last executing test programs: 2.173668799s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='dev_mnt\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='none\x00', &(0x7f0000000200)='dev_mnt\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='dict0\x00', 0x42, 0x1ff) write(r0, &(0x7f00000002c0)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x100) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='sys_mnt/block/zram0/reset\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='1', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='zstd', 0x4) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='algo=zstd dict=dict0 level=11', 0x1d) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='10485760', 0x8) close(r4) write(0xffffffffffffffff, &(0x7f0000000580)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) close(0xffffffffffffffff) 2.010186764s ago: executing program 3 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='+192.168.1.1', 0xc) 2.009261407s ago: executing program 1 (id=2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_XEN_HVM(r1, 0x4020ae63, &(0x7f0000000000)={0x26, 0x0, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x40000001, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x1, 0x0, 0x2000, 0x1000, &(0x7f0000002000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x1, 0x0, 0x2000, 0x0, &(0x7f0000002000/0x1000)=nil}) (async) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x1f40) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.819912689s ago: executing program 3 (id=7): mkdir(&(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/events/sunrpc/xprt_destroy/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='1\n\x00', 0x2) close(r0) mkdir(&(0x7f0000000600)='./mnt\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='127.0.0.1:/tmp\x00', &(0x7f0000000800)='./mnt\x00', &(0x7f0000000900)='nfs\x00', 0x0, &(0x7f0000000a00)='addr=127.0.0.1\x00') nanosleep(&(0x7f0000000b00)={0x2}, 0x0) 1.468576368s ago: executing program 1 (id=8): r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x4b0) 1.165119174s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/firmware/timeout\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='60\x00', 0x3) close(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904000000ff000000"], 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x1dcd6500}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='1\x00', 0x2) close(r1) write(0xffffffffffffffff, &(0x7f0000000800)='\x00\x00\x00\x00\x00\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='0\x00', 0x2) close(r2) 960.726057ms ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='+192.168.1.1', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='100', 0x3) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@setlink={0x20, 0x12, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@setlink={0x20, 0x12, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x20}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='+veth0', 0x6) 868.888172ms ago: executing program 4 (id=5): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x15) ioctl(r0, 0x404c4701, &(0x7f00000001c0)="010000000000000000000000010000000100000001000000000000002000000020000000010000000100"/72) ioctl(r0, 0x40204706, &(0x7f0000000200)="0100"/32) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0xf9) 744.680219ms ago: executing program 3 (id=9): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001220100090581030800000000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x0, 'p'}]}}, 0x0}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 399.321938ms ago: executing program 1 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/bmAttributes\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='0x80', 0x4) 304.406138ms ago: executing program 2 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='+192.168.1.1', 0xc) close(r0) write(0xffffffffffffffff, &(0x7f0000000300)='100', 0x3) 149.393698ms ago: executing program 2 (id=12): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4004ae63, &(0x7f0000000100)={0x8f, 0x0, 0x2}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000200)={0x100, 0x0, [{}]}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000300)={0x0, &(0x7f0000000400)=[@wrmsr={0x65, 0x20, {0x1b, 0xfee00c00}}, @wrmsr={0x65, 0x20, {0x832, 0x40000}}, @wrmsr={0x65, 0x20, {0x6e0, 0x100000}}, @code={0xa, 0x12, {"f4"}}], 0x72}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000200)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 1 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)='vhci_hcd\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/drivers/vhci_hcd/bind\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='pcspkr\x00', 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.197' (ED25519) to the list of known hosts. [ 78.753993][ T5604] cgroup: Unknown subsys name 'net' [ 78.889051][ T5604] cgroup: Unknown subsys name 'cpuset' [ 78.897877][ T5604] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.505804][ T5604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.551607][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.569923][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.579008][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.579725][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.581844][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.582937][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.583467][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.585613][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.585982][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.586222][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.594497][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.603270][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.603621][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.604132][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.605438][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.606741][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.607119][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.615676][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.615882][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.616807][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.625462][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.638139][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.640344][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.641616][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.655867][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.622449][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.623811][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.624255][ T5617] bridge_slave_0: entered allmulticast mode [ 86.631766][ T5617] bridge_slave_0: entered promiscuous mode [ 86.675879][ T5619] Bluetooth: hci0: command tx timeout [ 86.676424][ T5634] Bluetooth: hci4: command tx timeout [ 86.751186][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.758555][ T5634] Bluetooth: hci3: command tx timeout [ 86.764291][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.765646][ T5619] Bluetooth: hci2: command tx timeout [ 86.768146][ T5634] Bluetooth: hci1: command tx timeout [ 86.772233][ T5617] bridge_slave_1: entered allmulticast mode [ 86.791666][ T5617] bridge_slave_1: entered promiscuous mode [ 86.912261][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.913662][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.913820][ T5615] bridge_slave_0: entered allmulticast mode [ 86.936194][ T5615] bridge_slave_0: entered promiscuous mode [ 86.963236][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.992046][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.992185][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.992330][ T5616] bridge_slave_0: entered allmulticast mode [ 87.013904][ T5616] bridge_slave_0: entered promiscuous mode [ 87.022301][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.022418][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.023181][ T5615] bridge_slave_1: entered allmulticast mode [ 87.026332][ T5615] bridge_slave_1: entered promiscuous mode [ 87.066855][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.129654][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.129851][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.130283][ T5616] bridge_slave_1: entered allmulticast mode [ 87.136552][ T5616] bridge_slave_1: entered promiscuous mode [ 87.142235][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.142508][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.142852][ T5618] bridge_slave_0: entered allmulticast mode [ 87.150274][ T5618] bridge_slave_0: entered promiscuous mode [ 87.211715][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.212062][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.212444][ T5618] bridge_slave_1: entered allmulticast mode [ 87.218962][ T5618] bridge_slave_1: entered promiscuous mode [ 87.247518][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.257195][ T5617] team0: Port device team_slave_0 added [ 87.297214][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.303271][ T5617] team0: Port device team_slave_1 added [ 87.303822][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.304086][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.304421][ T5614] bridge_slave_0: entered allmulticast mode [ 87.312452][ T5614] bridge_slave_0: entered promiscuous mode [ 87.331318][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.342076][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.376694][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.376991][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.378010][ T5614] bridge_slave_1: entered allmulticast mode [ 87.382855][ T5614] bridge_slave_1: entered promiscuous mode [ 87.395041][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.423364][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.498894][ T5615] team0: Port device team_slave_0 added [ 87.505769][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.505803][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.505830][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.553408][ T5616] team0: Port device team_slave_0 added [ 87.560352][ T5618] team0: Port device team_slave_0 added [ 87.564614][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.564655][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.564719][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.578208][ T5615] team0: Port device team_slave_1 added [ 