last executing test programs: 14.211467586s ago: executing program 1 (id=5): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc1, 0x2, 0x2, "1000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000300)="0a000100010000000001") syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000400)="0b00020002000000000000") syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000500)="090003002000000000") nanosleep(&(0x7f0000000600)={0x1}, 0x0) 11.312134376s ago: executing program 2 (id=3): syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004082057d0000000000000109026800030100c0000904000000010100000904000101010200000b2402010203180144ac00070501010002010904010000010100000904010101010200000b2402010203180144ac00070582010002010904020002010300000705030200020007058402000200"], 0x0) nanosleep(&(0x7f0000000100)={0x2}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x3, 0x0) 8.669783199s ago: executing program 1 (id=10): r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{}, {0x2}}, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) 8.351723177s ago: executing program 0 (id=11): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./md1\x00', 0x81b6, 0x901) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./md1\x00', 0x2, 0x0) ioctl(r0, 0x1261, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00') 8.344241772s ago: executing program 1 (id=12): r0 = syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff4082057d0000000000000109026800030100c0000904000000ffffff000904000101ffffff000b2402010203180144ac00070501010002010904010000ffffff000904010101ffffff000b2402010203180144ac00070582010002010904020002ffffff000705030200020007058402000200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000100)={0x2}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000400), 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000500), 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000600), 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000700), 0x2, 0x0) 8.072818244s ago: executing program 3 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000580)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='0\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='0\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r6, &(0x7f00000003c0)='mydomain / 2147483647 0 0 0 0\n\x00', 0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480)='nfs4\x00', 0x0, &(0x7f00000004c0)='nolock,addr=127.0.0.1\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file\x00', 0x42, 0x1ff) 7.853125754s ago: executing program 0 (id=14): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r0, &(0x7f0000000080)="0101", 0x2) write(r0, &(0x7f00000000c0)='\x00\x00', 0x2) read(r0, &(0x7f0000000100)=""/2, 0x2) 7.525627629s ago: executing program 2 (id=15): syz_init_net_socket$nfc_raw(0x27, 0x5, 0x1) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r3, 0x0, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r3, 0x0, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x1}]}, 0x2c}}, 0x0) close(r2) 6.297250056s ago: executing program 3 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./ffs\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='usb0\x00', &(0x7f0000000140)='./ffs\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs/ep0\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="030000001900000001000000010000000904000000ff000000", 0x19) write(r0, &(0x7f0000000280)="020000001000"/16, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/ffs.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='0x1d6b\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)='0x0104\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f00000004c0)={0x1}, 0x0) 5.7756092s ago: executing program 2 (id=17): syz_usb_connect(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ba23000100000000000109026400020100800009040000000101000009240100011e0001010c2402010101000203000000092403020103000100090401000001020000090401010101020000072401010101000b2402010202100180bb0009050101000201000007250100000000"], 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x0, 0x20000], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}], '\x00', 0xffffffff}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 5.6088205s ago: executing program 0 (id=18): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x2a, 0x0, 0x0, {0x0, @hdata, {0x0, @random}, @hdata, {0x0, @random}}}}) 5.201270883s ago: executing program 0 (id=19): mkdirat(0xffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv6/conf/all/force_mld_version\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='2\n\x00', 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x14, &(0x7f0000000100)="ff02000000000000000000000000000201000000", 0x14) r2 = epoll_create(0x1) epoll_wait(r2, &(0x7f0000000200), 0x1, 0x384) 4.943573864s ago: executing program 3 (id=20): syz_usb_connect(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000408c0d030100010000000109026400020100803209040000000101000009240100011e0001010c2402010101000203000000092403030506000100090401000001020000090401010101020000072401010101000b2402010202100180bb0009050109c00001000007250101000000"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x2, 0x0) ioctl(r0, 0xc4c85512, &(0x7f0000000300)="0000000002000000000000000000000049454339353820506c61796261636b2053776974636800"/74) ioctl(r0, 0xc4c85512, &(0x7f0000000400)="0000000003000000000000000000000049454339353820506c61796261636b2044656661756c7400"/74) 4.484196622s ago: executing program 1 (id=21): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'scomp\x00', 