap(&(0x7f00002a7000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f00001d3000/0x1000)=nil) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) kernel console output (not intermixed with test programs): 71 [ 1825.959293][T12217] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1825.959867][T12217] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1825.960407][T12217] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1825.977147][T12217] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1825.987103][T12217] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1825.997097][T12217] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1825.997563][T12217] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1825.998735][T12217] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1826.000182][T12217] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1826.000627][T12217] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1826.001045][T12217] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1826.001477][T12217] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1826.003016][T12217] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1826.003442][T12217] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1826.003856][T12217] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1826.004269][T12217] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1826.004679][T12217] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1826.004734][T12217] input input158: Timeout waiting for response from device. [ 1826.024065][T12217] usb 7-1: USB disconnect, device number 55 [ 1826.796021][T25796] netlink: zone id is out of range [ 1826.799644][T25796] netlink: zone id is out of range [ 1826.802366][T25796] netlink: zone id is out of range [ 1826.802588][T25796] netlink: zone id is out of range [ 1826.803130][T25796] netlink: zone id is out of range [ 1826.803286][T25796] netlink: zone id is out of range [ 1826.803314][T25796] netlink: zone id is out of range [ 1826.803535][T25796] netlink: zone id is out of range [ 1826.803623][T25796] netlink: zone id is out of range [ 1826.804313][T25796] netlink: zone id is out of range [ 1827.118386][T10897] Bluetooth: hci4: command tx timeout [ 1828.639288][T12217] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1829.158266][T10897] Bluetooth: hci4: command tx timeout [ 1829.186710][T12217] usb 3-1: device descriptor read/64, error -71 [ 1831.364287][T12217] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1832.249307][T24823] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1832.427590][T25736] bridge0: port 1(bridge_slave_0) entered blocking state [ 1832.427852][T25736] bridge0: port 1(bridge_slave_0) entered disabled state [ 1832.428057][T25736] bridge_slave_0: entered allmulticast mode [ 1832.435560][T25736] bridge_slave_0: entered promiscuous mode [ 1832.440664][T25736] bridge0: port 2(bridge_slave_1) entered blocking state [ 1832.440854][T25736] bridge0: port 2(bridge_slave_1) entered disabled state [ 1832.441038][T25736] bridge_slave_1: entered allmulticast mode [ 1832.443809][T25736] bridge_slave_1: entered promiscuous mode [ 1832.666930][T25835] net_ratelimit: 11 callbacks suppressed [ 1832.700266][T25835] netlink: zone id is out of range [ 1832.790465][T25835] netlink: zone id is out of range [ 1832.790748][T25835] netlink: zone id is out of range [ 1832.791006][T25835] netlink: zone id is out of range [ 1833.156031][T25835] netlink: zone id is out of range [ 1833.156469][T25835] netlink: zone id is out of range [ 1833.156551][T25835] netlink: zone id is out of range [ 1833.223924][T25736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1833.282606][T25835] netlink: zone id is out of range [ 1833.282839][T25835] netlink: zone id is out of range [ 1833.283016][T25835] netlink: zone id is out of range [ 1833.285387][T25736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1833.704497][T25736] team0: Port device team_slave_0 added [ 1833.827091][T12217] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1834.058675][T12217] usb 7-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 1834.085251][T12217] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1834.096634][T12217] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1834.122519][T12217] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1834.130630][T12217] usb 7-1: Product: syz [ 1834.130651][T12217] usb 7-1: Manufacturer: syz [ 1834.163128][T12217] mos7840 7-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1834.172358][T24823] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.311961][T25736] team0: Port device team_slave_1 added [ 1834.472157][T25736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1834.472248][T25736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1834.472271][T25736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1834.477649][T25736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1834.477667][T25736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1834.477694][T25736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1834.588180][T25736] hsr_slave_0: entered promiscuous mode [ 1834.600110][T25736] hsr_slave_1: entered promiscuous mode [ 1834.607399][T25736] debugfs: 'hsr0' already exists in 'hsr' [ 1834.616687][T25736] Cannot create hsr debugfs directory [ 1835.077864][T25732] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1835.208736][T25732] usb 3-1: device descriptor read/64, error -71 [ 1835.487616][T25732] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1835.836780][T25732] usb 3-1: device descriptor read/64, error -71 [ 1836.013893][T25732] usb usb3-port1: attempt power cycle [ 1836.053336][T12217] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 1836.072473][T12217] usb 7-1: USB disconnect, device number 56 [ 1836.248343][T12217] mos7840 7-1:1.0: device disconnected [ 1836.262936][T24823] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1836.357271][T25732] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1836.377912][T25732] usb 3-1: device descriptor read/8, error -71 [ 1836.617139][T25732] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1836.639581][T25732] usb 3-1: device descriptor read/8, error -71 [ 1836.747523][T25732] usb usb3-port1: unable to enumerate USB device [ 1838.407657][T25880] net_ratelimit: 13 callbacks suppressed [ 1838.413435][T25880] netlink: zone id is out of range [ 1838.414134][T25880] netlink: zone id is out of range [ 1838.414165][T25880] netlink: zone id is out of range [ 1838.414390][T25880] netlink: zone id is out of range [ 1838.414509][T25880] netlink: zone id is out of range [ 1838.414670][T25880] netlink: zone id is out of range [ 1838.414733][T25880] netlink: zone id is out of range [ 1838.414849][T25880] netlink: zone id is out of range [ 1838.472661][T25880] netlink: zone id is out of range [ 1838.477702][T25880] netlink: zone id is out of range [ 1840.036777][T24823] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1844.504713][T25927] net_ratelimit: 7 callbacks suppressed [ 1844.512510][T25927] netlink: zone id is out of range [ 1844.512745][T25927] netlink: zone id is out of range [ 1844.513046][T25927] netlink: zone id is out of range [ 1844.513283][T25927] netlink: zone id is out of range [ 1844.556247][T25927] netlink: zone id is out of range [ 1844.556522][T25927] netlink: zone id is out of range [ 1844.556554][T25927] netlink: zone id is out of range [ 1844.556788][T25927] netlink: zone id is out of range [ 1844.556878][T25927] netlink: zone id is out of range [ 1844.559538][T25927] netlink: zone id is out of range [ 1844.667082][T24380] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1844.807381][T24380] usb 1-1: device descriptor read/64, error -71 [ 1845.067066][T24380] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1845.217101][T24380] usb 1-1: device descriptor read/64, error -71 [ 1845.333550][T24380] usb usb1-port1: attempt power cycle [ 1845.671032][T24380] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1845.778148][T24380] usb 1-1: device descriptor read/8, error -71 [ 1846.437444][T24380] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1846.458882][T24380] usb 1-1: device descriptor read/8, error -71 [ 1846.567546][T24380] usb usb1-port1: unable to enumerate USB device [ 1847.392657][T25936] netdevsim netdevsim6: loading /lib/firmware// failed with error -22 [ 1847.392861][T25936] netdevsim netdevsim6: Direct firmware load for / failed with error -22 [ 1847.392979][T25936] netdevsim netdevsim6: Falling back to sysfs fallback for: / [ 1852.487440][T24823] bridge_slave_1: left allmulticast mode [ 1852.487523][T24823] bridge_slave_1: left promiscuous mode [ 1852.487790][T24823] bridge0: port 2(bridge_slave_1) entered disabled state [ 1852.774562][T24823] bridge_slave_0: left allmulticast mode [ 1852.783148][T24823] bridge_slave_0: left promiscuous mode [ 1852.783422][T24823] bridge0: port 1(bridge_slave_0) entered disabled state [ 1852.998603][T25980] net_ratelimit: 9 callbacks suppressed [ 1852.998880][T25980] netlink: zone id is out of range [ 1853.016178][T25980] netlink: zone id is out of range [ 1853.169166][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.169516][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.078476][T25980] netlink: zone id is out of range [ 1854.143292][T25980] netlink: zone id is out of range [ 1854.143623][T25980] netlink: zone id is out of range [ 1854.208782][T25980] netlink: zone id is out of range [ 1854.210950][T25980] netlink: zone id is out of range [ 1854.214559][T25980] netlink: zone id is out of range [ 1854.215666][T25980] netlink: zone id is out of range [ 1854.418416][T25980] netlink: zone id is out of range [ 1856.483414][ T5731] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1856.618020][ T5731] usb 4-1: device descriptor read/64, error -71 [ 1858.177128][ T5731] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1858.307088][ T5731] usb 4-1: device descriptor read/64, error -71 [ 1858.417452][ T5731] usb usb4-port1: attempt power cycle [ 1858.787110][ T5731] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1858.807890][ T5731] usb 4-1: device descriptor read/8, error -71 [ 1859.047195][ T5731] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1859.067684][ T5731] usb 4-1: device descriptor read/8, error -71 [ 1859.224914][ T5731] usb usb4-port1: unable to enumerate USB device [ 1859.273810][T24823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1859.327723][ T5703] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1859.359610][T24823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1860.269165][ T5703] usb 1-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 1860.286859][ T5703] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1860.286894][ T5703] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1860.314410][T24823] bond0 (unregistering): Released all slaves [ 1860.331109][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1860.339382][ T5703] usb 1-1: Product: syz [ 1860.341184][ T5703] usb 1-1: Manufacturer: syz [ 1860.415331][ T5703] mos7840 1-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1860.870937][ T5253] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1861.102637][T26022] net_ratelimit: 9 callbacks suppressed [ 1861.102737][T26022] netlink: zone id is out of range [ 1861.103078][T26022] netlink: zone id is out of range [ 1861.103472][T26022] netlink: zone id is out of range [ 1861.103813][T26022] netlink: zone id is out of range [ 1861.104402][T26022] netlink: zone id is out of range [ 1861.104611][T26022] netlink: zone id is out of range [ 1861.104696][T26022] netlink: zone id is out of range [ 1861.105083][T26022] netlink: zone id is out of range [ 1861.105265][T26022] netlink: zone id is out of range [ 1861.105498][T26022] netlink: zone id is out of range [ 1862.386698][ T5703] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 1862.457521][ T5703] usb 1-1: USB disconnect, device number 27 [ 1862.509562][ T5703] mos7840 1-1:1.0: device disconnected [ 1867.637098][T12217] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1867.787170][T12217] usb 1-1: Using ep0 maxpacket: 32 [ 1867.788222][T12217] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1867.789701][T12217] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1867.789726][T12217] usb 1-1: config 0 has no interface number 0 [ 1867.789772][T12217] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1867.793498][T12217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.793521][T12217] usb 1-1: Product: syz [ 1867.793536][T12217] usb 1-1: Manufacturer: syz [ 1867.793550][T12217] usb 1-1: SerialNumber: syz [ 1867.807604][T12217] usb 1-1: config 0 descriptor?? [ 1868.397190][T24380] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1868.549162][T24380] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 1868.558383][T24380] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1868.560218][T24380] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1868.580670][T24380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1868.585586][T24380] usb 3-1: Product: syz [ 1868.585606][T24380] usb 3-1: Manufacturer: syz [ 1870.055259][T24380] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1870.363864][T12217] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1870.363958][T12217] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 1870.363977][T12217] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1870.364071][T12217] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 1870.398845][T12217] usb 1-1: USB disconnect, device number 28 [ 1870.881585][T24823] hsr_slave_0: left promiscuous mode [ 1870.920222][T24823] hsr_slave_1: left promiscuous mode [ 1870.928274][T24823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1870.935807][T24823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1871.009198][T24823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1871.017717][T24823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1871.588997][T24823] veth1_macvtap: left promiscuous mode [ 1871.594932][T24823] veth0_macvtap: left promiscuous mode [ 1871.603150][T24823] veth1_vlan: left promiscuous mode [ 1871.634785][T24380] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 