last executing test programs: 4.816711803s ago: executing program 2 (id=3): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a05b10000000000000109022200010100803209040000010300000009211101000122170007058103400001"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000240), 0x1, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x2, 0x0) syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000300), 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000340), 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000380), 0x3, 0x0) syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x0) syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000000)="02c08120000000000000") syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000000)="02000000000000000000") 4.195434459s ago: executing program 1 (id=7): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1000}]}}]}, 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f0000000a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000d00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000d40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000dc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000e00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000e80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000ec0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000f40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000f80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000001000)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001040)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001080)=[{&(0x7f00000010c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001100)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001140)=[{&(0x7f0000001180)='\x00', 0x1}], 0x1}}, {{&(0x7f00000011c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001200)=[{&(0x7f0000001240)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001280)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000001300)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001340)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001380)=[{&(0x7f00000013c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001400)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001440)=[{&(0x7f0000001480)='\x00', 0x1}], 0x1}}, {{&(0x7f00000014c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001500)=[{&(0x7f0000001540)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001580)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000001600)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001680)=[{&(0x7f00000016c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001740)=[{&(0x7f0000001780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000017c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001800)=[{&(0x7f0000001840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000001900)='\x00', 0x1}], 0x1}}], 0x14, 0x0) sendmmsg$inet(r0, &(0x7f0000001940)=[{{&(0x7f0000001e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001e80)=[{&(0x7f0000001ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002000)=[{&(0x7f0000002040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000020c0)=[{&(0x7f0000002100)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002140)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002180)=[{&(0x7f00000021c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002200)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002240)=[{&(0x7f0000002280)='\x00', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002300)=[{&(0x7f0000002340)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002380)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000002400)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002440)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002480)=[{&(0x7f00000024c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002500)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002540)=[{&(0x7f0000002580)='\x00', 0x1}], 0x1}}, {{&(0x7f00000025c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002640)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002680)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000026c0)=[{&(0x7f0000002700)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002740)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002780)=[{&(0x7f00000027c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002800)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002840)=[{&(0x7f0000002880)='\x00', 0x1}], 0x1}}, {{&(0x7f00000028c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002900)=[{&(0x7f0000002940)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002980)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000029c0)=[{&(0x7f0000002a00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002a80)=[{&(0x7f0000002ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002b40)=[{&(0x7f0000002b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002c00)=[{&(0x7f0000002c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002cc0)=[{&(0x7f0000002d00)='\x00', 0x1}], 0x1}}], 0x14, 0x0) sendmmsg$inet(r0, &(0x7f0000002d40)=[{{&(0x7f0000003240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003280)=[{&(0x7f00000032c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003340)=[{&(0x7f0000003380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000033c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003400)=[{&(0x7f0000003440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000034c0)=[{&(0x7f0000003500)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003540)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003580)=[{&(0x7f00000035c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003600)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003640)=[{&(0x7f0000003680)='\x00', 0x1}], 0x1}}, {{&(0x7f00000036c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003700)=[{&(0x7f0000003740)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003780)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000037c0)=[{&(0x7f0000003800)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003840)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003880)=[{&(0x7f00000038c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003900)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003940)=[{&(0x7f0000003980)='\x00', 0x1}], 0x1}}, {{&(0x7f00000039c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003a00)=[{&(0x7f0000003a40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003a80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003ac0)=[{&(0x7f0000003b00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003b40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003b80)=[{&(0x7f0000003bc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003c00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003c40)=[{&(0x7f0000003c80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003cc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003d00)=[{&(0x7f0000003d40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003d80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003dc0)=[{&(0x7f0000003e00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003e80)=[{&(0x7f0000003ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003f40)=[{&(0x7f0000003f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004000)=[{&(0x7f0000004040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000040c0)=[{&(0x7f0000004100)='\x00', 0x1}], 0x1}}], 0x14, 0x0) sendmmsg$inet(r0, &(0x7f0000004140)=[{{&(0x7f0000004640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004680)=[{&(0x7f00000046c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004740)=[{&(0x7f0000004780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000047c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004800)=[{&(0x7f0000004840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000048c0)=[{&(0x7f0000004900)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004940)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004980)=[{&(0x7f00000049c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004a00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004a40)=[{&(0x7f0000004a80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004ac0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004b00)=[{&(0x7f0000004b40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004b80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004bc0)=[{&(0x7f0000004c00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004c40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004c80)=[{&(0x7f0000004cc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004d00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004d40)=[{&(0x7f0000004d80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004dc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004e00)=[{&(0x7f0000004e40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004e80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004ec0)=[{&(0x7f0000004f00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004f40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004f80)=[{&(0x7f0000004fc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005000)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005040)=[{&(0x7f0000005080)='\x00', 0x1}], 0x1}}, {{&(0x7f00000050c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005100)=[{&(0x7f0000005140)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005180)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000051c0)=[{&(0x7f0000005200)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005280)=[{&(0x7f00000052c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005340)=[{&(0x7f0000005380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000053c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005400)=[{&(0x7f0000005440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000054c0)=[{&(0x7f0000005500)='\x00', 0x1}], 0x1}}], 0x14, 