last executing test programs: 1m27.121764923s ago: executing program 1 (id=2): r0 = syz_usb_connect$uac3(0x3, 0xed, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902db000301008032080b0003010020000904000000010120000a2401003d00000000000c240a03030000000000000014240201010200030000000000000000000000001324030201030001030000000000000000000009040100000102200009040101010102200017240102000000000100010000000000000002100000000624020102100905010900020100000a25010000000000000009040200000102200009040201010102200017240101000000000100010000000000000002100000000624020102100905820900020100000a250100000000000000"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000400)={0xa1, 0x1, 0x6, "060020010000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000000)={0x1}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x1, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x2, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x3, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x4, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x5, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x1, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x2, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x3, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x4, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x5, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 1m26.83963119s ago: executing program 2 (id=3): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, '\x00', {0x1, 0x21, 0x100, 0x4}}) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) syz_usb_ep_read(r0, 0x4, 0x100, &(0x7f0000000200)=""/256) syz_usb_ep_write(r0, 0x83, 0x18, &(0x7f0000000100)="1200004e0000000a00000000000201000001000000000000") nanosleep(&(0x7f0000000100)={0x1}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl(r1, 0x8923, &(0x7f0000000300)='wlan0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00wlan99\x00'/32) ioctl(r1, 0x8923, &(0x7f0000000400)='wlan2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00wlan0\x00'/32) syz_80211_join_ibss(&(0x7f0000000500)='wlan0\x00', &(0x7f0000000600)=@default_ibss_ssid, 0x6, 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000800)={0x11, 0x300, r2}, 0x14) sendto$packet(r1, &(0x7f0000000900)="00000000000000000000000008004500001c00004000401100007f0000017f0000010035003500080000", 0x2a, 0x0, 0x0, 0x0) 1m24.288810174s ago: executing program 1 (id=8): syz_usb_connect$uac2(0x5, 0x8d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000403412785600010000000109027b000201008032080b0002010020000904000000010120000924010002082a0000112402010101000302030000000000000008240b030104010008240a040101000009040100000102200009040101010102200010240101000101000000020300000000062402010210070501054000010825010000000000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1m23.081294875s ago: executing program 2 (id=12): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x27, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a1018510150026ff00750895068100910085119513810091008512953f81009100c0"}}, 0x13f) read(r0, &(0x7f0000001000), 0x1000) read(r0, &(0x7f0000001000), 0x1000) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x14, "11ff00000100"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x14, "11ff0100"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000400)={0xc, {0x7, "10ff001102005a"}}, 0xd) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000500)={0xc, {0x14, "11ff00000200"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000600)={0xc, {0x14, "11ff00000100"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000700)={0xc, {0x14, "11ff0100"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000800)={0xc, {0x14, "11ff00000300"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000900)={0xc, {0x14, "11ff0300"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000a00)={0xc, {0x14, "11ff03100800"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000b00)={0xc, {0x14, "11ff00000400"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000c00)={0xc, {0x14, "11ff00000400"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000d00)={0xc, {0x14, "11ff042000"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000e00)={0xc, {0x14, "11ff00000400"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000f00)={0xc, {0x14, "11ff04100800"/20}}, 0x1a) 1m22.344476293s ago: executing program 2 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000800)=@filename='proc\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(&(0x7f0000000800)=@filename='nfsd\x00', &(0x7f0000000900)='./proc/fs/nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='2049\n\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/fs/nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='1\n\x00', 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r2, &(0x7f0000000600)=@in={0x2, 0x801, @local}, 0x10) sendto(r2, &(0x7f0000000700)="80000050123456780000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000006000000010000000461626364000000047465737400000000", 0x54, 0x0, 0x0, 0x0) 1m21.870800575s ago: executing program 2 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x42, 0x1ff) fallocate(r1, 0x0, 0x0, 0x1000000) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x1ff) fallocate(r3, 0x0, 0x0, 0x1000000) r4 = syz_open_dev$loop(&(0x7f0000000200), 0x1, 0x2) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl(r0, 0xc138fd03, &(0x7f0000000240)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd09, &(0x7f0000000280)="0400000000000000000000007c01000038010000010000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f00000002c0)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f0000000300)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") 1m21.825822416s ago: executing program 1 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='proc\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000000)='900\x00', 0x3, 0x0) pwrite64(r0, &(0x7f0000000000)='0\x00', 0x1, 0x0) 1m21.161504453s ago: executing program 0 (id=18): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b061000010102030109022e0001010080fa0904000004ff00000007050302000200070584020002000705880100040107050701000401"], 0x0) nanosleep(&(0x7f0000000040)={0x0, 0xbebc200}, 0x0) syz_usb_ep_write(r0, 0x3, 0x10, &(0x7f0000000100)="0000000c000000010007000101770000") r1 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x1}) syz_usb_ep_write(r0, 0x88, 0x10, &(0x7f0000000400)='\x00'/16) 1m20.797883033s ago: executing program 3 (id=19): syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000140)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @device_b}, 0x0, @default, 0x2, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @val={0x6, 0x2}, @void, @void, @void, @void, @void, @void, @void, @void}, 0x3a) nanosleep(&(0x7f0000000200)={0x0, 0x2faf080}, &(0x7f0000000240)) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000340)=ANY=[@ANYBLOB="d0000000080211000000080211000001505050505050300008003412"], 0x1c) 1m20.211361667s ago: executing program 0 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='10\n\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='10\n\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./nfsd/versions\x00', 0x2, 0x0) write(r2, &(0x7f0000000580)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./rpc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./rpc\x00', &(0x7f0000000740)='rpc_pipefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='1\n\x00', 0x2) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./rpc/nfsd4_cld/cld\x00', 0x0, 0x0) read(r5, &(0x7f0000000800)=""/1024, 0x400) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./export\x00', &(0x7f0000000640)='tmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r7, &(0x7f00000003c0)='mydomain ./export 2147483647 8192 0 0 0\n\x00', 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480)='nfs4\x00', 0x0, &(0x7f00000004c0)='nolock,addr=127.0.0.1\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file\x00', 0x42, 0x1ff) 1m20.123797099s ago: executing program 1 (id=21): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000000)={'lo\x00', @ifru_mtu=0x5dc}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000200)=@ethtool_sfeatures={0x3b, 0x2, [{0x10000}, {}]}}) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x12, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) accept(r0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000400)='test\x00', 0x0) ftruncate(r2, 0x10000) sendfile(r1, r2, 0x0, 0x10000) 1m19.944839204s ago: executing program 3 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/1/ns/net\x00', 0x0, 0x0) setns(r0, 0x40000000) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/x25/route\x00', 0x0, 0x0) read(r1, &(0x7f0000000100)=""/100, 0x64) 1m19.805216958s ago: executing program 3 (id=23): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x10000, &(0x7f0000001000)}]}) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f00000002a0)={0x1, 0x100}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000002c0)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000001000)=""/16, &(0x7f0000002000), &(0x7f0000003000)=""/6}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000180)={0x1, r1}) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000190)={0x1, r2}) write(r2, &(0x7f00000001a0)="0100000000000000", 0x8) 1m19.804316127s ago: executing program 1 (id=24): r0 = syz_usb_connect(0x2, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da0b31280001000000010902190001010080320904000001ffffff0007058102000200"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1m19.550583524s ago: executing program 3 (id=25): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x7}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d0000000600ff0901a101150026ff007508954009018102090191020901b102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d0000000600ff0901a101150026ff007508954009018102090191020901b102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0}) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="fe0300"/64) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="039900"/64) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="039a00"/64) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon0/curr1_input\x00', 0x0, 0x0) read(r1, &(0x7f0000000600)=""/64, 0x40) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon1/curr1_input\x00', 0x0, 0x0) read(r2, &(0x7f0000000600)=""/64, 0x40) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon2/curr1_input\x00', 0x0, 0x0) read(r3, &(0x7f0000000600)=""/64, 0x40) (async) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)='\x00'/64) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)='\x00'/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)='\x00'/64) 1m18.49889569s ago: executing program 0 (id=26): r0 = syz_usb_connect(0x0, 0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff4082057d000000000000010902ac00040100c0000904000000ffffff000904000101ffffff000b2402010203180144ac00070501010002010904010000ffffff000904010101ffffff000b2402010203180144ac00070582010002010904020000ffffff000904020101ffffff000b2402010203180144ac000705850100020109040300020103000007240100011600062402010100092403010201010100070503020002000525010101070584020002000525010102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x4, "44ac0000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) nanosleep(&(0x7f0000000100)={0x2}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000400), 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000500), 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000600), 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000700), 0x2, 0x0) 1m16.232667197s ago: executing program 1 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/acpi/parameters/debug_level\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='0xffffffff\x00', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/acpi/parameters/debug_layer\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='0xffffffff\x00', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='disk\n', 0x5) 1m15.758410779s ago: executing program 0 (id=28): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000700), 0x1, 0x676, &(0x7f0000000740)="$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") r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) read(r0, &(0x7f0000800000)=""/524288, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r1, &(0x7f0000800000)='\x00'/524288, 0x80000) ftruncate(r1, 0x40000000) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./loop1\x00', 0x61ff, 0x701) mount(&(0x7f0000000400)=@filename='./loop1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000680)='ext4\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x0, 0x0) ioctl(r3, 0x40086610, &(0x7f0000000800)="0000100000000000") 1m15.502941346s ago: executing program 3 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='ep0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r4, &(0x7f0000000440)='3\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0) write(r5, &(0x7f00000004c0)='blk0\n', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0) write(r6, &(0x7f0000000540)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0/ep.1/ep_name\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0) write(r7, &(0x7f00000006c0)='3\n', 0x2) write(0xffffffffffffffff, &(0x7f0000000740)='blk1\n', 0x5) write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) symlinkat(&(0x7f0000000800)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') write(0xffffffffffffffff, &(0x7f00000008c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1m15.311225491s ago: executing program 0 (id=30): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='zstd\x00', 0x4) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r1, &(0x7f0000000000), 0x10000) r2 = eventfd(0x11111111) r3 = eventfd(0x22222222) r4 = eventfd(0x11111111) r5 = eventfd(0x22222222) r6 = eventfd(0x11111111) r7 = eventfd(0x22222222) read(r2, &(0x7f0000000008), 0x8) read(r3, &(0x7f0000000010), 0x8) read(r4, &(0x7f0000000018), 0x8) read(r5, &(0x7f0000000020), 0x8) read(r6, &(0x7f0000000028), 0x8) read(r7, &(0x7f0000000030), 0x8) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) 1m14.890632151s ago: executing program 3 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000540)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000640)='ep1\n', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/name\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f00000008c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1m14.802659733s ago: executing program 0 (id=32): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x100000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000100000)={0x0, &(0x7f0000100100)=[@wrmsr={0x65, 0x20, {0x1b, 0xfee00d00}}, @wrmsr={0x65, 0x20, {0x80b}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000200000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x200000}]}) ioctl$KVM_RUN(r3, 0x0, 0x0) 1m14.55531661s ago: executing program 32 (id=32): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x100000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000100000)={0x0, &(0x7f0000100100)=[@wrmsr={0x65, 0x20, {0x1b, 0xfee00d00}}, @wrmsr={0x65, 0x20, {0x80b}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000200000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x200000}]}) ioctl$KVM_RUN(r3, 0x0, 0x0) 16.019788287s ago: executing program 33 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/acpi/parameters/debug_level\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='0xffffffff\x00', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/acpi/parameters/debug_layer\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='0xffffffff\x00', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='disk\n', 0x5) 15.934951449s ago: executing program 34 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x42, 0x1ff) fallocate(r1, 0x0, 0x0, 0x1000000) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x1ff) fallocate(r3, 0x0, 0x0, 0x1000000) r4 = syz_open_dev$loop(&(0x7f0000000200), 0x1, 0x2) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl(r0, 0xc138fd03, &(0x7f0000000240)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd09, &(0x7f0000000280)="0400000000000000000000007c01000038010000010000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f00000002c0)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f0000000300)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") 15.779470933s ago: executing program 35 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000540)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000640)='ep1\n', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/name\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f00000008c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1.550439441s ago: executing program 7 (id=36): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000700), 0x1, 0x676, &(0x7f0000000740)="$eJzs3UtsXFcZB/DvXj/IY8COkgXpBkMWRUKxPXFcBQRqi1jw6AJEF1SqBFYycayMkxC7VWyMaAMSjwVCXdAFUlVY0FJAWBTUIkBYPFYgVIlKqAgiYAWVqqK2YoU06Ixn7KG+rp36cSvu7yddz7nnzOR84+Q/917lHjuAyhpJX/KI4xExnEUM9Yz1R2dwZPV5SxPLF9KWRav18RezyCJiZmL5Qvf5WefxcOfFZyLil++POPHFjfPOLSxenGo2G1c7+2Pzs1fG5hYWT87MTk03phuXTtVvq58Zr09Ont619/rnH99/9PbDH/7J95997IfXvnXxb1ncEbXOWO/72C0jMbL2PenVn0XctduTlaSv8+9koOxCuGlfuO/sl9Pf39GIOBERR2Io+jqpv+Ud9740FNf+stlr//WrR/65n7UCu6/1uYgWUEllf/4AAAAAAAAAAAAAAAAAAADrWq3M+n+oqLI/fwAAAAAAAAAAAAAAAAAAgI1mJpYvdLf9mvOPP9uvmYAiL9wZEf2r+V/qbKsj/THSfjwQAxFx6OUsPW1NFhEf3eHcK3dEjMT7Hp7/xD3fSVt0Pod2+McC2/TAgxHx1qLjf9bO/3AcaO8dejn/n/zn6bWdx9R//XXMffy5lP+Z7/X2yT/sn53k/2s9+X/odcx98hsp/1//UW+f/EM1LP267AqAsnzo6bIrgGprn/+P9/dvdv6/E1e2GP/PXDr/f/HdvX3O/6EaHv9M2RUAZfnpD8quACjLV/9QdgVQbSt3puv/ov//y9fu/4mC+39qEfGpHc49+fN0/f/2o719rv9h/3Tv/1vacP/fev77Nrn/79FtztH69/Sxov5jT6X8P3qte/9f2tL83XsBgb31woMRtxTmP1vLf1aQ/zwilrc5x9Jv750t6j96d8r/4/fLP5Sj9c2IW6M4/12pNTY/e2VsbmHx5Mzs1HRjunHpVP22+pnx+uTk6bHzM83G+OrXwjnqD13/fFH/87en/A9dl38oRzr+H9ok/1ud/69sc45PfmX4Y0X9p+9J+f/AxGvnP39+MLs7lRCDnZ5rU/PzV+sRg9ldG/tP3ex3AKqjm5FuhlL+33nita//i87/D0bEM9ucc/HqU98t6n/ksZT/bz/h+A/lSPk/t8Xxvyj/qe+v25zjvS/9vnB50JN/Svn/+2flHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3qjwiapHlo2vtPB8djTgcEcfiUN68PDf/rvOX77t0Lo1FDMdA3v1N/0Or+1nar7fb6/unXrU/ERFHIuJLfQfb+6NnLzfPlf3moaJqETee/PTZwbLrAAAAAAAAAAAAAAAAAAAA1h1+1fr/f/Strv8H/n/VIm48+5unf5Har/SVXQ2wn1L+n3hl9iMh/1A58g/VJf9QXfIP1SX/UF3yD9Ul/1Bd8g/VJf9QXfIP1dWbfwAAAAAAAAAAAAAAAAAAAAAAAABgbx1528pzWUQ88J6D7S0Z7IwNlFoZsNfysgsASuNHf0N19ZddAFAa1/hAtsX4gc0GVrZ6JQAAAAAAAAAAAACwW249bv0/VJX1/1Bd1v9DdVn/D9XlGh+w/h8AAAAAAAAAAAAA3vhq7S3LRztrgWuR56OjEW+OiOEYyM7PNBvjEfGWiPhd38Cb0n697KKBHalF3PjgM8ceLrsOAAAAAAAAAAAAAAAAAABg3dzC4sWpZrNxVUNDQ2OtUfYnEwAAAAAAAAAAAAAAAAAAVM/6ot+yKwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA8qz//v+9a5T9HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBm/TcAAP//7HpP/g==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ftruncate(r0, 0x40000) 1.061753254s ago: executing program 7 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='mem', 0x3) 960.395196ms ago: executing program 6 (id=35): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000106)="0000ffffff0a00f6f5290000000000000003df00") syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000206)="0000ffffff0300fdfd2b00d800") syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000300)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000306)="0000ffffff0400fcfd210100e100") nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) 0s ago: executing program 5 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='mem\n', 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts. [ 65.448516][ T5760] cgroup: Unknown subsys name 'net' [ 65.594530][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.954384][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.287373][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.296306][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.308536][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.319853][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.328806][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.336094][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.441728][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.450345][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.458991][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.467178][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.474762][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.482951][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.490960][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.498557][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.515958][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.523513][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.532442][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.540265][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.548613][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.555970][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.563711][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.564121][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.579272][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.592558][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.734333][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 68.906896][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.914818][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.922558][ T5772] bridge_slave_0: entered allmulticast mode [ 68.929393][ T5772] bridge_slave_0: entered promiscuous mode [ 68.953005][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.960247][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.967362][ T5772] bridge_slave_1: entered allmulticast mode [ 68.974413][ T5772] bridge_slave_1: entered promiscuous mode [ 69.044473][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.072408][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.084681][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 69.094290][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 69.151641][ T5772] team0: Port device team_slave_0 added [ 69.184694][ T5772] team0: Port device team_slave_1 added [ 69.246124][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.253193][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.279424][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.303383][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 69.314858][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.322383][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.348339][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.404588][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.412507][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.421503][ T5777] bridge_slave_0: entered allmulticast mode [ 69.428126][ T5777] bridge_slave_0: entered promiscuous mode [ 69.443505][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.450654][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.457777][ T5777] bridge_slave_1: entered allmulticast mode [ 69.464998][ T5777] bridge_slave_1: entered promiscuous mode [ 69.471706][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.479665][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.486775][ T5776] bridge_slave_0: entered allmulticast mode [ 69.494079][ T5776] bridge_slave_0: entered promiscuous mode [ 69.503151][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.510604][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.517712][ T5776] bridge_slave_1: entered allmulticast mode [ 69.524429][ T5776] bridge_slave_1: entered promiscuous mode [ 69.585835][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.597864][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.649817][ T5772] hsr_slave_0: entered promiscuous mode [ 69.656366][ T5772] hsr_slave_1: entered promiscuous mode [ 69.664985][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.676931][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.709245][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.716414][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.724144][ T5775] bridge_slave_0: entered allmulticast mode [ 69.731534][ T5775] bridge_slave_0: entered promiscuous mode [ 69.751541][ T5777] team0: Port device team_slave_0 added [ 69.759004][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.766136][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.773942][ T5775] bridge_slave_1: entered allmulticast mode [ 69.780785][ T5775] bridge_slave_1: entered promiscuous mode [ 69.796900][ T5777] team0: Port device team_slave_1 added [ 69.823613][ T5776] team0: Port device team_slave_0 added [ 69.862185][ T5776] team0: Port device team_slave_1 added [ 69.876405][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.883561][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.912052][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.925286][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.954978][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.962100][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.988227][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.001080][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.062378][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.069556][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.097293][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.110372][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.117330][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.143392][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.194862][ T5775] team0: Port device team_slave_0 added [ 70.219665][ T5775] team0: Port device team_slave_1 added [ 70.279795][ T5777] hsr_slave_0: entered promiscuous mode [ 70.286076][ T5777] hsr_slave_1: entered promiscuous mode [ 70.292678][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.300730][ T5777] Cannot create hsr debugfs directory [ 70.315447][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.322473][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.348685][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.369620][ T5776] hsr_slave_0: entered promiscuous mode [ 70.375769][ T5776] hsr_slave_1: entered promiscuous mode [ 70.382018][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.389785][ T5776] Cannot create hsr debugfs directory [ 70.405021][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.412427][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.439105][ T5783] Bluetooth: hci0: command tx timeout [ 70.440224][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.518248][ T5783] Bluetooth: hci1: command tx timeout [ 70.593657][ T5775] hsr_slave_0: entered promiscuous mode [ 70.599467][ T5783] Bluetooth: hci2: command tx timeout [ 70.605805][ T5775] hsr_slave_1: entered promiscuous mode [ 70.612315][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.620133][ T5775] Cannot create hsr debugfs directory [ 70.666097][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.678364][ T5783] Bluetooth: hci3: command tx timeout [ 70.700817][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.730772][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.740604][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.932856][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.942365][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.953320][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.969668][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.048069][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.057819][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.079229][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.090207][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.157036][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.169838][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.181984][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.191256][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.209597][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.248913][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.273985][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.281311][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.315324][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.333018][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.340144][ T3008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.382557][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.417032][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.424528][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.449864][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.457000][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.484039][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.490848][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.522268][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.563845][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.593533][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.611145][ T2977] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.618327][ T2977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.638724][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.645988][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.721578][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.757654][ T5777] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.775634][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.871039][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.878245][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.916330][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.923541][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.012397][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.091334][ T5772] veth0_vlan: entered promiscuous mode [ 72.114324][ T5772] veth1_vlan: entered promiscuous mode [ 72.183615][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.223864][ T5772] veth0_macvtap: entered promiscuous mode [ 72.244899][ T5772] veth1_macvtap: entered promiscuous mode [ 72.332696][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.346571][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.356136][ T5776] veth0_vlan: entered promiscuous mode [ 72.374155][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.386461][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.395658][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.405379][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.414407][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.434152][ T5776] veth1_vlan: entered promiscuous mode [ 72.455110][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.520734][ T5783] Bluetooth: hci0: command tx timeout [ 72.547913][ T5777] veth0_vlan: entered promiscuous mode [ 72.589305][ T5777] veth1_vlan: entered promiscuous mode [ 72.599002][ T5783] Bluetooth: hci1: command tx timeout [ 72.634680][ T5775] veth0_vlan: entered promiscuous mode [ 72.638869][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.648116][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.658164][ T5776] veth0_macvtap: entered promiscuous mode [ 72.678313][ T5783] Bluetooth: hci2: command tx timeout [ 72.682079][ T5776] veth1_macvtap: entered promiscuous mode [ 72.720886][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.730383][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.746846][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.757829][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.758393][ T5783] Bluetooth: hci3: command tx timeout [ 72.782660][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.792177][ T5775] veth1_vlan: entered promiscuous mode [ 72.814673][ T5777] veth0_macvtap: entered promiscuous mode [ 72.824097][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.836245][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.849620][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.871239][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.881449][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.891229][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.904957][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.917547][ T5777] veth1_macvtap: entered promiscuous mode [ 