87.619554][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.629702][ T5616] team0: Port device team_slave_1 added [ 87.645817][ T5618] team0: Port device team_slave_1 added [ 87.671608][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.721310][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.722863][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.722991][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.768508][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.768560][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.768586][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.813291][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.813344][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.813372][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.819958][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.820008][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.820080][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.823951][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.823993][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.824067][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.836661][ T5614] team0: Port device team_slave_0 added [ 87.840938][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.840977][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.841046][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.998584][ T5614] team0: Port device team_slave_1 added [ 88.031401][ T5617] hsr_slave_0: entered promiscuous mode [ 88.034501][ T5617] hsr_slave_1: entered promiscuous mode [ 88.058894][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.058941][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.058985][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.114936][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.115069][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.116225][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.219750][ T5618] hsr_slave_0: entered promiscuous mode [ 88.222559][ T5618] hsr_slave_1: entered promiscuous mode [ 88.224453][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 88.224705][ T5618] Cannot create hsr debugfs directory [ 88.256077][ T5615] hsr_slave_0: entered promiscuous mode [ 88.258667][ T5615] hsr_slave_1: entered promiscuous mode [ 88.260811][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 88.260861][ T5615] Cannot create hsr debugfs directory [ 88.280438][ T5616] hsr_slave_0: entered promiscuous mode [ 88.283029][ T5616] hsr_slave_1: entered promiscuous mode [ 88.284786][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 88.284842][ T5616] Cannot create hsr debugfs directory [ 88.418634][ T5614] hsr_slave_0: entered promiscuous mode [ 88.421278][ T5614] hsr_slave_1: entered promiscuous mode [ 88.423118][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 88.423173][ T5614] Cannot create hsr debugfs directory [ 88.756298][ T5634] Bluetooth: hci4: command tx timeout [ 88.756353][ T5634] Bluetooth: hci0: command tx timeout [ 88.845431][ T5634] Bluetooth: hci2: command tx timeout [ 88.845440][ T5623] Bluetooth: hci3: command tx timeout [ 88.845536][ T5619] Bluetooth: hci1: command tx timeout [ 88.919903][ T5617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.937456][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.943746][ T5617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.955235][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.964129][ T5617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.974896][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.980800][ T5617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.990876][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.067935][ T5618] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.080553][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.087541][ T5618] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.098849][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.104083][ T5618] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.117407][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.126333][ T5618] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.137478][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.228726][ T5616] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.239135][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.246388][ T5616] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.256913][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.261308][ T5616] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.274698][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.289713][ T5616] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.300304][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.412403][ T5615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.422945][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.430362][ T5615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.442169][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.450137][ T5615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.459614][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.464123][ T5615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.477342][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.503952][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.598179][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.608393][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.619189][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.637817][ T3266] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.638187][ T3266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.653032][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.664187][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.679764][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.690456][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.692788][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.706041][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.723783][ T3266] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.725797][ T3266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.770095][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.844618][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.868335][ T3266] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.868490][ T3266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.893974][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.905812][ T3266] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.906088][ T3266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.925857][ T5617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.002803][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.049084][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.049475][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.099872][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.100117][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.124704][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.196074][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.217894][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.253237][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.253369][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.310873][ T3266] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.311146][ T3266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.329142][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.363802][ T3266] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.364045][ T3266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.408954][ T3266] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.409187][ T3266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.835614][ T5619] Bluetooth: hci0: command tx timeout [ 90.835631][ T5623] Bluetooth: hci4: command tx timeout [ 90.916736][ T5619] Bluetooth: hci3: command tx timeout [ 90.916761][ T5623] Bluetooth: hci1: command tx timeout [ 90.916785][ T5619] Bluetooth: hci2: command tx timeout [ 91.123153][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.363582][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.403721][ T5617] veth0_vlan: entered promiscuous mode [ 91.471594][ T5617] veth1_vlan: entered promiscuous mode [ 91.613328][ T5618] veth0_vlan: entered promiscuous mode [ 91.661880][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.678858][ T5618] veth1_vlan: entered promiscuous mode [ 91.730728][ T5617] veth0_macvtap: entered promiscuous mode [ 91.768941][ T5617] veth1_macvtap: entered promiscuous mode [ 91.810172][ T25] cfg80211: failed to load regulatory.db [ 91.840467][ T5618] veth0_macvtap: entered promiscuous mode [ 91.871367][ T5618] veth1_macvtap: entered promiscuous mode [ 91.894106][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.917013][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.952080][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.971342][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.998078][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.018666][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.048211][ T1198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.085617][ T1198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.087369][ T38] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.087486][ T38] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.087591][ T38] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.087697][ T38] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.099602][ T38] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.099738][ T38] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.281199][ T5615] veth0_vlan: entered promiscuous mode [ 92.374007][ T5614] veth0_vlan: entered promiscuous mode [ 92.382699][ T5615] veth1_vlan: entered promiscuous mode [ 92.391649][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.391728][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.418345][ T3266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.426540][ T3266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.478982][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.479028][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.496679][ T5614] veth1_vlan: entered promiscuous mode [ 92.589090][ T5617] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.598681][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.598744][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.641568][ T5616] veth0_vlan: entered promiscuous mode [ 92.650623][ T5615] veth0_macvtap: entered promiscuous mode [ 92.704226][ T5615] veth1_macvtap: entered promiscuous mode [ 92.728897][ T5614] veth0_macvtap: entered promiscuous mode [ 92.774560][ T5616] veth1_vlan: entered promiscuous mode [ 92.784395][ T5614] veth1_macvtap: entered promiscuous mode [ 92.820634][ T5813] zram0: detected capacity change from 0 to 20480 [ 92.831260][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.916232][ T5634] Bluetooth: hci0: command tx timeout [ 92.916279][ T5634] Bluetooth: hci4: command tx timeout [ 92.927696][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.961235][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.995765][ T5623] Bluetooth: hci1: command tx timeout [ 92.995814][ T5623] Bluetooth: hci2: command tx timeout [ 92.995857][ T5623] Bluetooth: hci3: command tx timeout [ 93.001487][ T3266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.023376][ T3266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.036042][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.056192][ T89] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.056268][ T89] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.078221][ T5616] veth0_macvtap: entered promiscuous mode [ 93.102120][ T5817] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.167401][ T5616] veth1_macvtap: entered promiscuous mode [ 93.267226][ T3266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.331544][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.331603][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.359733][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.419287][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.435581][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.465762][ T189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.486761][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.486807][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.529739][ T1198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.537964][ T1198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.625901][ T3266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.636940][ T3266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.667380][ T3266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.683568][ T3266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.683632][ T3266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.747950][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.747993][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.845617][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.855904][ T89] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.889891][ T3266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.889937][ T3266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.122482][ T5833] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 94.122551][ T5833] CPU: 1 UID: 0 PID: 5833 Comm: syz.4.5 Not tainted syzkaller #0 PREEMPT(full) [ 94.122578][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.122600][ T5833] Call Trace: [ 94.122613][ T5833] [ 94.122623][ T5833] dump_stack_lvl+0xe8/0x150 [ 94.122668][ T5833] sysfs_create_dir_ns+0x271/0x2a0 [ 94.122698][ T5833] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 94.122728][ T5833] ? do_raw_spin_unlock+0xf5/0x200 [ 94.122764][ T5833] kobject_add_internal+0x622/0xcd0 [ 94.122804][ T5833] kobject_add+0x163/0x240 [ 94.122832][ T5833] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 94.122864][ T5833] ? __pfx_kobject_add+0x10/0x10 [ 94.122900][ T5833] ? get_device_parent+0x366/0x3a0 [ 94.122937][ T5833] device_add+0x3fa/0xb80 [ 94.122972][ T5833] tty_register_device_attr+0x425/0x990 [ 94.123011][ T5833] ? __pfx_tty_register_device_attr+0x10/0x10 [ 94.123051][ T5833] ? tty_port_init+0x136/0x1a0 [ 94.123079][ T5833] ? gsm_dlci_alloc+0x330/0x640 [ 94.123112][ T5833] gsm_activate_mux+0x110/0x2a0 [ 94.123149][ T5833] gsmld_ioctl+0xcf5/0x1930 [ 94.123186][ T5833] ? __pfx_gsmld_ioctl+0x10/0x10 [ 94.123227][ T5833] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 94.123257][ T5833] ? ldsem_down_read+0x12/0x40 [ 94.123294][ T5833] ? __pfx_gsmld_ioctl+0x10/0x10 [ 94.123322][ T5833] tty_ioctl+0x9bd/0xdd0 [ 94.123350][ T5833] ? __pfx_tty_ioctl+0x10/0x10 [ 94.123377][ T5833] __se_sys_ioctl+0xfc/0x170 [ 94.123408][ T5833] do_syscall_64+0x166/0x520 [ 94.123432][ T5833] ? trace_irq_disable+0x3b/0x140 [ 94.123452][ T5833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.123475][ T5833] ? clear_bhb_loop+0x70/0xc0 [ 94.123504][ T5833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.123593][ T5833] RIP: 0033:0x7f2ca6b9e0d9 [ 94.123660][ T5833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.123711][ T5833] RSP: 002b:00007f2ca7aa9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.123783][ T5833] RAX: ffffffffffffffda RBX: 00007f2ca6e26090 RCX: 00007f2ca6b9e0d9 [ 94.123823][ T5833] RDX: 0000200000000200 RSI: 0000000040204706 RDI: 0000000000000003 [ 94.123857][ T5833] RBP: 00007f2ca6c35024 R08: 0000000000000000 R09: 0000000000000000 [ 94.123895][ T5833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.123926][ T5833] R13: 00007f2ca6e26128 R14: 00007f2ca6e26090 R15: 00007ffedc900fb8 [ 94.124014][ T5833] [ 94.176721][ T1228] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.187609][ T5833] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 94.510242][ T1228] usb 1-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 94.538513][ T1228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.626213][ T5842] bond0: ARP target 192.168.1.1 is already present [ 94.633260][ T5842] bond0: option arp_ip_target: invalid value (+192.168.1.1) [ 94.645913][ T1228] emi26 - firmware loader 1-1:1.0: emi26_probe start [ 94.765271][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.876380][ T1228] usb 1-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 94.876435][ T1228] usb 1-1: Falling back to sysfs fallback for: emi26/loader.fw [ 94.917476][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 94.923272][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 94.933837][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.933887][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 94.933948][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.971193][ T10] usb 4-1: config 0 descriptor?? [ 95.106788][ T5850] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 95.118829][ T5850] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 95.127279][ T5850] CPU: 1 UID: 0 PID: 5850 Comm: syz.1.13 Not tainted syzkaller #0 PREEMPT(full) [ 95.136425][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.146614][ T5850] RIP: 0010:vhci_hcd_probe+0x47/0x3e0 [ 95.152064][ T5850] Code: ff 0b eb f9 49 8d 9e 80 00 00 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 33 86 59 fa 48 8b 1b 48 89 d8 48 c1 e8 03 <80> 3c 28 00 74 08 48 89 df e8 1b 86 59 fa 4c 8b 23 48 c7 c0 20 e5 [ 95.171720][ T5850] RSP: 0018:ffffc9000524fac0 EFLAGS: 00010246 [ 95.177832][ T5850] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 95.185843][ T5850] RDX: ffffc90003f62000 RSI: 00000000000002e2 RDI: 00000000000002e3 [ 95.193847][ T5850] RBP: dffffc0000000000 R08: ffff88802ba090f3 R09: 1ffff1100574121e [ 95.201847][ T5850] R10: dffffc0000000000 R11: ffffffff87dcb110 R12: ffff88801db2f000 [ 95.209859][ T5850] R13: ffffffff8fc690a0 R14: ffff88801db2f000 R15: ffffffff87dcb110 [ 95.217868][ T5850] FS: 00007f7ebc3876c0(0000) GS:ffff888124df8000(0000) knlGS:0000000000000000 [ 95.226890][ T5850] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.233519][ T5850] CR2: 00007ffd61795ee4 CR3: 000000007953c000 CR4: 00000000003526f0 [ 95.241533][ T5850] Call Trace: [ 95.244867][ T5850] [ 95.247830][ T5850] ? platform_probe+0xed/0x190 [ 95.252648][ T5850] ? __pfx_vhci_hcd_probe+0x10/0x10 [ 95.257889][ T5850] platform_probe+0xf9/0x190 [ 95.262531][ T5850] ? __pfx_platform_probe+0x10/0x10 [ 95.267781][ T5850] really_probe+0x254/0xae0 [ 95.272323][ T5850] __driver_probe_device+0x1e8/0x360 [ 95.277643][ T5850] device_driver_attach+0xe0/0x1d0 [ 95.282804][ T5850] bind_store+0x1d0/0x220 [ 95.287187][ T5850] ? __pfx_sysfs_kf_write+0x10/0x10 [ 95.292439][ T5850] kernfs_fop_write_iter+0x3a4/0x540 [ 95.297782][ T5850] vfs_write+0x612/0xba0 [ 95.302072][ T5850] ? __pfx_vfs_write+0x10/0x10 [ 95.306875][ T5850] ? __fget_files+0x2a/0x420 [ 95.311511][ T5850] ksys_write+0x150/0x270 [ 95.315884][ T5850] ? __pfx_ksys_write+0x10/0x10 [ 95.320783][ T5850] do_syscall_64+0x166/0x520 [ 95.325414][ T5850] ? trace_irq_disable+0x3b/0x140 [ 95.330469][ T5850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.336754][ T5850] ? clear_bhb_loop+0x70/0xc0 [ 95.341471][ T5850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.347403][ T5850] RIP: 0033:0x7f7ebb59e0d9 [ 95.351850][ T5850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.371501][ T5850] RSP: 002b:00007f7ebc387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 95.379957][ T5850] RAX: ffffffffffffffda RBX: 00007f7ebb825fa0 RCX: 00007f7ebb59e0d9 [ 95.387972][ T5850] RDX: 0000000000000006 RSI: 00002000000000c0 RDI: 0000000000000004 [ 95.395978][ T5850] RBP: 00007f7ebb635024 R08: 0000000000000000 R09: 0000000000000000 [ 95.403985][ T5850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.412081][ T5850] R13: 00007f7ebb826038 R14: 00007f7ebb825fa0 R15: 00007ffc7a6ed3a8 [ 95.420101][ T5850] [ 95.423153][ T5850] Modules linked in: [ 95.429969][ T5850] ---[ end trace 0000000000000000 ]--- [ 95.466422][ T5850] RIP: 0010:vhci_hcd_probe+0x47/0x3e0 [ 95.473017][ T5850] Code: ff 0b eb f9 49 8d 9e 80 00 00 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 33 86 59 fa 48 8b 1b 48 89 d8 48 c1 e8 03 <80> 3c 28 00 74 08 48 89 df e8 1b 86 59 fa 4c 8b 23 48 c7 c0 20 e5 [ 95.494310][ T5850] RSP: 0018:ffffc9000524fac0 EFLAGS: 00010246 [ 95.502192][ T5850] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 95.510791][ T5850] RDX: ffffc90003f62000 RSI: 00000000000002e2 RDI: 00000000000002e3 [ 95.571038][ ** replaying previous printk message ** [ 95.571038][ T5850] RBP: dffffc0000000000 R08: ffff88802ba090f3 R09: 1ffff1100574121e [ 95.571710][ T5850] R10: dffffc0000000000 R11: ffffffff87dcb110 R12: ffff88801db2f000 [ 95.571763][ T5850] R13: ffffffff8fc690a0 R14: ffff88801db2f000 R15: ffffffff87dcb110 [ 95.571815][ T5850] FS: 00007f7ebc3876c0(0000) GS:ffff888124cf8000(0000) knlGS:0000000000000000 [ 95.571924][ T5850] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.571966][ T5850] CR2: 0000001b33c23ffc CR3: 000000007953c000 CR4: 00000000003526f0 [ 95.572037][ T5850] Kernel panic - not syncing: Fatal exception [ 95.630034][ T5850] Kernel Offset: disabled [ 95.634395][ T5850] Rebooting in 86400 seconds..