0x0) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000005a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005a80)=[{&(0x7f0000005ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005b40)=[{&(0x7f0000005b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005c00)=[{&(0x7f0000005c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005cc0)=[{&(0x7f0000005d00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005d40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005d80)=[{&(0x7f0000005dc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005e00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005e40)=[{&(0x7f0000005e80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005ec0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005f00)=[{&(0x7f0000005f40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005f80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005fc0)=[{&(0x7f0000006000)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006040)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006080)=[{&(0x7f00000060c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006100)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006140)=[{&(0x7f0000006180)='\x00', 0x1}], 0x1}}, {{&(0x7f00000061c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006200)=[{&(0x7f0000006240)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006280)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000062c0)=[{&(0x7f0000006300)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006340)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006380)=[{&(0x7f00000063c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006400)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006440)=[{&(0x7f0000006480)='\x00', 0x1}], 0x1}}, {{&(0x7f00000064c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006500)=[{&(0x7f0000006540)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006580)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000065c0)=[{&(0x7f0000006600)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006680)=[{&(0x7f00000066c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006740)=[{&(0x7f0000006780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000067c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006800)=[{&(0x7f0000006840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000068c0)=[{&(0x7f0000006900)='\x00', 0x1}], 0x1}}], 0x14, 0x0) sendmmsg$inet(r0, &(0x7f0000006940)=[{{&(0x7f0000006e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006e80)=[{&(0x7f0000006ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006f40)=[{&(0x7f0000006f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007000)=[{&(0x7f0000007040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000070c0)=[{&(0x7f0000007100)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007140)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007180)=[{&(0x7f00000071c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007200)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007240)=[{&(0x7f0000007280)='\x00', 0x1}], 0x1}}, {{&(0x7f00000072c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007300)=[{&(0x7f0000007340)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007380)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000073c0)=[{&(0x7f0000007400)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007440)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007480)=[{&(0x7f00000074c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007500)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007540)=[{&(0x7f0000007580)='\x00', 0x1}], 0x1}}, {{&(0x7f00000075c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007600)=[{&(0x7f0000007640)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007680)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000076c0)=[{&(0x7f0000007700)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007740)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007780)=[{&(0x7f00000077c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007800)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007840)=[{&(0x7f0000007880)='\x00', 0x1}], 0x1}}, {{&(0x7f00000078c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007900)=[{&(0x7f0000007940)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007980)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000079c0)=[{&(0x7f0000007a00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007a80)=[{&(0x7f0000007ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007b40)=[{&(0x7f0000007b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007c00)=[{&(0x7f0000007c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007cc0)=[{&(0x7f0000007d00)='\x00', 0x1}], 0x1}}], 0x14, 0x0) sendmmsg$inet(r0, &(0x7f0000007d40)=[{{&(0x7f0000008240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008280)=[{&(0x7f00000082c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008340)=[{&(0x7f0000008380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000083c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008400)=[{&(0x7f0000008440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000084c0)=[{&(0x7f0000008500)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008540)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008580)=[{&(0x7f00000085c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008600)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008640)=[{&(0x7f0000008680)='\x00', 0x1}], 0x1}}, {{&(0x7f00000086c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008700)=[{&(0x7f0000008740)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008780)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000087c0)=[{&(0x7f0000008800)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008840)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008880)=[{&(0x7f00000088c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008900)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008940)=[{&(0x7f0000008980)='\x00', 0x1}], 0x1}}, {{&(0x7f00000089c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008a00)=[{&(0x7f0000008a40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008a80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008ac0)=[{&(0x7f0000008b00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008b40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008b80)=[{&(0x7f0000008bc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008c00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008c40)=[{&(0x7f0000008c80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008cc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008d00)=[{&(0x7f0000008d40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008d80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008dc0)=[{&(0x7f0000008e00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008e80)=[{&(0x7f0000008ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008f40)=[{&(0x7f0000008f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009000)=[{&(0x7f0000009040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000090c0)=[{&(0x7f0000009100)='\x00', 0x1}], 0x1}}], 0x14, 0x0) sendmmsg$inet(r0, &(0x7f0000009140)=[{{&(0x7f0000009640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009680)=[{&(0x7f00000096c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009740)=[{&(0x7f0000009780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000097c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009800)=[{&(0x7f0000009840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000098c0)=[{&(0x7f0000009900)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009940)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009980)=[{&(0x7f00000099c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009a00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009a40)=[{&(0x7f0000009a80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009ac0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009b00)=[{&(0x7f0000009b40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009b80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009bc0)=[{&(0x7f0000009c00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009c40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009c80)=[{&(0x7f0000009cc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009d00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009d40)=[{&(0x7f0000009d80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009dc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009e00)=[{&(0x7f0000009e40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009e80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009ec0)=[{&(0x7f0000009f00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009f40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009f80)=[{&(0x7f0000009fc0)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a000)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a040)=[{&(0x7f000000a080)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a0c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a100)=[{&(0x7f000000a140)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a180)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a1c0)=[{&(0x7f000000a200)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a280)=[{&(0x7f000000a2c0)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a340)=[{&(0x7f000000a380)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a3c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a400)=[{&(0x7f000000a440)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a4c0)=[{&(0x7f000000a500)='\x00', 0x1}], 0x1}}], 0x14, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) sendto$inet(r0, &(0x7f0000000400)='\x00', 0x1, 0x0, &(0x7f0000000500)={0x2, 0x1234, @loopback}, 0x10) 3.813058229s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r0, &(0x7f0000000840)='0\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r1, &(0x7f0000000940)='0\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x2, 0x0) write(r2, &(0x7f0000000540)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f0000000440)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f00000000c0)='8\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000100)='./nfs_mnt\x00', &(0x7f0000000140)='nfs4\x00', 0x0, &(0x7f0000000180)='addr=127.0.0.1,port=2049,vers=4.2\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/clients/1/info\x00', 0x0, 0x0) read(r5, &(0x7f0000000300), 