last executing test programs: 5.859467083s ago: executing program 4 (id=167): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000400)=""/1024, 0x400) 5.718907729s ago: executing program 4 (id=168): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) close(r1) 5.594086311s ago: executing program 3 (id=170): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000003f000501010000000000000001010000000000000c0001006f76732d64703000080002000000000008000900c8000000"], 0x34}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000042000100020000000000000003010000c80000002e00010000112233445566778899aabb08004500001c00000000011100007f0000017f00000112341234000800000000040002800c0003800800178004000100"], 0x58}}, 0x0) 5.453577023s ago: executing program 2 (id=171): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0 1 1\x00', 0x6) close(r0) r1 = socket(0x10, 0x3, 0x10) write(r1, &(0x7f0000000200)="40000000100005000100000000000000370100000e0001006e657464657673696d0000000f0002006e657464657673696d3000000a00730064756d6d79000000", 0x40) write(r1, &(0x7f0000000240)="40000000110005000100000000000000370100000e0001006e657464657673696d0000000f0002006e657464657673696d3000000a00730064756d6d79000000", 0x40) write(r1, &(0x7f0000000280)="40000000120005000100000000000000370100000e0001006e657464657673696d0000000f0002006e657464657673696d3000000a00730064756d6d79000000", 0x40) write(r1, &(0x7f00000002c0)="40000000130005000100000000000000370100000e0001006e657464657673696d0000000f0002006e657464657673696d3000000a00730064756d6d79000000", 0x40) write(r1, &(0x7f0000000300)="40000000140005000100000000000000370100000e0001006e657464657673696d0000000f0002006e657464657673696d3000000a00730064756d6d79000000", 0x40) write(r1, &(0x7f0000000340)="40000000150005000100000000000000370100000e0001006e657464657673696d0000000f0002006e657464657673696d3000000a00730064756d6d79000000", 0x40) write(r1, &(0x7f0000000380)="40000000160005000100000000000000370100000e0001006e657464657673696d0000000f0002006e657464657673696d3000000a00730064756d6d79000000", 0x40) write(r1, &(0x7f00000003c0)="40000000170005000100000000000000370100000e0001006e657464657673696d0000000f0002006e657464657673696d3000000a00730064756d6d79000000", 0x40) write(r1, &(0x7f0000000400)="40000000180005000100000000000000370100000e0001006e657464657673696d0000000f0002006e657464657673696d3000000a00730064756d6d79000000", 0x40) write(r1, &(0x7f0000000440)="40000000190005000100000000000000370100000e0001006e657464657673696d0000000f0002006e657464657673696d3000000a00730064756d6d79000000", 0x40) write(r1, &(0x7f0000000480)="400000001a0005000100000000000000370100000e0001006e657464657673696d0000000f0002006e657464657673696d3000000a00730064756d6d79000000", 0x40) write(r1, &(0x7f00000004c0)="400000001b0005000100000000000000370100000e0001006e657464657673696d0000000f0002006e657464657673696d3000000a00730064756d6d79000000", 0x40) write(r1, &(0x7f0000000500)="400000001c0005000100000000000000370100000e0001006e657464657673696d0000000f0002006e657464657673696d3000000a00730064756d6d79000000", 0x40) write(r1, &(0x7f0000000540)="400000001d0005000100000000000000370100000e0001006e657464657673696d0000000f0002006e657464657673696d3000000a00730064756d6d79000000", 0x40) write(r1, &(0x7f0000000580)="400000001e0005000100000000000000370100000e0001006e657464657673696d0000000f0002006e657464657673696d3000000a00730064756d6d79000000", 0x40) write(r1, &(0x7f00000005c0)="400000001f0005000100000000000000370100000e0001006e657464657673696d0000000f0002006e657464657673696d3000000a00730064756d6d79000000", 0x40) write(r1, &(0x7f0000000600)="40000000200005000100000000000000370100000e0001006e657464657673696d0000000f0002006e657464657673696d3000000a00730064756d6d79000000", 0x40) write(r1, &(0x7f0000000640)="40000000210005000100000000000000370100000e0001006e657464657673696d0000000f0002006e657464657673696d3000000a00730064756d6d79000000", 0x40) write(r1, &(0x7f0000000680)="40000000220005000100000000000000370100000e0001006e657464657673696d0000000f0002006e657464657673696d3000000a00730064756d6d79000000", 0x40) write(r1, &(0x7f00000006c0)="40000000230005000100000000000000370100000e0001006e657464657673696d0000000f0002006e657464657673696d3000000a00730064756d6d79000000", 0x40) write(r1, &(0x7f0000000700)="40000000240005000100000000000000370100000e0001006e657464657673696d0000000f0002006e657464657673696d3000000a00730064756d6d79000000", 0x40) 5.268254464s ago: executing program 1 (id=173): r0 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000002d80)={0x14, 0x0, &(0x7f0000002d40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000180)) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000080)}], 0x1) read(r3, 0x0, 0x70) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000240)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd, 0x0, 0x0}) mmap(&(0x7f000002c000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000300)={r5}) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008004}, 0x20040815) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x4cec2000) unshare(0x26020480) r7 = socket$packet(0x11, 0x2, 0x300) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)=""/137}, {&(0x7f0000000700)=""/119}, {&(0x7f0000000780)=""/103}, {&(0x7f0000000840)=""/145}], 0x64, 0x0, 0x11}, 0x20) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r8 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_WRITEPROTECT(r8, 0xc018aa06, &(0x7f00000001c0)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x2}) 5.17092782s ago: executing program 4 (id=174): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='bridge0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bridge0/bridge/multicast_membership_interval\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='100\n', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/virtual/net/bridge0/bridge/multicast_membership_interval\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='100\n', 0x4) 4.759938872s ago: executing program 3 (id=176): syz_usb_connect(0x0, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004010110f9000000000000109022f000301008032090400000100000000070584034000010904010001000000000705020240000009040200010000000007058202400000"], 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000200)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) connect(r0, &(0x7f0000000300)=@generic={0x8, "ffff000000006400"}, 0xc) 4.751813475s ago: executing program 4 (id=177): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="9101000000112233445500"/64) nanosleep(&(0x7f0000000480)={0x0, 0x10000000}, 0x0) setns(0xc9, 0x40000000) r1 = socket(0x8, 0x2, 0x0) setsockopt(r1, 0x108, 0x42020054, &(0x7f0000000500)="0100000000000000000000000000000000000000ffff0000000000000000000000000000000000000100000000000000000000000000000000000000ffff00000000000000000000000000000000000005000000", 0x54) connect(r1, &(0x7f0000000200)=@generic={0x8, '\x00\x00\x00\x00d\x00'}, 0xc) write(r1, &(0x7f0000000600)="11223344", 0x4) close(r1) 4.272307838s ago: executing program 1 (id=178): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000080)='127.0.0.1:/\x00', &(0x7f0000000040)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='addr=127.0.0.1,port=20000,proto=tcp,vers=4.0,hard,timeo=1,retrans=2\x00']) 3.525014975s ago: executing program 2 (id=180): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="040000000000", 0x6) write(r0, &(0x7f0000000080)="05000000010000", 0x7) write(r0, &(0x7f00000000c0)="05000000010001", 0x7) write(r0, &(0x7f0000000100)="09000000010001", 0x7) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c9000100aaaaaaaaaa1110000000400000"], 0x17) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e0c0400c9000000000000000000"], 0xf) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c9000b000700060001030000100101"], 0x10) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c9200b000700060001030000100101"], 0x10) write(r0, &(0x7f0000000240)="190000000800aaaaaaaaaa110103", 0xe) 3.122489614s ago: executing program 1 (id=181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1011}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) write(r0, &(0x7f00000003c0)="4500002c00014000400626c90a0000010a00000203eb0050000000010000000150101000323c0000aaaaaaaa", 0x2c) write(r0, &(0x7f0000000400)="4500002c00014000400626c90a0000010a00000203ec0050000000010000000150101000323b0000aaaaaaaa", 0x2c) 2.681620744s ago: executing program 3 (id=183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x5c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1001}, {0x1001}}}]}}]}]}]}}]}, 0x5c}}, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="4500001400000000400000000101010101010102"], 0x14) 2.602050229s ago: executing program 0 (id=184): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/100, 0x64) 2.375972709s ago: executing program 0 (id=185): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x34, 0x3f, 0x107, 0x0, 0x0, {0x1}, [@generic='\x00\x00\x00\x00', @typed={0xc, 0x1, 0x0, 0x0, @str='ovs-dp0\x00'}, @typed={0x8, 0x2, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @u32=0xf}]}, 0x34}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002100)={0x3c, 0x42, 0x1, 0x0, 0x0, {0x3}, [@generic="0f000000", @typed={0x12, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb0800"}, @nested={0x4, 