last executing test programs: 11.022775425s ago: executing program 2 (id=3): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x6, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 10.731127033s ago: executing program 3 (id=4): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0xb, 0xfffb, 0xa}, 0x0, 0x0}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect(0x3, 0x36, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000001c0)={0x50, 0x0, 0x560c, {0x803, 0x5d4}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x4, 0xb, 0xfffb, 0xb}, 0x0, 0x0}}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 10.599330866s ago: executing program 0 (id=1): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003cb86e440f71d002579260102030109021b0002030c150509040506316fc37029c415b707"], &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x6, 0xcc, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x3, 0x1, 0x4, 0x0, 0xfd, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x27}, [@selector_unit={0xb, 0x24, 0x5, 0x3, 0x4, "ea7b0ec6f8ed"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x400, 0x4, 0x6}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x307, 0x2, 0x1, 0x68}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x8, 0x5, 0x68, "97f6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x1ff, 0x7e, 0x8, 0x8, {0x7, 0x25, 0x1, 0x0, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x5, 0x9, 0x7f}, @as_header={0x7, 0x24, 0x1, 0xb, 0x4, 0x2}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x5, 0x2, 0x5, 0x5, 'RX', 'l 1 [ 90.386599][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.395223][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.406620][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.415175][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.461956][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.471082][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.479312][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.487363][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.498690][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.506327][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.514966][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.522354][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.530697][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.539184][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.548335][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.556110][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.564964][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.572272][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.580144][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.590052][ T5082] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.598112][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.614565][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.623023][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.120284][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 91.251761][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 91.316835][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 91.379170][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.387360][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.394954][ T5774] bridge_slave_0: entered allmulticast mode [ 91.403927][ T5774] bridge_slave_0: entered promiscuous mode [ 91.454793][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.463290][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.470895][ T5774] bridge_slave_1: entered allmulticast mode [ 91.479076][ T5774] bridge_slave_1: entered promiscuous mode [ 91.486668][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 91.615234][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.623181][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.636019][ T5775] bridge_slave_0: entered allmulticast mode [ 91.644083][ T5775] bridge_slave_0: entered promiscuous mode [ 91.655055][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.662609][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.670861][ T5786] bridge_slave_0: entered allmulticast mode [ 91.679992][ T5786] bridge_slave_0: entered promiscuous mode [ 91.689794][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.697393][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.704925][ T5786] bridge_slave_1: entered allmulticast mode [ 91.712388][ T5786] bridge_slave_1: entered promiscuous mode [ 91.724109][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.738674][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.753986][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.764016][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.772839][ T5775] bridge_slave_1: entered allmulticast mode [ 91.780508][ T5775] bridge_slave_1: entered promiscuous mode [ 91.873610][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.888516][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.901336][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.914830][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.929258][ T5774] team0: Port device team_slave_0 added [ 91.948241][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.956829][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.964438][ T5783] bridge_slave_0: entered allmulticast mode [ 91.972366][ T5783] bridge_slave_0: entered promiscuous mode [ 91.994234][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.002359][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.010516][ T5783] bridge_slave_1: entered allmulticast mode [ 92.018891][ T5783] bridge_slave_1: entered promiscuous mode [ 92.041097][ T5774] team0: Port device team_slave_1 added [ 92.109265][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.122482][ T5775] team0: Port device team_slave_0 added [ 92.140609][ T5786] team0: Port device team_slave_0 added [ 92.150954][ T5786] team0: Port device team_slave_1 added [ 92.160035][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.186877][ T5775] team0: Port device team_slave_1 added [ 92.232340][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.246075][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.273863][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.318327][ T5783] team0: Port device team_slave_0 added [ 92.325234][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.333022][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.360116][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.390929][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.403046][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.436224][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.452948][ T5783] team0: Port device team_slave_1 added [ 92.483724][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.491505][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.519790][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.534574][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.542231][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.569768][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.583820][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.592739][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.620474][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.637122][ T5792] Bluetooth: hci3: command tx timeout [ 92.643285][ T5792] Bluetooth: hci1: command tx timeout [ 92.663774][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.671165][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.698650][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.716152][ T5792] Bluetooth: hci2: command tx timeout [ 92.716176][ T5791] Bluetooth: hci0: command tx timeout [ 92.765298][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.772608][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.802500][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.830750][ T5786] hsr_slave_0: entered promiscuous mode [ 92.838553][ T5786] hsr_slave_1: entered promiscuous mode [ 92.854541][ T5774] hsr_slave_0: entered promiscuous mode [ 92.862604][ T5774] hsr_slave_1: entered promiscuous mode [ 92.871430][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.882147][ T5774] Cannot create hsr debugfs directory [ 92.967486][ T5783] hsr_slave_0: entered promiscuous mode [ 92.974535][ T5783] hsr_slave_1: entered promiscuous mode [ 92.981103][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.989136][ T5783] Cannot create hsr debugfs directory [ 93.013881][ T5775] hsr_slave_0: entered promiscuous mode [ 93.020970][ T5775] hsr_slave_1: entered promiscuous mode [ 93.031711][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.039572][ T5775] Cannot create hsr debugfs directory [ 93.547156][ T5786] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.562275][ T5786] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.578848][ T5786] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.590378][ T5786] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.704989][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.731076][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.753448][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.765098][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.851502][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.863764][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.881119][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.895591][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.993747][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.008071][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.038850][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.051385][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.101765][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.191854][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.209850][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.259917][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.267505][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.303819][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.311072][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.350816][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.371221][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.400934][ T988] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.408220][ T988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.429729][ T988] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.437261][ T988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.502602][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.525433][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.554331][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.561644][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.575207][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.582753][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.619557][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.675046][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.683597][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.704856][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.716796][ T5792] Bluetooth: hci1: command tx timeout [ 94.722387][ T5792] Bluetooth: hci3: command tx timeout [ 94.781755][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.789120][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.796443][ T5792] Bluetooth: hci2: command tx timeout [ 94.802116][ T5792] Bluetooth: hci0: command tx timeout [ 94.895648][ T5774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.170856][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.348621][ T5786] veth0_vlan: entered promiscuous mode [ 95.383835][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.402551][ T5786] veth1_vlan: entered promiscuous mode [ 95.507991][ T5786] veth0_macvtap: entered promiscuous mode [ 95.550536][ T5786] veth1_macvtap: entered promiscuous mode [ 95.573953][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.622178][ T5783] veth0_vlan: entered promiscuous mode [ 95.643514][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.665564][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.679560][ T5783] veth1_vlan: entered promiscuous mode [ 95.704424][ T5786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.715076][ T5786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.725235][ T5786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.734673][ T5786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.751052][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.839956][ T5774] veth0_vlan: entered promiscuous mode [ 95.891220][ T5774] veth1_vlan: entered promiscuous mode [ 95.919304][ T5783] veth0_macvtap: entered promiscuous mode [ 95.961252][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.970122][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.032011][ T5783] veth1_macvtap: entered promiscuous mode [ 96.061548][ T5775] veth0_vlan: entered promiscuous mode [ 96.082678][ T4259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.100302][ T5775] veth1_vlan: entered promiscuous mode [ 96.110327][ T4259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.140083][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.156888][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.170509][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.199007][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.211743][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.225650][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.251550][ T5774] veth0_macvtap: entered promiscuous mode [ 96.279861][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.289602][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.300902][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.312432][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.330703][ T5774] veth1_macvtap: entered promiscuous mode [ 96.388727][ T5775] veth0_macvtap: entered promiscuous mode [ 96.415616][ T5775] veth1_macvtap: entered promiscuous mode [ 