0x64) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/clients/2/info\x00', 0x0, 0x0) read(r6, &(0x7f0000000300), 0x64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/clients/3/info\x00', 0x0, 0x0) read(r7, &(0x7f0000000300), 0x64) 3.654333029s ago: executing program 4 (id=5): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000700)={0x1}, 0x0) 3.394930955s ago: executing program 1 (id=9): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) read(r0, &(0x7f0000000100)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000001c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200)={0x2, 0xfa}, 0x2) 2.934395016s ago: executing program 1 (id=12): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000400)='1', 0x1) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e06010f04000000043e130100ca00000110aaaaaaaaaa00000000000000"], 0x1f) nanosleep(&(0x7f0000000a00)={0x0, 0x10000000}, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000200)='connect aa:aa:aa:aa:aa:10 1', 0x1b) nanosleep(&(0x7f0000000a00)={0x0, 0x10000000}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt(r2, 0x1, 0x19, &(0x7f0000000600)='bt0\x00', 0x4) sendto$inet6(r2, &(0x7f0000000700)='\x00', 0x1, 0x0, &(0x7f0000000800)={0xa, 0x0, 0x0, @mcast2}, 0x1c) write$6lowpan_control(r1, &(0x7f0000000900)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) 2.47236391s ago: executing program 1 (id=13): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write(r0, &(0x7f0000001300)="0600000000000000020000000100"/102, 0x66) 2.378522929s ago: executing program 1 (id=14): mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./uverbs2\x00', 0x81b6, 0xe7c2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./uverbs2\x00', 0x2, 0x0) close(r0) 2.366441094s ago: executing program 1 (id=15): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000140)={0xc0, 0xa1, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000200)={0x34, &(0x7f0000000240)={0xc0, 0xa1, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000340)={0x40, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000440)={0xc0, 0xa1, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000540)={0xc0, 0xa1, 0x4, '\x00\x00\x00x'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000640)={0xc0, 0xa1, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000740)={0xc0, 0xa1, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000002000)={0x1}, 0x0) 2.130824055s ago: executing program 0 (id=16): r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015160500011516050009040101010e02000007058105000201"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000500)={0xa1, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000700)={0xa1, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000900)={0xa1, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000b00)={0xa1, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000400)={0x1, @pix={0x280, 0x1e0, 0x56595559, 0x1}}) 1.985509064s ago: executing program 2 (id=17): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x13, 0x3, 0x1234, 0x5678, 0x0, 0x0, "05850901a101096515002564750895018102c0"}}, 0x12b) read(r0, &(0x7f0000000300)=""/4380, 0x111c) 1.786679001s ago: executing program 2 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='usbip-vudc\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='pcspkr\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00') symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000780)='pcspkr\x00', 0x6) r3 = syz_open_dev$video(&(0x7f0000000800), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559}) 1.666676071s ago: executing program 2 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='disk\n', 0x6) 906.470837ms ago: executing program 3 (id=20): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="11223344", 0x4}], 0x1, 0x0, 0x0) 669.20418ms ago: executing program 4 (id=21): syz_usb_connect(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408c0d030100010102030109026400020100803209040000000101000009240100011e0001010c2402010102000203000000092403020101000100090401000001020000090401010101020000072401020101000b2402010202100180bb0009058101c00001000007250100"/128], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x5}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000200)={{0x1}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000200)={{0x2}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000200)={{0x3}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000200)={{0x4}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000200)={{0x5}}) 466.696882ms ago: executing program 3 (id=22): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000100)={0x11, 0x3, 0x3, 0x1, 0x0, 0x0}, 0x14) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000100)=@ll={0x11, 0x3, 0x3, 0x1, 0x0, 0x0}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000400)="aa", 0x100}, {&(0x7f0000000500)="bb", 0x100}, {&(0x7f0000000600)="cc", 0x100}], 0x3}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000100)={0x11, 0x3, 0x4, 0x1, 0x0, 0x0}, 0x14) sendmsg(r1, &(0x7f0000000200)={&(0x7f0000000100)=@ll={0x11, 0x3, 0x4, 0x1, 0x0, 0x0}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000400)="aa", 0x100}, {&(0x7f0000000500)="bb", 0x100}, {&(0x7f0000000600)="cc", 0x100}], 0x3}, 0x0) 435.243035ms ago: executing program 3 (id=23): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./ram1\x00', 0x8000, 0x101) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./ram1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="fc4e2ba9", 0x4, 0x7ff0000) pwrite64(r0, &(0x7f0000000100)='Z\x00\x00\x00', 0x4, 0x7ff0008) pwrite64(r0, &(0x7f0000000140)="01000000", 0x4, 0x7ff0028) pwrite64(r0, &(0x7f0000000180)="5d4f2ba9", 0x4, 0x7ff0098) pwrite64(r0, &(0x7f00000001c0)="06000000", 0x4, 0x7ff0210) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='md0\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='0.90', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1:1', 0x3) 123.898438ms ago: executing program 3 (id=24): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write(r0, &(0x7f0000001300)="0600000000000000020000000100"/102, 0x66) 5.90662ms ago: executing program 3 (id=25): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') setns(r0, 0x40000000) r1 = socket(0x8, 0x2, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x8}, 0xc) 0s ago: executing program 3 (id=26): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402505a0a40000000000010902240001010080fa0904000002ff000000090581020002000000090502020002000000"], 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000500)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0xc01c5564, &(0x7f0000000300)="000000000100000000040000000000000100"/28}) kernel console output (not intermixed with test programs): [ 57.427259][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 57.427276][ T29] audit: type=1400 audit(1785856720.232:115): avc: denied { write } for pid=5489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.491051][ T29] audit: type=1400 audit(1785856720.292:116): avc: denied { write } for pid=5500 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.668275][ T29] audit: type=1400 audit(1785856720.472:117): avc: denied { write } for pid=5503 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.728707][ T29] audit: type=1400 audit(1785856720.532:118): avc: denied { write } for pid=5514 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.915297][ T29] audit: type=1400 audit(1785856720.722:119): avc: denied { write } for pid=5517 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.978076][ T29] audit: type=1400 audit(1785856720.782:120): avc: denied { write } for pid=5528 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.196350][ T29] audit: type=1400 audit(1785856721.002:121): avc: denied { write } for pid=5531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.243011][ T29] audit: type=1400 audit(1785856721.042:122): avc: denied { write } for pid=5542 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.427670][ T29] audit: type=1400 audit(1785856721.232:123): avc: denied { write } for pid=5545 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.482905][ T29] audit: type=1400 audit(1785856721.282:124): avc: denied { write } for pid=5556 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. [ 64.839744][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 64.839759][ T29] audit: type=1400 audit(1785856727.642:129): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 64.869542][ T29] audit: type=1400 audit(1785856727.672:130): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.873164][ T5596] cgroup: Unknown subsys name 'net' [ 64.899890][ T29] audit: type=1400 audit(1785856727.702:131): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.047330][ T5596] cgroup: Unknown subsys name 'cpuset' [ 65.056643][ T5596] cgroup: Unknown subsys name 'rlimit' [ 65.204940][ T29] audit: type=1400 audit(1785856728.002:132): avc: denied { setattr } for pid=5596 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.239992][ T29] audit: type=1400 audit(1785856728.012:133): avc: denied { create } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.261146][ T29] audit: type=1400 audit(1785856728.012:134): avc: denied { write } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.288860][ T29] audit: type=1400 audit(1785856728.012:135): avc: denied { read } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.309467][ T29] audit: type=1400 audit(1785856728.012:136): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 65.334609][ T29] audit: type=1400 audit(1785856728.012:137): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 65.359462][ T5598] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 65.370168][ T29] audit: type=1400 audit(1785856728.172:138): avc: denied { relabelto } for pid=5598 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 66.387490][ T5596] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.462237][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.473195][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.480986][ T5609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.490747][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.499599][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.508465][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.510031][ T5615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.517104][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.525558][ T5615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.530973][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.565846][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.575154][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.582896][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.590815][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.599888][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.601069][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.610866][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.616543][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.625184][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.629559][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.641690][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.645140][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.661577][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.672065][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.684308][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.861759][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.874942][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.882213][ T5612] bridge_slave_0: entered allmulticast mode [ 69.897404][ T5612] bridge_slave_0: entered promiscuous mode [ 69.911480][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.918688][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.928228][ T5612] bridge_slave_1: entered allmulticast mode [ 69.937556][ T5612] bridge_slave_1: entered promiscuous mode [ 70.031474][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.063737][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.132314][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.139500][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.147462][ T5616] bridge_slave_0: entered allmulticast mode [ 70.154190][ T5616] bridge_slave_0: entered promiscuous mode [ 70.172776][ T5612] team0: Port device team_slave_0 added [ 70.185928][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.193075][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.200536][ T5616] bridge_slave_1: entered allmulticast mode [ 70.207363][ T5616] bridge_slave_1: entered promiscuous mode [ 70.225960][ T5612] team0: Port device team_slave_1 added [ 70.250848][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.258153][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.265396][ T5608] bridge_slave_0: entered allmulticast mode [ 70.272108][ T5608] bridge_slave_0: entered promiscuous mode [ 70.285128][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.292285][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.299494][ T5613] bridge_slave_0: entered allmulticast mode [ 70.306241][ T5613] bridge_slave_0: entered promiscuous mode [ 70.328232][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.335405][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.342536][ T5619] bridge_slave_0: entered allmulticast mode [ 70.350495][ T5619] bridge_slave_0: entered promiscuous mode [ 70.357936][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.365390][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.373561][ T5608] bridge_slave_1: entered allmulticast mode [ 70.380962][ T5608] bridge_slave_1: entered promiscuous mode [ 70.393929][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.401289][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.408536][ T5613] bridge_slave_1: entered allmulticast mode [ 70.415385][ T5613] bridge_slave_1: entered promiscuous mode [ 70.423739][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.434280][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.441558][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.448962][ T5619] bridge_slave_1: entered allmulticast mode [ 70.455721][ T5619] bridge_slave_1: entered promiscuous mode [ 70.469242][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.476550][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.502560][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.521595][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.559618][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.566733][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.592717][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.618778][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.632828][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.645724][ T5627] Bluetooth: hci0: command tx timeout [ 70.651866][ T5615] Bluetooth: hci1: command tx timeout [ 70.652500][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.668026][ T5616] team0: Port device team_slave_0 added [ 70.675768][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.686711][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.711452][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.715410][ T5627] Bluetooth: hci3: command tx timeout [ 70.721743][ T5615] Bluetooth: hci4: command tx timeout [ 70.726928][ T5624] Bluetooth: hci2: command tx timeout [ 70.743234][ T5616] team0: Port device team_slave_1 added [ 70.769802][ T5619] team0: Port device team_slave_0 added [ 70.807574][ T5608] team0: Port device team_slave_0 added [ 70.815198][ T5619] team0: Port device team_slave_1 added [ 70.829227][ T5613] team0: Port device team_slave_0 added [ 70.836242][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.843212][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.869343][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.884948][ T5612] hsr_slave_0: entered promiscuous mode [ 70.891411][ T5612] hsr_slave_1: entered promiscuous mode [ 70.900279][ T5608] team0: Port device team_slave_1 added [ 70.913482][ T5613] team0: Port device team_slave_1 added [ 70.919748][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.926776][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.952830][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.975934][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.982971][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.008953][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.048034][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.055214][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.081325][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.115701][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.122768][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.148914][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.165890][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.172883][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.200527][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.201075][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.218589][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.230177][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.237243][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.263317][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.275343][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.282325][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.309307][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.323545][ T5616] hsr_slave_0: entered promiscuous mode [ 71.329808][ T5616] hsr_slave_1: entered promiscuous mode [ 71.336404][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 71.342189][ T5616] Cannot create hsr debugfs directory [ 71.423180][ T5619] hsr_slave_0: entered promiscuous mode [ 71.429575][ T5619] hsr_slave_1: entered promiscuous mode [ 71.435858][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 71.441594][ T5619] Cannot create hsr debugfs directory [ 71.485472][ T5613] hsr_slave_0: entered promiscuous mode [ 71.491562][ T5613] hsr_slave_1: entered promiscuous mode [ 71.497949][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 71.503673][ T5613] Cannot create hsr debugfs directory [ 71.513347][ T5608] hsr_slave_0: entered promiscuous mode [ 71.519759][ T5608] hsr_slave_1: entered promiscuous mode [ 71.526052][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 71.531787][ T5608] Cannot create hsr debugfs directory [ 71.857852][ T5612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.869176][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.877374][ T5612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.887570][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.901664][ T5612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.910867][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.918684][ T5612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.927705][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.987111][ T5619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.000820][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.009144][ T5619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.019147][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.029947][ T5619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.039873][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.065264][ T5619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.075628][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.143679][ T5616] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.154529][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.162987][ T5616] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.172608][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.182198][ T5616] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.191515][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.200041][ T5616] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.208698][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.303706][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.313135][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.321722][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.331502][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.339641][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.348123][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.356056][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.364894][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.384043][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.449366][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.485712][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.493202][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.503989][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.511118][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.533650][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.545688][ T5608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.555707][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.563587][ T5608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.574076][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.582767][ T5608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.592007][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.600586][ T5608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.611224][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.663734][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.691554][ T3249] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.699128][ T3249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.716377][ T5627] Bluetooth: hci1: command tx timeout [ 72.722815][ T5624] Bluetooth: hci0: command tx timeout [ 72.740014][ T3249] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.747144][ T3249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.780421][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.795180][ T5624] Bluetooth: hci4: command tx timeout [ 72.801239][ T5627] Bluetooth: hci2: command tx timeout [ 72.801280][ T5615] Bluetooth: hci3: command tx timeout [ 72.841124][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.855708][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.862804][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.899011][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.924336][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.931541][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.983937][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.001689][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.029954][ T3249] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.037139][ T3249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.071180][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.088662][ T3249] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.095868][ T3249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.118449][ T3249] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.125708][ T3249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.146968][ T3249] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.154127][ T3249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.667018][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.782319][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.878221][ T5612] veth0_vlan: entered promiscuous mode [ 73.931137][ T5612] veth1_vlan: entered promiscuous mode [ 74.031358][ T5619] veth0_vlan: entered promiscuous mode [ 74.051866][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.080920][ T5619] veth1_vlan: entered promiscuous mode [ 74.112336][ T5612] veth0_macvtap: entered promiscuous mode [ 74.150832][ T5612] veth1_macvtap: entered promiscuous mode [ 74.212468][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.232719][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.248438][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.270366][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.280311][ T5619] veth0_macvtap: entered promiscuous mode [ 74.302276][ T5619] veth1_macvtap: entered promiscuous mode [ 74.369323][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.390711][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.407999][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.465271][ T5608] veth0_vlan: entered promiscuous mode [ 74.501278][ T5613] veth0_vlan: entered promiscuous mode [ 74.510672][ T5608] veth1_vlan: entered promiscuous mode [ 74.528769][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.544718][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.563390][ T5613] veth1_vlan: entered promiscuous mode [ 74.573946][ T5616] veth0_vlan: entered promiscuous mode [ 74.612878][ T5608] veth0_macvtap: entered promiscuous mode [ 74.627475][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.643044][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.656473][ T5616] veth1_vlan: entered promiscuous mode [ 74.668523][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 74.668538][ T29] audit: type=1400 audit(1785856737.472:152): avc: denied { mounton } for pid=5612 comm="syz-executor" path="/root/syzkaller.xIhbu4/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 74.700465][ T71] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.704845][ T3317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.714263][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.731619][ T5608] veth1_macvtap: entered promiscuous mode [ 74.736792][ T3317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.739707][ T5613] veth0_macvtap: entered promiscuous mode [ 74.753557][ T29] audit: type=1400 audit(1785856737.482:153): avc: denied { mount } for pid=5612 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.779529][ T5613] veth1_macvtap: entered promiscuous mode [ 74.786392][ T29] audit: type=1400 audit(1785856737.482:154): avc: denied { mounton } for pid=5612 comm="syz-executor" path="/root/syzkaller.xIhbu4/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.813563][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.823201][ T5615] Bluetooth: hci0: command tx timeout [ 74.828686][ T5615] Bluetooth: hci1: command tx timeout [ 74.834882][ T29] audit: type=1400 audit(1785856737.482:155): avc: denied { mount } for pid=5612 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.859252][ T29] audit: type=1400 audit(1785856737.482:156): avc: denied { mounton } for pid=5612 comm="syz-executor" path="/root/syzkaller.xIhbu4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 74.886941][ T3317] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.887442][ T5627] Bluetooth: hci3: command tx timeout [ 74.896654][ T5615] Bluetooth: hci2: command tx timeout [ 74.902013][ T5627] Bluetooth: hci4: command tx timeout [ 74.911150][ T5612] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.912713][ T29] audit: type=1400 audit(1785856737.482:157): avc: denied { mounton } for pid=5612 comm="syz-executor" path="/root/syzkaller.xIhbu4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 74.955712][ T29] audit: type=1400 audit(1785856737.502:158): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.977005][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.980030][ T29] audit: type=1400 audit(1785856737.532:159): avc: denied { mounton } for pid=5612 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 75.009960][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.010987][ T29] audit: type=1400 audit(1785856737.532:160): avc: denied { mount } for pid=5612 comm="syz-executor" name="/" dev="gadgetfs" ino=7117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 75.042150][ T29] audit: type=1400 audit(1785856737.532:161): avc: denied { mount } for pid=5612 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 75.042640][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.081698][ T3317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.089763][ T3317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.095554][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.131207][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.176784][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.203676][ T5616] veth0_macvtap: entered promiscuous mode [ 75.241899][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.265371][ T5616] veth1_macvtap: entered promiscuous mode [ 75.317402][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.361917][ T136] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.403724][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.447172][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.465343][ T71] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.546222][ T5803] NFSD: Failed to start, no listeners configured. [ 75.603708][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.613323][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.638624][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.670513][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.681754][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.714791][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.725387][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.736619][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.745001][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.775109][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.818730][ T24] usb 3-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 75.848948][ T3317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.856943][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.857784][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.868756][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.881681][ T3317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.986927][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.995757][ T71] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.010785][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.028872][ T71] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.049793][ T5815] loop0: detected capacity change from 0 to 40 [ 76.139344][ T5818] MTDSB: Device #1 doesn't appear to exist [ 76.139344][ T5818] [ 76.155353][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.156490][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.205559][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.226054][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.300736][ T5815] ftl_cs: FTL header not found. [ 76.413136][ T24] wacom 0003:056A:00B1.0001: Unknown device_type