1871.667193][T24380] usb 3-1: USB disconnect, device number 114 [ 1871.676273][T24823] veth0_vlan: left promiscuous mode [ 1871.691130][T24380] mos7840 3-1:1.0: device disconnected [ 1879.539295][T24823] team0 (unregistering): Port device team_slave_1 removed [ 1879.619341][T24823] team0 (unregistering): Port device team_slave_0 removed [ 1880.550417][T26168] netdevsim netdevsim2: loading /lib/firmware// failed with error -22 [ 1880.551944][T26168] netdevsim netdevsim2: Direct firmware load for / failed with error -22 [ 1880.552013][T26168] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 1881.821540][T24723] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1881.918472][T24723] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1881.930503][T24723] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1881.956084][T24723] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1881.964766][T24723] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1881.967420][T26175] net_ratelimit: 28 callbacks suppressed [ 1881.967438][T26175] netlink: zone id is out of range [ 1881.967740][T26175] netlink: zone id is out of range [ 1881.968249][T26175] netlink: zone id is out of range [ 1881.968653][T26175] netlink: zone id is out of range [ 1881.969248][T26175] netlink: zone id is out of range [ 1881.969485][T26175] netlink: zone id is out of range [ 1881.969535][T26175] netlink: zone id is out of range [ 1881.969920][T26175] netlink: zone id is out of range [ 1881.970072][T26175] netlink: zone id is out of range [ 1881.970375][T26175] netlink: zone id is out of range [ 1883.860626][T12217] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1884.075911][T10897] Bluetooth: hci3: command tx timeout [ 1884.097461][T12217] usb 1-1: Using ep0 maxpacket: 32 [ 1884.102839][T12217] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1884.105625][T12217] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1884.105665][T12217] usb 1-1: config 0 has no interface number 0 [ 1884.105715][T12217] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1884.144475][T12217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1884.152569][T12217] usb 1-1: Product: syz [ 1884.152594][T12217] usb 1-1: Manufacturer: syz [ 1884.152610][T12217] usb 1-1: SerialNumber: syz [ 1884.180777][T12217] usb 1-1: config 0 descriptor?? [ 1884.587201][ T5596] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1884.780194][ T5596] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1884.784088][ T5596] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1884.791225][ T5596] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1884.802457][ T5596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1884.802519][ T5596] usb 4-1: Product: syz [ 1884.802590][ T5596] usb 4-1: Manufacturer: syz [ 1884.802615][ T5596] usb 4-1: SerialNumber: syz [ 1884.832925][ T5596] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 1884.872772][ T5596] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1884.907662][ T5596] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1886.100775][T12217] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1886.100869][T12217] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 1886.100879][T12217] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1886.100934][T12217] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 1886.106620][T12217] usb 1-1: USB disconnect, device number 29 [ 1886.117184][T10897] Bluetooth: hci3: command tx timeout [ 1886.197310][T26151] udevd[26151]: setting mode of /dev/bus/usb/001/029 to 020664 failed: No such file or directory [ 1886.224187][T26151] udevd[26151]: setting owner of /dev/bus/usb/001/029 to uid=0, gid=0 failed: No such file or directory [ 1887.505884][T26237] net_ratelimit: 9 callbacks suppressed [ 1887.505974][T26237] netlink: zone id is out of range [ 1887.509804][T26237] netlink: zone id is out of range [ 1887.515234][T26237] netlink: zone id is out of range [ 1887.519797][T26237] netlink: zone id is out of range [ 1887.526306][T26237] netlink: zone id is out of range [ 1887.529331][T26237] netlink: zone id is out of range [ 1887.529814][T26237] netlink: zone id is out of range [ 1887.535172][T26237] netlink: zone id is out of range [ 1887.537299][T26237] netlink: zone id is out of range [ 1887.547737][T26237] netlink: zone id is out of range [ 1888.214835][T10897] Bluetooth: hci3: command tx timeout [ 1890.360094][T10897] Bluetooth: hci3: command tx timeout [ 1891.723094][T26201] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 1891.897237][T26201] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 1892.004997][T25732] usb 4-1: USB disconnect, device number 126 [ 1892.276284][T25732] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1892.300600][T25732] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1892.306643][T25732] ti_usb_3410_5052 4-1:2.0: device disconnected [ 1894.117379][T12217] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1894.233060][ T1015] bridge_slave_1: left allmulticast mode [ 1894.233144][ T1015] bridge_slave_1: left promiscuous mode [ 1894.233386][ T1015] bridge0: port 2(bridge_slave_1) entered disabled state [ 1894.277768][T12217] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1894.287257][T12217] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1894.294644][T12217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1894.294700][T12217] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1894.294729][T12217] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1894.296529][T12217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1894.296581][T12217] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1894.296606][T12217] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1894.327121][T12217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1894.327178][T12217] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1894.327206][T12217] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1894.331314][T12217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1894.331368][T12217] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1894.331396][T12217] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1894.332504][T12217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1894.332553][T12217] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1894.332580][T12217] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1894.333662][T12217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1894.333710][T12217] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1894.333737][T12217] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1894.467721][T12217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1894.467779][T12217] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1894.467807][T12217] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1894.508611][T12217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1894.508690][T12217] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1894.508720][T12217] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1894.543814][T12217] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1894.543877][T12217] usb 4-1: Product: syz [ 1894.543890][T12217] usb 4-1: Manufacturer: syz [ 1894.543898][T12217] usb 4-1: SerialNumber: syz [ 1894.571064][T12217] usb 4-1: config 0 descriptor?? [ 1894.623476][T12217] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1894.750831][ T1015] bridge_slave_0: left allmulticast mode [ 1894.750937][ T1015] bridge_slave_0: left promiscuous mode [ 1894.752084][ T1015] bridge0: port 1(bridge_slave_0) entered disabled state [ 1894.963840][T24380] usb 4-1: USB disconnect, device number 127 [ 1894.969972][T24380] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1898.148624][ T1015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1898.270536][ T1015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1898.361344][ T1015] bond0 (unregistering): Released all slaves [ 1898.387496][T26324] FAULT_INJECTION: forcing a failure. [ 1898.387496][T26324] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1898.387596][T26324] CPU: 1 UID: 0 PID: 26324 Comm: syz.3.5830 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1898.387616][T26324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1898.387627][T26324] Call Trace: [ 1898.387635][T26324] [ 1898.387644][T26324] dump_stack_lvl+0xe8/0x150 [ 1898.387684][T26324] should_fail_ex+0x46b/0x600 [ 1898.387713][T26324] get_futex_key+0x1b4/0x1580 [ 1898.387789][T26324] ? __pfx_get_futex_key+0x10/0x10 [ 1898.387829][T26324] futex_wake+0x119/0x600 [ 1898.387852][T26324] ? setup_signal_shadow_stack+0x1e3/0x240 [ 1898.387895][T26324] ? __pfx_futex_wake+0x10/0x10 [ 1898.387915][T26324] ? x64_setup_rt_frame+0x92d/0xc50 [ 1898.387972][T26324] do_futex+0x458/0x4e0 [ 1898.388006][T26324] ? __pfx_do_futex+0x10/0x10 [ 1898.388034][T26324] ? signal_setup_done+0x22f/0x310 [ 1898.388073][T26324] __se_sys_futex+0x3a8/0x450 [ 1898.388108][T26324] ? __pfx___se_sys_futex+0x10/0x10 [ 1898.388146][T26324] ? __x64_sys_futex+0x21/0xf0 [ 1898.388177][T26324] do_syscall_64+0x166/0x520 [ 1898.388200][T26324] ? trace_irq_disable+0x3b/0x140 [ 1898.388226][T26324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1898.388246][T26324] ? clear_bhb_loop+0x70/0xc0 [ 1898.388270][T26324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1898.388298][T26324] RIP: 0033:0x7f5f9198e159 [ 1898.388317][T26324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1898.388336][T26324] RSP: 002b:00007f5f8fbe60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1898.388361][T26324] RAX: ffffffffffffffda RBX: 00007f5f91c15fa8 RCX: 00007f5f9198e159 [ 1898.388376][T26324] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5f91c15fac [ 1898.388389][T26324] RBP: 00007f5f91c15fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1898.388403][T26324] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1898.388417][T26324] R13: 00007f5f91c16038 R14: 00007ffd1afb2330 R15: 00007ffd1afb2418 [ 1898.388447][T26324] [ 1899.987403][ T1015] hsr_slave_0: left promiscuous mode [ 1901.122678][ T1015] hsr_slave_1: left promiscuous mode [ 1901.127836][ T1015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1901.493586][ T1015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1901.548326][T25732] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1901.653549][T26354] FAULT_INJECTION: forcing a failure. [ 1901.653549][T26354] name failslab, interval 1, probability 0, space 0, times 0 [ 1901.653641][T26354] CPU: 1 UID: 0 PID: 26354 Comm: syz.2.5840 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1901.653666][T26354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1901.653677][T26354] Call Trace: [ 1901.653684][T26354] [ 1901.653693][T26354] dump_stack_lvl+0xe8/0x150 [ 1901.653729][T26354] should_fail_ex+0x46b/0x600 [ 1901.653757][T26354] should_failslab+0xa8/0x100 [ 1901.653790][T26354] __kmalloc_cache_noprof+0xa1/0x680 [ 1901.653816][T26354] ? percpu_ref_init+0xc5/0x350 [ 1901.653844][T26354] ? percpu_ref_init+0xc5/0x350 [ 1901.653888][T26354] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 1901.653909][T26354] percpu_ref_init+0xc5/0x350 [ 1901.653942][T26354] io_ring_ctx_alloc+0x328/0xba0 [ 1901.653963][T26354] ? io_prepare_config+0x8c8/0xc70 [ 1901.653993][T26354] io_uring_create+0x50/0x990 [ 1901.654016][T26354] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1901.654043][T26354] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1901.654073][T26354] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1901.654112][T26354] ? rcu_is_watching+0x16/0xb0 [ 1901.654151][T26354] do_syscall_64+0x166/0x520 [ 1901.654172][T26354] ? trace_irq_disable+0x3b/0x140 [ 1901.654196][T26354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1901.654216][T26354] ? clear_bhb_loop+0x70/0xc0 [ 1901.654239][T26354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1901.654259][T26354] RIP: 0033:0x7f3b42c1e159 [ 1901.654277][T26354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1901.654295][T26354] RSP: 002b:00007f3b40e75fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1901.654317][T26354] RAX: ffffffffffffffda RBX: 00002000000000c0 RCX: 00007f3b42c1e159 [ 1901.654331][T26354] RDX: 0000200000000640 RSI: 00002000000000c0 RDI: 0000000000000025 [ 1901.654357][T26354] RBP: 00007f3b42cb5024 R08: 0000000000000000 R09: 0000000000000000 [ 1901.654371][T26354] R10: 0000200000000000 R11: 0000000000000206 R12: 0000200000000640 [ 1901.654385][T26354] R13: 0000200000000000 R14: 0000000000000000 R15: 00007ffe02e07bf8 [ 1901.654416][T26354] [ 1901.698064][T25732] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1901.698122][T25732] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1901.700634][T25732] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1901.700688][T25732] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1901.700715][T25732] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1901.705449][T25732] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1901.705501][T25732] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1901.705527][T25732] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1901.718320][T25732] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1901.718389][T25732] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1901.718416][T25732] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1901.719928][T25732] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1901.719978][T25732] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1901.720023][T25732] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1901.721226][T25732] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1901.721274][T25732] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1901.721301][T25732] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1901.722339][T25732] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1901.722386][T25732] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1901.722412][T25732] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1901.726338][T25732] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1901.726387][T25732] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1901.726414][T25732] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1901.731580][T25732] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1901.731631][T25732] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1901.731656][T25732] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1901.744165][T25732] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1901.744190][T25732] usb 