last executing test programs: 1m11.017881359s ago: executing program 2 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/infiniband_srp/srp-syz0-1\x00', 0x0, 0x0) 1m10.419525715s ago: executing program 2 (id=14): r0 = syz_usb_connect(0x3, 0x54, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e0010140120a01000000010203010902360002010080000904000003e00101000705810310000107050202000200070582020002000904010002e00101000705030100020007058301000200"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000400)="0e0401030c00") nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000410)="0e0c010310000000000020000000") nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000420)="0e0c010110000600000600000000") nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0xc, &(0x7f0000000430)="0e0a01091000010203040506") nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x46, &(0x7f0000000440)="0e4401021000"/70) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x1, 0x1}, 0x6) write(r1, &(0x7f0000000200)="f100040000", 0x5) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0x1, 0x1}, 0x6) write(r2, &(0x7f0000000240)="f100040000", 0x5) 1m7.867337478s ago: executing program 2 (id=16): syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) nanosleep(&(0x7f0000000b00)={0x1}, 0x0) 1m6.695484554s ago: executing program 0 (id=19): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24) listen(r0, 0x1) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24) nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0) sendto$rxrpc(r1, &(0x7f0000000100)="01020304", 0x4, 0x0, 0x0, 0x0) recvfrom$rxrpc(r0, &(0x7f0000000200), 0x4, 0x0, 0x0, 0x0) 1m5.852601484s ago: executing program 0 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0x1d6b\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='0x0104\x00', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) write(r2, &(0x7f0000000640)='high-speed\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uac2.0/c_sync\x00', 0x2, 0x0) write(r3, &(0x7f0000000540)='adaptive\x00', 0x9) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='dummy_udc.0\x00', 0xc) r5 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x15, 0x2) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000400)={0x21, 0x1, 0x100, 0x500, 0x1, 0x3e8, &(0x7f0000000440)="01"}) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000480)={0x21, 0x1, 0x100, 0x600, 0x1, 0x3e8, &(0x7f0000000440)="01"}) r6 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x1f, 0x2) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000400)={0x21, 0x1, 0x100, 0x500, 0x1, 0x3e8, &(0x7f0000000440)="01"}) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000480)={0x21, 0x1, 0x100, 0x600, 0x1, 0x3e8, &(0x7f0000000440)="01"}) 1m5.739999107s ago: executing program 0 (id=22): syz_usb_connect(0x0, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000081aeb0028000000000001"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1m5.716363346s ago: executing program 2 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget\x00', 0x1ff) 1m5.676120866s ago: executing program 2 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1\x00', 0x1ff) 1m5.583382668s ago: executing program 2 (id=26): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000001000)={0x2, 0x1144, @loopback}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write(r1, &(0x7f0000001080)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x44) r2 = accept$inet(r0, 0x0, 0x0) recvfrom(r2, &(0x7f0000001100)=""/128, 0x80, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000001180)="010080008000000000000002001000"/128, 0x80, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000001200)=""/4096, 0x1000, 0x0, 0x0, 0x0) 1m4.155300458s ago: executing program 0 (id=29): clock_settime(0x0, &(0x7f0000000000)={0x6553f100, 0x3b8b87c0}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) clock_nanosleep(0x0, 0x1, &(0x7f0000000200)={0x6553f101, 0x17c841c0}, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f0000000200)={0x6553f101, 0x2f9fc5c0}, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f0000000200)={0x6553f102, 0xbdc7fc0}, 0x0) 1m3.327501856s ago: executing program 0 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0\x00', 0x0, 0x0) 1m3.219585711s ago: executing program 0 (id=34): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000001040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000001080), 0x2) nanosleep(&(0x7f00000010c0)={0x0, 0x10000000}, 0x0) read(r0, &(0x7f0000001100)=""/4096, 0x1000) writev(r0, &(0x7f0000002100)=[{&(0x7f0000002140)="02fa", 0x2}, {&(0x7f0000002180)="0200", 0x2}, {&(0x7f00000021c0)="0200", 0x2}], 0x3) writev(r0, &(0x7f0000002200)=[{&(0x7f0000002240)="02fa", 0x2}, {&(0x7f0000002280)="0200", 0x2}, {&(0x7f00000022c0)="0200", 0x2}], 0x3) 51.031163744s ago: executing program 1 (id=49): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4000, &(0x7f0000004000/0x4000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000100)="66b80000e0fe66678918e610", 0xc}], 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 50.949985419s ago: executing program 1 (id=50): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) read(r0, &(0x7f0000000140)=""/1, 0x1) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="02fa", 0x2}], 0x1) 49.935319643s ago: executing program 32 (id=26): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000001000)={0x2, 0x1144, @loopback}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write(r1, &(0x7f0000001080)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x44) r2 = accept$inet(r0, 0x0, 0x0) recvfrom(r2, &(0x7f0000001100)=""/128, 0x80, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000001180)="010080008000000000000002001000"/128, 0x80, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000001200)=""/4096, 0x1000, 0x0, 0x0, 0x0) 48.071745918s ago: executing program 33 (id=34): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000001040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000001080), 0x2) nanosleep(&(0x7f00000010c0)={0x0, 0x10000000}, 0x0) read(r0, &(0x7f0000001100)=""/4096, 0x1000) writev(r0, &(0x7f0000002100)=[{&(0x7f0000002140)="02fa", 0x2}, {&(0x7f0000002180)="0200", 0x2}, {&(0x7f00000021c0)="0200", 0x2}], 0x3) writev(r0, &(0x7f0000002200)=[{&(0x7f0000002240)="02fa", 0x2}, {&(0x7f0000002280)="0200", 0x2}, {&(0x7f00000022c0)="0200", 0x2}], 0x3) 42.32593817s ago: executing program 1 (id=57): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r0, &(0x7f0000000000)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000010)="4b00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0x1}, {0x0, "ffffffffffffffff"}}}}, 0xf) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x7) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x3e8}, 0x10) connect(r1, &(0x7f0000000200)=@hci={0x1f, 0x1, 0x2}, 0x9) 41.846998039s ago: executing program 3 (id=58): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0\x00') (async) r1 = accept(r0, 0x0, 0x0) close(r1) r2 = accept(r0, 0x0, 0x0) close(r2) nanosleep(&(0x7f0000000400)={0x3}, 0x0) 41.726691239s ago: executing program 1 (id=59): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local={0x7f, 0x0, 0x0, 0x1}}, 0x10) listen(r0, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local={0x7f, 0x0, 0x0, 0x1}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000001000)='\x00'/65536, 0x10000, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000011000)=""/65536, 0x10000, 0x0, 0x0, 0x0) 41.65810693s ago: executing program 1 (id=60): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="010000002200100000000000000000010000000000020800450000740001400040063c817f0000017f00000104d204d200000001000000005010000000000000", 0x40}, {&(0x7f0000000300)='\x00'/76, 0x4c}], 0x2) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000500)="010000002200100000000000000000010000000000020800450000740002400040063c807f0000017f00000104d204d20000004d000000005010000000000000", 0x40}, {&(0x7f0000000600)='\x00'/76, 0x4c}], 0x2) 40.96774888s ago: executing program 3 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/kernel/numa_balancing_scan_delay_ms\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='0\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/numa_balancing_scan_size_mb\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='1024\x00', 0x5) nanosleep(&(0x7f0000000500)={0x1, 0x1dcd6500}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2002, &(0x7f0000000600)=0x2, 0x40, 0x0) madvise(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x17) madvise(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x17) 40.127671961s ago: executing program 3 (id=62): syz_usb_connect(0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000081aeb0028000000000001"], &(0x7f0000000100)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 39.594822867s ago: executing program 5 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0x1d6b\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='0x0104\x00', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) write(r2, &(0x7f0000000640)='high-speed\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uac2.0/c_sync\x00', 0x2, 0x0) write(r3, &(0x7f0000000540)='adaptive\x00', 0x9) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00') write(0xffffffffffffffff, &(0x7f0000000340)='dummy_udc.0\x00', 0xc) nanosleep(&(0x7f0000000380)={0x0, 0x1dcd6500}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x15, 0x2) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000400)={0x21, 0x1, 0x100, 0x500, 0x1, 0x3e8, &(0x7f0000000440)="01"}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000480)={0x21, 0x1, 0x100, 0x600, 0x1, 0x3e8, &(0x7f0000000440)="01"}) r5 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x1f, 0x2) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000400)={0x21, 0x1, 0x100, 0x500, 0x1, 0x3e8, &(0x7f0000000440)="01"}) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000480)={0x21, 0x1, 0x100, 0x600, 0x1, 0x3e8, &(0x7f0000000440)="01"}) 39.343112562s ago: executing program 1 (id=64): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @loopback}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x44) (async) r2 = accept$inet(r0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000400)="01008000800000000000000200004000"/128, 0x80, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000500)=""/4096, 0x1000, 0x0, 0x0, 0x0) 38.956076964s ago: executing program 5 (id=65): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x7, 0x5, 0x57e, 0x306, 0x0, 0x0, "05010900a101c0"}}, 0x11f) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000140)={0xd, {0x7, ' \x00\x00\x00\x00\x00\x00'}}, 0xd) 38.512037859s ago: executing program 3 (id=67): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004057a213200001010203010902270001010080fa0904000003ffffff00070581020002000705020200020007058303400001"], 0x0) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000001000)=""/64) (async) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000001100)="4000050000000000") (async) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000001140)="4000060000000000") (async) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000001180)='@\x00\a\x00\x00\x00\x00\x00') (async) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f00000011c0)='@\x00\b\x00\x00\x00\x00\x00') (async) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000001200)='@\x00\t\x00\x00\x00\x00\x00') (async) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/spi_master/spi0/slave\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='spidev\x00', 0x7) 35.439718782s ago: executing program 3 (id=70): r0 = syz_usb_connect(0x2, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cc1769190001010203010902290001010080320904000000ffffff000904000102ffffff000705810240000007050102400000"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0x84, &(0x7f0000000500)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000400)) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000400)) (async) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000100)="0100"/15) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 32.44348985s ago: executing program 3 (id=72): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="02fa", 0x2}, {&(0x7f00000001c0)="0200", 0x2}, {&(0x7f0000000200)="0200", 0x2}], 0x3) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="02fa", 0x2}, {&(0x7f00000002c0)="0200", 0x2}, {&(0x7f0000000300)="0200", 0x2}], 0x3) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000380)="02fa", 0x2}, {&(0x7f00000003c0)="0200", 0x2}, {&(0x7f0000000400)="0200", 0x2}], 0x3) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="02fa", 0x2}, {&(0x7f00000004c0)="0200", 0x2}, {&(0x7f0000000500)="0200", 0x2}, {&(0x7f0000000540)="0200", 0x2}], 0x4) writev(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)="02fa", 0x2}, {&(0x7f0000000600)="0200", 0x2}, {&(0x7f0000000640)="0200", 0x2}, {&(0x7f0000000680)="0200", 0x2}], 0x4) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000700)="02fa", 0x2}, {&(0x7f0000000740)="0200", 0x2}, {&(0x7f0000000780)="0200", 0x2}, {&(0x7f00000007c0)="0200", 0x2}], 0x4) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000840)="02fa", 0x2}, {&(0x7f0000000880)="0200", 0x2}, {&(0x7f00000008c0)="0200", 0x2}, {&(0x7f0000000900)="0200", 0x2}], 0x4) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000980)="02fa", 0x2}, {&(0x7f00000009c0)="0200", 0x2}, {&(0x7f0000000a00)="0200", 0x2}, {&(0x7f0000000a40)="0264", 0x2}], 0x4) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="02fa", 0x2}, {&(0x7f0000000b00)="0200", 0x2}, {&(0x7f0000000b40)="0200", 0x2}, {&(0x7f0000000b80)="0200", 0x2}], 0x4) writev(r0, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="02fa", 0x2}, {&(0x7f0000000c40)="0288", 0x2}, {&(0x7f0000000c80)="02b0", 0x2}, {&(0x7f0000000cc0)="0200", 0x2}], 0x4) 31.378728305s ago: executing program 5 (id=75): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='/dev/loop0', 0xa) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ubi_ctrl\x00', 0x2, 0x0) ioctl(r3, 0x40186f40, &(0x7f0000000700)='\x00'/24) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r4, 0x40986f00, &(0x7f0000000b00)="00000000010000000000a000000000000300040000000000766f6c3000"/160) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./mnt\x00', 0x1ff) mount(&(0x7f0000000d00)=@filename='ubi0_0\x00', &(0x7f0000000c00)='./mnt\x00', &(0x7f0000000e00)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000f00)='./mnt/test\x00', 0x42, 0x1ff) 30.979233713s ago: executing program 5 (id=76): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000405e048e021401000000010902200001010080fa0904000002ff5d01000705810320000407050203200008"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_disconnect(r0) 27.882001914s ago: executing program 5 (id=80): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0\x00') (async) recvfrom(0xffffffffffffffff, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000002000)="000000a0fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000102030405060708090a0b0c0d0e0f1000000000000010000000100000001000000000000000000000000000000000008000200000000000601c06062b0601050502a0123010a00e300c060a2b06010401823702020a0000", 0xa4, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000002100)="000000a0fe534d4240000100160000c0010001000100000000000000010000000000000000000000000000000100000000000000000000000000000000000000000000000900000048005800a1553053a0030a0101a10c060a2b06010401823702020aa23e043c4e544c4d53535000020000000000000000000000e2088215010203040506070800000000000000000c000c00300000000200040044004f000000000000", 0xa4, 0x0, 0x0, 0x0) 26.997113737s ago: executing program 5 (id=81): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @empty}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x44) (async) r2 = accept$inet(r0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000300)=""/128, 0x80, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000080)="01008000800000000000000200004000"/128, 0x80, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000500)=""/4096, 0x1000, 0x0, 0x0, 0x0) 24.332857654s ago: executing program 34 (id=64): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @loopback}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x44) (async) r2 = accept$inet(r0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000400)="01008000800000000000000200004000"/128, 0x80, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000500)=""/4096, 0x1000, 0x0, 0x0, 0x0) 17.512621823s ago: executing program 6 (id=92): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040e80304000000000000010902190001010080fa0904000001ff00000007058102000400"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="c000400000000041010001004001f000"/70], &(0x7f0000000600)=ANY=[@ANYBLOB="80011200000012010002ff000040e8030400000000000001"], &(0x7f0000000700)=ANY=[@ANYBLOB="8002190000000902190001010080fa0904000001ff00000007058102000400"], 0x0, 0x0}, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000300), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000300), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000300), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000300), &(0x7f0000000100)) nanosleep(&(0x7f0000000900)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000a00), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000b00)={0x1, 0x1, 0x1}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000c00)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) mmap(&(0x7f0000009000/0x13000)=nil, 0x13000, 0x3, 0x11, r1, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000c00)) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000d00)=0x1) syz_usb_control_io(r0, &(0x7f0000000300), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000300), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000300), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000300), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000300), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000300), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000300), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000300), &(0x7f0000000100)) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000e00)={0x980911, 0x1}) 16.499814927s ago: executing program 35 (id=72): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="02fa", 0x2}, {&(0x7f00000001c0)="0200", 0x2}, {&(0x7f0000000200)="0200", 0x2}], 0x3) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="02fa", 0x2}, {&(0x7f00000002c0)="0200", 0x2}, {&(0x7f0000000300)="0200", 0x2}], 0x3) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000380)="02fa", 0x2}, {&(0x7f00000003c0)="0200", 0x2}, {&(0x7f0000000400)="0200", 0x2}], 0x3) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="02fa", 0x2}, {&(0x7f00000004c0)="0200", 0x2}, {&(0x7f0000000500)="0200", 0x2}, {&(0x7f0000000540)="0200", 