last executing test programs: 7m50.635620928s ago: executing program 3 (id=2248): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000180)={0x2, 0x2, 0x6, {0x6, 0x7, 0x2, 0x1000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1d, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000180)) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001480)={0x18, 0x26, 0x301, 0x270bd1d, 0x25dfdbfb, {0x20}, [@typed={0x4, 0x163}]}, 0x18}}, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x4, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r6, &(0x7f0000000140)={0xa, 0x4}, 0xc) syz_usb_control_io(r0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4841, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 7m48.770912807s ago: executing program 3 (id=2255): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) 7m46.796992053s ago: executing program 3 (id=2260): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x2c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0xfff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r6, &(0x7f0000000580)={0x239, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {}, 0x0, 0x0, 0x3, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x0) write(r7, &(0x7f0000000100)='0', 0x1) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_GET_CPINFO(r1, 0x80186e82, &(0x7f00000003c0)={&(0x7f0000000340)=[{0x1, 0x0, 0x7e, 0xbfe6, 0x7, 0xb5, 0x2, 0xa2a}, {0x1, 0x0, 0xfc7f, 0x8000, 0x8, 0x62, 0x8, 0x4}], 0x2, 0x38, 0x1, 0x80000000}) socket(0x10, 0x803, 0x0) 7m36.99682601s ago: executing program 3 (id=2272): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x2c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0xfff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 7m36.336629849s ago: executing program 3 (id=2274): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) mmap(&(0x7f0000b5b000/0x4000)=nil, 0x4000, 0xb635773f046bbee4, 0x8031, 0xffffffffffffffff, 0x87be0000) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x2fc247, 0xf4}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r7) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) syz_open_dev$video4linux(&(0x7f00000000c0), 0x100000012, 0x636c3) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x496080) 7m33.424975813s ago: executing program 3 (id=2279): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_genetlink_get_family_id$ethtool(0xffffffffffffffff, 0xffffffffffffffff) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000011c0)={0x44, &(0x7f0000000780)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m15.436476235s ago: executing program 32 (id=2279): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_genetlink_get_family_id$ethtool(0xffffffffffffffff, 0xffffffffffffffff) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000011c0)={0x44, &(0x7f0000000780)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m19.782733886s ago: executing program 1 (id=2473): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 5m17.427231334s ago: executing program 1 (id=2481): syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c09240305"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 5m14.855961559s ago: executing program 1 (id=2484): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000380), 0x0, &(0x7f0000000440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffff2fc}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffff01e}}], 0xb0}}], 0x1, 0x40) 5m14.40374865s ago: executing program 1 (id=2485): r0 = userfaultfd(0x80801) syz_usb_connect(0x6, 0x371, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}}) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r0, &(0x7f0000000340)=0x5, 0xe35) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100ffffffff00000000010000000c0005006c010000000000000c000200ff7f000000000000100007800c00018008000100", @ANYRES32=r7, @ANYBLOB="55c81de53bd38420ba7915b69afa7bb2b6aa16fe994a101f8a761ec519dce4de883b61fe552f613b533205ca69b5c15ad65cfdf582192d28ca6f01441aab2f7368e8d782c154aa58b3b4db90d4dc7a7a649ccc0dcadf37825756fdc8181d978d60d6f670e7d49c756b9f26c651448180c4b5226d6a9c00040637dcb82e380e1a7581a237390d8c"], 0x3c}}, 0x20000000) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4008040) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r8, &(0x7f00000001c0)='1', 0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x45dcf12457bda5dd}) 5m10.066511972s ago: executing program 1 (id=2489): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x2fc247, 0xf4}) 5m7.425687287s ago: executing program 1 (id=2490): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x15) ioctl(r0, 0x40204706, &(0x7f0000000200)) ioctl(r0, 0x404c4701, &(0x7f00000001c0)="010000000000000000000000010000000100000001000000000000002000000020000000010000000100") 4m49.849744888s ago: executing program 33 (id=2490): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x15) ioctl(r0, 0x40204706, &(0x7f0000000200)) ioctl(r0, 0x404c4701, &(0x7f00000001c0)="010000000000000000000000010000000100000001000000000000002000000020000000010000000100") 1m57.348255469s ago: executing program 5 (id=2294): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000002c0)={0x4, {{0xa, 0x4004, 0x0, @mcast2, 0x9}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000003c0)={0x2, {{0xa, 0x4e24, 0x6, @mcast1, 0x4}}}, 0x88) syz_emit_ethernet(0x31, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2000000ffffffffffff88a80800810001008847000e00000001a9c582b68808ad459f7bfdbd1ef9e92bab6da681e0"], 0x0) prctl$PR_SCHED_CORE(0x41555856, 0x3, 0x0, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$media(&(0x7f0000000040), 0x1058, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000000c0)={0xf010000, 0x0, 0x0, r2, 0x0, 0x0}) 15.620113848s ago: executing program 0 (id=2894): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x7ff, 0x12) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x22c82, 0x0) 14.358762594s ago: executing program 4 (id=2896): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x34, 0x2, 0x6, 0x5, 0x0, 0x0, {0x9, 0x0, 0x11}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}}, 0x20008010) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc9, 0x17, 0xb, "7a91934ae4b05108"}}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000007"], 0x50) 14.315987214s ago: executing program 0 (id=2897): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) syz_open_dev$vbi(0x0, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) 11.294407796s ago: executing program 4 (id=2899): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x4905, 0x5, 0x0, 0x11200}, 0x30, 0x1) r1 = socket(0x10, 0x80002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f00000007c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newtaction={0x14, 0x30, 0x53b, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0xff, 0x80000}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x4008090) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="320002b100000000"], 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) 10.774418465s ago: executing program 0 (id=2901): socket$kcm(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$binfmt_format(0xffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r2 = openat$pfkey(0xffffff9c, &(0x7f0000000080), 0x180, 0x0) r3 = fcntl$getown(r2, 0x9) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x22c82, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x20001) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004100)={0x2210, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x8, 0x1c, 0x0, 0x1, [@nested={0x4, 0x6d}]}]}, @nested={0x21dc, 0x2, 0x0, 0x1, [@generic="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", @typed={0xc, 0x137, 0x0, 0x0, @u64=0x6}, @nested={0x11cc, 0x6d, 0x0, 0x1, [@typed={0x8, 0xe8, 0x0, 0x0, @ipv4=@loopback}, @nested={0x1034, 0xbf, 0x0, 0x1, [@nested={0x4, 0x45}, @generic="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", @nested={0x4, 0x6b}, @nested={0x4, 0x135}, @typed={0x14, 0x144, 0x0, 0x0, @ipv6=@remote}, @typed={0xc, 0x55, 0x0, 0x0, @u64=0x9}, @nested={0x4, 0xba}]}, @nested={0x8, 0x99, 0x0, 0x1, [@nested={0x4, 0xd0}]}, @nested={0x183, 0x52, 0x0, 0x1, [@typed={0x8, 0x169, 0x0, 0x0, @ipv4=@local}, @generic, @generic="84f06ac5fb9efb46ff8136b5a067646bc248819f3a392698c52f8eb35c1b3de9b27d4b34abd63499db3429fda2bd85232451522f796d9a243b323593956e895e6031a0c3ac74ed6559d50ff57f2ba4a1c51af7b52eecec1a42db378800628723f00c5b1ebf9620e46d4660f151ddfc36cae1d105fd664551b24b32c86e03937acacace9684eabd181a28dc5177a7f398b8b4042cb9301f2b32f4c915", @generic="e7b5dcb1cc19095f7e202bcc46d579a7f3435892098d98231649b8d38c5597e4ddb5b9fc40d051a336367499f87033b1da7c16a6656c483c384194f28460218b4e64028dd7291b5272749751b349c6dbebd6a9bdfefd3d849156339bd97ca73be35cee12aa02546d81f4a38dde51ee278ad4192d96cbc5fc233f8d0b3ba0b16f70b791e07f8ea3a7ae08d3292f17ebef3c39ef7081b7a2f88ce2a2c0ddcd8700d423bff95c178e9a7b7dc77e28c36486a995225b52e74cba2a0e8ef8edb3cf8bd5f286c61dc351393780bf880f663754359ae8b13d3131e651cf1c"]}]}, @typed={0x8, 0x33, 0x0, 0x0, @uid}]}]}, 0x2210}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000040)={{0x3}, {0x98}, 0x10003, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000d00)={0x4d5, 0x2, {0x1, 0x0, 0x8, 0x2, 0xfffffffe}, 0x2}) r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc2c45512, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x3, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x4, r3, 0x0, &(0x7f0000000040)) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xcf0b, 0x0, 0x3, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) 7.059226801s ago: executing program 4 (id=2902): read$msr(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x2fc247, 0xf4}) 6.820713562s ago: executing program 2 (id=2903): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.731392759s ago: executing program 4 (id=2904): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x80c040, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}}) 6.514978986s ago: executing program 4 (id=2905): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x2c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0xfff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 6.401741017s ago: executing program 0 (id=2906): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getpgrp(0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setns(0xc9, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) 6.239267841s ago: executing program 2 (id=2907): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x3e, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x704c3, 0xc4a48b7f26bf140b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010) 3.579340482s ago: executing program 0 (id=2908): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0xca033, 0xffffffffffffffff, 0xbd837000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000400)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000140)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) read(r3, &(0x7f00000002c0)=""/10, 0x5b) 2.207721428s ago: executing program 0 (id=2909): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.851864028s ago: executing program 2 (id=2910): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x4, 0x5}, {0xe, 0xffff}, {0x6, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x44045}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 1.81230741s ago: executing program 4 (id=2911): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000740)={0x20, 0x15, 0x4, "8b27be98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000440)={0x40, 0x1, 0x4, "d7c75f2a"}, 0x0, 0x0, 0x0, 0x0}) 1.608228273s ago: executing program 2 (id=2912): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)=':27.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="616464723d3132372e302e302e312c706f72743d323034392c6d6f756e74706f72743d323034392c70726f746f3d7463702c6d6f756e7470726f746f3d7463702c6e6f6c6f636b2c74696d656f3d31302c72657472616e733d31002c00d4523b49e965a65b47cf9b7e457bd2ee83e48bc3bd87cce85149cab989cb3c62e66d7c108eb2f33371cca21fcfc2d02a01f32dfaf205f711802eb4afa1b1083bad771c8945e4fc"]) 335.542461ms ago: executing program 2 (id=2913): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000200)={0x1, 0x7, 0x1, 0x0}) 0s ago: executing program 2 (id=2914): read$msr(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x2fc247, 0xf4}) kernel console output (not intermixed with test programs): tting 3 [ 1300.978969][ T6925] ttusb2: set interface to alts=3 failed [ 1301.050193][T14523] dvb-usb: bulk message failed: -22 (7/0) [ 1301.050208][T14523] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1301.050231][T14523] ttusb2: i2c transfer failed. [ 1301.201745][T10333] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1301.270343][T12322] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1301.331036][T12322] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1301.344457][T12322] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1301.381136][T12322] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1301.381702][T12322] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1301.658474][T10333] usb 2-1: selecting invalid altsetting 3 [ 1301.658490][T10333] ttusb2: set interface to alts=3 failed [ 1301.750601][ T6925] DVB: Unable to find symbol tda10086_attach() [ 1301.750614][ T6925] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1301.756424][ T6925] dvb-usb: bulk message failed: -22 (4/0) [ 1301.756443][ T6925] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1301.756515][ T6925] dvb-usb: bulk message failed: -22 (5/0) [ 1301.756524][ T6925] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1301.756562][ T6925] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1302.030168][T10333] DVB: Unable to find symbol tda10086_attach() [ 1302.030180][T10333] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1302.030845][T10333] dvb-usb: bulk message failed: -22 (4/0) [ 1302.030858][T10333] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1302.030929][T10333] dvb-usb: bulk message failed: -22 (5/0) [ 1302.030938][T10333] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1302.030976][T10333] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1302.124686][T10333] usb 2-1: USB disconnect, device number 92 [ 1302.451215][T10333] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1303.037905][T14550] Invalid logical block size (8192) [ 1303.669365][ T5603] Bluetooth: hci5: command tx timeout [ 1305.746310][ T5603] Bluetooth: hci5: command tx timeout [ 1307.463038][T14569] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1307.837113][ T5603] Bluetooth: hci5: command tx timeout [ 1307.966407][T12127] rtrs_client L1777: : Resolving route failed, err: -ENODEV [ 1308.282589][T14579] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1308.282610][T14579] CPU: 0 UID: 0 PID: 14579 Comm: syz.1.2490 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1308.282627][T14579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1308.282635][T14579] Call Trace: [ 1308.282641][T14579] [ 1308.282647][T14579] dump_stack_lvl+0xe8/0x150 [ 1308.282681][T14579] sysfs_create_dir_ns+0x271/0x2a0 [ 1308.282737][T14579] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1308.282759][T14579] ? rt_spin_unlock+0x165/0x200 [ 1308.282783][T14579] kobject_add_internal+0x62c/0xce0 [ 1308.282844][T14579] kobject_add+0x163/0x240 [ 1308.282860][T14579] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1308.282879][T14579] ? __pfx_kobject_add+0x10/0x10 [ 1308.282898][T14579] ? get_device_parent+0x370/0x3a0 [ 1308.282997][T14579] ? __pfx_klist_children_get+0x10/0x10 [ 1308.283024][T14579] device_add+0x3fa/0xb80 [ 1308.283041][T14579] tty_register_device_attr+0x422/0x950 [ 1308.283108][T14579] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1308.283128][T14579] ? tty_port_init+0x140/0x1b0 [ 1308.283163][T14579] ? gsm_dlci_alloc+0x341/0x650 [ 1308.283189][T14579] gsm_activate_mux+0x110/0x2a0 [ 1308.283208][T14579] gsmld_ioctl+0x12d3/0x1930 [ 1308.283226][T14579] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1308.283247][T14579] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 