last executing test programs: 6.102017121s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x2b, &(0x7f0000000300)=ANY=[@ANYBLOB="12010002000000405a06090000010102000109021900010100c0320904000001ff00000007058102400000"], 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev_mnt/ttyUSB0\x00', 0x2, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000600)) 4.89199846s ago: executing program 0 (id=1): semget$private(0x0, 0x4000, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x23, 0x4, 0x4, 0xa, 0x1, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000140)="01000000", &(0x7f0000000180)=@buf="01000000"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000200)="02000000", &(0x7f0000000240)=@buf="02000000"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000002c0)="03000000", &(0x7f0000000300)=@buf="03000000"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000380)="04000000", &(0x7f00000003c0)=@buf="04000000"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000480)="05000000", &(0x7f00000004c0)=@buf="05000000"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f0000000540)="06000000", &(0x7f0000000580)=@buf="06000000"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f0000000600)='\a\x00\x00\x00', &(0x7f0000000640)=@buf='\a\x00\x00\x00'}, 0x20) nanosleep(&(0x7f0000000400)={0x2}, 0x0) 4.744581994s ago: executing program 2 (id=3): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0xb, 0x2) ioctl$USBDEVFS_RESET(r1, 0x5514) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x1f, 0x2) ioctl$USBDEVFS_RESET(r3, 0x5514) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0xc, 0x2) ioctl$USBDEVFS_RESET(r4, 0x5514) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x16, 0x2) ioctl$USBDEVFS_RESET(r5, 0x5514) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x20, 0x2) ioctl$USBDEVFS_RESET(r6, 0x5514) 4.529364839s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/module/usbcore/parameters/quirks\x00', 0x1, 0x0) write(r0, &(0x7f0000000c00)='9710:7830:b', 0xb) close(r0) r1 = syz_usb_connect(0x3, 0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000040109730780001000000010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000240)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000540)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000740)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000b40)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000d00)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000e00)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000f00)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000001000)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x19, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/5-1/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)='0', 0x1) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/usb/devices/5-1/power/control\x00', 0x1, 0x0) write(r4, &(0x7f0000000900)='auto', 0x4) close(r4) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5520) nanosleep(&(0x7f0000000500)={0x1}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/usb/devices/5-1/power/control\x00', 0x1, 0x0) write(r5, &(0x7f0000000a00)='on', 0x2) close(r5) ioctl$USBDEVFS_FORBID_SUSPEND(r2, 0x5521) 3.929703014s ago: executing program 0 (id=5): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)={0x40, 0x5, 0x2, "2bd8"}}) r1 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 575.430756ms ago: executing program 0 (id=6): clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) 307.437802ms ago: executing program 0 (id=7): mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./mysys\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='power/state\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='freeze\t', 0x7) 157.527076ms ago: executing program 0 (id=8): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw, 0x228) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@nat, 0x358) r1 = socket$inet(0x2, 0x2, 0x11) bind$inet(r1, &(0x7f0000000300)={0x2, 0x13c4, @loopback}, 0x10) r2 = socket$inet(0x2, 0x2, 0x11) connect$inet(r2, &(0x7f0000000400)={0x2, 0x13c4, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000240)='INVITE sip:user@127.0.0.1 SIP/2.0\r\nVia: SIP/2.0/UDP 127.0.0.1:5060\r\nFrom: \r\nTo: \r\nCall-ID: 1\r\nCSeq: 1 INVITE\r\n\r\n\x00', 0x80, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000340)='SIP/2.0 200 OK\r\nVia: SIP/2.0/UDP 127.0.0.1:5060\r\nFrom: \r\nTo: \r\nCall-ID: 1\r\nCSeq: 1 INVITE\r\n\r\n\x00', 0x58, 0x0, 0x0, 0x0) 98.688937ms ago: executing program 0 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='2097152\x00', 0x8) 0s ago: executing program 1 (id=10): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="28000000680001000200f400fcffff7f00000000000000000c000200010000000500000004"], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 58.125510][ T5434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.136650][ T5434] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.54' (ED25519) to the list of known hosts. syzkaller login: [ 83.643213][ T5761] cgroup: Unknown subsys name 'net' [ 