0x0, 0x0, 'zstd\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)='\x00'/128, 0x100}], 0x1, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) read$alg(r1, &(0x7f0000000600), 0x100) 4.024419438s ago: executing program 0 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0) write(r3, &(0x7f0000001900)='Y\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000900)='127.0.0.1 / 2147483647 74754 0 0 0\n', 0x23) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000b00)='127.0.0.1 1 \\x00000000 2147483647 /\n', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0) write(r7, &(0x7f0000000f00)='2\n', 0x2) nanosleep(&(0x7f0000001c00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1,port=2049,sec=sys\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x1ff) write(r8, &(0x7f0000001500)='test\x00', 0x4) 3.903757674s ago: executing program 1 (id=23): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40450580800100010203010902200001010080320904000002ffffff000705810240000007050202400000"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x1, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000400)=0x1) 2.512884996s ago: executing program 2 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dlmfs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dlmfs\x00', &(0x7f0000000080)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dlmfs/testdir\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dlmfs/testdir/testfile\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x0, 0x1000) pwrite64(r0, &(0x7f0000000140)='data\x00', 0x5, 0x0) setxattr(&(0x7f0000000180)='./dlmfs/testdir/testfile\x00', &(0x7f00000001c0)=@known='user.syz\x00', &(0x7f0000000200)='value\x00', 0x6, 0x0) 2.209331591s ago: executing program 2 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='mem', 0x3) 2.209075669s ago: executing program 3 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/usb/drivers/snd-usb-audio/bind\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='1-1:1.0\n', 0x8) r2 = syz_open_dev$sndmidi(&(0x7f0000000440), 0x0, 0x2) write$midi(r2, &(0x7f0000000480)='hello', 0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x1, 0x2) write$midi(r3, &(0x7f0000000500)='hello', 0x5) r4 = syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x2) write$midi(r4, &(0x7f0000000580)='hello', 0x5) 1.107728558s ago: executing program 3 (id=27): mount(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='nfsd 127.0.0.1 2147483647 *\n', 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='* . 2147483647 8192 65534 65534 0 secinfo 1 1 0\n', 0x30) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/nfsd.export/content\x00', 0x0, 0x0) read(r2, &(0x7f0000000280)=""/4096, 0x1000) 921.304054ms ago: executing program 1 (id=28): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000140)={0xc0, 0xa1, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000200)={0x34, &(0x7f0000000240)={0xc0, 0xa1, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000340)={0x40, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000440)={0xc0, 0xa1, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000540)={0xc0, 0xa1, 0x4, '\x00\x00\x00x'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000640)={0xc0, 0xa1, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000740)={0xc0, 0xa1, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000840)={0xc0, 0xa1, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000940)={0x40, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000002000)={0x1}, 0x0) 689.459972ms ago: executing program 3 (id=29): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407f1801020000010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) 0s ago: executing program 0 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='add syz0 127.0.0.1\n\x00', 0x13) r1 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='syz0\n\x00', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) mount$afs(&(0x7f0000000200)=@cell={0x25, '', 'syz0', '.readonly'}, &(0x7f0000000000)='./file0\x00', &(0x7f00000000e0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/foo@sys\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts. [ 91.944232][ T203] cfg80211: failed to load regulatory.db [ 92.409680][ T5579] cgroup: Unknown subsys name 'net' [ 92.651405][ T5579] cgroup: Unknown subsys name 'cpuset' [ 92.706007][ T5579] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.680077][ T5579] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.479141][ T5608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.504617][ T5608] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.523488][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.533417][ T5608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.546925][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.548017][ T5606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.552802][ T5608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.574837][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.596060][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.612302][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.616302][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.619800][ T5606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.624945][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.625064][ T5602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.626908][ T5606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.627653][ T5606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.632096][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.669152][ T5606] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.684187][ T5600] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.684638][ T5600] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.801813][ T4908] Bluetooth: hci3: command tx timeout [ 100.876143][ T4908] Bluetooth: hci2: command tx timeout [ 100.876659][ T4908] Bluetooth: hci0: command tx timeout [ 100.877273][ T61] Bluetooth: hci1: command tx timeout [ 101.051490][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.053379][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.053659][ T5594] bridge_slave_0: entered allmulticast mode [ 101.064060][ T5594] bridge_slave_0: entered promiscuous mode [ 101.115278][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.115592][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.115865][ T5594] bridge_slave_1: entered allmulticast mode [ 101.122662][ T5594] bridge_slave_1: entered promiscuous mode [ 101.329870][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.330351][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.330806][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.331059][ T5597] bridge_slave_0: entered allmulticast mode [ 101.333627][ T5597] bridge_slave_0: entered promiscuous mode [ 101.352881][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.353825][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.356009][ T5598] bridge_slave_0: entered allmulticast mode [ 101.387448][ T5598] bridge_slave_0: entered promiscuous mode [ 101.399482][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.399852][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.400137][ T5596] bridge_slave_0: entered allmulticast mode [ 101.403016][ T5596] bridge_slave_0: entered promiscuous mode [ 101.440466][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.440915][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.441169][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.441382][ T5597] bridge_slave_1: entered allmulticast mode [ 101.444029][ T5597] bridge_slave_1: entered promiscuous mode [ 101.461213][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.462906][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.463781][ T5598] bridge_slave_1: entered allmulticast mode [ 101.477012][ T5598] bridge_slave_1: entered promiscuous mode [ 101.482686][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.483947][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.498465][ T5596] bridge_slave_1: entered allmulticast mode [ 101.517509][ T5596] bridge_slave_1: entered promiscuous mode [ 101.738871][ T5594] team0: Port device team_slave_0 added [ 101.752197][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.770987][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.790167][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.793916][ T5594] team0: Port device team_slave_1 added [ 101.807576][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.823062][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.834806][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.011277][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.011295][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.011316][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.031885][ T5597] team0: Port device team_slave_0 added [ 102.054514][ T5598] team0: Port device team_slave_0 added [ 102.072157][ T5596] team0: Port device team_slave_0 added [ 102.074229][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.074240][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.074260][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.091536][ T5597] team0: Port device team_slave_1 added [ 102.111541][ T5598] team0: Port device team_slave_1 added [ 102.128398][ T5596] team0: Port device team_slave_1 added [ 102.276763][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.276777][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.276797][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.281122][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.281135][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.281155][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.283566][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.283577][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.283596][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.368712][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.368778][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.368946][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.381234][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.381278][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.381355][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.403663][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.403710][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.403786][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.584291][ T5594] hsr_slave_0: entered promiscuous mode [ 102.587989][ T5594] hsr_slave_1: entered promiscuous mode [ 102.875299][ T4908] Bluetooth: hci3: command tx timeout [ 102.955788][ T61] Bluetooth: hci0: command tx timeout [ 102.955817][ T61] Bluetooth: hci1: command tx timeout [ 102.955926][ T4908] Bluetooth: hci2: command tx timeout [ 103.076485][ T5597] hsr_slave_0: entered promiscuous mode [ 103.078279][ T5597] hsr_slave_1: entered promiscuous mode [ 103.079887][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 