1308.283270][T14579] ? ldsem_down_read+0x12/0x40 [ 1308.283291][T14579] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1308.283304][T14579] tty_ioctl+0x9c3/0xde0 [ 1308.283318][T14579] ? __pfx_tty_ioctl+0x10/0x10 [ 1308.283330][T14579] __se_sys_ioctl+0xff/0x170 [ 1308.283346][T14579] do_syscall_64+0x166/0x520 [ 1308.283359][T14579] ? trace_irq_disable+0x3b/0x140 [ 1308.283375][T14579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.283389][T14579] ? clear_bhb_loop+0x70/0xc0 [ 1308.283404][T14579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.283417][T14579] RIP: 0033:0x7fe079b4e0d9 [ 1308.283432][T14579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1308.283443][T14579] RSP: 002b:00007fe077d85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1308.283458][T14579] RAX: ffffffffffffffda RBX: 00007fe079dd6090 RCX: 00007fe079b4e0d9 [ 1308.283467][T14579] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 1308.283476][T14579] RBP: 00007fe079be5024 R08: 0000000000000000 R09: 0000000000000000 [ 1308.283484][T14579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1308.283491][T14579] R13: 00007fe079dd6128 R14: 00007fe079dd6090 R15: 00007ffcc33591e8 [ 1308.283512][T14579] [ 1308.524176][T14579] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1308.607599][T14569] rtrs_client L2638: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 1309.879396][T14582] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2498'. [ 1309.906216][ T5603] Bluetooth: hci5: command tx timeout [ 1311.126659][T14589] Invalid logical block size (8192) [ 1315.349306][T14600] Invalid logical block size (8192) [ 1319.122505][T14599] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1319.432067][T14614] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1319.573872][T14615] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1319.763499][T13430] rtrs_client L1777: : Resolving route failed, err: -ENODEV [ 1319.895843][T14620] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1320.017861][T14615] rtrs_client L2638: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 1320.522999][T12322] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1320.583157][T12322] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1320.634482][T12322] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1320.648215][T12322] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1320.648814][T12322] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1321.062231][T14632] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2508'. [ 1321.376234][T10333] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1321.546243][T10333] usb 1-1: Using ep0 maxpacket: 32 [ 1321.546835][T10333] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1321.547820][T10333] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.547834][T10333] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1321.549867][T10333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.549883][T10333] usb 1-1: Product: syz [ 1321.549891][T10333] usb 1-1: Manufacturer: syz [ 1321.549900][T10333] usb 1-1: SerialNumber: syz [ 1321.554444][T10333] usb 1-1: config 0 descriptor?? [ 1321.802855][T14519] lo speed is unknown, defaulting to 1000 [ 1322.786282][T12322] Bluetooth: hci4: command tx timeout [ 1322.838318][T14631] dvb-usb: bulk message failed: -22 (7/0) [ 1322.838342][T14631] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1322.838364][T14631] ttusb2: i2c transfer failed. [ 1322.996041][T10333] usb 1-1: USB disconnect, device number 90 [ 1326.019649][T12322] Bluetooth: hci4: command tx timeout [ 1327.608797][ T5722] usb 3-1: USB disconnect, device number 86 [ 1327.775411][ T5722] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1328.067616][ T5603] Bluetooth: hci4: command tx timeout [ 1328.203459][T14623] lo speed is unknown, defaulting to 1000 [ 1332.187986][ T5603] Bluetooth: hci4: command tx timeout [ 1335.296827][T14692] Can't find a SQUASHFS superblock on nullb0 [ 1335.418896][T14694] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2519'. [ 1336.926282][ T201] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1337.081809][ T201] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1337.082790][ T201] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 1337.082810][ T201] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1337.113920][ T201] usb 5-1: string descriptor 0 read error: -22 [ 1337.114009][ T201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.414374][T14721] Invalid logical block size (8192) [ 1339.693055][ T201] usbhid 5-1:1.0: can't add hid device: -71 [ 1340.076256][ T201] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1340.755922][ T201] usb 5-1: USB disconnect, device number 84 [ 1341.040723][ T12] bridge_slave_1: left allmulticast mode [ 1341.040751][ T12] bridge_slave_1: left promiscuous mode [ 1341.040932][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1341.075539][ T12] bridge_slave_0: left allmulticast mode [ 1341.075564][ T12] bridge_slave_0: left promiscuous mode [ 1341.075740][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.283122][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1344.285652][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1344.290393][ T12] bond0 (unregistering): Released all slaves [ 1344.376879][T14729] Can't find a SQUASHFS superblock on nullb0 [ 1345.027355][T10333] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1345.216348][T14735] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2530'. [ 1349.006803][T14756] Can't find a SQUASHFS superblock on nullb0 [ 1352.232846][ T12] hsr_slave_0: left promiscuous mode [ 1352.250170][ T12] hsr_slave_1: left promiscuous mode [ 1352.251012][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1352.278568][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1352.388960][T14773] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1352.538027][ T5722] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1352.688111][ T5722] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1352.688287][ T5722] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1352.689207][ T5722] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 1352.689224][ T5722] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.689235][ T5722] usb 1-1: config 63 has no interface number 0 [ 1352.689254][ T5722] usb 1-1: config 63 interface 66 has no altsetting 0 [ 1352.691367][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.691383][ T5722] usb 1-1: Product: syz [ 1352.691392][ T5722] usb 1-1: Manufacturer: syz [ 1352.691400][ T5722] usb 1-1: SerialNumber: syz [ 1353.051560][ T5722] uvcvideo 1-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 1353.051630][ T5722] uvcvideo 1-1:63.66: No valid video chain found. [ 1353.073433][ T5722] usb 1-1: USB disconnect, device number 91 [ 1353.672907][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1353.716430][T14790] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2540'. [ 1353.742634][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1354.020920][ T5249] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1354.836188][T10333] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1354.932805][T14810] Invalid logical block size (8192) [ 1355.016236][T10333] usb 3-1: Using ep0 maxpacket: 8 [ 1355.016790][T10333] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1355.017896][T10333] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1355.017916][T10333] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1355.017931][T10333] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1355.017946][T10333] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1355.018030][T10333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.758334][T10333] usb 3-1: usb_control_msg returned -32 [ 1356.758372][T10333] usbtmc 3-1:16.0: can't read capabilities [ 1357.914126][T10333] usb 3-1: USB disconnect, device number 88 [ 1358.157702][T14519] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.157786][T14519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.157930][T14519] bridge_slave_0: entered allmulticast mode [ 1358.159512][T14519] bridge_slave_0: entered promiscuous mode [ 1358.399822][T14519] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.399900][T14519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.400037][T14519] bridge_slave_1: entered allmulticast mode [ 1358.414862][T14519] bridge_slave_1: entered promiscuous mode [ 1358.598022][T14830] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1358.725622][T14840] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1358.904714][T10333] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1358.936518][T14843] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2551'. [ 1358.980843][ T12] rtrs_client L1777: : Resolving route failed, err: -ENODEV [ 1359.085519][T10333] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1359.097626][T10333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1359.097649][T10333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1359.109820][T10333] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1359.109839][T10333] usb 5-1: Manufacturer: syz [ 1359.113482][T10333] usb 5-1: config 0 descriptor?? [ 1359.174303][T14623] bridge0: port 1(bridge_slave_0) entered blocking state [ 1359.174379][T14623] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.174497][T14623] bridge_slave_0: entered allmulticast mode [ 1359.255941][T14623] bridge_slave_0: entered promiscuous mode [ 1359.285477][T14840] rtrs_client L2638: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 1359.569243][T14623] bridge0: port 2(bridge_slave_1) entered blocking state [ 1359.569389][T14623] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.569580][T14623] bridge_slave_1: entered allmulticast mode [ 1359.727576][T14623] bridge_slave_1: entered promiscuous mode [ 1360.191646][T12322] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1360.245810][T12322] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1360.280858][T12322] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1360.281729][T12322] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1360.304114][T12322] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1360.438183][T10333] input: syz Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0031/input/input82 [ 1360.689947][T10333] input: syz Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0031/input/input83 [ 1360.848763][T10333] input: syz Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0031/input/input84 [ 1360.932666][T10333] input: syz Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0031/input/input85 [ 1361.111674][T10333] uclogic 0003:256C:006D.0031: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.4-1/input0 [ 1361.184616][T14623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1361.276233][T14623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1361.360205][ T5722] usb 5-1: USB disconnect, device number 85 [ 1361.870475][T14872] fido_id[14872]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1361.913441][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.913486][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.028288][ T5249] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1362.098387][T14623] team0: Port device team_slave_0 added [ 1362.140130][T14623] team0: Port device team_slave_1 added [ 1362.232472][T10333] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1362.256248][ T5691] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1362.406172][ T5691] usb 3-1: Using ep0 maxpacket: 8 [ 1362.406718][ T5691] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1362.408090][T10333] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1362.408208][ T5691] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1362.408226][ T5691] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1362.408241][ T5691] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1362.408255][ T5691] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1362.408280][ T5691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.409166][T10333] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 1362.409184][T10333] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1362.413440][T10333] usb 1-1: string descriptor 0 read error: -22 [ 1362.413537][T10333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.782332][ T5691] usb 3-1: usb_control_msg returned -32 [ 1362.782373][ T5691] usbtmc 3-1:16.0: can't read capabilities [ 1362.946221][T12322] Bluetooth: hci0: command tx timeout [ 1363.074443][T14623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1363.074458][T14623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1363.074473][T14623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1363.132529][T14623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1363.132543][T14623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1363.132559][T14623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1363.401464][T10333] keytouch 0003:0926:3333.0032: fixing up Keytouch IEC report descriptor [ 1363.438089][ T5691] usb 3-1: USB disconnect, device number 89 [ 1366.397091][T10333] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:0926:3333.0032/input/input86 [ 1366.472592][T12322] Bluetooth: hci0: command tx timeout [ 1366.789054][T14894] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2560'. [ 1367.175720][T10333] keytouch 0003:0926:3333.0032: input,hidraw1: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1367.218232][T10333] usb 1-1: USB disconnect, device number 92 [ 1367.253827][T14901] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1368.546333][ T5603] Bluetooth: hci0: command tx timeout [ 1370.088386][T14910] fido_id[14910]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1370.571403][T14623] hsr_slave_0: entered promiscuous mode [ 1370.573718][T14623] hsr_slave_1: entered promiscuous mode [ 1370.575695][T14927] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1370.602511][T14623] debugfs: 'hsr0' already exists in 'hsr' [ 1370.602534][T14623] Cannot create hsr debugfs directory [ 1370.626552][ T5603] Bluetooth: hci0: command tx timeout [ 1370.922819][ T12] bridge_slave_1: left allmulticast mode [ 1370.922846][ T12] bridge_slave_1: left promiscuous mode [ 1370.923050][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.948647][ T12] bridge_slave_0: left allmulticast mode [ 1370.948673][ T12] bridge_slave_0: left promiscuous mode [ 1370.948851][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.239921][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2569'. [ 1371.401303][T14942] Invalid logical block size (8192) [ 1375.448026][ T36] audit: type=1800 audit(1787555843.422:31): pid=14949 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2572" name="memory_backed" dev="configfs" ino=74813 res=0 errno=0 [ 1375.448064][ T36] audit: type=1800 audit(1787555843.422:32): pid=14949 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2572" name="zone_nr_conv" dev="configfs" ino=74814 res=0 errno=0 [ 1375.448102][ T36] audit: type=1800 audit(1787555843.422:33): pid=14949 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2572" name="power" dev="configfs" ino=74815 res=0 errno=0 [ 1375.529869][ T12] bond0 (unregistering): Released all slaves [ 1375.553082][T14950] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1375.730522][T14954] Invalid logical block size (8192) [ 1375.734728][T14937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1378.120832][T14937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1380.757700][T14960] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1380.937432][ T5249] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1381.062755][T14851] lo speed is unknown, defaulting to 1000 [ 