4-1: Product: syz [ 1901.744205][T25732] usb 4-1: Manufacturer: syz [ 1901.744219][T25732] usb 4-1: SerialNumber: syz [ 1901.799370][T25732] usb 4-1: config 0 descriptor?? [ 1901.848288][T25732] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1902.214262][T12217] usb 4-1: USB disconnect, device number 2 [ 1902.261448][T12217] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1903.269964][ T1015] team0 (unregistering): Port device team_slave_1 removed [ 1903.329951][ T1015] team0 (unregistering): Port device team_slave_0 removed [ 1904.952442][T26384] FAULT_INJECTION: forcing a failure. [ 1904.952442][T26384] name failslab, interval 1, probability 0, space 0, times 0 [ 1904.953692][T26384] CPU: 1 UID: 0 PID: 26384 Comm: syz.2.5851 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1904.953719][T26384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1904.953732][T26384] Call Trace: [ 1904.953740][T26384] [ 1904.953748][T26384] dump_stack_lvl+0xe8/0x150 [ 1904.953785][T26384] should_fail_ex+0x46b/0x600 [ 1904.953813][T26384] should_failslab+0xa8/0x100 [ 1904.953844][T26384] __kvmalloc_node_noprof+0x176/0x890 [ 1904.953872][T26384] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 1904.953897][T26384] ? io_ring_ctx_alloc+0x1bd/0xba0 [ 1904.953916][T26384] ? io_ring_ctx_alloc+0x1bd/0xba0 [ 1904.953941][T26384] io_ring_ctx_alloc+0x1bd/0xba0 [ 1904.953960][T26384] ? io_prepare_config+0x8c8/0xc70 [ 1904.953991][T26384] io_uring_create+0x50/0x990 [ 1904.954029][T26384] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1904.954054][T26384] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1904.954084][T26384] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1904.954123][T26384] ? rcu_is_watching+0x16/0xb0 [ 1904.954164][T26384] do_syscall_64+0x166/0x520 [ 1904.954185][T26384] ? trace_irq_disable+0x3b/0x140 [ 1904.954209][T26384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1904.954229][T26384] ? clear_bhb_loop+0x70/0xc0 [ 1904.954253][T26384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1904.954273][T26384] RIP: 0033:0x7f3b42c1e159 [ 1904.954290][T26384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1904.954308][T26384] RSP: 002b:00007f3b40e75fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1904.954330][T26384] RAX: ffffffffffffffda RBX: 00002000000000c0 RCX: 00007f3b42c1e159 [ 1904.954345][T26384] RDX: 0000200000000640 RSI: 00002000000000c0 RDI: 0000000000000025 [ 1904.954359][T26384] RBP: 00007f3b42cb5024 R08: 0000000000000000 R09: 0000000000000000 [ 1904.954371][T26384] R10: 0000200000000000 R11: 0000000000000206 R12: 0000200000000640 [ 1904.954385][T26384] R13: 0000200000000000 R14: 0000000000000000 R15: 00007ffe02e07bf8 [ 1904.954415][T26384] [ 1905.650074][T25732] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1905.929152][T25732] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1905.929267][T25732] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 1905.932814][T25732] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1905.932866][T25732] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1905.932894][T25732] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1905.934959][T25732] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1905.935010][T25732] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1905.935036][T25732] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1905.936912][T25732] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1905.937220][T25732] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1905.937247][T25732] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1905.938677][T25732] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1905.938724][T25732] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1905.938750][T25732] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1905.939953][T25732] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1905.940023][T25732] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1905.940049][T25732] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1905.941137][T25732] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1905.941184][T25732] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1905.941209][T25732] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1905.944193][T25732] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1905.944249][T25732] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1905.944283][T25732] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1905.945290][T25732] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1905.945337][T25732] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1905.945363][T25732] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1905.948235][T25732] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1905.948265][T25732] usb 7-1: Product: syz [ 1905.948279][T25732] usb 7-1: Manufacturer: syz [ 1905.948296][T25732] usb 7-1: SerialNumber: syz [ 1905.956701][T25732] usb 7-1: config 0 descriptor?? [ 1906.085923][T25732] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 1906.347696][T25732] usb 7-1: USB disconnect, device number 57 [ 1906.352554][T25732] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 1906.658652][T26176] bridge0: port 1(bridge_slave_0) entered blocking state [ 1906.658944][T26176] bridge0: port 1(bridge_slave_0) entered disabled state [ 1906.659206][T26176] bridge_slave_0: entered allmulticast mode [ 1906.661287][T26176] bridge_slave_0: entered promiscuous mode [ 1906.666283][T26176] bridge0: port 2(bridge_slave_1) entered blocking state [ 1906.666485][T26176] bridge0: port 2(bridge_slave_1) entered disabled state [ 1906.666629][T26176] bridge_slave_1: entered allmulticast mode [ 1906.733143][T26176] bridge_slave_1: entered promiscuous mode [ 1906.777087][ T5703] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1908.279211][ T5703] usb 1-1: Using ep0 maxpacket: 32 [ 1908.291597][ T5703] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1908.295489][ T5703] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1908.295552][ T5703] usb 1-1: config 0 has no interface number 0 [ 1908.295621][ T5703] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1908.307056][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.307114][ T5703] usb 1-1: Product: syz [ 1908.307127][ T5703] usb 1-1: Manufacturer: syz [ 1908.307140][ T5703] usb 1-1: SerialNumber: syz [ 1908.313493][ T5703] usb 1-1: config 0 descriptor?? [ 1908.390440][T26176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1908.408711][T26176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1908.442025][T26415] FAULT_INJECTION: forcing a failure. [ 1908.442025][T26415] name failslab, interval 1, probability 0, space 0, times 0 [ 1908.442163][T26415] CPU: 1 UID: 0 PID: 26415 Comm: syz.6.5861 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1908.442188][T26415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1908.442201][T26415] Call Trace: [ 1908.442210][T26415] [ 1908.442219][T26415] dump_stack_lvl+0xe8/0x150 [ 1908.442256][T26415] should_fail_ex+0x46b/0x600 [ 1908.442284][T26415] should_failslab+0xa8/0x100 [ 1908.442312][T26415] __kvmalloc_node_noprof+0x176/0x890 [ 1908.442349][T26415] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 1908.442374][T26415] ? io_ring_ctx_alloc+0x1bd/0xba0 [ 1908.442393][T26415] ? io_ring_ctx_alloc+0x1bd/0xba0 [ 1908.442418][T26415] io_ring_ctx_alloc+0x1bd/0xba0 [ 1908.442439][T26415] ? io_prepare_config+0x8c8/0xc70 [ 1908.442469][T26415] io_uring_create+0x50/0x990 [ 1908.442492][T26415] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1908.442518][T26415] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1908.442548][T26415] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1908.442585][T26415] ? __se_sys_pidfd_open+0x9b/0x260 [ 1908.442640][T26415] ? __pfx___se_sys_pidfd_open+0x10/0x10 [ 1908.442672][T26415] do_syscall_64+0x166/0x520 [ 1908.442692][T26415] ? trace_irq_disable+0x3b/0x140 [ 1908.442717][T26415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1908.442737][T26415] ? clear_bhb_loop+0x70/0xc0 [ 1908.442762][T26415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1908.442782][T26415] RIP: 0033:0x7fda0730e159 [ 1908.442800][T26415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1908.442818][T26415] RSP: 002b:00007fda05565fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1908.442840][T26415] RAX: ffffffffffffffda RBX: 00002000000000c0 RCX: 00007fda0730e159 [ 1908.442855][T26415] RDX: 0000200000000640 RSI: 00002000000000c0 RDI: 0000000000000025 [ 1908.442869][T26415] RBP: 00007fda073a5024 R08: 0000000000000000 R09: 0000000000000000 [ 1908.442883][T26415] R10: 0000200000000000 R11: 0000000000000206 R12: 0000200000000640 [ 1908.442896][T26415] R13: 0000200000000000 R14: 0000000000000000 R15: 00007ffcf5fba098 [ 1908.442927][T26415] [ 1908.926887][T26176] team0: Port device team_slave_0 added [ 1909.281091][T26176] team0: Port device team_slave_1 added [ 1909.702195][T26176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1909.709456][T26176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1909.709489][T26176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1909.761075][T26176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1909.770148][T26176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1909.770180][T26176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1910.082324][ T5703] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1910.082418][ T5703] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 1910.082438][ T5703] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1910.082535][ T5703] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 1910.122956][ T5703] usb 1-1: USB disconnect, device number 30 [ 1910.453554][T26176] hsr_slave_0: entered promiscuous mode [ 1910.467723][T26176] hsr_slave_1: entered promiscuous mode [ 1912.126500][T26449] FAULT_INJECTION: forcing a failure. [ 1912.126500][T26449] name failslab, interval 1, probability 0, space 0, times 0 [ 1912.126581][T26449] CPU: 0 UID: 0 PID: 26449 Comm: syz.0.5872 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1912.126605][T26449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1912.126616][T26449] Call Trace: [ 1912.126624][T26449] [ 1912.126633][T26449] dump_stack_lvl+0xe8/0x150 [ 1912.126677][T26449] should_fail_ex+0x46b/0x600 [ 1912.126703][T26449] should_failslab+0xa8/0x100 [ 1912.126734][T26449] __kvmalloc_node_noprof+0x176/0x890 [ 1912.126761][T26449] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 1912.126785][T26449] ? io_alloc_cache_init+0x42/0x140 [ 1912.126804][T26449] ? io_alloc_cache_init+0x42/0x140 [ 1912.126829][T26449] io_alloc_cache_init+0x42/0x140 [ 1912.126854][T26449] io_ring_ctx_alloc+0x518/0xba0 [ 1912.126883][T26449] io_uring_create+0x50/0x990 [ 1912.126907][T26449] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1912.126936][T26449] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1912.126963][T26449] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1912.127001][T26449] ? rcu_is_watching+0x16/0xb0 [ 1912.127039][T26449] do_syscall_64+0x166/0x520 [ 1912.127060][T26449] ? trace_irq_disable+0x3b/0x140 [ 1912.127085][T26449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1912.127105][T26449] ? clear_bhb_loop+0x70/0xc0 [ 1912.127128][T26449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1912.127146][T26449] RIP: 0033:0x7fe90ac4e159 [ 1912.127166][T26449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1912.127183][T26449] RSP: 002b:00007fe908ea5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1912.127205][T26449] RAX: ffffffffffffffda RBX: 00002000000000c0 RCX: 00007fe90ac4e159 [ 1912.127222][T26449] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000025 [ 1912.127234][T26449] RBP: 00007fe90ace5024 R08: 0000000000000000 R09: 0000000000000000 [ 1912.127248][T26449] R10: 0000200000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1912.127261][T26449] R13: 0000200000000000 R14: 0000200000000000 R15: 00007ffdd28ffe98 [ 1912.127301][T26449] [ 1913.937861][ T5703] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1914.097873][ T5703] usb 7-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 1914.109950][ T5703] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1914.109985][ T5703] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1914.113295][ T5703] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1914.113320][ T5703] usb 7-1: Product: syz [ 1914.113334][ T5703] usb 7-1: Manufacturer: syz [ 1914.180099][ T5703] mos7840 7-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1914.296519][T26176] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1914.499798][T26176] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1914.505425][T26176] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1914.773793][ T5703] mos7840 ttyUSB0: probe with driver mos7840 failed with error -32 [ 1914.806190][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.814014][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.563554][T26176] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1915.857971][T26176] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1915.929117][T26176] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1915.949884][T26176] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1915.985965][T26176] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1916.234929][T26176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1916.268659][T26176] 8021q: adding VLAN 0 to HW filter on device team0 [ 1916.290081][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1916.310341][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1916.350678][ T3554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1916.359641][ T3554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1916.467371][ T5703] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1916.647068][ T5703] usb 1-1: Using ep0 maxpacket: 32 [ 1916.656369][ T5703] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1916.657903][ T5703] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1916.657927][ T5703] usb 1-1: config 0 has no interface number 0 [ 1916.657971][ T5703] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1916.660661][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1916.660686][ T5703] usb 1-1: Product: syz [ 1916.660700][ T5703] usb 1-1: Manufacturer: syz [ 1916.660714][ T5703] usb 1-1: SerialNumber: syz [ 1916.684182][ T5703] usb 1-1: config 0 descriptor?? [ 1916.687203][ T5731] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1916.872614][ T5731] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1916.879308][ T5731] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1916.904017][T24380] usb 7-1: USB disconnect, device number 58 [ 1916.905489][ T5731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1916.905564][ T5731] usb 4-1: Product: syz [ 1916.905579][ T5731] usb 4-1: Manufacturer: syz [ 1916.905594][ T5731] usb 4-1: SerialNumber: syz [ 1917.206684][ T5731] hub 4-1:1.0: bad descriptor, ignoring hub [ 1917.206822][ T5731] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1917.211604][T24380] mos7840 7-1:1.0: device disconnected [ 1917.414694][ T5731] usb 4-1: USB disconnect, device number 3 [ 1919.306903][ T5703] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 1919.307284][ T5703] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 1919.307306][ T5703] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1919.307398][ T5703] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 1919.322578][ T5703] usb 1-1: USB disconnect, device number 31 [ 1920.941221][T26532] FAULT_INJECTION: forcing a failure. [ 1920.941221][T26532] name failslab, interval 1, probability 0, space 0, times 0 [ 1920.941297][T26532] CPU: 0 UID: 0 PID: 26532 Comm: syz.2.5894 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1920.941320][T26532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1920.941332][T26532] Call Trace: [ 1920.941339][T26532] [ 1920.941347][T26532] dump_stack_lvl+0xe8/0x150 [ 1920.941383][T26532] should_fail_ex+0x46b/0x600 [ 1920.941411][T26532] should_failslab+0xa8/0x100 [ 1920.941451][T26532] __kvmalloc_node_noprof+0x176/0x890 [ 1920.941480][T26532] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 1920.941504][T26532] ? io_ring_ctx_alloc+0x1bd/0xba0 [ 1920.941523][T26532] ? io_ring_ctx_alloc+0x1bd/0xba0 [ 1920.941547][T26532] io_ring_ctx_alloc+0x1bd/0xba0 [ 1920.941567][T26532] ? io_prepare_config+0x8c8/0xc70 [ 1920.941597][T26532] io_uring_create+0x50/0x990 [ 1920.941620][T26532] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1920.941645][T26532] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1920.941674][T26532] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1920.941711][T26532] ? __se_sys_pidfd_open+0x9b/0x260 [ 1920.941731][T26532] ? __pfx___se_sys_pidfd_open+0x10/0x10 [ 1920.941764][T26532] do_syscall_64+0x166/0x520 [ 1920.941785][T26532] ? trace_irq_disable+0x3b/0x140 [ 1920.941808][T26532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1920.941829][T26532] ? clear_bhb_loop+0x70/0xc0 [ 1920.941852][T26532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1920.941871][T26532] RIP: 0033:0x7f3b42c1e159 [ 1920.941890][T26532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1920.941908][T26532] RSP: 002b:00007f3b40e75fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1920.941929][T26532] RAX: ffffffffffffffda RBX: 00002000000000c0 RCX: 00007f3b42c1e159 [ 1920.941944][T26532] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000025 [ 1920.941960][T26532] RBP: 00007f3b42cb5024 R08: 0000000000000000 R09: 0000000000000000 [ 1920.941973][T26532] R10: 0000200000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1920.941986][T26532] R13: 0000200000000000 R14: 0000200000000000 R15: 00007ffe02e07bf8 [ 1920.942017][T26532] [ 1921.195625][T26176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1922.534344][T12217] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1922.700327][T26551] net_ratelimit: 9 callbacks suppressed [ 1922.700370][T26551] netlink: zone id is out of range [ 1922.702966][T26551] netlink: zone id is out of range [ 1922.709897][T26551] netlink: zone id is out of range [ 1922.712110][T12217] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1922.714217][T26551] netlink: zone id is out of range [ 1922.717097][T12217] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1922.720220][T26551] netlink: zone id is out of range [ 1922.722443][T26551] netlink: zone id is out of range [ 1922.723236][T26551] netlink: zone id is out of range [ 1922.727643][T26551] netlink: zone id is out of range [ 1922.729010][T26551] netlink: zone id is out of range [ 1922.732456][T26551] netlink: zone id is out of range [ 1922.737975][T12523] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1922.972935][T12217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1922.973048][T12217] usb 1-1: Product: syz [ 1922.973064][T12217] usb 1-1: Manufacturer: syz [ 1922.973079][T12217] usb 1-1: SerialNumber: syz [ 1922.992745][T12523] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1923.063712][T12523] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1923.149387][T12523] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1923.572282][T12523] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.581519][T12523] usb 4-1: Product: syz [ 1923.581573][T12523] usb 4-1: Manufacturer: syz [ 1923.581632][T12523] usb 4-1: SerialNumber: syz [ 1924.418068][T12217] hub 1-1:1.0: bad descriptor, ignoring hub [ 1924.426919][T12217] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1924.915106][T12523] usb 4-1: can't set config #2, error -71 [ 1924.945749][T12217] usb 1-1: USB disconnect, device number 32 [ 1925.028462][T12523] usb 4-1: USB disconnect, device number 4 [ 1926.097126][T12217] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1926.280223][T26176] veth0_vlan: entered promiscuous mode [ 1926.299042][T12217] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1926.309587][T12217] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1926.310891][T12217] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1926.313715][T12217] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.313741][T12217] usb 4-1: Product: syz [ 1926.313756][T12217] usb 4-1: Manufacturer: syz [ 1926.313771][T12217] usb 4-1: SerialNumber: syz [ 1926.363580][T26176] veth1_vlan: entered promiscuous mode [ 1926.413388][T12217] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 1926.432621][T12217] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1926.451813][T12217] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1926.881189][T26176] veth0_macvtap: entered promiscuous mode [ 1926.901893][T26176] veth1_macvtap: entered promiscuous mode [ 1926.944609][T26176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1926.998507][T26176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1927.448188][T23340] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1927.448652][T23340] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1927.839982][ T5703] kernel read not supported for file bpf-prog (pid: 5703 comm: kworker/1:4) [ 1927.848416][ T9850] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1927.848464][ T9850] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1927.851959][T25732] kernel write not supported for file bpf-prog (pid: 25732 comm: kworker/1:3) [ 1929.127314][ T5596] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1929.142032][T26592] net_ratelimit: 9 callbacks suppressed [ 1929.147779][T26592] netlink: zone id is out of range [ 1929.153518][T26592] netlink: zone id is out of range [ 1929.172761][T26592] netlink: zone id is out of range [ 1929.179167][T26592] netlink: zone id is out of range [ 1929.211353][T26592] netlink: zone id is out of range [ 1929.217503][T26592] netlink: zone id is out of range [ 1929.219532][T26592] netlink: zone id is out of range [ 1929.220216][T26592] netlink: zone id is out of range [ 1929.220690][T26592] netlink: zone id is out of range [ 1929.274657][T26592] netlink: zone id is out of range [ 1929.308691][ T5596] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1929.330297][ T5596] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1929.336659][ T5596] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1929.390930][ T5596] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.399234][ T5596] usb 7-1: Product: syz [ 1929.399315][ T5596] usb 7-1: Manufacturer: syz [ 1929.399331][ T5596] usb 7-1: SerialNumber: syz [ 1929.600471][ T5596] hub 7-1:1.0: bad descriptor, ignoring hub [ 1929.600612][ T5596] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1929.958034][T26567] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 1929.981159][T26567] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 1930.303334][T12523] usb 4-1: USB disconnect, device number 5 [ 1930.392293][ T5857] usb 7-1: USB disconnect, device number 59 [ 1930.410546][T12523] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1930.450791][T12523] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1930.491007][T12523] ti_usb_3410_5052 4-1:2.0: device disconnected [ 1931.602159][T23340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1931.602229][T23340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1931.934161][ T3554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1931.942120][ T3554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1932.287055][ T5703] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1932.438015][ T5703] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1932.439447][ T5703] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1932.440614][ T5703] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1932.443564][ T5703] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1932.443587][ T5703] usb 7-1: Product: syz [ 1932.443601][ T5703] usb 7-1: Manufacturer: syz [ 1932.443615][ T5703] usb 7-1: SerialNumber: syz [ 1932.502362][ T5703] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 1932.521551][ T5703] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1932.551849][ T5703] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1933.809088][ T5703] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1933.957142][ T5703] usb 1-1: Using ep0 maxpacket: 32 [ 1933.963390][ T5703] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1933.988470][ T5703] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1933.991732][ T5703] usb 1-1: config 0 has no interface number 0 [ 1933.991806][ T5703] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1934.028463][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1934.028586][ T5703] usb 1-1: Product: syz [ 1934.028612][ T5703] usb 1-1: Manufacturer: syz [ 1934.028627][ T5703] usb 1-1: SerialNumber: syz [ 1934.074443][ T5703] usb 1-1: config 0 descriptor?? [ 1934.820470][T26595] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 1934.870415][T26595] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 1934.871042][T26595] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 1934.871595][T26595] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 1935.068138][T12217] usb 7-1: USB disconnect, device number 60 [ 1935.152466][T12217] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1935.208224][T12217] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1935.214053][T24723] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1935.255660][T12217] ti_usb_3410_5052 7-1:2.0: device disconnected [ 1935.283516][T24723] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1935.299159][T24723] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1935.343298][T24723] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1935.354072][T24723] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1935.669174][ T5857] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1935.669655][T26635] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5924'. [ 1935.898138][ T5857] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1935.909114][ T5857] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1935.909167][ T5857] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1935.916452][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1935.916486][ T5857] usb 3-1: Product: syz [ 1935.916501][ T5857] usb 3-1: Manufacturer: syz [ 1935.916516][ T5857] usb 3-1: SerialNumber: syz [ 1936.024756][ T5857] hub 3-1:1.0: bad descriptor, ignoring hub [ 1936.030852][ T5857] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1936.068840][T26643] net_ratelimit: 9 callbacks suppressed [ 1936.070409][T26643] netlink: zone id is out of range [ 1936.070734][T26643] netlink: zone id is out of range [ 1936.071273][T26643] netlink: zone id is out of range [ 1936.102873][T26643] netlink: zone id is out of range [ 1936.123103][T26643] netlink: zone id is out of range [ 1936.136215][T26643] netlink: zone id is out of range [ 1936.136276][T26643] netlink: zone id is out of range [ 1936.136699][T26643] netlink: zone id is out of range [ 1936.136869][T26643] netlink: zone id is out of range [ 1936.173275][T26643] netlink: zone id is out of range [ 1936.372792][ T5703] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1936.452609][ T5703] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 1936.452636][ T5703] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1936.452752][ T5703] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 1937.067580][ T5703] usb 1-1: USB disconnect, device number 33 [ 1937.147637][T12217] usb 3-1: USB disconnect, device number 115 [ 1937.477260][T24723] Bluetooth: hci4: command tx timeout [ 1937.738224][T26652] FAULT_INJECTION: forcing a failure. [ 1937.738224][T26652] name failslab, interval 1, probability 0, space 0, times 0 [ 1937.738319][T26652] CPU: 1 UID: 0 PID: 26652 Comm: syz.6.5927 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1937.738342][T26652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1937.738352][T26652] Call Trace: [ 1937.738362][T26652] [ 1937.738370][T26652] dump_stack_lvl+0xe8/0x150 [ 1937.738407][T26652] should_fail_ex+0x46b/0x600 [ 