0x2}], 0x4) writev(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)="02fa", 0x2}, {&(0x7f0000000600)="0200", 0x2}, {&(0x7f0000000640)="0200", 0x2}, {&(0x7f0000000680)="0200", 0x2}], 0x4) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000700)="02fa", 0x2}, {&(0x7f0000000740)="0200", 0x2}, {&(0x7f0000000780)="0200", 0x2}, {&(0x7f00000007c0)="0200", 0x2}], 0x4) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000840)="02fa", 0x2}, {&(0x7f0000000880)="0200", 0x2}, {&(0x7f00000008c0)="0200", 0x2}, {&(0x7f0000000900)="0200", 0x2}], 0x4) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000980)="02fa", 0x2}, {&(0x7f00000009c0)="0200", 0x2}, {&(0x7f0000000a00)="0200", 0x2}, {&(0x7f0000000a40)="0264", 0x2}], 0x4) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="02fa", 0x2}, {&(0x7f0000000b00)="0200", 0x2}, {&(0x7f0000000b40)="0200", 0x2}, {&(0x7f0000000b80)="0200", 0x2}], 0x4) writev(r0, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="02fa", 0x2}, {&(0x7f0000000c40)="0288", 0x2}, {&(0x7f0000000c80)="02b0", 0x2}, {&(0x7f0000000cc0)="0200", 0x2}], 0x4) 14.215009158s ago: executing program 6 (id=95): r0 = timerfd_create(0x0, 0x0) clock_settime(0x0, &(0x7f0000000000)={0x6553f100, 0x389fd980}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) timerfd_settime(r0, 0x1, &(0x7f0000000300)={{}, {0x6553f100, 0x3b9a06b0}}, 0x0) read(r0, &(0x7f0000000400)=""/8, 0x8) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x1, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x2, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x3, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x4, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x5, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x6, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x7, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x8, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x9, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0xa, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdbba0}) timerfd_settime(r0, 0x1, &(0x7f0000000300)={{}, {0x6553f101, 0x3b9a06b0}}, 0x0) read(r0, &(0x7f0000000400)=""/8, 0x8) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0xb, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0xc, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0xd, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0xe, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0xf, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x10, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x11, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x12, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x13, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x14, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x15, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x16, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x17, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x18, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x19, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x1a, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x1b, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x1c, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x1d, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x1e, 0x0, 0x10}) 14.044388591s ago: executing program 6 (id=96): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040010001000000000000010902240001010080000904000001030000000921000000012208000905810308000a0000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0022080000000600ff0901a101c0"], 0x0}, &(0x7f0000000200)={0x2c, &(0x7f0000000210)={0x20, 0xa}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0022080000000600ff0901a101c0"], 0x0}, &(0x7f0000000600)={0x2c, &(0x7f0000000610)={0x20, 0xa}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000007c0)={0x24, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0022080000000600ff0901a101c0"], 0x0}, &(0x7f0000000900)={0x2c, &(0x7f0000000910)={0x20, 0xa}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000ac0)={0x24, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0022080000000600ff0901a101c0"], 0x0}, &(0x7f0000000c00)={0x2c, &(0x7f0000000c10)={0x20, 0xa}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000dc0)={0x24, 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0022080000000600ff0901a101c0"], 0x0}, &(0x7f0000000f00)={0x2c, &(0x7f0000000f10)={0x20, 0xa}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000010c0)={0x24, 0x0, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="0022080000000600ff0901a101c0"], 0x0}, &(0x7f0000001200)={0x2c, &(0x7f0000001210)={0x20, 0xa}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000013c0)={0x24, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0022080000000600ff0901a101c0"], 0x0}, &(0x7f0000001500)={0x2c, &(0x7f0000001510)={0x20, 0xa}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000016c0)={0x24, 0x0, 0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="0022080000000600ff0901a101c0"], 0x0}, &(0x7f0000001800)={0x2c, &(0x7f0000001810)={0x20, 0xa}, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000001900)={0x2}, 0x0) syz_open_dev$hidraw(&(0x7f0000001a00), 0x0, 0x0) 11.86209548s ago: executing program 36 (id=81): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @empty}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x44) (async) r2 = accept$inet(r0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000300)=""/128, 0x80, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000080)="01008000800000000000000200004000"/128, 0x80, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000500)=""/4096, 0x1000, 0x0, 0x0, 0x0) 10.905192835s ago: executing program 6 (id=104): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1111, @empty}, 0x10) listen(r0, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r1, &(0x7f0000000200)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,data_digest\x00', 0x42) nanosleep(&(0x7f0000000080)={0x0, 0x5f5e100}, 0x0) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000100)="01008000800000000000000200004000"/128, 0x80) nanosleep(&(0x7f0000000080)={0x0, 0x1dcd6500}, 0x0) 10.156003586s ago: executing program 7 (id=106): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/ls1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/ls1/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/ls1/comms/1/local\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/ls1/comms/1/addr\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="020000007f00000100"/128, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./sys\x00', &(0x7f0000000c40)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/dlm-control\x00', 0x2, 0x0) 9.967922347s ago: executing program 7 (id=107): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000314050000000000000000000900020072786530000000000800410072786500070033006c6f0000"], 0x2c}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000600)={0x7, 0x8, 0xfa00, {r2, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000800)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000900)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @loopback}, r3, 0x3e8}}, 0x48) nanosleep(&(0x7f0000001000)={0x1}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000c00)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10) nanosleep(&(0x7f0000001000)={0x1}, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000f00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x7, 0x1}, r3}}, 0x120) nanosleep(&(0x7f0000001000)={0x5}, 0x0) 9.071280174s ago: executing program 4 (id=109): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./nfs4\x00', 0x1ff) mount$nfs4(&(0x7f00000002c0)='127.0.0.1:/\x00', &(0x7f0000000300)='./nfs4\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{'vers=4.2'}, {'sec=sys'}]}) 8.943748284s ago: executing program 7 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0x1d6b\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='0x0104\x00', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) write(r2, &(0x7f0000000640)='high-speed\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uac2.0/c_sync\x00', 0x2, 0x0) write(r3, &(0x7f0000000540)='adaptive\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='dummy_udc.0\x00', 0xc) nanosleep(&(0x7f0000000380)={0x0, 0x1dcd6500}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x15, 0x2) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000400)={0x21, 0x1, 0x100, 0x500, 0x1, 0x3e8, &(0x7f0000000440)="01"}) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000480)={0x21, 0x1, 0x100, 0x600, 0x1, 0x3e8, &(0x7f0000000440)="01"}) r6 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x1f, 0x2) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000400)={0x21, 0x1, 0x100, 0x500, 0x1, 0x3e8, &(0x7f0000000440)="01"}) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000480)={0x21, 0x1, 0x100, 0x600, 0x1, 0x3e8, &(0x7f0000000440)="01"}) 8.460863151s ago: executing program 4 (id=111): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) 8.363075945s ago: executing program 7 (id=112): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./export/sub\x00', 0x1ff) mount$tmpfs(0x0, &(0x7f0000000140)='./export/sub\x00', &(0x7f0000000180), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 myclient\n\x00', 0x23) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='myclient ./export 2147483647 25632 0 0 0\n\x00', 0x29) write(r1, &(0x7f00000002c0)='myclient ./export/sub 2147483647 25632 0 0 1\n\x00', 0x2d) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='tcp 2049\n\x00', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='8\n\x00', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000440)='127.0.0.1:/export\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='nolock,vers=4,clientaddr=127.0.0.1,addr=127.0.0.1\x00']) stat(&(0x7f0000000500)='./mnt/sub\x00', &(0x7f0000000540)) 8.298633296s ago: executing program 4 (id=113): r0 = syz_usb_connect(0x2, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da0b32280002010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\t\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000003000)={0x1, 0x1f400000}, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000004000), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000005000)={0xb, @sdr}) 7.158935554s ago: executing program 8 (id=102): syz_usb_connect(0x0, 0x55, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020200004034127856000100000001090243000201008032090400000102020000052400100105240100010424020005240600010705810340000a09040100020a0000000705820200020007050302000200"], 0x0) nanosleep(&(0x7f0000000300)={0x5}, 0x0) 4.433123614s ago: executing program 7 (id=121): r0 = syz_usb_connect(0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40402000490000010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x2e, '\x00'/46}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000400), 0x0, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845657, &(0x7f0000000500)={0x0, @reserved}) 4.430553491s ago: executing program 4 (id=122): r0 = syz_usb_connect(0x2, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da0b32280002010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x1, "a1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x1, "a1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x1, "a1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x1, "a1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x1, "a1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x1, "a1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x1, "a1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x1, "a1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x1, "a1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x1, "a1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000003000)={0x1}, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000004000), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000005000)={0xb, @sdr}) 4.075245222s ago: executing program 8 (id=114): syz_usb_connect(0x0, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101405c0ae82100010000000109023e00020100c0000904000003e00101000705810310000107050202400000070582024000000904010002e00101000705030100000107058301000001"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x0, 0x1}, 0x6) sendto(r0, &(0x7f0000000300)="f100040000", 0x5, 0x0, 0x0, 0x0) 2.860361837s ago: executing program 7 (id=115): r0 = syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401aeb00280001010203010902190001010080fa0904000001ffffff0007058202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x10, &(0x7f0000000700)={0x40, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x10, &(0x7f0000000900)={0x40, 0x2, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000100)={0x2}, 0x0) syz_usb_ep_write(r0, 0x82, 0x4, &(0x7f0000000500)="33950000") r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x2) read(r1, &(0x7f0000000400)=""/4096, 0x1000) 2.037044881s ago: executing program 6 (id=116): syslog(0x3, &(0x7f0000000100)=""/4096, 0x1000) 1.753867494s ago: executing program 6 (id=117): r0 = memfd_create(&(0x7f0000000000)='test\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x9600000) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0204800, &(0x7f0000000140)={0x100000000, 0x0, 0x80000}) 1.686336749s ago: executing program 8 (id=118): r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x1, 0x1, {0x1, @pix={0x100, 0x100, 0x0, 0x0, 0x100, 0x10000}}}) 1.465950301s ago: executing program 8 (id=119): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0x1d6b\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='0x0104\x00', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) write(r2, &(0x7f0000000640)='high-speed\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uac2.0/c_sync\x00', 0x2, 0x0) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='dummy_udc.0\x00', 0xc) nanosleep(&(0x7f0000000380)={0x0, 0x1dcd6500}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x15, 0x2) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000400)={0x21, 0x1, 0x100, 0x500, 0x1, 0x3e8, &(0x7f0000000440)="01"}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000480)={0x21, 0x1, 0x100, 0x600, 0x1, 0x3e8, &(0x7f0000000440)="01"}) r5 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x1f, 0x2) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000400)={0x21, 0x1, 0x100, 0x500, 0x1, 0x3e8, &(0x7f0000000440)="01"}) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000480)={0x21, 0x1, 0x100, 0x600, 0x1, 0x3e8, &(0x7f0000000440)="01"}) 1.31126854s ago: executing program 4 (id=120): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:6789:/\x00', 0x0) r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) 859.993615ms ago: executing program 8 (id=123): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e00010100c0000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000240)={0x84, &(0x7f0000000200)={0x40, 0x1, 0x8, '\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000280)={0x40, 0x0, 0xc, "000100"/12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=124): syz_usb_connect(0x0, 0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d0706000001000000010902300002010080320904000001020200000705810340000a09040100020a0000000705820200020007050302000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) kernel console output (not intermixed with test programs): layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.971491][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.974529][ T5614] team0: Port device team_slave_0 added [ 78.002865][ T5614] team0: Port device team_slave_1 added [ 78.030527][ T5616] team0: Port device team_slave_0 added [ 78.050189][ T4932] Bluetooth: hci3: command tx timeout [ 78.090301][ T5616] team0: Port device team_slave_1 added [ 78.119624][ T5624] Bluetooth: hci2: command tx timeout [ 78.119732][ T5617] Bluetooth: hci1: command tx timeout [ 78.119931][ T4932] Bluetooth: hci0: command tx timeout [ 78.163730][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.163860][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.163885][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.173167][ T5615] hsr_slave_0: entered promiscuous mode [ 78.174186][ T5615] hsr_slave_1: entered promiscuous mode [ 78.174987][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 78.175083][ T5615] Cannot create hsr debugfs directory [ 78.204035][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.204051][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.204074][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.225624][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.225641][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.225663][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.261328][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.261345][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.261368][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.419628][ T5614] hsr_slave_0: entered promiscuous mode [ 78.420923][ T5614] hsr_slave_1: entered promiscuous mode [ 78.421596][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 78.421613][ T5614] Cannot create hsr debugfs directory [ 78.436808][ T5616] hsr_slave_0: entered promiscuous mode [ 78.437727][ T5616] hsr_slave_1: entered promiscuous mode [ 78.438367][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 78.438384][ T5616] Cannot create hsr debugfs directory [ 78.702174][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.714133][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.716576][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.726201][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.744791][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.752630][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.775294][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.784991][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.853565][ T5615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.864845][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.866277][ T5615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.877186][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.890750][ T5615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.900434][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.901738][ T5615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.913049][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.001014][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.010762][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.011663][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.023568][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.038447][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.043530][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.045846][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.055946][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.144579][ T5616] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.153604][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.167066][ T5616] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.176218][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.177023][ T5616] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.186929][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.201583][ T5616] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.211462][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.260051][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.298515][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.337718][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.347944][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.348072][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.376854][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.384829][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.384920][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.398381][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.424352][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.424468][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.452442][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.456715][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.456858][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.496103][ T234] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.496213][ T234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.527573][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.527684][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.565846][ T5613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.605738][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.692193][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.719039][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.719144][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.764080][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.764186][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.110107][ T4932] Bluetooth: hci3: command tx timeout [ 80.189840][ T4932] Bluetooth: hci1: command tx timeout [ 80.195408][ T5617] Bluetooth: hci2: command tx timeout [ 80.195496][ T4932] Bluetooth: hci0: command tx timeout [ 80.525178][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.583099][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.599054][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.697317][ T5615] veth0_vlan: entered promiscuous mode [ 80.741357][ T5613] veth0_vlan: entered promiscuous mode [ 80.751308][ T5615] veth1_vlan: entered promiscuous mode [ 80.776775][ T5614] veth0_vlan: entered promiscuous mode [ 80.786521][ T5613] veth1_vlan: entered promiscuous mode [ 80.818664][ T5614] veth1_vlan: entered promiscuous mode [ 80.860559][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.873389][ T5615] veth0_macvtap: entered promiscuous mode [ 80.896440][ T5613] veth0_macvtap: entered promiscuous mode [ 80.898535][ T5615] veth1_macvtap: entered promiscuous mode [ 80.913171][ T5613] veth1_macvtap: entered promiscuous mode [ 80.947244][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.947803][ T5614] veth0_macvtap: entered promiscuous mode [ 80.967256][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.973110][ T5614] veth1_macvtap: entered promiscuous mode [ 81.006561][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.022834][ T27] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.043399][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.054407][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.054701][ T5616] veth0_vlan: entered promiscuous mode [ 81.061806][ T328] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.062572][ T328] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.106542][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.132906][ T5616] veth1_vlan: entered promiscuous mode [ 81.257616][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.257642][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.280326][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.282116][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.282160][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.282193][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.282226][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.282259][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.282291][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.282324][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.282356][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.373019][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.373047][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.402624][ T5616] veth0_macvtap: entered promiscuous mode [ 81.423075][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.430524][ T5616] veth1_macvtap: entered promiscuous mode [ 81.438509][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.467213][ T328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.467249][ T328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.529171][ T328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.529224][ T328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.555311][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.583414][ T5615] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.600362][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.624561][ T234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.634305][ T234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.701425][ T341] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.761365][ T61] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.761649][ T61] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.761986][ T61] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.946722][ T4932] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:200' [ 81.946793][ T4932] CPU: 0 UID: 0 PID: 4932 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 81.946816][ T4932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.946826][ T4932] Workqueue: hci3 hci_rx_work [ 81.946871][ T4932] Call Trace: [ 81.946881][ T4932] [ 81.946890][ T4932] dump_stack_lvl+0xe8/0x150 [ 81.946919][ T4932] sysfs_create_dir_ns+0x271/0x2a0 [ 81.946950][ T4932] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 81.946980][ T4932] ? do_raw_spin_unlock+0xf5/0x200 [ 81.947006][ T4932] kobject_add_internal+0x622/0xcd0 [ 81.947030][ T4932] kobject_add+0x163/0x240 [ 81.947057][ T4932] ? __pfx_kobject_add+0x10/0x10 [ 81.947084][ T4932] ? get_device_parent+0x366/0x3a0 [ 81.947112][ T4932] device_add+0x3fa/0xb80 [ 81.947136][ T4932] hci_conn_add_sysfs+0xd5/0x210 [ 81.947172][ T4932] le_conn_complete_evt+0x10b2/0x17a0 [ 81.947196][ T4932] ? le_conn_complete_evt+0x210/0x17a0 [ 81.947218][ T4932] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 81.947240][ T4932] ? __mutex_unlock_slowpath+0x731/0x900 [ 81.947274][ T4932] ? skb_pull_data+0xf0/0x200 [ 81.947302][ T4932] hci_le_conn_complete_evt+0x187/0x470 [ 81.947339][ T4932] hci_event_packet+0x67a/0xf10 [ 81.947371][ T4932] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 81.947399][ T4932] ? __pfx_hci_event_packet+0x10/0x10 [ 81.947429][ T4932] ? audit_tree_freeing_mark+0x6b0/0xb20 [ 81.947458][ T4932] ? hci_send_to_monitor+0xe2/0x590 [ 81.947483][ T4932] hci_rx_work+0x3ee/0x1020 [ 81.947516][ T4932] ? process_scheduled_works+0x97a/0x1630 [ 81.947539][ T4932] process_scheduled_works+0xc3d/0x1630 [ 81.947591][ T4932] ? __pfx_process_scheduled_works+0x10/0x10 [ 81.947620][ T4932] ? assign_work+0x3cf/0x5d0 [ 81.947646][ T4932] worker_thread+0xa47/0xfb0 [ 81.947695][ T4932] kthread+0x38b/0x480 [ 81.947726][ T4932] ? __pfx_worker_thread+0x10/0x10 [ 81.947746][ T4932] ? __pfx_kthread+0x10/0x10 [ 81.947774][ T4932] ret_from_fork+0x514/0xb70 [ 81.947804][ T4932] ? __pfx_ret_from_fork+0x10/0x10 [ 81.947830][ T4932] ? __switch_to+0xc89/0x1420 [ 81.947856][ T4932] ? __pfx_kthread+0x10/0x10 [ 81.947884][ T4932] ret_from_fork_asm+0x1a/0x30 [ 81.947926][ T4932] [ 81.948259][ T4932] kobject: kobject_add_internal failed for hci3:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 81.948299][ T4932] Bluetooth: hci3: failed to register connection device [ 82.073915][ T234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.073937][ T234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.125348][ T189] wiimote 0005:057E:0306.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 82.141996][ T189] wiimote 0005:057E:0306.0001: New device registered [ 82.160046][ T5766] wiimote 0005:057E:0306.0001: Device removed [ 82.270874][ T4932] Bluetooth: hci0: command tx timeout [ 82.271654][ T4932] Bluetooth: hci2: command tx timeout [ 82.271678][ T4932] Bluetooth: hci1: command tx timeout [ 82.288095][ T234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.288144][ T234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.412369][ T5773] fido_id[5773]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 82.786686][ T5783] lo speed is unknown, defaulting to 1000 [ 82.788608][ T5783] lo speed is unknown, defaulting to 1000 [ 82.795715][ T5783] lo speed is unknown, defaulting to 1000 [ 82.809954][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.929162][ T5783] infiniband rxe0: set active [ 82.930154][ T5783] infiniband rxe0: added lo [ 82.936549][ T5718] lo speed is unknown, defaulting to 1000 [ 82.956337][ T5783] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 82.956380][ T5783] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 82.956441][ T5783] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 82.982225][ T25] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice= 1.00 [ 82.985764][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 82.988232][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.988256][ T25] usb 3-1: Product: syz [ 82.988269][ T25] usb 3-1: Manufacturer: syz [ 82.988283][ T25] usb 3-1: SerialNumber: syz [ 82.996810][ T5783] RDS/IB: rxe0: added [ 83.011720][ T5783] smc: adding ib device rxe0 with port count 1 [ 83.011848][ T5783] smc: ib device rxe0 port 1 has no pnetid [ 83.032198][ T5620] lo speed is unknown, defaulting to 1000 [ 83.035025][ T25] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 83.035095][ T25] usb 3-1: setting power ON [ 83.036081][ T5783] lo speed is unknown, defaulting to 1000 [ 83.152700][ T9] wiimote 0005:057E:0306.0001: detected device: Nintendo Wii Remote (Gen 1) [ 83.204897][ T9] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input6 [ 83.235975][ T9] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input7 [ 83.268233][ T9] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input5 [ 83.315989][ T5776] nvme_tcp: queue 0: failed to receive icresp, error -104 [ 83.420918][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 83.432056][ T25] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 83.432161][ T25] usb 3-1: media controller created [ 83.448621][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 83.579923][ T5783] lo speed is unknown, defaulting to 1000 [ 83.745699][ T25] dvb-usb: recv bulk message failed: -75 [ 83.745754][ T25] usb 3-1: mode switch failed (-75) [ 83.745806][ T25] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 83.747684][ T25] usb 3-1: setting power OFF [ 83.761583][ T5783] lo speed is unknown, defaulting to 1000 [ 83.777350][ T2249] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.930993][ T2249] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 83.942659][ T5783] lo speed is unknown, defaulting to 1000 [ 83.949670][ T5624] Bluetooth: hci3: command tx timeout [ 83.958992][ T2249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.967984][ T2249] usb 2-1: Product: syz [ 83.972376][ T2249] usb 2-1: Manufacturer: syz [ 83.977062][ T2249] usb 2-1: SerialNumber: syz [ 84.117119][ T5697] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 84.265064][ T25] dvb-usb: bulk message failed: -71 (2/0) [ 84.265117][ T25] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 84.266409][ T25] usb 3-1: setting power ON [ 84.266724][ T25] dvb-usb: bulk message failed: -71 (2/0) [ 84.267695][ T25] usb 3-1: analog interface selection failed (-71) [ 84.330130][ T5796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.346318][ T25] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 84.346363][ T25] dvb_usb_cxusb 3-1:1.0: probe with driver dvb_usb_cxusb failed with error -71 [ 84.357194][ T5624] Bluetooth: hci1: command tx timeout [ 84.357272][ T5624] Bluetooth: hci2: command tx timeout [ 84.357295][ T5624] Bluetooth: hci0: command tx timeout [ 84.365263][ T25] usb 3-1: USB disconnect, device number 2 [ 84.397358][ T5797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.464041][ T5798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.881660][ T5801] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.829576][ T5774] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 85.909485][ T5718] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.981763][ T5774] usb 1-1: not running at top speed; connect to a high speed hub [ 85.981805][ T5774] usb 1-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 85.984192][ T5774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.005515][ T5774] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 86.030230][ T5617] Bluetooth: hci3: command 0x2016 tx timeout [ 86.061262][ T5718] usb 3-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 86.062925][ T5718] usb 3-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 86.062991][ T5718] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 86.064977][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.065000][ T5718] usb 3-1: Product: syz [ 86.065013][ T5718] usb 3-1: Manufacturer: syz [ 86.065027][ T5718] usb 3-1: SerialNumber: syz [ 86.330613][ T4932] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 86.510940][ T5774] gspca_mr97310a: reg write [21] error -110 [ 86.511081][ T5774] mr97310a 1-1:1.0: probe with driver mr97310a failed with error -110 [ 86.580472][ T4932] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 86.841341][ T866] cfg80211: failed to load regulatory.db [ 86.850654][ T5617] Bluetooth: hci4: CSR: Setting up dongle with HCI ver=6 rev=0000 [ 86.850880][ T5617] Bluetooth: hci4: LMP ver=6 subver=0000; manufacturer=0 [ 86.850896][ T5617] Bluetooth: hci4: CSR: Unbranded CSR clone detected; adding workarounds and force-suspending once... [ 86.851256][ T5617] Bluetooth: hci4: CSR: Couldn't suspend the device for our Barrot 8041a02 receive-issue workaround [ 86.851742][ T5617] Bluetooth: hci4: HCI Delete Stored Link Key command is advertised, but not supported. [ 86.851758][ T5617] Bluetooth: hci4: HCI Read Default Erroneous Data Reporting command is advertised, but not supported. [ 86.851770][ T5617] Bluetooth: hci4: HCI Set Event Filter command not supported. [ 87.101933][ T4932] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 87.215557][ T5774] usb 1-1: USB disconnect, device number 2 [ 87.230391][ T5697] usb 2-1: HTC credit config timeout [ 87.230599][ T5697] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 87.265575][ T5697] ath9k_htc: Failed to initialize the device [ 87.279669][ T5697] usb 2-1: ath9k_htc: USB layer deinitialized [ 87.353138][ T4932] Bluetooth: hci4: unexpected event for opcode 0x1002 [ 87.391298][ T2249] usb 2-1: USB disconnect, device number 2 [ 87.656738][ T5617] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 87.665400][ T25] usb 3-1: USB disconnect, device number 3 [ 87.961003][ T4932] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:200' [ 87.961043][ T4932] CPU: 0 UID: 0 PID: 4932 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 87.961064][ T4932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.961075][ T4932] Workqueue: hci0 hci_rx_work [ 87.961105][ T4932] Call Trace: [ 87.961113][ T4932] [ 87.961122][ T4932] dump_stack_lvl+0xe8/0x150 [ 87.961155][ T4932] sysfs_create_dir_ns+0x271/0x2a0 [ 87.961186][ T4932] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 87.961225][ T4932] ? do_raw_spin_unlock+0xf5/0x200 [ 87.961250][ T4932] kobject_add_internal+0x622/0xcd0 [ 87.961279][ T4932] kobject_add+0x163/0x240 [ 87.961300][ T4932] ? preempt_schedule_thunk+0x16/0x40 [ 87.961334][ T4932] ? __pfx_kobject_add+0x10/0x10 [ 87.961362][ T4932] ? get_device_parent+0x366/0x3a0 [ 87.961390][ T4932] device_add+0x3fa/0xb80 [ 87.961415][ T4932] hci_conn_add_sysfs+0xd5/0x210 [ 87.961446][ T4932] le_conn_complete_evt+0x10b2/0x17a0 [ 87.961472][ T4932] ? le_conn_complete_evt+0x210/0x17a0 [ 87.961494][ T4932] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 87.961514][ T4932] ? __mutex_unlock_slowpath+0x731/0x900 [ 87.961548][ T4932] ? skb_pull_data+0xf0/0x200 [ 87.961577][ T4932] hci_le_conn_complete_evt+0x187/0x470 [ 87.961616][ T4932] hci_event_packet+0x67a/0xf10 [ 87.961651][ T4932] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 87.961681][ T4932] ? __pfx_hci_event_packet+0x10/0x10 [ 87.961711][ T4932] ? audit_tree_freeing_mark+0x6b0/0xb20 [ 87.961742][ T4932] ? hci_send_to_monitor+0xe2/0x590 [ 87.961770][ T4932] hci_rx_work+0x3ee/0x1020 [ 87.961805][ T4932] ? process_scheduled_works+0x97a/0x1630 [ 87.961828][ T4932] process_scheduled_works+0xc3d/0x1630 [ 87.961883][ T4932] ? __pfx_process_scheduled_works+0x10/0x10 [ 87.961913][ T4932] ? assign_work+0x3cf/0x5d0 [ 87.961937][ T4932] worker_thread+0xa47/0xfb0 [ 87.961985][ T4932] kthread+0x38b/0x480 [ 87.962016][ T4932] ? __pfx_worker_thread+0x10/0x10 [ 87.962039][ T4932] ? __pfx_kthread+0x10/0x10 [ 87.962068][ T4932] ret_from_fork+0x514/0xb70 [ 87.962099][ T4932] ? __pfx_ret_from_fork+0x10/0x10 [ 87.962126][ T4932] ? __switch_to+0xc89/0x1420 [ 87.962153][ T4932] ? __pfx_kthread+0x10/0x10 [ 87.962183][ T4932] ret_from_fork_asm+0x1a/0x30 [ 87.962235][ T4932] [ 87.972596][ T4932] kobject: kobject_add_internal failed for hci0:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 87.972641][ T4932] Bluetooth: hci0: failed to register connection device [ 88.112353][ T5617] Bluetooth: hci3: command 0x2016 tx timeout [ 88.479409][ T2249] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 88.629415][ T2249] usb 3-1: Using ep0 maxpacket: 8 [ 88.635102][ T2249] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 88.636493][ T2249] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.642237][ T2249] usb 3-1: config 0 descriptor?? [ 88.654770][ T2249] usb 3-1: probing VID:PID(0424:012C) [ 88.667976][ T2249] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 88.668006][ T2249] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 88.668764][ T2249] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 88.668784][ T2249] usb 3-1: vub300 testing BULK OUT EndPoint(3) 04 [ 88.668802][ T2249] usb 