73.015746][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.037252][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.046008][ T5830] syz.0.1[5830]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 73.047319][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.072250][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.085225][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.115274][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.135682][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.146343][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.157123][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.170259][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.179787][ T5775] veth0_macvtap: entered promiscuous mode [ 73.213730][ T5775] veth1_macvtap: entered promiscuous mode [ 73.246856][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.256037][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.264808][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.273846][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.318480][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.330726][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.414556][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.432662][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.445139][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.458297][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.473011][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.486048][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.497947][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.516051][ T2990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.525401][ T2990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.540511][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.553857][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.572814][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.586713][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.597685][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.608478][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.620258][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.661913][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.670964][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.680819][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.691350][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.750140][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.766489][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.883954][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.898053][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.926923][ T5832] loop3: detected capacity change from 0 to 1024 [ 73.978903][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.986770][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.104464][ T5832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.173549][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.186150][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.326810][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.518588][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.599054][ T5783] Bluetooth: hci0: command tx timeout [ 74.678973][ T5783] Bluetooth: hci1: command tx timeout [ 74.689454][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.721967][ T23] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 74.738340][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.746372][ T23] usb 2-1: Product: syz [ 74.750801][ T23] usb 2-1: Manufacturer: syz [ 74.755446][ T23] usb 2-1: SerialNumber: syz [ 74.762118][ T5783] Bluetooth: hci2: command tx timeout [ 74.838728][ T5783] Bluetooth: hci3: command tx timeout [ 74.914080][ T5841] loop3: detected capacity change from 0 to 32768 [ 74.914132][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 74.934546][ T5841] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.5 (5841) [ 74.971982][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.999362][ T9] usb 3-1: Product: syz [ 75.003657][ T9] usb 3-1: Manufacturer: syz [ 75.031219][ T5841] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 75.051160][ T9] usb 3-1: SerialNumber: syz [ 75.073229][ T5841] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 75.131382][ T5841] BTRFS info (device loop3): using free space tree [ 75.204887][ T5811] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 75.298335][ T5841] BTRFS info (device loop3): enabling ssd optimizations [ 75.313296][ T5841] BTRFS info (device loop3): auto enabling async discard [ 76.033042][ T23] usb 2-1: 1:1 : unsupported format bits 0x20000 [ 76.072041][ T23] usb 2-1: 2:1 : unsupported format bits 0x20000 [ 76.160442][ T5776] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 76.168590][ T23] usb 2-1: USB disconnect, device number 2 [ 76.302350][ T5839] mac80211_hwsim hwsim8 wlan99: renamed from wlan0 (while UP) [ 76.610007][ T5811] usb 3-1: Service connection timeout for: 256 [ 76.643077][ T5811] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 76.681776][ T5783] Bluetooth: hci0: command tx timeout [ 76.754546][ T5811] ath9k_htc: Failed to initialize the device [ 76.758889][ T5783] Bluetooth: hci1: command tx timeout [ 76.784794][ T5811] usb 3-1: ath9k_htc: USB layer deinitialized [ 76.842364][ T5783] Bluetooth: hci2: command tx timeout [ 76.919849][ T5783] Bluetooth: hci3: command tx timeout [ 77.218393][ T5808] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.309273][ T5887] loop0: detected capacity change from 0 to 1024 [ 77.342752][ T5887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.400419][ T5808] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 77.414145][ T5808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.434898][ T5887] loop1: detected capacity change from 0 to 2048 [ 77.450545][ T5887] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.516362][ T5887] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 77.526856][ T5762] usb 3-1: USB disconnect, device number 2 [ 77.537969][ T5887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.565648][ T5887] EXT4-fs (loop1): resizing filesystem from 512 to 1024 blocks [ 77.578043][ T5887] EXT4-fs (loop1): resized filesystem to 1024 [ 77.634605][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.792886][ T28] audit: type=1800 audit(1785897476.820:2): pid=5893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.11" name="idVendor" dev="configfs" ino=7374 res=0 errno=0 [ 77.831606][ T28] audit: type=1800 audit(1785897476.860:3): pid=5893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.11" name="idProduct" dev="configfs" ino=6091 res=0 errno=0 [ 77.897440][ T28] audit: type=1800 audit(1785897476.920:4): pid=5893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.11" name="UDC" dev="configfs" ino=7379 res=0 errno=0 [ 78.166119][ T5762] logitech-hidpp-device 0005:046D:B012.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 78.242623][ T5810] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.307474][ T5903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.317913][ T5903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.388572][ T5884] NFSD: attempt to initialize umh client tracking in a container ignored. [ 78.400675][ T5884] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 78.409717][ T5884] NFSD: Unable to initialize client recovery tracking! (-22) [ 78.417638][ T5884] NFSD: starting 90-second grace period (net f0000467) [ 78.432277][ T5810] usb 1-1: Dual-Role OTG device on HNP port [ 78.439453][ T5810] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 6.06 [ 78.448966][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.658813][ T5808] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 4) [ 78.736491][ T5808] usb 2-1: USB disconnect, device number 3 [ 79.137910][ T5916] svc: failed to register nfsdv3 RPC service (errno 111). [ 79.154920][ T5916] svc: failed to register nfsaclv3 RPC service (errno 111). [ 79.204991][ T5910] loop3: detected capacity change from 0 to 32768 [ 79.217735][ T5910] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 8 /dev/loop3 scanned by syz.3.14 (5910) [ 79.266028][ T5910] BTRFS info (device loop3): first mount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 79.301730][ T5910] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 79.335302][ T5910] BTRFS info (device loop3): using free space tree [ 79.567716][ T5910] BTRFS info (device loop3): enabling ssd optimizations [ 79.596316][ T5910] BTRFS info (device loop3): auto enabling async discard [ 79.934243][ T5910] BTRFS info (device loop3): last unmount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 80.151471][ T5940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.177343][ T5940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.518830][ T5943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.638435][ T5943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.748356][ T5808] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 81.930944][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.953761][ T5808] usb 2-1: not running at top speed; connect to a high speed hub [ 81.980424][ T5808] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 82.001889][ T5808] usb 2-1: New USB device found, idVendor=0bda, idProduct=2831, bcdDevice= 1.00 [ 82.028279][ T5808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.054841][ T5955] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 82.142694][ T27] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 82.152078][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.183626][ T27] usb 4-1: config 0 descriptor?? [ 82.305689][ T5808] usb 2-1: dvb_usb_v2: found a 'Realtek RTL2831U reference design' in warm state [ 82.489919][ T5945] NFSD: attempt to initialize umh client tracking in a container ignored. [ 82.511209][ T5808] dvb_usb_rtl28xxu: probe of 2-1:1.0 failed with error -32 [ 82.519172][ T5945] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 82.538380][ T5945] NFSD: Unable to initialize client recovery tracking! (-22) [ 82.556008][ T5945] NFSD: starting 10-second grace period (net f00003c7) [ 82.649954][ T27] corsair-psu 0003:1B1C:1C03.