103.079986][ T5597] Cannot create hsr debugfs directory [ 103.108981][ T5598] hsr_slave_0: entered promiscuous mode [ 103.110807][ T5598] hsr_slave_1: entered promiscuous mode [ 103.112263][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 103.112287][ T5598] Cannot create hsr debugfs directory [ 103.140874][ T5596] hsr_slave_0: entered promiscuous mode [ 103.142624][ T5596] hsr_slave_1: entered promiscuous mode [ 103.144042][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 103.144067][ T5596] Cannot create hsr debugfs directory [ 104.101969][ T5594] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.140613][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.162778][ T5594] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.190765][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.201835][ T5594] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.244239][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.274614][ T5594] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.312372][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.510496][ T5598] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.542774][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.573690][ T5598] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.612364][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.621676][ T5598] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.660103][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.704689][ T5598] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.744360][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.893004][ T5596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.933881][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.950618][ T5596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.957301][ T5600] Bluetooth: hci3: command tx timeout [ 104.982741][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.014308][ T5596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.036415][ T5600] Bluetooth: hci2: command tx timeout [ 105.036451][ T5600] Bluetooth: hci1: command tx timeout [ 105.036473][ T5600] Bluetooth: hci0: command tx timeout [ 105.070973][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.112726][ T5596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.153062][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.308276][ T5597] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.352767][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.368801][ T5597] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.411035][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.434760][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.438210][ T5597] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.481367][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.491079][ T5597] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.523843][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.642263][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.726921][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.727130][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.797297][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.797437][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.908414][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.035485][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.112520][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.122733][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.122866][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.190822][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.191228][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.323879][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.363712][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.382209][ T1502] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.382483][ T1502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.489611][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.504013][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.601389][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.653311][ T1502] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.653428][ T1502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.729888][ T1502] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.730106][ T1502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.045086][ T4908] Bluetooth: hci3: command tx timeout [ 107.115720][ T4908] Bluetooth: hci0: command tx timeout [ 107.115751][ T4908] Bluetooth: hci1: command tx timeout [ 107.115772][ T4908] Bluetooth: hci2: command tx timeout [ 107.476990][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.037639][ T5594] veth0_vlan: entered promiscuous mode [ 108.177966][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.201640][ T5594] veth1_vlan: entered promiscuous mode [ 108.460592][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.601278][ T5598] veth0_vlan: entered promiscuous mode [ 108.612600][ T5594] veth0_macvtap: entered promiscuous mode [ 108.658252][ T5594] veth1_macvtap: entered promiscuous mode [ 108.678401][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.704977][ T5598] veth1_vlan: entered promiscuous mode [ 108.791329][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.848002][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.850537][ T5596] veth0_vlan: entered promiscuous mode [ 108.909722][ T1502] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.928137][ T1502] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.938823][ T1502] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.971863][ T5596] veth1_vlan: entered promiscuous mode [ 108.982374][ T1502] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.999898][ T5598] veth0_macvtap: entered promiscuous mode [ 109.101648][ T5598] veth1_macvtap: entered promiscuous mode [ 109.163969][ T5597] veth0_vlan: entered promiscuous mode [ 109.413079][ T5597] veth1_vlan: entered promiscuous mode [ 109.458739][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.546689][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.575227][ T5596] veth0_macvtap: entered promiscuous mode [ 109.619753][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.619770][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.670360][ T1502] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.674415][ T5596] veth1_macvtap: entered promiscuous mode [ 109.696228][ T1502] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.704469][ T1502] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.728741][ T1502] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.809268][ T1502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.809290][ T1502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.966399][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.969640][ T5597] veth0_macvtap: entered promiscuous mode [ 110.229342][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.232206][ T5597] veth1_macvtap: entered promiscuous mode [ 110.314659][ T184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.345597][ T184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.349926][ T184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.411814][ T184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.489977][ T184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.490001][ T184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.643145][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.860063][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.038525][ T185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.038546][ T185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.099464][ T184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.146259][ T184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.180529][ T184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.238457][ T184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.491548][ T184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.491570][ T184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.808201][ T65] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.972203][ T1490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.972223][ T1490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.233888][ T65] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 112.233923][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.233944][ T65] usb 2-1: Product: syz [ 112.233957][ T65] usb 2-1: Manufacturer: syz [ 112.233971][ T65] usb 2-1: SerialNumber: syz [ 112.480873][ T1490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.480896][ T1490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.835306][ T1014] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.002704][ T1490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.002725][ T1490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.124781][ T1014] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 113.124813][ T1014] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.979063][ T1014] usbhid 4-1:1.0: can't add hid device: -71 [ 113.979188][ T1014] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 114.087136][ T65] usb 2-1: failed to set cport flags for port 0 [ 114.087286][ T65] greybus greybus1: 0/0:0: failed to enable host cport: -110 [ 114.202972][ T1014] usb 4-1: USB disconnect, device number 2 [ 114.570004][ T65] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 114.886054][ T37] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 115.080133][ T37] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 115.080167][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.137354][ T5763] misc userio: The device must be registered before sending interrupts [ 115.137546][ T5763] misc userio: The device must be registered before sending interrupts [ 115.137640][ T5763] misc userio: The device must be registered before sending interrupts [ 115.137742][ T5763] misc userio: The device must be registered before sending interrupts [ 115.137833][ T5763] misc userio: The device must be registered before sending interrupts [ 115.137924][ T5763] misc userio: The device must be registered before sending interrupts [ 115.138019][ T5763] misc userio: The device must be registered before sending interrupts [ 115.138107][ T5763] misc userio: The device must be registered before sending interrupts [ 115.138251][ T5763] misc userio: No port type given on /dev/userio [ 115.507748][ T5764] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input5 [ 116.133644][ T5685] usb 2-1: USB disconnect, device number 2 [ 117.368484][ T5685] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 117.684028][ T5685] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 117.684059][ T5685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.280745][ T37] usb 3-1: USB disconnect, device number 2 [ 119.204459][ T5798] file system registered [ 119.488502][ T38] audit: type=1800 audit(1785860809.780:2): pid=5801 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.3.16" name="idProduct" dev="configfs" ino=7701 