96.451328][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.472983][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.488380][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.501128][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.517703][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.568098][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.580601][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.591203][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.602824][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.614881][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.660860][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.672823][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.684666][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.698006][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.733167][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.748013][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.758592][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.769305][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.779399][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.789988][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.799998][ T5791] Bluetooth: hci3: command tx timeout [ 96.806914][ T5791] Bluetooth: hci1: command tx timeout [ 96.816377][ T5776] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.828457][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.867025][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.880449][ T5791] Bluetooth: hci0: command tx timeout [ 96.881245][ T5792] Bluetooth: hci2: command tx timeout [ 96.886339][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.902291][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.913030][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.923273][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.940304][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.952079][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.961860][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.973162][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.024626][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.027421][ T5776] usb 2-1: Using ep0 maxpacket: 32 [ 97.051153][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.062007][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.075045][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.084593][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.087390][ T5776] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 97.095522][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.115699][ T5776] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 97.132338][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 97.141219][ T5776] usb 2-1: Product: syz [ 97.145697][ T5776] usb 2-1: Manufacturer: syz [ 97.151001][ T5776] usb 2-1: SerialNumber: syz [ 97.172205][ T5776] usb 2-1: config 0 descriptor?? [ 97.180654][ T5846] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 97.200175][ T5776] hub 2-1:0.0: bad descriptor, ignoring hub [ 97.226885][ T5776] hub: probe of 2-1:0.0 failed with error -5 [ 97.250766][ T988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.287700][ T988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.413732][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.480606][ T27] cfg80211: failed to load regulatory.db [ 97.505863][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.567393][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.575412][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.650418][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.693842][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.818647][ T5827] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 97.893283][ T5851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.904711][ T5851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.026063][ T5827] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.026172][ T5826] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.045950][ T5827] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.071280][ T5827] usb 3-1: config 0 interface 0 has no altsetting 0 [ 98.079508][ T5827] usb 3-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 98.091462][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.102305][ T5827] usb 3-1: config 0 descriptor?? [ 98.146317][ T27] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 98.256338][ T5826] usb 4-1: Using ep0 maxpacket: 8 [ 98.264917][ T5826] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 98.273653][ T5826] usb 4-1: config 179 has no interface number 0 [ 98.280655][ T5826] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 98.294927][ T5826] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 98.307535][ T5826] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 98.331701][ T5826] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 98.347184][ T5826] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 98.359505][ T27] usb 1-1: unable to get BOS descriptor or descriptor too short [ 98.363659][ T5826] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 98.377860][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.390265][ T27] usb 1-1: not running at top speed; connect to a high speed hub [ 98.392194][ T5848] usb 2-1: USB disconnect, device number 2 [ 98.416681][ T27] usb 1-1: config 3 has an invalid interface number: 5 but max is 1 [ 98.427937][ T27] usb 1-1: config 3 has an invalid descriptor of length 196, skipping remainder of the config [ 98.440279][ T27] usb 1-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 98.445569][ T5853] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 98.453907][ T27] usb 1-1: config 3 has no interface number 0 [ 98.470229][ T27] usb 1-1: too many endpoints for config 3 interface 5 altsetting 6: 49, using maximum allowed: 30 [ 98.520215][ T27] usb 1-1: config 3 interface 5 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 98.539267][ T27] usb 1-1: config 3 interface 5 has no altsetting 0 [ 98.558945][ T27] usb 1-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=26.79 [ 98.574637][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.631882][ T27] usb 1-1: Product: syz [ 98.646702][ T5827] input: HID 046d:c287 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:046D:C287.0001/input/input5 [ 98.667108][ T27] usb 1-1: Manufacturer: syz [ 98.680993][ T27] usb 1-1: SerialNumber: syz [ 98.777290][ T5776] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input6 [ 98.848358][ T5827] logitech 0003:046D:C287.0001: input,hidraw0: USB HID v0.00 Joystick [HID 046d:c287] on usb-dummy_hcd.2-1/input0 [ 98.886506][ T5792] Bluetooth: hci1: command tx timeout [ 98.892103][ T5792] Bluetooth: hci3: command tx timeout [ 98.916320][ T5827] logitech 0003:046D:C287.0001: missing HID_OUTPUT_REPORT 0 [ 98.957365][ T5792] Bluetooth: hci2: command tx timeout [ 98.962901][ T5792] Bluetooth: hci0: command tx timeout [ 99.024945][ T5855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.061246][ T5855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.099905][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 99.100182][ T23] usb 4-1: USB disconnect, device number 2 [ 99.108555][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 99.219409][ T5855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.224097][ T23] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 99.239977][ T5855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.340442][ T5827] usb 3-1: USB disconnect, device number 2 [ 99.474653][ T5855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.501319][ T5855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.594804][ T5866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.630085][ T5866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.786071][ T174] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.866030][ T5827] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.975899][ T174] usb 2-1: Using ep0 maxpacket: 32 [ 99.989526][ T174] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.001309][ T5848] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.018966][ T174] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 100.030397][ T174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.038672][ T174] usb 2-1: Product: syz [ 100.043302][ T174] usb 2-1: Manufacturer: syz [ 100.048079][ T174] usb 2-1: SerialNumber: syz [ 100.056003][ T174] usb 2-1: config 0 descriptor?? [ 100.069701][ T5827] usb 3-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 100.089320][ T5827] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 100.099195][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.101429][ T174] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 100.124593][ T5863] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 100.141600][ T5827] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 100.170781][ T27] msi2500 1-1:3.5: Registered as swradio24 [ 100.177056][ T27] msi2500 1-1:3.5: SDR API is still slightly experimental and functionality changes may follow [ 100.195309][ T27] usb 1-1: USB disconnect, device number 2 [ 100.219399][ T5848] usb 4-1: config 2 has an invalid interface number: 56 but max is 0 [ 100.238519][ T5848] usb 4-1: config 2 has no interface number 0 [ 100.247063][ T5848] usb 4-1: config 2 interface 56 altsetting 13 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 100.272387][ T5848] usb 4-1: config 2 interface 56 has no altsetting 0 [ 100.304898][ T5848] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=a2.00 [ 100.327106][ T174] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 100.345353][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.361738][ T174] quatech2: probe of 2-1:0.0 failed with error -8 [ 100.368647][ T5848] usb 4-1: Product: syz [ 100.372883][ T5848] usb 4-1: Manufacturer: syz [ 100.390858][ T5848] usb 4-1: SerialNumber: syz [ 100.530387][ T27] usb 2-1: USB disconnect, device number 3 [ 100.619706][ T5869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.628742][ T5869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.651300][ T5869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.660523][ T5869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.691514][ T5848] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 100.700744][ T5848] usb 4-1: setting power ON [ 100.707269][ T5848] dvb-usb: bulk message failed: -22 (2/0) [ 100.729633][ T5848] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 100.746476][ T5848] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 100.766180][ T5848] usb 4-1: media controller created [ 100.792153][ T5848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.826359][ T5848] usb 4-1: digital interface selection failed (-22) [ 100.833591][ T5848] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 100.848198][ T5848] usb 4-1: setting power OFF [ 100.853958][ T5848] dvb-usb: bulk message failed: -22 (2/0) [ 100.862017][ T5848] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 100.872600][ T5848] (NULL device *): no alternate interface [ 100.944092][ T5848] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 100.994439][ T5848] usb 4-1: USB disconnect, device number 3 [ 101.245852][ T27] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 101.385956][ T5764] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 101.455525][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 101.472064][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.483415][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.496588][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=c704, bcdDevice= 0.00 [ 101.505691][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.520759][ T27] usb 1-1: config 0 descriptor?? [ 101.556418][ T5827] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.591500][ T5764] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 101.601877][ T5764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.610301][ T5764] usb 2-1: Product: syz [ 101.614692][ T5764] usb 2-1: Manufacturer: syz [ 101.619746][ T5764] usb 2-1: SerialNumber: syz [ 101.629360][ T5764] usb 2-1: config 0 descriptor?? [ 101.763833][ T5827] usb 4-1: unable to get BOS descriptor or descriptor too short [ 101.777421][ T5827] usb 4-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 101.786791][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.794900][ T5827] usb 4-1: Product: syz [ 101.799253][ T5827] usb 4-1: Manufacturer: syz [ 101.804011][ T5827] usb 4-1: SerialNumber: syz [ 101.844613][ T5764] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 101.942614][ T27] input: HID 046d:c704 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046D:C704.0002/input/input8 [ 101.981687][ T27] logitech 0003:046D:C704.0002: input,hidraw0: USB HID v0.00 Joystick [HID 046d:c704] on usb-dummy_hcd.0-1/input0 [ 102.143512][ T5848] usb 1-1: USB disconnect, device number 3 [ 102.252572][ T5880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.261940][ T5880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.475179][ T5764] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 102.513413][ T5764] usb 2-1: USB disconnect, device number 4 [ 102.587142][ T9] usb 3-1: USB disconnect, device number 3 [ 102.700822][ T5827] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 102.708668][ T5827] usb 4-1: MIDIStreaming interface descriptor not found [ 102.793588][ T5827] usb 4-1: USB disconnect, device number 4 [ 102.881668][ T5789] udevd[5789]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.078024][ T5764] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.325991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 104.655880][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.692847][ T5764] usb 1-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 104.702562][ T5764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.846107][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 104.854277][ T9] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 104.885961][ T9] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.905926][ T9] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.926284][ T9] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 104.955816][ T9] usb 3-1: config 7 interface 0 has no altsetting 0 [ 104.962581][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 104.985616][ T5764] dln2 1-1:1.0: USB write failed: -110 [ 104.998546][ T5764] dln2 1-1:1.0: failed to initialize hardware [ 105.006163][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.029685][ T5764] dln2: probe of 1-1:1.0 failed with error -110 [ 105.476723][ T5888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.499372][ T5888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.549981][ T9] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.0/0003:0458:5010.0003/input/input9 [ 105.607720][ T5764] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 105.672083][ T9] kye 0003:0458:5010.0003: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 