last executing test programs: 2.270391649s ago: executing program 0 (id=1): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040da0b528100000102030109022700010100a0fa0904000003ff000000070581020002000705020200020007058303400008"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x5, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x5, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x5, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x5, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x5, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x5, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x5, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x5, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x5, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x5, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x5, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x5, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x5, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x5, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x5, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x5, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x5, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x5, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x5, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x5, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000700)={&(0x7f0000000600), 0x10, &(0x7f0000000800)={&(0x7f0000000900)=@setlink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3}, [@IFLA_ADDRESS={0xa, 0x1, @random="001122334455"}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000a00)={&(0x7f0000000600), 0x10, &(0x7f0000000b00)={&(0x7f0000000c00)=@setlink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}, [@IFLA_ADDRESS={0xa, 0x1, @random="001122334455"}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000d00)={&(0x7f0000000600), 0x10, &(0x7f0000000e00)={&(0x7f0000000f00)=@setlink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x5}, [@IFLA_ADDRESS={0xa, 0x1, @random="001122334455"}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000001000)={&(0x7f0000000600), 0x10, &(0x7f0000001100)={&(0x7f0000001200)=@setlink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x1, @random="001122334455"}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000001300)={&(0x7f0000000600), 0x10, &(0x7f0000001400)={&(0x7f0000001500)=@setlink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x7}, [@IFLA_ADDRESS={0xa, 0x1, @random="001122334455"}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000001600)={&(0x7f0000000600), 0x10, &(0x7f0000001700)={&(0x7f0000001800)=@setlink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x8}, [@IFLA_ADDRESS={0xa, 0x1, @random="001122334455"}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000001900)={&(0x7f0000000600), 0x10, &(0x7f0000001a00)={&(0x7f0000001b00)=@setlink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x9}, [@IFLA_ADDRESS={0xa, 0x1, @random="001122334455"}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000001c00)={&(0x7f0000000600), 0x10, &(0x7f0000001d00)={&(0x7f0000001e00)=@setlink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x10}, [@IFLA_ADDRESS={0xa, 0x1, @random="001122334455"}]}, 0x2c}}, 0x0) 2.184822482s ago: executing program 1 (id=2): r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/ttyGS0\x00', 0x2, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) 2.175137783s ago: executing program 3 (id=4): r0 = syz_usb_connect(0x3, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010102030109023c0001010080fa0904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.15058572s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='none\x00', &(0x7f0000000800)='./proc\x00', &(0x7f0000000900)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/self/fail-nth\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\x00', 0x1) write(r1, &(0x7f0000000500)='isp1301 0x2c\n\x00', 0xd) write(r0, &(0x7f0000000100)='2\x00', 0x1) write(r1, &(0x7f0000000500)='isp1301 0x2d\n\x00', 0xd) write(r0, &(0x7f0000000100)='3\x00', 0x1) write(r1, &(0x7f0000000500)='isp1301 0x2e\n\x00', 0xd) write(r0, &(0x7f0000000100)='4\x00', 0x1) write(r1, &(0x7f0000000500)='isp1301 0x2f\n\x00', 0xd) write(r0, &(0x7f0000000100)='5\x00', 0x1) write(r1, &(0x7f0000000500)='isp1301 0x30\n\x00', 0xd) write(r0, &(0x7f0000000100)='6\x00', 0x1) write(r1, &(0x7f0000000500)='isp1301 0x31\n\x00', 0xd) write(r1, &(0x7f0000000500)='isp1301 0x32\n\x00', 0xd) write(r1, &(0x7f0000000500)='isp1301 0x33\n\x00', 0xd) 2.092567487s ago: executing program 1 (id=6): r0 = syz_usb_connect(0x0, 0x3e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x17e0, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a, 0x3, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, [@hid_hid={0x9, 0x21, 0x100, 0x0, 0x1, {0x22, 0x1d}}], [{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1}}]}}, {{0x9, 0x4, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [@hid_hid={0x9, 0x21, 0x100, 0x0, 0x1, {0x22, 0x1d}}], [{{0x9, 0x5, 0x82, 0x3, 0x8, 0x1}}]}}, {{0x9, 0x4, 0x2, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [@hid_hid={0x9, 0x21, 0x100, 0x0, 0x1, {0x22, 0x1d}}], [{{0x9, 0x5, 0x83, 0x3, 0x20, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x9, '\r'}, @global=@item_012={0x2, 0x1, 0x0, "05"}, @main=@item_4={0x3, 0x0, 0x1, ']\x00'}, @global=@item_012={0x2, 0x1, 0x9, "01"}, @main=@item_4={0x3, 0x0, 0x1, "0200"}, @local=@item_012={0x2, 0x1, 0x9, "01"}, @main=@item_4={0x3, 0x0, 0x8, "0100"}]}}, 0x0}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x83, 0x1c, &(0x7f0000000400)="5d080000000100"/28) 1.67655933s ago: executing program 0 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='disk', 0x4) 1.651477485s ago: executing program 3 (id=8): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="120100020000402505a1a4400102030109025c02010000000904000001020d00000524060001052400000d240f010000000006241a000009058103000200000904010000020d00000904010102020d000009058202000200000905020200020000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/usb0/cdc_ncm/min_tx_pkt\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='10\n\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/wwan0/cdc_ncm/min_tx_pkt\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='10\n\x00', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/net/eth0/cdc_ncm/min_tx_pkt\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='10\n\x00', 0x3) 1.524006291s ago: executing program 4 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='tcp\n\x00', 0x4) 1.477069573s ago: executing program 1 (id=10): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x242, 0x1b6) pwrite64(r0, &(0x7f0000000080)="0000000000000000010000000000000001000000533153555350454e4400533153555350454e4400", 0x28, 0xfd8) pwrite64(r0, &(0x7f00000000c0)='\x00', 0x1, 0x1fff) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/power/resume\x00', 0x1, 0x0) write(r2, &(0x7f0000000000)='7:0\n\x00', 0x4) 1.47671736s ago: executing program 4 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='none\x00', &(0x7f0000000800)='./proc\x00', &(0x7f0000000900)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/self/fail-nth\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\x00', 0x1) write(r1, &(0x7f0000000500)='isp1301 0x2c\n\x00', 0xd) write(r0, &(0x7f0000000100)='2\x00', 0x1) write(r1, &(0x7f0000000500)='isp1301 0x2d\n\x00', 0xd) write(r0, &(0x7f0000000100)='3\x00', 0x1) write(r1, &(0x7f0000000500)='isp1301 0x2e\n\x00', 0xd) write(r0, &(0x7f0000000100)='4\x00', 0x1) write(r1, &(0x7f0000000500)='isp1301 0x2f\n\x00', 0xd) write(r0, &(0x7f0000000100)='5\x00', 0x1) write(r1, &(0x7f0000000500)='isp1301 0x30\n\x00', 0xd) write(r0, &(0x7f0000000100)='6\x00', 0x1) write(r1, &(0x7f0000000500)='isp1301 0x31\n\x00', 0xd) write(r1, &(0x7f0000000500)='isp1301 0x32\n\x00', 0xd) write(r0, &(0x7f0000000100)='8\x00', 0x1) write(r1, &(0x7f0000000500)='isp1301 0x33\n\x00', 0xd) 1.278415557s ago: executing program 2 (id=12): r0 = syz_usb_connect(0x0, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205a258000000000001090223000201008032080b000200000000090400000000000000090401000000000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x2}, 0x0) 642.855235ms ago: executing program 4 (id=13): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000500), 0xc, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_newroute={0x0, 0x18, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x4, 0x0, 0x1}, [@RTA_GATEWAY={0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0xa}}, @RTA_OIF={0x0, 0x4, 0x1}, @RTA_PRIORITY={0x0, 0x6, 0x64}]}}}, 0x0) 583.18072ms ago: executing program 4 (id=14): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000280)) r2 = syz_open_pts(r1, 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xe) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000400)=0x1) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000440)) 565.37026ms ago: executing program 4 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000002c0)='usb_gadget/g1\x00', 0x0) r1 = openat(r0, &(0x7f0000000300)='usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0x1d6b\n\x00', 0x7) close(r1) r2 = openat(r0, &(0x7f0000000380)='usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='0x0104\n\x00', 