0x8002}, @nested={0xc, 0x8003, 0x0, 0x1, [@typed={0x8, 0x7, 0x0, 0x0, @u32=0x1}]}]}, 0x3c}}, 0x0) 2.302071983s ago: executing program 2 (id=186): read$FUSE(0xffffffffffffffff, &(0x7f0000002cc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r1 = syz_open_procfs(r0, &(0x7f00000002c0)='net/wireless\x00') r2 = epoll_create1(0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x2}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xbc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x5, 0xff2, &(0x7f0000000fc0)=""/4082, 0x40f00, 0x10}, 0x94) socket(0x2, 0x80805, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000140), 0x5, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000"], 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2703) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000280)={0x0, 0x30, 0x3, &(0x7f0000000080)={0x91, "a3d92ccfc6000000fa00008c0000007900"}}) 2.183111378s ago: executing program 4 (id=187): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f0000000340)=""/100, 0x64) write$nci(r0, &(0x7f00000003c0)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x0, {{0x0, 0x0, 0x1, "03"}}}, 0x15) read$nci(r0, &(0x7f0000000400)=""/100, 0x64) write$nci(r0, &(0x7f0000000480)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000580)=""/100, 0x64) write$nci(r0, &(0x7f0000000600)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000640)=""/100, 0x64) write$nci(r0, &(0x7f00000006c0)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000700)=""/100, 0x64) write$nci(r0, &(0x7f0000000780)=@NCI_OP_RF_DISCOVER_RSP, 0x4) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 2.04153672s ago: executing program 1 (id=188): r0 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000002d80)={0x14, 0x0, &(0x7f0000002d40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000180)) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee", 0x15}], 0x1) read(r3, 0x0, 0x70) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000240)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd, 0x0, 0x0}) mmap(&(0x7f000002c000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000300)={r5}) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008004}, 0x20040815) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x4cec2000) unshare(0x26020480) r7 = socket$packet(0x11, 0x2, 0x300) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)=""/137}, {&(0x7f0000000700)=""/119}, {&(0x7f0000000780)=""/103}, {&(0x7f0000000840)=""/145}], 0x64, 0x0, 0x11}, 0x20) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r8 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_WRITEPROTECT(r8, 0xc018aa06, &(0x7f00000001c0)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x2}) 1.963997257s ago: executing program 0 (id=189): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x14}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffad, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24008051}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x14040}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES8], 0x0}, 0x0) 1.516293044s ago: executing program 3 (id=190): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000100), 0x18) connect$rxrpc(r1, &(0x7f0000000200), 0x18) sendto$rxrpc(r1, &(0x7f0000000400), 0x4, 0x0, 0x0, 0x0) recvfrom(r0, &(0x7f0000000500)=""/128, 0x80, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000600)={0x0, 0x0}, 0x0) write(0x0, &(0x7f0000000700)="0000000000000000000000020600", 0xe) read(0x0, &(0x7f0000000508)=""/14, 0xe) sendto$inet(r0, &(0x7f0000000500)='\x00'/28, 0x1c, 0x0, &(0x7f0000000800)={0x2, 0x1234, @loopback}, 0x10) 1.338035048s ago: executing program 0 (id=191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1011}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', 0x1}) mount(&(0x7f0000000140), &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/syzkaller1/napi_defer_hard_irqs\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='100\n', 0x4) 1.0299162s ago: executing program 4 (id=192): r0 = syz_usb_connect(0x2, 0xab, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e0300000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)=ANY=[@ANYBLOB="20811a00"/30], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 952.91248ms ago: executing program 1 (id=193): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) bind$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000010010000010000000100000000000000"], 0x18}, 0x0) close(r1) nanosleep(&(0x7f0000000600)={0x0, 0x2faf080}, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000010010000010000000100000000000000"], 0x18}, 0x0) 823.845815ms ago: executing program 2 (id=194): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, 0xb5b, 0x9, 0xfffffffffffffff7, 0x1ff, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioprio_set$pid(0x2, 0x0, 0x0) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r7, &(0x7f0000004900)={0x2020}, 0x2081) sendmsg$alg(0xffffffffffffffff, 0x0, 0x4000000) 700.528422ms ago: executing program 1 (id=195): r0 = syz_usb_connect(0x2, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001000000010902200001010080320904000002ff0000000705810240000007050202400000"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000140)="0000ffffff0a00f6d7290000000000000003fd00") syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000180)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f00000001c0)="0000ffffff0300fdd72b00fe00") syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000240)="0000ffffff0400fcd72101070000") nanosleep(&(0x7f0000000280)={0x0, 0x1dcd6500}, 0x0) 600.383301ms ago: executing program 3 (id=196): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x22b8, @loopback}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000200)={0x11, @loopback, 0x22b8, 0x0, 'rr\x00'}, 0x2c) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='0 0\n', 0x4) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='0\n', 0x2) r4 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r4, &(0x7f0000000800)='hello\x00', 0x6, 0x0, &(0x7f0000000900)={0x2, 0x22b8, @loopback}, 0x10) 579.903733ms ago: executing program 0 (id=197): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sendto(r0, &(0x7f0000000100), 0x6, 0x0, 0x0, 0x0) 575.222874ms ago: executing program 2 (id=198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1011}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', 0x1}) write(r0, &(0x7f00000003c0)="4500002c00014000400626c90a0000010a00000203eb0050000000010000000150101000323c0000aaaaaaaa", 0x2c) write(r0, &(0x7f0000000400)="4500002c00014000400626c90a0000010a00000203ec0050000000010000000150101000323b0000aaaaaaaa", 0x2c) 456.192968ms ago: executing program 3 (id=199): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001000000010902200001010080320904000002ff0000000705810240000007050202400000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000280)={0x0, 0x1dcd6500}, 0x0) 450.256196ms ago: executing program 0 (id=200): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000100)={r0, 0x0, 0x0, 'syzkaller0\x00'}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442cb, &(0x7f0000000200)={0x0, 0x0, 0x0, @empty, 'syzkaller0\x00'}) 0s ago: executing program 2 (id=201): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x14}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffad, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24008051}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x14040}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES8], 0x0}, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 55.490316][ T5246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.528911][ T5246] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.8' (ED25519) to the list of known hosts. syzkaller login: [ 75.290771][ T5573] cgroup: Unknown subsys name 'net' [ 75.552959][ T5573] cgroup: Unknown subsys name 'cpuset' [ 75.606167][ T5573] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.336828][ T5573] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.361985][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.382500][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.386570][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.387775][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.388443][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.451792][ T5591] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.454819][ T5591] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.460388][ T5591] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.463859][ T5591] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.497303][ T5595] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.520964][ T4900] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.548768][ T5598] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.555228][ T5597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.595013][ T5598] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.604870][ T5597] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.612616][ T5598] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.614860][ T5598] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.625149][ T5598] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.649493][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.655013][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.655933][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.684658][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.690553][ T5602] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.703657][ T5602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.704354][ T5602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.427368][ T60] Bluetooth: hci0: command tx timeout [ 83.595674][ T60] Bluetooth: hci1: command tx timeout [ 83.665668][ T60] Bluetooth: hci3: command tx timeout [ 83.746219][ T60] Bluetooth: hci2: command tx timeout [ 83.825624][ T60] Bluetooth: hci4: command tx timeout [ 84.221823][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.221904][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.222222][ T5585] bridge_slave_0: entered allmulticast mode [ 84.224922][ T5585] bridge_slave_0: entered promiscuous mode [ 84.285428][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.285707][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.285883][ T5585] bridge_slave_1: entered allmulticast mode [ 84.289372][ T5585] bridge_slave_1: entered promiscuous mode [ 84.376777][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.376871][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.376976][ T5588] bridge_slave_0: entered allmulticast mode [ 84.378490][ T5588] bridge_slave_0: entered promiscuous mode [ 84.381098][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.381233][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.381389][ T5584] bridge_slave_0: entered allmulticast mode [ 84.383092][ T5584] bridge_slave_0: entered promiscuous mode [ 84.446257][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.446357][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.446512][ T5588] bridge_slave_1: entered allmulticast mode [ 84.448517][ T5588] bridge_slave_1: entered promiscuous mode [ 84.449835][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.449935][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.450034][ T5584] bridge_slave_1: entered allmulticast mode [ 84.451801][ T5584] bridge_slave_1: entered promiscuous mode [ 84.480630][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.504404][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.504523][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.504702][ T5586] bridge_slave_0: entered allmulticast mode [ 84.508013][ T5586] bridge_slave_0: entered promiscuous mode [ 84.552795][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.553008][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.553107][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.553380][ T5589] bridge_slave_0: entered allmulticast mode [ 84.554709][ T5589] bridge_slave_0: entered promiscuous mode [ 84.576074][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.576192][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.576381][ T5586] bridge_slave_1: entered allmulticast mode [ 84.578893][ T5586] bridge_slave_1: entered promiscuous mode [ 84.668766][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.668863][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.668960][ T5589] bridge_slave_1: entered allmulticast mode [ 84.670388][ T5589] bridge_slave_1: entered promiscuous mode [ 84.697446][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.712903][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.752531][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.754713][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.774724][ T5585] team0: Port device team_slave_0 added [ 84.793650][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.830851][ T5585] team0: Port device team_slave_1 added [ 84.833550][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.839340][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.884365][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.907696][ T5588] team0: Port device team_slave_0 added [ 84.909630][ T5584] team0: Port device team_slave_0 added [ 84.957426][ T5588] team0: Port device team_slave_1 added [ 84.959053][ T5584] team0: Port device team_slave_1 added [ 84.960060][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.960077][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.960091][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.994452][ T5586] team0: Port device team_slave_0 added [ 85.042104][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.042123][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.042149][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.046431][ T5589] team0: Port device team_slave_0 added [ 85.051385][ T5586] team0: Port device team_slave_1 added [ 85.116251][ T5589] team0: Port device team_slave_1 added [ 85.130329][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.130348][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.130371][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.132106][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.132120][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.132143][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.192745][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.192763][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.192787][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.194455][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.194469][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.194493][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.219322][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.219340][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.219364][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.268371][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.268388][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.268412][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.273476][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.273492][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.273516][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.303226][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.303243][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.303268][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.337967][ T5585] hsr_slave_0: entered promiscuous mode [ 85.339592][ T5585] hsr_slave_1: entered promiscuous mode [ 85.499196][ T5588] hsr_slave_0: entered promiscuous mode [ 85.499974][ T5588] hsr_slave_1: entered promiscuous mode [ 85.500652][ T5588] debugfs: 'hsr0' already exists in 'hsr' [ 85.500742][ T5588] Cannot create hsr debugfs directory [ 85.505621][ T60] Bluetooth: hci0: command tx timeout [ 85.517624][ T5584] hsr_slave_0: entered promiscuous mode [ 85.518933][ T5584] hsr_slave_1: entered promiscuous mode [ 85.519809][ T5584] debugfs: 'hsr0' already exists in 'hsr' [ 85.519831][ T5584] Cannot create hsr debugfs directory [ 85.603573][ T5586] hsr_slave_0: entered promiscuous mode [ 85.604374][ T5586] hsr_slave_1: entered promiscuous mode [ 85.604892][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 85.604915][ T5586] Cannot create hsr debugfs directory [ 85.635446][ T5589] hsr_slave_0: entered promiscuous mode [ 85.641033][ T5589] hsr_slave_1: entered promiscuous mode [ 85.641863][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 85.641886][ T5589] Cannot create hsr debugfs directory [ 85.665774][ T60] Bluetooth: hci1: command tx timeout [ 85.745799][ T60] Bluetooth: hci3: command tx timeout [ 85.825712][ T60] Bluetooth: hci2: command tx timeout [ 85.905796][ T60] Bluetooth: hci4: command tx timeout [ 86.900501][ T10] cfg80211: failed to load regulatory.db [ 86.972432][ T5585] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.039584][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.048072][ T5585] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.071138][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.082865][ T5585] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.109255][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.138687][ T5585] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.168725][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.326659][ T5584] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.365380][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.376942][ T5584] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.411288][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.428678][ T5584] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.453183][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.477418][ T5584] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.510389][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.586277][ T60] Bluetooth: hci0: command tx timeout [ 87.682777][ T5586] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.709747][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.727040][ T5586] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.745709][ T60] Bluetooth: hci1: command tx timeout [ 87.772551][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.787119][ T5586] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.810206][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.825635][ T60] Bluetooth: hci3: command tx timeout [ 87.839232][ T5586] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.880101][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.905673][ T60] Bluetooth: hci2: command tx timeout [ 87.985761][ T60] Bluetooth: hci4: command tx timeout [ 88.044738][ T5589] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.080403][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.087377][ T5589] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.130397][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.143232][ T5589] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.170600][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.216824][ T5589] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.261605][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.309466][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.427278][ T5588] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.460986][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.469244][ T5588] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.509181][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.513781][ T5588] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.558735][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.582958][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.583260][ T5588] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.629642][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.700902][ T409] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.701136][ T409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.735327][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.776847][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.777165][ T409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.912948][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.962108][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.962255][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.000239][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.047975][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.048137][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.155070][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.200104][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.227968][ T1553] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.228214][ T1553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.280497][ T1546] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.280663][ T1546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.365671][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.414888][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.415025][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.458218][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.497554][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.497718][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.644790][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.665614][ T60] Bluetooth: hci0: command tx timeout [ 89.730365][ T87] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.730499][ T87] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.826688][ T60] Bluetooth: hci1: command tx timeout [ 89.888303][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.888479][ T409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.906015][ T60] Bluetooth: hci3: command tx timeout [ 89.985705][ T60] Bluetooth: hci2: command tx timeout [ 90.065826][ T60] Bluetooth: hci4: command tx timeout [ 90.138723][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.631781][ T5585] veth0_vlan: entered promiscuous mode [ 90.745653][ T5585] veth1_vlan: entered promiscuous mode [ 91.000451][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.032573][ T5585] veth0_macvtap: entered promiscuous mode [ 91.083449][ T5585] veth1_macvtap: entered promiscuous mode [ 91.249021][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.260394][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.306913][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.459420][ T5584] veth0_vlan: entered promiscuous mode [ 91.480628][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.497188][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.626268][ T5584] veth1_vlan: entered promiscuous mode [ 92.085038][ T5584] veth0_macvtap: entered promiscuous mode [ 92.099841][ T5589] veth0_vlan: entered promiscuous mode [ 92.119724][ T5588] veth0_vlan: entered promiscuous mode [ 92.121622][ T5584] veth1_macvtap: entered promiscuous mode [ 92.144711][ T1554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.144738][ T1554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.223527][ T5589] veth1_vlan: entered promiscuous mode [ 92.260881][ T5588] veth1_vlan: entered promiscuous mode [ 92.307826][ T5586] veth0_vlan: entered promiscuous mode [ 92.311277][ T1554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.311294][ T1554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.331082][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.378968][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.380677][ T5586] veth1_vlan: entered promiscuous mode [ 92.540157][ T5588] veth0_macvtap: entered promiscuous mode [ 92.553244][ T5589] veth0_macvtap: entered promiscuous mode [ 92.639764][ T5585] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.681284][ T5588] veth1_macvtap: entered promiscuous mode [ 92.695631][ T5589] veth1_macvtap: entered promiscuous mode [ 92.966481][ T5586] veth0_macvtap: entered promiscuous mode [ 93.061544][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.069593][ T5586] veth1_macvtap: entered promiscuous mode [ 93.087758][ T1546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.087779][ T1546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.113424][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.154752][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.191758][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.317323][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.334088][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.334107][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.392264][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.709923][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.709946][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.054999][ T5801] Zero length message leads to an empty skb [ 95.085350][ T409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.085371][ T409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.148328][ T1554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.148343][ T1554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.315299][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.315320][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.454330][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.454350][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.562022][ T69] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.563648][ T409] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.564075][ T409] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.564483][ T409] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.564679][ T409] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.597644][ T409] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.598253][ T69] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.598411][ T69] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.598596][ T69] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.598761][ T69] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.598934][ T69] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.625997][ T69] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.014562][ T4876] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.016857][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.019747][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.020148][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.020412][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.020895][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.021213][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.023681][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.024550][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.125700][ T1554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.125716][ T1554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.316526][ T4876] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 96.382879][ T4876] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 96.382913][ T4876] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 96.382954][ T4876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.651495][ T5806] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 96.651860][ T5806] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 96.877632][ C0] port100 1-1:1.0: NFC: Urb failure (status -71) [ 96.922458][ C0] port100 1-1:1.0: NFC: Urb failure (status -71) [ 96.933177][ T4876] port100 1-1:1.0: NFC: Could not get supported command types [ 97.199876][ T5703] usb 1-1: USB disconnect, device number 2 [ 97.450750][ T5825] bridge0: port 3(syz_tun) entered blocking state [ 97.450911][ T5825] bridge0: port 3(syz_tun) entered disabled state [ 97.451114][ T5825] syz_tun: entered allmulticast mode [ 97.507574][ T5825] syz_tun: entered promiscuous mode [ 97.559105][ T5825] bridge0: port 3(syz_tun) entered blocking state [ 97.559469][ T5825] bridge0: port 3(syz_tun) entered forwarding state [ 98.271320][ T5844] digital: digital_start_poll: Unknown protocol [ 99.463552][ T1546] IPVS: starting estimator thread 0... [ 99.596033][ T5854] IPVS: using max 10 ests per chain, 24000 per kthread [ 99.682359][ T5823] infiniband syz0: set active [ 99.682402][ T5823] infiniband syz0: added eth0 [ 99.999776][ T5850] svc: failed to register lockdv1 RPC service (errno 512). [ 100.002517][ T5823] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 100.002559][ T5823] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 100.002599][ T5823] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 100.012058][ T5850] lockd_up: makesock failed, error=-512 [ 100.239903][ T5847] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.258436][ T5823] RDS/IB: syz0: added [ 100.269334][ T5823] smc: adding ib device syz0 with port count 1 [ 100.269736][ T5823] smc: ib device syz0 port 1 has no pnetid [ 100.785422][ T5872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29'. [ 100.837084][ T5847] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.926176][ T5874] vlan2: entered allmulticast mode [ 100.926192][ T5874] veth1: entered allmulticast mode [ 101.141587][ T5850] svc: failed to register nfsdv3 RPC service (errno 111). [ 101.149558][ T5850] svc: failed to register nfsaclv3 RPC service (errno 512). [ 101.149580][ T5850] failed to unregister tcp with rpcbind [ 101.189367][ T5850] svc: failed to register nfsdv3 RPC service (errno 97). [ 101.189396][ T5850] svc: failed to register nfsaclv3 RPC service (errno 97). [ 101.189410][ T5850] failed to unregister tcp with rpcbind [ 101.471927][ T5847] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.776630][ T1000] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 101.921985][ T5847] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.000803][ T1000] usb 4-1: not running at top speed; connect to a high speed hub [ 102.000845][ T1000] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 102.059085][ T1000] usb 4-1: config index 0 descriptor too short (expected 161, got 153) [ 102.059119][ T1000] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.059139][ T1000] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 102.059175][ T1000] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.411146][ T5895] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 103.224722][ T5906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.40'. [ 103.375398][ T5908] vlan3: entered allmulticast mode [ 103.375420][ T5908] veth1_to_batadv: entered allmulticast mode [ 104.586954][ T31] usb 4-1: USB disconnect, device number 2 [ 104.736693][ T5903] NFSD: Unable to initialize client recovery tracking! (-110) [ 104.736716][ T5903] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 104.736736][ T5903] NFSD: starting 90-second grace period (net f000054c) [ 104.789134][ T5923] qrtr: Invalid version 2 [ 104.789413][ T5923] qrtr: Invalid version 2 [ 104.791335][ T5923] qrtr: Invalid version 2 [ 104.791518][ T5923] qrtr: Invalid version 2 [ 105.698060][ T5935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.51'. [ 105.771412][ T5937] 8021q: VLANs not supported on vcan0 [ 105.934954][ T5939] batman_adv: batadv0: Adding interface: veth0 [ 105.934974][ T5939] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.935007][ T5939] batman_adv: batadv0: Interface activated: veth0 [ 106.313414][ C0] vcan0: j1939_tp_rxtimer: 0xffff888039e4ac00: rx timeout, send abort [ 106.315176][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888039e4ac00: 0x10100: (3) A timeout occurred and this is the connection abort to close the session. [ 106.593590][ T4876] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.755575][ T4876] usb 3-1: Using ep0 maxpacket: 8 [ 106.772169][ T4876] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 106.795130][ T4876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.013108][ T4876] usb 3-1: config 0 descriptor?? [ 107.581600][ T4876] usb 3-1: probing VID:PID(0424:012C) [ 107.875242][ T4876] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 107.875282][ T4876] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 107.875301][ T4876] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 107.875319][ T4876] usb 3-1: vub300 testing BULK OUT EndPoint(3) 04 [ 107.875337][ T4876] usb 3-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 108.021242][ T4876] usb 3-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 108.437213][ T4876] vub300 3-1:0.0: probe with driver vub300 failed with error -32 [ 109.750919][ T5987] Bluetooth: MGMT ver 1.23 [ 110.514421][ T5944] syz.2.53 (5944) used greatest stack depth: 18816 bytes left [ 110.824895][ T5973] syz.2.53 (5973) used greatest stack depth: 18120 bytes left [ 111.147262][ T5702] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 111.285700][ T5593] usb 3-1: USB disconnect, device number 2 [ 111.309374][ T5702] usb 4-1: Using ep0 maxpacket: 32 [ 111.316559][ T5702] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 111.326315][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.326344][ T5702] usb 4-1: Product: syz [ 111.326358][ T5702] usb 4-1: Manufacturer: syz [ 111.326372][ T5702] usb 4-1: SerialNumber: syz [ 111.428744][ T5702] usb 4-1: config 0 descriptor?? [ 111.523488][ T5702] usb 4-1: selecting invalid altsetting 3 [ 111.523509][ T5702] comedi comedi5: could not set alternate setting 3 in high speed [ 111.523519][ T5702] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 111.553290][ T5702] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 111.626270][ T37] audit: type=1804 audit(1790788400.592:2): pid=6007 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.73" name="/newroot/6/nfsd/portlist" dev="nfsd" ino=13 res=1 errno=0 [ 111.677786][ T6011] bridge0: port 3(batadv0) entered blocking state [ 111.678109][ T6011] bridge0: port 3(batadv0) entered disabled state [ 111.678363][ T6011] batadv0: entered allmulticast mode [ 111.680981][ T6012] netlink: 16 bytes leftover after parsing attributes in process `syz.0.75'. [ 111.681213][ T6011] batadv0: entered promiscuous mode [ 111.720163][ T6011] bridge0: port 3(batadv0) entered blocking state [ 111.720242][ T6011] bridge0: port 3(batadv0) entered forwarding state [ 111.741545][ T6012] vlan2: entered allmulticast mode [ 111.741567][ T6012] veth1_to_team: entered allmulticast mode [ 111.795383][ T5702] usb 4-1: USB disconnect, device number 3 [ 111.813378][ T69] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 111.813399][ T69] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 111.825677][ T60] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 112.483946][ T6031] tipc: Started in network mode [ 112.483986][ T6031] tipc: Node identity 4, cluster identity 4711 [ 112.484000][ T6031] tipc: Node number set to 4 [ 112.549241][ T6034] tipc: Enabled bearer , priority 0 [ 112.619425][ T6031] tipc: Disabling bearer [ 112.910040][ T6049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.88'. [ 112.910065][ T6049] netlink: 20 bytes leftover after parsing attributes in process `syz.1.88'. [ 113.129820][ T5972] svc: failed to register nfsdv3 RPC service (errno 512). [ 113.130235][ T5972] svc: failed to register nfsaclv3 RPC service (errno 512). [ 113.130258][ T5972] failed to unregister tcp with rpcbind [ 113.130536][ T5972] svc: failed to register nfsdv3 RPC service (errno 97). [ 113.130552][ T5972] svc: failed to register nfsaclv3 RPC service (errno 97). [ 113.130565][ T5972] failed to unregister tcp with rpcbind [ 114.297075][ T6093] netlink: 'syz.0.102': attribute type 2 has an invalid length. [ 114.593284][ T6088] svc: failed to register lockdv1 RPC service (errno 111). [ 115.093283][ T6124] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 115.595795][ T1000] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.770055][ T1000] usb 4-1: New USB device found, idVendor=1110, idProduct=9041, bcdDevice= 0.00 [ 115.771307][ T1000] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 115.771349][ T1000] usb 4-1: config 1 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 115.771385][ T1000] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.786162][ T6088] svc: failed to register nfsdv3 RPC service (errno 512). [ 115.786346][ T6088] svc: failed to register nfsaclv3 RPC service (errno 512). [ 115.786359][ T6088] failed to unregister tcp with rpcbind [ 115.786570][ T6088] svc: failed to register nfsdv3 RPC service (errno 97). [ 115.786583][ T6088] svc: failed to register nfsaclv3 RPC service (errno 97). [ 115.786595][ T6088] failed to unregister tcp with rpcbind [ 116.213398][ T1000] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 116.298371][ T6118] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 116.332368][ T6145] netlink: 44 bytes leftover after parsing attributes in process `syz.1.116'. [ 116.333193][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'. [ 116.333935][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'. [ 116.545915][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 116.987904][ T5721] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.244827][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 117.246616][ T5721] usb 3-1: Using ep0 maxpacket: 32 [ 117.252300][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 117.252340][ T9] usb 5-1: can't read configurations, error -71 [ 117.272810][ T5721] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 117.305898][ T5721] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 117.305927][ T5721] usb 3-1: config 0 has no interface number 0 [ 117.343634][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.343663][ T5721] usb 3-1: Product: syz [ 117.343677][ T5721] usb 3-1: Manufacturer: syz [ 117.343691][ T5721] usb 3-1: SerialNumber: syz [ 117.398854][ T5721] usb 3-1: config 0 descriptor?? [ 117.405419][ T5721] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 117.405446][ T5721] usb 3-1: selecting invalid altsetting 1 [ 117.405455][ T5721] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 117.554455][ T5721] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 117.554859][ T5721] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 117.554911][ T5721] usb 3-1: media controller created [ 117.628003][ T5721] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.353381][ T1000] usb 4-1: selecting invalid altsetting 8 [ 118.353406][ T1000] usb 4-1: [UEAGLE-ATM] setting alternate 8 failed for 2 interface, using bulk mode [ 118.353879][ T1000] usb 4-1: [UEAGLE-ATM] urb submission failed with error -19 [ 118.354376][ T1000] ueagle-atm 4-1:1.0: usbatm_usb_probe: bind failed: -19! [ 118.477366][ T1000] usb 4-1: USB disconnect, device number 4 [ 118.767239][ T6152] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 118.838625][ T5721] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 118.838685][ T5721] zl10353_read_register: readreg error (reg=127, ret==-71) [ 118.921838][ T5721] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 119.222440][ T5721] usb 3-1: USB disconnect, device number 3 [ 119.315831][ T1000] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 119.391560][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 119.391717][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 119.391745][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 119.391759][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 119.475637][ T1000] usb 4-1: Using ep0 maxpacket: 32 [ 119.484932][ T1000] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 119.514587][ T1000] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.514617][ T1000] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 119.547455][ T1000] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.547484][ T1000] usb 4-1: Product: syz [ 119.547498][ T1000] usb 4-1: Manufacturer: syz [ 119.547512][ T1000] usb 4-1: SerialNumber: syz [ 119.587085][ T1000] usb 4-1: config 0 descriptor?? [ 119.990294][ T6201] FAULT_INJECTION: forcing a failure. [ 119.990294][ T6201] name failslab, interval 1, probability 100, space 0, times 95 [ 119.990591][ T6201] CPU: 1 UID: 0 PID: 6201 Comm: syz.0.135 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 119.990619][ T6201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.990638][ T6201] Call Trace: [ 119.990646][ T6201] [ 119.990655][ T6201] dump_stack_lvl+0xe8/0x150 [ 119.990699][ T6201] should_fail_ex+0x46b/0x600 [ 119.990737][ T6201] should_failslab+0xa8/0x100 [ 119.990756][ T6201] ? taskstats_exit+0x19e/0xe10 [ 119.990779][ T6201] kmem_cache_alloc_noprof+0x9e/0x690 [ 119.990805][ T6201] ? taskstats_exit+0x19e/0xe10 [ 119.990831][ T6201] taskstats_exit+0x19e/0xe10 [ 119.990852][ T6201] ? acct_update_integrals+0x342/0x410 [ 119.990878][ T6201] ? acct_update_integrals+0x38a/0x410 [ 119.990904][ T6201] ? __pfx_taskstats_exit+0x10/0x10 [ 119.990927][ T6201] ? __pfx_exit_signals+0x10/0x10 [ 119.990955][ T6201] ? seccomp_filter_release+0x18a/0x2d0 [ 119.990985][ T6201] do_exit+0x6ad/0x2360 [ 119.991004][ T6201] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 119.991027][ T6201] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 119.991045][ T6201] ? __pfx_do_exit+0x10/0x10 [ 119.991077][ T6201] do_group_exit+0x22d/0x2f0 [ 119.991099][ T6201] __x64_sys_exit_group+0x3f/0x40 [ 119.991117][ T6201] x64_sys_call+0x18c6/0x18d0 [ 119.991133][ T6201] do_syscall_64+0x166/0x520 [ 119.991153][ T6201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.991172][ T6201] ? clear_bhb_loop+0x70/0xc0 [ 119.991192][ T6201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.991210][ T6201] RIP: 0033:0x7f5dcc91e159 [ 119.991238][ T6201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.991251][ T6201] RSP: 002b:00007ffea6473c08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 119.991274][ T6201] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5dcc91e159 [ 119.991286][ T6201] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.991296][ T6201] RBP: 00007ffea6473c6c R08: 0000000000000000 R09: 00000000000927c0 [ 119.991308][ T6201] R10: 00007f5dccba6038 R11: 0000000000000246 R12: 0000000000000025 [ 119.991318][ T6201] R13: 00000000000927c0 R14: 000000000001d1a0 R15: 00007ffea6473cc0 [ 119.991348][ T6201] [ 120.312372][ T1000] usb 4-1: USB disconnect, device number 5 [ 120.331088][ T6201] FAULT_INJECTION: forcing a failure. [ 120.331088][ T6201] name failslab, interval 1, probability 100, space 0, times 54 [ 120.331122][ T6201] CPU: 1 UID: 0 PID: 6201 Comm: syz.0.135 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 120.331138][ T6201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.331146][ T6201] Call Trace: [ 120.331152][ T6201] [ 120.331158][ T6201] dump_stack_lvl+0xe8/0x150 [ 120.331197][ T6201] should_fail_ex+0x46b/0x600 [ 120.331223][ T6201] should_failslab+0xa8/0x100 [ 120.331237][ T6201] ? __send_signal_locked+0x314/0x1020 [ 120.331253][ T6201] kmem_cache_alloc_noprof+0x9e/0x690 [ 120.331274][ T6201] ? __send_signal_locked+0x314/0x1020 [ 120.331289][ T6201] ? sig_get_ucounts+0x3e4/0x450 [ 120.331309][ T6201] __send_signal_locked+0x314/0x1020 [ 120.331333][ T6201] do_notify_parent+0xc23/0xe60 [ 120.331361][ T6201] ? __pfx_do_notify_parent+0x10/0x10 [ 120.331400][ T6201] ? preempt_count_add+0x6a/0x140 [ 120.331426][ T6201] do_exit+0x13f8/0x2360 [ 120.331442][ T6201] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 120.331460][ T6201] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 120.331475][ T6201] ? __pfx_do_exit+0x10/0x10 [ 120.331509][ T6201] do_group_exit+0x22d/0x2f0 [ 120.331529][ T6201] __x64_sys_exit_group+0x3f/0x40 [ 120.331545][ T6201] x64_sys_call+0x18c6/0x18d0 [ 120.331560][ T6201] do_syscall_64+0x166/0x520 [ 120.331577][ T6201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.331593][ T6201] ? clear_bhb_loop+0x70/0xc0 [ 120.331611][ T6201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.331627][ T6201] RIP: 0033:0x7f5dcc91e159 [ 120.331643][ T6201] Code: Unable to access opcode bytes at 0x7f5dcc91e12f. [ 120.331651][ T6201] RSP: 002b:00007ffea6473c08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 120.331670][ T6201] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5dcc91e159 [ 120.331681][ T6201] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.331691][ T6201] RBP: 00007ffea6473c6c R08: 0000000000000000 R09: 00000000000927c0 [ 120.331700][ T6201] R10: 00007f5dccba6038 R11: 0000000000000246 R12: 0000000000000025 [ 120.331708][ T6201] R13: 00000000000927c0 R14: 000000000001d1a0 R15: 00007ffea6473cc0 [ 120.331732][ T6201] [ 120.742920][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.138'. [ 121.205675][ T6205] NFSD: Unable to initialize client recovery tracking! (-110) [ 121.205696][ T6205] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 121.205706][ T6205] NFSD: starting 90-second grace period (net f000054c) [ 121.375625][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 121.528093][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 121.528135][ T9] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 121.530362][ T9] usb 2-1: config index 0 descriptor too short (expected 161, got 153) [ 121.530391][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.530411][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 121.530462][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.532293][ T6239] PM: suspend entry (deep) [ 121.653250][ T9] gspca_main: spca501-2.14.0 probing 0000:0000 [ 122.099623][ T9] gspca_spca501: reg write: error -71 [ 122.099641][ T9] spca501 2-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 122.099744][ T9] spca501 2-1:1.0: probe with driver spca501 failed with error -22 [ 122.134096][ T9] usb 2-1: USB disconnect, device number 2 [ 122.319158][ T409] Filesystems sync: 0.718 seconds [ 122.487974][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.552670][ T6239] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 