res=0 errno=0 [ 119.488558][ T38] audit: type=1800 audit(1785860809.810:3): pid=5798 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.3.16" name="idVendor" dev="configfs" ino=8290 res=0 errno=0 [ 119.567428][ T38] audit: type=1800 audit(1785860809.890:4): pid=5798 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.3.16" name="UDC" dev="configfs" ino=8291 res=0 errno=0 [ 119.739038][ T5798] udc dummy_udc.0: failed to start g1: -19 [ 119.845947][ T5798] UDC core: g1: couldn't find an available UDC or it's busy [ 120.406363][ T5753] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 120.501145][ T5685] usb 2-1: USB disconnect, device number 3 [ 120.533274][ T37] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 120.562909][ T5753] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 1.00 [ 120.562939][ T5753] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.710247][ T37] usb 3-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 0.00 [ 120.710281][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.809682][ T5685] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 121.997428][ T5685] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 121.997464][ T5685] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 122.037696][ T5685] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 122.037730][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.037744][ T5685] usb 2-1: Product: syz [ 122.037754][ T5685] usb 2-1: Manufacturer: syz [ 122.037784][ T5685] usb 2-1: SerialNumber: syz [ 122.111807][ T5753] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1 [ 122.142337][ T5821] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 122.142561][ T5821] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 122.614031][ T5753] usb 4-1: USB disconnect, device number 3 [ 122.894772][ T5832] PM: suspend entry (deep) [ 123.159624][ T37] usb 3-1: USB disconnect, device number 3 [ 123.178355][ T38] audit: type=1800 audit(1785860813.470:5): pid=5834 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.3.26" name="UDC" dev="configfs" ino=7736 res=0 errno=0 [ 123.252077][ T5831] udc dummy_udc.0: failed to start g1: -19 [ 123.371790][ T5831] UDC core: g1: couldn't find an available UDC or it's busy [ 123.444933][ T66] Filesystems sync: 0.490 seconds [ 123.498923][ T5685] usb 2-1: USB disconnect, device number 4 [ 123.526263][ T5822] NFSD: Unable to initialize client recovery tracking! (-110) [ 123.526286][ T5822] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 123.526299][ T5822] NFSD: starting 90-second grace period (net f00003bb) [ 123.724572][ T5832] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 123.724728][ T5832] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 124.152519][ T5832] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 124.409345][ T5832] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 124.409497][ T5832] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 124.538423][ T5685] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 124.558664][ T5832] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 124.644775][ T5832] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.644903][ T5832] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 124.665327][ T5686] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 124.698136][ T5832] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 124.728743][ T5685] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 124.728774][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.728794][ T5685] usb 2-1: Product: syz [ 124.728808][ T5685] usb 2-1: Manufacturer: syz [ 124.728823][ T5685] usb 2-1: SerialNumber: syz [ 124.887163][ T5686] usb 4-1: New USB device found, idVendor=187f, idProduct=0201, bcdDevice= 0.00 [ 124.887196][ T5686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.887217][ T5686] usb 4-1: Product: syz [ 124.887232][ T5686] usb 4-1: Manufacturer: syz [ 124.887248][ T5686] usb 4-1: SerialNumber: syz [ 124.954151][ T5832] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 124.954287][ T5832] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 124.972765][ T5686] smsusb:smsusb_probe: board id=3, interface number 0 [ 125.014298][ T5686] smsusb:siano_media_device_register: media controller created [ 125.054095][ T5832] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 125.185795][ T5832] Freezing user space processes [ 125.378215][ T5832] Freezing user space processes completed (elapsed 0.192 seconds) [ 125.380246][ T5832] OOM killer disabled. [ 125.380275][ T5832] Freezing remaining freezable tasks [ 125.685231][ T5600] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.077396][ T5686] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -110 [ 126.077524][ T5686] smsmdtv:smscore_set_device_mode: mode detect failed -110 [ 126.077541][ T5686] smsmdtv:smscore_start_device: set device mode failed , rc -110 [ 126.077556][ T5686] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 126.077659][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 126.137776][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 126.138048][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 126.138381][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 126.138651][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 126.138911][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 126.139177][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 126.140596][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 