0x7) mkdirat(r0, &(0x7f0000000480)='usb_gadget/g1/functions/acm.usb0\x00', 0x0) mkdirat(r0, &(0x7f00000004c0)='usb_gadget/g1/configs/c.1\x00', 0x0) close(0xffffffffffffffff) nanosleep(&(0x7f0000000600)={0x0, 0x11e1a300}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/class/udc/dummy_udc.0/soft_connect\x00', 0x1, 0x0) write(r3, &(0x7f00000006c0)='disconnect\n\x00', 0xb) 247.997752ms ago: executing program 4 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/gspca_m5602/parameters/force_sensor\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)='6', 0x1) r1 = syz_usb_connect(0x3, 0x2b, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040020402560001000000010902190001010080320904000001ffffff0007058101000201"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000400), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000500)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r2, 0xc050560f, &(0x7f0000000600)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0xffffffff}) ioctl$VIDIOC_QBUF(r2, 0xc050560f, &(0x7f0000000700)=@mmap={0x1, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0xffffffff}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000800)=0x1) r3 = syz_open_dev$video(&(0x7f0000000400), 0x2, 0x2) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000500)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r3, 0xc050560f, &(0x7f0000000600)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0xffffffff}) ioctl$VIDIOC_QBUF(r3, 0xc050560f, &(0x7f0000000700)=@mmap={0x1, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0xffffffff}) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000800)=0x1) 87.170561ms ago: executing program 3 (id=17): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d4, &(0x7f00000004c0)="$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") chdir(&(0x7f0000000000)='.\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) 86.112586ms ago: executing program 3 (id=18): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={&(0x7f0000000200), 0x10, &(0x7f0000000100)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) 37.007653ms ago: executing program 3 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000340)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./export\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='nfsd 127.0.0.1 2147483647 client1\n\x00', 0x22) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000480)="636c69656e7431203120000000012032313437343833363437202e2f6578706f72740a00", 0x24) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='client1 ./export 2147483647 139264 65534 65534 1\n\x00', 0x31) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000580)='tcp 2049\n\x00', 0x9) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='2\n\x00', 0x2) close(r4) r5 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000800)='127.0.0.1:./export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='4.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='clientaddr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=20): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x43, 0x3, 0x4d8, 0xc002, 0x0, 0x0, "05010900a10185110901150026ff0075089502810285210902150026ff0075089501810285910904150026ff0075089501910285920903150026ff00750895019102c0"}}, 0x15b) nanosleep(&(0x7f0000000200)={0x0, 0xbebc200}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.190' (ED25519) to the list of known hosts. [ 29.373375][ T4699] cgroup: Unknown subsys name 'net' [ 29.514312][ T4699] cgroup: Unknown subsys name 'cpuset' [ 29.516414][ T4699] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.672998][ T4699] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 31.185097][ T4724] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 31.185692][ T4724] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 31.185827][ T4724] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 31.186152][ T4724] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 31.186464][ T4724] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 31.186665][ T4724] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 31.187254][ T4724] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 31.187413][ T4724] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 31.187805][ T4724] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 31.188044][ T4724] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 31.188423][ T4724] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 31.188896][ T4724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 31.189111][ T4724] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 31.189303][ T4724] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 31.189490][ T4724] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 31.190595][ T4721] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 31.191124][ T4721] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.191308][ T4721] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 31.192181][ T4721] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.192705][ T4721] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 31.192822][ T4721] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 31.196688][ T4721] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 31.199951][ T4721] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 31.200086][ T4721] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 31.202877][ T4721] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.495950][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.496207][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.496270][ T4718] bridge_slave_0: entered allmulticast mode [ 31.496728][ T4718] bridge_slave_0: entered promiscuous mode [ 31.521021][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.522813][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.522886][ T4718] bridge_slave_1: entered allmulticast mode [ 31.523314][ T4718] bridge_slave_1: entered promiscuous mode [ 31.544709][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.548690][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.548770][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.548825][ T4716] bridge_slave_0: entered allmulticast mode [ 31.549252][ T4716] bridge_slave_0: entered promiscuous mode [ 31.550360][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.550383][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.550433][ T4716] bridge_slave_1: entered allmulticast mode [ 31.550866][ T4716] bridge_slave_1: entered promiscuous mode [ 31.563441][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.586323][ T4718] team0: Port device team_slave_0 added [ 31.588295][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.589236][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.600341][ T4718] team0: Port device team_slave_1 added [ 31.610564][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.610592][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.610619][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.611352][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.611368][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.611388][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.617708][ T4716] team0: Port device team_slave_0 added [ 31.618475][ T4716] team0: Port device team_slave_1 added [ 31.637500][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.638868][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.644149][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.646907][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.647111][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.647129][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.686954][ T4718] hsr_slave_0: entered promiscuous mode [ 31.687385][ T4718] hsr_slave_1: entered promiscuous mode [ 31.693172][ T4716] hsr_slave_0: entered promiscuous mode [ 31.693532][ T4716] hsr_slave_1: entered promiscuous mode [ 31.694185][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 31.694217][ T4716] Cannot create hsr debugfs directory [ 31.726784][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.728245][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.729150][ T4711] bridge_slave_0: entered allmulticast mode [ 31.729603][ T4711] bridge_slave_0: entered promiscuous mode [ 31.743444][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.743524][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.743599][ T4711] bridge_slave_1: entered allmulticast mode [ 31.744058][ T4711] bridge_slave_1: entered promiscuous mode [ 31.773281][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.774259][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.791540][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.791621][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.792109][ T4710] bridge_slave_0: entered allmulticast mode [ 31.792564][ T4710] bridge_slave_0: entered promiscuous mode [ 31.793839][ T4711] team0: Port device team_slave_0 added [ 31.802198][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.803590][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.805134][ T4719] bridge_slave_0: entered allmulticast mode [ 31.806715][ T4719] bridge_slave_0: entered promiscuous mode [ 31.808609][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.808688][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.808756][ T4710] bridge_slave_1: entered allmulticast mode [ 31.809172][ T4710] bridge_slave_1: entered promiscuous mode [ 31.813452][ T4711] team0: Port device team_slave_1 added [ 31.824077][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.824135][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.824206][ T4719] bridge_slave_1: entered allmulticast mode [ 31.824646][ T4719] bridge_slave_1: entered promiscuous mode [ 31.831606][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.842262][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.843365][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.846884][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.851370][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.851378][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.851391][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.852262][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.852269][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.852281][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.864565][ T4719] team0: Port device team_slave_0 added [ 31.865275][ T4719] team0: Port device team_slave_1 added [ 31.880499][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.880528][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.880545][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.881184][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.881191][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.881206][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.884438][ T4710] team0: Port device team_slave_0 added [ 31.885522][ T4710] team0: Port device team_slave_1 added [ 31.900008][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.900040][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.900063][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.905953][ T4719] hsr_slave_0: entered promiscuous mode [ 31.906261][ T4719] hsr_slave_1: entered promiscuous mode [ 31.906460][ T4719] debugfs: 'hsr0' already exists in 'hsr' [ 31.906470][ T4719] Cannot create hsr debugfs directory [ 31.919620][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.919647][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.919681][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.930569][ T4711] hsr_slave_0: entered promiscuous mode [ 31.932240][ T4711] hsr_slave_1: entered promiscuous mode [ 31.933548][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 31.934594][ T4711] Cannot create hsr debugfs directory [ 31.954264][ T4710] hsr_slave_0: entered promiscuous mode [ 31.955970][ T4710] hsr_slave_1: entered promiscuous mode [ 31.957330][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 31.958493][ T4710] Cannot create hsr debugfs directory [ 31.965324][ T4718] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.968500][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.984112][ T4718] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.986494][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.987202][ T4718] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.988733][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.997364][ T4718] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.000067][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.041739][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.041792][ T4718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.041983][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.042036][ T4718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.054085][ T4716] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.056732][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.057245][ T4716] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.058871][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.059620][ T4716] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.061384][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.071004][ T4716] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.073941][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.092673][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.092719][ T4716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.092797][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.092824][ T4716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.099626][ T4719] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.103732][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.104317][ T4719] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.107908][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.109861][ T4719] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.112294][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.113931][ T4719] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.116099][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.140497][ T4711] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.143359][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.145024][ T4711] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.147451][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.149155][ T4711] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.151357][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.155554][ T4711] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.157714][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.163619][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.169270][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.169320][ T4719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.169405][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.169440][ T4719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.183459][ T3967] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.185025][ T3967] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.186717][ T3967] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.188165][ T3967] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.194491][ T3967] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.196295][ T3967] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.205380][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.207458][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.217068][ T4710] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.219458][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.221429][ T4710] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.223838][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.226442][ T4710] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.228593][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.230357][ T4710] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.232716][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.244426][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.244474][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.247501][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.247535][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.251102][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.267163][ T3967] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.267201][ T3967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.274579][ T4718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.280175][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.280225][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.290249][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.301458][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.326033][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.331597][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.339998][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.342114][ T3967] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.342154][ T3967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.345812][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.349255][ T3967] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.349293][ T3967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.358474][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.358519][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.358844][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.358865][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.365135][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.365180][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.373561][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.373608][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.378954][ T4716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.393260][ T4719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.395374][ T4719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.438480][ T4711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.438520][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.460875][ T4710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.464738][ T4710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.478589][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.580415][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.605715][ T4716] veth0_vlan: entered promiscuous mode [ 32.608387][ T4716] veth1_vlan: entered promiscuous mode [ 32.639754][ T4718] veth0_vlan: entered promiscuous mode [ 32.655054][ T4718] veth1_vlan: entered promiscuous mode [ 32.660612][ T4718] veth0_macvtap: entered promiscuous mode [ 32.664750][ T4718] veth1_macvtap: entered promiscuous mode [ 32.668047][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.669242][ T4716] veth0_macvtap: entered promiscuous mode [ 32.670348][ T4716] veth1_macvtap: entered promiscuous mode [ 32.679403][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.691296][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.707002][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.716607][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.717462][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.719717][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.731055][ T4719] veth0_vlan: entered promiscuous mode [ 32.756901][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.756934][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.766634][ T4710] veth0_vlan: entered promiscuous mode [ 32.777147][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.777176][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.783186][ T15] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.785160][ T4719] veth1_vlan: entered promiscuous mode [ 32.789594][ T4710] veth1_vlan: entered promiscuous mode [ 32.790764][ T4711] veth0_vlan: entered promiscuous mode [ 32.803730][ T4711] veth1_vlan: entered promiscuous mode [ 32.809968][ T4711] veth0_macvtap: entered promiscuous mode [ 32.824954][ T4710] veth0_macvtap: entered promiscuous mode [ 32.828570][ T4710] veth1_macvtap: entered promiscuous mode [ 32.836121][ T4718] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.843850][ T39] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.844286][ T39] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.844388][ T39] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.844487][ T39] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.844584][ T39] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.844600][ T39] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.844616][ T39] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.845726][ T4711] veth1_macvtap: entered promiscuous mode [ 32.849132][ T4719] veth0_macvtap: entered promiscuous mode [ 32.854647][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.854658][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.861350][ T4719] veth1_macvtap: entered promiscuous mode [ 32.867820][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.869936][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.875747][ T15] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.875896][ T15] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.876193][ T15] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.876257][ T15] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.886691][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.886723][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.900158][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.904305][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.911235][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.911280][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.911302][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.911318][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.926527][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.929199][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.947400][ T3900] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.947569][ T3900] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.947690][ T3900] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.947797][ T3900] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.963680][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.963714][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.980229][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.980268][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.995887][ T4895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.998414][ T4895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.006127][ T3900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.007693][ T3900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.025697][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.025732][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.033841][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.033873][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.047145][ T3900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.047176][ T3900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.082833][ T4898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.083024][ T4898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.112823][ T4902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.113020][ T4902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.118315][ T4901] FAULT_INJECTION: forcing a failure. [ 33.118315][ T4901] name fail_futex, interval 1, probability 0, space 0, times 1 [ 33.118500][ T4901] CPU: 1 UID: 0 PID: 4901 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT [ 33.118516][ T4901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 33.118522][ T4901] Call trace: [ 33.118525][ T4901] show_stack+0x2c/0x3c (C) [ 33.118544][ T4901] __dump_stack+0x30/0x40 [ 33.118557][ T4901] dump_stack_lvl+0xd8/0x12c [ 33.118567][ T4901] dump_stack+0x1c/0x28 [ 33.118577][ T4901] should_fail_ex+0x41c/0x590 [ 33.118585][ T4901] should_fail+0x14/0x24 [ 33.118592][ T4901] get_futex_key+0x1ec/0x12b0 [ 33.118602][ T4901] futex_wake+0x10c/0x594 [ 33.118610][ T4901] do_futex+0x2c4/0x378 [ 33.118619][ T4901] __arm64_sys_futex+0x2e4/0x418 [ 33.118627][ T4901] invoke_syscall+0x98/0x244 [ 33.118638][ T4901] el0_svc_common+0xec/0x23c [ 33.118647][ T4901] do_el0_svc+0x4c/0x5c [ 33.118657][ T4901] el0_svc+0x64/0x260 [ 33.118666][ T4901] el0t_64_sync_handler+0x44/0x104 [ 33.118675][ T4901] el0t_64_sync+0x198/0x19c [ 33.120764][ T4903] i2c i2c-0: new_device: Instantiated device isp1301 at 0x2c [ 33.121635][ T4901] FAULT_INJECTION: forcing a failure. [ 33.121635][ T4901] name fail_futex, interval 1, probability 0, space 0, times 0 [ 33.121648][ T4901] CPU: 1 UID: 0 PID: 4901 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT [ 33.121659][ T4901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 33.121664][ T4901] Call trace: [ 33.121666][ T4901] show_stack+0x2c/0x3c (C) [ 33.121679][ T4901] __dump_stack+0x30/0x40 [ 33.121692][ T4901] dump_stack_lvl+0xd8/0x12c [ 33.121702][ T4901] dump_stack+0x1c/0x28 [ 33.121712][ T4901] should_fail_ex+0x41c/0x590 [ 33.121719][ T4901] should_fail+0x14/0x24 [ 33.121726][ T4901] should_fail_futex+0x48/0x5c [ 33.121735][ T4901] __arm64_sys_futex+0x1e4/0x418 [ 33.121743][ T4901] invoke_syscall+0x98/0x244 [ 33.121753][ T4901] el0_svc_common+0xec/0x23c [ 33.121763][ T4901] do_el0_svc+0x4c/0x5c [ 33.121772][ T4901] el0_svc+0x64/0x260 [ 33.121780][ T4901] el0t_64_sync_handler+0x44/0x104 [ 33.121789][ T4901] el0t_64_sync+0x198/0x19c [ 33.123476][ T4903] i2c i2c-0: new_device: Instantiated device isp1301 at 0x2d [ 33.123690][ T4901] FAULT_INJECTION: forcing a failure. [ 33.123690][ T4901] name fail_futex, interval 1, probability 0, space 0, times 0 [ 33.123701][ T4901] CPU: 1 UID: 0 PID: 4901 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT [ 33.123709][ T4901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 33.123713][ T4901] Call trace: [ 33.123715][ T4901] show_stack+0x2c/0x3c (C) [ 33.123727][ T4901] __dump_stack+0x30/0x40 [ 33.123737][ T4901] dump_stack_lvl+0xd8/0x12c [ 33.123746][ T4901] dump_stack+0x1c/0x28 [ 33.123756][ T4901] should_fail_ex+0x41c/0x590 [ 33.123763][ T4901] should_fail+0x14/0x24 [ 33.123769][ T4901] get_futex_key+0x1ec/0x12b0 [ 33.123777][ T4901] futex_wait_setup+0x58/0x674 [ 33.123786][ T4901] __futex_wait+0x108/0x25c [ 33.123794][ T4901] futex_wait+0x108/0x2c0 [ 33.123803][ T4901] do_futex+0x320/0x378 [ 33.123811][ T4901] __arm64_sys_futex+0x2e4/0x418 [ 33.123819][ T4901] invoke_syscall+0x98/0x244 [ 33.123829][ T4901] el0_svc_common+0xec/0x23c [ 33.123838][ T4901] do_el0_svc+0x4c/0x5c [ 33.123848][ T4901] el0_svc+0x64/0x260 [ 33.123856][ T4901] el0t_64_sync_handler+0x44/0x104 [ 33.123864][ T4901] el0t_64_sync+0x198/0x19c [ 33.124774][ T4903] i2c i2c-0: new_device: Instantiated device isp1301 at 0x2e [ 33.125774][ T4901] FAULT_INJECTION: forcing a failure. [ 33.125774][ T4901] name fail_futex, interval 1, probability 0, space 0, times 0 [ 33.125790][ T4901] CPU: 1 UID: 0 PID: 4901 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT [ 33.125803][ T4901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 33.125807][ T4901] Call trace: [ 33.125810][ T4901] show_stack+0x2c/0x3c (C) [ 33.125822][ T4901] __dump_stack+0x30/0x40 [ 33.125832][ T4901] dump_stack_lvl+0xd8/0x12c [ 33.125842][ T4901] dump_stack+0x1c/0x28 [ 33.125851][ T4901] should_fail_ex+0x41c/0x590 [ 33.125858][ T4901] should_fail+0x14/0x24 [ 33.125864][ T4901] get_futex_key+0x1ec/0x12b0 [ 33.125873][ T4901] futex_wait_setup+0x58/0x674 [ 33.125881][ T4901] __futex_wait+0x108/0x25c [ 33.125890][ T4901] futex_wait+0x108/0x2c0 [ 33.125898][ T4901] do_futex+0x320/0x378 [ 33.125906][ T4901] __arm64_sys_futex+0x2e4/0x418 [ 33.125915][ T4901] invoke_syscall+0x98/0x244 [ 33.125924][ T4901] el0_svc_common+0xec/0x23c [ 33.125934][ T4901] do_el0_svc+0x4c/0x5c [ 33.125943][ T4901] el0_svc+0x64/0x260 [ 33.125951][ T4901] el0t_64_sync_handler+0x44/0x104 [ 33.125960][ T4901] el0t_64_sync+0x198/0x19c [ 33.126065][ T4903] i2c i2c-0: new_device: Instantiated device isp1301 at 0x2f [ 33.127146][ T4903] i2c i2c-0: new_device: Instantiated device isp1301 at 0x30 [ 33.127338][ T4901] FAULT_INJECTION: forcing a failure. [ 33.127338][ T4901] name fail_futex, interval 1, probability 0, space 0, times 0 [ 33.127349][ T4901] CPU: 1 UID: 0 PID: 4901 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT [ 33.127356][ T4901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 33.127360][ T4901] Call trace: [ 33.127363][ T4901] show_stack+0x2c/0x3c (C) [ 33.127375][ T4901] __dump_stack+0x30/0x40 [ 33.127384][ T4901] dump_stack_lvl+0xd8/0x12c [ 33.127394][ T4901] dump_stack+0x1c/0x28 [ 33.127403][ T4901] should_fail_ex+0x41c/0x590 [ 33.127410][ T4901] should_fail+0x14/0x24 [ 33.127417][ T4901] get_futex_key+0x1ec/0x12b0 [ 33.127425][ T4901] futex_wake+0x10c/0x594 [ 33.127433][ T4901] do_futex+0x2c4/0x378 [ 33.127441][ T4901] __arm64_sys_futex+0x2e4/0x418 [ 33.127449][ T4901] invoke_syscall+0x98/0x244 [ 33.127459][ T4901] el0_svc_common+0xec/0x23c [ 33.127469][ T4901] do_el0_svc+0x4c/0x5c [ 33.127478][ T4901] el0_svc+0x64/0x260 [ 33.127487][ T4901] el0t_64_sync_handler+0x44/0x104 [ 33.127495][ T4901] el0t_64_sync+0x198/0x19c [ 33.162481][ T4890] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.179075][ T4906] i2c i2c-0: new_device: Instantiated device isp1301 at 0x31 [ 33.183341][ T4906] i2c i2c-0: new_device: Instantiated device isp1301 at 0x32 [ 33.185040][ T4906] i2c i2c-0: new_device: Instantiated device isp1301 at 0x33 [ 33.213013][ T4715] Bluetooth: hci3: command tx timeout [ 33.213015][ T4721] Bluetooth: hci2: command tx timeout [ 33.213329][ T4723] Bluetooth: hci0: command tx timeout [ 33.292225][ T4723] Bluetooth: hci4: command tx timeout [ 33.292302][ T4721] Bluetooth: hci1: command tx timeout [ 33.312109][ T4890] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 33.312904][ T4890] usb 1-1: Dual-Role OTG device on HNP port [ 33.313104][ T4890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.320278][ T4890] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 33.578763][ T4908] PM: hibernation: hibernation entry [ 33.604359][ T4910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.606008][ T4910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.747427][ T4915] loop0: detected capacity change from 0 to 16 [ 33.765198][ T4916] FAULT_INJECTION: forcing a failure. [ 33.765198][ T4916] name fail_futex, interval 1, probability 0, space 0, times 0 [ 33.765236][ T4916] CPU: 1 UID: 0 PID: 4916 Comm: syz.4.11 Not tainted syzkaller #0 PREEMPT [ 33.765249][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 33.765256][ T4916] Call trace: [ 33.765259][ T4916] show_stack+0x2c/0x3c (C) [ 33.765279][ T4916] __dump_stack+0x30/0x40 [ 33.765290][ T4916] dump_stack_lvl+0xd8/0x12c [ 33.765300][ T4916] dump_stack+0x1c/0x28 [ 33.765309][ T4916] should_fail_ex+0x41c/0x590 [ 33.765317][ T4916] should_fail+0x14/0x24 [ 33.765324][ T4916] get_futex_key+0x1ec/0x12b0 [ 33.765333][ T4916] futex_wake+0x10c/0x594 [ 33.765341][ T4916] do_futex+0x2c4/0x378 [ 33.765349][ T4916] __arm64_sys_futex+0x2e4/0x418 [ 33.765357][ T4916] invoke_syscall+0x98/0x244 [ 33.765368][ T4916] el0_svc_common+0xec/0x23c [ 33.765377][ T4916] do_el0_svc+0x4c/0x5c [ 33.765387][ T4916] el0_svc+0x64/0x260 [ 33.765396][ T4916] el0t_64_sync_handler+0x44/0x104 [ 33.765405][ T4916] el0t_64_sync+0x198/0x19c [ 33.816867][ T4918] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-002d' [ 33.816898][ T4918] CPU: 1 UID: 0 PID: 4918 Comm: syz.4.11 Not tainted syzkaller #0 PREEMPT [ 33.816910][ T4918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 33.816916][ T4918] Call trace: [ 33.816919][ T4918] show_stack+0x2c/0x3c (C) [ 33.816943][ T4918] __dump_stack+0x30/0x40 [ 33.816956][ T4918] dump_stack_lvl+0xd8/0x12c [ 33.816969][ T4918] dump_stack+0x1c/0x28 [ 33.816980][ T4918] sysfs_warn_dup+0x9c/0xb8 [ 33.816993][ T4918] sysfs_create_dir_ns+0x190/0x1f4 [ 33.817005][ T4918] kobject_add_internal+0x290/0x6f0 [ 33.817019][ T4918] kobject_add_varg+0x9c/0xe8 [ 33.817030][ T4918] kobject_add+0x110/0x1c8 [ 33.817041][ T4918] device_add+0x394/0x9e0 [ 33.817057][ T4918] device_register+0x28/0x38 [ 33.817070][ T4918] i2c_new_client_device+0x5ac/0xadc [ 33.817082][ T4918] new_device_store+0x210/0x3d4 [ 33.817094][ T4918] dev_attr_store+0x6c/0x90 [ 33.817104][ T4918] sysfs_kf_write+0xe0/0x108 [ 33.817115][ T4918] kernfs_fop_write_iter+0x260/0x3b8 [ 33.817126][ T4918] vfs_write+0x51c/0xa0c [ 33.817135][ T4918] ksys_write+0x12c/0x228 [ 33.817142][ T4918] __arm64_sys_write+0x84/0x98 [ 33.817150][ T4918] invoke_syscall+0x98/0x244 [ 33.817163][ T4918] el0_svc_common+0xec/0x23c [ 33.817175][ T4918] do_el0_svc+0x4c/0x5c [ 33.817187][ T4918] el0_svc+0x64/0x260 [ 33.817197][ T4918] el0t_64_sync_handler+0x44/0x104 [ 33.817207][ T4918] el0t_64_sync+0x198/0x19c [ 33.817224][ T4918] kobject: kobject_add_internal failed for 0-002d with -EEXIST, don't try to register things with the same name in the same directory. [ 33.817239][ T4918] i2c i2c-0: Failed to register i2c client isp1301 at 0x2d (-17) [ 33.817285][ T4916] FAULT_INJECTION: forcing a failure. [ 33.817285][ T4916] name fail_futex, interval 1, probability 0, space 0, times 0 [ 33.817296][ T4916] CPU: 1 UID: 0 PID: 4916 Comm: syz.4.11 Not tainted syzkaller #0 PREEMPT [ 33.817305][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 33.817309][ T4916] Call trace: [ 33.817311][ T4916] show_stack+0x2c/0x3c (C) [ 33.817322][ T4916] __dump_stack+0x30/0x40 [ 33.817332][ T4916] dump_stack_lvl+0xd8/0x12c [ 33.817342][ T4916] dump_stack+0x1c/0x28 [ 33.817351][ T4916] should_fail_ex+0x41c/0x590 [ 33.817359][ T4916] should_fail+0x14/0x24 [ 33.817366][ T4916] should_fail_futex+0x48/0x5c [ 33.817375][ T4916] __arm64_sys_futex+0x1e4/0x418 [ 33.817384][ T4916] invoke_syscall+0x98/0x244 [ 33.817393][ T4916] el0_svc_common+0xec/0x23c [ 33.817403][ T4916] do_el0_svc+0x4c/0x5c [ 33.817412][ T4916] el0_svc+0x64/0x260 [ 33.817420][ T4916] el0t_64_sync_handler+0x44/0x104 [ 33.817429][ T4916] el0t_64_sync+0x198/0x19c [ 33.817771][ T4916] FAULT_INJECTION: forcing a failure. [ 33.817771][ T4916] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 33.817781][ T4916] CPU: 1 UID: 0 PID: 4916 Comm: syz.4.11 Not tainted syzkaller #0 PREEMPT [ 33.817789][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 33.817793][ T4916] Call trace: [ 33.817795][ T4916] show_stack+0x2c/0x3c (C) [ 33.817805][ T4916] __dump_stack+0x30/0x40 [ 33.817815][ T4916] dump_stack_lvl+0xd8/0x12c [ 33.817824][ T4916] dump_stack+0x1c/0x28 [ 33.817834][ T4916] should_fail_ex+0x41c/0x590 [ 33.817840][ T4916] should_fail+0x14/0x24 [ 33.817847][ T4916] should_fail_usercopy+0x20/0x30 [ 33.817854][ T4916] _inline_copy_from_user+0x3c/0x174 [ 33.817864][ T4916] get_timespec64+0x9c/0x188 [ 33.817871][ T4916] __arm64_sys_futex+0x1f4/0x418 [ 33.817880][ T4916] invoke_syscall+0x98/0x244 [ 33.817890][ T4916] el0_svc_common+0xec/0x23c [ 33.817899][ T4916] do_el0_svc+0x4c/0x5c [ 33.817909][ T4916] el0_svc+0x64/0x260 [ 33.817917][ T4916] el0t_64_sync_handler+0x44/0x104 [ 33.817925][ T4916] el0t_64_sync+0x198/0x19c [ 33.818012][ T4918] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-002e' [ 33.818019][ T4918] CPU: 1 UID: 0 PID: 4918 Comm: syz.4.11 Not tainted syzkaller #0 PREEMPT [ 33.818027][ T4918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 33.818031][ T4918] Call trace: [ 33.818034][ T4918] show_stack+0x2c/0x3c (C) [ 33.818046][ T4918] __dump_stack+0x30/0x40 [ 33.818062][ T4918] dump_stack_lvl+0xd8/0x12c [ 33.818074][ T4918] dump_stack+0x1c/0x28 [ 33.818085][ T4918] sysfs_warn_dup+0x9c/0xb8 [ 33.818096][ T4918] sysfs_create_dir_ns+0x190/0x1f4 [ 33.818108][ T4918] kobject_add_internal+0x290/0x6f0 [ 33.818119][ T4918] kobject_add_varg+0x9c/0xe8 [ 33.818130][ T4918] kobject_add+0x110/0x1c8 [ 33.818141][ T4918] device_add+0x394/0x9e0 [ 33.818149][ T4918] device_register+0x28/0x38 [ 33.818161][ T4918] i2c_new_client_device+0x5ac/0xadc [ 33.818171][ T4918] new_device_store+0x210/0x3d4 [ 33.818182][ T4918] dev_attr_store+0x6c/0x90 [ 33.818192][ T4918] sysfs_kf_write+0xe0/0x108 [ 33.818203][ T4918] kernfs_fop_write_iter+0x260/0x3b8 [ 33.818213][ T4918] vfs_write+0x51c/0xa0c [ 33.818221][ T4918] ksys_write+0x12c/0x228 [ 33.818228][ T4918] __arm64_sys_write+0x84/0x98 [ 33.818236][ T4918] invoke_syscall+0x98/0x244 [ 33.818248][ T4918] el0_svc_common+0xec/0x23c [ 33.818259][ T4918] do_el0_svc+0x4c/0x5c [ 33.818271][ T4918] el0_svc+0x64/0x260 [ 33.818280][ T4918] el0t_64_sync_handler+0x44/0x104 [ 33.818290][ T4918] el0t_64_sync+0x198/0x19c [ 33.818303][ T4918] kobject: kobject_add_internal failed for 0-002e with -EEXIST, don't try to register things with the same name in the same directory. [ 33.818314][ T4918] i2c i2c-0: Failed to register i2c client isp1301 at 0x2e (-17) [ 33.818537][ T4916] FAULT_INJECTION: forcing a failure. [ 33.818537][ T4916] name fail_futex, interval 1, probability 0, space 0, times 0 [ 33.818545][ T4916] CPU: 1 UID: 0 PID: 4916 Comm: syz.4.11 Not tainted syzkaller #0 PREEMPT [ 33.818553][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 33.818556][ T4916] Call trace: [ 33.818558][ T4916] show_stack+0x2c/0x3c (C) [ 33.818568][ T4916] __dump_stack+0x30/0x40 [ 33.818578][ T4916] dump_stack_lvl+0xd8/0x12c [ 33.818587][ T4916] dump_stack+0x1c/0x28 [ 33.818597][ T4916] should_fail_ex+0x41c/0x590 [ 33.818603][ T4916] should_fail+0x14/0x24 [ 33.818610][ T4916] get_futex_key+0x1ec/0x12b0 [ 33.818618][ T4916] futex_wait_setup+0x58/0x674 [ 33.818626][ T4916] __futex_wait+0x108/0x25c [ 33.818635][ T4916] futex_wait+0x108/0x2c0 [ 33.818643][ T4916] do_futex+0x320/0x378 [ 33.818651][ T4916] __arm64_sys_futex+0x2e4/0x418 [ 33.818659][ T4916] invoke_syscall+0x98/0x244 [ 33.818669][ T4916] el0_svc_common+0xec/0x23c [ 33.818679][ T4916] do_el0_svc+0x4c/0x5c [ 33.818688][ T4916] el0_svc+0x64/0x260 [ 33.818696][ T4916] el0t_64_sync_handler+0x44/0x104 [ 33.818704][ T4916] el0t_64_sync+0x198/0x19c [ 33.818796][ T4918] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-002f' [ 33.818802][ T4918] CPU: 1 UID: 0 PID: 4918 Comm: syz.4.11 Not tainted syzkaller #0 PREEMPT [ 33.818811][ T4918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 33.818815][ T4918] Call trace: [ 33.818817][ T4918] show_stack+0x2c/0x3c (C) [ 33.818829][ T4918] __dump_stack+0x30/0x40 [ 33.818841][ T4918] dump_stack_lvl+0xd8/0x12c [ 33.818852][ T4918] dump_stack+0x1c/0x28 [ 33.818864][ T4918] sysfs_warn_dup+0x9c/0xb8 [ 33.818875][ T4918] sysfs_create_dir_ns+0x190/0x1f4 [ 33.818886][ T4918] kobject_add_internal+0x290/0x6f0 [ 33.818898][ T4918] kobject_add_varg+0x9c/0xe8 [ 33.818908][ T4918] kobject_add+0x110/0x1c8 [ 33.818919][ T4918] device_add+0x394/0x9e0 [ 33.818927][ T4918] device_register+0x28/0x38 [ 33.818939][ T4918] i2c_new_client_device+0x5ac/0xadc [ 33.818949][ T4918] new_device_store+0x210/0x3d4 [ 33.818960][ T4918] dev_attr_store+0x6c/0x90 [ 33.818969][ T4918] sysfs_kf_write+0xe0/0x108 [ 33.818980][ T4918] kernfs_fop_write_iter+0x260/0x3b8 [ 33.818991][ T4918] vfs_write+0x51c/0xa0c [ 33.818998][ T4918] ksys_write+0x12c/0x228 [ 33.819005][ T4918] __arm64_sys_write+0x84/0x98 [ 33.819013][ T4918] invoke_syscall+0x98/0x244 [ 33.819025][ T4918] el0_svc_common+0xec/0x23c [ 33.819037][ T4918] do_el0_svc+0x4c/0x5c [ 33.819048][ T4918] el0_svc+0x64/0x260 [ 33.819064][ T4918] el0t_64_sync_handler+0x44/0x104 [ 33.819076][ T4918] el0t_64_sync+0x198/0x19c [ 33.819089][ T4918] kobject: kobject_add_internal failed for 0-002f with -EEXIST, don't try to register things with the same name in the same directory. [ 33.819100][ T4918] i2c i2c-0: Failed to register i2c client isp1301 at 0x2f (-17) [ 33.819391][ T4918] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-0030' [ 33.819396][ T4918] CPU: 1 UID: 0 PID: 4918 Comm: syz.4.11 Not tainted syzkaller #0 PREEMPT [ 33.819405][ T4918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 33.819409][ T4918] Call trace: [ 33.819412][ T4918] show_stack+0x2c/0x3c (C) [ 33.819424][ T4918] __dump_stack+0x30/0x40 [ 33.819435][ T4918] dump_stack_lvl+0xd8/0x12c [ 33.819447][ T4918] dump_stack+0x1c/0x28 [ 33.819458][ T4918] sysfs_warn_dup+0x9c/0xb8 [ 33.819469][ T4918] sysfs_create_dir_ns+0x190/0x1f4 [ 33.819480][ T4918] kobject_add_internal+0x290/0x6f0 [ 33.819492][ T4918] kobject_add_varg+0x9c/0xe8 [ 33.819503][ T4918] kobject_add+0x110/0x1c8 [ 33.819513][ T4918] device_add+0x394/0x9e0 [ 33.819521][ T4918] device_register+0x28/0x38 [ 33.819536][ T4918] i2c_new_client_device+0x5ac/0xadc [ 33.819546][ T4918] new_device_store+0x210/0x3d4 [ 33.819557][ T4918] dev_attr_store+0x6c/0x90 [ 33.819567][ T4918] sysfs_kf_write+0xe0/0x108 [ 33.819578][ T4918] kernfs_fop_write_iter+0x260/0x3b8 [ 33.819589][ T4918] vfs_write+0x51c/0xa0c [ 33.819596][ T4918] ksys_write+0x12c/0x228 [ 33.819604][ T4918] __arm64_sys_write+0x84/0x98 [ 33.819612][ T4918] invoke_syscall+0x98/0x244 [ 33.819624][ T4918] el0_svc_common+0xec/0x23c [ 33.819635][ T4918] do_el0_svc+0x4c/0x5c [ 33.819647][ T4918] el0_svc+0x64/0x260 [ 33.819656][ T4918] el0t_64_sync_handler+0x44/0x104 [ 33.819666][ T4918] el0t_64_sync+0x198/0x19c [ 33.819696][ T4918] kobject: kobject_add_internal failed for 0-0030 with -EEXIST, don't try to register things with the same name in the same directory. [ 33.819706][ T4918] i2c i2c-0: Failed to register i2c client isp1301 at 0x30 (-17) [ 33.819877][ T4916] FAULT_INJECTION: forcing a failure. [ 33.819877][ T4916] name fail_futex, interval 1, probability 0, space 0, times 0 [ 33.819886][ T4916] CPU: 1 UID: 0 PID: 4916 Comm: syz.4.11 Not tainted syzkaller #0 PREEMPT [ 33.819893][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 33.819897][ T4916] Call trace: [ 33.819899][ T4916] show_stack+0x2c/0x3c (C) [ 33.819909][ T4916] __dump_stack+0x30/0x40 [ 33.819918][ T4916] dump_stack_lvl+0xd8/0x12c [ 33.819928][ T4916] dump_stack+0x1c/0x28 [ 33.819937][ T4916] should_fail_ex+0x41c/0x590 [ 33.819944][ T4916] should_fail+0x14/0x24 [ 33.819950][ T4916] get_futex_key+0x1ec/0x12b0 [ 33.819958][ T4916] futex_wake+0x10c/0x594 [ 33.819966][ T4916] do_futex+0x2c4/0x378 [ 33.819974][ T4916] __arm64_sys_futex+0x2e4/0x418 [ 33.819982][ T4916] invoke_syscall+0x98/0x244 [ 33.819992][ T4916] el0_svc_common+0xec/0x23c [ 33.820001][ T4916] do_el0_svc+0x4c/0x5c [ 33.820011][ T4916] el0_svc+0x64/0x260 [ 33.820019][ T4916] el0t_64_sync_handler+0x44/0x104 [ 33.820030][ T4916] el0t_64_sync+0x198/0x19c [ 33.820234][ T4918] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-0031' [ 33.820240][ T4918] CPU: 1 UID: 0 PID: 4918 Comm: syz.4.11 Not tainted syzkaller #0 PREEMPT [ 33.820249][ T4918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 33.820253][ T4918] Call trace: [ 33.820255][ T4918] show_stack+0x2c/0x3c (C) [ 33.820268][ T4918] __dump_stack+0x30/0x40 [ 33.820279][ T4918] dump_stack_lvl+0xd8/0x12c [ 33.820291][ T4918] dump_stack+0x1c/0x28 [ 33.820302][ T4918] sysfs_warn_dup+0x9c/0xb8 [ 33.820313][ T4918] sysfs_create_dir_ns+0x190/0x1f4 [ 33.820324][ T4918] kobject_add_internal+0x290/0x6f0 [ 33.820336][ T4918] kobject_add_varg+0x9c/0xe8 [ 33.820346][ T4918] kobject_add+0x110/0x1c8 [ 33.820357][ T4918] device_add+0x394/0x9e0 [ 33.820365][ T4918] device_register+0x28/0x38 [ 33.820377][ T4918] i2c_new_client_device+0x5ac/0xadc [ 33.820387][ T4918] new_device_store+0x210/0x3d4 [ 33.820398][ T4918] dev_attr_store+0x6c/0x90 [ 33.820407][ T4918] sysfs_kf_write+0xe0/0x108 [ 33.820418][ T4918] kernfs_fop_write_iter+0x260/0x3b8 [ 33.820429][ T4918] vfs_write+0x51c/0xa0c [ 33.820436][ T4918] ksys_write+0x12c/0x228 [ 33.820444][ T4918] __arm64_sys_write+0x84/0x98 [ 33.820451][ T4918] invoke_syscall+0x98/0x244 [ 33.820463][ T4918] el0_svc_common+0xec/0x23c [ 33.820475][ T4918] do_el0_svc+0x4c/0x5c [ 33.820486][ T4918] el0_svc+0x64/0x260 [ 33.820496][ T4918] el0t_64_sync_handler+0x44/0x104 [ 33.820505][ T4918] el0t_64_sync+0x198/0x19c [ 33.820518][ T4918] kobject: kobject_add_internal failed for 0-0031 with -EEXIST, don't try to register things with the same name in the same directory. [ 33.820529][ T4918] i2c i2c-0: Failed to register i2c client isp1301 at 0x31 (-17) [ 33.820560][ T4916] FAULT_INJECTION: forcing a failure. [ 33.820560][ T4916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 33.820568][ T4916] CPU: 1 UID: 0 PID: 4916 Comm: syz.4.11 Not tainted syzkaller #0 PREEMPT [ 33.820575][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 33.820579][ T4916] Call trace: [ 33.820581][ T4916] show_stack+0x2c/0x3c (C) [ 33.820591][ T4916] __dump_stack+0x30/0x40 [ 33.820600][ T4916] dump_stack_lvl+0xd8/0x12c [ 33.820610][ T4916] dump_stack+0x1c/0x28 [ 33.820619][ T4916] should_fail_ex+0x41c/0x590 [ 33.820626][ T4916] should_fail+0x14/0x24 [ 33.820632][ T4916] should_fail_usercopy+0x20/0x30 [ 33.820639][ T4916] _inline_copy_from_user+0x3c/0x174 [ 33.820647][ T4916] get_timespec64+0x9c/0x188 [ 33.820655][ T4916] __arm64_sys_futex+0x1f4/0x418 [ 33.820664][ T4916] invoke_syscall+0x98/0x244 [ 33.820673][ T4916] el0_svc_common+0xec/0x23c [ 33.820688][ T4916] do_el0_svc+0x4c/0x5c [ 33.820698][ T4916] el0_svc+0x64/0x260 [ 33.820706][ T4916] el0t_64_sync_handler+0x44/0x104 [ 33.820714][ T4916] el0t_64_sync+0x198/0x19c [ 33.820931][ T4918] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-0032' [ 33.820937][ T4918] CPU: 1 UID: 0 PID: 4918 Comm: syz.4.11 Not tainted syzkaller #0 PREEMPT [ 33.820945][ T4918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 33.820950][ T4918] Call trace: [ 33.820952][ T4918] show_stack+0x2c/0x3c (C) [ 33.820964][ T4918] __dump_stack+0x30/0x40 [ 33.820975][ T4918] dump_stack_lvl+0xd8/0x12c [ 33.820987][ T4918] dump_stack+0x1c/0x28 [ 33.820998][ T4918] sysfs_warn_dup+0x9c/0xb8 [ 33.821009][ T4918] sysfs_create_dir_ns+0x190/0x1f4 [ 33.821021][ T4918] kobject_add_internal+0x290/0x6f0 [ 33.821042][ T4918] kobject_add_varg+0x9c/0xe8 [ 33.821098][ T4918] kobject_add+0x110/0x1c8 [ 33.821116][ T4918] device_add+0x394/0x9e0 [ 33.821125][ T4918] device_register+0x28/0x38 [ 33.821137][ T4918] i2c_new_client_device+0x5ac/0xadc [ 33.821147][ T4918] new_device_store+0x210/0x3d4 [ 33.821158][ T4918] dev_attr_store+0x6c/0x90 [ 33.821168][ T4918] sysfs_kf_write+0xe0/0x108 [ 33.821179][ T4918] kernfs_fop_write_iter+0x260/0x3b8 [ 33.821189][ T4918] vfs_write+0x51c/0xa0c [ 33.821197][ T4918] ksys_write+0x12c/0x228 [ 33.821204][ T4918] __arm64_sys_write+0x84/0x98 [ 33.821212][ T4918] invoke_syscall+0x98/0x244 [ 33.821224][ T4918] el0_svc_common+0xec/0x23c [ 33.821236][ T4918] do_el0_svc+0x4c/0x5c [ 33.821247][ T4918] el0_svc+0x64/0x260 [ 33.821256][ T4918] el0t_64_sync_handler+0x44/0x104 [ 33.821266][ T4918] el0t_64_sync+0x198/0x19c [ 33.821292][ T4918] kobject: kobject_add_internal failed for 0-0032 with -EEXIST, don't try to register things with the same name in the same directory. [ 33.821303][ T4918] i2c i2c-0: Failed to register i2c client isp1301 at 0x32 (-17) [ 33.821666][ T4918] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-0033' [ 33.821673][ T4918] CPU: 1 UID: 0 PID: 4918 Comm: syz.4.11 Not tainted syzkaller #0 PREEMPT [ 33.821684][ T4918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 33.821689][ T4918] Call trace: [ 33.821692][ T4918] show_stack+0x2c/0x3c (C) [ 33.821709][ T4918] __dump_stack+0x30/0x40 [ 33.821722][ T4918] dump_stack_lvl+0xd8/0x12c [ 33.821733][ T4918] dump_stack+0x1c/0x28 [ 33.821745][ T4918] sysfs_warn_dup+0x9c/0xb8 [ 33.821756][ T4918] sysfs_create_dir_ns+0x190/0x1f4 [ 33.821767][ T4918] kobject_add_internal+0x290/0x6f0 [ 33.821779][ T4918] kobject_add_varg+0x9c/0xe8 [ 33.821789][ T4918] kobject_add+0x110/0x1c8 [ 33.821800][ T4918] device_add+0x394/0x9e0 [ 33.821808][ T4918] device_register+0x28/0x38 [ 33.821820][ T4918] i2c_new_client_device+0x5ac/0xadc [ 33.821830][ T4918] new_device_store+0x210/0x3d4 [ 33.821841][ T4918] dev_attr_store+0x6c/0x90 [ 33.821850][ T4918] sysfs_kf_write+0xe0/0x108 [ 33.821861][ T4918] kernfs_fop_write_iter+0x260/0x3b8 [ 33.821872][ T4918] vfs_write+0x51c/0xa0c [ 33.821879][ T4918] ksys_write+0x12c/0x228 [ 33.821886][ T4918] __arm64_sys_write+0x84/0x98 [ 33.821894][ T4918] invoke_syscall+0x98/0x244 [ 33.821906][ T4918] el0_svc_common+0xec/0x23c [ 33.821918][ T4918] do_el0_svc+0x4c/0x5c [ 33.821929][ T4918] el0_svc+0x64/0x260 [ 33.821938][ T4918] el0t_64_sync_handler+0x44/0x104 [ 33.821948][ T4918] el0t_64_sync+0x198/0x19c [ 33.822262][ T4918] kobject: kobject_add_internal failed for 0-0033 with -EEXIST, don't try to register things with the same name in the same directory. [ 33.822287][ T4918] i2c i2c-0: Failed to register i2c client isp1301 at 0x33 (-17) [ 33.825797][ T4916] FAULT_INJECTION: forcing a failure. [ 33.825797][ T4916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 33.825812][ T4916] CPU: 1 UID: 0 PID: 4916 Comm: syz.4.11 Not tainted syzkaller #0 PREEMPT [ 33.825821][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 33.825825][ T4916] Call trace: [ 33.825828][ T4916] show_stack+0x2c/0x3c (C) [ 33.825846][ T4916] __dump_stack+0x30/0x40 [ 33.825857][ T4916] dump_stack_lvl+0xd8/0x12c [ 33.825866][ T4916] dump_stack+0x1c/0x28 [ 33.825876][ T4916] should_fail_ex+0x41c/0x590 [ 33.825883][ T4916] should_fail+0x14/0x24 [ 33.825889][ T4916] should_fail_usercopy+0x20/0x30 [ 33.825896][ T4916] _inline_copy_from_user+0x3c/0x174 [ 33.825904][ T4916] get_timespec64+0x9c/0x188 [ 33.825912][ T4916] __arm64_sys_clock_nanosleep+0x204/0x38c [ 33.825920][ T4916] invoke_syscall+0x98/0x244 [ 33.825929][ T4916] el0_svc_common+0xec/0x23c [ 33.825939][ T4916] do_el0_svc+0x4c/0x5c [ 33.825948][ T4916] el0_svc+0x64/0x260 [ 33.825956][ T4916] el0t_64_sync_handler+0x44/0x104 [ 33.825964][ T4916] el0t_64_sync+0x198/0x19c [ 34.000361][ T4920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.000766][ T4920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.411404][ T4908] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 34.411495][ T4908] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 34.416095][ T4908] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 34.420667][ T4908] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 34.421272][ T4908] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 34.423968][ T4908] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 34.426288][ T4908] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 34.426497][ T4908] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 34.429132][ T4908] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 34.430871][ T4908] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 34.431030][ T4908] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 34.434060][ T4908] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 34.435927][ T4908] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 34.436138][ T4908] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 34.439358][ T4908] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 34.497801][ T15] Filesystems sync: 0.056 seconds [ 34.614492][ T4922] Zero length message leads to an empty skb [ 34.743816][ T4890] usb 1-1: USB disconnect, device number 2 [ 35.009088][ T4929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.010875][ T4929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.128131][ T4932] loop3: detected capacity change from 0 to 512 [ 35.147751][ T4932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.160727][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.180870][ T4936] lo speed is unknown, defaulting to 1000 [ 35.180920][ T4936] lo speed is unknown, defaulting to 1000 [ 35.181627][ T4936] lo speed is unknown, defaulting to 1000 [ 35.183629][ T4936] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 35.185066][ T4936] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 35.191332][ T4936] lo speed is unknown, defaulting to 1000 [ 35.194761][ T4936] lo speed is unknown, defaulting to 1000 [ 35.196367][ T4936] lo speed is unknown, defaulting to 1000 [ 35.197579][ T4936] lo speed is unknown, defaulting to 1000 [ 35.197925][ T4936] lo speed is unknown, defaulting to 1000 [ 35.259658][ T4819] input: syz0 as /devices/virtual/misc/uhid/0003:04D8:C002.0001/input/input2 [ 35.264147][ T4819] Registered IR keymap rc-rc6-mce [ 35.302301][ T4819] rc_core: Loaded IR protocol module ir-rc6-decoder, but protocol rc-6 still not available [ 35.303141][ T4819] rc rc0: syz0 as /devices/virtual/misc/uhid/0003:04D8:C002.0001/rc/rc0 [ 35.303607][ T4819] input: syz0 as /devices/virtual/misc/uhid/0003:04D8:C002.0001/rc/rc0/input3 [ 35.311643][ T4819] BUG: sleeping function called from invalid context at ./include/linux/sched/mm.h:323 [ 35.311658][ T4819] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 4819, name: kworker/0:6 [ 35.311665][ T4819] preempt_count: 1, expected: 0 [ 35.311669][ T4819] RCU nest depth: 0, expected: 0 [ 35.311673][ T4819] 4 locks held by kworker/0:6/4819: [ 35.311677][ T4819] #0: ffff0000c002b540 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 35.311715][ T4819] #1: ffff800093717c40 ((work_completion)(&uhid->worker)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 35.311735][ T4819] #2: ffff0000f345da58 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x390 [ 35.311758][ T4819] #3: ffff0000f34b2170 (&data->lock){....}-{3:3}, at: picolcd_set_contrast+0x104/0x290 [ 35.311777][ T4819] irq event stamp: 40200 [ 35.325536][ T4819] hardirqs last enabled at (40199): [] kasan_quarantine_put+0xb4/0x1c4 [ 35.327228][ T4819] hardirqs last disabled at (40200): [] _raw_spin_lock_irqsave+0x2c/0x7c [ 35.329005][ T4819] softirqs last enabled at (40146): [] __alloc_skb+0x1c0/0x610 [ 35.330660][ T4819] softirqs last disabled at (40144): [] __alloc_skb+0x1a8/0x610 [ 35.332288][ T4819] Preemption disabled at: [ 35.332296][ T4819] [] picolcd_set_contrast+0x104/0x290 [ 35.332318][ T4819] CPU: 0 UID: 0 PID: 4819 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT [ 35.332335][ T4819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 35.332343][ T4819] Workqueue: events uhid_device_add_worker [ 35.332355][ T4819] Call trace: [ 35.332358][ T4819] show_stack+0x2c/0x3c (C) [ 35.332371][ T4819] __dump_stack+0x30/0x40 [ 35.332382][ T4819] dump_stack_lvl+0xd8/0x12c [ 35.332391][ T4819] dump_stack+0x1c/0x28 [ 35.332401][ T4819] __might_resched+0x354/0x4c0 [ 35.332410][ T4819] __might_sleep+0x84/0xdc [ 35.332418][ T4819] __kmalloc_noprof+0xfc/0x6b8 [ 35.332427][ T4819] __hid_request+0xac/0x3cc [ 35.332437][ T4819] hid_hw_request+0x9c/0xb4 [ 35.332446][ T4819] picolcd_set_contrast+0x1b8/0x290 [ 35.332454][ T4819] picolcd_init_lcd+0x1b4/0x2a0 [ 35.332461][ T4819] picolcd_probe+0x8a8/0x1110 [ 35.332468][ T4819] hid_device_probe+0x36c/0x5d4 [ 35.332478][ T4819] really_probe+0x29c/0x800 [ 35.332488][ T4819] __driver_probe_device+0x1e0/0x350 [ 35.332498][ T4819] driver_probe_device+0x6c/0x19c [ 35.332507][ T4819] __device_attach_driver+0x198/0x2f8 [ 35.332517][ T4819] bus_for_each_drv+0x144/0x1dc [ 35.332526][ T4819] __device_attach+0x248/0x390 [ 35.332535][ T4819] device_initial_probe+0x90/0xc8 [ 35.332544][ T4819] bus_probe_device+0x58/0x120 [ 35.332553][ T4819] device_add+0x6cc/0x9e0 [ 35.332559][ T4819] hid_add_device+0x254/0x3b8 [ 35.332566][ T4819] uhid_device_add_worker+0x4c/0xf8 [ 35.332575][ T4819] process_scheduled_works+0x788/0x10b8 [ 35.332583][ T4819] worker_thread+0x798/0xbd0 [ 35.332592][ T4819] kthread+0x304/0x3d4 [ 35.332600][ T4819] ret_from_fork+0x10/0x20 [ 35.332658][ T4819] [ 35.360771][ T4819] ============================= [ 35.361549][ T4819] [ BUG: Invalid wait context ] [ 35.362296][ T4819] syzkaller #0 Tainted: G W [ 35.363292][ T4819] ----------------------------- [ 35.364138][ T4819] kworker/0:6/4819 is trying to lock: [ 35.365042][ T4819] ffff0000f34593c0 (&uhid->report_lock){....