105.795905][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 105.811834][ T5764] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 105.827376][ T5888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.838708][ T5764] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 105.849141][ T5888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.859734][ T5764] usb 4-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 105.878487][ T5764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.012053][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 106.022550][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 106.034863][ T23] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 106.044897][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.072757][ T23] usb 2-1: probing VID:PID(0424:012C) [ 106.093719][ T23] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 106.102113][ T23] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 106.113727][ T23] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 106.120751][ T23] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 106.132174][ T23] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 106.472216][ T23] usb 2-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 106.674784][ T23] usb 2-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 106.687761][ C0] kye 0003:0458:5010.0003: usb_submit_urb(ctrl) failed: -1 [ 106.933247][ T5764] pegasus: probe of 4-1:1.0 failed with error -71 [ 106.948028][ T5764] usb 4-1: USB disconnect, device number 5 [ 106.985882][ T5776] usb 1-1: USB disconnect, device number 4 [ 107.446051][ T5776] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 107.597866][ T9] usb 3-1: reset high-speed USB device number 4 using dummy_hcd [ 107.658022][ T5776] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 107.671030][ T5776] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.688692][ T5776] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.704183][ T5776] usb 1-1: config 0 interface 0 has no altsetting 0 [ 107.715520][ T5776] usb 1-1: New USB device found, idVendor=054c, idProduct=0002, bcdDevice= 0.00 [ 107.727257][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.739420][ T5776] usb 1-1: config 0 descriptor?? [ 107.747120][ T23] usb 2-1: USB disconnect, device number 5 [ 107.762223][ T27] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 107.778232][ T5764] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 107.792341][ T27] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 107.800661][ T9] usb 3-1: device firmware changed [ 107.803327][ T27] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 107.826042][ T174] usb 3-1: USB disconnect, device number 4 [ 107.893650][ T23] USB vub300 remote SDIO host controller[0] now disconnected [ 107.998224][ T5764] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.019370][ T5764] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.029490][ T5764] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.045657][ T5764] usb 4-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 108.046564][ T174] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 108.061222][ T5764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.074503][ T5764] usb 4-1: config 0 descriptor?? [ 108.166533][ T5776] usbhid 1-1:0.0: can't add hid device: -71 [ 108.179795][ T5776] usbhid: probe of 1-1:0.0 failed with error -71 [ 108.191115][ T5776] usb 1-1: USB disconnect, device number 5 [ 108.275890][ T174] usb 3-1: Using ep0 maxpacket: 16 [ 108.289696][ T174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.302366][ T174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.314451][ T174] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 108.335828][ T174] usb 3-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 108.354805][ T174] usb 3-1: Manufacturer: syz [ 108.366480][ T174] usb 3-1: config 0 descriptor?? [ 108.556309][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:3414 [ 108.566552][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/1 [ 108.575288][ C1] preempt_count: 101, expected: 0 [ 108.580450][ C1] RCU nest depth: 0, expected: 0 [ 108.585472][ C1] 1 lock held by swapper/1/0: [ 108.590244][ C1] #0: ffffc900001f0be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 108.601124][ C1] Preemption disabled at: [ 108.601141][ C1] [<0000000000000000>] 0x0 [ 108.610157][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 108.617244][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.627378][ C1] Call Trace: [ 108.630722][ C1] [ 108.633637][ C1] dump_stack_lvl+0x18c/0x250 [ 108.638433][ C1] ? show_regs_print_info+0x20/0x20 [ 108.643704][ C1] ? load_image+0x420/0x420 [ 108.648293][ C1] __might_resched+0x48d/0x5f0 [ 108.653112][ C1] ? __might_sleep+0xe0/0xe0 [ 108.657836][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 108.663772][ C1] ? _raw_spin_unlock+0x40/0x40 [ 108.668686][ C1] ? kasan_set_track+0x5f/0x70 [ 108.673500][ C1] ? kasan_save_free_info+0x28/0x40 [ 108.678738][ C1] ? ____kasan_slab_free+0x126/0x1f0 [ 108.684083][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 108.689919][ C1] __flush_work+0x10f/0xac0 [ 108.694497][ C1] ? flush_work+0x20/0x20 [ 108.698884][ C1] ? __timer_delete+0x6b/0x290 [ 108.703733][ C1] ? mark_lock+0x94/0x320 [ 108.708124][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 108.714161][ C1] ? mod_delayed_work_on+0x1c0/0x1c0 [ 108.719491][ C1] ? lock_chain_count+0x20/0x20 [ 108.724381][ C1] ? __cancel_work_timer+0x36e/0x560 [ 108.729703][ C1] __cancel_work_timer+0x3f8/0x560 [ 108.734868][ C1] ? cancel_work_sync+0x20/0x20 [ 108.739754][ C1] ? kobject_put+0x260/0x450 [ 108.744383][ C1] ? __kmem_cache_free+0xba/0x1f0 [ 108.749456][ C1] ? kobject_put+0x421/0x450 [ 108.754203][ C1] mmc_free_host+0x19/0x30 [ 108.758655][ C1] call_timer_fn+0x189/0x540 [ 108.763311][ C1] ? kref_get+0x70/0x70 [ 108.767506][ C1] ? call_timer_fn+0xd2/0x540 [ 108.772206][ C1] ? __run_timers+0x810/0x810 [ 108.776978][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 108.782312][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 108.787553][ C1] ? kref_get+0x70/0x70 [ 108.791754][ C1] __run_timers+0x570/0x810 [ 108.796305][ C1] ? detach_timer+0x2b0/0x2b0 [ 108.801223][ C1] ? lock_chain_count+0x20/0x20 [ 108.806125][ C1] run_timer_softirq+0x67/0xf0 [ 108.810958][ C1] handle_softirqs+0x27d/0x820 [ 108.815808][ C1] ? read_tsc+0x9/0x20 [ 108.819935][ C1] ? ktime_get+0x24b/0x280 [ 108.824400][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 108.829199][ C1] ? do_softirq+0x1a0/0x1a0 [ 108.833763][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 108.839004][ C1] __irq_exit_rcu+0xd3/0x190 [ 108.843641][ C1] ? irq_exit_rcu+0x20/0x20 [ 108.848201][ C1] irq_exit_rcu+0x9/0x20 [ 108.852471][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 108.858140][ C1] [ 108.861102][ C1] [ 108.864065][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 108.870089][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 108.875763][ C1] Code: 59 1a 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d b3 35 39 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 108.895403][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 108.901526][ C1] RAX: 383c42f97c3cc900 RBX: ffffffff81630d54 RCX: 383c42f97c3cc900 [ 108.909619][ C1] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0 [ 108.917973][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36bab R09: 1ffff110171e6d75 [ 108.925980][ C1] R10: dffffc0000000000 R11: ffffed10171e6d76 R12: 1ffff92000030fc8 [ 108.933990][ C1] R13: dffffc0000000000 R14: 1ffff1100384c780 R15: 0000000000000000 [ 108.942028][ C1] ? do_idle+0x334/0x5c0 [ 108.946336][ C1] default_idle+0x13/0x20 [ 108.950707][ C1] default_idle_call+0x6c/0xa0 [ 108.955524][ C1] do_idle+0x334/0x5c0 [ 108.959717][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 108.966099][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 108.972366][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 108.977658][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 108.983654][ C1] ? _raw_spin_unlock+0x40/0x40 [ 108.988579][ C1] cpu_startup_entry+0x43/0x60 [ 108.993412][ C1] start_secondary+0xee/0xf0 [ 108.998046][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 109.004167][ C1] [ 109.007491][ C1] ODEBUG: object ffffc900001f09c0 is NOT on stack ffffc90000180000, but annotated. [ 109.008867][ C1] [ 109.008875][ C1] ====================================================== [ 109.008881][ C1] WARNING: possible circular locking dependency detected [ 109.008888][ C1] syzkaller #0 Tainted: G W [ 109.008896][ C1] ------------------------------------------------------ [ 109.008901][ C1] swapper/1/0 is trying to acquire lock: [ 109.008910][ C1] ffffffff8d1260a0 (console_owner){..-.}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 109.008962][ C1] [ 109.008962][ C1] but task is already holding lock: [ 109.008966][ C1] ffffffff9750e368 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x5c/0x450 [ 109.009011][ C1] [ 109.009011][ C1] which lock already depends on the new lock. [ 109.009011][ C1] [ 109.009016][ C1] [ 109.009016][ C1] the existing dependency chain (in reverse order) is: [ 109.009022][ C1] [ 109.009022][ C1] -> #4 (&obj_hash[i].lock){-.-.}-{2:2}: [ 109.009044][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 109.009074][ C1] debug_object_activate+0x6c/0x500 [ 109.009096][ C1] insert_work+0x35/0x310 [ 109.009116][ C1] __queue_work+0xbfd/0xfd0 [ 109.009132][ C1] queue_work_on+0x128/0x1f0 [ 109.009149][ C1] start_poll_synchronize_rcu_expedited+0x105/0x140 [ 109.009179][ C1] rcu_init+0x10d/0x160 [ 109.009206][ C1] start_kernel+0x1fd/0x4e0 [ 109.009230][ C1] x86_64_start_reservations+0x2a/0x30 [ 109.009253][ C1] copy_bootdata+0x0/0xd0 [ 109.009274][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 109.009298][ C1] [ 109.009298][ C1] -> #3 (&pool->lock){-.-.}-{2:2}: [ 109.009324][ C1] _raw_spin_lock+0x2e/0x40 [ 109.009348][ C1] __queue_work+0x72f/0xfd0 [ 109.009363][ C1] queue_work_on+0x128/0x1f0 [ 109.009380][ C1] rpm_suspend+0x1133/0x1b60 [ 109.009404][ C1] __pm_runtime_idle+0x12f/0x1a0 [ 109.009428][ C1] __device_attach+0x352/0x420 [ 109.009454][ C1] bus_probe_device+0x180/0x260 [ 109.009477][ C1] device_add+0x87c/0xc40 [ 109.009496][ C1] serial_base_port_add+0x2f6/0x430 [ 109.009516][ C1] serial_core_register_port+0x378/0x20b0 [ 109.009545][ C1] serial8250_register_8250_port+0x15fd/0x1f40 [ 109.009567][ C1] serial_pnp_probe+0x577/0x750 [ 109.009587][ C1] pnp_device_probe+0x305/0x4b0 [ 109.009609][ C1] really_probe+0x247/0xae0 [ 109.009635][ C1] __driver_probe_device+0x1f5/0x390 [ 109.009662][ C1] driver_probe_device+0x4f/0x420 [ 109.009678][ C1] __driver_attach+0x444/0x6d0 [ 109.009704][ C1] bus_for_each_dev+0x235/0x2b0 [ 109.009728][ C1] bus_add_driver+0x340/0x630 [ 109.009751][ C1] driver_register+0x23a/0x310 [ 109.009767][ C1] serial8250_init+0x9a/0x170 [ 109.009790][ C1] do_one_initcall+0x242/0x790 [ 109.009813][ C1] do_initcall_level+0x13d/0x1f0 [ 109.009838][ C1] do_initcalls+0x69/0xd0 [ 109.009863][ C1] kernel_init_freeable+0x3d9/0x560 [ 109.009889][ C1] kernel_init+0x1d/0x1c0 [ 109.009915][ C1] ret_from_fork+0x48/0x80 [ 109.009934][ C1] ret_from_fork_asm+0x11/0x20 [ 109.009955][ C1] [ 109.009955][ C1] -> #2 (&dev->power.lock){-.-.}-{2:2}: [ 109.009980][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 109.010008][ C1] __pm_runtime_resume+0x10f/0x170 [ 109.010032][ C1] __uart_start+0x171/0x3e0 [ 109.010047][ C1] uart_write+0x449/0x5d0 [ 109.010062][ C1] n_tty_write+0xd3d/0x11e0 [ 109.010086][ C1] file_tty_write+0x529/0x960 [ 109.010106][ C1] vfs_write+0x474/0x9a0 [ 109.010131][ C1] ksys_write+0x151/0x260 [ 109.010155][ C1] do_syscall_64+0x55/0xb0 [ 109.010174][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.010193][ C1] [ 109.010193][ C1] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 109.010218][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 109.010245][ C1] serial8250_console_write+0x181/0x18b0 [ 109.010269][ C1] console_flush_all+0x6ad/0xcf0 [ 109.010292][ C1] console_unlock+0xad/0x350 [ 109.010313][ C1] vprintk_emit+0x497/0x610 [ 109.010334][ C1] _printk+0xde/0x130 [ 109.010361][ C1] register_console+0xb96/0xf00 [ 109.010383][ C1] univ8250_console_init+0x45/0x50 [ 109.010406][ C1] console_init+0x17b/0x5d0 [ 109.010431][ C1] start_kernel+0x2c8/0x4e0 [ 109.010455][ C1] x86_64_start_reservations+0x2a/0x30 [ 109.010476][ C1] copy_bootdata+0x0/0xd0 [ 109.010495][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 109.010519][ C1] [ 109.010519][ C1] -> #0 (console_owner){..-.}-{0:0}: [ 109.010540][ C1] __lock_acquire+0x37ef/0x7d80 [ 109.010561][ C1] lock_acquire+0x19e/0x420 [ 109.010580][ C1] console_flush_all+0x676/0xcf0 [ 109.010602][ C1] console_unlock+0xad/0x350 [ 109.010630][ C1] vprintk_emit+0x497/0x610 [ 109.010651][ C1] _printk+0xde/0x130 [ 109.010676][ C1] __debug_object_init+0x18d/0x450 [ 109.010699][ C1] __synchronize_srcu+0x2ae/0x3d0 [ 109.010722][ C1] wakeup_source_unregister+0x116/0x190 [ 109.010741][ C1] mmc_host_classdev_release+0x47/0x100 [ 109.010768][ C1] device_release+0xbc/0x1e0 [ 109.010791][ C1] kobject_put+0x21b/0x450 [ 109.010815][ C1] call_timer_fn+0x189/0x540 [ 109.010833][ C1] __run_timers+0x570/0x810 [ 109.010850][ C1] run_timer_softirq+0x67/0xf0 [ 109.010866][ C1] handle_softirqs+0x27d/0x820 [ 109.010883][ C1] __irq_exit_rcu+0xd3/0x190 [ 109.010900][ C1] irq_exit_rcu+0x9/0x20 [ 109.010917][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 109.010939][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 109.010959][ C1] pv_native_safe_halt+0xf/0x10 [ 109.010979][ C1] default_idle+0x13/0x20 [ 109.011003][ C1] default_idle_call+0x6c/0xa0 [ 109.011029][ C1] do_idle+0x334/0x5c0 [ 109.011050][ C1] cpu_startup_entry+0x43/0x60 [ 109.011071][ C1] start_secondary+0xee/0xf0 [ 109.011091][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 109.011115][ C1] [ 109.011115][ C1] other info that might help us debug this: [ 109.011115][ C1] [ 109.011121][ C1] Chain exists of: [ 109.011121][ C1] console_owner --> &pool->lock --> &obj_hash[i].lock [ 109.011121][ C1] [ 109.011149][ C1] Possible unsafe locking scenario: [ 109.011149][ C1] [ 109.011154][ C1] CPU0 CPU1 [ 109.011158][ C1] ---- ---- [ 109.011162][ C1] lock(&obj_hash[i].lock); [ 109.011173][ C1] lock(&pool->lock); [ 109.011184][ C1] lock(&obj_hash[i].lock); [ 109.011196][ C1] lock(console_owner); [ 109.011207][ C1] [ 109.011207][ C1] *** DEADLOCK *** [ 109.011207][ C1] [ 109.011210][ C1] 4 locks held by swapper/1/0: [ 109.011221][ C1] #0: ffffc900001f0be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 109.011269][ C1] #1: ffffffff9750e368 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x5c/0x450 [ 109.011317][ C1] #2: ffffffff8d126180 (console_lock){+.