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1c03] on usb-dummy_hcd.3-1/input0 [ 82.805610][ T5961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.819272][ T5961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.940919][ T5762] usb 2-1: USB disconnect, device number 4 [ 85.040744][ T5967] PM: hibernation: hibernation entry [ 85.122274][ T27] usb 4-1: USB disconnect, device number 2 [ 85.498986][ T5969] loop0: detected capacity change from 0 to 1024 [ 85.522382][ T5969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.701202][ T5969] loop1: detected capacity change from 0 to 576 [ 85.728416][ T28] audit: type=1800 audit(1785897484.750:5): pid=5974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.29" name="idVendor" dev="configfs" ino=8259 res=0 errno=0 [ 85.764512][ T28] audit: type=1800 audit(1785897484.780:6): pid=5974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.29" name="idProduct" dev="configfs" ino=8260 res=0 errno=0 [ 85.786058][ T28] audit: type=1800 audit(1785897484.780:7): pid=5974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.29" name="process_ump" dev="configfs" ino=8261 res=0 errno=0 [ 85.806645][ T28] audit: type=1800 audit(1785897484.780:8): pid=5974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.29" name="ep_name" dev="configfs" ino=8262 res=0 errno=0 [ 85.827354][ T28] audit: type=1800 audit(1785897484.780:9): pid=5974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.29" name="direction" dev="configfs" ino=8263 res=0 errno=0 [ 85.847732][ T28] audit: type=1800 audit(1785897484.790:10): pid=5974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.29" name="name" dev="configfs" ino=8264 res=0 errno=0 [ 85.888294][ T5967] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 85.894979][ T5967] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 85.895447][ T28] audit: type=1800 audit(1785897484.790:11): pid=5974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.29" name="active" dev="configfs" ino=8265 res=0 errno=0 [ 85.929420][ T28] audit: type=1800 audit(1785897484.790:12): pid=5974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.29" name="ep_name" dev="configfs" ino=8267 res=0 errno=0 [ 85.934520][ T5967] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 85.965936][ T5967] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 85.975591][ T5967] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 85.994794][ T5967] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 86.005064][ T5967] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 86.011168][ T5967] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 86.020934][ T5967] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 86.029653][ T5967] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 86.035752][ T5967] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 86.044973][ T5967] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 86.408991][ T5967] Filesystems sync: 0.350 seconds [ 86.433465][ T28] audit: type=1800 audit(1785897485.460:13): pid=5976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.31" name="idVendor" dev="configfs" ino=8270 res=0 errno=0 [ 86.475409][ T2990] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.488233][ T28] audit: type=1800 audit(1785897485.480:14): pid=5976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.31" name="idProduct" dev="configfs" ino=8271 res=0 errno=0 [ 86.612221][ T2990] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.705021][ T2990] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.812681][ T2990] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.850851][ T790] cfg80211: failed to load regulatory.db [ 86.857684][ T5967] Freezing user space processes [ 86.889949][ T5967] Freezing user space processes completed (elapsed 0.015 seconds) [ 86.899058][ T5967] OOM killer disabled. [ 87.142810][ T5967] PM: hibernation: Preallocating image memory [ 88.038389][ T5783] Bluetooth: hci3: command 0x0c1a tx timeout [ 88.044801][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout [ 88.051640][ T5779] Bluetooth: hci1: command 0x0c1a tx timeout [ 88.855604][ T2990] hsr_slave_0: left promiscuous mode [ 88.867327][ T2990] hsr_slave_1: left promiscuous mode [ 88.876084][ T2990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.890023][ T2990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.899980][ T2990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.907412][ T2990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.920956][ T2990] bridge_slave_1: left allmulticast mode [ 88.926648][ T2990] bridge_slave_1: left promiscuous mode [ 88.940202][ T2990] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.159860][ T2990] bridge_slave_0: left allmulticast mode [ 89.165593][ T2990] bridge_slave_0: left promiscuous mode [ 89.182889][ T2990] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.227270][ T2990] veth1_macvtap: left promiscuous mode [ 89.238888][ T2990] veth0_macvtap: left promiscuous mode [ 89.244596][ T2990] veth1_vlan: left promiscuous mode [ 89.252491][ T2990] veth0_vlan: left promiscuous mode [ 90.360464][ T5783] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.366583][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.368278][ T5779] Bluetooth: hci1: command 0x0c1a tx timeout [ 90.856774][ T2990] team0 (unregistering): Port device team_slave_1 removed [ 90.917915][ T2990] team0 (unregistering): Port device team_slave_0 removed [ 90.971314][ T2990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.020940][ T2990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.409392][ T2990] bond0 (unregistering): Released all slaves [ 92.445089][ T5783] Bluetooth: hci1: command 0x0c1a tx timeout [ 92.452775][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 92.452793][ T5779] Bluetooth: hci3: command 0x0c1a tx timeout [ 131.440111][ T5967] PM: hibernation: Allocated 675000 pages for snapshot [ 131.447060][ T5967] PM: hibernation: Allocated 2700000 kbytes in 44.28 seconds (60.97 MB/s) [ 131.455719][ T5967] Freezing remaining freezable tasks [ 131.465012][ T5967] Freezing remaining freezable tasks completed (elapsed 0.003 seconds) [ 131.486161][ T5967] printk: Suspending console(s) (use no_console_suspend to debug) [ 131.624121][ T5967] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 131.659965][ T5967] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 131.699921][ T5967] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 131.739739][ T5967] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 131.779723][ T5967] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 131.820098][ T5967] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 131.859631][ T5967] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 131.909091][ T5967] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 131.966115][ T5967] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 131.999242][ T5967] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 132.039882][ T5967] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 132.079971][ T5967] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 132.119919][ T5967] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 132.159722][ T5967] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 132.200221][ T5967] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 132.496944][ T5967] ACPI: PM: Preparing to enter system sleep state S4 [ 132.497638][ T5967] ACPI: PM: Saving platform NVS memory [ 132.499368][ T5967] Disabling non-boot CPUs ... [ 132.532238][ T5967] smpboot: CPU 1 is now offline [ 132.571745][ T5967] PM: hibernation: Creating image: [ 135.002235][ T5967] PM: hibernation: Need to copy 651865 pages [ 138.067339][ T5967] PM: hibernation: Image created (366577 pages copied, 285288 zero pages) [ 138.067581][ T5967] ACPI: PM: Restoring platform NVS memory [ 138.083533][ T5967] Enabling non-boot CPUs ... [ 138.084942][ T5967] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 138.097178][ T5967] CPU1 is up [ 138.098252][ T5967] ACPI: PM: Waking up from system sleep state S4 [ 138.437364][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.437401][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.592034][ T6052] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 138.771753][ T6052] usb 1-1: device firmware changed [ 138.857127][ T5967] PM: Failed to allocate LZO data [ 144.909459][ T5967] OOM killer enabled. [ 144.910126][ T5967] Restarting tasks ... done. [ 144.930359][ T5810] usb 1-1: USB disconnect, device number 2 [ 144.969490][ T5967] PM: hibernation: hibernation exit [ 145.183990][ T5810] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 145.229125][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.411746][ T5810] usb 1-1: Dual-Role OTG device on HNP port [ 145.414377][ T5810] usb 1-1: New USB device found, idVendor=0499, idProduct=1000, bcdDevice= 6.06 [ 145.415688][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.493547][ T5810] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 145.495359][ T5810] snd-usb-audio: probe of 1-1:1.0 failed with error -2 [ 145.558431][ T5810] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 145.726586][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.730395][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.741582][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.758468][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.763640][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 145.765044][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.645200][ T2977] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.658168][ T5776] syz-executor (5776) used greatest stack depth: 19560 bytes left [ 146.730294][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.734584][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.736256][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.738295][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.739971][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.741726][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.833801][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.836896][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.839146][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.848360][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.852050][ T5089] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.854985][ T5089] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.856685][ T5089] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.858273][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 146.858989][ T5089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.864129][ T5089] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.865353][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 146.866864][ T5089] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.924478][ T2977] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.978707][ T2977] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.105128][ T2977] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.174753][ T6117] chnl_net:caif_netlink_parms(): no params data found [ 147.424299][ T6117] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.425433][ T6117] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.426530][ T6117] bridge_slave_0: entered allmulticast mode [ 147.428536][ T6117] bridge_slave_0: entered promiscuous mode [ 147.499159][ T6117] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.525088][ T6117] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.532446][ T6117] bridge_slave_1: entered allmulticast mode [ 147.539726][ T6117] bridge_slave_1: entered promiscuous mode [ 147.670645][ T6117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.690511][ T6117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.757944][ T6133] chnl_net:caif_netlink_parms(): no params data found [ 148.009409][ T6129] chnl_net:caif_netlink_parms(): no params data found [ 148.031902][ T51] Bluetooth: hci0: command tx timeout [ 148.090406][ T6117] team0: Port device team_slave_0 added [ 148.149716][ T6132] chnl_net:caif_netlink_parms(): no params data found [ 148.167651][ T6117] team0: Port device team_slave_1 added [ 148.254843][ T6117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.271124][ T6117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.306635][ T6117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.331084][ T6117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.339616][ T6117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.370429][ T6117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.509505][ T6129] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.517298][ T6129] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.524838][ T6129] bridge_slave_0: entered allmulticast mode [ 148.531935][ T6129] bridge_slave_0: entered promiscuous mode [ 148.586024][ T6117] hsr_slave_0: entered promiscuous mode [ 148.592697][ T6117] hsr_slave_1: entered promiscuous mode [ 148.599613][ T6129] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.607098][ T6129] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.614639][ T6129] bridge_slave_1: entered allmulticast mode [ 148.621932][ T6129] bridge_slave_1: entered promiscuous mode [ 148.638932][ T6133] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.646532][ T6133] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.653887][ T6133] bridge_slave_0: entered allmulticast mode [ 148.660577][ T6133] bridge_slave_0: entered promiscuous mode [ 148.669276][ T6133] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.691091][ T6133] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.703559][ T6133] bridge_slave_1: entered allmulticast mode [ 148.710853][ T6133] bridge_slave_1: entered promiscuous mode [ 148.799067][ T6129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.808407][ T6132] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.815877][ T6132] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.823158][ T6132] bridge_slave_0: entered allmulticast mode [ 148.830385][ T6132] bridge_slave_0: entered promiscuous mode [ 148.836428][ T51] Bluetooth: hci1: command tx timeout [ 148.840476][ T6132] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.851815][ T6132] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.859022][ T6132] bridge_slave_1: entered allmulticast mode [ 148.866324][ T6132] bridge_slave_1: entered promiscuous mode [ 148.887488][ T6133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.899792][ T6133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.912224][ T51] Bluetooth: hci3: command tx timeout [ 148.912943][ T5089] Bluetooth: hci2: command tx timeout [ 148.944890][ T6129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.095062][ T6133] team0: Port device team_slave_0 added [ 149.112979][ T6132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.157784][ T6129] team0: Port device team_slave_0 added [ 149.183262][ T6133] team0: Port device team_slave_1 added [ 149.193519][ T6132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.230334][ T6129] team0: Port device team_slave_1 added [ 149.270426][ T6129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.277688][ T6129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.312583][ T6129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.404119][ T6129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.411118][ T6129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.451590][ T6129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.484485][ T6132] team0: Port device team_slave_0 added [ 149.496661][ T6133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.503696][ T6133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.530006][ T6133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.572216][ T6132] team0: Port device team_slave_1 added [ 149.597708][ T6133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.605045][ T6133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.631195][ T6133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.715663][ T6132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.722759][ T6132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.751581][ T6132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.795976][ T6129] hsr_slave_0: entered promiscuous mode [ 149.803732][ T6129] hsr_slave_1: entered promiscuous mode [ 149.809786][ T6129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.817505][ T6129] Cannot create hsr debugfs directory [ 149.832221][ T2977] hsr_slave_0: left promiscuous mode [ 149.838183][ T2977] hsr_slave_1: left promiscuous mode [ 149.844518][ T2977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.851987][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.859589][ T2977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.867053][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.874741][ T2977] bridge_slave_1: left allmulticast mode [ 149.880379][ T2977] bridge_slave_1: left promiscuous mode [ 149.886188][ T2977] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.895059][ T2977] bridge_slave_0: left allmulticast mode [ 149.900689][ T2977] bridge_slave_0: left promiscuous mode [ 149.907209][ T2977] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.930322][ T2977] veth1_macvtap: left promiscuous mode [ 149.936161][ T2977] veth0_macvtap: left promiscuous mode [ 149.942367][ T2977] veth1_vlan: left promiscuous mode [ 149.947711][ T2977] veth0_vlan: left promiscuous mode [ 150.111939][ T5089] Bluetooth: hci0: command tx timeout [ 150.388825][ T2977] team0 (unregistering): Port device team_slave_1 removed [ 150.426420][ T2977] team0 (unregistering): Port device team_slave_0 removed [ 150.463588][ T2977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.499268][ T2977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.752078][ T2977] bond0 (unregistering): Released all slaves [ 150.836697][ T6132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.843778][ T6132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.869853][ T6132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.912016][ T5089] Bluetooth: hci1: command tx timeout [ 150.994341][ T5089] Bluetooth: hci3: command tx timeout [ 150.995750][ T51] Bluetooth: hci2: command tx timeout [ 151.032537][ T6133] hsr_slave_0: entered promiscuous mode [ 151.039039][ T6133] hsr_slave_1: entered promiscuous mode [ 151.045795][ T6133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.053614][ T6133] Cannot create hsr debugfs directory [ 151.065953][ T6132] hsr_slave_0: entered promiscuous mode [ 151.074222][ T6132] hsr_slave_1: entered promiscuous mode [ 151.080275][ T6132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.088167][ T6132] Cannot create hsr debugfs directory [ 151.265025][ T6117] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 151.323575][ T6117] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 151.385042][ T6117] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 151.396316][ T6117] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 151.660651][ T6132] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 151.673524][ T6132] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 151.716330][ T2977] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.751153][ T6132] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 151.777636][ T6132] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 151.808116][ T2977] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.870705][ T2977] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.906371][ T6117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.943806][ T2977] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.008886][ T6133] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 152.022875][ T6133] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 152.060090][ T6133] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 152.089775][ T6133] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 152.158332][ T6117] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.193061][ T51] Bluetooth: hci0: command tx timeout [ 152.236352][ T6051] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.243549][ T6051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.335130][ T2977] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.358928][ T6129] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 152.416879][ T2977] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.439496][ T6052] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.446702][ T6052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.464232][ T6129] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 152.480265][ T6129] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 152.506608][ T6129] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 152.555865][ T2977] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.743451][ T2977] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.865109][ T6132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.903160][ T6132] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.002626][ T51] Bluetooth: hci1: command tx timeout [ 153.014273][ T6052] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.021464][ T6052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.064946][ T6052] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.072196][ T6052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.080191][ T51] Bluetooth: hci2: command tx timeout [ 153.086240][ T5089] Bluetooth: hci3: command tx timeout [ 153.150736][ T6133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.174395][ T6133] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.277318][ T5089] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.288826][ T5089] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.296788][ T5089] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.305097][ T5089] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.313930][ T5089] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.321984][ T5089] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.392818][ T6051] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.399941][ T6051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.428101][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.435279][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.549361][ T6132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.727952][ T6129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.134665][ T6129] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.227391][ T6090] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.234569][ T6090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.359543][ T6090] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.366794][ T6090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.429249][ T6132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.556525][ T6223] chnl_net:caif_netlink_parms(): no params data found [ 154.758948][ T6133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.084052][ T5089] Bluetooth: hci1: command tx timeout [ 155.099428][ T6132] veth0_vlan: entered promiscuous mode [ 155.134892][ T6223] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.154309][ T5089] Bluetooth: hci2: command tx timeout [ 155.159752][ T5089] Bluetooth: hci3: command tx timeout [ 155.169342][ T6223] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.190142][ T6223] bridge_slave_0: entered allmulticast mode [ 155.212833][ T6223] bridge_slave_0: entered promiscuous mode [ 155.229116][ T6223] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.239081][ T6223] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.258384][ T6223] bridge_slave_1: entered allmulticast mode [ 155.269111][ T6223] bridge_slave_1: entered promiscuous mode [ 155.309892][ T6132] veth1_vlan: entered promiscuous mode [ 155.391870][ T5089] Bluetooth: hci0: command tx timeout [ 155.497038][ T6223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.515049][ T6223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.600651][ T6223] team0: Port device team_slave_0 added [ 155.667122][ T6223] team0: Port device team_slave_1 added [ 155.714668][ T6223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.726158][ T6223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.753514][ T6223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.805860][ T2977] hsr_slave_0: left promiscuous mode [ 155.828356][ T2977] hsr_slave_1: left promiscuous mode [ 155.835521][ T2977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.843022][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.851424][ T2977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.858860][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.868017][ T2977] bridge_slave_1: left allmulticast mode [ 155.874342][ T2977] bridge_slave_1: left promiscuous mode [ 155.880137][ T2977] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.891360][ T2977] bridge_slave_0: left allmulticast mode [ 155.897043][ T2977] bridge_slave_0: left promiscuous mode [ 155.913029][ T2977] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.937987][ T2977] hsr_slave_0: left promiscuous mode [ 155.949708][ T2977] hsr_slave_1: left promiscuous mode [ 155.961062][ T2977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.975315][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.988952][ T2977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.000107][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.012791][ T2977] bridge_slave_1: left allmulticast mode [ 156.018587][ T2977] bridge_slave_1: left promiscuous mode [ 156.033795][ T2977] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.051953][ T2977] bridge_slave_0: left allmulticast mode [ 156.057650][ T2977] bridge_slave_0: left promiscuous mode [ 156.071568][ T2977] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.156369][ T2977] veth1_macvtap: left promiscuous mode [ 156.169483][ T2977] veth0_macvtap: left promiscuous mode [ 156.175575][ T2977] veth1_vlan: left promiscuous mode [ 156.180937][ T2977] veth0_vlan: left promiscuous mode [ 156.199049][ T2977] veth1_macvtap: left promiscuous mode [ 156.205217][ T2977] veth0_macvtap: left promiscuous mode [ 156.210870][ T2977] veth1_vlan: left promiscuous mode [ 156.225988][ T2977] veth0_vlan: left promiscuous mode [ 156.827461][ T2977] team0 (unregistering): Port device team_slave_1 removed [ 156.868345][ T2977] team0 (unregistering): Port device team_slave_0 removed [ 156.905695][ T2977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.947277][ T2977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.217219][ T2977] bond0 (unregistering): Released all slaves [ 157.471805][ T5089] Bluetooth: hci0: command tx timeout [ 157.681133][ T2977] team0 (unregistering): Port device team_slave_1 removed [ 157.726074][ T2977] team0 (unregistering): Port device team_slave_0 removed [ 157.763536][ T2977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.800888][ T2977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.070703][ T2977] bond0 (unregistering): Released all slaves [ 158.169577][ T6223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.176729][ T6223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.204043][ T6223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.266474][ T6132] veth0_macvtap: entered promiscuous mode [ 158.299850][ T6133] veth0_vlan: entered promiscuous mode [ 158.316821][ T6133] veth1_vlan: entered promiscuous mode [ 158.339262][ T6132] veth1_macvtap: entered promiscuous mode [ 158.360577][ T6129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.409727][ T6223] hsr_slave_0: entered promiscuous mode [ 158.426177][ T6223] hsr_slave_1: entered promiscuous mode [ 158.440367][ T6223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.448799][ T6223] Cannot create hsr debugfs directory [ 158.481227][ T6132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.583037][ T6132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.641200][ T6132] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.666532][ T6132] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.678072][ T6132] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.699065][ T6132] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.758202][ T6133] veth0_macvtap: entered promiscuous mode [ 158.868035][ T6133] veth1_macvtap: entered promiscuous mode [ 159.077945][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.088862][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.101972][ T6133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.154868][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.167591][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.179624][ T6133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.208011][ T6090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.224258][ T6090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.353619][ T6051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.355997][ T6133] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.370759][ T6051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.376849][ T6133] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.386867][ T6133] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.396431][ T6133] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.510844][ T6129] veth0_vlan: entered promiscuous mode [ 159.552795][ T5089] Bluetooth: hci0: command tx timeout [ 159.597497][ T6129] veth1_vlan: entered promiscuous mode [ 159.707148][ T6320] loop7: detected capacity change from 0 to 1024 [ 159.734221][ T2990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.757449][ T2990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.781784][ T6320] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.903657][ T6129] veth0_macvtap: entered promiscuous mode [ 159.940579][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.947660][ T6129] veth1_macvtap: entered promiscuous mode [ 159.959918][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.123931][ T6132] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.144059][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.159486][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.170249][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.181088][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.193546][ T6129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.371018][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.382579][ T6336] PM: suspend entry (deep) [ 160.382582][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.382606][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.409086][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.420874][ T6129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.467217][ T6336] Filesystems sync: 0.080 seconds [ 160.517173][ T6223] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 160.538008][ T6129] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.549454][ T6129] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.562905][ T6129] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.576412][ T6129] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.601013][ T6223] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 160.610376][ T5843] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 160.628453][ T6223] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 160.638903][ T6223] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 160.816149][ T5843] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 160.832574][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.838157][ T5843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.840438][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.861746][ T5843] usb 7-1: Product: syz [ 160.867421][ T5843] usb 7-1: Manufacturer: syz [ 160.873116][ T5843] usb 7-1: SerialNumber: syz [ 160.938486][ T6051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.947755][ T6051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.989371][ T6223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.095048][ T6223] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.130497][ T6090] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.137710][ T6090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.174415][ T2977] hsr_slave_0: left promiscuous mode [ 161.194161][ T2977] hsr_slave_1: left promiscuous mode [ 161.223505][ T6336] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.229575][ T6336] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 161.235972][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.248077][ T6336] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 161.257981][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.270476][ T6336] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.286788][ T2977] bridge_slave_1: left allmulticast mode [ 161.300956][ T6336] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 161.313209][ T6345] PM: suspend entry (deep) [ 161.317675][ T6345] PM: suspend exit [ 161.322454][ T2977] bridge_slave_1: left promiscuous mode [ 161.328491][ T2977] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.339018][ T6336] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 161.355517][ T5843] ------------[ cut here ]------------ [ 161.361404][ T5843] URB ffff88802d39b100 submitted while active [ 161.372396][ T2977] bridge_slave_0: left allmulticast mode [ 161.378105][ T2977] bridge_slave_0: left promiscuous mode [ 161.387085][ T6336] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.387789][ T5843] WARNING: CPU: 0 PID: 5843 at drivers/usb/core/urb.c:379 usb_submit_urb+0xf15/0x17a0 [ 161.402889][ T5843] Modules linked in: [ 161.406835][ T5843] CPU: 0 PID: 5843 Comm: kworker/0:5 Not tainted syzkaller #0 [ 161.408232][ T6336] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 161.414448][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.414466][ T5843] Workqueue: usb_hub_wq hub_event [ 161.414494][ T5843] RIP: 0010:usb_submit_urb+0xf15/0x17a0 [ 161.441964][ T5843] Code: 6b 8b 44 89 fa e8 fb a3 1b 04 e9 74 fc ff ff e8 91 70 1d fb c6 05 2a 01 0d 08 01 48 c7 c7 20 ee 6b 8b 48 89 de e8 2b 3e e7 fa <0f> 0b e9 63 f1 ff ff e8 6f 70 1d fb eb 12 e8 68 70 1d fb 41 bc 80 [ 161.461750][ T5843] RSP: 0018:ffffc90004a4ed00 EFLAGS: 00010246 [ 161.464015][ T2977] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.467852][ T5843] RAX: e25f59ccdb077100 RBX: ffff88802d39b100 RCX: 0000000000100000 [ 161.483588][ T5843] RDX: ffffc90017c88000 RSI: 000000000004b229 RDI: 000000000004b22a [ 161.491986][ T5843] RBP: dffffc0000000000 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 161.499952][ T5843] R10: dffffc0000000000 R11: ffffed10171c518b R12: 0000000000000cc0 [ 161.508064][ T5843] R13: 1ffff1100ba4b289 R14: ffff88802d39b108 R15: dffffc0000000000 [ 161.516102][ T5843] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 161.525113][ T5843] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.531827][ T5843] CR2: 000000110c3d2d69 CR3: 000000001ebe7000 CR4: 00000000003506f0 [ 161.539878][ T5843] Call Trace: [ 161.543252][ T5843] [ 161.546238][ T5843] ? port100_send_cmd_async+0xc60/0xc60 [ 161.552217][ T5843] ? skb_put+0x112/0x210 [ 161.556556][ T5843] port100_send_cmd_async+0x81c/0xc60 [ 161.562125][ T5843] port100_set_command_type+0x1c8/0x380 [ 161.567740][ T5843] ? port100_get_command_type_mask+0x390/0x390 [ 161.573974][ T5843] ? lockdep_init_map_type+0x9c/0x8e0 [ 161.579421][ T5843] port100_probe+0x9f1/0xdb0 [ 161.584249][ T5843] usb_probe_interface+0x5c2/0xaf0 [ 161.590191][ T5843] ? usb_register_driver+0x3c0/0x3c0 [ 161.596157][ T5843] really_probe+0x247/0xae0 [ 161.600731][ T5843] ? pm_runtime_barrier+0x14b/0x1c0 [ 161.606040][ T5843] __driver_probe_device+0x1f5/0x390 [ 161.611423][ T5843] driver_probe_device+0x4f/0x420 [ 161.616528][ T5843] __device_attach_driver+0x2ca/0x510 [ 161.622003][ T5843] bus_for_each_drv+0x252/0x2e0 [ 161.626959][ T5843] ? coredump_store+0x90/0x90 [ 161.632114][ T5843] ? bus_find_device+0x300/0x300 [ 161.637260][ T5843] __device_attach+0x2c1/0x420 [ 161.642118][ T5843] ? device_attach+0x20/0x20 [ 161.642642][ T5089] Bluetooth: hci0: command tx timeout [ 161.646736][ T5843] ? do_raw_spin_unlock+0x121/0x230 [ 161.657454][ T5843] bus_probe_device+0x180/0x260 [ 161.662368][ T5843] device_add+0x87c/0xc40 [ 161.666718][ T5843] usb_set_configuration+0x1ad0/0x2150 [ 161.672250][ T5843] usb_generic_driver_probe+0x8d/0x150 [ 161.677763][ T5843] usb_probe_device+0x12a/0x260 [ 161.682673][ T5843] ? usb_register_device_driver+0x230/0x230 [ 161.688604][ T5843] really_probe+0x247/0xae0 [ 161.693942][ T5843] ? pm_runtime_barrier+0x14b/0x1c0 [ 161.699188][ T5843] __driver_probe_device+0x1f5/0x390 [ 161.704707][ T5843] driver_probe_device+0x4f/0x420 [ 161.709777][ T5843] __device_attach_driver+0x2ca/0x510 [ 161.715454][ T5843] bus_for_each_drv+0x252/0x2e0 [ 161.720325][ T5843] ? coredump_store+0x90/0x90 [ 161.725083][ T5843] ? bus_find_device+0x300/0x300 [ 161.730096][ T5843] __device_attach+0x2c1/0x420 [ 161.734944][ T5843] ? device_attach+0x20/0x20 [ 161.739590][ T5843] ? __kmem_cache_free+0xba/0x1f0 [ 161.744717][ T5843] ? do_raw_spin_unlock+0x121/0x230 [ 161.749972][ T5843] bus_probe_device+0x180/0x260 [ 161.754916][ T5843] device_add+0x87c/0xc40 [ 161.759311][ T5843] usb_new_device+0x995/0x1550 [ 161.764173][ T5843] ? lock_chain_count+0x20/0x20 [ 161.769078][ T5843] ? usb_disconnect+0x8a0/0x8a0 [ 161.774000][ T5843] ? _raw_spin_unlock_irq+0x23/0x50 [ 161.779251][ T5843] ? lockdep_hardirqs_on+0x98/0x150 [ 161.784563][ T5843] hub_event+0x29d5/0x4a80 [ 161.789093][ T5843] ? hub_post_resume+0x120/0x120 [ 161.795397][ T5843] ? read_lock_is_recursive+0x20/0x20 [ 161.800819][ T5843] ? _raw_spin_unlock_irq+0x23/0x50 [ 161.806240][ T5843] ? process_scheduled_works+0x975/0x1600 [ 161.812053][ T5843] ? process_scheduled_works+0x975/0x1600 [ 161.817837][ T5843] process_scheduled_works+0xa60/0x1600 [ 161.823512][ T5843] ? worker_attach_to_pool+0x370/0x370 [ 161.829036][ T5843] ? assign_work+0x3cc/0x5d0 [ 161.833726][ T5843] worker_thread+0xa5e/0xfe0 [ 161.838389][ T5843] ? _raw_spin_unlock+0x40/0x40 [ 161.843362][ T5843] ? __kthread_parkme+0x71/0x1c0 [ 161.848367][ T5843] kthread+0x2fa/0x390 [ 161.852508][ T5843] ? pr_cont_work+0x550/0x550 [ 161.857249][ T5843] ? kthread_blkcg+0xd0/0xd0 [ 161.861958][ T5843] ret_from_fork+0x48/0x80 [ 161.866441][ T5843] ? kthread_blkcg+0xd0/0xd0 [ 161.871088][ T5843] ret_from_fork_asm+0x11/0x20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 161.876096][ T5843] [ 161.879181][ T5843] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 161.886492][ T5843] CPU: 0 PID: 5843 Comm: kworker/0:5 Not tainted syzkaller #0 [ 161.893968][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.904038][ T5843] Workqueue: usb_hub_wq hub_event [ 161.909089][ T5843] Call Trace: [ 161.912381][ T5843] [ 161.915326][ T5843] dump_stack_lvl+0x18c/0x250 [ 161.920028][ T5843] ? show_regs_print_info+0x20/0x20 [ 161.925249][ T5843] ? load_image+0x420/0x420 [ 161.929797][ T5843] panic+0x2ca/0x720 [ 161.933725][ T5843] ? bpf_jit_dump+0xd0/0xd0 [ 161.938265][ T5843] ? ret_from_fork_asm+0x11/0x20 [ 161.943219][ T5843] __warn+0x2e0/0x470 [ 161.947197][ T5843] ? usb_submit_urb+0xf15/0x17a0 [ 161.952130][ T5843] ? usb_submit_urb+0xf15/0x17a0 [ 161.957059][ T5843] report_bug+0x2be/0x4f0 [ 161.961386][ T5843] ? usb_submit_urb+0xf15/0x17a0 [ 161.966326][ T5843] ? usb_submit_urb+0xf15/0x17a0 [ 161.971255][ T5843] ? usb_submit_urb+0xf17/0x17a0 [ 161.976187][ T5843] handle_bug+0xcf/0x120 [ 161.980428][ T5843] exc_invalid_op+0x1a/0x50 [ 161.984925][ T5843] asm_exc_invalid_op+0x1a/0x20 [ 161.989772][ T5843] RIP: 0010:usb_submit_urb+0xf15/0x17a0 [ 161.995311][ T5843] Code: 6b 8b 44 89 fa e8 fb a3 1b 04 e9 74 fc ff ff e8 91 70 1d fb c6 05 2a 01 0d 08 01 48 c7 c7 20 ee 6b 8b 48 89 de e8 2b 3e e7 fa <0f> 0b e9 63 f1 ff ff e8 6f 70 1d fb eb 12 e8 68 70 1d fb 41 bc 80 [ 162.014912][ T5843] RSP: 0018:ffffc90004a4ed00 EFLAGS: 00010246 [ 162.021002][ T5843] RAX: e25f59ccdb077100 RBX: ffff88802d39b100 RCX: 0000000000100000 [ 162.028972][ T5843] RDX: ffffc90017c88000 RSI: 000000000004b229 RDI: 000000000004b22a [ 162.036961][ T5843] RBP: dffffc0000000000 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 162.044925][ T5843] R10: dffffc0000000000 R11: ffffed10171c518b R12: 0000000000000cc0 [ 162.052891][ T5843] R13: 1ffff1100ba4b289 R14: ffff88802d39b108 R15: dffffc0000000000 [ 162.060877][ T5843] ? port100_send_cmd_async+0xc60/0xc60 [ 162.066441][ T5843] ? skb_put+0x112/0x210 [ 162.070683][ T5843] port100_send_cmd_async+0x81c/0xc60 [ 162.076060][ T5843] port100_set_command_type+0x1c8/0x380 [ 162.081599][ T5843] ? port100_get_command_type_mask+0x390/0x390 [ 162.087742][ T5843] ? lockdep_init_map_type+0x9c/0x8e0 [ 162.093120][ T5843] port100_probe+0x9f1/0xdb0 [ 162.097708][ T5843] usb_probe_interface+0x5c2/0xaf0 [ 162.102836][ T5843] ? usb_register_driver+0x3c0/0x3c0 [ 162.108118][ T5843] really_probe+0x247/0xae0 [ 162.112613][ T5843] ? pm_runtime_barrier+0x14b/0x1c0 [ 162.117810][ T5843] __driver_probe_device+0x1f5/0x390 [ 162.123102][ T5843] driver_probe_device+0x4f/0x420 [ 162.128128][ T5843] __device_attach_driver+0x2ca/0x510 [ 162.133501][ T5843] bus_for_each_drv+0x252/0x2e0 [ 162.138347][ T5843] ? coredump_store+0x90/0x90 [ 162.143021][ T5843] ? bus_find_device+0x300/0x300 [ 162.147961][ T5843] __device_attach+0x2c1/0x420 [ 162.152725][ T5843] ? device_attach+0x20/0x20 [ 162.157323][ T5843] ? do_raw_spin_unlock+0x121/0x230 [ 162.162518][ T5843] bus_probe_device+0x180/0x260 [ 162.167364][ T5843] device_add+0x87c/0xc40 [ 162.171686][ T5843] usb_set_configuration+0x1ad0/0x2150 [ 162.177157][ T5843] usb_generic_driver_probe+0x8d/0x150 [ 162.182612][ T5843] usb_probe_device+0x12a/0x260 [ 162.187458][ T5843] ? usb_register_device_driver+0x230/0x230 [ 162.193364][ T5843] really_probe+0x247/0xae0 [ 162.197861][ T5843] ? pm_runtime_barrier+0x14b/0x1c0 [ 162.203057][ T5843] __driver_probe_device+0x1f5/0x390 [ 162.208340][ T5843] driver_probe_device+0x4f/0x420 [ 162.213364][ T5843] __device_attach_driver+0x2ca/0x510 [ 162.218734][ T5843] bus_for_each_drv+0x252/0x2e0 [ 162.223579][ T5843] ? coredump_store+0x90/0x90 [ 162.228249][ T5843] ? bus_find_device+0x300/0x300 [ 162.233189][ T5843] __device_attach+0x2c1/0x420 [ 162.237951][ T5843] ? device_attach+0x20/0x20 [ 162.242562][ T5843] ? __kmem_cache_free+0xba/0x1f0 [ 162.247605][ T5843] ? do_raw_spin_unlock+0x121/0x230 [ 162.252801][ T5843] bus_probe_device+0x180/0x260 [ 162.257646][ T5843] device_add+0x87c/0xc40 [ 162.261970][ T5843] usb_new_device+0x995/0x1550 [ 162.266731][ T5843] ? lock_chain_count+0x20/0x20 [ 162.271579][ T5843] ? usb_disconnect+0x8a0/0x8a0 [ 162.276431][ T5843] ? _raw_spin_unlock_irq+0x23/0x50 [ 162.281626][ T5843] ? lockdep_hardirqs_on+0x98/0x150 [ 162.286822][ T5843] hub_event+0x29d5/0x4a80 [ 162.291266][ T5843] ? hub_post_resume+0x120/0x120 [ 162.296194][ T5843] ? read_lock_is_recursive+0x20/0x20 [ 162.301565][ T5843] ? _raw_spin_unlock_irq+0x23/0x50 [ 162.306760][ T5843] ? process_scheduled_works+0x975/0x1600 [ 162.312474][ T5843] ? process_scheduled_works+0x975/0x1600 [ 162.318187][ T5843] process_scheduled_works+0xa60/0x1600 [ 162.323748][ T5843] ? worker_attach_to_pool+0x370/0x370 [ 162.329205][ T5843] ? assign_work+0x3cc/0x5d0 [ 162.333792][ T5843] worker_thread+0xa5e/0xfe0 [ 162.338385][ T5843] ? _raw_spin_unlock+0x40/0x40 [ 162.343233][ T5843] ? __kthread_parkme+0x71/0x1c0 [ 162.348168][ T5843] kthread+0x2fa/0x390 [ 162.352226][ T5843] ? pr_cont_work+0x550/0x550 [ 162.356897][ T5843] ? kthread_blkcg+0xd0/0xd0 [ 162.361483][ T5843] ret_from_fork+0x48/0x80 [ 162.365891][ T5843] ? kthread_blkcg+0xd0/0xd0 [ 162.370476][ T5843] ret_from_fork_asm+0x11/0x20 [ 162.375244][ T5843] [ 162.378474][ T5843] Kernel Offset: disabled [ 162.382836][ T5843] Rebooting in 86400 seconds..