1382.150430][T12322] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1382.209131][T12322] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1382.226889][T12322] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1382.274802][T12322] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1382.330008][T12322] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1385.849986][T14990] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 1386.160589][ T5603] Bluetooth: hci5: command tx timeout [ 1388.068131][ T3365] IPVS: starting estimator thread 0... [ 1389.823938][T12322] Bluetooth: hci5: command tx timeout [ 1389.883506][T15005] IPVS: using max 14 ests per chain, 33600 per kthread [ 1391.637235][T15033] Bluetooth: MGMT ver 1.23 [ 1391.827162][T12322] Bluetooth: hci5: command tx timeout [ 1393.907189][T12322] Bluetooth: hci5: command tx timeout [ 1396.438849][ T5249] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1396.998999][T15049] Invalid logical block size (8192) [ 1397.051764][T15049] nbd0: detected capacity change from 0 to 63 [ 1397.089976][T12322] block nbd0: Receive control failed (result -32) [ 1397.145444][ T98] block nbd0: Dead connection, failed to find a fallback [ 1397.145464][ T98] block nbd0: shutting down sockets [ 1397.145581][ T98] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1397.145643][ T98] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1397.182637][ T98] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1397.182659][ T98] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1397.182671][ T98] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1397.242151][ T98] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1397.242176][ T98] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1397.242190][ T98] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1397.242201][ T98] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1397.242212][ T98] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1397.242367][ T98] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1397.242385][ T98] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1397.242396][ T98] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1397.242514][ T98] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1397.242639][ T98] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1397.244280][ T98] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1397.244430][ T98] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1397.244555][ T98] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1397.244601][T15050] ldm_validate_partition_table(): Disk read failed. [ 1397.244691][ T98] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1397.244816][ T98] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1397.245074][T15050] Dev nbd0: unable to read RDB block 0 [ 1397.252650][T15050] nbd0: unable to read partition table [ 1397.441806][T15050] ldm_validate_partition_table(): Disk read failed. [ 1397.445293][T15050] Dev nbd0: unable to read RDB block 0 [ 1397.465267][T15050] nbd0: unable to read partition table [ 1397.562973][T14972] lo speed is unknown, defaulting to 1000 [ 1397.852825][T15054] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1398.195454][ T12] bridge_slave_1: left allmulticast mode [ 1398.195481][ T12] bridge_slave_1: left promiscuous mode [ 1398.195664][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.211422][T15056] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 1398.264597][ T12] bridge_slave_0: left allmulticast mode [ 1398.264623][ T12] bridge_slave_0: left promiscuous mode [ 1398.264790][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.084038][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1402.176248][ T5807] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1402.351860][ T5807] usb 3-1: Using ep0 maxpacket: 32 [ 1402.364757][ T5807] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1402.373669][ T5807] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1402.373688][ T5807] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1402.403764][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.403784][ T5807] usb 3-1: Product: syz [ 1402.403793][ T5807] usb 3-1: Manufacturer: syz [ 1402.403801][ T5807] usb 3-1: SerialNumber: syz [ 1402.408635][ T5807] usb 3-1: config 0 descriptor?? [ 1402.500560][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1402.517638][ T12] bond0 (unregistering): Released all slaves [ 1403.793857][ T5807] usb 3-1: USB disconnect, device number 90 [ 1404.019066][T15096] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2600'. [ 1404.653056][T15105] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1405.294699][T15115] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 1405.342019][ T12] hsr_slave_0: left promiscuous mode [ 1405.342695][ T12] hsr_slave_1: left promiscuous mode [ 1405.343443][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1405.344032][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1409.143464][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1409.261264][T15133] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2610'. [ 1409.422545][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1409.711942][ T5807] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1410.402297][ T5807] usb 3-1: Using ep0 maxpacket: 8 [ 1413.025912][ T5807] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1413.025953][ T5807] usb 3-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 1413.036498][ T5807] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1413.036537][ T5807] usb 3-1: can't read configurations, error -71 [ 1413.321071][T15151] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2615'. [ 1413.486223][ T5691] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1413.548341][T15152] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 1413.639494][ T5691] usb 5-1: Using ep0 maxpacket: 32 [ 1413.641805][ T5691] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1413.664294][ T5691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.664314][ T5691] usb 5-1: Product: syz [ 1413.664323][ T5691] usb 5-1: Manufacturer: syz [ 1413.664332][ T5691] usb 5-1: SerialNumber: syz [ 1413.705130][ T5691] usb 5-1: config 0 descriptor?? [ 1413.737982][ T5691] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1413.738049][ T5691] dvb-usb: bulk message failed: -22 (4/0) [ 1413.738060][ T5691] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1413.738134][ T5691] dvb-usb: bulk message failed: -22 (5/0) [ 1413.738142][ T5691] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1413.803844][ T5691] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1413.817256][ T5691] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1413.817295][ T5691] usb 5-1: media controller created [ 1413.912741][ T5691] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1414.874551][ T5691] usb 5-1: selecting invalid altsetting 3 [ 1414.874565][ T5691] ttusb2: set interface to alts=3 failed [ 1415.159774][ T5691] DVB: Unable to find symbol tda10086_attach() [ 1415.159787][ T5691] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1415.162215][ T5691] dvb-usb: bulk message failed: -22 (4/0) [ 1415.162230][ T5691] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1415.162302][ T5691] dvb-usb: bulk message failed: -22 (5/0) [ 1415.162311][ T5691] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1415.162350][ T5691] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1415.257900][ T5691] usb 5-1: USB disconnect, device number 86 [ 1415.528428][ T5691] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1415.545405][T14851] bridge0: port 1(bridge_slave_0) entered blocking state [ 1415.545481][T14851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.545619][T14851] bridge_slave_0: entered allmulticast mode [ 1415.559309][T15165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2619'. [ 1415.587994][T14851] bridge_slave_0: entered promiscuous mode [ 1415.930198][T15165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1416.511245][T14851] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.511324][T14851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.511461][T14851] bridge_slave_1: entered allmulticast mode [ 1416.536901][T14851] bridge_slave_1: entered promiscuous mode [ 1417.176207][T10336] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1417.201514][T14851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1417.269578][T14851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1417.327026][T10336] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1417.327988][T10336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.331233][T10336] usb 1-1: config 0 descriptor?? [ 1417.397981][T10336] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1417.766186][ T5691] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1417.792006][T14851] team0: Port device team_slave_0 added [ 1417.966109][ T5691] usb 3-1: Using ep0 maxpacket: 8 [ 1418.007627][T14851] team0: Port device team_slave_1 added [ 1418.013088][ T5691] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1418.013126][ T5691] usb 3-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 1418.017468][ T5691] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1418.017495][ T5691] usb 3-1: can't read configurations, error -71 [ 1418.128191][T10336] usb 1-1: USB disconnect, device number 93 [ 1418.489445][T14851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1418.489459][T14851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1418.489474][T14851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1418.581054][T14851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1418.581067][T14851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1418.581084][T14851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1418.806180][T10336] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1418.987112][T14972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.987199][T14972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.987337][T14972] bridge_slave_0: entered allmulticast mode [ 1418.990560][T14972] bridge_slave_0: entered promiscuous mode [ 1418.994468][T14972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.994540][T14972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.994648][T14972] bridge_slave_1: entered allmulticast mode [ 1418.999251][T14972] bridge_slave_1: entered promiscuous mode [ 1419.028152][T10336] usb 5-1: Using ep0 maxpacket: 32 [ 1419.028839][T10336] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1419.029903][T10336] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1419.031706][T10336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.031722][T10336] usb 5-1: Product: syz [ 1419.031730][T10336] usb 5-1: Manufacturer: syz [ 1419.031739][T10336] usb 5-1: SerialNumber: syz [ 1419.035468][T10336] usb 5-1: config 0 descriptor?? [ 1420.226364][T10336] usb 5-1: USB disconnect, device number 87 [ 1420.376127][ T6925] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 1420.423113][T14972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1420.465674][T14972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1420.526645][ T6925] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 1420.527563][ T6925] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1420.527612][ T6925] usb 1-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1420.527639][ T6925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.899152][T14972] team0: Port device team_slave_0 added [ 1420.934196][T14972] team0: Port device team_slave_1 added [ 1421.050737][ T5603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1421.107606][ T5603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1421.113367][ T5603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1421.114705][ T5603] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1421.170412][ T5603] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1421.373681][T15217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1422.088250][ T6925] dvb_ttusb_budget: cmd xter failed, receive error -75 [ 1422.088268][ T6925] dvb_ttusb_budget: ttusb_init_controller: error [ 1422.088277][ T6925] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1422.402373][ T6925] DVB: Unable to find symbol stv0299_attach() [ 1422.625096][ T6925] DVB: Unable to find symbol tda8083_attach() [ 1422.625110][ T6925] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1422.660181][ T57] bridge_slave_1: left allmulticast mode [ 1422.660208][ T57] bridge_slave_1: left promiscuous mode [ 1422.660389][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.706339][ T57] bridge_slave_0: left allmulticast mode [ 1422.706365][ T57] bridge_slave_0: left promiscuous mode [ 1422.706540][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1423.068843][T15235] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 1423.230375][T10336] usb 1-1: USB disconnect, device number 94 [ 1423.347577][ T5603] Bluetooth: hci4: command tx timeout [ 1423.350448][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.350494][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.113830][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1424.135474][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1424.166312][ T57] bond0 (unregistering): Released all slaves [ 1424.190033][T14972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1424.190046][T14972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1424.190062][T14972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1424.452125][T14972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1424.452139][T14972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1424.452155][T14972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1424.536188][ T5691] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1424.698292][ T5691] usb 5-1: Using ep0 maxpacket: 32 [ 1424.722600][ T5691] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1424.742827][ T5691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.742846][ T5691] usb 5-1: Product: syz [ 1424.742855][ T5691] usb 5-1: Manufacturer: syz [ 1424.742865][ T5691] usb 5-1: SerialNumber: syz [ 1424.781906][ T5691] usb 5-1: config 0 descriptor?? [ 1424.817101][ T5691] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1424.817178][ T5691] dvb-usb: bulk message failed: -22 (4/0) [ 1424.817189][ T5691] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1424.817261][ T5691] dvb-usb: bulk message failed: -22 (5/0) [ 1424.817270][ T5691] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1425.019737][ T5691] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1425.022148][ T5691] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1425.022196][ T5691] usb 5-1: media controller created [ 1426.013559][ T5603] Bluetooth: hci4: command tx timeout [ 1426.159176][ T5691] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1426.311889][ T5691] usb 5-1: selecting invalid altsetting 3 [ 1426.311903][ T5691] ttusb2: set interface to alts=3 failed [ 1426.314656][T14972] hsr_slave_0: entered promiscuous mode [ 1426.351177][T14972] hsr_slave_1: entered promiscuous mode [ 1426.381603][T14972] debugfs: 'hsr0' already exists in 'hsr' [ 1426.381634][T14972] Cannot create hsr debugfs directory [ 1426.668060][ T5691] DVB: Unable to find symbol tda10086_attach() [ 1426.668073][ T5691] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1426.670884][ T5691] dvb-usb: bulk message failed: -22 (4/0) [ 1426.670900][ T5691] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1426.670975][ T5691] dvb-usb: bulk message failed: -22 (5/0) [ 1426.670984][ T5691] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1426.671024][ T5691] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1426.787058][ T5691] usb 5-1: USB disconnect, device number 88 [ 1426.846236][T10336] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1427.016214][T10336] usb 3-1: Using ep0 maxpacket: 32 [ 1427.042829][T10336] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1427.048648][T10336] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.048684][T10336] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1427.048700][T10336] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1427.048713][T10336] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1427.048729][T10336] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1427.048750][T10336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.252241][ T5691] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1427.301677][T10336] usb 3-1: config 0 descriptor?? [ 1427.798681][T10336] hid_parser_main: 175 callbacks suppressed [ 1427.798699][T10336] corsair-psu 0003:1B1C:1C09.0033: unknown main item tag 0x0 [ 1427.798719][T10336] corsair-psu 0003:1B1C:1C09.0033: unknown main item tag 0x0 [ 1427.798734][T10336] corsair-psu 0003:1B1C:1C09.0033: unknown main item tag 0x0 [ 1427.798749][T10336] corsair-psu 0003:1B1C:1C09.0033: unknown main item tag 0x0 [ 1427.798764][T10336] corsair-psu 0003:1B1C:1C09.0033: unknown main item tag 0x0 [ 1427.959743][T10336] corsair-psu 0003:1B1C:1C09.0033: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 1428.067022][ T5603] Bluetooth: hci4: command tx timeout [ 1428.206251][T10336] corsair-psu 0003:1B1C:1C09.0033: unable to initialize device (-38) [ 1428.484427][T10336] corsair-psu 0003:1B1C:1C09.0033: probe with driver corsair-psu failed with error -38 [ 1428.586223][T10336] usb 3-1: USB disconnect, device number 95 [ 1428.859934][T15218] lo speed is unknown, defaulting to 1000 [ 1429.003997][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1429.024985][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1429.317694][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1429.410488][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1429.426469][T10336] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 1429.578134][T10336] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 1429.581267][T10336] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1429.581311][T10336] usb 3-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1429.581338][T10336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.766204][ T5691] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1429.926174][ T5691] usb 5-1: Using ep0 maxpacket: 8 [ 1430.122239][ T5691] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1430.122281][ T5691] usb 5-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 1430.123065][ T5691] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1430.123086][ T5691] usb 5-1: can't read configurations, error -71 [ 1430.147937][ T5603] Bluetooth: hci4: command tx timeout [ 1430.295898][T10336] dvb_ttusb_budget: cmd xter failed, receive error -75 [ 1430.295915][T10336] dvb_ttusb_budget: ttusb_init_controller: error [ 1430.295923][T10336] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1430.510618][T10336] DVB: Unable to find symbol stv0299_attach() [ 1430.622414][T10336] DVB: Unable to find symbol tda8083_attach() [ 1430.622427][T10336] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1432.128601][T15304] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 1432.227549][T15301] dvb_ttusb_budget: cmd xter failed, receive error -110 [ 1432.244513][T15311] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1432.326646][ T6925] usb 3-1: USB disconnect, device number 96 [ 1434.524939][ T3404] bridge0: port 3(wlan1) entered blocking state [ 1434.525022][ T3404] bridge0: port 3(wlan1) entered forwarding state [ 1437.622008][T15380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2658'. [ 1437.896203][ T5691] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1437.956615][T15218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1437.957970][T15218] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.958109][T15218] bridge_slave_0: entered allmulticast mode [ 1437.987244][T15218] bridge_slave_0: entered promiscuous mode [ 1437.992090][T15218] bridge0: port 2(bridge_slave_1) entered blocking state [ 1437.992366][T15218] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.992498][T15218] bridge_slave_1: entered allmulticast mode [ 1438.028770][T15218] bridge_slave_1: entered promiscuous mode [ 1438.046923][ T5691] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1438.047851][ T5691] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 1438.047872][ T5691] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1438.054149][ T5691] usb 5-1: string descriptor 0 read error: -22 [ 1438.054242][ T5691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.097526][T10336] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1438.158374][ T5722] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1438.159903][T14972] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1438.199091][T14972] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1438.266836][T10336] usb 3-1: Using ep0 maxpacket: 32 [ 1438.267631][T10336] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1438.268574][T10336] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1438.271932][T10336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.271949][T10336] usb 3-1: Product: syz [ 1438.271958][T10336] usb 3-1: Manufacturer: syz [ 1438.271967][T10336] usb 3-1: SerialNumber: syz [ 1438.345433][T10336] usb 3-1: config 0 descriptor?? [ 1438.346170][ T5722] usb 1-1: Using ep0 maxpacket: 32 [ 1438.348183][ T5722] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1438.371285][ T5722] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1438.392282][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.392301][ T5722] usb 1-1: Product: syz [ 1438.392310][ T5722] usb 1-1: Manufacturer: syz [ 1438.392319][ T5722] usb 1-1: SerialNumber: syz [ 1438.419882][T14972] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1438.498381][ T5722] usb 1-1: config 0 descriptor?? [ 1438.575075][ T5691] keytouch 0003:0926:3333.0034: fixing up Keytouch IEC report descriptor [ 1439.491331][ T5691] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:0926:3333.0034/input/input87 [ 1439.621311][T14972] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1439.650140][T15218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1440.523925][T14972] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1440.644058][ T5807] usb 1-1: USB disconnect, device number 95 [ 1440.676916][ T5722] usb 3-1: USB disconnect, device number 97 [ 1440.735133][T14972] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1440.747863][T15218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1440.748058][T14972] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1440.811625][T14972] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1440.858160][ T5691] keytouch 0003:0926:3333.0034: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1440.907692][ T5691] usb 5-1: USB disconnect, device number 91 [ 1441.083487][T14972] kthread_run failed with err -4 [ 1441.318972][T15394] fido_id[15394]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1441.427095][T15218] team0: Port device team_slave_0 added [ 1441.451837][T15218] team0: Port device team_slave_1 added [ 1441.918462][T12322] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1441.968941][T12322] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1441.972213][T12322] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1441.975126][T12322] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1442.034155][T12322] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1442.189310][T15218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1442.189324][T15218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1442.189340][T15218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1442.260944][T15218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1442.260959][T15218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1442.260976][T15218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1442.574575][T15218] hsr_slave_0: entered promiscuous mode [ 1442.589111][T15218] hsr_slave_1: entered promiscuous mode [ 1442.604798][T15218] debugfs: 'hsr0' already exists in 'hsr' [ 1442.604820][T15218] Cannot create hsr debugfs directory [ 1444.146264][T12322] Bluetooth: hci0: command tx timeout [ 1444.249304][T15415] ima: policy update failed [ 1444.249592][ T36] audit: type=1802 audit(1787555912.242:34): pid=15415 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.2.2666" res=0 errno=0 [ 1444.738249][T15424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2668'. [ 1446.226162][T12322] Bluetooth: hci0: command tx timeout [ 1448.306360][T12322] Bluetooth: hci0: command tx timeout [ 1449.987689][T15456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2679'. [ 1450.387000][T12322] Bluetooth: hci0: command tx timeout [ 1450.697180][T15456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1450.776956][T15456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1451.106950][T15463] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1451.322905][T10336] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1451.491053][T10336] usb 1-1: Using ep0 maxpacket: 32 [ 1451.491751][T10336] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1451.495616][T10336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.495633][T10336] usb 1-1: Product: syz [ 1451.495642][T10336] usb 1-1: Manufacturer: syz [ 1451.495651][T10336] usb 1-1: SerialNumber: syz [ 1451.554176][T10336] usb 1-1: config 0 descriptor?? [ 1451.566410][T10336] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1451.566490][T10336] dvb-usb: bulk message failed: -22 (4/0) [ 1451.566502][T10336] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1451.566586][T10336] dvb-usb: bulk message failed: -22 (5/0) [ 1451.566595][T10336] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1451.644404][T10336] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1451.645718][T10336] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1451.645757][T10336] usb 1-1: media controller created [ 1451.702889][T10336] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1452.634534][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1452.689963][T10336] usb 1-1: selecting invalid altsetting 3 [ 1452.689977][T10336] ttusb2: set interface to alts=3 failed [ 1452.984558][T10336] DVB: Unable to find symbol tda10086_attach() [ 1452.984570][T10336] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1453.003204][T10336] dvb-usb: bulk message failed: -22 (4/0) [ 1453.003222][T10336] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1453.003542][T10336] dvb-usb: bulk message failed: -22 (5/0) [ 1453.003554][T10336] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1453.003592][T10336] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1453.053737][T10336] usb 1-1: USB disconnect, device number 96 [ 1453.116439][T15481] 0x000000000000-0x000000020000 : "" [ 1453.391064][T10336] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1453.553008][T15481] ftl_cs: FTL header not found. [ 1454.576289][T10336] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1454.726309][T10336] usb 5-1: Using ep0 maxpacket: 32 [ 1454.726846][T10336] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1454.730262][T10336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.730278][T10336] usb 5-1: Product: syz [ 1454.730288][T10336] usb 5-1: Manufacturer: syz [ 1454.730304][T10336] usb 5-1: SerialNumber: syz [ 1454.793909][T10336] usb 5-1: config 0 descriptor?? [ 1454.814758][T10336] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1454.814825][T10336] dvb-usb: bulk message failed: -22 (4/0) [ 1454.814836][T10336] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1454.814909][T10336] dvb-usb: bulk message failed: -22 (5/0) [ 1454.814918][T10336] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1454.985459][T10336] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1455.005094][T10336] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1455.005134][T10336] usb 5-1: media controller created [ 1455.927625][T10336] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1455.982342][ T5691] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1456.065142][T10336] usb 5-1: selecting invalid altsetting 3 [ 1456.065157][T10336] ttusb2: set interface to alts=3 failed [ 1456.130481][ T5691] usb 3-1: Using ep0 maxpacket: 32 [ 1456.131119][ T5691] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1456.135871][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.135889][ T5691] usb 3-1: Product: syz [ 1456.135898][ T5691] usb 3-1: Manufacturer: syz [ 1456.135907][ T5691] usb 3-1: SerialNumber: syz [ 1456.190975][ T5691] usb 3-1: config 0 descriptor?? [ 1456.213408][ T5691] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1456.213488][ T5691] dvb-usb: bulk message failed: -22 (4/0) [ 1456.213498][ T5691] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1456.213574][ T5691] dvb-usb: bulk message failed: -22 (5/0) [ 1456.213582][ T5691] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1456.267431][ T5691] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1456.268431][ T5691] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1456.268467][ T5691] usb 3-1: media controller created [ 1456.273879][T10336] DVB: Unable to find symbol tda10086_attach() [ 1456.273890][T10336] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1456.300744][T10336] dvb-usb: bulk message failed: -22 (4/0) [ 1456.300765][T10336] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1456.300839][T10336] dvb-usb: bulk message failed: -22 (5/0) [ 1456.300848][T10336] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1456.300886][T10336] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1456.371329][T10336] usb 5-1: USB disconnect, device number 92 [ 1456.438826][ T5691] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1456.624419][ T5691] usb 3-1: selecting invalid altsetting 3 [ 1456.624435][ T5691] ttusb2: set interface to alts=3 failed [ 1456.835758][ T5691] DVB: Unable to find symbol tda10086_attach() [ 1456.835773][ T5691] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1456.855950][ T5691] dvb-usb: bulk message failed: -22 (4/0) [ 1456.855967][ T5691] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1456.882690][ T5691] dvb-usb: bulk message failed: -22 (5/0) [ 1456.882706][ T5691] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1456.882750][ T5691] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1457.640905][T15509] dvb-usb: bulk message failed: -22 (7/0) [ 1457.640922][T15509] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1457.640947][T15509] ttusb2: i2c transfer failed. [ 1457.685108][T15401] lo speed is unknown, defaulting to 1000 [ 1459.597226][T10336] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1459.600522][ T5722] usb 3-1: USB disconnect, device number 98 [ 1460.214813][ T5722] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1460.854688][T15538] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1461.925807][T15552] nbd1: detected capacity change from 0 to 63 [ 1462.068543][T12322] block nbd1: Receive control failed (result -32) [ 1462.768806][T10336] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1462.820451][ T98] block nbd1: Dead connection, failed to find a fallback [ 1462.820473][ T98] block nbd1: shutting down sockets [ 1462.820486][ T98] blk_print_req_error: 32 callbacks suppressed [ 1462.820497][ T98] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1462.820519][ T98] buffer_io_error: 138 callbacks suppressed [ 1462.820529][ T98] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1462.820544][ T98] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1462.820556][ T98] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1462.820569][ T98] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1462.820751][ T98] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1462.820769][ T98] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1462.820780][ T98] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1462.820791][ T98] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1462.820802][ T98] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1462.820915][ T98] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1462.820932][ T98] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1462.820943][ T98] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1462.821056][ T98] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1462.821180][ T98] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1462.821331][ T98] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1462.821540][ T98] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1462.821667][ T98] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1462.821712][T15532] ldm_validate_partition_table(): Disk read failed. [ 1462.821800][ T98] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1462.821923][ T98] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1462.822179][T15532] Dev nbd1: unable to read RDB block 0 [ 1462.822808][T15532] nbd1: unable to read partition table [ 1462.926198][T10336] usb 3-1: Using ep0 maxpacket: 32 [ 1462.926818][T10336] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1462.939464][T10336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.939484][T10336] usb 3-1: Product: syz [ 1462.939493][T10336] usb 3-1: Manufacturer: syz [ 1462.939502][T10336] usb 3-1: SerialNumber: syz [ 1462.962237][T10336] usb 3-1: config 0 descriptor?? [ 1463.194546][T10336] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1463.194615][T10336] dvb-usb: bulk message failed: -22 (4/0) [ 1463.194625][T10336] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1463.194700][T10336] dvb-usb: bulk message failed: -22 (5/0) [ 1463.194708][T10336] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1463.287858][T15532] ldm_validate_partition_table(): Disk read failed. [ 1463.288313][T15532] Dev nbd1: unable to read RDB block 0 [ 1463.288850][T15532] nbd1: unable to read partition table [ 1463.332242][T10336] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1463.350062][T10336] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1463.350103][T10336] usb 3-1: media controller created [ 1463.472937][T10336] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1463.616888][T15567] dvb-usb: bulk message failed: -22 (7/0) [ 1463.618461][T15567] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1463.618493][T15567] ttusb2: i2c transfer failed. [ 1463.923123][T10336] usb 3-1: selecting invalid altsetting 3 [ 1463.923138][T10336] ttusb2: set interface to alts=3 failed [ 1464.288890][T10336] DVB: Unable to find symbol tda10086_attach() [ 1464.288903][T10336] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1464.289637][T10336] dvb-usb: bulk message failed: -22 (4/0) [ 1464.289651][T10336] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1464.289723][T10336] dvb-usb: bulk message failed: -22 (5/0) [ 1464.289731][T10336] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1464.289770][T10336] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1466.023225][ T6925] usb 3-1: USB disconnect, device number 99 [ 1466.128240][ T6925] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1466.561572][T15605] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2706'. [ 1467.334772][T15614] sctp: [Deprecated]: syz.4.2707 (pid 15614) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1467.334772][T15614] Use struct sctp_sack_info instead [ 1467.385026][T15617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2708'. [ 1467.544498][T15620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1467.734368][T15626] Invalid logical block size (8192) [ 1467.850892][T15626] nbd2: detected capacity change from 0 to 63 [ 1468.105026][T12322] block nbd2: Receive control failed (result -104) [ 1468.510097][T15635] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1469.586113][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1478.621214][T15683] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1483.930966][ T145] bridge_slave_1: left allmulticast mode [ 1483.930995][ T145] bridge_slave_1: left promiscuous mode [ 1483.931187][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.994748][ T145] bridge_slave_0: left allmulticast mode [ 1483.994774][ T145] bridge_slave_0: left promiscuous mode [ 1484.316371][ T5807] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1484.807636][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.807685][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.146259][T12322] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1486.929396][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1487.118061][T12322] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1490.659787][T15716] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1491.599676][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1491.696695][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1491.830728][ T145] bond0 (unregistering): Released all slaves [ 1492.414964][T15401] bridge0: port 1(bridge_slave_0) entered blocking state [ 1492.415039][T15401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.415145][T15401] bridge_slave_0: entered allmulticast mode [ 1492.438716][T15401] bridge_slave_0: entered promiscuous mode [ 1492.632994][T15401] bridge0: port 2(bridge_slave_1) entered blocking state [ 1492.633071][T15401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.633179][T15401] bridge_slave_1: entered allmulticast mode [ 1492.634774][T15401] bridge_slave_1: entered promiscuous mode [ 1493.234589][T15401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1493.456248][T10336] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1493.626212][T10336] usb 3-1: Using ep0 maxpacket: 32 [ 1493.626792][T10336] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1493.969566][T10336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.969587][T10336] usb 3-1: Product: syz [ 1493.969596][T10336] usb 3-1: Manufacturer: syz [ 1493.969605][T10336] usb 3-1: SerialNumber: syz [ 1494.960810][T15401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1496.261876][T10336] usb 3-1: config 0 descriptor?? [ 1496.329359][T10336] usb 3-1: can't set config #0, error -71 [ 1496.434357][T10336] usb 3-1: USB disconnect, device number 100 [ 1496.751388][ T5603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1496.805249][ T5603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1496.824312][ T5603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1496.836209][ T5603] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1496.841795][ T5603] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1497.389757][T15799] Invalid logical block size (8192) [ 1497.542302][T15797] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 1497.605672][T15799] nbd3: detected capacity change from 0 to 63 [ 1497.964288][ T5603] block nbd3: Receive control failed (result -104) [ 1498.331130][ T98] block nbd2: Possible stuck request ffff888026e35080: control (read@0,1024B). Runtime 30 seconds [ 1498.333677][ T98] block nbd2: Possible stuck request ffff888026e35240: control (read@1024,1024B). Runtime 30 seconds [ 1498.333706][ T98] block nbd2: Possible stuck request ffff888026e35400: control (read@2048,1024B). Runtime 30 seconds [ 1498.333724][ T98] block nbd2: Possible stuck request ffff888026e355c0: control (read@3072,1024B). Runtime 30 seconds [ 1498.453685][T15401] team0: Port device team_slave_0 added [ 1498.471070][ T145] hsr_slave_0: left promiscuous mode [ 1498.471682][ T145] hsr_slave_1: left promiscuous mode [ 1498.473585][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1498.474861][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1498.786322][T15812] binder: 15811:15812 ioctl c0306201 0 returned -14 [ 1499.106807][ T5603] Bluetooth: hci5: command tx timeout [ 1499.285355][T15823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2751'. [ 1499.286453][ T5691] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1499.443971][ T5691] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1499.444930][ T5691] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 1499.444951][ T5691] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1499.481574][ T5691] usb 5-1: string descriptor 0 read error: -22 [ 1499.481676][ T5691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.960559][ T5691] keytouch 0003:0926:3333.0035: fixing up Keytouch IEC report descriptor [ 1500.011171][ T5691] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:0926:3333.0035/input/input88 [ 1500.176223][ T6925] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1500.194422][ T145] team0 (unregistering): Port device team_slave_1 removed [ 1500.251428][ T145] team0 (unregistering): Port device team_slave_0 removed [ 1500.366866][ T6925] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1500.368321][ T6925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.408133][ T6925] usb 3-1: config 0 descriptor?? [ 1500.411483][ T5691] keytouch 0003:0926:3333.0035: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1500.474630][ T6925] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1500.509223][ T5691] usb 5-1: USB disconnect, device number 94 [ 1500.984447][T15830] fido_id[15830]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1501.137737][ T6925] usb 3-1: USB disconnect, device number 101 [ 1501.186197][ T5603] Bluetooth: hci5: command tx timeout [ 1501.645918][ T5691] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1501.843240][ T5691] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1501.844250][ T5691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.867449][ T5691] usb 5-1: config 0 descriptor?? [ 1501.892260][ T5691] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1502.491028][T15401] team0: Port device team_slave_1 added [ 1502.644475][T12322] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1502.692228][T12322] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1502.740101][ T5691] usb 5-1: USB disconnect, device number 95 [ 1502.769869][T12322] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1502.779090][ T5722] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1502.823710][T12322] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1502.836622][T12322] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1502.996093][ T5722] usb 1-1: Using ep0 maxpacket: 32 [ 1502.999386][ T5722] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1503.048759][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.048779][ T5722] usb 1-1: Product: syz [ 1503.048788][ T5722] usb 1-1: Manufacturer: syz [ 1503.048803][ T5722] usb 1-1: SerialNumber: syz [ 1503.098330][ T5722] usb 1-1: config 0 descriptor?? [ 1503.126913][ T5722] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1503.126980][ T5722] dvb-usb: bulk message failed: -22 (4/0) [ 1503.126991][ T5722] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1503.127064][ T5722] dvb-usb: bulk message failed: -22 (5/0) [ 1503.127072][ T5722] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1503.216389][ T5722] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1503.243773][ T5722] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1503.243814][ T5722] usb 1-1: media controller created [ 1503.266170][T12322] Bluetooth: hci5: command tx timeout [ 1503.398176][ T5722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1503.597046][T15849] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 1503.637507][ T5722] usb 1-1: selecting invalid altsetting 3 [ 1503.637522][ T5722] ttusb2: set interface to alts=3 failed [ 1503.688203][T15862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2761'. [ 1503.688230][T15862] netlink: 'syz.4.2761': attribute type 30 has an invalid length. [ 1503.756350][T15866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2761'. [ 1503.756375][T15866] netlink: 'syz.4.2761': attribute type 30 has an invalid length. [ 1504.119645][ T5722] DVB: Unable to find symbol tda10086_attach() [ 1504.119657][ T5722] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1504.123371][ T5722] dvb-usb: bulk message failed: -22 (4/0) [ 1504.123387][ T5722] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1504.123459][ T5722] dvb-usb: bulk message failed: -22 (5/0) [ 1504.123467][ T5722] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1504.123505][ T5722] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1504.152938][ T5722] usb 1-1: USB disconnect, device number 97 [ 1504.384471][ T5722] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1504.814747][T15862] vxlan0: entered promiscuous mode [ 1504.814766][T15862] vxlan0: entered allmulticast mode [ 1505.125592][T12322] Bluetooth: hci4: command tx timeout [ 1508.591287][T12322] Bluetooth: hci5: command tx timeout [ 1508.591318][T12322] Bluetooth: hci4: command tx timeout [ 1509.226352][T15891] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2765'. [ 1509.538729][ T5691] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1509.756138][T13307] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1509.767932][T12630] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1509.768044][T12630] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1509.768093][T12630] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1510.096586][ T5691] usb 1-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 1510.097590][ T5691] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1510.097623][ T5691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.100900][ T5691] usb 1-1: config 0 descriptor?? [ 1510.114119][ T5691] option 1-1:0.0: GSM modem (1-port) converter detected [ 1510.254577][T15785] lo speed is unknown, defaulting to 1000 [ 1510.472513][ T5722] usb 1-1: USB disconnect, device number 98 [ 1510.494464][ T5722] option 1-1:0.0: device disconnected [ 1510.650832][ T5603] Bluetooth: hci4: command tx timeout [ 1511.025451][ T5807] usb 3-1: new low-speed USB device number 102 using dummy_hcd [ 1511.197961][ T5807] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1511.198001][ T5807] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 1511.198905][ T5807] usb 3-1: config 100 has an invalid interface number: 173 but max is 0 [ 1511.198921][ T5807] usb 3-1: config 100 has no interface number 0 [ 1511.198948][ T5807] usb 3-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 1511.198963][ T5807] usb 3-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1511.198979][ T5807] usb 3-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1511.198993][ T5807] usb 3-1: config 100 interface 173 has no altsetting 0 [ 1511.203751][ T5807] usb 3-1: string descriptor 0 read error: -22 [ 1511.203841][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.273543][T15903] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1511.317233][ T5807] metro_usb 3-1:100.173: Metrologic USB to Serial converter detected [ 1511.401739][ T5807] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1512.030633][T15903] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90 [ 1512.151223][ T5722] usb 3-1: USB disconnect, device number 102 [ 1512.414033][ T5722] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1512.414608][ T5722] metro_usb 3-1:100.173: device disconnected [ 1512.759453][ T5603] Bluetooth: hci4: command tx timeout [ 1513.298358][T15921] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1513.656243][ T5722] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1513.746218][ T6925] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1513.827021][ T5722] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1513.827952][ T5722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1513.827970][ T5722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1513.828860][ T5722] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1513.828875][ T5722] usb 3-1: Manufacturer: syz [ 1513.891369][ T5722] usb 3-1: config 0 descriptor?? [ 1513.896265][ T6925] usb 5-1: Using ep0 maxpacket: 32 [ 1513.896881][ T6925] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1513.899884][ T6925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.899900][ T6925] usb 5-1: Product: syz [ 1513.899909][ T6925] usb 5-1: Manufacturer: syz [ 1513.899918][ T6925] usb 5-1: SerialNumber: syz [ 1513.959303][ T6925] usb 5-1: config 0 descriptor?? [ 1514.020325][ T6925] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1514.020393][ T6925] dvb-usb: bulk message failed: -22 (4/0) [ 1514.020405][ T6925] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1514.020479][ T6925] dvb-usb: bulk message failed: -22 (5/0) [ 1514.020488][ T6925] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1514.091146][ T6925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1514.092699][ T6925] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1514.092788][ T6925] usb 5-1: media controller created [ 1514.254119][ T6925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1514.467412][T15929] dvb-usb: bulk message failed: -22 (7/0) [ 1514.467427][T15929] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1514.467456][T15929] ttusb2: i2c transfer failed. [ 1514.690567][ T6925] usb 5-1: selecting invalid altsetting 3 [ 1514.690584][ T6925] ttusb2: set interface to alts=3 failed [ 1514.860033][ T5722] input: syz Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0036/input/input89 [ 1514.894200][ T6925] DVB: Unable to find symbol tda10086_attach() [ 1514.894212][ T6925] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1514.894871][ T6925] dvb-usb: bulk message failed: -22 (4/0) [ 1514.894885][ T6925] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1514.894958][ T6925] dvb-usb: bulk message failed: -22 (5/0) [ 1514.894966][ T6925] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1514.895005][ T6925] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1514.936220][T10336] usb 1-1: new low-speed USB device number 99 using dummy_hcd [ 1514.962067][T15847] lo speed is unknown, defaulting to 1000 [ 1515.088084][T10336] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1515.088124][T10336] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 1515.089637][T10336] usb 1-1: config 100 has an invalid interface number: 173 but max is 0 [ 1515.089655][T10336] usb 1-1: config 100 has no interface number 0 [ 1515.089682][T10336] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 1515.089697][T10336] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 1160, setting to 8 [ 1515.089713][T10336] usb 1-1: config 100 interface 173 has no altsetting 0 [ 1515.162202][T10336] usb 1-1: string descriptor 0 read error: -22 [ 1515.162304][T10336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.236754][ T5722] input: syz Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0036/input/input90 [ 1515.331271][T15935] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1515.331435][T15935] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1515.420185][T10336] metro_usb 1-1:100.173: Metrologic USB to Serial converter detected [ 1515.488114][T10336] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1515.490170][ T5722] input: syz Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0036/input/input91 [ 1515.654615][T15935] metro-usb ttyUSB0: metrousb_open - failed to configure device, error code=-8 [ 1515.658556][ C0] metro-usb ttyUSB0: metrousb_read_int_callback - failed submitting interrupt in urb, error code=-1 [ 1515.708665][ T5722] input: syz Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0036/input/input92 [ 1515.837966][T10336] usb 1-1: USB disconnect, device number 99 [ 1515.887604][ T5722] uclogic 0003:256C:006D.0036: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.2-1/input0 [ 1515.923408][T10336] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1515.937825][T10336] metro_usb 1-1:100.173: device disconnected [ 1518.069968][ T5722] usb 3-1: USB disconnect, device number 103 [ 1522.225026][T15950] fido_id[15950]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1522.665749][T15972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1522.677579][T15972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1522.696185][T10336] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1522.846929][T10336] usb 1-1: Using ep0 maxpacket: 32 [ 1522.847542][T10336] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1522.851241][T10336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.851260][T10336] usb 1-1: Product: syz [ 1522.851268][T10336] usb 1-1: Manufacturer: syz [ 1522.851277][T10336] usb 1-1: SerialNumber: syz [ 1522.852613][T15970] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1522.962286][T10336] usb 1-1: config 0 descriptor?? [ 1523.009463][T10336] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1523.009551][T10336] dvb-usb: bulk message failed: -22 (4/0) [ 1523.009562][T10336] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1523.009635][T10336] dvb-usb: bulk message failed: -22 (5/0) [ 1523.009643][T10336] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1523.147544][T10336] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1523.154421][T10336] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1523.154460][T10336] usb 1-1: media controller created [ 1523.317742][T10336] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1523.423714][T10336] usb 1-1: selecting invalid altsetting 3 [ 1523.423730][T10336] ttusb2: set interface to alts=3 failed [ 1523.497662][ T5722] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1523.660329][ T5722] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1523.662512][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.691959][ T5722] usb 3-1: config 0 descriptor?? [ 1523.727686][ T5722] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1523.764638][T10336] DVB: Unable to find symbol tda10086_attach() [ 1523.764651][T10336] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1523.781109][T10336] dvb-usb: bulk message failed: -22 (4/0) [ 1523.782514][T10336] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1523.782592][T10336] dvb-usb: bulk message failed: -22 (5/0) [ 1523.782600][T10336] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1523.784012][T10336] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1523.871388][T10336] usb 1-1: USB disconnect, device number 100 [ 1524.183530][T10336] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1524.448117][ T5722] usb 3-1: USB disconnect, device number 104 [ 1525.451622][T16004] sctp: [Deprecated]: syz.2.2783 (pid 16004) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1525.451622][T16004] Use struct sctp_sack_info instead [ 1528.586129][ T98] block nbd3: Possible stuck request ffff888026e65080: control (read@0,4096B). Runtime 30 seconds [ 1528.986453][ T98] block nbd2: Possible stuck request ffff888026e35080: control (read@0,1024B). Runtime 60 seconds [ 1528.986487][ T98] block nbd2: Possible stuck request ffff888026e35240: control (read@1024,1024B). Runtime 60 seconds [ 1528.986505][ T98] block nbd2: Possible stuck request ffff888026e35400: control (read@2048,1024B). Runtime 60 seconds [ 1528.986522][ T98] block nbd2: Possible stuck request ffff888026e355c0: control (read@3072,1024B). Runtime 60 seconds [ 1529.421088][T15785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1529.421266][T15785] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.421429][T15785] bridge_slave_0: entered allmulticast mode [ 1529.449631][T15785] bridge_slave_0: entered promiscuous mode [ 1530.271454][T15785] bridge0: port 2(bridge_slave_1) entered blocking state [ 1530.271533][T15785] bridge0: port 2(bridge_slave_1) entered disabled state [ 1530.271676][T15785] bridge_slave_1: entered allmulticast mode [ 1530.312267][T15785] bridge_slave_1: entered promiscuous mode [ 1531.234578][T15785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1531.456164][ T5691] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1531.535306][T15785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1531.607197][ T5691] usb 3-1: Using ep0 maxpacket: 32 [ 1531.609678][ T5691] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1531.610660][ T5691] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1531.610692][ T5691] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1531.610709][ T5691] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1531.610722][ T5691] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1531.610738][ T5691] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1531.610758][ T5691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.695395][ T5691] usb 3-1: config 0 descriptor?? [ 1531.716147][T10333] usb 1-1: new low-speed USB device number 101 using dummy_hcd [ 1531.871659][T10333] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1531.871700][T10333] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 1531.872709][T10333] usb 1-1: config 100 has an invalid interface number: 173 but max is 0 [ 1531.872724][T10333] usb 1-1: config 100 has no interface number 0 [ 1531.872751][T10333] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 1531.872767][T10333] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1531.872793][T10333] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1531.872807][T10333] usb 1-1: config 100 interface 173 has no altsetting 0 [ 1531.910382][T10333] usb 1-1: string descriptor 0 read error: -22 [ 1531.910819][T10333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.003831][T16053] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1532.040077][T10333] metro_usb 1-1:100.173: Metrologic USB to Serial converter detected [ 1532.257494][T10333] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1532.260519][ T5691] corsair-psu 0003:1B1C:1C09.0037: unknown main item tag 0x0 [ 1532.260542][ T5691] corsair-psu 0003:1B1C:1C09.0037: unknown main item tag 0x0 [ 1532.260557][ T5691] corsair-psu 0003:1B1C:1C09.0037: unknown main item tag 0x0 [ 1532.260572][ T5691] corsair-psu 0003:1B1C:1C09.0037: unknown main item tag 0x0 [ 1532.260587][ T5691] corsair-psu 0003:1B1C:1C09.0037: unknown main item tag 0x0 [ 1532.344024][ T5691] corsair-psu 0003:1B1C:1C09.0037: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 1532.345652][T10333] usb 1-1: USB disconnect, device number 101 [ 1532.396390][ T5691] corsair-psu 0003:1B1C:1C09.0037: unable to initialize device (-38) [ 1532.504099][T10333] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1532.504619][T10333] metro_usb 1-1:100.173: device disconnected [ 1532.638608][ T5691] corsair-psu 0003:1B1C:1C09.0037: probe with driver corsair-psu failed with error -38 [ 1532.689132][ T5691] usb 3-1: USB disconnect, device number 105 [ 1532.759394][T16060] fido_id[16060]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1532.894560][T15785] team0: Port device team_slave_0 added [ 1532.946229][ T145] bridge_slave_1: left allmulticast mode [ 1532.946257][ T145] bridge_slave_1: left promiscuous mode [ 1532.946463][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1533.060416][ T145] bridge_slave_0: left allmulticast mode [ 1533.060442][ T145] bridge_slave_0: left promiscuous mode [ 1533.060641][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.166666][T16071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1533.167047][T16071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1533.241619][ T145] bridge_slave_1: left allmulticast mode [ 1533.241645][ T145] bridge_slave_1: left promiscuous mode [ 1533.241818][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1533.291808][ T145] bridge_slave_0: left allmulticast mode [ 1533.291835][ T145] bridge_slave_0: left promiscuous mode [ 1533.292007][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.421147][T16071] dvb-usb: bulk message failed: -22 (7/0) [ 1533.421163][T16071] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1533.421186][T16071] ttusb2: i2c transfer failed. [ 1534.356458][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1534.393939][T16101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1534.414003][T16101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1534.424692][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1534.488309][ T145] bond0 (unregistering): Released all slaves [ 1534.643402][ T5691] usb 5-1: USB disconnect, device number 96 [ 1534.972672][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1535.005614][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1535.018469][ T145] bond0 (unregistering): Released all slaves [ 1535.158800][T15785] team0: Port device team_slave_1 added [ 1535.216154][T10333] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1535.410921][T10333] usb 3-1: Using ep0 maxpacket: 32 [ 1535.435906][T10333] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1535.472554][T10333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.472575][T10333] usb 3-1: Product: syz [ 1535.472584][T10333] usb 3-1: Manufacturer: syz [ 1535.472592][T10333] usb 3-1: SerialNumber: syz [ 1535.525606][T15785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1535.525619][T15785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1535.525635][T15785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1535.560889][T10333] usb 3-1: config 0 descriptor?? [ 1535.670232][T10333] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1535.670300][T10333] dvb-usb: bulk message failed: -22 (4/0) [ 1535.670310][T10333] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1535.670393][T10333] dvb-usb: bulk message failed: -22 (5/0) [ 1535.670402][T10333] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1535.729877][T10333] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1535.732447][T10333] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1535.732485][T10333] usb 3-1: media controller created [ 1535.781263][T15785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1535.781277][T15785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1535.781294][T15785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1536.665514][T10333] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1537.078235][T10333] usb 3-1: selecting invalid altsetting 3 [ 1537.078253][T10333] ttusb2: set interface to alts=3 failed [ 1537.375922][T10333] DVB: Unable to find symbol tda10086_attach() [ 1537.375936][T10333] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1537.378948][T10333] dvb-usb: bulk message failed: -22 (4/0) [ 1537.378963][T10333] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1537.379036][T10333] dvb-usb: bulk message failed: -22 (5/0) [ 1537.379044][T10333] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1537.379083][T10333] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1537.495894][T10333] usb 3-1: USB disconnect, device number 106 [ 1541.393913][T10333] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1541.627507][T15785] hsr_slave_0: entered promiscuous mode [ 1541.628349][T15785] hsr_slave_1: entered promiscuous mode [ 1541.635722][T15785] debugfs: 'hsr0' already exists in 'hsr' [ 1541.635742][T15785] Cannot create hsr debugfs directory [ 1543.312799][T16144] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 1543.463192][T16153] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1543.653890][ T145] hsr_slave_0: left promiscuous mode [ 1543.672147][ T145] hsr_slave_1: left promiscuous mode [ 1543.672933][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1543.674542][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1543.726140][T10336] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1543.838169][ T145] team0 (unregistering): Port device team_slave_1 removed [ 1543.876902][T10336] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1543.877900][T10336] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1543.877920][T10336] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1543.878814][T10336] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1543.878830][T10336] usb 1-1: Manufacturer: syz [ 1543.941689][T10336] usb 1-1: config 0 descriptor?? [ 1543.970965][ T145] team0 (unregistering): Port device team_slave_0 removed [ 1544.812276][T10336] input: syz Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0038/input/input93 [ 1544.904425][T10336] input: syz Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0038/input/input94 [ 1544.948148][T10336] input: syz Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0038/input/input95 [ 1545.052257][T10336] input: syz Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0038/input/input96 [ 1545.214911][T10336] uclogic 0003:256C:006D.0038: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.0-1/input0 [ 1545.516444][T16174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2820'. [ 1546.230203][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.230251][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.387743][ T145] team0 (unregistering): Port device team_slave_1 removed [ 1546.423895][ T145] team0 (unregistering): Port device team_slave_0 removed [ 1546.503189][T10333] usb 1-1: reset high-speed USB device number 102 using dummy_hcd [ 1547.174065][T15847] bridge0: port 1(bridge_slave_0) entered blocking state [ 1547.174475][T15847] bridge0: port 1(bridge_slave_0) entered disabled state [ 1547.174877][T15847] bridge_slave_0: entered allmulticast mode [ 1547.205573][T15847] bridge_slave_0: entered promiscuous mode [ 1547.289812][ T5249] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1547.294744][T15847] bridge0: port 2(bridge_slave_1) entered blocking state [ 1547.295802][T15847] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.302214][T15847] bridge_slave_1: entered allmulticast mode [ 1547.339010][T15847] bridge_slave_1: entered promiscuous mode [ 1547.941665][T15847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1548.469483][T15847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1551.416564][ T5722] usb 1-1: USB disconnect, device number 102 [ 1551.927865][T15847] team0: Port device team_slave_0 added [ 1552.097664][T15847] team0: Port device team_slave_1 added [ 1552.518686][T16210] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 1552.736194][T15847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1552.736207][T15847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1552.736232][T15847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1552.749333][T15847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1552.749346][T15847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1552.749362][T15847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1553.475326][T15847] hsr_slave_0: entered promiscuous mode [ 1553.519605][T15847] hsr_slave_1: entered promiscuous mode [ 1553.520290][T15847] debugfs: 'hsr0' already exists in 'hsr' [ 1553.520308][T15847] Cannot create hsr debugfs directory [ 1554.879320][ T5691] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1557.811622][T12322] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1557.901708][T12322] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1557.918410][T12322] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1557.919117][T12322] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1557.919594][T12322] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1558.475674][T16246] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 1558.962781][T16259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2837'. [ 1559.127159][ T98] block nbd3: Possible stuck request ffff888026e65080: control (read@0,4096B). Runtime 60 seconds [ 1559.127249][T12939] block nbd2: Possible stuck request ffff888026e35080: control (read@0,1024B). Runtime 90 seconds [ 1559.127271][T12939] block nbd2: Possible stuck request ffff888026e35240: control (read@1024,1024B). Runtime 90 seconds [ 1559.127288][T12939] block nbd2: Possible stuck request ffff888026e35400: control (read@2048,1024B). Runtime 90 seconds [ 1559.127305][T12939] block nbd2: Possible stuck request ffff888026e355c0: control (read@3072,1024B). Runtime 90 seconds [ 1560.187673][T15854] Bluetooth: hci0: command tx timeout [ 1560.282422][ T5249] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1560.811567][ T5807] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1561.031167][ T5807] usb 5-1: Using ep0 maxpacket: 32 [ 1561.050032][ T5807] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1561.062615][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.062635][ T5807] usb 5-1: Product: syz [ 1561.062644][ T5807] usb 5-1: Manufacturer: syz [ 1561.062653][ T5807] usb 5-1: SerialNumber: syz [ 1561.070449][ T5807] usb 5-1: config 0 descriptor?? [ 1561.078333][ T5807] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1561.078398][ T5807] dvb-usb: bulk message failed: -22 (4/0) [ 1561.078408][ T5807] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1561.078482][ T5807] dvb-usb: bulk message failed: -22 (5/0) [ 1561.078490][ T5807] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1561.105700][ T5807] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1561.108472][ T5807] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1561.108508][ T5807] usb 5-1: media controller created [ 1561.180869][ T5807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1561.327482][ T5807] usb 5-1: selecting invalid altsetting 3 [ 1561.327498][ T5807] ttusb2: set interface to alts=3 failed [ 1562.246060][T15854] Bluetooth: hci0: command tx timeout [ 1562.337286][T16277] dvb-usb: bulk message failed: -22 (7/0) [ 1562.337302][T16277] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1562.337325][T16277] ttusb2: i2c transfer failed. [ 1562.568910][ T5807] DVB: Unable to find symbol tda10086_attach() [ 1562.568924][ T5807] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1562.571648][ T5807] dvb-usb: bulk message failed: -22 (4/0) [ 1562.571663][ T5807] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1562.571736][ T5807] dvb-usb: bulk message failed: -22 (5/0) [ 1562.571744][ T5807] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1562.571782][ T5807] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1562.576471][ T5807] usb 5-1: USB disconnect, device number 97 [ 1563.124498][ T5807] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1563.681126][T15854] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1563.735395][T15854] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1563.751244][T15854] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1563.752042][T15854] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1563.755341][T15854] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1564.307011][T15854] Bluetooth: hci0: command tx timeout [ 1564.734692][ T145] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.036300][ T5807] usb 1-1: new low-speed USB device number 103 using dummy_hcd [ 1565.190502][ T5807] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1565.190543][ T5807] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 1565.191609][ T5807] usb 1-1: config 100 has an invalid interface number: 173 but max is 0 [ 1565.191626][ T5807] usb 1-1: config 100 has no interface number 0 [ 1565.191653][ T5807] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 1565.191667][ T5807] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1565.191684][ T5807] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1565.191698][ T5807] usb 1-1: config 100 interface 173 has no altsetting 0 [ 1565.226149][T10336] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1565.299883][ T5807] usb 1-1: string descriptor 0 read error: -22 [ 1565.299976][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.329691][T16303] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1565.354556][ T5807] metro_usb 1-1:100.173: Metrologic USB to Serial converter detected [ 1565.356221][T10336] usb 5-1: device descriptor read/64, error -71 [ 1565.421989][ T5807] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1565.631225][T10336] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1565.691304][T16303] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90 [ 1565.780474][T10336] usb 5-1: device descriptor read/64, error -71 [ 1565.886524][T10336] usb usb5-port1: attempt power cycle [ 1565.986176][T15854] Bluetooth: hci6: command tx timeout [ 1566.012151][ T5807] usb 1-1: USB disconnect, device number 103 [ 1566.024880][ T5807] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1566.025382][ T5807] metro_usb 1-1:100.173: device disconnected [ 1566.226092][T10336] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1566.246705][T10336] usb 5-1: device descriptor read/8, error -71 [ 1566.387630][T15854] Bluetooth: hci0: command tx timeout [ 1566.488943][T10336] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1566.506609][T10336] usb 5-1: device descriptor read/8, error -71 [ 1566.588602][T16316] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 1566.618132][T10336] usb usb5-port1: unable to enumerate USB device [ 1567.291442][ T145] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.072707][T15854] Bluetooth: hci6: command tx timeout [ 1568.213597][T16342] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 1568.440006][ T5249] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1569.452304][ T145] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.146147][T15854] Bluetooth: hci6: command tx timeout [ 1570.436438][T16294] lo speed is unknown, defaulting to 1000 [ 1570.556169][ T5691] usb 3-1: new low-speed USB device number 107 using dummy_hcd [ 1570.710526][ T5691] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1570.710566][ T5691] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 1570.712546][ T5691] usb 3-1: config 100 has an invalid interface number: 173 but max is 0 [ 1570.712564][ T5691] usb 3-1: config 100 has no interface number 0 [ 1570.712593][ T5691] usb 3-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 1570.712608][ T5691] usb 3-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 1160, setting to 8 [ 1570.712624][ T5691] usb 3-1: config 100 interface 173 has no altsetting 0 [ 1570.789120][ T5691] usb 3-1: string descriptor 0 read error: -22 [ 1570.789211][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.852484][T16366] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1571.006692][ T5691] metro_usb 3-1:100.173: required endpoints missing [ 1571.152798][ T5691] usb 3-1: USB disconnect, device number 107 [ 1571.362061][ T145] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.956522][T16242] lo speed is unknown, defaulting to 1000 [ 1572.226095][T15854] Bluetooth: hci6: command tx timeout [ 1573.288644][T16396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2867'. [ 1573.581384][T16393] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 1574.680237][ T5722] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1575.186208][ T5722] usb 1-1: Using ep0 maxpacket: 32 [ 1575.186962][ T5722] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1575.190325][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.190341][ T5722] usb 1-1: Product: syz [ 1575.190351][ T5722] usb 1-1: Manufacturer: syz [ 1575.190359][ T5722] usb 1-1: SerialNumber: syz [ 1575.338249][ T5722] usb 1-1: config 0 descriptor?? [ 1575.356998][ T5722] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1575.357064][ T5722] dvb-usb: bulk message failed: -22 (4/0) [ 1575.357075][ T5722] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1575.357147][ T5722] dvb-usb: bulk message failed: -22 (5/0) [ 1575.357156][ T5722] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1576.559396][ T5722] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1576.559939][ T5722] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1576.559983][ T5722] usb 1-1: media controller created [ 1576.662461][ T5722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1576.821050][ T5722] usb 1-1: selecting invalid altsetting 3 [ 1576.821066][ T5722] ttusb2: set interface to alts=3 failed [ 1576.879875][T16423] Bluetooth: MGMT ver 1.23 [ 1576.985672][ T5722] DVB: Unable to find symbol tda10086_attach() [ 1576.985684][ T5722] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1577.024643][ T5722] dvb-usb: bulk message failed: -22 (4/0) [ 1577.024658][ T5722] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1577.024731][ T5722] dvb-usb: bulk message failed: -22 (5/0) [ 1577.024739][ T5722] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1577.024777][ T5722] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1577.128423][ T5722] usb 1-1: USB disconnect, device number 104 [ 1577.291064][ T5722] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1577.405474][ T5249] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1577.546146][ T5807] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1577.796074][ T5807] usb 5-1: Using ep0 maxpacket: 32 [ 1577.796753][ T5807] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1577.799429][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.799446][ T5807] usb 5-1: Product: syz [ 1577.799455][ T5807] usb 5-1: Manufacturer: syz [ 1577.799463][ T5807] usb 5-1: SerialNumber: syz [ 1577.802740][ T5807] usb 5-1: config 0 descriptor?? [ 1578.810495][ T5807] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1578.810563][ T5807] dvb-usb: bulk message failed: -22 (4/0) [ 1578.810573][ T5807] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1578.810647][ T5807] dvb-usb: bulk message failed: -22 (5/0) [ 1578.810655][ T5807] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1579.210199][ T5807] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1579.210785][ T5807] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1579.210820][ T5807] usb 5-1: media controller created [ 1579.304400][ T5807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1579.382555][ T5807] usb 5-1: selecting invalid altsetting 3 [ 1579.382571][ T5807] ttusb2: set interface to alts=3 failed [ 1580.449346][ T5807] DVB: Unable to find symbol tda10086_attach() [ 1580.449360][ T5807] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1582.869307][ T5807] dvb-usb: bulk message failed: -22 (4/0) [ 1582.869325][ T5807] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1582.869397][ T5807] dvb-usb: bulk message failed: -22 (5/0) [ 1582.869406][ T5807] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1582.869445][ T5807] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1582.917267][ T5807] usb 5-1: USB disconnect, device number 102 [ 1583.294507][ T5807] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1583.369603][T15532] udevd[15532]: setting mode of /dev/bus/usb/005/102 to 020664 failed: No such file or directory [ 1583.369724][T15532] udevd[15532]: setting owner of /dev/bus/usb/005/102 to uid=0, gid=0 failed: No such file or directory [ 1583.728559][T16449] ieee802154 phy0 wpan0: encryption failed: -22 [ 1583.730445][ T145] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 1583.730471][ T145] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 1583.730666][ T145] bridge0: port 3(wlan1) entered disabled state [ 1583.732625][ T145] bridge_slave_1: left allmulticast mode [ 1583.806686][ T145] bridge_slave_1: left promiscuous mode [ 1583.806933][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.809375][ T145] bridge_slave_0: left allmulticast mode [ 1583.809397][ T145] bridge_slave_0: left promiscuous mode [ 1583.809535][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.862258][T16450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2875'. [ 1584.606119][T16457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2878'. [ 1585.166064][T10333] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1585.212856][T16461] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 1585.403695][T10333] usb 5-1: Using ep0 maxpacket: 16 [ 1585.406734][T10333] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1585.407882][T10333] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 1585.407898][T10333] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1585.407911][T10333] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1585.407922][T10333] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1585.407934][T10333] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1585.407945][T10333] usb 5-1: config 0 has no interface number 0 [ 1585.407980][T10333] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1585.407997][T10333] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1585.408010][T10333] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1585.408030][T10333] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1585.408046][T10333] usb 