83.783927][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.466842][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.335293][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.344082][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.352073][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.360508][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.368661][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.376131][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.514528][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.523434][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.531339][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.548870][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.558373][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.565907][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.593598][ T5084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.613373][ T5084] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.621884][ T5084] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.630396][ T5084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.638314][ T5084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.646030][ T5084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.688832][ T5084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.697867][ T5084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.707512][ T5084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.716411][ T5084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.739729][ T5084] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.747265][ T5084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.162862][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 88.307049][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 88.321226][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 88.405147][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.412953][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.420645][ T5773] bridge_slave_0: entered allmulticast mode [ 88.428591][ T5773] bridge_slave_0: entered promiscuous mode [ 88.455652][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 88.475587][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.482768][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.491254][ T5773] bridge_slave_1: entered allmulticast mode [ 88.499271][ T5773] bridge_slave_1: entered promiscuous mode [ 88.610973][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.620931][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.630236][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.637926][ T5779] bridge_slave_0: entered allmulticast mode [ 88.645512][ T5779] bridge_slave_0: entered promiscuous mode [ 88.669772][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.679600][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.689446][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.697634][ T5779] bridge_slave_1: entered allmulticast mode [ 88.705310][ T5779] bridge_slave_1: entered promiscuous mode [ 88.758762][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.766059][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.773223][ T5781] bridge_slave_0: entered allmulticast mode [ 88.780876][ T5781] bridge_slave_0: entered promiscuous mode [ 88.814112][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.827024][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.840499][ T5773] team0: Port device team_slave_0 added [ 88.849644][ T5773] team0: Port device team_slave_1 added [ 88.855949][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.863154][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.870859][ T5781] bridge_slave_1: entered allmulticast mode [ 88.878065][ T5781] bridge_slave_1: entered promiscuous mode [ 88.906808][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.914161][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.921657][ T5784] bridge_slave_0: entered allmulticast mode [ 88.929234][ T5784] bridge_slave_0: entered promiscuous mode [ 88.969935][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.977525][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.984974][ T5784] bridge_slave_1: entered allmulticast mode [ 88.992372][ T5784] bridge_slave_1: entered promiscuous mode [ 89.025793][ T5779] team0: Port device team_slave_0 added [ 89.035940][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.063048][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.070322][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.096400][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.110628][ T5779] team0: Port device team_slave_1 added [ 89.119970][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.159396][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.166827][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.193342][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.240787][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.261093][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.269745][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.298990][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.314388][ T5781] team0: Port device team_slave_0 added [ 