for 'HID 056a:00b1'. Assuming pen. [ 76.516801][ T5815] block2mtd: mtd1: [/dev/loop0] erase_size = 4KiB [4096] [ 76.526611][ T24] wacom 0003:056A:00B1.0001: hidraw0: USB HID v1.11 Device [HID 056a:00b1] on usb-dummy_hcd.2-1/input0 [ 76.586976][ T24] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:056A:00B1.0001/input/input5 [ 76.764927][ T187] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.875574][ T5624] Bluetooth: hci0: command tx timeout [ 76.881315][ T5627] Bluetooth: hci1: command tx timeout [ 76.941036][ T5839] loop1: detected capacity change from 0 to 2048 [ 76.951263][ T187] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 76.961278][ T5624] Bluetooth: hci3: command tx timeout [ 76.961327][ T5627] Bluetooth: hci2: command tx timeout [ 76.965014][ T5627] Bluetooth: hci4: command tx timeout [ 76.972263][ T5839] loop2: detected capacity change from 0 to 2048 [ 76.985475][ T187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.046800][ T187] usb 5-1: probing VID:PID(0424:012C) [ 77.058314][ T5839] loop3: detected capacity change from 0 to 2048 [ 77.084460][ T187] usb 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 77.104373][ T187] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 77.136610][ T187] usb 5-1: vub300 testing BULK IN EndPoint(2) 83 [ 77.162288][ T187] usb 5-1: vub300 testing BULK OUT EndPoint(3) 04 [ 77.176657][ T187] usb 5-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 77.457194][ T187] usb 5-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 77.574072][ T5799] usb 3-1: USB disconnect, device number 2 [ 77.661898][ T187] usb 5-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 77.894815][ T5827] NFSD: Unable to initialize client recovery tracking! (-110) [ 77.902839][ T5827] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 77.911939][ T5827] NFSD: starting 90-second grace period (net f000049f) [ 77.994753][ T5740] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.161437][ T5740] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 78.172038][ T10] hid-generic 0003:1234:5678.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 78.182703][ T5740] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.196076][ T5740] usb 2-1: Product: syz [ 78.200864][ T5740] usb 2-1: Manufacturer: syz [ 78.207345][ T5740] usb 2-1: SerialNumber: syz [ 78.240778][ T5860] fido_id[5860]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 78.369566][ T5862] configfs-gadget.g1 gadget.33: uvc: uvc_function_bind() [ 78.493418][ T5866] PM: hibernation: hibernation entry [ 79.074680][ T5847] NFSD: Unable to initialize client recovery tracking! (-110) [ 79.082453][ T5847] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 79.092516][ T5847] NFSD: starting 90-second grace period (net f00005f0) [ 79.323989][ T5866] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 79.331878][ T5866] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 79.344439][ T5866] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 79.352858][ T187] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 79.358188][ T5866] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 79.367219][ T5866] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 79.380952][ T5799] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 79.386352][ T5866] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 79.393613][ T187] usb 5-1: USB disconnect, device number 2 [ 79.404950][ T5799] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 79.422124][ T5799] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 79.453635][ T5866] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 79.473446][ T5866] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 79.489677][ T5866] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 79.506493][ T5866] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 79.513424][ T5866] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 79.529691][ T5866] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 79.549756][ T5866] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 79.568506][ T5866] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 79.589045][ T5866] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 79.715256][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 79.851873][ T5879] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 79.895998][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 79.904923][ T10] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 79.915123][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.920090][ T5879] md: invalid raid superblock magic on ram1 [ 79.931836][ T5879] md: ram1 does not have a valid v0.90 superblock, not importing! [ 79.942694][ T10] gspca_main: spca501-2.14.0 probing 0000:0000 [ 80.052894][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 80.052913][ T29] audit: type=1400 audit(1785856742.852:361): avc: denied { create } for pid=5882 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 80.125589][ T187] USB vub300 remote SDIO host controller[0] now disconnected [ 80.165061][ T12] Filesystems sync: 0.540 seconds [ 80.355334][ T5797] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.394770][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:4487 [ 80.405018][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/1 [ 80.413773][ C1] preempt_count: 101, expected: 0 [ 80.418831][ C1] RCU nest depth: 0, expected: 0 [ 80.423783][ C1] 1 lock held by swapper/1/0: [ 80.428478][ C1] #0: ffffc90000a08ca0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11f/0x610 [ 80.439096][ C1] Preemption disabled at: [ 80.439109][ C1] [<0000000000000000>] 0x0 [ 80.447864][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 80.447886][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 80.447898][ C1] Call Trace: [ 80.447908][ C1] [ 80.447916][ C1] dump_stack_lvl+0x100/0x190 [ 80.447947][ C1] __might_resched.cold+0x1ec/0x232 [ 80.447969][ C1] ? __pfx___might_resched+0x10/0x10 [ 80.447990][ C1] ? kfree_const+0x5f/0x70 [ 80.448011][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 80.448040][ C1] cancel_delayed_work_sync+0xb8/0xf0 [ 80.448063][ C1] mmc_free_host+0x19/0x30 [ 80.448081][ C1] vub300_inactivity_timer_expired+0x42f/0x550 [ 80.448107][ C1] call_timer_fn+0x19a/0x610 [ 80.448129][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 80.448149][ C1] ? __run_timers+0x747/0xb00 [ 80.448169][ C1] ? rcu_is_watching+0x12/0xc0 [ 80.448200][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 80.448229][ C1] __run_timers+0x757/0xb00 [ 80.448257][ C1] ? __pfx___run_timers+0x10/0x10 [ 80.448285][ C1] ? ktime_get+0x9f/0x320 [ 80.448308][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 80.448333][ C1] run_timer_base+0x114/0x190 [ 80.448355][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 80.448380][ C1] run_timer_softirq+0x1a/0x50 [ 80.448401][ C1] handle_softirqs+0x1ea/0x9b0 [ 80.448429][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 80.448452][ C1] ? _raw_spin_unlock+0x28/0x50 [ 80.448472][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 80.448493][ C1] __irq_exit_rcu+0x162/0x210 [ 80.448517][ C1] irq_exit_rcu+0x9/0x30 [ 80.448539][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 80.448562][ C1] [ 80.448568][ C1] [ 80.448574][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 80.448596][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 80.448621][ C1] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 5f 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 80.448638][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000242 [ 80.448655][ C1] RAX: 0000000000050401 RBX: ffff88801eac2540 RCX: ffffffff8bbb42d5 [ 80.448674][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a8186 RDI: ffffffff8c402680 [ 80.448686][ C1] RBP: ffffed1003d584a8 R08: 0000000000000001 R09: ffffed10170a678d [ 80.448697][ C1] R10: ffff8880b8533c6b R11: 0000000000000000 R12: 0000000000000000 [ 80.448708][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 80.448726][ C1] ? ct_kernel_exit+0x125/0x180 [ 80.448753][ C1] default_idle+0x9/0x10 [ 80.448775][ C1] default_idle_call+0x6c/0xb0 [ 80.448799][ C1] do_idle+0x3a7/0x5b0 [ 80.448824][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 80.448849][ C1] ? __pfx_do_idle+0x10/0x10 [ 80.448877][ C1] ? do_idle+0x10/0x5b0 [ 80.448904][ C1] cpu_startup_entry+0x4f/0x60 [ 80.448928][ C1] start_secondary+0x21d/0x2d0 [ 80.448953][ C1] ? __pfx_start_secondary+0x10/0x10 [ 80.448980][ C1] common_startup_64+0x13e/0x158 [ 80.449022][ C1] [ 80.449416][ C1] ODEBUG: object ffffc90000a08a70 is NOT on stack ffffc90000190000, but annotated. [ 80.451027][ C1] [ 80.451034][ C1] ====================================================== [ 80.451041][ C1] WARNING: possible circular locking dependency detected [ 80.451050][ C1] syzkaller #0 Tainted: G W [ 80.451061][ C1] ------------------------------------------------------ [ 80.451066][ C1] swapper/1/0 is trying to acquire lock: [ 80.451075][ C1] ffffffff8eaf4160 (console_owner){..-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 80.451129][ C1] [ 80.451129][ C1] but task is already holding lock: [ 80.451134][ C1] ffffffff9b9babe0 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0xec/0x3d0 [ 80.451177][ C1] [ 80.451177][ C1] which lock already depends on the new lock. [ 80.451177][ C1] [ 80.451183][ C1] [ 80.451183][ C1] the existing dependency chain (in reverse order) is: [ 80.451188][ C1] [ 80.451188][ C1] -> #3 (&obj_hash[i].lock){-.-.