5-1: config 0 interface 125 has no altsetting 0 [ 1585.408057][T10333] usb 5-1: config 0 interface 125 has no altsetting 2 [ 1585.414236][T10333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.414254][T10333] usb 5-1: Product: syz [ 1585.414262][T10333] usb 5-1: Manufacturer: syz [ 1585.414271][T10333] usb 5-1: SerialNumber: syz [ 1585.425621][T10333] usb 5-1: config 0 descriptor?? [ 1585.429568][T10333] usb 5-1: selecting invalid altsetting 2 [ 1586.377461][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1586.421464][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1586.467042][T10333] get_1284_register timeout [ 1586.540621][ C0] usb 5-1: async_complete: urb error -104 [ 1586.552854][ C0] usb 5-1: async_complete: urb error -104 [ 1586.552916][ C0] usb 5-1: async_complete: urb error -104 [ 1586.553080][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 1586.591907][ T145] bond0 (unregistering): Released all slaves [ 1587.610565][T10333] usb 5-1: USB disconnect, device number 103 [ 1590.577308][ T98] block nbd2: Possible stuck request ffff888026e35080: control (read@0,1024B). Runtime 120 seconds [ 1590.577342][ T98] block nbd2: Possible stuck request ffff888026e35240: control (read@1024,1024B). Runtime 120 seconds [ 1590.577360][ T98] block nbd2: Possible stuck request ffff888026e35400: control (read@2048,1024B). Runtime 120 seconds [ 1590.577378][ T98] block nbd2: Possible stuck request ffff888026e355c0: control (read@3072,1024B). Runtime 120 seconds [ 1590.598773][T12939] block nbd3: Possible stuck request ffff888026e65080: control (read@0,4096B). Runtime 90 seconds [ 1591.264322][T10336] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 1591.388171][T10333] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1591.416881][T10336] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 1591.417802][T10336] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1591.417843][T10336] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1591.417857][T10336] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1591.417882][T10336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.542663][T10333] usb 3-1: Using ep0 maxpacket: 16 [ 1591.543805][T10333] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1591.544745][T10333] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 1591.544770][T10333] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1591.544782][T10333] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1591.544795][T10333] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1591.544807][T10333] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1591.544819][T10333] usb 3-1: config 0 has no interface number 0 [ 1591.544848][T10333] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1591.544865][T10333] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1591.544879][T10333] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1591.544899][T10333] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1591.544916][T10333] usb 3-1: config 0 interface 125 has no altsetting 0 [ 1591.544927][T10333] usb 3-1: config 0 interface 125 has no altsetting 2 [ 1591.614518][T10333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.614537][T10333] usb 3-1: Product: syz [ 1591.614546][T10333] usb 3-1: Manufacturer: syz [ 1591.614555][T10333] usb 3-1: SerialNumber: syz [ 1591.728558][T10333] usb 3-1: config 0 descriptor?? [ 1591.948182][T10336] dvb_ttusb_budget: ttusb_init_controller: error [ 1591.948197][T10336] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1591.959488][T10333] usb 3-1: selecting invalid altsetting 2 [ 1592.543068][T10336] DVB: Unable to find symbol stv0299_attach() [ 1592.781673][T10336] DVB: Unable to find symbol tda8083_attach() [ 1592.781685][T10336] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1592.840653][T10336] usb 5-1: USB disconnect, device number 104 [ 1593.040574][T10333] get_1284_register timeout [ 1593.040715][ C0] usb 3-1: async_complete: urb error -104 [ 1593.040782][ C0] usb 3-1: async_complete: urb error -104 [ 1593.040833][ C0] usb 3-1: async_complete: urb error -104 [ 1593.120846][T16504] ======================================================= [ 1593.120846][T16504] WARNING: The mand mount option has been deprecated and [ 1593.120846][T16504] and is ignored by this kernel. Remove the mand [ 1593.120846][T16504] option from the mount to silence this warning. [ 1593.120846][T16504] ======================================================= [ 1593.121029][T16504] 9p: Bad value for 'wfdno' [ 1593.331689][T10333] usb 3-1: USB disconnect, device number 108 [ 1594.838739][ T5249] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1597.833107][ T4953] udevd[4953]: worker [15075] /devices/virtual/block/nbd2 is taking a long time [ 1597.833146][ T4953] udevd[4953]: worker [15076] /devices/virtual/block/nbd3 is taking a long time [ 1601.510508][T16294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1601.510770][T16294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1601.510913][T16294] bridge_slave_0: entered allmulticast mode [ 1601.622912][T16294] bridge_slave_0: entered promiscuous mode [ 1601.768247][T16544] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 1601.892068][T16294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1601.892146][T16294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1601.892287][T16294] bridge_slave_1: entered allmulticast mode [ 1601.898450][T16294] bridge_slave_1: entered promiscuous mode [ 1602.310339][T16552] 9p: Bad value for 'wfdno' [ 1602.530635][ T145] hsr_slave_0: left promiscuous mode [ 1602.544072][ T145] hsr_slave_1: left promiscuous mode [ 1602.544889][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1602.544907][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1602.577084][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1604.899676][ T145] veth1_macvtap: left promiscuous mode [ 1604.899751][ T145] veth0_macvtap: left promiscuous mode [ 1604.899906][ T145] veth1_vlan: left promiscuous mode [ 1604.910988][ T145] veth0_vlan: left promiscuous mode [ 1606.090817][ T145] team0 (unregistering): Port device team_slave_1 removed [ 1606.113105][ T145] team0 (unregistering): Port device team_slave_0 removed [ 1606.331708][T16242] bridge0: port 1(bridge_slave_0) entered blocking state [ 1606.331834][T16242] bridge0: port 1(bridge_slave_0) entered disabled state [ 1606.332072][T16242] bridge_slave_0: entered allmulticast mode [ 1606.367599][T16242] bridge_slave_0: entered promiscuous mode [ 1606.452415][ T9582] smc: removing ib device syz1 [ 1606.518948][T16294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1606.830605][T16242] bridge0: port 2(bridge_slave_1) entered blocking state [ 1606.830681][T16242] bridge0: port 2(bridge_slave_1) entered disabled state [ 1606.830810][T16242] bridge_slave_1: entered allmulticast mode [ 1606.831952][T10333] lo speed is unknown, defaulting to 1000 [ 1606.831967][T10333] syz1: Port: 1 Link DOWN [ 1606.831988][T10333] rtrs_client L3170: Handling event: port error (10). HCA name: syz1, port num: 1 [ 1606.832550][T16242] bridge_slave_1: entered promiscuous mode [ 1606.895481][T16294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1607.046728][ T5807] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1607.181550][ T5807] usb 1-1: device descriptor read/64, error -71 [ 1607.219902][T16573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2910'. [ 1607.416993][ T5807] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1607.486291][T10336] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1607.548658][ T5807] usb 1-1: device descriptor read/64, error -71 [ 1607.613905][T16242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1607.636087][T10336] usb 5-1: Using ep0 maxpacket: 32 [ 1607.636730][T10336] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1607.637735][T10336] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1607.637752][T10336] usb 5-1: config 0 has no interface number 0 [ 1607.639713][T10336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.639729][T10336] usb 5-1: Product: syz [ 1607.639738][T10336] usb 5-1: Manufacturer: syz [ 1607.639747][T10336] usb 5-1: SerialNumber: syz [ 1607.643223][T10336] usb 5-1: config 0 descriptor?? [ 1607.660139][ T5807] usb usb1-port1: attempt power cycle [ 1607.692764][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.692810][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.975475][T16242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1608.006775][ T5807] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1608.031215][ T5807] usb 1-1: device descriptor read/8, error -71 [ 1608.119889][T16294] team0: Port device team_slave_0 added [ 1608.138292][T10336] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1608.138314][T10336] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1608.266340][ T5807] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1608.342495][T10336] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1608.342696][T10336] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 1608.356618][ T5807] usb 1-1: device descriptor read/8, error -71 [ 1608.511535][ T5807] usb usb1-port1: unable to enumerate USB device [ 1608.694626][T16294] team0: Port device team_slave_1 added [ 1609.024659][ T9582] smbdirect: ib_dev[syz1] removed [ 1609.051283][T16242] team0: Port device team_slave_0 added [ 1609.176814][ T9582] ------------[ cut here ]------------ [ 1609.176826][ T9582] cq->cqe_used [ 1609.176832][ T9582] WARNING: drivers/infiniband/core/cq.c:370 at ib_cq_pool_cleanup+0x1b9/0x5c0, CPU#0: kworker/u8:17/9582 [ 1609.176955][ T9582] Modules linked in: [ 1609.176968][ T9582] CPU: 0 UID: 0 PID: 9582 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1609.176983][ T9582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1609.176992][ T9582] Workqueue: ib-unreg-wq ib_unregister_work [ 1609.177028][ T9582] RIP: 0010:ib_cq_pool_cleanup+0x1b9/0x5c0 [ 1609.177046][ T9582] Code: 34 24 4c 8b 7c 24 08 4d 39 f7 74 58 e8 a0 ee 85 f9 e9 c3 fe ff ff e8 96 ee 85 f9 41 80 3c 1e 00 75 8e eb 94 e8 88 ee 85 f9 90 <0f> 0b 90 e9 f6 fe ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c cb [ 1609.177057][ T9582] RSP: 0018:ffffc90004c6f948 EFLAGS: 00010293 [ 1609.177068][ T9582] RAX: ffffffff883ffd48 RBX: dffffc0000000000 RCX: ffff888033091f40 [ 1609.177078][ T9582] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1609.177086][ T9582] RBP: 0000000000000804 R08: 0000000000000000 R09: 0000000000000000 [ 1609.177094][ T9582] R10: dffffc0000000000 R11: fffffbfff1e640e4 R12: ffff88802b48a02c [ 1609.177103][ T9582] R13: dead000000000100 R14: 1ffff11005691408 R15: ffff88802b48a040 [ 1609.177126][ T9582] FS: 0000000000000000(0000) GS:ffff888125beb000(0000) knlGS:0000000000000000 [ 1609.177138][ T9582] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1609.177146][ T9582] CR2: 000055eb287ee950 CR3: 00000000678c6000 CR4: 00000000003526f0 [ 1609.177175][ T9582] Call Trace: [ 1609.177182][ T9582] [ 1609.177193][ T9582] disable_device+0x15d/0x330 [ 1609.177210][ T9582] ? __pfx_disable_device+0x10/0x10 [ 1609.177228][ T9582] ? mutex_lock_nested+0x152/0x1d0 [ 1609.177247][ T9582] ? __ib_unregister_device+0x279/0x400 [ 1609.177261][ T9582] ? process_scheduled_works+0x97a/0x1630 [ 1609.177290][ T9582] __ib_unregister_device+0x2c9/0x400 [ 1609.177305][ T9582] ? rcu_is_watching+0x16/0xb0 [ 1609.177322][ T9582] ? process_scheduled_works+0x97a/0x1630 [ 1609.177338][ T9582] ib_unregister_work+0x19/0x30 [ 1609.177356][ T9582] process_scheduled_works+0xc3d/0x1630 [ 1609.177388][ T9582] ? __pfx_process_scheduled_works+0x10/0x10 [ 1609.177406][ T9582] ? assign_work+0x3cf/0x5d0 [ 1609.177424][ T9582] worker_thread+0xa47/0xfb0 [ 1609.177446][ T9582] ? __kthread_parkme+0x71/0x1f0 [ 1609.177467][ T9582] kthread+0x38b/0x470 [ 1609.177486][ T9582] ? __pfx_worker_thread+0x10/0x10 [ 1609.177500][ T9582] ? __pfx_kthread+0x10/0x10 [ 1609.177519][ T9582] ret_from_fork+0x514/0xb70 [ 1609.177540][ T9582] ? __pfx_ret_from_fork+0x10/0x10 [ 1609.177558][ T9582] ? __switch_to+0xc89/0x1420 [ 1609.177584][ T9582] ? __pfx_kthread+0x10/0x10 [ 1609.177603][ T9582] ret_from_fork_asm+0x1a/0x30 [ 1609.177625][ T9582] [ 1609.177633][ T9582] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1609.177642][ T9582] CPU: 0 UID: 0 PID: 9582 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1609.177657][ T9582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1609.177665][ T9582] Workqueue: ib-unreg-wq ib_unregister_work [ 1609.177684][ T9582] Call Trace: [ 1609.177689][ T9582] [ 1609.177694][ T9582] vpanic+0x56d/0xa60 [ 1609.177708][ T9582] ? __pfx__printk+0x10/0x10 [ 1609.177721][ T9582] ? __pfx_vpanic+0x10/0x10 [ 1609.177739][ T9582] ? is_bpf_text_address+0x292/0x2b0 [ 1609.177763][ T9582] ? is_bpf_text_address+0x26/0x2b0 [ 1609.177784][ T9582] panic+0xc5/0xd0 [ 1609.177801][ T9582] ? __pfx_panic+0x10/0x10 [ 1609.177824][ T9582] ? ret_from_fork_asm+0x1a/0x30 [ 1609.177839][ T9582] __warn+0x315/0x4c0 [ 1609.177850][ T9582] ? ib_cq_pool_cleanup+0x1b9/0x5c0 [ 1609.177866][ T9582] ? ib_cq_pool_cleanup+0x1b9/0x5c0 [ 1609.177881][ T9582] __report_bug+0x276/0x570 [ 1609.177925][ T9582] ? ib_cq_pool_cleanup+0x1b9/0x5c0 [ 1609.177942][ T9582] ? __pfx___report_bug+0x10/0x10 [ 1609.177957][ T9582] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1609.177978][ T9582] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1609.177998][ T9582] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 1609.178017][ T9582] ? ib_cq_pool_cleanup+0x1b9/0x5c0 [ 1609.178032][ T9582] report_bug+0x16b/0x220 [ 1609.178045][ T9582] ? ib_cq_pool_cleanup+0x1b9/0x5c0 [ 1609.178059][ T9582] ? ib_cq_pool_cleanup+0x1bb/0x5c0 [ 1609.178073][ T9582] handle_bug+0x9c/0x200 [ 1609.178088][ T9582] exc_invalid_op+0x1a/0x50 [ 1609.178103][ T9582] asm_exc_invalid_op+0x1a/0x20 [ 1609.178118][ T9582] RIP: 0010:ib_cq_pool_cleanup+0x1b9/0x5c0 [ 1609.178134][ T9582] Code: 34 24 4c 8b 7c 24 08 4d 39 f7 74 58 e8 a0 ee 85 f9 e9 c3 fe ff ff e8 96 ee 85 f9 41 80 3c 1e 00 75 8e eb 94 e8 88 ee 85 f9 90 <0f> 0b 90 e9 f6 fe ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c cb [ 1609.178144][ T9582] RSP: 0018:ffffc90004c6f948 EFLAGS: 00010293 [ 1609.178155][ T9582] RAX: ffffffff883ffd48 RBX: dffffc0000000000 RCX: ffff888033091f40 [ 1609.178165][ T9582] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1609.178172][ T9582] RBP: 0000000000000804 R08: 0000000000000000 R09: 0000000000000000 [ 1609.178180][ T9582] R10: dffffc0000000000 R11: fffffbfff1e640e4 R12: ffff88802b48a02c [ 1609.178189][ T9582] R13: dead000000000100 R14: 1ffff11005691408 R15: ffff88802b48a040 [ 1609.178203][ T9582] ? ib_cq_pool_cleanup+0x1b8/0x5c0 [ 1609.178222][ T9582] ? ib_cq_pool_cleanup+0x1b8/0x5c0 [ 1609.178240][ T9582] disable_device+0x15d/0x330 [ 1609.178255][ T9582] ? __pfx_disable_device+0x10/0x10 [ 1609.178272][ T9582] ? mutex_lock_nested+0x152/0x1d0 [ 1609.178287][ T9582] ? __ib_unregister_device+0x279/0x400 [ 1609.178300][ T9582] ? process_scheduled_works+0x97a/0x1630 [ 1609.178316][ T9582] __ib_unregister_device+0x2c9/0x400 [ 1609.178331][ T9582] ? rcu_is_watching+0x16/0xb0 [ 1609.178347][ T9582] ? process_scheduled_works+0x97a/0x1630 [ 1609.178362][ T9582] ib_unregister_work+0x19/0x30 [ 1609.178381][ T9582] process_scheduled_works+0xc3d/0x1630 [ 1609.178411][ T9582] ? __pfx_process_scheduled_works+0x10/0x10 [ 1609.178430][ T9582] ? assign_work+0x3cf/0x5d0 [ 1609.178447][ T9582] worker_thread+0xa47/0xfb0 [ 1609.178470][ T9582] ? __kthread_parkme+0x71/0x1f0 [ 1609.178491][ T9582] kthread+0x38b/0x470 [ 1609.178509][ T9582] ? __pfx_worker_thread+0x10/0x10 [ 1609.178523][ T9582] ? __pfx_kthread+0x10/0x10 [ 1609.178542][ T9582] ret_from_fork+0x514/0xb70 [ 1609.178561][ T9582] ? __pfx_ret_from_fork+0x10/0x10 [ 1609.178586][ T9582] ? __switch_to+0xc89/0x1420 [ 1609.178603][ T9582] ? __pfx_kthread+0x10/0x10 [ 1609.178622][ T9582] ret_from_fork_asm+0x1a/0x30 [ 1609.178643][ T9582] [ 1609.178702][ T9582] Kernel Offset: disabled