}-{4:4}, at: uhid_hid_raw_request+0x174/0x574 [ 35.366690][ T4819] other info that might help us debug this: [ 35.367745][ T4819] context-{5:5} [ 35.368317][ T4819] 4 locks held by kworker/0:6/4819: [ 35.369175][ T4819] #0: ffff0000c002b540 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 35.371034][ T4819] #1: ffff800093717c40 ((work_completion)(&uhid->worker)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 35.373076][ T4819] #2: ffff0000f345da58 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x390 [ 35.374678][ T4819] #3: ffff0000f34b2170 (&data->lock){....}-{3:3}, at: picolcd_set_contrast+0x104/0x290 [ 35.376346][ T4819] stack backtrace: [ 35.376960][ T4819] CPU: 0 UID: 0 PID: 4819 Comm: kworker/0:6 Tainted: G W syzkaller #0 PREEMPT [ 35.378675][ T4819] Tainted: [W]=WARN [ 35.379274][ T4819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 35.380905][ T4819] Workqueue: events uhid_device_add_worker [ 35.381870][ T4819] Call trace: [ 35.382435][ T4819] show_stack+0x2c/0x3c (C) [ 35.383223][ T4819] __dump_stack+0x30/0x40 [ 35.384009][ T4819] dump_stack_lvl+0xd8/0x12c [ 35.384848][ T4819] dump_stack+0x1c/0x28 [ 35.385594][ T4819] __lock_acquire+0xb04/0x2ebc [ 35.386358][ T4819] lock_acquire+0x140/0x364 [ 35.387126][ T4819] __mutex_lock+0x164/0xf14 [ 35.387880][ T4819] mutex_lock_interruptible_nested+0x24/0x30 [ 35.388965][ T4819] uhid_hid_raw_request+0x174/0x574 [ 35.389912][ T4819] __hid_request+0x1f4/0x3cc [ 35.390735][ T4819] hid_hw_request+0x9c/0xb4 [ 35.391531][ T4819] picolcd_set_contrast+0x1b8/0x290 [ 35.392520][ T4819] picolcd_init_lcd+0x1b4/0x2a0 [ 35.393432][ T4819] picolcd_probe+0x8a8/0x1110 [ 35.394309][ T4819] hid_device_probe+0x36c/0x5d4 [ 35.395225][ T4819] really_probe+0x29c/0x800 [ 35.396099][ T4819] __driver_probe_device+0x1e0/0x350 [ 35.397111][ T4819] driver_probe_device+0x6c/0x19c [ 35.398080][ T4819] __device_attach_driver+0x198/0x2f8 [ 35.399088][ T4819] bus_for_each_drv+0x144/0x1dc [ 35.399931][ T4819] __device_attach+0x248/0x390 [ 35.400710][ T4819] device_initial_probe+0x90/0xc8 [ 35.401600][ T4819] bus_probe_device+0x58/0x120 [ 35.402395][ T4819] device_add+0x6cc/0x9e0 [ 35.403153][ T4819] hid_add_device+0x254/0x3b8 [ 35.403976][ T4819] uhid_device_add_worker+0x4c/0xf8 [ 35.404837][ T4819] process_scheduled_works+0x788/0x10b8 [ 35.405751][ T4819] worker_thread+0x798/0xbd0 [ 35.406501][ T4819] kthread+0x304/0x3d4 [ 35.407174][ T4819] ret_from_fork+0x10/0x20 [ 35.408175][ T4819] BUG: scheduling while atomic: kworker/0:6/4819/0x00000002 [ 35.408385][ T4819] INFO: lockdep is turned off. [ 35.408390][ T4819] Modules linked in: [ 35.408397][ T4819] Preemption disabled at: [ 35.408400][ T4819] [] picolcd_set_contrast+0x104/0x290 [ 35.408414][ T4819] CPU: 0 UID: 0 PID: 4819 Comm: kworker/0:6 Tainted: G W syzkaller #0 PREEMPT [ 35.408424][ T4819] Tainted: [W]=WARN [ 35.408426][ T4819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 35.408430][ T4819] Workqueue: events uhid_device_add_worker [ 35.408439][ T4819] Call trace: [ 35.408441][ T4819] show_stack+0x2c/0x3c (C) [ 35.408451][ T4819] __dump_stack+0x30/0x40 [ 35.408461][ T4819] dump_stack_lvl+0xd8/0x12c [ 35.408470][ T4819] dump_stack+0x1c/0x28 [ 35.408479][ T4819] __schedule_bug+0x10c/0x190 [ 35.408489][ T4819] __schedule+0x1478/0x2d80 [ 35.408496][ T4819] schedule+0x13c/0x20c [ 35.408502][ T4819] schedule_timeout+0x13c/0x28c [ 35.408510][ T4819] __uhid_report_queue_and_wait+0x1f4/0x500 [ 35.408518][ T4819] uhid_hid_raw_request+0x2e0/0x574 [ 35.408526][ T4819] __hid_request+0x1f4/0x3cc [ 35.408536][ T4819] hid_hw_request+0x9c/0xb4 [ 35.408545][ T4819] picolcd_set_contrast+0x1b8/0x290 [ 35.408552][ T4819] picolcd_init_lcd+0x1b4/0x2a0 [ 35.408559][ T4819] picolcd_probe+0x8a8/0x1110 [ 35.408565][ T4819] hid_device_probe+0x36c/0x5d4 [ 35.408575][ T4819] really_probe+0x29c/0x800 [ 35.408584][ T4819] __driver_probe_device+0x1e0/0x350 [ 35.408594][ T4819] driver_probe_device+0x6c/0x19c [ 35.408603][ T4819] __device_attach_driver+0x198/0x2f8 [ 35.408612][ T4819] bus_for_each_drv+0x144/0x1dc [ 35.408620][ T4819] __device_attach+0x248/0x390 [ 35.408629][ T4819] device_initial_probe+0x90/0xc8 [ 35.408638][ T4819] bus_probe_device+0x58/0x120 [ 35.408646][ T4819] device_add+0x6cc/0x9e0 [ 35.408653][ T4819] hid_add_device+0x254/0x3b8 [ 35.408659][ T4819] uhid_device_add_worker+0x4c/0xf8 [ 35.408667][ T4819] process_scheduled_works+0x788/0x10b8 [ 35.408675][ T4819] worker_thread+0x798/0xbd0 [ 35.408683][ T4819] kthread+0x304/0x3d4 [ 35.408690][ T4819] ret_from_fork+0x10/0x20 [ ** replaying previous printk message ** [ 35.462774][ T4819] ------------[ cut here ]------------ [ 35.462796][ T4819] raw_local_irq_restore() called with IRQs enabled [ 35.462836][ T4819] WARNING: kernel/locking/irqflag-debug.c:10 at warn_bogus_irq_restore+0x30/0x40, CPU#0: kworker/0:6/4819 [ 35.467676][ T4819] Modules linked in: [ 35.468404][ T4819] CPU: 0 UID: 0 PID: 4819 Comm: kworker/0:6 Tainted: G W syzkaller #0 PREEMPT [ 35.470267][ T4819] Tainted: [W]=WARN [ 35.470945][ T4819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 35.472652][ T4819] Workqueue: events uhid_device_add_worker [ 35.473660][ T4819] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 35.474977][ T4819] pc : warn_bogus_irq_restore+0x30/0x40 [ 35.475934][ T4819] lr : warn_bogus_irq_restore+0x30/0x40 [ 35.476840][ T4819] sp : ffff8000937175d0 [ 35.477613][ T4819] x29: ffff8000937175d0 x28: ffff0000f345c870 x27: ffff0000f34b2100 [ 35.478969][ T4819] x26: 1fffe0001e6b1008 x25: ffff0000f3588040 x24: 1fffe0001e696400 [ 35.480354][ T4819] x23: dfff800000000000 x22: ffff0000f345c000 x21: 0000000000000000 [ 35.481758][ T4819] x20: ffff0000f34b2158 x19: 0000000000000000 x18: 1fffe00034bb7428 [ 35.483165][ T4819] x17: 0000000000000003 x16: ffff800088b37000 x15: ffff8000824e708c [ 35.484487][ T4819] x14: ffff8000824f1d48 x13: 0000000000000001 x12: 0000000000000000 [ 35.485928][ T4819] x11: 0000000000000000 x10: 0000000000000002 x9 : d99282beb0cb9c00 [ 35.487302][ T4819] x8 : d99282beb0cb9c00 x7 : 0000000000000000 x6 : ffff80008048c5b8 [ 35.488663][ T4819] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f6830 [ 35.490089][ T4819] x2 : 0000000100000000 x1 : ffff0000d7dad7c0 x0 : 0000000000000000 [ 35.491553][ T4819] Call trace: [ 35.492106][ T4819] warn_bogus_irq_restore+0x30/0x40 (P) [ 35.493024][ T4819] _raw_spin_unlock_irqrestore+0x8c/0x98 [ 35.493962][ T4819] picolcd_set_contrast+0x204/0x290 [ 35.494808][ T4819] picolcd_init_lcd+0x1b4/0x2a0 [ 35.495647][ T4819] picolcd_probe+0x8a8/0x1110 [ 35.496406][ T4819] hid_device_probe+0x36c/0x5d4 [ 35.497234][ T4819] really_probe+0x29c/0x800 [ 35.497975][ T4819] __driver_probe_device+0x1e0/0x350 [ 35.498841][ T4819] driver_probe_device+0x6c/0x19c [ 35.499672][ T4819] __device_attach_driver+0x198/0x2f8 [ 35.500574][ T4819] bus_for_each_drv+0x144/0x1dc [ 35.501396][ T4819] __device_attach+0x248/0x390 [ 35.502227][ T4819] device_initial_probe+0x90/0xc8 [ 35.503075][ T4819] bus_probe_device+0x58/0x120 [ 35.503857][ T4819] device_add+0x6cc/0x9e0 [ 35.504545][ T4819] hid_add_device+0x254/0x3b8 [ 35.505360][ T4819] uhid_device_add_worker+0x4c/0xf8 [ 35.506303][ T4819] process_scheduled_works+0x788/0x10b8 [ 35.507314][ T4819] worker_thread+0x798/0xbd0 [ 35.508128][ T4819] kthread+0x304/0x3d4 [ 35.508852][ T4819] ret_from_fork+0x10/0x20 [ 35.509586][ T4819] irq event stamp: 40200 [ 35.510297][ T4819] hardirqs last enabled at (40199): [] kasan_quarantine_put+0xb4/0x1c4 [ 35.511965][ T4819] hardirqs last disabled at (40200): [] _raw_spin_lock_irqsave+0x2c/0x7c [ 35.513739][ T4819] softirqs last enabled at (40146): [] __alloc_skb+0x1c0/0x610 [ 35.515260][ T4819] softirqs last disabled at (40144): [] __alloc_skb+0x1a8/0x610 [ 35.516764][ T4819] ---[ end trace 0000000000000000 ]--- [ 35.519117][ T4819] hid-picolcd 0003:04D8:C002.0001: No report with id 0x94 found [ 35.519141][ T4819] hid-picolcd 0003:04D8:C002.0001: failed to configure display [ 35.621817][ T4723] Bluetooth: hci0: command 0x040f tx timeout [ 36.491736][ T4721] Bluetooth: hci3: command 0x040f tx timeout [ 36.491776][ T4721] Bluetooth: hci2: command 0x040f tx timeout [ 36.491806][ T4721] Bluetooth: hci1: command 0x040f tx timeout [ 36.492771][ T4723] Bluetooth: hci4: command 0x040f tx timeout [ 37.692085][ T4723] Bluetooth: hci0: command 0x040f tx timeout [ 38.571724][ T4723] Bluetooth: hci4: command 0x040f tx timeout [ 38.572086][ T4721] Bluetooth: hci3: command 0x040f tx timeout [ 38.581836][ T4721] Bluetooth: hci2: command 0x040f tx timeout [ 38.581883][ T4723] Bluetooth: hci1: command 0x040f tx timeout [ 39.771732][ T4723] Bluetooth: hci0: command 0x040f tx timeout [ 40.651744][ T4721] Bluetooth: hci2: command 0x040f tx timeout [ 40.651778][ T4721] Bluetooth: hci4: command 0x040f tx timeout [ 40.651801][ T4721] Bluetooth: hci3: command 0x040f tx timeout [ 40.652484][ T4723] Bluetooth: hci1: command 0x040f tx timeout [ 41.851749][ T4723] Bluetooth: hci0: command 0x040f tx timeout [ 42.731766][ T4721] Bluetooth: hci1: command 0x040f tx timeout [ 42.731784][ T4715] Bluetooth: hci2: command 0x040f tx timeout [ 42.732323][ T4723] Bluetooth: hci4: command 0x040f tx timeout [ 42.733552][ T4726] Bluetooth: hci3: command 0x040f tx timeout [ 43.931750][ T4726] Bluetooth: hci0: command 0x040f tx timeout [ 44.811722][ T4726] Bluetooth: hci2: command 0x040f tx timeout [ 44.821739][ T4726] Bluetooth: hci3: command 0x040f tx timeout [ 44.821767][ T4726] Bluetooth: hci4: command 0x040f tx timeout [ 44.821787][ T4726] Bluetooth: hci1: command 0x040f tx timeout