1937.738435][T26652] should_failslab+0xa8/0x100 [ 1937.738468][T26652] __kvmalloc_node_noprof+0x176/0x890 [ 1937.738495][T26652] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 1937.738520][T26652] ? io_ring_ctx_alloc+0x1bd/0xba0 [ 1937.738537][T26652] ? io_ring_ctx_alloc+0x1bd/0xba0 [ 1937.738561][T26652] io_ring_ctx_alloc+0x1bd/0xba0 [ 1937.738581][T26652] ? io_prepare_config+0x8c8/0xc70 [ 1937.738611][T26652] io_uring_create+0x50/0x990 [ 1937.738634][T26652] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1937.738659][T26652] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1937.738689][T26652] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1937.738728][T26652] ? rcu_is_watching+0x16/0xb0 [ 1937.738767][T26652] do_syscall_64+0x166/0x520 [ 1937.738796][T26652] ? trace_irq_disable+0x3b/0x140 [ 1937.738821][T26652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1937.738840][T26652] ? clear_bhb_loop+0x70/0xc0 [ 1937.738865][T26652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1937.738885][T26652] RIP: 0033:0x7fda0730e159 [ 1937.738904][T26652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1937.738921][T26652] RSP: 002b:00007fda05565fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1937.738942][T26652] RAX: ffffffffffffffda RBX: 00002000000000c0 RCX: 00007fda0730e159 [ 1937.738957][T26652] RDX: 0000200000000640 RSI: 00002000000000c0 RDI: 0000000000000025 [ 1937.738971][T26652] RBP: 00007fda073a5024 R08: 0000000000000000 R09: 0000000000000000 [ 1937.738984][T26652] R10: 0000000000000000 R11: 0000000000000206 R12: 0000200000000640 [ 1937.738997][T26652] R13: 0000000000000000 R14: 0000200000000000 R15: 00007ffcf5fba098 [ 1937.739027][T26652] [ 1938.402609][T15452] syz_tun (unregistering): left allmulticast mode [ 1939.647135][T24723] Bluetooth: hci4: command tx timeout [ 1940.541814][T26672] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5934'. [ 1941.497339][T26682] net_ratelimit: 9 callbacks suppressed [ 1941.497400][T26682] netlink: zone id is out of range [ 1941.518663][T26682] netlink: zone id is out of range [ 1941.522543][T26682] netlink: zone id is out of range [ 1941.527106][T26682] netlink: zone id is out of range [ 1941.532603][T26682] netlink: zone id is out of range [ 1941.534555][T26682] netlink: zone id is out of range [ 1941.534927][T26682] netlink: zone id is out of range [ 1941.537085][ T5857] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1941.540376][T26682] netlink: zone id is out of range [ 1941.541692][T26682] netlink: zone id is out of range [ 1941.545387][T26682] netlink: zone id is out of range [ 1941.687510][T24380] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1941.697132][ T5857] usb 1-1: Using ep0 maxpacket: 32 [ 1941.698084][ T5857] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1941.699568][ T5857] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1941.699591][ T5857] usb 1-1: config 0 has no interface number 0 [ 1941.699636][ T5857] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1941.703177][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.703201][ T5857] usb 1-1: Product: syz [ 1941.703215][ T5857] usb 1-1: Manufacturer: syz [ 1941.703229][ T5857] usb 1-1: SerialNumber: syz [ 1941.763949][T24723] Bluetooth: hci4: command tx timeout [ 1942.060297][T24380] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1942.076449][T24380] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1942.076576][T24380] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1942.145784][T24380] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1942.154529][T24380] usb 7-1: Product: syz [ 1942.154592][T24380] usb 7-1: Manufacturer: syz [ 1942.154643][T24380] usb 7-1: SerialNumber: syz [ 1942.394260][ T5857] usb 1-1: config 0 descriptor?? [ 1942.605254][T24380] hub 7-1:1.0: bad descriptor, ignoring hub [ 1942.613235][T24380] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1943.217480][T24380] usb 7-1: USB disconnect, device number 61 [ 1943.797217][T24723] Bluetooth: hci4: command tx timeout [ 1944.632428][ T3524] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1945.424949][ T5703] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1945.818374][ T5703] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1945.832082][ T5703] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1945.833778][ T5703] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1945.864128][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.872941][ T5703] usb 3-1: Product: syz [ 1945.872962][ T5703] usb 3-1: Manufacturer: syz [ 1945.872977][ T5703] usb 3-1: SerialNumber: syz [ 1945.967598][ T5703] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 1946.002542][ T5703] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1946.027557][ T5703] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1946.167516][ T5857] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1946.167615][ T5857] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 1946.167642][ T5857] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1946.167721][ T5857] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 1946.204318][ T5857] usb 1-1: USB disconnect, device number 34 [ 1947.318780][T26694] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 1947.330674][T26694] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 1947.330719][T26694] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 1947.331209][T26694] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 1947.335056][T24380] usb 3-1: USB disconnect, device number 116 [ 1947.480670][T24380] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1947.500142][T24380] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1947.513693][T24380] ti_usb_3410_5052 3-1:2.0: device disconnected [ 1948.326922][T26719] net_ratelimit: 9 callbacks suppressed [ 1948.326999][T26719] netlink: zone id is out of range [ 1948.330142][T26719] netlink: zone id is out of range [ 1948.335122][T26719] netlink: zone id is out of range [ 1948.343555][T26719] netlink: zone id is out of range [ 1948.347372][ T5857] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1948.351766][T26719] netlink: zone id is out of range [ 1948.354071][T26719] netlink: zone id is out of range [ 1948.356433][T26719] netlink: zone id is out of range [ 1948.366811][T26719] netlink: zone id is out of range [ 1948.369699][T26719] netlink: zone id is out of range [ 1948.372374][T26719] netlink: zone id is out of range [ 1948.500318][ T5857] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1948.504536][ T5857] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1948.504563][ T5857] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1948.511247][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1948.511270][ T5857] usb 3-1: Product: syz [ 1948.511284][ T5857] usb 3-1: Manufacturer: syz [ 1948.511299][ T5857] usb 3-1: SerialNumber: syz [ 1948.585674][ T5857] hub 3-1:1.0: bad descriptor, ignoring hub [ 1948.585805][ T5857] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1949.009156][ T5857] usb 3-1: USB disconnect, device number 117 [ 1950.373412][ T3524] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1953.740903][ T5703] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1954.057120][ T5703] usb 7-1: Using ep0 maxpacket: 32 [ 1954.063330][ T5703] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1954.065057][ T5703] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 1954.065082][ T5703] usb 7-1: config 0 has no interface number 0 [ 1954.065158][ T5703] usb 7-1: config 0 interface 12 has no altsetting 0 [ 1954.103916][ T5703] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1954.112019][ T5703] usb 7-1: Product: syz [ 1954.112040][ T5703] usb 7-1: Manufacturer: syz [ 1954.112056][ T5703] usb 7-1: SerialNumber: syz [ 1954.278570][ T5703] usb 7-1: config 0 descriptor?? [ 1954.422653][ T3524] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1955.009006][T26754] net_ratelimit: 9 callbacks suppressed [ 1955.009091][T26754] netlink: zone id is out of range [ 1955.012179][T26754] netlink: zone id is out of range [ 1955.018545][T26754] netlink: zone id is out of range [ 1955.023078][T26754] netlink: zone id is out of range [ 1955.031187][T26754] netlink: zone id is out of range [ 1955.034377][T26754] netlink: zone id is out of range [ 1955.034821][T26754] netlink: zone id is out of range [ 1955.040009][T26754] netlink: zone id is out of range [ 1955.044072][T26754] netlink: zone id is out of range [ 1955.049276][T26754] netlink: zone id is out of range [ 1956.241828][ T5703] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1956.250331][ T5703] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 1956.250385][ T5703] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1956.251477][ T5703] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 1956.679413][ T5703] usb 7-1: USB disconnect, device number 62 [ 1959.521188][ T3524] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1959.768150][T26772] 9p: Bad value for 'wfdno' [ 1960.621943][T26791] Bluetooth: MGMT ver 1.23 [ 1960.622050][T26791] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 1962.591299][T26799] ªªªªªª: renamed from vlan0 (while UP) [ 1962.594946][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1962.594980][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1962.594998][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x1323 instead [ 1962.595032][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x865f instead [ 1962.595049][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1962.595066][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1962.595083][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1962.595102][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1962.595132][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1962.595161][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1962.595181][T26807] jffs2: Further such events for this erase block will not be printed [ 1962.595475][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1962.595492][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1962.595509][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x1323 instead [ 1962.595528][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x865f instead [ 1962.595544][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1962.595561][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1962.595577][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1962.595598][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1962.599632][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1962.599669][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1962.599686][T26807] jffs2: Further such events for this erase block will not be printed [ 1962.599993][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 1962.619024][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 1962.619050][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x1323 instead [ 1962.619070][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x865f instead [ 1962.619126][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 1962.619144][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 1962.619162][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x1323 instead [ 1962.619182][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x865f instead [ 1962.619227][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 1962.619244][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 1962.619262][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x1323 instead [ 1962.619281][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x865f instead [ 1962.619326][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 1962.619343][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 1962.619360][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x1323 instead [ 1962.619379][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x865f instead [ 1962.619423][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 1962.619439][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 1962.619456][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x1323 instead [ 1962.619475][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x865f instead [ 1962.619521][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 1962.619537][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 1962.619555][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x1323 instead [ 1962.619574][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x865f instead [ 1962.619619][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 1962.619635][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 1962.619652][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x1323 instead [ 1962.619671][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x865f instead [ 1962.621193][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 1962.621214][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 1962.621232][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x1323 instead [ 1962.621251][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x865f instead [ 1962.621299][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 1962.621316][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 1962.621333][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x1323 instead [ 1962.621352][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x865f instead [ 1962.621398][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 1962.621415][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 1962.621432][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x1323 instead [ 1962.621450][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x865f instead [ 1962.621497][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 1962.621513][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 1962.621530][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x1323 instead [ 1962.621548][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x865f instead [ 1962.621594][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 1962.621611][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 1962.621627][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x1323 instead [ 1962.621646][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x865f instead [ 1962.621692][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 1962.621709][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 1962.621733][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x1323 instead [ 1962.621752][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x865f instead [ 1962.621797][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 1962.621814][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 1962.623047][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x1323 instead [ 1962.623068][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x865f instead [ 1962.623117][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 1962.623135][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 1962.623153][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x1323 instead [ 1962.623172][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x865f instead [ 1962.623218][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 1962.623235][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 1962.623253][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x1323 instead [ 1962.623271][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x865f instead [ 1962.623316][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 1962.623333][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 1962.623350][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x1323 instead [ 1962.623368][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x865f instead [ 1962.623414][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 1962.623431][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 1962.623461][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x1323 instead [ 1962.623480][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x865f instead [ 1962.623525][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 1962.623542][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 1962.623560][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x1323 instead [ 1962.623579][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x865f instead [ 1962.623623][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 1962.623639][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 1962.623657][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x1323 instead [ 1962.623676][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x865f instead [ 1962.623720][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 1962.623744][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 1962.623762][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x1323 instead [ 1962.623780][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x865f instead [ 1962.623826][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1962.623843][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1962.623861][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x1323 instead [ 1962.623879][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x865f instead [ 1962.623923][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1962.623940][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1962.623958][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x1323 instead [ 1962.623977][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x865f instead [ 1962.624024][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1962.625200][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1962.625221][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x1323 instead [ 1962.625240][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x865f instead [ 1962.625292][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1962.625311][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1962.625330][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x1323 instead [ 1962.625348][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x865f instead [ 1962.625396][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1962.625413][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1962.625431][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x1323 instead [ 1962.625450][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x865f instead [ 1962.625558][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1962.625576][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1962.625594][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x1323 instead [ 1962.628764][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x865f instead [ 1962.628830][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1962.628848][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1962.628867][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x1323 instead [ 1962.628886][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x865f instead [ 1962.628934][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1962.628951][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1962.628969][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x1323 instead [ 1962.628989][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x865f instead [ 1962.629035][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1962.629053][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1962.629069][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x1323 instead [ 1962.629088][T26807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x865f instead [ 1962.629137][T26807] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1962.629149][T26807] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1963.241414][T26817] 9p: Bad value for 'wfdno' [ 1963.427410][ T5596] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1963.586279][T26629] bridge0: port 1(bridge_slave_0) entered blocking state [ 1963.586421][T26629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1963.586620][T26629] bridge_slave_0: entered allmulticast mode [ 1963.608489][T26629] bridge_slave_0: entered promiscuous mode [ 1963.620632][ T5596] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1963.642025][ T5596] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1963.642056][ T5596] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1963.652317][ T5596] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1963.652345][ T5596] usb 1-1: Product: syz [ 1963.652360][ T5596] usb 1-1: Manufacturer: syz [ 1963.652374][ T5596] usb 1-1: SerialNumber: syz [ 1963.725598][T26822] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5981'. [ 1963.760574][ T5596] hub 1-1:1.0: bad descriptor, ignoring hub [ 1963.760619][ T5596] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1964.177530][T12217] usb 1-1: USB disconnect, device number 35 [ 1964.291678][T26629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1964.291797][T26629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1964.291974][T26629] bridge_slave_1: entered allmulticast mode [ 1964.304779][T26629] bridge_slave_1: entered promiscuous mode [ 1964.397119][ T5857] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1964.583314][ T5857] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1964.585174][ T5857] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1964.590201][ T5857] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1964.595106][ T5857] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1964.595130][ T5857] usb 7-1: Product: syz [ 1964.595144][ T5857] usb 7-1: Manufacturer: syz [ 1964.595159][ T5857] usb 7-1: SerialNumber: syz [ 1964.658487][ T5857] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 1964.700293][ T5857] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1964.714767][T26629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1964.785442][ T5857] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1965.154250][T26629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1965.371653][ T3524] bridge_slave_1: left allmulticast mode [ 1965.371730][ T3524] bridge_slave_1: left promiscuous mode [ 1965.371994][ T3524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1965.489741][ T3524] bridge_slave_0: left allmulticast mode [ 1965.489868][ T3524] bridge_slave_0: left promiscuous mode [ 1965.490232][ T3524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1967.848980][T26829] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110 [ 1967.849074][T26829] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -110 [ 1967.849405][T26829] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32 [ 1967.950223][T12217] usb 7-1: USB disconnect, device number 63 [ 1968.006310][T12217] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1968.057626][T12217] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1968.064867][T12217] ti_usb_3410_5052 7-1:2.0: device disconnected [ 1968.639215][ T5596] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1968.849679][ T5596] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1968.851277][ T5596] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1968.851303][ T5596] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1968.854107][ T5596] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1968.854131][ T5596] usb 1-1: Product: syz [ 1968.854146][ T5596] usb 1-1: Manufacturer: syz [ 1968.854160][ T5596] usb 1-1: SerialNumber: syz [ 1968.873064][ T5596] hub 1-1:1.0: bad descriptor, ignoring hub [ 1968.873132][ T5596] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1971.858126][ T5596] usb 1-1: USB disconnect, device number 36 [ 1973.540190][ T3524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1973.627894][ T3524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1973.670134][ T3524] bond0 (unregistering): Released all slaves [ 1973.897158][T24380] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1974.054734][T24380] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1974.065716][T24380] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1974.067597][T24380] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1974.071836][T24380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1974.071861][T24380] usb 1-1: Product: syz [ 1974.071876][T24380] usb 1-1: Manufacturer: syz [ 1974.071890][T24380] usb 1-1: SerialNumber: syz [ 1974.197727][T24380] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 1974.207705][T24380] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1974.215841][T24380] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1974.296259][ T5857] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1974.363778][T26629] team0: Port device team_slave_0 added [ 1974.385752][T26629] team0: Port device team_slave_1 added [ 1974.517299][ T5857] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1974.531052][ T5857] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1974.544615][ T5857] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1974.569094][ T5857] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1974.588056][ T5857] usb 7-1: Product: syz [ 1974.588077][ T5857] usb 7-1: Manufacturer: syz [ 1974.588093][ T5857] usb 7-1: SerialNumber: syz [ 1974.712209][ T5857] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 1974.733952][ T5857] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB2 [ 1974.753119][ T5857] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB3 [ 1974.957842][T26874] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1974.981571][T26874] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1974.981621][T26874] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1975.155210][T26874] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1975.232162][T26629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1975.232263][T26629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1975.232283][T26629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1975.282813][T26629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1975.282878][T26629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1975.282902][T26629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1975.651925][T26629] hsr_slave_0: entered promiscuous mode [ 1975.665228][T26629] hsr_slave_1: entered promiscuous mode [ 1975.666232][T26629] debugfs: 'hsr0' already exists in 'hsr' [ 1975.666255][T26629] Cannot create hsr debugfs directory [ 1975.916850][T26874] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1976.040517][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.040599][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.769579][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.769686][ C1] usb 1-1: ti_bulk_in_callback - nonzero urb status, -71 [ 1976.769708][ C1] usb 1-1: ti_bulk_in_callback - stopping read! [ 