89.323051][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.345720][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.352735][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.382363][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.395441][ T5781] team0: Port device team_slave_1 added [ 89.424828][ T5777] Bluetooth: hci0: command tx timeout [ 89.475951][ T5784] team0: Port device team_slave_0 added [ 89.489687][ T5773] hsr_slave_0: entered promiscuous mode [ 89.496582][ T5773] hsr_slave_1: entered promiscuous mode [ 89.521656][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.529047][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.555992][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.569405][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.576495][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.602649][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.616557][ T5784] team0: Port device team_slave_1 added [ 89.663402][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.670788][ T5084] Bluetooth: hci1: command tx timeout [ 89.677431][ T5777] Bluetooth: hci2: command tx timeout [ 89.683396][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.709815][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.738040][ T5779] hsr_slave_0: entered promiscuous mode [ 89.747666][ T5779] hsr_slave_1: entered promiscuous mode [ 89.754400][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.762195][ T5779] Cannot create hsr debugfs directory [ 89.771362][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.778648][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.805300][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.824920][ T5777] Bluetooth: hci3: command tx timeout [ 89.909716][ T5781] hsr_slave_0: entered promiscuous mode [ 89.917471][ T5781] hsr_slave_1: entered promiscuous mode [ 89.924385][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.931989][ T5781] Cannot create hsr debugfs directory [ 90.031369][ T5784] hsr_slave_0: entered promiscuous mode [ 90.038437][ T5784] hsr_slave_1: entered promiscuous mode [ 90.045037][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.052643][ T5784] Cannot create hsr debugfs directory [ 90.439199][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.471704][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.484865][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.513384][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.558514][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.580011][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.594458][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.608792][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.680009][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.712355][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.726556][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.748250][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.856700][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.867781][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.879078][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.890222][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.929878][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.997153][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.017789][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.025350][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.063091][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.076318][ T2927] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.083479][ T2927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.179994][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.199629][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.220281][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.227600][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.251867][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.259060][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.293029][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.321856][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.347582][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.354825][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.377794][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.399426][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.406625][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.418036][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.425781][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.476532][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.483839][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.504658][ T5777] Bluetooth: hci0: command tx timeout [ 91.746202][ T5777] Bluetooth: hci2: command tx timeout [ 91.751737][ T5777] Bluetooth: hci1: command tx timeout [ 91.876371][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.904106][ T5777] Bluetooth: hci3: command tx timeout [ 91.970905][ T5779] veth0_vlan: entered promiscuous mode [ 91.987598][ T5779] veth1_vlan: entered promiscuous mode [ 92.050753][ T5779] veth0_macvtap: entered promiscuous