3-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 89.149620][ T5820] NFSD: Unable to initialize client recovery tracking! (-110) [ 89.149661][ T5820] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 89.149693][ T5820] NFSD: starting 90-second grace period (net f00003c4) [ 89.715551][ T2249] vub300 3-1:0.0: probe with driver vub300 failed with error -110 [ 89.857172][ T2249] usb 3-1: USB disconnect, device number 4 [ 90.031168][ T4932] Bluetooth: hci0: command 0x2016 tx timeout [ 90.099507][ T866] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 90.263763][ T866] usb 2-1: not running at top speed; connect to a high speed hub [ 90.263819][ T866] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 90.282694][ T866] usb 2-1: config index 0 descriptor too short (expected 87, got 69) [ 90.282736][ T866] usb 2-1: config 1 has an invalid descriptor of length 14, skipping remainder of the config [ 90.282801][ T866] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 90.282895][ T866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.350769][ T866] gspca_main: spca501-2.14.0 probing 0000:0000 [ 90.666735][ T5617] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:200' [ 90.666767][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 90.666789][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.666810][ T5617] Workqueue: hci2 hci_rx_work [ 90.666839][ T5617] Call Trace: [ 90.666846][ T5617] [ 90.666853][ T5617] dump_stack_lvl+0xe8/0x150 [ 90.666880][ T5617] sysfs_create_dir_ns+0x271/0x2a0 [ 90.666914][ T5617] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 90.666945][ T5617] ? do_raw_spin_unlock+0xf5/0x200 [ 90.666973][ T5617] kobject_add_internal+0x622/0xcd0 [ 90.667001][ T5617] kobject_add+0x163/0x240 [ 90.667026][ T5617] ? __pfx_kobject_add+0x10/0x10 [ 90.667052][ T5617] ? get_device_parent+0x366/0x3a0 [ 90.667079][ T5617] device_add+0x3fa/0xb80 [ 90.667103][ T5617] hci_conn_add_sysfs+0xd5/0x210 [ 90.667131][ T5617] le_conn_complete_evt+0x10b2/0x17a0 [ 90.667154][ T5617] ? le_conn_complete_evt+0x210/0x17a0 [ 90.667175][ T5617] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 90.667196][ T5617] ? __mutex_unlock_slowpath+0x731/0x900 [ 90.667229][ T5617] ? skb_pull_data+0xf0/0x200 [ 90.667256][ T5617] hci_le_conn_complete_evt+0x187/0x470 [ 90.667294][ T5617] hci_event_packet+0x67a/0xf10 [ 90.667325][ T5617] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 90.667352][ T5617] ? __pfx_hci_event_packet+0x10/0x10 [ 90.667382][ T5617] ? audit_tree_freeing_mark+0x6b0/0xb20 [ 90.667412][ T5617] ? hci_send_to_monitor+0xe2/0x590 [ 90.667436][ T5617] hci_rx_work+0x3ee/0x1020 [ 90.667469][ T5617] ? process_scheduled_works+0x97a/0x1630 [ 90.667492][ T5617] process_scheduled_works+0xc3d/0x1630 [ 90.667545][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 90.667572][ T5617] ? assign_work+0x3cf/0x5d0 [ 90.667599][ T5617] worker_thread+0xa47/0xfb0 [ 90.667648][ T5617] kthread+0x38b/0x480 [ 90.667675][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 90.667696][ T5617] ? __pfx_kthread+0x10/0x10 [ 90.667724][ T5617] ret_from_fork+0x514/0xb70 [ 90.667753][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 90.667779][ T5617] ? __switch_to+0xc89/0x1420 [ 90.667811][ T5617] ? __pfx_kthread+0x10/0x10 [ 90.667839][ T5617] ret_from_fork_asm+0x1a/0x30 [ 90.667882][ T5617] [ 90.668692][ T5617] kobject: kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 90.668730][ T5617] Bluetooth: hci2: failed to register connection device [ 91.059521][ T866] gspca_spca501: reg write: error -110 [ 91.059553][ T866] spca501 2-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 91.059641][ T866] spca501 2-1:1.0: probe with driver spca501 failed with error -22 [ 91.067690][ T866] uvcvideo 2-1:1.0: Found UVC 1.00 device (0000:0000) [ 91.067775][ T866] uvcvideo 2-1:1.0: No streaming interface found for terminal 32770. [ 91.067798][ T866] uvcvideo 2-1:1.0: Entity type for entity Input 1 was not initialized! [ 91.528084][ T5857] loop0: detected capacity change from 0 to 32768 [ 91.604637][ T5858] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 91.775300][ T5857] md/raid1:md0: active with 1 out of 1 mirrors [ 91.775396][ T10] usb 2-1: USB disconnect, device number 3 [ 92.109437][ T5617] Bluetooth: hci0: command 0x2016 tx timeout [ 92.749518][ T5617] Bluetooth: hci2: command 0x2016 tx timeout [ 93.179430][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.189414][ T866] psmouse serio2: Failed to reset mouse on : -5 [ 93.199654][ T5718] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.330326][ T25] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice= 0.00 [ 93.332082][ T25] usb 4-1: config index 0 descriptor too short (expected 34, got 25) [ 93.332107][ T25] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 93.332155][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.347128][ T25] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 93.356295][ T5718] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 93.357514][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.378568][ T5718] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 93.849524][ T25] gspca_topro: reg_w err -110 [ 93.879561][ T25] gspca_topro: Sensor soi763a [ 93.879699][ T5718] gspca_mr97310a: reg write [21] error -110 [ 93.879792][ T5718] mr97310a 2-1:1.0: probe with driver mr97310a failed with error -110 [ 94.554613][ T2249] usb 4-1: USB disconnect, device number 2 [ 94.839674][ T5624] Bluetooth: hci2: command 0x2016 tx timeout [ 95.329530][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.480188][ T25] usb 4-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 95.492216][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.500431][ T25] usb 4-1: Product: syz [ 95.500452][ T25] usb 4-1: Manufacturer: syz [ 95.500465][ T25] usb 4-1: SerialNumber: syz [ 95.513833][ T25] usb-storage 4-1:1.0: USB Mass Storage device detected [ 95.522702][ T25] scsi host1: usb-storage 4-1:1.0 [ 95.920066][ T866] misc userio: Buffer overflowed, userio client isn't keeping up [ 95.969105][ T10] usb 2-1: USB disconnect, device number 4 [ 96.309422][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 96.479994][ T10] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 96.481210][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.597177][ T341] scsi 1:0:0:0: CD-ROM TOSHIBA CD-ROM 1.0 PQ: 0 ANSI: 5 [ 96.703879][ T10] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 97.537412][ T341] scsi host1: scsi scan: INQUIRY result too short (5), using 36 [ 97.537485][ T341] scsi 1:0:0:1: Direct-Access PQ: 0 ANSI: 0 [ 97.906759][ T5764] usb 2-1: USB disconnect, device number 5 [ 98.457558][ T5893] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 98.457596][ T5893] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 98.457631][ T5893] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 98.473219][ T5893] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 98.490825][ T5893] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 98.963836][ T10] usb 4-1: USB disconnect, device number 3 [ 99.023822][ T341] sr 1:0:0:0: [sr0] scsi-1 drive [ 99.024685][ T341] cdrom: Uniform CD-ROM driver Revision: 3.20 [ 99.060970][ T341] sr 1:0:0:0: Attached scsi generic sg1 type 5 [ 99.081034][ T341] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 99.097765][ T61] sd 1:0:0:1: [sdb] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 99.107608][ T61] sd 1:0:0:1: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 99.107664][ T61] sd 1:0:0:1: [sdb] Sense not available. [ 99.108390][ T61] sd 1:0:0:1: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 99.108433][ T61] sd 1:0:0:1: [sdb] 0-byte physical blocks [ 99.109862][ T61] sd 1:0:0:1: [sdb] Test WP failed, assume Write Enabled [ 99.110801][ T61] sd 1:0:0:1: [sdb] Asking for cache data failed [ 99.112708][ T61] sd 1:0:0:1: [sdb] Assuming drive cache: write through [ 99.173918][ T61] sd 1:0:0:1: [sdb] Attached SCSI disk [ 99.330551][ T866] misc userio: Buffer overflowed, userio client isn't keeping up [ 99.980162][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.180969][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 1.00 [ 100.193374][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.193412][ T10] usb 4-1: Product: syz [ 100.193427][ T10] usb 4-1: Manufacturer: syz [ 100.193440][ T10] usb 4-1: SerialNumber: syz [ 100.435703][ T10] usb 4-1: Direct firmware load for ath6k/AR6004/hw1.3/bdata.bin failed with error -2 [ 100.435801][ T10] usb 4-1: Falling back to sysfs fallback for: ath6k/AR6004/hw1.3/bdata.bin [ 100.622561][ T5920] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 100.641152][ T5920] md: could not open device unknown-block(7,0). [ 100.962896][ T5926] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 100.983397][ T5926] md: could not open device unknown-block(7,0). [ 101.124176][ T5860] md_update_sb: can't update sb for read-only array md0 [ 101.439502][ T2249] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 101.590147][ T2249] usb 2-1: New USB device found, idVendor=0a5c, idProduct=21e1, bcdDevice= 1.00 [ 101.591136][ T2249] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 101.591164][ T2249] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 101.591200][ T2249] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.596927][ T5935] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 101.597079][ T5935] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 101.804105][ T5617] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 101.812084][ T48] usb 2-1: USB disconnect, device number 6 [ 102.629585][ T189] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 102.689472][ T866] misc userio: Buffer overflowed, userio client isn't keeping up [ 102.790089][ T189] usb 2-1: New USB device found, idVendor=0a5c, idProduct=21e8, bcdDevice= 1.00 [ 102.791055][ T189] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 102.791082][ T189] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 102.791129][ T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.798385][ T5941] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 102.798537][ T5941] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 104.510359][ T5617] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 104.519876][ T48] usb 2-1: USB disconnect, device number 7 [ 104.739451][ T189] wiimote 0005:057E:0306.0002: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 104.749824][ T189] wiimote 0005:057E:0306.0002: New device registered [ 105.560817][ T5943] wiimote 0005:057E:0306.0002: Device removed [ 105.789442][ T2249] wiimote 0005:057E:0306.0002: detected device: Nintendo Wii Remote (Gen 1) [ 105.802425][ T2249] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input11 [ 105.810354][ T2249] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input12 [ 105.814145][ T2249] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input10 [ 106.059590][ T866] misc userio: Buffer overflowed, userio client isn't keeping up [ 106.250015][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 106.252042][ T5617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 106.253392][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 106.254545][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 106.255088][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 106.473524][ T5955] lo speed is unknown, defaulting to 1000 [ 106.769105][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.769245][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.769440][ T5955] bridge_slave_0: entered allmulticast mode [ 106.771871][ T5955] bridge_slave_0: entered promiscuous mode [ 106.775690][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.775786][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.776146][ T5955] bridge_slave_1: entered allmulticast mode [ 106.777884][ T5955] bridge_slave_1: entered promiscuous mode [ 106.812314][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.815750][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.845616][ T5955] team0: Port device team_slave_0 added [ 106.848775][ T5955] team0: Port device team_slave_1 added [ 106.872209][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.872252][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.873481][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.875625][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.875639][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.875661][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.925439][ T5955] hsr_slave_0: entered promiscuous mode [ 106.926433][ T5955] hsr_slave_1: entered promiscuous mode [ 106.927145][ T5955] debugfs: 'hsr0' already exists in 'hsr' [ 106.927163][ T5955] Cannot create hsr debugfs directory [ 107.084948][ T5955] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.094839][ T5955] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.095871][ T5955] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.104852][ T5955] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.105952][ T5955] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.113167][ T5955] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.114457][ T5955] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.118935][ T5955] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.150963][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.151488][ T5955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.152160][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.152370][ T5955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.211236][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.225330][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.233394][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.247821][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.259101][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.259199][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.274037][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.274185][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.580733][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.763066][ T5955] veth0_vlan: entered promiscuous mode [ 107.771549][ T5955] veth1_vlan: entered promiscuous mode [ 107.796661][ T5955] veth0_macvtap: entered promiscuous mode [ 107.805243][ T5955] veth1_macvtap: entered promiscuous mode [ 107.817426][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.822682][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.910573][ T234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.910614][ T234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.926686][ T234] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.926727][ T234] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.927031][ T328] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.963114][ T328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.963150][ T328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.980043][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.140658][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 108.143060][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 108.144079][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 108.145403][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 108.146288][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 108.270738][ T5617] Bluetooth: hci4: command tx timeout [ 108.309473][ T48] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 108.390787][ T5997] lo speed is unknown, defaulting to 1000 [ 108.461683][ T48] usb 5-1: New USB device found, idVendor=2040, idProduct=2900, bcdDevice= 0.00 [ 108.474212][ T48] usb 5-1: config index 0 descriptor too short (expected 46, got 44) [ 108.482732][ T48] usb 5-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 108.482810][ T48] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 108.482855][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.531909][ T48] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 108.808550][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.808721][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.808845][ T5997] bridge_slave_0: entered allmulticast mode [ 108.810628][ T5997] bridge_slave_0: entered promiscuous mode [ 108.813229][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.813381][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.813769][ T5997] bridge_slave_1: entered allmulticast mode [ 108.815585][ T5997] bridge_slave_1: entered promiscuous mode [ 108.847169][ T5997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.850763][ T5997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.890586][ T5997] team0: Port device team_slave_0 added [ 108.893452][ T5997] team0: Port device team_slave_1 added [ 108.924177][ T5997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.924207][ T5997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.924589][ T5997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.928060][ T5997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.928075][ T5997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.928167][ T5997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.010954][ T5997] hsr_slave_0: entered promiscuous mode [ 109.011882][ T5997] hsr_slave_1: entered promiscuous mode [ 109.013400][ T5997] debugfs: 'hsr0' already exists in 'hsr' [ 109.013421][ T5997] Cannot create hsr debugfs directory [ 109.208614][ T5997] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 109.221515][ T5997] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.222640][ T5997] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.243595][ T5997] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.251322][ T5997] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 109.263342][ T5997] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.274730][ T5997] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 109.286366][ T5997] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.320532][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.320639][ T5997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.321448][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.321565][ T5997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.415622][ T5997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.428607][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.437317][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.454818][ T5997] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.463708][ T234] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.463808][ T234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.485021][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.485132][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.736446][ T2349] pvrusb2: Failed to submit write-control URB status=-2 [ 109.738062][ T2349] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 