+.}-{0:0}, at: _printk+0xde/0x130 [ 109.011368][ C1] #3: ffffffff8d00d990 (console_srcu){....}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 109.011417][ C1] [ 109.011417][ C1] stack backtrace: [ 109.011423][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 [ 109.011442][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.011453][ C1] Call Trace: [ 109.011460][ C1] [ 109.011468][ C1] dump_stack_lvl+0x18c/0x250 [ 109.011491][ C1] ? load_image+0x420/0x420 [ 109.011518][ C1] ? show_regs_print_info+0x20/0x20 [ 109.011541][ C1] ? print_circular_bug+0x12b/0x1a0 [ 109.011566][ C1] check_noncircular+0x2fc/0x400 [ 109.011594][ C1] ? print_deadlock_bug+0x5d0/0x5d0 [ 109.011617][ C1] ? lockdep_lock+0xf5/0x230 [ 109.011652][ C1] __lock_acquire+0x37ef/0x7d80 [ 109.011688][ C1] ? verify_lock_unused+0x140/0x140 [ 109.011723][ C1] lock_acquire+0x19e/0x420 [ 109.011745][ C1] ? console_flush_all+0x10b/0xcf0 [ 109.011772][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 109.011792][ C1] ? do_raw_spin_lock+0x11f/0x2b0 [ 109.011818][ C1] ? read_lock_is_recursive+0x20/0x20 [ 109.011841][ C1] ? __rwlock_init+0x150/0x150 [ 109.011867][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 109.011895][ C1] console_flush_all+0x676/0xcf0 [ 109.011919][ C1] ? console_flush_all+0x10b/0xcf0 [ 109.011945][ C1] ? console_flush_all+0x10b/0xcf0 [ 109.011973][ C1] ? is_console_locked+0x20/0x20 [ 109.012004][ C1] console_unlock+0xad/0x350 [ 109.012029][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 109.012058][ C1] vprintk_emit+0x497/0x610 [ 109.012083][ C1] ? printk_sprint+0x460/0x460 [ 109.012107][ C1] ? do_raw_spin_lock+0x11f/0x2b0 [ 109.012135][ C1] _printk+0xde/0x130 [ 109.012166][ C1] ? load_image+0x420/0x420 [ 109.012195][ C1] ? alloc_object+0x1c/0x640 [ 109.012220][ C1] ? lock_release+0x8c0/0x8c0 [ 109.012244][ C1] __debug_object_init+0x18d/0x450 [ 109.012271][ C1] __synchronize_srcu+0x2ae/0x3d0 [ 109.012296][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 109.012325][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 109.012356][ C1] ? read_tsc+0x9/0x20 [ 109.012375][ C1] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 109.012400][ C1] ? synchronize_srcu+0x25a/0x280 [ 109.012426][ C1] wakeup_source_unregister+0x116/0x190 [ 109.012450][ C1] mmc_host_classdev_release+0x47/0x100 [ 109.012479][ C1] ? mmc_free_host+0x30/0x30 [ 109.012505][ C1] device_release+0xbc/0x1e0 [ 109.012531][ C1] kobject_put+0x21b/0x450 [ 109.012560][ C1] call_timer_fn+0x189/0x540 [ 109.012580][ C1] ? kref_get+0x70/0x70 [ 109.012608][ C1] ? call_timer_fn+0xd2/0x540 [ 109.012636][ C1] ? __run_timers+0x810/0x810 [ 109.012660][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 109.012689][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 109.012714][ C1] ? kref_get+0x70/0x70 [ 109.012741][ C1] __run_timers+0x570/0x810 [ 109.012768][ C1] ? detach_timer+0x2b0/0x2b0 [ 109.012791][ C1] ? lock_chain_count+0x20/0x20 [ 109.012816][ C1] run_timer_softirq+0x67/0xf0 [ 109.012835][ C1] handle_softirqs+0x27d/0x820 [ 109.012855][ C1] ? read_tsc+0x9/0x20 [ 109.012876][ C1] ? ktime_get+0x24b/0x280 [ 109.012899][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 109.012920][ C1] ? do_softirq+0x1a0/0x1a0 [ 109.012941][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 109.012969][ C1] __irq_exit_rcu+0xd3/0x190 [ 109.012989][ C1] ? irq_exit_rcu+0x20/0x20 [ 109.013012][ C1] irq_exit_rcu+0x9/0x20 [ 109.013031][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 109.013054][ C1] [ 109.013059][ C1] [ 109.013065][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 109.013088][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 109.013118][ C1] Code: 59 1a 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d b3 35 39 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 109.013134][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 109.013151][ C1] RAX: 383c42f97c3cc900 RBX: ffffffff81630d54 RCX: 383c42f97c3cc900 [ 109.013166][ C1] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0 [ 109.013180][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36bab R09: 1ffff110171e6d75 [ 109.013195][ C1] R10: dffffc0000000000 R11: ffffed10171e6d76 R12: 1ffff92000030fc8 [ 109.013209][ C1] R13: dffffc0000000000 R14: 1ffff1100384c780 R15: 0000000000000000 [ 109.013225][ C1] ? do_idle+0x334/0x5c0 [ 109.013253][ C1] default_idle+0x13/0x20 [ 109.013281][ C1] default_idle_call+0x6c/0xa0 [ 109.013308][ C1] do_idle+0x334/0x5c0 [ 109.013334][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 109.013357][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 109.013387][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 109.013414][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 109.013444][ C1] ? _raw_spin_unlock+0x40/0x40 [ 109.013477][ C1] cpu_startup_entry+0x43/0x60 [ 109.013500][ C1] start_secondary+0xee/0xf0 [ 109.013523][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 109.013557][ C1] [ 109.020658][ T174] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:041E:3100.0004/input/input10 [ 109.024161][ C1] ------------[ cut here ]------------ [ 110.237050][ C1] WARNING: CPU: 1 PID: 0 at lib/debugobjects.c:558 __debug_object_init+0x18d/0x450 [ 110.246396][ C1] Modules linked in: [ 110.250350][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 [ 110.258873][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.269141][ C1] RIP: 0010:__debug_object_init+0x18d/0x450 [ 110.275191][ C1] Code: 24 08 74 2f 41 ff c6 44 89 35 6f fe 25 13 48 c7 c1 80 3b 1d 8b 48 c7 c7 e0 3b 1d 8b 84 c0 48 0f 45 f9 48 89 de e8 93 db 48 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 110.295362][ C1] RSP: 0018:ffffc900001f0928 EFLAGS: 00010046 [ 110.301935][ C1] RAX: 0000000000000050 RBX: ffffc900001f09c0 RCX: 383c42f97c3cc900 [ 110.309939][ C1] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 110.317931][ C1] RBP: dffffc0000000000 R08: ffffffff8e8c772f R09: 1ffffffff1d18ee5 [ 110.326215][ C1] R10: dffffc0000000000 R11: fffffbfff1d18ee6 R12: ffff88801c263c20 [ 110.334244][ C1] R13: ffff8880760df2d8 R14: 0000000000000001 R15: ffffffff8acbdf00 [ 110.342270][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 110.351605][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.358319][ C1] CR2: 00007fceb8987240 CR3: 00000000613b4000 CR4: 00000000003506e0 [ 110.366592][ C1] Call Trace: [ 110.369922][ C1] [ 110.372824][ C1] __synchronize_srcu+0x2ae/0x3d0 [ 110.378338][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 110.384275][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 110.390059][ C1] ? read_tsc+0x9/0x20 [ 110.394166][ C1] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 110.399762][ C1] ? synchronize_srcu+0x25a/0x280 [ 110.404818][ C1] wakeup_source_unregister+0x116/0x190 [ 110.410396][ C1] mmc_host_classdev_release+0x47/0x100 [ 110.416000][ C1] ? mmc_free_host+0x30/0x30 [ 110.420619][ C1] device_release+0xbc/0x1e0 [ 110.425299][ C1] kobject_put+0x21b/0x450 [ 110.429787][ C1] call_timer_fn+0x189/0x540 [ 110.434428][ C1] ? kref_get+0x70/0x70 [ 110.438618][ C1] ? call_timer_fn+0xd2/0x540 [ 110.443340][ C1] ? __run_timers+0x810/0x810 [ 