}-{2:2}: [ 80.451212][ C1] lock_acquire+0x1b9/0x370 [ 80.451234][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 80.451255][ C1] debug_object_assert_init+0x142/0x310 [ 80.451277][ C1] hrtimer_start_range_ns+0x4e/0x240 [ 80.451303][ C1] rpm_suspend+0x788/0x11a0 [ 80.451324][ C1] rpm_idle+0x60c/0x790 [ 80.451343][ C1] __pm_runtime_idle+0xba/0x1a0 [ 80.451361][ C1] __device_attach+0x37e/0x4d0 [ 80.451382][ C1] device_initial_probe+0xaf/0xd0 [ 80.451403][ C1] bus_probe_device+0x64/0x160 [ 80.451422][ C1] device_add+0x121d/0x1970 [ 80.451444][ C1] serdev_controller_add+0x93/0x650 [ 80.451463][ C1] serdev_tty_port_register+0x195/0x290 [ 80.451482][ C1] tty_port_register_device_attr_serdev+0x107/0x1d0 [ 80.451507][ C1] serial_core_register_port+0xcdf/0x16f0 [ 80.451531][ C1] serial8250_register_8250_port+0x15af/0x2330 [ 80.451549][ C1] serial_pnp_probe+0x436/0x930 [ 80.451564][ C1] pnp_device_probe+0x2b3/0x4a0 [ 80.451586][ C1] really_probe+0x241/0xa60 [ 80.451606][ C1] __driver_probe_device+0x20e/0x450 [ 80.451625][ C1] driver_probe_device+0x4a/0x140 [ 80.451645][ C1] __driver_attach+0x21f/0x5b0 [ 80.451665][ C1] bus_for_each_dev+0x13e/0x1d0 [ 80.451692][ C1] bus_add_driver+0x305/0x5b0 [ 80.451709][ C1] driver_register+0x1e2/0x360 [ 80.451731][ C1] serial8250_init+0xcc/0x1c0 [ 80.451752][ C1] do_one_initcall+0x11d/0x700 [ 80.451778][ C1] kernel_init_freeable+0x6ea/0x7b0 [ 80.451800][ C1] kernel_init+0x1f/0x1e0 [ 80.451822][ C1] ret_from_fork+0x72b/0xd50 [ 80.451842][ C1] ret_from_fork_asm+0x1a/0x30 [ 80.451863][ C1] [ 80.451863][ C1] -> #2 (&dev->power.lock){-...}-{3:3}: [ 80.451882][ C1] lock_acquire+0x1b9/0x370 [ 80.451897][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 80.451912][ C1] __pm_runtime_resume+0xa9/0x170 [ 80.451932][ C1] __uart_start+0x1b0/0x510 [ 80.451947][ C1] uart_write+0x211/0xb20 [ 80.451965][ C1] n_tty_write+0x431/0x1160 [ 80.451988][ C1] file_tty_write.isra.0+0x4d2/0x890 [ 80.452005][ C1] redirected_tty_write+0xd4/0x120 [ 80.452022][ C1] vfs_write+0x6ac/0x1050 [ 80.452046][ C1] ksys_write+0x12a/0x250 [ 80.452057][ C1] do_syscall_64+0x115/0x870 [ 80.452075][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.452089][ C1] [ 80.452089][ C1] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 80.452109][ C1] lock_acquire+0x1b9/0x370 [ 80.452126][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 80.452140][ C1] serial8250_console_write+0x177/0x1a50 [ 80.452161][ C1] console_flush_one_record+0x790/0xe50 [ 80.452183][ C1] console_unlock+0x103/0x260 [ 80.452204][ C1] vprintk_emit+0x407/0x6b0 [ 80.452224][ C1] _printk+0xcf/0x110 [ 80.452236][ C1] register_console.cold+0xc0/0x248 [ 80.452251][ C1] univ8250_console_init+0x6f/0x80 [ 80.452270][ C1] console_init+0x3d5/0x5b0 [ 80.452285][ C1] start_kernel+0x314/0x490 [ 80.452303][ C1] x86_64_start_reservations+0x24/0x30 [ 80.452325][ C1] x86_64_start_kernel+0x12b/0x130 [ 80.452345][ C1] common_startup_64+0x13e/0x158 [ 80.452367][ C1] [ 80.452367][ C1] -> #0 (console_owner){..-.}-{0:0}: [ 80.452388][ C1] check_prev_add+0xeb/0xe60 [ 80.452406][ C1] __lock_acquire+0x136c/0x1a40 [ 80.452423][ C1] lock_acquire+0x1b9/0x370 [ 80.452441][ C1] console_lock_spinning_enable+0x72/0x80 [ 80.452463][ C1] console_flush_one_record+0x739/0xe50 [ 80.452484][ C1] console_unlock+0x103/0x260 [ 80.452507][ C1] vprintk_emit+0x407/0x6b0 [ 80.452530][ C1] _printk+0xcf/0x110 [ 80.452545][ C1] lookup_object_or_alloc.part.0.cold+0x18/0x40 [ 80.452570][ C1] __debug_object_init+0x2a9/0x3d0 [ 80.452591][ C1] __synchronize_srcu+0x1c3/0x300 [ 80.452615][ C1] wakeup_source_unregister.part.0+0x12c/0x540 [ 80.452639][ C1] wakeup_source_unregister+0x1f/0x30 [ 80.452660][ C1] mmc_host_classdev_release+0x42/0x120 [ 80.452695][ C1] device_release+0xd2/0x270 [ 80.452711][ C1] kobject_put+0x1f7/0x640 [ 80.452736][ C1] put_device+0x1f/0x30 [ 80.452751][ C1] vub300_inactivity_timer_expired+0x42f/0x550 [ 80.452780][ C1] call_timer_fn+0x19a/0x610 [ 80.452797][ C1] __run_timers+0x757/0xb00 [ 80.452816][ C1] run_timer_base+0x114/0x190 [ 80.452835][ C1] run_timer_softirq+0x1a/0x50 [ 80.452851][ C1] handle_softirqs+0x1ea/0x9b0 [ 80.452872][ C1] __irq_exit_rcu+0x162/0x210 [ 80.452892][ C1] irq_exit_rcu+0x9/0x30 [ 80.452913][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 80.452932][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 80.452951][ C1] pv_native_safe_halt+0xf/0x20 [ 80.452970][ C1] default_idle+0x9/0x10 [ 80.452992][ C1] default_idle_call+0x6c/0xb0 [ 80.453015][ C1] do_idle+0x3a7/0x5b0 [ 80.453039][ C1] cpu_startup_entry+0x4f/0x60 [ 80.453062][ C1] start_secondary+0x21d/0x2d0 [ 80.453085][ C1] common_startup_64+0x13e/0x158 [ 80.453111][ C1] [ 80.453111][ C1] other info that might help us debug this: [ 80.453111][ C1] [ 80.453116][ C1] Chain exists of: [ 80.453116][ C1] console_owner --> &dev->power.lock --> &obj_hash[i].lock [ 80.453116][ C1] [ 80.453143][ C1] Possible unsafe locking scenario: [ 80.453143][ C1] [ 80.453147][ C1] CPU0 CPU1 [ 80.453152][ C1] ---- ---- [ 80.453156][ C1] lock(&obj_hash[i].lock); [ 80.453167][ C1] lock(&dev->power.lock); [ 80.453179][ C1] lock(&obj_hash[i].lock); [ 80.453191][ C1] lock(console_owner); [ 80.453201][ C1] [ 80.453201][ C1] *** DEADLOCK *** [ 80.453201][ C1] [ 80.453205][ C1] 4 locks held by swapper/1/0: [ 80.453215][ C1] #0: ffffc90000a08ca0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11f/0x610 [ 80.453258][ C1] #1: ffffffff9b9babe0 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0xec/0x3d0 [ 80.453305][ C1] #2: ffffffff8ebd45a0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 80.453345][ C1] #3: ffffffff8ebd4618 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 80.453395][ C1] [ 80.453395][ C1] stack backtrace: [ 80.453407][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 PREEMPT(full) [ 80.453432][ C1] Tainted: [W]=WARN [ 80.453438][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 80.453448][ C1] Call Trace: [ 80.453454][ C1] [ 80.453460][ C1] dump_stack_lvl+0x100/0x190 [ 80.453482][ C1] print_circular_bug.cold+0x178/0x1c7 [ 80.453511][ C1] check_noncircular+0x146/0x160 [ 80.453534][ C1] check_prev_add+0xeb/0xe60 [ 80.453557][ C1] __lock_acquire+0x136c/0x1a40 [ 80.453583][ C1] lock_acquire+0x1b9/0x370 [ 80.453602][ C1] ? console_lock_spinning_enable+0x61/0x80 [ 80.453629][ C1] ? console_lock_spinning_enable+0x4a/0x80 [ 80.453657][ C1] console_lock_spinning_enable+0x72/0x80 [ 80.453686][ C1] ? console_lock_spinning_enable+0x61/0x80 [ 80.453711][ C1] console_flush_one_record+0x739/0xe50 [ 80.453737][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 80.453763][ C1] ? __lock_acquire+0xd5b/0x1a40 [ 80.453786][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 80.453806][ C1] console_unlock+0x103/0x260 [ 80.453832][ C1] ? __pfx_console_unlock+0x10/0x10 [ 80.453859][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 80.453884][ C1] ? _printk+0xcf/0x110 [ 80.453901][ C1] vprintk_emit+0x407/0x6b0 [ 80.453928][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 80.453954][ C1] ? common_startup_64+0x13e/0x158 [ 80.453984][ C1] _printk+0xcf/0x110 [ 80.454000][ C1] ? __pfx__printk+0x10/0x10 [ 80.454018][ C1] ? do_raw_spin_lock+0x128/0x260 [ 80.454045][ C1] lookup_object_or_alloc.part.0.cold+0x18/0x40 [ 80.454070][ C1] __debug_object_init+0x2a9/0x3d0 [ 80.454094][ C1] ? __pfx___debug_object_init+0x10/0x10 [ 80.454120][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 80.454143][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 80.454164][ C1] ? __init_swait_queue_head+0xca/0x150 [ 80.454189][ C1] __synchronize_srcu+0x1c3/0x300 [ 80.454213][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 80.454239][ C1] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 80.454263][ C1] ? synchronize_srcu+0xa8/0x380 [ 80.454286][ C1] wakeup_source_unregister.part.0+0x12c/0x540 [ 80.454309][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 80.454339][ C1] wakeup_source_unregister+0x1f/0x30 [ 80.454362][ C1] mmc_host_classdev_release+0x42/0x120 [ 80.454392][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 80.454419][ C1] device_release+0xd2/0x270 [ 80.454436][ C1] kobject_put+0x1f7/0x640 [ 80.454462][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 80.454492][ C1] put_device+0x1f/0x30 [ 80.454509][ C1] vub300_inactivity_timer_expired+0x42f/0x550 [ 80.454540][ C1] call_timer_fn+0x19a/0x610 [ 80.454562][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 80.454581][ C1] ? __run_timers+0x747/0xb00 [ 80.454599][ C1] ? rcu_is_watching+0x12/0xc0 [ 80.454625][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 80.454654][ C1] __run_timers+0x757/0xb00 [ 80.454685][ C1] ? __pfx___run_timers+0x10/0x10 [ 80.454710][ C1] ? ktime_get+0x9f/0x320 [ 80.454733][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 80.454753][ C1] run_timer_base+0x114/0x190 [ 80.454775][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 80.454799][ C1] run_timer_softirq+0x1a/0x50 [ 80.454821][ C1] handle_softirqs+0x1ea/0x9b0 [ 80.454847][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 80.454871][ C1] ? _raw_spin_unlock+0x28/0x50 [ 80.454889][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 80.454909][ C1] __irq_exit_rcu+0x162/0x210 [ 80.454934][ C1] irq_exit_rcu+0x9/0x30 [ 80.454957][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 80.454976][ C1] [ 80.454981][ C1] [ 80.454987][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 80.455008][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 80.455030][ C1] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 5f 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 80.455047][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000242 [ 80.455062][ C1] RAX: 0000000000050401 RBX: ffff88801eac2540 RCX: ffffffff8bbb42d5 [ 80.455073][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a8186 RDI: ffffffff8c402680 [ 80.455083][ C1] RBP: ffffed1003d584a8 R08: 0000000000000001 R09: ffffed10170a678d [ 80.455093][ C1] R10: ffff8880b8533c6b R11: 0000000000000000 R12: 0000000000000000 [ 80.455102][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 80.455114][ C1] ? ct_kernel_exit+0x125/0x180 [ 80.455133][ C1] default_idle+0x9/0x10 [ 80.455153][ C1] default_idle_call+0x6c/0xb0 [ 80.455176][ C1] do_idle+0x3a7/0x5b0 [ 80.455196][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 80.455219][ C1] ? __pfx_do_idle+0x10/0x10 [ 80.455239][ C1] ? do_idle+0x10/0x5b0 [ 80.455260][ C1] cpu_startup_entry+0x4f/0x60 [ 80.455281][ C1] start_secondary+0x21d/0x2d0 [ 80.455303][ C1] ? __pfx_start_secondary+0x10/0x10 [ 80.455323][ C1] common_startup_64+0x13e/0x158 [ 80.455350][ C1] [ 81.984909][ C1] ------------[ cut here ]------------ [ 81.990379][ C1] 1 [ 81.990392][ C1] WARNING: lib/debugobjects.c:672 at lookup_object_or_alloc.part.0.cold+0x19/0x40, CPU#1: swapper/1/0 [ 82.003801][ C1] Modules linked in: [ 82.007684][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 PREEMPT(full) [ 82.018194][ C1] Tainted: [W]=WARN [ 82.021999][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 82.032075][ C1] RIP: 0010:lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 82.039104][ C1] Code: c4 60 5b 5d 41 5c 41 5d 41 5e 41 5f e9 49 18 88 0a 83 c5 01 89 2d 20 43 57 1a 4c 89 e6 48 c7 c7 c0 31 40 8c e8 f1 ef eb ff 90 <0f> 0b 90 e9 d2 03 f1 03 83 c5 01 89 2d ff 42 57 1a 49 39 c4 73 da [ 82.058703][ C1] RSP: 0018:ffffc90000a08900 EFLAGS: 00010086 [ 82.064760][ C1] RAX: 0000000000000050 RBX: ffff88807383f348 RCX: 0000000000000000 [ 82.072726][ C1] RDX: 0000000000000050 RSI: ffffffff81e8afd9 RDI: fffff52000141111 [ 82.080683][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 82.088663][ C1] R10: 0000000000000102 R11: 0000000000000001 R12: ffffc90000a08a70 [ 82.096619][ C1] R13: ffff88801eac2540 R14: 0000000000000001 R15: 0000000000000000 [ 82.104577][ C1] FS: 0000000000000000(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 82.113502][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.120074][ C1] CR2: 00007fa2147ddfe0 CR3: 00000000583a1000 CR4: 00000000003526f0 [ 82.128052][ C1] Call Trace: [ 82.131344][ C1] [ 82.134198][ C1] __debug_object_init+0x2a9/0x3d0 [ 82.139350][ C1] ? __pfx___debug_object_init+0x10/0x10 [ 82.144973][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 82.150331][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 82.155687][ C1] ? __init_swait_queue_head+0xca/0x150 [ 82.161219][ C1] __synchronize_srcu+0x1c3/0x300 [ 82.166240][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 82.171812][ C1] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 82.177344][ C1] ? synchronize_srcu+0xa8/0x380 [ 82.182270][ C1] wakeup_source_unregister.part.0+0x12c/0x540 [ 82.188412][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 82.194566][ C1] wakeup_source_unregister+0x1f/0x30 [ 82.199935][ C1] mmc_host_classdev_release+0x42/0x120 [ 82.205479][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 82.211623][ C1] device_release+0xd2/0x270 [ 82.216199][ C1] kobject_put+0x1f7/0x640 [ 82.220616][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 82.227299][ C1] put_device+0x1f/0x30 [ 82.231471][ C1] vub300_inactivity_timer_expired+0x42f/0x550 [ 82.237638][ C1] call_timer_fn+0x19a/0x610 [ 82.242224][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 82.247347][ C1] ? __run_timers+0x747/0xb00 [ 82.252050][ C1] ? rcu_is_watching+0x12/0xc0 [ 82.256829][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 82.263520][ C1] __run_timers+0x757/0xb00 [ 82.268029][ C1] ? __pfx___run_timers+0x10/0x10 [ 82.273073][ C1] ? ktime_get+0x9f/0x320 [ 82.277400][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 82.282407][ C1] run_timer_base+0x114/0x190 [ 82.287072][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 82.292257][ C1] run_timer_softirq+0x1a/0x50 [ 82.297009][ C1] handle_softirqs+0x1ea/0x9b0 [ 82.301772][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 82.307042][ C1] ? _raw_spin_unlock+0x28/0x50 [ 82.311875][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 82.317496][ C1] __irq_exit_rcu+0x162/0x210 [ 82.322178][ C1] irq_exit_rcu+0x9/0x30 [ 82.326444][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 82.332102][ C1] [ 82.335058][ C1] [ 82.338001][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 82.343983][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 82.349613][ C1] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 5f 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 82.369383][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000242 [ 82.375441][ C1] RAX: 0000000000050401 RBX: ffff88801eac2540 RCX: ffffffff8bbb42d5 [ 82.383398][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a8186 RDI: ffffffff8c402680 [ 82.391355][ C1] RBP: ffffed1003d584a8 R08: 0000000000000001 R09: ffffed10170a678d [ 82.399312][ C1] R10: ffff8880b8533c6b R11: 0000000000000000 R12: 0000000000000000 [ 82.407265][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 82.415222][ C1] ? ct_kernel_exit+0x125/0x180 [ 82.420082][ C1] default_idle+0x9/0x10 [ 82.424340][ C1] default_idle_call+0x6c/0xb0 [ 82.429093][ C1] do_idle+0x3a7/0x5b0 [ 82.433152][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 82.439058][ C1] ? __pfx_do_idle+0x10/0x10 [ 82.443642][ C1] ? do_idle+0x10/0x5b0 [ 82.447792][ C1] cpu_startup_entry+0x4f/0x60 [ 82.452545][ C1] start_secondary+0x21d/0x2d0 [ 82.457297][ C1] ? __pfx_start_secondary+0x10/0x10 [ 82.462579][ C1] common_startup_64+0x13e/0x158 [ 82.467552][ C1] [ 82.470567][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 82.477835][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 PREEMPT(full) [ 82.488321][ C1] Tainted: [W]=WARN [ 82.492104][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 82.502166][ C1] Call Trace: [ 82.505434][ C1] [ 82.508266][ C1] dump_stack_lvl+0x100/0x190 [ 82.512931][ C1] vpanic+0x552/0x970 [ 82.516899][ C1] ? __pfx_vpanic+0x10/0x10 [ 82.521388][ C1] ? lock_release+0x24d/0x310 [ 82.526152][ C1] panic+0xd1/0xe0 [ 82.529860][ C1] ? __pfx_panic+0x10/0x10 [ 82.534276][ C1] ? check_panic_on_warn+0x1f/0x90 [ 82.539377][ C1] check_panic_on_warn.cold+0x19/0x34 [ 82.544743][ C1] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 82.551153][ C1] __warn.cold+0x191/0x318 [ 82.555552][ C1] __report_bug+0x30f/0x440 [ 82.560044][ C1] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 82.566447][ C1] ? __pfx___report_bug+0x10/0x10 [ 82.571463][ C1] ? _printk+0xcf/0x110 [ 82.575639][ C1] ? __wake_up_klogd+0xe2/0x140 [ 82.580485][ C1] ? vprintk_emit+0x1c9/0x6b0 [ 82.585330][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 82.590368][ C1] ? common_startup_64+0x13e/0x158 [ 82.595495][ C1] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 82.601918][ C1] report_bug+0xb2/0x220 [ 82.606173][ C1] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 82.612592][ C1] handle_bug+0x16a/0x2a0 [ 82.616913][ C1] exc_invalid_op+0x17/0x50 [ 82.621409][ C1] asm_exc_invalid_op+0x1a/0x20 [ 82.626270][ C1] RIP: 0010:lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 82.633289][ C1] Code: c4 60 5b 5d 41 5c 41 5d 41 5e 41 5f e9 49 18 88 0a 83 c5 01 89 2d 20 43 57 1a 4c 89 e6 48 c7 c7 c0 31 40 8c e8 f1 ef eb ff 90 <0f> 0b 90 e9 d2 03 f1 03 83 c5 01 89 2d ff 42 57 1a 49 39 c4 73 da [ 82.652887][ C1] RSP: 0018:ffffc90000a08900 EFLAGS: 00010086 [ 82.658945][ C1] RAX: 0000000000000050 RBX: ffff88807383f348 RCX: 0000000000000000 [ 82.666898][ C1] RDX: 0000000000000050 RSI: ffffffff81e8afd9 RDI: fffff52000141111 [ 82.674858][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 82.682855][ C1] R10: 0000000000000102 R11: 0000000000000001 R12: ffffc90000a08a70 [ 82.690846][ C1] R13: ffff88801eac2540 R14: 0000000000000001 R15: 0000000000000000 [ 82.698830][ C1] ? vprintk_emit+0x1c9/0x6b0 [ 82.703510][ C1] __debug_object_init+0x2a9/0x3d0 [ 82.708617][ C1] ? __pfx___debug_object_init+0x10/0x10 [ 82.714241][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 82.719610][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 82.724982][ C1] ? __init_swait_queue_head+0xca/0x150 [ 82.730557][ C1] __synchronize_srcu+0x1c3/0x300 [ 82.735594][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 82.741133][ C1] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 82.746669][ C1] ? synchronize_srcu+0xa8/0x380 [ 82.751615][ C1] wakeup_source_unregister.part.0+0x12c/0x540 [ 82.757786][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 82.763993][ C1] wakeup_source_unregister+0x1f/0x30 [ 82.769361][ C1] mmc_host_classdev_release+0x42/0x120 [ 82.774903][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 82.781060][ C1] device_release+0xd2/0x270 [ 82.785647][ C1] kobject_put+0x1f7/0x640 [ 82.790064][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 82.796735][ C1] put_device+0x1f/0x30 [ 82.800880][ C1] vub300_inactivity_timer_expired+0x42f/0x550 [ 82.807057][ C1] call_timer_fn+0x19a/0x610 [ 82.811648][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 82.816765][ C1] ? __run_timers+0x747/0xb00 [ 82.821449][ C1] ? rcu_is_watching+0x12/0xc0 [ 82.826292][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 82.832983][ C1] __run_timers+0x757/0xb00 [ 82.837511][ C1] ? __pfx___run_timers+0x10/0x10 [ 82.842526][ C1] ? ktime_get+0x9f/0x320 [ 82.846850][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 82.851867][ C1] run_timer_base+0x114/0x190 [ 82.856541][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 82.861766][ C1] run_timer_softirq+0x1a/0x50 [ 82.866539][ C1] handle_softirqs+0x1ea/0x9b0 [ 82.871312][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 82.876603][ C1] ? _raw_spin_unlock+0x28/0x50 [ 82.881461][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 82.887082][ C1] __irq_exit_rcu+0x162/0x210 [ 82.891780][ C1] irq_exit_rcu+0x9/0x30 [ 82.896012][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 82.901634][ C1] [ 82.904916][ C1] [ 82.907830][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 82.913801][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 82.919427][ C1] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 5f 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 82.939211][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000242 [ 82.945315][ C1] RAX: 0000000000050401 RBX: ffff88801eac2540 RCX: ffffffff8bbb42d5 [ 82.953274][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a8186 RDI: ffffffff8c402680 [ 82.961239][ C1] RBP: ffffed1003d584a8 R08: 0000000000000001 R09: ffffed10170a678d [ 82.969238][ C1] R10: ffff8880b8533c6b R11: 0000000000000000 R12: 0000000000000000 [ 82.977196][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 82.985165][ C1] ? ct_kernel_exit+0x125/0x180 [ 82.990028][ C1] default_idle+0x9/0x10 [ 82.994314][ C1] default_idle_call+0x6c/0xb0 [ 82.999072][ C1] do_idle+0x3a7/0x5b0 [ 83.003152][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 83.009093][ C1] ? __pfx_do_idle+0x10/0x10 [ 83.013694][ C1] ? do_idle+0x10/0x5b0 [ 83.017845][ C1] cpu_startup_entry+0x4f/0x60 [ 83.022605][ C1] start_secondary+0x21d/0x2d0 [ 83.027375][ C1] ? __pfx_start_secondary+0x10/0x10 [ 83.032717][ C1] common_startup_64+0x13e/0x158 [ 83.037664][ C1] [ 83.040957][ C1] Kernel Offset: disabled [ 83.045270][ C1] Rebooting in 86400 seconds..