109.738088][ T2349] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 109.776965][ T48] usb 5-1: USB disconnect, device number 2 [ 109.920020][ T5997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.100471][ T5997] veth0_vlan: entered promiscuous mode [ 110.108228][ T5997] veth1_vlan: entered promiscuous mode [ 110.138840][ T5997] veth0_macvtap: entered promiscuous mode [ 110.144686][ T5997] veth1_macvtap: entered promiscuous mode [ 110.157951][ T5997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.162427][ T5997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.192704][ T5617] Bluetooth: hci5: command tx timeout [ 110.230564][ T328] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.230669][ T328] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.230698][ T328] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.230723][ T328] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.270267][ T866] misc userio: Buffer overflowed, userio client isn't keeping up [ 110.327619][ T341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.327664][ T341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.351424][ T5617] Bluetooth: hci4: command tx timeout [ 110.372400][ T328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.379920][ T328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.729425][ T2249] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 110.885172][ T2249] usb 6-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 110.888468][ T2249] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.920097][ T6021] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 110.920166][ T6021] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 110.920208][ T6021] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 110.920235][ T6021] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 110.920257][ T6021] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 110.920276][ T6021] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 110.920296][ T6021] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 110.920316][ T6021] wiimote 0005:057E:0306.0003: unknown main item tag 0x2 [ 110.920340][ T6021] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 110.920364][ T6021] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 110.941350][ T6021] wiimote 0005:057E:0306.0003: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 110.941678][ T6021] wiimote 0005:057E:0306.0003: New device registered [ 111.176237][ T2249] net1080 6-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.5-1, NetChip TurboCONNECT, ea:a2:bc:34:d0:01 [ 111.717991][ T6045] wiimote 0005:057E:0306.0003: Device removed [ 111.949567][ T5772] wiimote 0005:057E:0306.0003: detected device: Nintendo Wii Remote (Gen 1) [ 111.971900][ T5772] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input14 [ 111.975703][ T5772] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input15 [ 111.980838][ T5772] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input13 [ 112.205633][ T866] input: PS/2 Generic Mouse as /devices/serio2/input/input9 [ 112.270554][ T5617] Bluetooth: hci5: command tx timeout [ 112.431949][ T5617] Bluetooth: hci4: command tx timeout [ 112.440829][ T866] psmouse serio2: Failed to enable mouse on [ 114.252632][ T6078] CIFS: Attempting to mount //127.0.0.1/share [ 114.265565][ T6078] CIFS: VFS: cifs_mount failed w/return code = -112 [ 114.350725][ T5617] Bluetooth: hci5: command tx timeout [ 114.509499][ T5617] Bluetooth: hci4: command tx timeout [ 116.429492][ T5617] Bluetooth: hci5: command tx timeout [ 116.474599][ T5772] usb 6-1: USB disconnect, device number 2 [ 116.492142][ T5772] net1080 6-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.5-1, NetChip TurboCONNECT [ 116.776037][ T234] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.826407][ T234] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.884238][ T234] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.982207][ T234] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.162885][ T234] bridge_slave_1: left allmulticast mode [ 117.162943][ T234] bridge_slave_1: left promiscuous mode [ 117.164150][ T234] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.224850][ T234] bridge_slave_0: left allmulticast mode [ 117.231692][ T234] bridge_slave_0: left promiscuous mode [ 117.237892][ T234] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.305026][ T5710] wiimote 0005:057E:0306.0004: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 117.331079][ T5710] wiimote 0005:057E:0306.0004: New device registered [ 117.343918][ T6120] wiimote 0005:057E:0306.0004: Device removed [ 117.444447][ T6122] fido_id[6122]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 117.478747][ T6124] rdma_rxe: rxe_newlink: failed to add lo [ 117.546266][ T234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.565577][ T234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.581273][ T234] bond0 (unregistering): Released all slaves [ 118.219383][ T234] hsr_slave_0: left promiscuous mode [ 118.225348][ T234] hsr_slave_1: left promiscuous mode [ 118.226449][ T234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.226480][ T234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.233310][ T234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.233328][ T234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.262006][ T234] veth1_macvtap: left promiscuous mode [ 118.262065][ T234] veth0_macvtap: left promiscuous mode [ 118.262166][ T234] veth1_vlan: left promiscuous mode [ 118.262249][ T234] veth0_vlan: left promiscuous mode [ 118.353876][ T5710] wiimote 0005:057E:0306.0004: detected device: Nintendo Wii Remote (Gen 1) [ 118.362220][ T5710] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input21 [ 118.384654][ T5710] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input22 [ 118.407048][ T5710] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input20 [ 118.553745][ T234] team0 (unregistering): Port device team_slave_1 removed [ 118.564478][ T234] team0 (unregistering): Port device team_slave_0 removed [ 118.651646][ T13] smc: removing ib device rxe0 [ 118.694823][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 118.703082][ T5764] lo speed is unknown, defaulting to 1000 [ 118.703109][ T5764] rxe0: Port: 1 Link DOWN [ 118.729167][ T13] smbdirect: ib_dev[rxe0] removed [ 119.365244][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 119.947532][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 120.344789][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 124.589686][ T6021] misc userio: Buffer overflowed, userio client isn't keeping up [ 125.016089][ T6212] UBIFS error (pid: 6212): cannot open "ubi0_0", error -19 [ 125.400384][ T189] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 125.550285][ T189] usb 6-1: New USB device found, idVendor=045e, idProduct=028e, bcdDevice= 1.14 [ 125.560426][ T189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.586618][ T189] input: Microsoft X-Box 360 pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input25 [ 125.639881][ T4968] input input25: unable to receive magic message: -110 [ 125.649773][ T4968] input input25: unable to receive magic message: -32 [ 125.663599][ T4968] input input25: unable to receive magic message: -32 [ 125.672128][ T5619] input input25: unable to receive magic message: -32 [ 125.687730][ T4968] input input25: unable to receive magic message: -32 [ 125.696629][ T4968] input input25: unable to receive magic message: -32 [ 126.147728][ T5617] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:200' [ 126.147773][ T5617] CPU: 1 UID: 0 PID: 5617 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 126.147797][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.147808][ T5617] Workqueue: hci4 hci_rx_work [ 126.147851][ T5617] Call Trace: [ 126.147858][ T5617] [ 126.147866][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.147909][ T5617] sysfs_create_dir_ns+0x271/0x2a0 [ 126.147942][ T5617] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 126.147971][ T5617] ? do_raw_spin_unlock+0xf5/0x200 [ 126.147999][ T5617] kobject_add_internal+0x622/0xcd0 [ 126.148028][ T5617] kobject_add+0x163/0x240 [ 126.148054][ T5617] ? __pfx_kobject_add+0x10/0x10 [ 126.148080][ T5617] ? get_device_parent+0x366/0x3a0 [ 126.148107][ T5617] device_add+0x3fa/0xb80 [ 126.148131][ T5617] hci_conn_add_sysfs+0xd5/0x210 [ 126.148159][ T5617] le_conn_complete_evt+0x10b2/0x17a0 [ 126.148182][ T5617] ? le_conn_complete_evt+0x210/0x17a0 [ 126.148203][ T5617] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 126.148225][ T5617] ? __mutex_unlock_slowpath+0x731/0x900 [ 126.148258][ T5617] ? skb_pull_data+0xf0/0x200 [ 126.148285][ T5617] hci_le_conn_complete_evt+0x187/0x470 [ 126.148322][ T5617] hci_event_packet+0x67a/0xf10 [ 126.148354][ T5617] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 126.148381][ T5617] ? __pfx_hci_event_packet+0x10/0x10 [ 126.148411][ T5617] ? audit_tree_freeing_mark+0x6b0/0xb20 [ 126.148441][ T5617] ? hci_send_to_monitor+0xe2/0x590 [ 126.148465][ T5617] hci_rx_work+0x3ee/0x1020 [ 126.148498][ T5617] ? process_scheduled_works+0x97a/0x1630 [ 126.148520][ T5617] process_scheduled_works+0xc3d/0x1630 [ 126.148572][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.148601][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.148627][ T5617] worker_thread+0xa47/0xfb0 [ 126.148676][ T5617] kthread+0x38b/0x480 [ 126.148703][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.148724][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.148753][ T5617] ret_from_fork+0x514/0xb70 [ 126.148781][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.148808][ T5617] ? __switch_to+0xc89/0x1420 [ 126.148834][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.148863][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.148911][ T5617] [ 126.148961][ T5617] kobject: kobject_add_internal failed for hci4:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 126.148995][ T5617] Bluetooth: hci4: failed to register connection device [ 127.026613][ T6224] lo speed is unknown, defaulting to 1000 [ 127.029943][ T6224] lo speed is unknown, defaulting to 1000 [ 127.030922][ T6224] lo speed is unknown, defaulting to 1000 [ 127.192020][ T6224] infiniband syz0: set active [ 127.192078][ T5710] lo speed is unknown, defaulting to 1000 [ 127.192145][ T6224] infiniband syz0: added lo [ 127.208938][ T6224] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 127.208977][ T6224] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 127.209015][ T6224] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 127.231744][ T6224] RDS/IB: syz0: added [ 127.234401][ T6224] smc: adding ib device syz0 with port count 1 [ 127.234421][ T6224] smc: ib device syz0 port 1 has no pnetid [ 127.235285][ T5710] lo speed is unknown, defaulting to 1000 [ 127.237434][ T6224] lo speed is unknown, defaulting to 1000 [ 127.438732][ T6224] lo speed is unknown, defaulting to 1000 [ 127.607229][ T6224] lo speed is unknown, defaulting to 1000 [ 127.777779][ T6224] lo speed is unknown, defaulting to 1000 [ 127.949115][ T6224] lo speed is unknown, defaulting to 1000 [ 127.989868][ T6021] misc userio: Buffer overflowed, userio client isn't keeping up [ 128.157499][ T5772] usb 6-1: USB disconnect, device number 3 [ 128.157593][ C0] xpad 6-1:1.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 128.189508][ T5624] Bluetooth: hci4: command 0x2016 tx timeout [ 128.255028][ T6231] CIFS: Attempting to mount //127.0.0.1/share [ 129.084367][ T6231] CIFS: VFS: cifs_mount failed w/return code = -112 [ 130.269558][ T5624] Bluetooth: hci4: command 0x2016 tx timeout [ 131.369514][ T6021] misc userio: Buffer overflowed, userio client isn't keeping up [ 131.934718][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.946825][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 131.955488][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.964347][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.974840][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 132.301226][ T6277] infiniband rxe0: set active [ 132.301262][ T6277] infiniband rxe0: added veth0 [ 132.346446][ T6277] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 132.346503][ T6277] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 132.346539][ T6277] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 132.455068][ T6277] RDS/IB: rxe0: added [ 132.455135][ T6277] smc: adding ib device rxe0 with port count 1 [ 132.459137][ T6277] smc: ib device rxe0 port 1 has no pnetid [ 132.568226][ T6282] lo speed is unknown, defaulting to 1000 [ 132.912324][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.920029][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.463141][ T6282] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.470692][ T6282] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.470835][ T6282] bridge_slave_0: entered allmulticast mode [ 133.486222][ T6282] bridge_slave_0: entered promiscuous mode [ 133.495472][ T6282] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.500956][ T6282] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.501070][ T6282] bridge_slave_1: entered allmulticast mode [ 133.504198][ T6282] bridge_slave_1: entered promiscuous mode [ 133.563890][ T6282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.574065][ T6282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.613841][ T6282] team0: Port device team_slave_0 added [ 133.622604][ T6282] team0: Port device team_slave_1 added [ 133.655986][ T6282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.664241][ T6282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.690389][ T6282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.701676][ T6282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.701689][ T6282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.701712][ T6282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.786071][ T6282] hsr_slave_0: entered promiscuous mode [ 133.787047][ T6282] hsr_slave_1: entered promiscuous mode [ 134.023078][ T6282] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 134.031300][ T5624] Bluetooth: hci3: command tx timeout [ 134.044979][ T6282] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 134.045997][ T6282] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 134.062035][ T6282] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 134.073605][ T6282] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 134.088255][ T6282] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 134.092238][ T6282] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 134.104109][ T6282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 134.123311][ T6282] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.123420][ T6282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.123663][ T6282] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.123786][ T6282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.185195][ T6282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.195261][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.203323][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.216145][ T6282] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.223531][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.223625][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.230063][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.230154][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.521731][ T6282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.683390][ T6282] veth0_vlan: entered promiscuous mode [ 134.694334][ T6282] veth1_vlan: entered promiscuous mode [ 134.718751][ T6282] veth0_macvtap: entered promiscuous mode [ 134.724278][ T6282] veth1_macvtap: entered promiscuous mode [ 134.737085][ T6282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.741791][ T6282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.761231][ T6021] misc userio: Buffer overflowed, userio client isn't keeping up [ 134.791200][ T27] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.791936][ T27] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.792644][ T27] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.842982][ T328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.852028][ T328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.873921][ T328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.874352][ T328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.881918][ T328] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.179494][ T5620] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 135.329925][ T5620] usb 7-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 135.332837][ T5620] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.332859][ T5620] usb 7-1: Product: syz [ 135.332872][ T5620] usb 7-1: Manufacturer: syz [ 135.332886][ T5620] usb 7-1: SerialNumber: syz [ 135.348642][ T5620] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input26 [ 136.109662][ T5624] Bluetooth: hci3: command tx timeout [ 137.195908][ T6354] netlink: 'syz.4.88': attribute type 2 has an invalid length. [ 137.199191][ T6354] netlink: 'syz.4.88': attribute type 4 has an invalid length. [ 137.202363][ T6354] netlink: 'syz.4.88': attribute type 2 has an invalid length. [ 137.202380][ T6354] netlink: 'syz.4.88': attribute type 4 has an invalid length. [ 137.203382][ T6354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.88'. [ 137.203790][ T6354] netlink: 'syz.4.88': attribute type 11 has an invalid length. [ 137.203805][ T6354] netlink: 'syz.4.88': attribute type 4 has an invalid length. [ 137.963710][ T866] usb 7-1: USB disconnect, device number 2 [ 138.189467][ T5624] Bluetooth: hci3: command tx timeout [ 138.859447][ T189] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 139.009902][ T189] usb 7-1: New USB device found, idVendor=03e8, idProduct=0004, bcdDevice= 0.00 [ 139.011001][ T189] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 139.011040][ T189] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.014296][ T6364] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 139.020628][ T189] gspca_main: se401-2.14.0 probing 03e8:0004 [ 139.044910][ T6021] misc userio: Buffer overflowed, userio client isn't keeping up [ 139.419741][ T189] gspca_se401: Bayer format not supported! [ 139.679643][ T5617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 139.681644][ T5617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 139.684982][ T5617] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 139.685823][ T5617] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 139.686353][ T5617] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 139.902862][ T6366] lo speed is unknown, defaulting to 1000 [ 140.271583][ T5624] Bluetooth: hci3: command tx timeout [ 140.362064][ T6366] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.362270][ T6366] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.362390][ T6366] bridge_slave_0: entered allmulticast mode [ 140.364047][ T6366] bridge_slave_0: entered promiscuous mode [ 140.366991][ T6366] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.367144][ T6366] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.367264][ T6366] bridge_slave_1: entered allmulticast mode [ 140.368898][ T6366] bridge_slave_1: entered promiscuous mode [ 140.406174][ T6366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.411009][ T6366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.445690][ T6366] team0: Port device team_slave_0 added [ 140.448618][ T6366] team0: Port device team_slave_1 added [ 140.468361][ T6366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.468397][ T6366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.468420][ T6366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.470511][ T6366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.470523][ T6366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.470546][ T6366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.515051][ T6366] hsr_slave_0: entered promiscuous mode [ 140.516511][ T6366] hsr_slave_1: entered promiscuous mode [ 140.517126][ T6366] debugfs: 'hsr0' already exists in 'hsr' [ 140.517142][ T6366] Cannot create hsr debugfs directory [ 140.685660][ T6366] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 140.695128][ T6366] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 140.696050][ T6366] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 140.709087][ T6366] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 140.710902][ T6366] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 140.724361][ T6366] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 140.725182][ T6366] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 140.735868][ T6366] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 140.764412][ T6366] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.764519][ T6366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.764766][ T6366] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.764873][ T6366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.818426][ T6366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.834145][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.842265][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.855225][ T6366] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.866939][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.867032][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.868156][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.868304][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.164655][ T6366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.343821][ T6366] veth0_vlan: entered promiscuous mode [ 141.354359][ T6366] veth1_vlan: entered promiscuous mode [ 141.377106][ T6366] veth0_macvtap: entered promiscuous mode [ 141.382428][ T6366] veth1_macvtap: entered promiscuous mode [ 141.394853][ T6366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.409151][ T6366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.416667][ T27] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.416852][ T27] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.417030][ T27] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.417164][ T27] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.511164][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.519060][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.538560][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.538598][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.607625][ T6414] rdma_rxe: rxe_newlink: failed to add lo [ 141.709592][ T5624] Bluetooth: hci6: command tx timeout [ 141.832044][ T189] usb 7-1: USB disconnect, device number 3 [ 141.993304][ T6021] input: PS/2 Generic Mouse as /devices/serio4/input/input24 [ 142.209410][ T6021] psmouse serio4: Failed to enable mouse on [ 142.319501][ T5718] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 142.474114][ T5718] usb 7-1: New USB device found, idVendor=0001, idProduct=0001, bcdDevice= 0.00 [ 142.475179][ T5718] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.557255][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.645981][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.743556][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.805613][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.818956][ T6428] UBIFS error (pid: 6428): cannot open "ubi0_0", error -19 [ 143.042304][ T5718] hid-generic 0003:0001:0001.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 0001:0001] on usb-dummy_hcd.6-1/input0 [ 143.090810][ T13] bridge_slave_1: left allmulticast mode [ 143.090855][ T13] bridge_slave_1: left promiscuous mode [ 143.091042][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.111458][ T13] bridge_slave_0: left allmulticast mode [ 143.111498][ T13] bridge_slave_0: left promiscuous mode [ 143.111693][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.144132][ T6433] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 143.160255][ T6433] md: could not open device unknown-block(7,0). [ 143.160450][ T5860] md_update_sb: can't update sb for read-only array md0 [ 143.204420][ T5860] md_update_sb: can't update sb for read-only array md0 [ 143.220470][ T5860] md_update_sb: can't update sb for read-only array md0 [ 143.453848][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.479017][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.503196][ T13] bond0 (unregistering): Released all slaves [ 143.779813][ T6021] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 143.790024][ T5624] Bluetooth: hci6: command tx timeout [ 143.977655][ T6021] usb 8-1: New USB device found, idVendor=0a5c, idProduct=21e8, bcdDevice= 1.00 [ 143.988345][ T6021] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 143.988386][ T6021] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 143.988457][ T6021] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.053627][ T6438] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 144.053793][ T6438] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 144.368180][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5 [ 144.572293][ T4932] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 144.585722][ T4932] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 144.596451][ T4932] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 144.606449][ T4932] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 144.617165][ T4932] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 144.678734][ T13] hsr_slave_0: left promiscuous mode [ 144.691109][ T13] hsr_slave_1: left promiscuous mode [ 144.692615][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.692633][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.713890][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.713927][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.741503][ T13] veth1_macvtap: left promiscuous mode [ 144.742093][ T13] veth0_macvtap: left promiscuous mode [ 144.742694][ T13] veth1_vlan: left promiscuous mode [ 144.742759][ T13] veth0_vlan: left promiscuous mode [ 145.170902][ T6021] usb 7-1: USB disconnect, device number 4 [ 145.246585][ T13] team0 (unregistering): Port device team_slave_1 removed [ 145.292768][ T13] team0 (unregistering): Port device team_slave_0 removed [ 145.376206][ T5624] Bluetooth: hci2: Opcode 0x0c03 failed: -71 [ 145.410735][ T5772] usb 8-1: USB disconnect, device number 2 [ 145.590121][ T5278] 8021q: adding VLAN 0 to HW filter on device eth6 [ 145.869737][ T5624] Bluetooth: hci6: command tx timeout [ 146.156654][ T6462] lo speed is unknown, defaulting to 1000 [ 146.303877][ T5278] 8021q: adding VLAN 0 to HW filter on device eth7 [ 146.607179][ T6509] rdma_rxe: rxe_newlink: failed to add lo [ 146.670254][ T5624] Bluetooth: hci7: command tx timeout [ 146.943878][ T5278] 8021q: adding VLAN 0 to HW filter on device eth8 [ 147.038688][ T6462] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.039277][ T6462] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.041671][ T6462] bridge_slave_0: entered allmulticast mode [ 147.046939][ T6462] bridge_slave_0: entered promiscuous mode [ 147.055709][ T6462] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.055802][ T6462] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.055911][ T6462] bridge_slave_1: entered allmulticast mode [ 147.065439][ T6462] bridge_slave_1: entered promiscuous mode [ 147.209129][ T6462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.217536][ T6462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.262565][ T6541] svc: failed to register lockdv1 RPC service (errno 111). [ 147.262800][ T6541] lockd_up: makesock failed, error=-111 [ 147.291431][ T6462] team0: Port device team_slave_0 added [ 147.296240][ T6462] team0: Port device team_slave_1 added [ 147.324997][ T6462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.325037][ T6462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.325061][ T6462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.327081][ T6462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.327095][ T6462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.327117][ T6462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.440095][ T6462] hsr_slave_0: entered promiscuous mode [ 147.441462][ T6462] hsr_slave_1: entered promiscuous mode [ 147.442394][ T6462] debugfs: 'hsr0' already exists in 'hsr' [ 147.442410][ T6462] Cannot create hsr debugfs directory [ 147.567456][ T6541] svc: failed to register nfsdv3 RPC service (errno 111). [ 147.576219][ T6541] svc: failed to register nfsaclv3 RPC service (errno 111). [ 147.576241][ T6541] failed to unregister tcp with rpcbind [ 147.576409][ T6541] svc: failed to register nfsdv3 RPC service (errno 97). [ 147.576425][ T6541] svc: failed to register nfsaclv3 RPC service (errno 97). [ 147.576437][ T6541] failed to unregister tcp with rpcbind [ 147.726572][ T6462] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 147.754523][ T6462] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 147.758813][ T6462] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 147.785025][ T6462] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 147.789556][ T6462] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 147.824840][ T6462] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 147.845652][ T6462] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 147.866577][ T6462] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 147.883183][ T6557] svc: failed to register lockdv1 RPC service (errno 111). [ 147.951911][ T5624] Bluetooth: hci6: command tx timeout [ 147.955206][ T6462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.972974][ T6462] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.980971][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.981066][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.990557][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.990676][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.085436][ T6557] svc: failed to register nfsdv3 RPC service (errno 111). [ 148.086775][ T6557] svc: failed to register nfsaclv3 RPC service (errno 111). [ 148.086792][ T6557] failed to unregister tcp with rpcbind [ 148.098198][ T6557] svc: failed to register nfsdv3 RPC service (errno 97). [ 148.098216][ T6557] svc: failed to register nfsaclv3 RPC service (errno 97). [ 148.098228][ T6557] failed to unregister tcp with rpcbind [ 148.423808][ T6462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.687001][ T6462] veth0_vlan: entered promiscuous mode [ 148.695950][ T6462] veth1_vlan: entered promiscuous mode [ 148.720748][ T6462] veth0_macvtap: entered promiscuous mode [ 148.724790][ T6462] veth1_macvtap: entered promiscuous mode [ 148.737069][ T6462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.745982][ T6462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.753405][ T5624] Bluetooth: hci7: command tx timeout [ 148.826938][ T341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.836483][ T341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.861514][ T234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.861945][ T234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.871397][ T61] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.875554][ T234] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.875590][ T234] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.875621][ T234] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.031855][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 149.039037][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 149.045027][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 149.045819][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 149.047176][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 149.199827][ T5620] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 149.280259][ T6587] lo speed is unknown, defaulting to 1000 [ 149.351594][ T5620] usb 9-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 149.352624][ T5620] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.816033][ T6587] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.823365][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.823492][ T6587] bridge_slave_0: entered allmulticast mode [ 149.830519][ T6587] bridge_slave_0: entered promiscuous mode [ 149.838796][ T6587] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.838890][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.839030][ T6587] bridge_slave_1: entered allmulticast mode [ 149.843357][ T6587] bridge_slave_1: entered promiscuous mode [ 149.889078][ T6587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.893490][ T6587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.923240][ T6587] team0: Port device team_slave_0 added [ 149.925796][ T6587] team0: Port device team_slave_1 added [ 149.957340][ T6587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.957369][ T6587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.957396][ T6587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.959421][ T6587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.959440][ T6587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.959463][ T6587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.040338][ T6587] hsr_slave_0: entered promiscuous mode [ 150.042966][ T6587] hsr_slave_1: entered promiscuous mode [ 150.045048][ T6587] debugfs: 'hsr0' already exists in 'hsr' [ 150.045065][ T6587] Cannot create hsr debugfs directory [ 150.214545][ T6587] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.272649][ T6587] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.335706][ T6587] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.401710][ T6587] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.560589][ T6587] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 150.570747][ T6587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 150.571740][ T6587] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 150.582118][ T6587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 150.583056][ T6587] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 150.588868][ T6587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 150.591420][ T6587] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 150.596257][ T6587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 150.683298][ T6587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.702082][ T6587] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.715386][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.715481][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.735158][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.735255][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.832273][ T5617] Bluetooth: hci7: command tx timeout [ 151.070096][ T5617] Bluetooth: hci2: command tx timeout [ 151.159865][ T6587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.396743][ T6587] veth0_vlan: entered promiscuous mode [ 151.407171][ T6587] veth1_vlan: entered promiscuous mode [ 151.430968][ T6587] veth0_macvtap: entered promiscuous mode [ 151.435143][ T6587] veth1_macvtap: entered promiscuous mode [ 151.451219][ T6587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.454968][ T6587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.499475][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.532756][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.533239][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.533319][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.597187][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.605241][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.637697][ T234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.638147][ T234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.977276][ T5620] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 151.996009][ T5620] usb 9-1: USB disconnect, device number 2 [ 152.389452][ T5620] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 152.550863][ T5620] usb 9-1: New USB device found, idVendor=0a5c, idProduct=21e8, bcdDevice= 1.00 [ 152.552021][ T5620] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 152.552047][ T5620] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 152.552099][ T5620] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.562557][ T6632] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 152.562661][ T6632] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 152.909552][ T5624] Bluetooth: hci7: command tx timeout [ 153.161072][ T5624] Bluetooth: hci2: command tx timeout [ 153.410429][ T26] nvme nvme0: I/O tag 0 (0000) type 4 opcode 0x7f (Fabrics Cmd) QID 0 timeout [ 153.412075][ T5849] nvme nvme0: Connect command failed, error wo/DNR bit: 881 [ 153.412773][ T5849] nvme nvme0: failed to connect queue: 0 ret=881 [ 153.520801][ T5710] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 153.539786][ T6106] nvme nvme0: failed to connect socket: -512 [ 153.647900][ T6235] nvme nvme0: failed to connect socket: -512 [ 153.694549][ T5710] usb 8-1: New USB device found, idVendor=eb1a, idProduct=2800, bcdDevice= 1.00 [ 153.703127][ T5710] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.703182][ T5710] usb 8-1: Product: syz [ 153.703196][ T5710] usb 8-1: Manufacturer: syz [ 153.703210][ T5710] usb 8-1: SerialNumber: syz [ 153.789213][ T5710] em28xx 8-1:1.0: New device syz syz @ 480 Mbps (eb1a:2800, interface 0, class 0) [ 153.789267][ T5710] em28xx 8-1:1.0: Video interface 0 found: bulk [ 153.821376][ T5620] usb 9-1: USB disconnect, device number 3 [ 153.826026][ T5617] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 153.849138][ T6479] nvme nvme0: failed to connect socket: -512 [ 154.187271][ T5710] em28xx 8-1:1.0: unknown em28xx