126.140884][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 126.141166][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 126.219502][ T5686] ------------[ cut here ]------------ [ 126.219518][ T5686] !PageLargeKmalloc(page) [ 126.219539][ T5686] WARNING: mm/slub.c:6613 at free_large_kmalloc+0x97/0x110, CPU#0: kworker/0:4/5686 [ 126.219593][ T5686] Modules linked in: [ 126.219640][ T5686] CPU: 0 UID: 0 PID: 5686 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.219667][ T5686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.219682][ T5686] Workqueue: usb_hub_wq hub_event [ 126.219718][ T5686] RIP: 0010:free_large_kmalloc+0x97/0x110 [ 126.219762][ T5686] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 7a c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 fa a9 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 37 70 9a 8d 5b 41 5e 5d e9 33 26 01 ff [ 126.219776][ T5686] RSP: 0018:ffffc90005ffeb88 EFLAGS: 00010206 [ 126.219790][ T5686] RAX: 00000000ff000000 RBX: ffffea000180b800 RCX: 0000000000000001 [ 126.219815][ T5686] RDX: ffffc9001a0d1000 RSI: ffff8880602e0000 RDI: ffffea000180b800 [ 126.219833][ T5686] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 126.219847][ T5686] R10: dffffc0000000000 R11: ffffed1005a16301 R12: 1ffff11007d4dc82 [ 126.219873][ T5686] R13: ffff88805a57b000 R14: ffff88802d0b1860 R15: dffffc0000000000 [ 126.219889][ T5686] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 126.219907][ T5686] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.219921][ T5686] CR2: 00007ff171f356c8 CR3: 000000005a49a000 CR4: 00000000003526f0 [ 126.219945][ T5686] Call Trace: [ 126.219952][ T5686] [ 126.219961][ T5686] usb_free_urb+0xd0/0x120 [ 126.219996][ T5686] smsusb_term_device+0x1f5/0x3d0 [ 126.220031][ T5686] smsusb_probe+0x1aba/0x2280 [ 126.220086][ T5686] ? __pfx_smsusb_probe+0x10/0x10 [ 126.220130][ T5686] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 126.220150][ T5686] ? rt_spin_unlock+0x157/0x200 [ 126.220208][ T5686] ? __pm_runtime_set_status+0x977/0xc40 [ 126.220247][ T5686] usb_probe_interface+0x788/0xe50 [ 126.220293][ T5686] ? __pfx_usb_probe_interface+0x10/0x10 [ 126.220320][ T5686] ? sysfs_do_create_link_sd+0xe0/0x110 [ 126.220356][ T5686] ? driver_sysfs_add+0x1fe/0x210 [ 126.220388][ T5686] ? __pfx_usb_probe_interface+0x10/0x10 [ 126.220430][ T5686] really_probe+0x254/0xae0 [ 126.220462][ T5686] __driver_probe_device+0x1e8/0x360 [ 126.220494][ T5686] driver_probe_device+0x4f/0x240 [ 126.220536][ T5686] __device_attach_driver+0x270/0x410 [ 126.220572][ T5686] bus_for_each_drv+0x25b/0x2f0 [ 126.220610][ T5686] ? __pfx___device_attach_driver+0x10/0x10 [ 126.220638][ T5686] ? __pfx_bus_for_each_drv+0x10/0x10 [ 126.220672][ T5686] ? rt_spin_unlock+0x163/0x200 [ 126.220718][ T5686] __device_attach+0x2c7/0x450 [ 126.220745][ T5686] ? rt_spin_unlock+0x157/0x200 [ 126.220779][ T5686] ? __pfx___device_attach+0x10/0x10 [ 126.220815][ T5686] device_initial_probe+0xa1/0xd0 [ 126.220845][ T5686] bus_probe_device+0x12d/0x220 [ 126.220899][ T5686] device_add+0x7d7/0xb80 [ 126.220929][ T5686] usb_set_configuration+0x1ad8/0x2180 [ 126.220989][ T5686] usb_generic_driver_probe+0x8d/0x150 [ 126.221020][ T5686] usb_probe_device+0x1c3/0x3b0 [ 126.221061][ T5686] ? __pfx_usb_probe_device+0x10/0x10 [ 126.221092][ T5686] really_probe+0x254/0xae0 [ 126.221128][ T5686] __driver_probe_device+0x1e8/0x360 [ 126.221158][ T5686] driver_probe_device+0x4f/0x240 [ 126.221191][ T5686] __device_attach_driver+0x270/0x410 [ 126.221216][ T5686] bus_for_each_drv+0x25b/0x2f0 [ 126.221266][ T5686] ? __pfx___device_attach_driver+0x10/0x10 [ 126.221297][ T5686] ? __pfx_bus_for_each_drv+0x10/0x10 [ 126.221330][ T5686] ? rt_spin_unlock+0x163/0x200 [ 126.221371][ T5686] __device_attach+0x2c7/0x450 [ 126.221393][ T5686] ? __pfx___device_attach+0x10/0x10 [ 126.221449][ T5686] device_initial_probe+0xa1/0xd0 [ 126.221480][ T5686] bus_probe_device+0x12d/0x220 [ 126.221517][ T5686] device_add+0x7d7/0xb80 [ 126.221545][ T5686] usb_new_device+0x98d/0x1610 [ 126.221570][ T5686] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 126.221615][ T5686] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 126.221649][ T5686] ? __pfx_usb_new_device+0x10/0x10 [ 126.221683][ T5686] hub_event+0x28cf/0x4cf0 [ 126.221781][ T5686] ? __pfx_hub_event+0x10/0x10 [ 126.221821][ T5686] ? rcu_is_watching+0x15/0xb0 [ 126.221893][ T5686] ? process_one_work+0x7fd/0x1480 [ 126.221912][ T5686] process_one_work+0xaaf/0x1480 [ 126.221970][ T5686] ? __pfx_process_one_work+0x10/0x10 [ 126.221994][ T5686] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.222033][ T5686] ? assign_work+0x3cf/0x5d0 [ 126.222066][ T5686] worker_thread+0xb05/0x10d0 [ 126.222104][ T5686] kthread+0x388/0x470 [ 126.222150][ T5686] ? __pfx_worker_thread+0x10/0x10 [ 126.222175][ T5686] ? __pfx_kthread+0x10/0x10 [ 126.222206][ T5686] ret_from_fork+0x514/0xb70 [ 126.222244][ T5686] ? __pfx_ret_from_fork+0x10/0x10 [ 126.222267][ T5686] ? __switch_to+0xc89/0x1420 [ 126.222308][ T5686] ? __pfx_kthread+0x10/0x10 [ 126.222342][ T5686] ret_from_fork_asm+0x1a/0x30 [ 126.222391][ T5686] [ 126.222403][ T5686] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 126.222423][ T5686] CPU: 0 UID: 0 PID: 5686 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.222441][ T5686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.222452][ T5686] Workqueue: usb_hub_wq hub_event [ 126.222495][ T5686] Call Trace: [ 126.222504][ T5686] [ 126.222513][ T5686] vpanic+0x56c/0xa60 [ 126.222538][ T5686] ? __pfx__printk+0x10/0x10 [ 126.222564][ T5686] ? __pfx_vpanic+0x10/0x10 [ 126.222583][ T5686] ? is_bpf_text_address+0x292/0x2b0 [ 126.222610][ T5686] ? is_bpf_text_address+0x26/0x2b0 [ 126.222651][ T5686] panic+0xc5/0xd0 [ 126.222674][ T5686] ? __pfx_panic+0x10/0x10 [ 126.222708][ T5686] ? ret_from_fork_asm+0x1a/0x30 [ 126.222744][ T5686] __warn+0x315/0x4c0 [ 126.222765][ T5686] ? free_large_kmalloc+0x97/0x110 [ 126.222798][ T5686] ? free_large_kmalloc+0x97/0x110 [ 126.222844][ T5686] __report_bug+0x276/0x570 [ 126.222876][ T5686] ? bus_for_each_drv+0x25b/0x2f0 [ 126.222908][ T5686] ? __device_attach+0x2c7/0x450 [ 126.222932][ T5686] ? device_initial_probe+0xa1/0xd0 [ 126.222962][ T5686] ? free_large_kmalloc+0x97/0x110 [ 126.223006][ T5686] ? __pfx___report_bug+0x10/0x10 [ 126.223031][ T5686] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.223079][ T5686] ? free_large_kmalloc+0x97/0x110 [ 126.223112][ T5686] report_bug+0x16a/0x220 [ 126.223136][ T5686] ? free_large_kmalloc+0x97/0x110 [ 126.223160][ T5686] ? free_large_kmalloc+0x99/0x110 [ 126.223209][ T5686] handle_bug+0x9c/0x200 [ 126.223237][ T5686] exc_invalid_op+0x1a/0x50 [ 126.223262][ T5686] asm_exc_invalid_op+0x1a/0x20 [ 126.223283][ T5686] RIP: 0010:free_large_kmalloc+0x97/0x110 [ 126.223317][ T5686] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 7a c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 fa a9 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 37 70 9a 8d 5b 41 5e 5d e9 33 26 01 ff [ 126.223331][ T5686] RSP: 0018:ffffc90005ffeb88 EFLAGS: 00010206 [ 126.223361][ T5686] RAX: 00000000ff000000 RBX: ffffea000180b800 RCX: 0000000000000001 [ 126.223378][ T5686] RDX: ffffc9001a0d1000 RSI: ffff8880602e0000 RDI: ffffea000180b800 [ 126.223396][ T5686] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 126.223411][ T5686] R10: dffffc0000000000 R11: ffffed1005a16301 R12: 1ffff11007d4dc82 [ 126.223427][ T5686] R13: ffff88805a57b000 R14: ffff88802d0b1860 R15: dffffc0000000000 [ 126.223466][ T5686] usb_free_urb+0xd0/0x120 [ 126.223493][ T5686] smsusb_term_device+0x1f5/0x3d0 [ 126.223515][ T5686] smsusb_probe+0x1aba/0x2280 [ 126.223585][ T5686] ? __pfx_smsusb_probe+0x10/0x10 [ 126.223629][ T5686] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 126.223662][ T5686] ? rt_spin_unlock+0x157/0x200 [ 126.223692][ T5686] ? __pm_runtime_set_status+0x977/0xc40 [ 126.223743][ T5686] usb_probe_interface+0x788/0xe50 [ 126.223786][ T5686] ? __pfx_usb_probe_interface+0x10/0x10 [ 126.223824][ T5686] ? sysfs_do_create_link_sd+0xe0/0x110 [ 126.223848][ T5686] ? driver_sysfs_add+0x1fe/0x210 [ 126.223891][ T5686] ? __pfx_usb_probe_interface+0x10/0x10 [ 126.223936][ T5686] really_probe+0x254/0xae0 [ 126.223970][ T5686] __driver_probe_device+0x1e8/0x360 [ 126.224006][ T5686] driver_probe_device+0x4f/0x240 [ 126.224031][ T5686] __device_attach_driver+0x270/0x410 [ 126.224074][ T5686] bus_for_each_drv+0x25b/0x2f0 [ 126.224112][ T5686] ? __pfx___device_attach_driver+0x10/0x10 [ 126.224141][ T5686] ? __pfx_bus_for_each_drv+0x10/0x10 [ 126.224173][ T5686] ? rt_spin_unlock+0x163/0x200 [ 126.224209][ T5686] __device_attach+0x2c7/0x450 [ 126.224243][ T5686] ? rt_spin_unlock+0x157/0x200 [ 126.224276][ T5686] ? __pfx___device_attach+0x10/0x10 [ 126.224313][ T5686] device_initial_probe+0xa1/0xd0 [ 126.224343][ T5686] bus_probe_device+0x12d/0x220 [ 126.224382][ T5686] device_add+0x7d7/0xb80 [ 126.224410][ T5686] usb_set_configuration+0x1ad8/0x2180 [ 126.224471][ T5686] usb_generic_driver_probe+0x8d/0x150 [ 126.224510][ T5686] usb_probe_device+0x1c3/0x3b0 [ 126.224545][ T5686] ? __pfx_usb_probe_device+0x10/0x10 [ 126.224573][ T5686] really_probe+0x254/0xae0 [ 126.224609][ T5686] __driver_probe_device+0x1e8/0x360 [ 126.224641][ T5686] driver_probe_device+0x4f/0x240 [ 126.224672][ T5686] __device_attach_driver+0x270/0x410 [ 126.224704][ T5686] bus_for_each_drv+0x25b/0x2f0 [ 126.224739][ T5686] ? __pfx___device_attach_driver+0x10/0x10 [ 126.224767][ T5686] ? __pfx_bus_for_each_drv+0x10/0x10 [ 126.224801][ T5686] ? rt_spin_unlock+0x163/0x200 [ 126.224839][ T5686] __device_attach+0x2c7/0x450 [ 126.224877][ T5686] ? __pfx___device_attach+0x10/0x10 [ 126.224920][ T5686] device_initial_probe+0xa1/0xd0 [ 126.224950][ T5686] bus_probe_device+0x12d/0x220 [ 126.224991][ T5686] device_add+0x7d7/0xb80 [ 126.225022][ T5686] usb_new_device+0x98d/0x1610 [ 126.225043][ T5686] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 126.225072][ T5686] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 126.225102][ T5686] ? __pfx_usb_new_device+0x10/0x10 [ 126.225136][ T5686] hub_event+0x28cf/0x4cf0 [ 126.225215][ T5686] ? __pfx_hub_event+0x10/0x10 [ 126.225253][ T5686] ? rcu_is_watching+0x15/0xb0 [ 126.225280][ T5686] ? process_one_work+0x7fd/0x1480 [ 126.225306][ T5686] process_one_work+0xaaf/0x1480 [ 126.225354][ T5686] ? __pfx_process_one_work+0x10/0x10 [ 126.225377][ T5686] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.225417][ T5686] ? assign_work+0x3cf/0x5d0 [ 126.225446][ T5686] worker_thread+0xb05/0x10d0 [ 126.225496][ T5686] kthread+0x388/0x470 [ 126.225527][ T5686] ? __pfx_worker_thread+0x10/0x10 [ 126.225551][ T5686] ? __pfx_kthread+0x10/0x10 [ 126.225584][ T5686] ret_from_fork+0x514/0xb70 [ 126.225621][ T5686] ? __pfx_ret_from_fork+0x10/0x10 [ 126.225652][ T5686] ? __switch_to+0xc89/0x1420 [ 126.225682][ T5686] ? __pfx_kthread+0x10/0x10 [ 126.225715][ T5686] ret_from_fork_asm+0x1a/0x30 [ 126.225767][ T5686] [ 126.225938][ T5686] Kernel Offset: disabled