mode [ 92.083203][ T9] cfg80211: failed to load regulatory.db [ 92.098875][ T5779] veth1_macvtap: entered promiscuous mode [ 92.157771][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.211086][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.253621][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.263471][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.275303][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.284784][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.313298][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.328324][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.482720][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.503135][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.521293][ T5773] veth0_vlan: entered promiscuous mode [ 92.543598][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.557427][ T5773] veth1_vlan: entered promiscuous mode [ 92.599782][ T5784] veth0_vlan: entered promiscuous mode [ 92.613305][ T2976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.631390][ T5784] veth1_vlan: entered promiscuous mode [ 92.638549][ T2976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.735924][ T5773] veth0_macvtap: entered promiscuous mode [ 92.749901][ T5781] veth0_vlan: entered promiscuous mode [ 92.791166][ T5784] veth0_macvtap: entered promiscuous mode [ 92.816054][ T5773] veth1_macvtap: entered promiscuous mode [ 92.830344][ T5781] veth1_vlan: entered promiscuous mode [ 92.874322][ T5784] veth1_macvtap: entered promiscuous mode [ 92.911503][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.929001][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.941152][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.955128][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.967604][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.979013][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.990676][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.001543][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.012275][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.023485][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.036424][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.059391][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.068733][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.077723][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.086814][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.100621][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.112273][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.122729][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.133439][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.147656][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.171006][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.180339][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.191579][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.199909][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.212616][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.240651][ T5781] veth0_macvtap: entered promiscuous mode [ 93.263153][ T5781] veth1_macvtap: entered promiscuous mode [ 93.380782][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.395753][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.406853][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.419241][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.434020][ T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 93.448934][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.450974][ T23] usb 4-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 93.468851][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 93.476963][ T23] usb 4-1: Product: syz [ 93.481166][ T23] usb 4-1: Manufacturer: syz [ 93.486956][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.507644][ T5836] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 93.519303][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.529539][ T23] opticon 4-1:1.0: opticon converter detected [ 93.538826][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.553214][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.564063][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.575758][ T23] usb 4-1: opticon converter now attached to ttyUSB0 [ 93.583730][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.584649][ T5777] Bluetooth: hci0: command tx timeout [ 93.619137][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.634894][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.649537][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.669064][ T2976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.678816][ T2976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.717142][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.730759][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.742112][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.751745][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.777547][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.803007][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.824952][ T5777] Bluetooth: hci1: command tx timeout [ 93.830491][ T5777] Bluetooth: hci2: command tx timeout [ 93.869900][ T2976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.878515][ T2976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.959951][ T2927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.980275][ T2927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.994791][ T5777] Bluetooth: hci3: command tx timeout [ 94.135903][ T2976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.171008][ T2976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.252499][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.277403][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.523949][ T5838] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.714038][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 94.723454][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.736345][ T5838] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 94.753746][ T5838] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 94.768738][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.788908][ T5838] usb 3-1: config 0 descriptor?? [ 94.804686][ T5837] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.004917][ T5837] usb 2-1: New USB device found, idVendor=9710, idProduct=7830, bcdDevice= 1.00 [ 95.022865][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.252565][ T5838] HID 045e:07da: Invalid code 65791 type 1 [ 95.275500][ T5838] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input5 [ 95.325905][ T5838] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 95.347227][ T5817] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.558266][ T5817] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 95.579207][ T5817] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 95.600296][ T5817] usb 1-1: config 1 interface 0 has no altsetting 0 [ 95.616584][ T5817] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 95.632965][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.645145][ T5817] usb 1-1: Product: syz [ 95.649457][ T5817] usb 1-1: Manufacturer: syz [ 95.655749][ T5817] usb 1-1: SerialNumber: syz [ 95.668629][ T5777] Bluetooth: hci0: command tx timeout [ 95.676896][ T5849] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 95.685715][ T5849] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 95.904263][ T5777] Bluetooth: hci1: command tx timeout [ 95.914661][ T5777] Bluetooth: hci2: command tx timeout [ 96.064370][ T5777] Bluetooth: hci3: command tx timeout [ 96.709572][ T5849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.724045][ T5849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.584493][ T5817] (unnamed net_device) (uninitialized): Assigned a random MAC address: be:06:bf:7a:8b:50 [ 97.620607][ T5817] rtl8150 1-1:1.0: eth1: rtl8150 is detected [ 97.761891][ T5838] usb 1-1: USB disconnect, device number 2 [ 98.347102][ T5837] usb 2-1: Cannot set autoneg [ 98.364822][ T5837] MOSCHIP usb-ethernet driver: probe of 2-1:1.0 failed with error -71 [ 98.419329][ T5838] usb 3-1: USB disconnect, device number 2 [ 98.434069][ T5837] usb 2-1: USB disconnect, device number 2 [ 99.012374][ T5883] ------------[ cut here ]------------ [ 99.018357][ T5883] WARNING: CPU: 0 PID: 5883 at mm/page_alloc.c:4477 __alloc_pages+0x2e4/0x460 [ 99.027640][ T5883] Modules linked in: [ 99.031612][ T5883] CPU: 0 PID: 5883 Comm: syz.0.9 Not tainted syzkaller #0 [ 99.038890][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.049085][ T5883] RIP: 0010:__alloc_pages+0x2e4/0x460 [ 99.054601][ T5883] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 9f 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 88 0c a3 0c 01 <0f> 0b eb a4 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 99.075305][ T5883] RSP: 0018:ffffc9000485fa20 EFLAGS: 00010246 [ 99.081522][ T5883] RAX: ffffc9000485fa00 RBX: 1ffff9200090bf48 RCX: 0000000000000000 [ 99.089879][ T5883] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000485fa88 [ 99.097993][ T5883] RBP: ffffc9000485fb20 R08: ffffc9000485fa87 R09: 0000000000000000 [ 99.106996][ T5883] R10: ffffc9000485fa60 R11: fffff5200090bf51 R12: 000000000000000b [ 99.115544][ T5883] R13: 0000000000000000 R14: 0000000000040dc0 R15: dffffc0000000000 [ 99.123598][ T5883] FS: 00007f5ba457f6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 99.132681][ T5883] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.139651][ T5883] CR2: 000000110c37d025 CR3: 000000002e6d1000 CR4: 00000000003506f0 [ 99.147796][ T5883] Call Trace: [ 99.151135][ T5883] [ 99.154175][ T5883] ? zone_statistics+0x170/0x170 [ 99.159611][ T5883] ? __mutex_lock+0x30d/0xc80 [ 99.164516][ T5883] ? trace_raw_output_contention_end+0xd0/0xd0 [ 99.170752][ T5883] ? max_vclocks_store+0x18e/0x3f0 [ 99.176104][ T5883] ? mutex_lock_nested+0x20/0x20 [ 99.181122][ T5883] __kmalloc_large_node+0x8c/0x1f0 [ 99.187650][ T5883] ? max_vclocks_store+0x226/0x3f0 [ 99.192842][ T5883] __kmalloc+0x114/0x240 [ 99.197680][ T5883] max_vclocks_store+0x226/0x3f0 [ 99.202797][ T5883] ? read_lock_is_recursive+0x20/0x20 [ 99.208568][ T5883] ? max_vclocks_show+0x90/0x90 [ 99.213504][ T5883] ? sysfs_kf_write+0x187/0x2a0 [ 99.218524][ T5883] ? sysfs_kf_read+0x360/0x360 [ 99.223364][ T5883] kernfs_fop_write_iter+0x3a4/0x520 [ 99.228965][ T5883] vfs_write+0x474/0x9a0 [ 99.234261][ T5883] ? file_end_write+0x250/0x250 [ 99.239227][ T5883] ? __fget_files+0x3fc/0x460 [ 99.244054][ T5883] ? __fdget_pos+0x2a3/0x330 [ 99.248725][ T5883] ? ksys_write+0x74/0x260 [ 99.253213][ T5883] ksys_write+0x151/0x260 [ 99.257795][ T5883] ? __ia32_sys_read+0x90/0x90 [ 99.263049][ T5883] ? lockdep_hardirqs_on+0x98/0x150 [ 99.270169][ T5883] do_syscall_64+0x55/0xb0 [ 99.275148][ T5883] ? clear_bhb_loop+0x40/0x90 [ 99.279914][ T5883] ? clear_bhb_loop+0x40/0x90 [ 99.284726][ T5883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.290686][ T5883] RIP: 0033:0x7f5ba379e0d9 [ 99.295347][ T5883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.315263][ T5883] RSP: 002b:00007f5ba457f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 99.323816][ T5883] RAX: ffffffffffffffda RBX: 00007f5ba3a25fa0 RCX: 00007f5ba379e0d9 [ 99.331943][ T5883] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 99.340073][ T5883] RBP: 00007f5ba3835024 R08: 0000000000000000 R09: 0000000000000000 [ 99.349170][ T5883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.358768][ T5883] R13: 00007f5ba3a26038 R14: 00007f5ba3a25fa0 R15: 00007ffeae4f3e28 [ 99.367368][ T5883] [ 99.370454][ T5883] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 99.377799][ T5883] CPU: 0 PID: 5883 Comm: syz.0.9 Not tainted syzkaller #0 [ 99.384961][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.395057][ T5883] Call Trace: [ 99.396392][ T5838] usb 4-1: USB disconnect, device number 2 [ 99.404198][ T5883] [ 99.407163][ T5883] dump_stack_lvl+0x18c/0x250 [ 99.411879][ T5883] ? show_regs_print_info+0x20/0x20 [ 99.417204][ T5883] ? load_image+0x420/0x420 [ 99.421756][ T5883] panic+0x2ca/0x720 [ 99.425699][ T5883] ? bpf_jit_dump+0xd0/0xd0 [ 99.430262][ T5883] __warn+0x2e0/0x470 [ 99.434281][ T5883] ? __alloc_pages+0x2e4/0x460 [ 99.439083][ T5883] ? __alloc_pages+0x2e4/0x460 [ 99.443877][ T5883] report_bug+0x2be/0x4f0 [ 99.448241][ T5883] ? __alloc_pages+0x2e4/0x460 [ 99.453034][ T5883] ? __alloc_pages+0x2e4/0x460 [ 99.457821][ T5883] ? __alloc_pages+0x2e6/0x460 [ 99.462630][ T5883] handle_bug+0xcf/0x120 [ 99.466909][ T5883] exc_invalid_op+0x1a/0x50 [ 99.471454][ T5883] asm_exc_invalid_op+0x1a/0x20 [ 99.476338][ T5883] RIP: 0010:__alloc_pages+0x2e4/0x460 [ 99.481739][ T5883] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 9f 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 88 0c a3 0c 01 <0f> 0b eb a4 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 99.501473][ T5883] RSP: 0018:ffffc9000485fa20 EFLAGS: 00010246 [ 99.507576][ T5883] RAX: ffffc9000485fa00 RBX: 1ffff9200090bf48 RCX: 0000000000000000 [ 99.515596][ T5883] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000485fa88 [ 99.523603][ T5883] RBP: ffffc9000485fb20 R08: ffffc9000485fa87 R09: 0000000000000000 [ 99.531604][ T5883] R10: ffffc9000485fa60 R11: fffff5200090bf51 R12: 000000000000000b [ 99.539604][ T5883] R13: 0000000000000000 R14: 0000000000040dc0 R15: dffffc0000000000 [ 99.547618][ T5883] ? zone_statistics+0x170/0x170 [ 99.552582][ T5883] ? __mutex_lock+0x30d/0xc80 [ 99.557292][ T5883] ? trace_raw_output_contention_end+0xd0/0xd0 [ 99.563477][ T5883] ? max_vclocks_store+0x18e/0x3f0 [ 99.568628][ T5883] ? mutex_lock_nested+0x20/0x20 [ 99.573603][ T5883] __kmalloc_large_node+0x8c/0x1f0 [ 99.578840][ T5883] ? max_vclocks_store+0x226/0x3f0 [ 99.583990][ T5883] __kmalloc+0x114/0x240 [ 99.588282][ T5883] max_vclocks_store+0x226/0x3f0 [ 99.593253][ T5883] ? read_lock_is_recursive+0x20/0x20 [ 99.598653][ T5883] ? max_vclocks_show+0x90/0x90 [ 99.603714][ T5883] ? sysfs_kf_write+0x187/0x2a0 [ 99.608599][ T5883] ? sysfs_kf_read+0x360/0x360 [ 99.613475][ T5883] kernfs_fop_write_iter+0x3a4/0x520 [ 99.618797][ T5883] vfs_write+0x474/0x9a0 [ 99.623076][ T5883] ? file_end_write+0x250/0x250 [ 99.627994][ T5883] ? __fget_files+0x3fc/0x460 [ 99.632710][ T5883] ? __fdget_pos+0x2a3/0x330 [ 99.637327][ T5883] ? ksys_write+0x74/0x260 [ 99.641784][ T5883] ksys_write+0x151/0x260 [ 99.646149][ T5883] ? __ia32_sys_read+0x90/0x90 [ 99.651498][ T5883] ? lockdep_hardirqs_on+0x98/0x150 [ 99.656788][ T5883] do_syscall_64+0x55/0xb0 [ 99.661339][ T5883] ? clear_bhb_loop+0x40/0x90 [ 99.666048][ T5883] ? clear_bhb_loop+0x40/0x90 [ 99.670758][ T5883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.676683][ T5883] RIP: 0033:0x7f5ba379e0d9 [ 99.681136][ T5883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.701029][ T5883] RSP: 002b:00007f5ba457f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 99.709481][ T5883] RAX: ffffffffffffffda RBX: 00007f5ba3a25fa0 RCX: 00007f5ba379e0d9 [ 99.717484][ T5883] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 99.725485][ T5883] RBP: 00007f5ba3835024 R08: 0000000000000000 R09: 0000000000000000 [ 99.733581][ T5883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.741580][ T5883] R13: 00007f5ba3a26038 R14: 00007f5ba3a25fa0 R15: 00007ffeae4f3e28 [ 99.749861][ T5883] [ 99.753476][ T5883] Kernel Offset: disabled [ 99.757876][ T5883] Rebooting in 86400 seconds..