1976.769854][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.770088][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.770339][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.770563][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.770789][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.771010][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.771231][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.771450][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.771672][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.771893][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.772116][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.772341][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.772565][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.772794][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.773014][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.773240][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.773460][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.773681][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.773903][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.774123][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.774343][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.774577][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.774805][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.775032][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.775254][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.775476][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.775718][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.775954][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.776191][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.776423][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.776653][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.776889][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.777153][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.777389][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.777619][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.777852][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.778082][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.778320][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.778549][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.778794][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.779030][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.779263][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.779496][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.779728][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.779966][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.780198][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.780419][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.780651][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.780885][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.781116][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.781347][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.781580][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.781815][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.782046][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.782292][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.782525][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.782761][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.782993][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.783224][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.783455][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.783687][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.783920][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.784150][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.784382][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.784613][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.784844][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.785079][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.785315][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.785550][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.785789][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.786024][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.786258][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.786492][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.786726][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.787282][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.787524][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.787763][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.787999][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.788233][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.788464][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.788696][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.788927][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.789168][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.789402][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.789633][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.789864][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.790097][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.790327][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.790558][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.790797][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.791028][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.791265][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.791502][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.791736][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.791975][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.792208][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.792441][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.792672][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.792904][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.793136][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.793369][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.793601][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.793833][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.794064][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.794296][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.794529][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.794767][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.794998][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.795227][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.795460][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.795725][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.795970][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.796199][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.796434][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.796668][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.796900][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.797154][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.797381][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.797615][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.797844][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.798078][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.798313][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.802566][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.802805][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.803037][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.803263][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.803483][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.803701][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.803922][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.804150][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.804369][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.804588][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.804807][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.805027][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.805247][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.805468][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.805689][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.805927][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.806178][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.806403][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.806626][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.806854][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.807067][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.807303][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.807526][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.807760][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.807982][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.808211][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.808431][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.808657][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.808882][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.809102][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.809323][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.809544][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.809771][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.810009][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.810238][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.810462][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.810682][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.810901][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.811120][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.811340][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.811562][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.811791][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.812007][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.812232][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.812468][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.812693][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.812914][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.813133][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.813355][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.813582][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.813806][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.814034][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.814253][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.814478][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.814708][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.814933][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.815164][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.815402][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.815647][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.815893][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.816135][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.816374][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.816606][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.816843][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.817065][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.817188][T12523] usb 1-1: USB disconnect, device number 37 [ 1976.817308][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 1976.817331][ C1] usb 1-1: ti_interrupt_callback - resubmit interrupt urb failed, -19 [ 1977.588547][T24380] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1977.623599][ T5253] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1977.741106][T24380] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1977.742736][T24380] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1977.742763][T24380] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1977.745754][T24380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.745778][T24380] usb 3-1: Product: syz [ 1977.745793][T24380] usb 3-1: Manufacturer: syz [ 1977.745806][T24380] usb 3-1: SerialNumber: syz [ 1977.769637][T24380] hub 3-1:1.0: bad descriptor, ignoring hub [ 1977.769675][T24380] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1978.202575][ T5703] usb 3-1: USB disconnect, device number 118 [ 1978.409971][T26896] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -19 [ 1978.413627][ T5703] usb 7-1: USB disconnect, device number 64 [ 1978.502919][ T5703] ti_usb_3410_5052_2 ttyUSB2: TI USB 5052 2 port adapter converter now disconnected from ttyUSB2 [ 1978.612200][ T5703] ti_usb_3410_5052_2 ttyUSB3: TI USB 5052 2 port adapter converter now disconnected from ttyUSB3 [ 1978.632176][ T5703] ti_usb_3410_5052 7-1:2.0: device disconnected [ 1978.705041][T12523] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1978.759923][T26934] 9p: Bad value for 'wfdno' [ 1978.786355][T12523] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1978.798305][T12523] ti_usb_3410_5052 1-1:2.0: device disconnected [ 1979.329553][ T3524] hsr_slave_0: left promiscuous mode [ 1979.367147][ T3524] hsr_slave_1: left promiscuous mode [ 1979.368407][ T3524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1979.368432][ T3524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1979.485267][ T3524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1979.485340][ T3524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1980.114856][ T3524] veth1_macvtap: left promiscuous mode [ 1980.116893][ T3524] veth0_macvtap: left promiscuous mode [ 1980.121884][ T3524] veth1_vlan: left promiscuous mode [ 1980.122047][ T3524] veth0_vlan: left promiscuous mode [ 1980.960232][T12523] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1981.148228][T12523] usb 3-1: Using ep0 maxpacket: 32 [ 1981.154385][T12523] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1981.156004][T12523] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1981.481425][T12523] usb 3-1: config 0 descriptor?? [ 1981.503001][T12523] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1981.940319][ T3524] team0 (unregistering): Port device team_slave_1 removed [ 1981.977883][ T3524] team0 (unregistering): Port device team_slave_0 removed [ 1982.060686][ T5703] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1982.157061][ T5731] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1982.207813][ T5703] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1982.214199][ T5703] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1982.214228][ T5703] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1982.214260][ T5703] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1982.216700][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1982.216724][ T5703] usb 1-1: Product: syz [ 1982.216738][ T5703] usb 1-1: Manufacturer: syz [ 1982.216752][ T5703] usb 1-1: SerialNumber: syz [ 1982.229689][ T5703] hub 1-1:1.0: bad descriptor, ignoring hub [ 1982.229727][ T5703] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1982.293736][T26965] ªªªªªª: renamed from vlan0 (while UP) [ 1982.308052][ T5731] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1982.327235][ T5731] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1982.339505][ T5731] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1982.353301][ T5731] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1982.353411][ T5731] usb 7-1: Product: syz [ 1982.353426][ T5731] usb 7-1: Manufacturer: syz [ 1982.353440][ T5731] usb 7-1: SerialNumber: syz [ 1982.431580][ T5253] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1982.456644][ T5731] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 1982.509225][ T5703] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1982.511917][ T5731] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1982.556533][ T5731] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1982.560013][ T5703] usb 1-1: USB disconnect, device number 38 [ 1982.609616][ T5703] usblp0: removed [ 1983.428775][T12523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1983.831904][T12523] gspca_vc032x: reg_w err -71 [ 1983.831962][T12523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1983.831974][T12523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1983.831984][T12523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1983.831993][T12523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1983.832003][T12523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1983.832013][T12523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1983.832023][T12523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1983.832032][T12523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1983.832043][T12523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1983.832053][T12523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1983.832062][T12523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1983.832071][T12523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1983.832081][T12523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1983.832091][T12523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1983.832099][T12523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1983.832107][T12523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1983.832116][T12523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1983.832125][T12523] gspca_vc032x: Unknown sensor... [ 1983.832205][T12523] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 1983.845671][T12523] usb 3-1: USB disconnect, device number 119 [ 1986.757445][T26976] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command (2), -110 [ 1986.834177][ T5703] usb 7-1: USB disconnect, device number 65 [ 1986.927563][ T5703] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1987.029497][ T5703] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1987.044515][ T5703] ti_usb_3410_5052 7-1:2.0: device disconnected [ 1988.840615][ T5253] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1988.982178][ T3524] IPVS: stop unused estimator thread 0... [ 1989.027114][ T5703] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1989.196518][ T5703] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1989.209004][ T5703] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1989.209078][ T5703] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1989.209102][ T5703] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1989.213454][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1989.213479][ T5703] usb 3-1: Product: syz [ 1989.213501][ T5703] usb 3-1: Manufacturer: syz [ 1989.213515][ T5703] usb 3-1: SerialNumber: syz [ 1989.274509][ T5703] hub 3-1:1.0: bad descriptor, ignoring hub [ 1989.274602][ T5703] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1990.567784][ T5703] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 120 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1990.633451][ T5703] usb 3-1: USB disconnect, device number 120 [ 1990.724138][ T5703] usblp0: removed [ 1995.337152][ T5857] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1995.519842][ T5857] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1995.524793][ T5857] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1995.524822][ T5857] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1995.524863][ T5857] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1995.541757][ T5857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1995.541785][ T5857] usb 8-1: Product: syz [ 1995.541800][ T5857] usb 8-1: Manufacturer: syz [ 1995.541814][ T5857] usb 8-1: SerialNumber: syz [ 1995.674666][T10897] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1995.785225][ T5857] hub 8-1:1.0: bad descriptor, ignoring hub [ 1995.785985][ T5857] hub 8-1:1.0: probe with driver hub failed with error -5 [ 1995.854157][T10897] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1995.888678][T10897] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1996.582036][ T5857] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1996.638215][T10897] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1996.650014][T10897] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1996.939753][ T5857] usb 8-1: USB disconnect, device number 2 [ 1996.957068][ T5857] usblp0: removed [ 1997.296866][T27129] ªªªªªª: renamed from vlan0 (while UP) [ 1998.869229][T10897] Bluetooth: hci2: command tx timeout [ 2000.367120][ T5857] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 2000.617830][ T5857] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2000.619200][ T5857] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2000.619228][ T5857] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2000.619252][ T5857] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2000.622065][ T5857] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2000.622089][ T5857] usb 7-1: Product: syz [ 2000.622103][ T5857] usb 7-1: Manufacturer: syz [ 2000.622118][ T5857] usb 7-1: SerialNumber: syz [ 2000.677414][ T5857] hub 7-1:1.0: bad descriptor, ignoring hub [ 2000.677453][ T5857] hub 7-1:1.0: probe with driver hub failed with error -5 [ 2000.910245][ T5857] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 66 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2000.918045][T10897] Bluetooth: hci2: command tx timeout [ 2000.957183][ T5703] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2000.977925][ T5857] usb 7-1: USB disconnect, device number 66 [ 2001.008531][ T5857] usblp0: removed [ 2001.107992][ T5703] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2001.108090][ T5703] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 2001.110187][ T5703] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2001.110210][ T5703] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2001.110246][ T5703] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2001.111269][ T5703] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2001.111290][ T5703] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2001.111323][ T5703] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2001.112507][ T5703] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2001.112528][ T5703] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2001.112563][ T5703] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2001.113752][ T5703] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2001.113781][ T5703] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2001.113813][ T5703] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2001.114834][ T5703] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2001.114855][ T5703] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2001.114895][ T5703] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2001.115933][ T5703] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2001.115954][ T5703] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2001.115987][ T5703] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2001.117970][ T5703] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2001.117993][ T5703] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2001.118028][ T5703] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2001.119372][ T5703] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2001.119393][ T5703] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2001.119427][ T5703] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2001.121787][ T5703] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2001.121812][ T5703] usb 1-1: Product: syz [ 2001.121826][ T5703] usb 1-1: Manufacturer: syz [ 2001.121839][ T5703] usb 1-1: SerialNumber: syz [ 2001.129102][ T5703] usb 1-1: config 0 descriptor?? [ 2001.152247][ T5703] yurex 1-1:0.0: Could not find endpoints [ 2001.367632][ T3524] bridge_slave_1: left allmulticast mode [ 2001.367714][ T3524] bridge_slave_1: left promiscuous mode [ 2001.367975][ T3524] bridge0: port 2(bridge_slave_1) entered disabled state [ 2001.429935][ T5731] usb 1-1: USB disconnect, device number 39 [ 2001.842155][ T3524] bridge_slave_0: left allmulticast mode [ 2001.842287][ T3524] bridge_slave_0: left promiscuous mode [ 2001.842540][ T3524] bridge0: port 1(bridge_slave_0) entered disabled state [ 2002.997039][T10897] Bluetooth: hci2: command tx timeout [ 2003.541108][ T27] [ 2003.543481][ T27] ====================================================== [ 2003.550587][ T27] WARNING: possible circular locking dependency detected [ 2003.557621][ T27] syzkaller #0 Not tainted [ 2003.562038][ T27] ------------------------------------------------------ [ 2003.569057][ T27] migration/1/27 is trying to acquire lock: [ 2003.574954][ T27] ffff8880b8740998 (_T->lock){....}-{2:2}, at: rt_spin_trylock+0x56/0x2b0 [ 2003.583506][ T27] [ 2003.583506][ T27] but task is already holding lock: [ 2003.590876][ T27] ffff8880269d2a40 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410 [ 2003.600408][ T27] [ 2003.600408][ T27] which lock already depends on the new lock. [ 2003.600408][ T27] [ 2003.610813][ T27] [ 2003.610813][ T27] the existing dependency chain (in reverse order) is: [ 2003.619830][ T27] [ 2003.619830][ T27] -> #1 (&p->pi_lock){-...}-{2:2}: [ 2003.627144][ T27] _raw_spin_lock+0x2e/0x40 [ 2003.632262][ T27] rtlock_slowlock_locked+0x1ec/0x3c20 [ 2003.638260][ T27] rt_spin_lock+0x165/0x400 [ 2003.643308][ T27] lockref_get+0x15/0x60 [ 2003.648083][ T27] copy_fs_struct+0x197/0x270 [ 2003.653347][ T27] copy_fs+0xd2/0x280 [ 2003.657866][ T27] copy_process+0x1d3b/0x43f0 [ 2003.663074][ T27] kernel_clone+0x2d2/0x8d0 [ 2003.668118][ T27] user_mode_thread+0x115/0x180 [ 2003.673508][ T27] call_usermodehelper_exec_work+0x5c/0x230 [ 2003.679935][ T27] process_scheduled_works+0xc3d/0x1630 [ 2003.686014][ T27] worker_thread+0xa47/0xfb0 [ 2003.691141][ T27] kthread+0x38b/0x470 [ 2003.695778][ T27] ret_from_fork+0x514/0xb70 [ 2003.700895][ T27] ret_from_fork_asm+0x1a/0x30 [ 2003.706185][ T27] [ 2003.706185][ T27] -> #0 (_T->lock){....}-{2:2}: [ 2003.713230][ T27] __lock_acquire+0x15ff/0x2e40 [ 2003.718644][ T27] lock_acquire+0x115/0x350 [ 2003.723680][ T27] _raw_spin_lock_irqsave+0x40/0x60 [ 2003.729409][ T27] rt_spin_trylock+0x56/0x2b0 [ 2003.734628][ T27] __kfree_rcu_sheaf+0xd3/0x620 [ 2003.740029][ T27] kvfree_call_rcu+0xa4/0x430 [ 2003.745269][ T27] set_cpus_allowed_force+0x1bd/0x2a0 [ 2003.751209][ T27] cpuset_cpus_allowed_fallback+0x24a/0x370 [ 2003.757635][ T27] select_fallback_rq+0x11e/0x200 [ 2003.763186][ T27] __balance_push_cpu_stop+0xa1/0x410 [ 2003.769090][ T27] cpu_stopper_thread+0x25e/0x3f0 [ 2003.774661][ T27] smpboot_thread_fn+0x565/0xa70 [ 2003.780138][ T27] kthread+0x38b/0x470 [ 2003.784737][ T27] ret_from_fork+0x514/0xb70 [ 2003.789854][ T27] ret_from_fork_asm+0x1a/0x30 [ 2003.795153][ T27] [ 2003.795153][ T27] other info that might help us debug this: [ 2003.795153][ T27] [ 2003.805386][ T27] Possible unsafe locking scenario: [ 2003.805386][ T27] [ 2003.812841][ T27] CPU0 CPU1 [ 2003.818211][ T27] ---- ---- [ 2003.823593][ T27] lock(&p->pi_lock); [ 2003.827685][ T27] lock(_T->lock); [ 2003.834030][ T27] lock(&p->pi_lock); [ 2003.840631][ T27] lock(_T->lock); [ 2003.844449][ T27] [ 2003.844449][ T27] *** DEADLOCK *** [ 2003.844449][ T27] [ 2003.852591][ T27] locks held by migration/1/27: 2, last CPU#1: [ 2003.858746][ T27] #0: ffff8880269d2a40 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410 [ 2003.868686][ T27] #1: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: cpuset_cpus_allowed_fallback+0x22/0x370 [ 2003.879249][ T27] [ 2003.879249][ T27] stack backtrace: [ 2003.885158][ T27] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2003.894883][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2003.904950][ T27] Stopper: __balance_push_cpu_stop+0x0/0x410 <- balance_push+0x28d/0x4f0 [ 2003.913391][ T27] Call Trace: [ 2003.916680][ T27] [ 2003.919618][ T27] dump_stack_lvl+0xe8/0x150 [ 2003.924229][ T27] print_circular_bug+0x2e2/0x300 [ 2003.929275][ T27] check_noncircular+0x12f/0x150 [ 2003.934231][ T27] __lock_acquire+0x15ff/0x2e40 [ 2003.939098][ T27] ? __asan_memset+0x22/0x50 [ 2003.943695][ T27] ? __enqueue_entity+0x30a/0xc60 [ 2003.948726][ T27] lock_acquire+0x115/0x350 [ 2003.953237][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 2003.958100][ T27] ? enqueue_task_fair+0x1560/0x1b60 [ 2003.963403][ T27] _raw_spin_lock_irqsave+0x40/0x60 [ 2003.968609][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 2003.973513][ T27] rt_spin_trylock+0x56/0x2b0 [ 2003.978221][ T27] __kfree_rcu_sheaf+0xd3/0x620 [ 2003.983106][ T27] kvfree_call_rcu+0xa4/0x430 [ 2003.987793][ T27] ? do_raw_spin_unlock+0xf5/0x200 [ 2003.992917][ T27] set_cpus_allowed_force+0x1bd/0x2a0 [ 2003.998306][ T27] ? __pfx_set_cpus_allowed_force+0x10/0x10 [ 2004.004219][ T27] ? cpuset_cpus_allowed_fallback+0x22/0x370 [ 2004.010242][ T27] cpuset_cpus_allowed_fallback+0x24a/0x370 [ 2004.016150][ T27] select_fallback_rq+0x11e/0x200 [ 2004.021187][ T27] ? __pfx___balance_push_cpu_stop+0x10/0x10 [ 2004.027180][ T27] __balance_push_cpu_stop+0xa1/0x410 [ 2004.032560][ T27] ? _raw_spin_unlock_irq+0x23/0x50 [ 2004.037746][ T27] ? __pfx___balance_push_cpu_stop+0x10/0x10 [ 2004.043703][ T27] cpu_stopper_thread+0x25e/0x3f0 [ 2004.048720][ T27] ? smpboot_thread_fn+0x4e/0xa70 [ 2004.053724][ T27] smpboot_thread_fn+0x565/0xa70 [ 2004.058642][ T27] ? smpboot_thread_fn+0x4e/0xa70 [ 2004.063647][ T27] kthread+0x38b/0x470 [ 2004.067694][ T27] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2004.073140][ T27] ? __pfx_kthread+0x10/0x10 [ 2004.077752][ T27] ret_from_fork+0x514/0xb70 [ 2004.082325][ T27] ? __pfx_ret_from_fork+0x10/0x10 [ 2004.087418][ T27] ? __switch_to+0xc89/0x1420 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2004.092083][ T27] ? __pfx_kthread+0x10/0x10 [ 2004.096653][ T27] ret_from_fork_asm+0x1a/0x30 [ 2004.101398][ T27] [ 2004.104408][ T27] process 27217 (syz.2.6075) no longer affine to cpu1