110.448178][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 110.453460][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 110.458797][ C1] ? kref_get+0x70/0x70 [ 110.463002][ C1] __run_timers+0x570/0x810 [ 110.467537][ C1] ? detach_timer+0x2b0/0x2b0 [ 110.472245][ C1] ? lock_chain_count+0x20/0x20 [ 110.477136][ C1] run_timer_softirq+0x67/0xf0 [ 110.481929][ C1] handle_softirqs+0x27d/0x820 [ 110.486714][ C1] ? read_tsc+0x9/0x20 [ 110.490805][ C1] ? ktime_get+0x24b/0x280 [ 110.495256][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 110.500041][ C1] ? do_softirq+0x1a0/0x1a0 [ 110.504571][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 110.509799][ C1] __irq_exit_rcu+0xd3/0x190 [ 110.514513][ C1] ? irq_exit_rcu+0x20/0x20 [ 110.519065][ C1] irq_exit_rcu+0x9/0x20 [ 110.523348][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 110.529021][ C1] [ 110.531970][ C1] [ 110.534926][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 110.540928][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 110.546614][ C1] Code: 59 1a 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d b3 35 39 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 110.566337][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 110.572440][ C1] RAX: 383c42f97c3cc900 RBX: ffffffff81630d54 RCX: 383c42f97c3cc900 [ 110.580455][ C1] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0 [ 110.588464][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36bab R09: 1ffff110171e6d75 [ 110.596485][ C1] R10: dffffc0000000000 R11: ffffed10171e6d76 R12: 1ffff92000030fc8 [ 110.604476][ C1] R13: dffffc0000000000 R14: 1ffff1100384c780 R15: 0000000000000000 [ 110.612475][ C1] ? do_idle+0x334/0x5c0 [ 110.616754][ C1] default_idle+0x13/0x20 [ 110.621118][ C1] default_idle_call+0x6c/0xa0 [ 110.625926][ C1] do_idle+0x334/0x5c0 [ 110.630023][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 110.635262][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 110.641189][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 110.646416][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 110.652341][ C1] ? _raw_spin_unlock+0x40/0x40 [ 110.657224][ C1] cpu_startup_entry+0x43/0x60 [ 110.662019][ C1] start_secondary+0xee/0xf0 [ 110.666638][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 110.672748][ C1] [ 110.675812][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 110.683113][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 [ 110.691650][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.701931][ C1] Call Trace: [ 110.705247][ C1] [ 110.708114][ C1] dump_stack_lvl+0x18c/0x250 [ 110.712821][ C1] ? show_regs_print_info+0x20/0x20 [ 110.718041][ C1] ? load_image+0x420/0x420 [ 110.722609][ C1] panic+0x2ca/0x720 [ 110.726651][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 110.731188][ C1] ? secondary_startup_64_no_verify+0x179/0x17b [ 110.737569][ C1] __warn+0x2e0/0x470 [ 110.741617][ C1] ? __debug_object_init+0x18d/0x450 [ 110.747048][ C1] ? __debug_object_init+0x18d/0x450 [ 110.752381][ C1] report_bug+0x2be/0x4f0 [ 110.756749][ C1] ? __debug_object_init+0x18d/0x450 [ 110.762094][ C1] ? __debug_object_init+0x18d/0x450 [ 110.767457][ C1] ? __debug_object_init+0x18f/0x450 [ 110.772789][ C1] handle_bug+0xcf/0x120 [ 110.777063][ C1] exc_invalid_op+0x1a/0x50 [ 110.781604][ C1] asm_exc_invalid_op+0x1a/0x20 [ 110.786552][ C1] RIP: 0010:__debug_object_init+0x18d/0x450 [ 110.792527][ C1] Code: 24 08 74 2f 41 ff c6 44 89 35 6f fe 25 13 48 c7 c1 80 3b 1d 8b 48 c7 c7 e0 3b 1d 8b 84 c0 48 0f 45 f9 48 89 de e8 93 db 48 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 110.812176][ C1] RSP: 0018:ffffc900001f0928 EFLAGS: 00010046 [ 110.818366][ C1] RAX: 0000000000000050 RBX: ffffc900001f09c0 RCX: 383c42f97c3cc900 [ 110.826381][ C1] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 110.834370][ C1] RBP: dffffc0000000000 R08: ffffffff8e8c772f R09: 1ffffffff1d18ee5 [ 110.842387][ C1] R10: dffffc0000000000 R11: fffffbfff1d18ee6 R12: ffff88801c263c20 [ 110.850393][ C1] R13: ffff8880760df2d8 R14: 0000000000000001 R15: ffffffff8acbdf00 [ 110.858443][ C1] ? __debug_object_init+0x18d/0x450 [ 110.863863][ C1] __synchronize_srcu+0x2ae/0x3d0 [ 110.868932][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 110.874891][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 110.880684][ C1] ? read_tsc+0x9/0x20 [ 110.884794][ C1] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 110.890372][ C1] ? synchronize_srcu+0x25a/0x280 [ 110.895457][ C1] wakeup_source_unregister+0x116/0x190 [ 110.901050][ C1] mmc_host_classdev_release+0x47/0x100 [ 110.906635][ C1] ? mmc_free_host+0x30/0x30 [ 110.911255][ C1] device_release+0xbc/0x1e0 [ 110.915881][ C1] kobject_put+0x21b/0x450 [ 110.920350][ C1] call_timer_fn+0x189/0x540 [ 110.924990][ C1] ? kref_get+0x70/0x70 [ 110.929276][ C1] ? call_timer_fn+0xd2/0x540 [ 110.933991][ C1] ? __run_timers+0x810/0x810 [ 110.938783][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 110.944014][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 110.949251][ C1] ? kref_get+0x70/0x70 [ 110.953442][ C1] __run_timers+0x570/0x810 [ 110.957975][ C1] ? detach_timer+0x2b0/0x2b0 [ 110.962690][ C1] ? lock_chain_count+0x20/0x20 [ 110.967569][ C1] run_timer_softirq+0x67/0xf0 [ 110.972358][ C1] handle_softirqs+0x27d/0x820 [ 110.977151][ C1] ? read_tsc+0x9/0x20 [ 110.981250][ C1] ? ktime_get+0x24b/0x280 [ 110.985711][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 110.990513][ C1] ? do_softirq+0x1a0/0x1a0 [ 110.995047][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 111.000275][ C1] __irq_exit_rcu+0xd3/0x190 [ 111.004890][ C1] ? irq_exit_rcu+0x20/0x20 [ 111.009423][ C1] irq_exit_rcu+0x9/0x20 [ 111.013712][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 111.019384][ C1] [ 111.022343][ C1] [ 111.025303][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 111.031306][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 111.036962][ C1] Code: 59 1a 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d b3 35 39 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 111.056588][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 111.062680][ C1] RAX: 383c42f97c3cc900 RBX: ffffffff81630d54 RCX: 383c42f97c3cc900 [ 111.070701][ C1] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0 [ 111.078701][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36bab R09: 1ffff110171e6d75 [ 111.086697][ C1] R10: dffffc0000000000 R11: ffffed10171e6d76 R12: 1ffff92000030fc8 [ 111.094703][ C1] R13: dffffc0000000000 R14: 1ffff1100384c780 R15: 0000000000000000 [ 111.102706][ C1] ? do_idle+0x334/0x5c0 [ 111.106982][ C1] default_idle+0x13/0x20 [ 111.111437][ C1] default_idle_call+0x6c/0xa0 [ 111.116257][ C1] do_idle+0x334/0x5c0 [ 111.120439][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 111.125668][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 111.131614][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 111.136865][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 111.142820][ C1] ? _raw_spin_unlock+0x40/0x40 [ 111.147703][ C1] cpu_startup_entry+0x43/0x60 [ 111.152603][ C1] start_secondary+0xee/0xf0 [ 111.157232][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 111.163372][ C1] [ 111.166996][ C1] Kernel Offset: disabled [ 111.171343][ C1] Rebooting in 86400 seconds..