chip ID (0) [ 154.389111][ T234] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.605514][ T234] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.706612][ T234] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.804045][ T234] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.985415][ T2249] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 155.006392][ T5697] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 155.034766][ T2249] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 155.143441][ T234] bridge_slave_1: left allmulticast mode [ 155.143485][ T234] bridge_slave_1: left promiscuous mode [ 155.144562][ T234] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.156632][ T234] bridge_slave_0: left allmulticast mode [ 155.156651][ T234] bridge_slave_0: left promiscuous mode [ 155.156865][ T234] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.230271][ T5617] Bluetooth: hci2: command tx timeout [ 155.260413][ T2249] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 155.300026][ T2249] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 155.348395][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xa0 (error=-5) [ 155.354459][ T5710] em28xx 8-1:1.0: board has no eeprom [ 155.356215][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x0 (error=-5) [ 155.357331][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x2 (error=-5) [ 155.359484][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x4 (error=-5) [ 155.360877][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x6 (error=-5) [ 155.361250][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x8 (error=-5) [ 155.361651][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xa (error=-5) [ 155.362027][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xc (error=-5) [ 155.363059][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xe (error=-5) [ 155.363532][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x10 (error=-5) [ 155.364197][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x12 (error=-5) [ 155.364944][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x14 (error=-5) [ 155.365332][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x16 (error=-5) [ 155.365707][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x18 (error=-5) [ 155.366079][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x1a (error=-5) [ 155.366465][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x1c (error=-5) [ 155.366848][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x1e (error=-5) [ 155.367229][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x20 (error=-5) [ 155.385836][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x22 (error=-5) [ 155.388181][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x24 (error=-5) [ 155.391020][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x26 (error=-5) [ 155.391754][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x28 (error=-5) [ 155.394141][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x2a (error=-5) [ 155.395191][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x2c (error=-5) [ 155.396216][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x2e (error=-5) [ 155.396894][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x30 (error=-5) [ 155.397630][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x32 (error=-5) [ 155.398004][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x34 (error=-5) [ 155.398385][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x36 (error=-5) [ 155.412953][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x38 (error=-5) [ 155.413492][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x3a (error=-5) [ 155.414000][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x3c (error=-5) [ 155.414381][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x3e (error=-5) [ 155.414754][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x40 (error=-5) [ 155.415122][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x42 (error=-5) [ 155.415501][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x44 (error=-5) [ 155.415867][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x46 (error=-5) [ 155.416222][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x48 (error=-5) [ 155.416655][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x4a (error=-5) [ 155.417022][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x4c (error=-5) [ 155.417415][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x4e (error=-5) [ 155.417851][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x50 (error=-5) [ 155.418222][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x52 (error=-5) [ 155.418662][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x54 (error=-5) [ 155.419034][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x56 (error=-5) [ 155.430327][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x58 (error=-5) [ 155.430879][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x5a (error=-5) [ 155.431392][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x5c (error=-5) [ 155.432731][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x5e (error=-5) [ 155.433531][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x60 (error=-5) [ 155.433904][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x62 (error=-5) [ 155.434327][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x64 (error=-5) [ 155.434690][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x66 (error=-5) [ 155.435376][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x68 (error=-5) [ 155.436255][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x6a (error=-5) [ 155.437068][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x6c (error=-5) [ 155.437434][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x6e (error=-5) [ 155.438162][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x70 (error=-5) [ 155.438533][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x72 (error=-5) [ 155.439261][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x74 (error=-5) [ 155.447665][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x76 (error=-5) [ 155.450115][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x78 (error=-5) [ 155.451378][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x7a (error=-5) [ 155.452780][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x7c (error=-5) [ 155.453624][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x7e (error=-5) [ 155.454000][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x80 (error=-5) [ 155.454708][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x82 (error=-5) [ 155.456261][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x84 (error=-5) [ 155.456645][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x86 (error=-5) [ 155.459072][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x88 (error=-5) [ 155.460153][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x8a (error=-5) [ 155.461513][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x8c (error=-5) [ 155.463439][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x8e (error=-5) [ 155.463827][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x90 (error=-5) [ 155.464195][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x92 (error=-5) [ 155.464568][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x94 (error=-5) [ 155.464998][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x96 (error=-5) [ 155.465368][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x98 (error=-5) [ 155.466765][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x9a (error=-5) [ 155.467199][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x9c (error=-5) [ 155.468101][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0x9e (error=-5) [ 155.468959][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xa0 (error=-5) [ 155.470815][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xa2 (error=-5) [ 155.471244][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xa4 (error=-5) [ 155.472157][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xa6 (error=-5) [ 155.474134][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xa8 (error=-5) [ 155.477412][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xaa (error=-5) [ 155.479053][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xac ** replaying previous printk message ** [ 155.479053][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xac (error=-5) [ 155.480215][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xae (error=-5) [ 155.480613][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xb0 (error=-5) [ 155.481518][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xb2 (error=-5) [ 155.482514][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xb4 (error=-5) [ 155.483765][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xb6 (error=-5) [ 155.484137][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xb8 (error=-5) [ 155.484629][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xba (error=-5) [ 155.486857][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xbc (error=-5) [ 155.487249][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xbe (error=-5) [ 155.488086][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xc0 (error=-5) [ 155.488457][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xc2 (error=-5) [ 155.490836][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xc4 (error=-5) [ 155.493926][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xc6 (error=-5) [ 155.494809][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xc8 (error=-5) [ 155.506158][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xca (error=-5) [ 155.508778][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xcc (error=-5) [ 155.509166][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xce (error=-5) [ 155.510525][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xd0 (error=-5) [ 155.512837][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xd2 (error=-5) [ 155.513559][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xd4 (error=-5) [ 155.513950][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xd6 (error=-5) [ 155.516171][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xd8 (error=-5) [ 155.516540][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xda (error=-5) [ 155.521123][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xdc (error=-5) [ 155.522469][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xde (error=-5) [ 155.522927][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xe0 (error=-5) [ 155.525652][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xe2 (error=-5) [ 155.528099][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xe4 (error=-5) [ 155.529142][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xe6 (error=-5) [ 155.531029][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xe8 (error=-5) [ 155.531401][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xea (error=-5) [ 155.531832][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xec (error=-5) [ 155.532220][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xee (error=-5) [ 155.535426][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xf0 (error=-5) [ 155.536058][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xf2 (error=-5) [ 155.536456][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xf4 (error=-5) [ 155.540886][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xf6 (error=-5) [ 155.541455][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xf8 (error=-5) [ 155.544533][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xfa (error=-5) [ 155.544965][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xfc (error=-5) [ 155.545343][ T5710] em28xx 8-1:1.0: failed to trigger read from i2c address 0xfe (error=-5) [ 155.545369][ T5710] em28xx 8-1:1.0: Your board has no unique USB ID and thus need a hint to be detected. [ 155.545369][ T5710] You may try to use card= insmod option to workaround that. [ 155.545369][ T5710] Please send an email with this log to: [ 155.545369][ T5710] V4L Mailing List [ 155.545369][ T5710] Board eeprom hash is 0x00000000 [ 155.545369][ T5710] Board i2c devicelist hash is 0x1b800080 [ 155.545397][ T5710] em28xx 8-1:1.0: Here is a list of valid choices for the card= insmod option: [ 155.545411][ T5710] em28xx 8-1:1.0: card=0 -> Unknown EM2800 video grabber [ 155.545553][ T5710] em28xx 8-1:1.0: card=1 -> Unknown EM2750/28xx video grabber [ 155.545569][ T5710] em28xx 8-1:1.0: card=2 -> Terratec Cinergy 250 USB [ 155.545584][ T5710] em28xx 8-1:1.0: card=3 -> Pinnacle PCTV USB 2 [ 155.545598][ T5710] em28xx 8-1:1.0: card=4 -> Hauppauge WinTV USB 2 [ 155.545612][ T5710] em28xx 8-1:1.0: card=5 -> MSI VOX USB 2.0 [ 155.545626][ T5710] em28xx 8-1:1.0: card=6 -> Terratec Cinergy 200 USB [ 155.545641][ T5710] em28xx 8-1:1.0: card=7 -> Leadtek Winfast USB II [ 155.545655][ T5710] em28xx 8-1:1.0: card=8 -> Kworld USB2800 [ 155.545669][ T5710] em28xx 8-1:1.0: card=9 -> Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U [ 155.545687][ T5710] em28xx 8-1:1.0: card=10 -> Hauppauge WinTV HVR 900 [ 155.545701][ T5710] em28xx 8-1:1.0: card=11 -> Terratec Hybrid XS [ 155.545715][ T5710] em28xx 8-1:1.0: card=12 -> Kworld PVR TV 2800 RF [ 155.545729][ T5710] em28xx 8-1:1.0: card=13 -> Terratec Prodigy XS [ 155.545743][ T5710] em28xx 8-1:1.0: card=14 -> SIIG AVTuner-PVR / Pixelview Prolink PlayTV USB 2.0 [ 155.545759][ T5710] em28xx 8-1:1.0: card=15 -> V-Gear PocketTV [ 155.545772][ T5710] em28xx 8-1:1.0: card=16 -> Hauppauge WinTV HVR 950 [ 155.545787][ T5710] em28xx 8-1:1.0: card=17 -> Pinnacle PCTV HD Pro Stick [ 155.545801][ T5710] em28xx 8-1:1.0: card=18 -> Hauppauge WinTV HVR 900 (R2) [ 155.545815][ T5710] em28xx 8-1:1.0: card=19 -> EM2860/SAA711X Reference Design [ 155.545829][ T5710] em28xx 8-1:1.0: card=20 -> AMD ATI TV Wonder HD 600 [ 155.545843][ T5710] em28xx 8-1:1.0: card=21 -> eMPIA Technology, Inc. GrabBeeX+ Video Encoder [ 155.545859][ T5710] em28xx 8-1:1.0: card=22 -> EM2710/EM2750/EM2751 webcam grabber [ 155.545874][ T5710] em28xx 8-1:1.0: card=23 -> Huaqi DLCW-130 [ 155.545887][ T5710] em28xx 8-1:1.0: card=24 -> D-Link DUB-T210 TV Tuner [ 155.545902][ T5710] em28xx 8-1:1.0: card=25 -> Gadmei UTV310 [ 155.545915][ T5710] em28xx 8-1:1.0: card=26 -> Hercules Smart TV USB 2.0 [ 155.545929][ T5710] em28xx 8-1:1.0: card=27 -> Pinnacle PCTV USB 2 (Philips FM1216ME) [ 155.545944][ T5710] em28xx 8-1:1.0: card=28 -> Leadtek Winfast USB II Deluxe [ 155.545959][ T5710] em28xx 8-1:1.0: card=29 -> EM2860/TVP5150 Reference Design [ 155.545980][ T5710] em28xx 8-1:1.0: card=30 -> Videology 20K14XUSB USB2.0 [ 155.545995][ T5710] em28xx 8-1:1.0: card=31 -> Usbgear VD204v9 [ 155.546009][ T5710] em28xx 8-1:1.0: card=32 -> Supercomp USB 2.0 TV [ 155.546948][ T5710] em28xx 8-1:1.0: card=33 -> Elgato Video Capture [ 155.546966][ T5710] em28xx 8-1:1.0: card=34 -> Terratec Cinergy A Hybrid XS [ 155.546988][ T5710] em28xx 8-1:1.0: card=35 -> Typhoon DVD Maker [ 155.547002][ T5710] em28xx 8-1:1.0: card=36 -> NetGMBH Cam [ 155.547016][ T5710] em28xx 8-1:1.0: card=37 -> Gadmei UTV330 [ 155.547030][ T5710] em28xx 8-1:1.0: card=38 -> Yakumo MovieMixer [ 155.547044][ T5710] em28xx 8-1:1.0: card=39 -> KWorld PVRTV 300U [ 155.547058][ T5710] em28xx 8-1:1.0: card=40 -> Plextor ConvertX PX-TV100U [ 155.547073][ T5710] em28xx 8-1:1.0: card=41 -> Kworld 350 U DVB-T [ 155.547088][ T5710] em28xx 8-1:1.0: card=42 -> Kworld 355 U DVB-T [ 155.547102][ T5710] em28xx 8-1:1.0: card=43 -> Terratec Cinergy T XS [ 155.547116][ T5710] em28xx 8-1:1.0: card=44 -> Terratec Cinergy T XS (MT2060) [ 155.547131][ T5710] em28xx 8-1:1.0: card=45 -> Pinnacle PCTV DVB-T [ 155.547145][ T5710] em28xx 8-1:1.0: card=46 -> Compro, VideoMate U3 [ 155.547160][ T5710] em28xx 8-1:1.0: card=47 -> KWorld DVB-T 305U [ 155.547174][ T5710] em28xx 8-1:1.0: card=48 -> KWorld DVB-T 310U [ 155.547188][ T5710] em28xx 8-1:1.0: card=49 -> MSI DigiVox A/D [ 155.547202][ T5710] em28xx 8-1:1.0: card=50 -> MSI DigiVox A/D II [ 155.547216][ T5710] em28xx 8-1:1.0: card=51 -> Terratec Hybrid XS Secam [ 155.547230][ T5710] em28xx 8-1:1.0: card=52 -> DNT DA2 Hybrid [ 155.547244][ T5710] em28xx 8-1:1.0: card=53 -> Pinnacle Hybrid Pro [ 155.547258][ T5710] em28xx 8-1:1.0: card=54 -> Kworld VS-DVB-T 323UR [ 155.547272][ T5710] em28xx 8-1:1.0: card=55 -> Terratec Cinergy Hybrid T USB XS (em2882) [ 155.547287][ T5710] em28xx 8-1:1.0: card=56 -> Pinnacle Hybrid Pro (330e) [ 155.547301][ T5710] em28xx 8-1:1.0: card=57 -> Kworld PlusTV HD Hybrid 330 [ 155.547316][ T5710] em28xx 8-1:1.0: card=58 -> Compro VideoMate ForYou/Stereo [ 155.547330][ T5710] em28xx 8-1:1.0: card=59 -> Pinnacle PCTV HD Mini [ 155.547343][ T5710] em28xx 8-1:1.0: card=60 -> Hauppauge WinTV HVR 850 [ 155.547358][ T5710] em28xx 8-1:1.0: card=61 -> Pixelview PlayTV Box 4 USB 2.0 [ 155.547373][ T5710] em28xx 8-1:1.0: card=62 -> Gadmei TVR200 [ 155.547386][ T5710] em28xx 8-1:1.0: card=63 -> Kaiomy TVnPC U2 [ 155.547400][ T5710] em28xx 8-1:1.0: card=64 -> Easy Cap Capture DC-60 [ 155.547414][ T5710] em28xx 8-1:1.0: card=65 -> IO-DATA GV-MVP/SZ [ 155.547428][ T5710] em28xx 8-1:1.0: card=66 -> Empire dual TV [ 155.547442][ T5710] em28xx 8-1:1.0: card=67 -> Terratec Grabby [ 155.547456][ T5710] em28xx 8-1:1.0: card=68 -> Terratec AV350 [ 155.547470][ T5710] em28xx 8-1:1.0: card=69 -> KWorld ATSC 315U HDTV TV Box [ 155.547484][ T5710] em28xx 8-1:1.0: card=70 -> Evga inDtube [ 155.547497][ T5710] em28xx 8-1:1.0: card=71 -> Silvercrest Webcam 1.3mpix [ 155.547512][ T5710] em28xx 8-1:1.0: card=72 -> Gadmei UTV330+ [ 155.547525][ T5710] em28xx 8-1:1.0: card=73 -> Reddo DVB-C USB TV Box [ 155.547539][ T5710] em28xx 8-1:1.0: card=74 -> Actionmaster/LinXcel/Digitus VC211A [ 155.547554][ T5710] em28xx 8-1:1.0: card=75 -> Dikom DK300 [ 155.547568][ T5710] em28xx 8-1:1.0: card=76 -> KWorld PlusTV 340U or UB435-Q (ATSC) [ 155.547583][ T5710] em28xx 8-1:1.0: card=77 -> EM2874 Leadership ISDBT [ 155.547597][ T5710] em28xx 8-1:1.0: card=78 -> PCTV nanoStick T2 290e [ 155.547611][ T5710] em28xx 8-1:1.0: card=79 -> Terratec Cinergy H5 [ 155.547624][ T5710] em28xx 8-1:1.0: card=80 -> PCTV DVB-S2 Stick (460e) [ 155.550320][ T5710] em28xx 8-1:1.0: card=81 -> Hauppauge WinTV HVR 930C [ 155.552311][ T5710] em28xx 8-1:1.0: card=82 -> Terratec Cinergy HTC Stick [ 155.552330][ T5710] em28xx 8-1:1.0: card=83 -> Honestech Vidbox NW03 [ 155.552344][ T5710] em28xx 8-1:1.0: card=84 -> MaxMedia UB425-TC [ 155.552358][ T5710] em28xx 8-1:1.0: card=85 -> PCTV QuatroStick (510e) [ 155.552373][ T5710] em28xx 8-1:1.0: card=86 -> PCTV QuatroStick nano (520e) [ 155.552388][ T5710] em28xx 8-1:1.0: card=87 -> Terratec Cinergy HTC USB XS [ 155.552403][ T5710] em28xx 8-1:1.0: card=88 -> C3 Tech Digital Duo HDTV/SDTV USB [ 155.552449][ T5710] em28xx 8-1:1.0: card=89 -> Delock 61959 [ 155.552464][ T5710] em28xx 8-1:1.0: card=90 -> KWorld USB ATSC TV Stick UB435-Q V2 [ 155.552478][ T5710] em28xx 8-1:1.0: card=91 -> SpeedLink Vicious And Devine Laplace webcam [ 155.552494][ T5710] em28xx 8-1:1.0: card=92 -> PCTV DVB-S2 Stick (461e) [ 155.552509][ T5710] em28xx 8-1:1.0: card=93 -> KWorld USB ATSC TV Stick UB435-Q V3 [ 155.552524][ T5710] em28xx 8-1:1.0: card=94 -> PCTV tripleStick (292e) [ 155.552538][ T5710] em28xx 8-1:1.0: card=95 -> Leadtek VC100 [ 155.552551][ T5710] em28xx 8-1:1.0: card=96 -> Terratec Cinergy T2 Stick HD [ 155.552566][ T5710] em28xx 8-1:1.0: card=97 -> Elgato EyeTV Hybrid 2008 INT [ 155.552581][ T5710] em28xx 8-1:1.0: card=98 -> PLEX PX-BCUD [ 155.552596][ T5710] em28xx 8-1:1.0: card=99 -> Hauppauge WinTV-dualHD DVB [ 155.552610][ T5710] em28xx 8-1:1.0: card=100 -> Hauppauge WinTV-dualHD 01595 ATSC/QAM [ 155.552626][ T5710] em28xx 8-1:1.0: card=101 -> Terratec Cinergy H6 rev. 2 [ 155.552640][ T5710] em28xx 8-1:1.0: card=102 -> :ZOLID HYBRID TV STICK [ 155.552655][ T5710] em28xx 8-1:1.0: card=103 -> Magix USB Videowandler-2 [ 155.552669][ T5710] em28xx 8-1:1.0: card=104 -> PCTV DVB-S2 Stick (461e v2) [ 155.552683][ T5710] em28xx 8-1:1.0: card=105 -> MyGica iGrabber [ 155.552697][ T5710] em28xx 8-1:1.0: card=106 -> Hauppauge USB QuadHD ATSC [ 155.552711][ T5710] em28xx 8-1:1.0: card=107 -> MyGica UTV3 Analog USB2.0 TV Box [ 155.552726][ T5710] em28xx 8-1:1.0: card=108 -> Hauppauge USB Live2 [ 155.552740][ T5710] em28xx 8-1:1.0: card=109 -> Hauppauge WinTV-HVR-935 [ 155.552754][ T5710] em28xx 8-1:1.0: card=110 -> Hauppauge WinTV-HVR-955 [ 155.552768][ T5710] em28xx 8-1:1.0: card=111 -> Hauppauge WinTV-HVR-975 [ 155.552782][ T5710] em28xx 8-1:1.0: card=112 -> PCTV DVB-S2 Stick (461e v3) [ 155.552796][ T5710] em28xx 8-1:1.0: card=113 -> StarTech SVID2USB232 [ 155.552823][ T5710] em28xx 8-1:1.0: Board not discovered [ 155.552835][ T5710] em28xx 8-1:1.0: Identified as Unknown EM2800 video grabber (card=0) [ 155.552851][ T5710] em28xx 8-1:1.0: Your board has no unique USB ID and thus need a hint to be detected. [ 155.552851][ T5710] You may try to use card= insmod option to workaround that. [ 155.552851][ T5710] Please send an email with this log to: [ 155.552851][ T5710] V4L Mailing List [ 155.552851][ T5710] Board eeprom hash is 0x00000000 [ 155.552851][ T5710] Board i2c devicelist hash is 0x1b800080 [ 155.552878][ T5710] em28xx 8-1:1.0: Here is a list of valid choices for the card= insmod option: [ 155.552891][ T5710] em28xx 8-1:1.0: card=0 -> Unknown EM2800 video grabber [ 155.552906][ T5710] em28xx 8-1:1.0: card=1 -> Unknown EM2750/28xx video grabber [ 155.552920][ T5710] em28xx 8-1:1.0: card=2 -> Terratec Cinergy 250 USB [ 155.552935][ T5710] em28xx 8-1:1.0: card=3 -> Pinnacle PCTV USB 2 [ 155.552949][ T5710] em28xx 8-1:1.0: card=4 -> Hauppauge WinTV USB 2 [ 155.552962][ T5710] em28xx 8-1:1.0: card=5 -> MSI VOX USB 2.0 [ 155.552982][ T5710] em28xx 8-1:1.0: card=6 -> Terratec Cinergy 200 USB [ 155.552997][ T5710] em28xx 8-1:1.0: card=7 -> Leadtek Winfast USB II [ 155.553010][ T5710] em28xx 8-1:1.0: card=8 -> Kworld USB2800 [ 155.553025][ T5710] em28xx 8-1:1.0: card=9 -> Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U [ 155.553044][ T5710] em28xx 8-1:1.0: card=10 -> Hauppauge WinTV HVR 900 [ 155.553059][ T5710] em28xx 8-1:1.0: card=11 -> Terratec Hybrid XS [ 155.553073][ T5710] em28xx 8-1:1.0: card=12 -> Kworld PVR TV 2800 RF [ 155.553087][ T5710] em28xx 8-1:1.0: card=13 -> Terratec Prodigy XS [ 155.553101][ T5710] em28xx 8-1:1.0: card=14 -> SIIG AVTuner-PVR / Pixelview Prolink PlayTV USB 2.0 [ 155.553116][ T5710] em28xx 8-1:1.0: card=15 -> V-Gear PocketTV [ 155.553130][ T5710] em28xx 8-1:1.0: card=16 -> Hauppauge WinTV HVR 950 [ 155.553145][ T5710] em28xx 8-1:1.0: card=17 -> Pinnacle PCTV HD Pro Stick [ 155.553160][ T5710] em28xx 8-1:1.0: card=18 -> Hauppauge WinTV HVR 900 (R2) [ 155.553174][ T5710] em28xx 8-1:1.0: card=19 -> EM2860/SAA711X Reference Design [ 155.553188][ T5710] em28xx 8-1:1.0: card=20 -> AMD ATI TV Wonder HD 600 [ 155.553202][ T5710] em28xx 8-1:1.0: card=21 -> eMPIA Technology, Inc. GrabBeeX+ Video Encoder [ 155.553217][ T5710] em28xx 8-1:1.0: card=22 -> EM2710/EM2750/EM2751 webcam grabber [ 155.553232][ T5710] em28xx 8-1:1.0: card=23 -> Huaqi DLCW-130 [ 155.553246][ T5710] em28xx 8-1:1.0: card=24 -> D-Link DUB-T210 TV Tuner [ 155.553260][ T5710] em28xx 8-1:1.0: card=25 -> Gadmei UTV310 [ 155.553273][ T5710] em28xx 8-1:1.0: card=26 -> Hercules Smart TV USB 2.0 [ 155.553287][ T5710] em28xx 8-1:1.0: card=27 -> Pinnacle PCTV USB 2 (Philips FM1216ME) [ 155.553302][ T5710] em28xx 8-1:1.0: card=28 -> Leadtek Winfast USB II Deluxe [ 155.553316][ T5710] em28xx 8-1:1.0: card=29 -> EM2860/TVP5150 Reference Design [ 155.553330][ T5710] em28xx 8-1:1.0: card=30 -> Videology 20K14XUSB USB2.0 [ 155.553345][ T5710] em28xx 8-1:1.0: card=31 -> Usbgear VD204v9 [ 155.553359][ T5710] em28xx 8-1:1.0: card=32 -> Supercomp USB 2.0 TV [ 155.553373][ T5710] em28xx 8-1:1.0: card=33 -> Elgato Video Capture [ 155.553387][ T5710] em28xx 8-1:1.0: card=34 -> Terratec Cinergy A Hybrid XS [ 155.553402][ T5710] em28xx 8-1:1.0: card=35 -> Typhoon DVD Maker [ 155.553416][ T5710] em28xx 8-1:1.0: card=36 -> NetGMBH Cam [ 155.553430][ T5710] em28xx 8-1:1.0: card=37 -> Gadmei UTV330 [ 155.553444][ T5710] em28xx 8-1:1.0: card=38 -> Yakumo MovieMixer [ 155.553459][ T5710] em28xx 8-1:1.0: card=39 -> KWorld PVRTV 300U [ 155.553473][ T5710] em28xx 8-1:1.0: card=40 -> Plextor ConvertX PX-TV100U [ 155.553487][ T5710] em28xx 8-1:1.0: card=41 -> Kworld 350 U DVB-T [ 155.553500][ T5710] em28xx 8-1:1.0: card=42 -> Kworld 355 U DVB-T [ 155.553515][ T5710] em28xx 8-1:1.0: card=43 -> Terratec Cinergy T XS [ 155.553529][ T5710] em28xx 8-1:1.0: card=44 -> Terratec Cinergy T XS (MT2060) [ 155.553544][ T5710] em28xx 8-1:1.0: card=45 -> Pinnacle PCTV DVB-T [ 155.553559][ T5710] em28xx 8-1:1.0: card=46 -> Compro, VideoMate U3 [ 155.553572][ T5710] em28xx 8-1:1.0: card=47 -> KWorld DVB-T 305U [ 155.553586][ T5710] em28xx 8-1:1.0: card=48 -> KWorld DVB-T 310U [ 155.553600][ T5710] em28xx 8-1:1.0: card=49 -> MSI DigiVox A/D [ 155.553615][ T5710] em28xx 8-1:1.0: card=50 -> MSI DigiVox A/D II [ 155.553628][ T5710] em28xx 8-1:1.0: card=51 -> Terratec Hybrid XS Secam [ 155.553643][ T5710] em28xx 8-1:1.0: card=52 -> DNT DA2 Hybrid [ 155.553657][ T5710] em28xx 8-1:1.0: card=53 -> Pinnacle Hybrid Pro [ 155.553671][ T5710] em28xx 8-1:1.0: card=54 -> Kworld VS-DVB-T 323UR [ 155.553685][ T5710] em28xx 8-1:1.0: card=55 -> Terratec Cinergy Hybrid T USB XS (em2882) [ 155.553700][ T5710] em28xx 8-1:1.0: card=56 -> Pinnacle Hybrid Pro (330e) [ 155.553714][ T5710] em28xx 8-1:1.0: card=57 -> Kworld PlusTV HD Hybrid 330 [ 155.553728][ T5710] em28xx 8-1:1.0: card=58 -> Compro VideoMate ForYou/Stereo [ 155.553743][ T5710] em28xx 8-1:1.0: card=59 -> Pinnacle PCTV HD Mini [ 155.553758][ T5710] em28xx 8-1:1.0: card=60 -> Hauppauge WinTV HVR 850 [ 155.557817][ T5710] em28xx 8-1:1.0: card=61 -> Pixelview PlayTV Box 4 USB 2.0 [ 155.557836][ T5710] em28xx 8-1:1.0: card=62 -> Gadmei TVR200 [ 155.557851][ T5710] em28xx 8-1:1.0: card=63 -> Kaiomy TVnPC U2 [ 155.557866][ T5710] em28xx 8-1:1.0: card=64 -> Easy Cap Capture DC-60 [ 155.557881][ T5710] em28xx 8-1:1.0: card=65 -> IO-DATA GV-MVP/SZ [ 155.557896][ T5710] em28xx 8-1:1.0: card=66 -> Empire dual TV [ 155.557910][ T5710] em28xx 8-1:1.0: card=67 -> Terratec Grabby [ 155.557924][ T5710] em28xx 8-1:1.0: card=68 -> Terratec AV350 [ 155.557938][ T5710] em28xx 8-1:1.0: card=69 -> KWorld ATSC 315U HDTV TV Box [ 155.557953][ T5710] em28xx 8-1:1.0: card=70 -> Evga inDtube [ 155.557967][ T5710] em28xx 8-1:1.0: card=71 -> Silvercrest Webcam 1.3mpix [ 155.557988][ T5710] em28xx 8-1:1.0: card=72 -> Gadmei UTV330+ [ 155.558002][ T5710] em28xx 8-1:1.0: card=73 -> Reddo DVB-C USB TV Box [ 155.558016][ T5710] em28xx 8-1:1.0: card=74 -> Actionmaster/LinXcel/Digitus VC211A [ 155.558032][ T5710] em28xx 8-1:1.0: card=75 -> Dikom DK300 [ 155.558046][ T5710] em28xx 8-1:1.0: card=76 -> KWorld PlusTV 340U or UB435-Q (ATSC) [ 155.558061][ T5710] em28xx 8-1:1.0: card=77 -> EM2874 Leadership ISDBT [ 155.558076][ T5710] em28xx 8-1:1.0: card=78 -> PCTV nanoStick T2 290e [ 155.558091][ T5710] em28xx 8-1:1.0: card=79 -> Terratec Cinergy H5 [ 155.558105][ T5710] em28xx 8-1:1.0: card=80 -> PCTV DVB-S2 Stick (460e) [ 155.558119][ T5710] em28xx 8-1:1.0: card=81 -> Hauppauge WinTV HVR 930C [ 155.558134][ T5710] em28xx 8-1:1.0: card=82 -> Terratec Cinergy HTC Stick [ 155.558149][ T5710] em28xx 8-1:1.0: card=83 -> Honestech Vidbox NW03 [ 155.558164][ T5710] em28xx 8-1:1.0: card=84 -> MaxMedia UB425-TC [ 155.558178][ T5710] em28xx 8-1:1.0: card=85 -> PCTV QuatroStick (510e) [ 155.558193][ T5710] em28xx 8-1:1.0: card=86 -> PCTV QuatroStick nano (520e) [ 155.558207][ T5710] em28xx 8-1:1.0: card=87 -> Terratec Cinergy HTC USB XS [ 155.558221][ T5710] em28xx 8-1:1.0: card=88 -> C3 Tech Digital Duo HDTV/SDTV USB [ 155.558237][ T5710] em28xx 8-1:1.0: card=89 -> Delock 61959 [ 155.558251][ T5710] em28xx 8-1:1.0: card=90 -> KWorld USB ATSC TV Stick UB435-Q V2 [ 155.560963][ T5710] em28xx 8-1:1.0: card=91 -> SpeedLink Vicious And Devine Laplace webcam [ 155.560990][ T5710] em28xx 8-1:1.0: card=92 -> PCTV DVB-S2 Stick (461e) [ 155.561006][ T5710] em28xx 8-1:1.0: card=93 -> KWorld USB ATSC TV Stick UB435-Q V3 [ 155.561021][ T5710] em28xx 8-1:1.0: card=94 -> PCTV tripleStick (292e) [ 155.561036][ T5710] em28xx 8-1:1.0: card=95 -> Leadtek VC100 [ 155.561050][ T5710] em28xx 8-1:1.0: card=96 -> Terratec Cinergy T2 Stick HD [ 155.562812][ T5710] em28xx 8-1:1.0: card=97 -> Elgato EyeTV Hybrid 2008 INT [ 155.562831][ T5710] em28xx 8-1:1.0: card=98 -> PLEX PX-BCUD [ 155.562845][ T5710] em28xx 8-1:1.0: card=99 -> Hauppauge WinTV-dualHD DVB [ 155.562859][ T5710] em28xx 8-1:1.0: card=100 -> Hauppauge WinTV-dualHD 01595 ATSC/QAM [ 155.562873][ T5710] em28xx 8-1:1.0: card=101 -> Terratec Cinergy H6 rev. 2 [ 155.562887][ T5710] em28xx 8-1:1.0: card=102 -> :ZOLID HYBRID TV STICK [ 155.562901][ T5710] em28xx 8-1:1.0: card=103 -> Magix USB Videowandler-2 [ 155.562915][ T5710] em28xx 8-1:1.0: card=104 -> PCTV DVB-S2 Stick (461e v2) [ 155.562929][ T5710] em28xx 8-1:1.0: card=105 -> MyGica iGrabber [ 155.562942][ T5710] em28xx 8-1:1.0: card=106 -> Hauppauge USB QuadHD ATSC [ 155.562956][ T5710] em28xx 8-1:1.0: card=107 -> MyGica UTV3 Analog USB2.0 TV Box [ 155.562971][ T5710] em28xx 8-1:1.0: card=108 -> Hauppauge USB Live2 [ 155.562991][ T5710] em28xx 8-1:1.0: card=109 -> Hauppauge WinTV-HVR-935 [ 155.563005][ T5710] em28xx 8-1:1.0: card=110 -> Hauppauge WinTV-HVR-955 [ 155.563019][ T5710] em28xx 8-1:1.0: card=111 -> Hauppauge WinTV-HVR-975 [ 155.563033][ T5710] em28xx 8-1:1.0: card=112 -> PCTV DVB-S2 Stick (461e v3) [ 155.563046][ T5710] em28xx 8-1:1.0: card=113 -> StarTech SVID2USB232 [ 155.563070][ T5710] em28xx 8-1:1.0: analog set to bulk mode. [ 155.566008][ T5718] em28xx 8-1:1.0: Registering V4L2 extension [ 155.662101][ T866] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 155.694029][ T6655] ceph: No mds server is up or the cluster is laggy [ 155.704074][ T6654] ceph: No mds server is up or the cluster is laggy [ 155.788187][ T2249] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 155.825715][ T5718] em28xx 8-1:1.0: failed to trigger read from i2c address 0x4a (error=-5) [ 155.826272][ T5718] em28xx 8-1:1.0: failed to trigger read from i2c address 0x48 (error=-5) [ 155.830319][ T2249] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 155.833937][ T866] usb 9-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 155.838449][ T866] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.844281][ T5718] em28xx 8-1:1.0: failed to trigger read from i2c address 0x42 (error=-5) [ 155.847691][ T5718] em28xx 8-1:1.0: failed to trigger read from i2c address 0x40 (error=-5) [ 155.872868][ T5718] em28xx 8-1:1.0: Config register raw data: 0xfffffffb [ 155.873456][ T5718] em28xx 8-1:1.0: AC97 chip type couldn't be determined [ 155.873473][ T5718] em28xx 8-1:1.0: No AC97 audio processor [ 155.948194][ T866] usb 9-1: probing VID:PID(0424:012C) [ 155.976000][ T866] usb 9-1: vub300 testing BULK IN EndPoint(0) 81 [ 155.976022][ T866] usb 9-1: vub300 testing BULK OUT EndPoint(1) 02 [ 155.976040][ T866] usb 9-1: vub300 testing BULK IN EndPoint(2) 83 [ 155.976057][ T866] usb 9-1: vub300 testing BULK OUT EndPoint(3) 04 [ 155.976074][ T866] usb 9-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 156.029144][ T5718] usb 8-1: Decoder not found [ 156.029185][ T5718] em28xx 8-1:1.0: failed to create media graph [ 156.029212][ T5718] em28xx 8-1:1.0: V4L2 device video103 deregistered [ 156.147610][ T5718] INFO: trying to register non-static key. [ 158.409782][ T5718] The code is fine but needs lockdep annotation, or maybe [ 158.416873][ T5718] you didn't initialize this object before use? [ 158.423084][ T5718] turning off the locking correctness validator. [ 158.429389][ T5718] CPU: 1 UID: 0 PID: 5718 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) [ 158.438742][ T5718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.448788][ T5718] Workqueue: events request_module_async [ 158.454428][ T5718] Call Trace: [ 158.457693][ T5718] [ 158.460610][ T5718] dump_stack_lvl+0xe8/0x150 [ 158.465193][ T5718] assign_lock_key+0x133/0x150 [ 158.469954][ T5718] register_lock_class+0xcc/0x2e0 [ 158.474973][ T5718] __lock_acquire+0xaf/0x2e50 [ 158.479644][ T5718] ? irqentry_exit+0x218/0x910 [ 158.484403][ T5718] ? trace_irq_disable+0x3b/0x140 [ 158.489420][ T5718] ? __mutex_trylock_common+0x15f/0x270 [ 158.494951][ T5718] ? __pfx___mutex_trylock_common+0x10/0x10 [ 158.500833][ T5718] lock_acquire+0x115/0x350 [ 158.505331][ T5718] ? __wake_up_common_lock+0x30/0x1f0 [ 158.510693][ T5718] ? rcu_is_watching+0x16/0xb0 [ 158.515448][ T5718] _raw_spin_lock_irqsave+0x40/0x60 [ 158.520632][ T5718] ? __wake_up_common_lock+0x30/0x1f0 [ 158.525993][ T5718] __wake_up_common_lock+0x30/0x1f0 [ 158.531176][ T5718] ? __pfx___mutex_lock+0x10/0x10 [ 158.536194][ T5718] __vb2_queue_cancel+0x2de/0xde0 [ 158.541204][ T5718] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 158.546569][ T5718] vb2_core_queue_release+0x2f/0x150 [ 158.551848][ T5718] vb2_video_unregister_device+0x15b/0x200 [ 158.557652][ T5718] em28xx_v4l2_init+0x1c89/0x3150 [ 158.562672][ T5718] em28xx_init_extension+0x120/0x1d0 [ 158.567946][ T5718] ? process_scheduled_works+0x97a/0x1630 [ 158.573654][ T5718] process_scheduled_works+0xc3d/0x1630 [ 158.579204][ T5718] ? __pfx_process_scheduled_works+0x10/0x10 [ 158.585183][ T5718] ? assign_work+0x3cf/0x5d0 [ 158.589775][ T5718] worker_thread+0xa47/0xfb0 [ 158.594357][ T5718] ? __kthread_parkme+0x71/0x1f0 [ 158.599287][ T5718] kthread+0x38b/0x480 [ 158.603349][ T5718] ? __pfx_worker_thread+0x10/0x10 [ 158.608448][ T5718] ? __pfx_kthread+0x10/0x10 [ 158.613033][ T5718] ret_from_fork+0x514/0xb70 [ 158.617625][ T5718] ? __pfx_ret_from_fork+0x10/0x10 [ 158.622729][ T5718] ? __switch_to+0xc89/0x1420 [ 158.627393][ T5718] ? __pfx_kthread+0x10/0x10 [ 158.631975][ T5718] ret_from_fork_asm+0x1a/0x30 [ 158.636742][ T5718] [ 158.639797][ T5718] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 158.651663][ T5718] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 158.660059][ T5718] CPU: 1 UID: 0 PID: 5718 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) [ 158.669411][ T5718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.679449][ T5718] Workqueue: events request_module_async [ 158.685077][ T5718] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 158.691047][ T5718] Code: 0f 84 d4 00 00 00 44 8b 64 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 fd 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 4c de 97 00 48 ba 00 00 00 00 00 fc [ 158.710635][ T5718] RSP: 0018:ffffc900046e7880 EFLAGS: 00010046 [ 158.716686][ T5718] RAX: 0000000000000000 RBX: ffff88807ed19740 RCX: 0000000000000001 [ 158.724642][ T5718] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900046e77e0 [ 158.732597][ T5718] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 158.740552][ T5718] R10: dffffc0000000000 R11: fffff520008dcefc R12: 0000000000000000 [ 158.748509][ T5718] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807ed197d0 [ 158.756466][ T5718] FS: 0000000000000000(0000) GS:ffff888124963000(0000) knlGS:0000000000000000 [ 158.765384][ T5718] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.771954][ T5718] CR2: 000000110c338e8b CR3: 0000000076904000 CR4: 00000000003526f0 [ 158.779912][ T5718] Call Trace: [ 158.783177][ T5718] [ 158.786098][ T5718] __vb2_queue_cancel+0x2de/0xde0 [ 158.791112][ T5718] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 158.796472][ T5718] vb2_core_queue_release+0x2f/0x150 [ 158.801744][ T5718] vb2_video_unregister_device+0x15b/0x200 [ 158.807541][ T5718] em28xx_v4l2_init+0x1c89/0x3150 [ 158.812561][ T5718] em28xx_init_extension+0x120/0x1d0 [ 158.817836][ T5718] ? process_scheduled_works+0x97a/0x1630 [ 158.823549][ T5718] process_scheduled_works+0xc3d/0x1630 [ 158.829105][ T5718] ? __pfx_process_scheduled_works+0x10/0x10 [ 158.835077][ T5718] ? assign_work+0x3cf/0x5d0 [ 158.839662][ T5718] worker_thread+0xa47/0xfb0 [ 158.844245][ T5718] ? __kthread_parkme+0x71/0x1f0 [ 158.849170][ T5718] kthread+0x38b/0x480 [ 158.853235][ T5718] ? __pfx_worker_thread+0x10/0x10 [ 158.858337][ T5718] ? __pfx_kthread+0x10/0x10 [ 158.862919][ T5718] ret_from_fork+0x514/0xb70 [ 158.867503][ T5718] ? __pfx_ret_from_fork+0x10/0x10 [ 158.872605][ T5718] ? __switch_to+0xc89/0x1420 [ 158.877275][ T5718] ? __pfx_kthread+0x10/0x10 [ 158.881855][ T5718] ret_from_fork_asm+0x1a/0x30 [ 158.886614][ T5718] [ 158.889619][ T5718] Modules linked in: [ 158.893509][ T5718] ---[ end trace 0000000000000000 ]--- [ 158.898951][ T5718] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 158.898972][ T5718] Code: 0f 84 d4 00 00 00 44 8b 64 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 fd 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 4c de 97 00 48 ba 00 00 00 00 00 fc [ 158.898986][ T5718] RSP: 0018:ffffc900046e7880 EFLAGS: 00010046 [ 158.899000][ T5718] RAX: 0000000000000000 RBX: ffff88807ed19740 RCX: 0000000000000001 [ 158.899011][ T5718] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900046e77e0 [ 158.899022][ T5718] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 158.899031][ T5718] R10: dffffc0000000000 R11: fffff520008dcefc R12: 0000000000000000 [ 158.899042][ T5718] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807ed197d0 [ 158.899054][ T5718] FS: 0000000000000000(0000) GS:ffff888124963000(0000) knlGS:0000000000000000 [ 158.899067][ T5718] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.899078][ T5718] CR2: 000000110c338e8b CR3: 0000000076904000 CR4: 00000000003526f0 [ 158.899093][ T5718] Kernel panic - not syncing: Fatal exception [ 159.000026][ T5718] Kernel Offset: disabled [ 159.004337][ T5718] Rebooting in 86400 seconds..