122.552838][ T6239] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 122.639713][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 122.644049][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 122.646903][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 122.646929][ T9] usb 1-1: config 0 has no interface number 0 [ 122.673860][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.673890][ T9] usb 1-1: Product: syz [ 122.673905][ T9] usb 1-1: Manufacturer: syz [ 122.673919][ T9] usb 1-1: SerialNumber: syz [ 122.863517][ T9] usb 1-1: config 0 descriptor?? [ 122.933007][ T9] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 122.933038][ T9] usb 1-1: selecting invalid altsetting 1 [ 122.933054][ T9] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 122.943334][ T6239] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 122.954172][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 122.954573][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 122.954622][ T9] usb 1-1: media controller created [ 122.983397][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.092956][ T6239] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 123.093056][ T6239] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 123.239699][ T5721] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 123.275674][ T4876] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.300755][ T6239] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 123.415630][ T5721] usb 5-1: Invalid ep0 maxpacket: 64 [ 123.447583][ T4876] usb 2-1: Using ep0 maxpacket: 32 [ 123.454393][ T4876] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 123.470612][ T4876] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.470639][ T4876] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 123.473665][ T4876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.473687][ T4876] usb 2-1: Product: syz [ 123.473695][ T4876] usb 2-1: Manufacturer: syz [ 123.473740][ T4876] usb 2-1: SerialNumber: syz [ 123.547196][ T6239] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 123.547298][ T6239] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 123.570656][ T6262] tipc: Started in network mode [ 123.570684][ T6262] tipc: Node identity 06209c728ca7, cluster identity 4711 [ 123.571430][ T6262] tipc: Enabled bearer , priority 10 [ 123.649002][ T6263] tipc: Enabled bearer , priority 10 [ 123.713795][ T5721] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 123.746735][ T6239] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 123.753643][ T4876] usb 2-1: config 0 descriptor?? [ 123.807919][ T6256] tipc: Resetting bearer [ 123.836815][ T6239] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 123.836891][ T6239] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 123.866457][ T5721] usb 5-1: Invalid ep0 maxpacket: 64 [ 123.867334][ T5721] usb usb5-port1: attempt power cycle [ 124.067640][ T6256] tipc: Disabling bearer [ 124.123772][ T6239] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 124.149060][ T6245] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 124.175380][ T9] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 124.177229][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 124.184873][ T9] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 124.216064][ T6253] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 124.251525][ T6239] Freezing user space processes [ 124.291123][ T4876] usb 2-1: USB disconnect, device number 3 [ 124.370627][ T5721] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 124.409426][ T9] usb 1-1: USB disconnect, device number 3 [ 124.628233][ T4900] Bluetooth: hci2: command 0x0c1a tx timeout [ 124.907327][ T6256] tipc: Resetting bearer [ 125.082064][ T6256] tipc: Disabling bearer [ 125.105697][ T4900] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.195984][ T6259] tipc: Node number set to 2324143218 [ 125.208780][ T6239] Freezing user space processes completed (elapsed 0.957 seconds) [ 125.209236][ T6239] OOM killer disabled. [ 125.209261][ T6239] Freezing remaining freezable tasks [ 125.585756][ T4900] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.906798][ T4900] Bluetooth: hci4: command 0x0c1a tx timeout [ 126.705682][ T4900] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.188446][ T4900] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.665718][ T4900] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.985661][ T4900] Bluetooth: hci4: command 0x0c1a tx timeout [ 128.785737][ T4900] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.265699][ T4900] Bluetooth: hci1: command 0x0c1a tx timeout [ 129.431588][ T5721] usb 5-1: device descriptor read/8, error -110 [ 129.695834][ T5721] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 129.716129][ T5721] usb 5-1: device descriptor read/8, error -32 [ 129.748023][ T4900] Bluetooth: hci3: command 0x0c1a tx timeout [ 129.830835][ T5721] usb usb5-port1: unable to enumerate USB device [ 129.833997][ T6239] Freezing remaining freezable tasks completed (elapsed 4.624 seconds) [ 129.834724][ T6239] printk: Suspending console(s) (use no_console_suspend to debug) [ 130.066201][ T4900] Bluetooth: hci4: command 0x0c1a tx timeout [ 131.294218][ T6239] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 131.294326][ T6239] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 131.294422][ T6239] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 131.294525][ T6239] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 131.294621][ T6239] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 131.294721][ T6239] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 131.294817][ T6239] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 131.294912][ T6239] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 131.295023][ T6239] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 131.295127][ T6239] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 131.295221][ T6239] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 131.295316][ T6239] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 131.295411][ T6239] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 131.295741][ T6239] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 131.295916][ T6239] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 131.336408][ T6299] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 131.973906][ T6239] PM: suspend debug: Waiting for 0 second(s). [ 132.017107][ T1546] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 132.727244][ T6239] OOM killer enabled. [ 132.727255][ T6239] Restarting tasks: Starting [ 133.003860][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.003932][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.096680][ T6239] Restarting tasks: Done [ 133.098018][ T6239] random: crng reseeded on system resumption [ 133.215844][ T5721] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 133.229088][ T6239] hwrng_fill thread creation failed [ 133.248000][ T6239] PM: suspend exit [ 133.349285][ T5721] usb 5-1: device descriptor read/64, error -32 [ 133.793661][ T6367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.157'. [ 134.475628][ T1000] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 134.668646][ T1000] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 134.670840][ T1000] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 134.670877][ T1000] usb 2-1: can't read configurations, error -71 [ 134.876094][ T5721] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 135.055646][ T5721] usb 1-1: Using ep0 maxpacket: 32 [ 135.056613][ T5721] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 135.058179][ T5721] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.058206][ T5721] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 135.061203][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.061226][ T5721] usb 1-1: Product: syz [ 135.061237][ T5721] usb 1-1: Manufacturer: syz [ 135.061250][ T5721] usb 1-1: SerialNumber: syz [ 135.116167][ T5721] usb 1-1: config 0 descriptor?? [ 135.343070][ T5721] usb 1-1: USB disconnect, device number 4 [ 135.675669][ T60] Bluetooth: hci4: command 0x0c1a tx timeout [ 135.856179][ T6433] ovs-dp0: entered promiscuous mode [ 136.467989][ T5721] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 136.595663][ T5702] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 136.628300][ T5721] usb 4-1: New USB device found, idVendor=1110, idProduct=900f, bcdDevice= 0.00 [ 136.641745][ T5721] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 136.641772][ T5721] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 136.641847][ T5721] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 136.641887][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.751245][ T5702] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 136.777548][ T5702] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.777610][ T5702] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 136.777637][ T5702] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 136.777678][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.936941][ T6273] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.104051][ T6259] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 137.124680][ T5721] usb 4-1: reset high-speed USB device number 6 using dummy_hcd [ 137.383794][ T6259] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 137.384880][ T6259] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 137.384917][ T6259] usb 1-1: can't read configurations, error -71 [ 137.848857][ T60] Bluetooth: hci4: unexpected subevent 0x01 length: 19 > 18 [ 137.984356][ T5702] cxacru 5-1:1.0: send of cm 0x90 failed (-71) [ 138.024278][ T6493] cxacru 5-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 138.024305][ T6493] cxacru 5-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 138.110586][ T5702] usb 5-1: USB disconnect, device number 10 [ 138.387453][ T5721] usb 4-1: [UEAGLE-ATM] interface 2 not found [ 138.387480][ T5721] ueagle-atm 4-1:1.0: usbatm_usb_probe: bind failed: -19! [ 138.404010][ T5721] usb 4-1: USB disconnect, device number 6 [ 138.906245][ T6525] digital: digital_start_poll: Unknown protocol [ 139.035768][ T4876] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 139.205759][ T4876] usb 3-1: Using ep0 maxpacket: 32 [ 139.206701][ T4876] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 139.209587][ T4876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.209613][ T4876] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 139.213461][ T4876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.213488][ T4876] usb 3-1: Product: syz [ 139.213502][ T4876] usb 3-1: Manufacturer: syz [ 139.213517][ T4876] usb 3-1: SerialNumber: syz [ 139.258842][ T4876] usb 3-1: config 0 descriptor?? [ 139.473960][ T31] usb 3-1: USB disconnect, device number 4 [ 139.827416][ T4900] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 140.406545][ T6283] IPVS: starting estimator thread 0... [ 140.411594][ T6569] IPVS: rr: UDP 127.0.0.1:8888 - no destination available [ 140.465891][ T31] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 140.495959][ T6571] IPVS: using max 10 ests per chain, 24000 per kthread [ 140.620892][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 140.620933][ T31] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 140.622504][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.795658][ T5593] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 140.947219][ T5593] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 140.953926][ T5593] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 140.953960][ T5593] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 140.954034][ T5593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.986562][ T6577] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 140.986687][ T6577] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 141.004605][ C1] port100 4-1:1.0: NFC: Urb failure (status -71) [ 141.004672][ C1] port100 4-1:1.0: NFC: Urb failure (status -71) [ 141.010728][ T5593] port100 4-1:1.0: NFC: Could not get supported command types [ 141.071857][ T31] ------------[ cut here ]------------ [ 141.071870][ T31] URB ffff88803a0c2500 submitted while active [ 141.071881][ T31] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#1: kworker/1:0/31 [ 141.078969][ T31] Modules linked in: [ 141.080189][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 141.082339][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.084718][ T31] Workqueue: usb_hub_wq hub_event [ 141.086126][ T31] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 141.087688][ T31] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 f9 a7 4d fb 49 83 3e 00 74 40 e8 7e be e1 fa 48 8d 3d 77 b4 d9 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 63 be e1 fa eb 05 e8 5c be [ 141.091585][ T31] RSP: 0018:ffffc90000a5eac0 EFLAGS: 00010287 [ 141.092465][ T31] RAX: ffffffff86e50592 RBX: ffff88803a0c2500 RCX: 0000000000100000 [ 141.093748][ T31] RDX: ffffc9001bffc000 RSI: ffff88803a0c2500 RDI: ffffffff8fbeba10 [ 141.094923][ T31] RBP: dffffc0000000000 R08: ffffffff8fb22b7f R09: 1ffffffff1f6456f [ 141.096194][ T31] R10: dffffc0000000000 R11: fffffbfff1f64570 R12: ffff8880601c2458 [ 141.097567][ T31] R13: 1ffff1100c03848b R14: ffff88803a0c2508 R15: 0000000000000cc0 [ 141.098916][ T31] FS: 0000000000000000(0000) GS:ffff888125cc4000(0000) knlGS:0000000000000000 [ 141.100204][ T31] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.101314][ T31] CR2: 000000110c2796e5 CR3: 000000003c132000 CR4: 00000000003526f0 [ 141.102461][ T31] Call Trace: [ 141.102945][ T31] [ 141.103444][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 141.104303][ T31] ? mutex_lock_nested+0x152/0x1d0 [ 141.105023][ T31] ? port100_send_cmd_async+0x6d3/0xcc0 [ 141.105893][ T31] port100_send_cmd_async+0x84f/0xcc0 [ 141.107063][ T31] port100_set_command_type+0x1c8/0x390 [ 141.107935][ T31] ? pcpu_alloc+0x10/0x310 [ 141.108607][ T31] ? __pfx_port100_set_command_type+0x10/0x10 [ 141.109558][ T31] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 141.110922][ T31] port100_probe+0x7b2/0xba0 [ 141.111833][ T31] ? __pfx_port100_probe+0x10/0x10 [ 141.112704][ T31] ? __pm_runtime_set_status+0x977/0xc40 [ 141.113605][ T31] usb_probe_interface+0x788/0xe50 [ 141.114496][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 141.115423][ T31] ? sysfs_do_create_link_sd+0xe0/0x110 [ 141.116343][ T31] ? driver_sysfs_add+0x1fe/0x210 [ 141.117066][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 141.117912][ T31] really_probe+0x254/0xae0 [ 141.118583][ T31] __driver_probe_device+0x1e8/0x360 [ 141.119911][ T31] driver_probe_device+0x4f/0x240 [ 141.120675][ T31] __device_attach_driver+0x270/0x410 [ 141.121550][ T31] bus_for_each_drv+0x25b/0x2f0 [ 141.122435][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 141.123617][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 141.124481][ T31] ? rt_spin_unlock+0x165/0x200 [ 141.125253][ T31] __device_attach+0x2c7/0x450 [ 141.126051][ T31] ? rt_spin_unlock+0x159/0x200 [ 141.126891][ T31] ? __pfx___device_attach+0x10/0x10 [ 141.127841][ T31] device_initial_probe+0xa1/0xd0 [ 141.128705][ T31] bus_probe_device+0x12d/0x220 [ 141.129606][ T31] device_add+0x7d7/0xb80 [ 141.130495][ T31] usb_set_configuration+0x1ad8/0x2180 [ 141.131442][ T31] usb_generic_driver_probe+0x8d/0x150 [ 141.132387][ T31] usb_probe_device+0x1c3/0x3b0 [ 141.133414][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 141.134456][ T31] really_probe+0x254/0xae0 [ 141.135293][ T31] __driver_probe_device+0x1e8/0x360 [ 141.136359][ T31] driver_probe_device+0x4f/0x240 [ 141.137334][ T31] __device_attach_driver+0x270/0x410 [ 141.138274][ T31] bus_for_each_drv+0x25b/0x2f0 [ 141.139083][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 141.140088][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 141.141121][ T31] ? rt_spin_unlock+0x165/0x200 [ 141.141965][ T31] __device_attach+0x2c7/0x450 [ 141.142814][ T31] ? __pfx___device_attach+0x10/0x10 [ 141.143635][ T31] device_initial_probe+0xa1/0xd0 [ 141.144557][ T31] bus_probe_device+0x12d/0x220 [ 141.145420][ T31] device_add+0x7d7/0xb80 [ 141.146217][ T31] usb_new_device+0x99a/0x1680 [ 141.146979][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 141.147913][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 141.148771][ T31] hub_event+0x28cf/0x4cf0 [ 141.149446][ T31] ? __pfx_hub_event+0x10/0x10 [ 141.150381][ T31] ? rcu_is_watching+0x16/0xb0 [ 141.151337][ T31] ? process_scheduled_works+0x97a/0x1630 [ 141.152392][ T31] process_scheduled_works+0xc3d/0x1630 [ 141.156120][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 141.157091][ T31] ? assign_work+0x3cf/0x5d0 [ 141.157782][ T31] worker_thread+0xa47/0xfb0 [ 141.158619][ T31] kthread+0x38b/0x470 [ 141.159258][ T31] ? __pfx_worker_thread+0x10/0x10 [ 141.160477][ T31] ? __pfx_kthread+0x10/0x10 [ 141.161416][ T31] ret_from_fork+0x514/0xb70 [ 141.162706][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 141.163751][ T31] ? __switch_to+0xc89/0x1420 [ 141.165349][ T31] ? __pfx_kthread+0x10/0x10 [ 141.166756][ T31] ret_from_fork_asm+0x1a/0x30 [ 141.168008][ T31] [ 141.168890][ T31] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 141.170421][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 141.173086][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.175210][ T31] Workqueue: usb_hub_wq hub_event [ 141.176446][ T31] Call Trace: [ 141.177079][ T31] [ 141.177657][ T31] vpanic+0x56d/0xa60 [ 141.178802][ T31] ? __pfx__printk+0x10/0x10 [ 141.179734][ T31] ? __pfx_vpanic+0x10/0x10 [ 141.180587][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 141.181855][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 141.183174][ T31] panic+0xc5/0xd0 [ 141.184066][ T31] ? __pfx_panic+0x10/0x10 [ 141.185178][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 141.186336][ T31] __warn+0x315/0x4c0 [ 141.187788][ T31] ? usb_submit_urb+0x79/0x18b0 [ 141.189254][ T31] ? usb_submit_urb+0x79/0x18b0 [ 141.190805][ T31] __report_bug+0x276/0x570 [ 141.192069][ T31] ? usb_submit_urb+0x79/0x18b0 [ 141.193311][ T31] ? __pfx___report_bug+0x10/0x10 [ 141.194669][ T31] ? bus_for_each_drv+0x25b/0x2f0 [ 141.196479][ T31] ? worker_thread+0xa47/0xfb0 [ 141.197911][ T31] ? kthread+0x38b/0x470 [ 141.199069][ T31] ? ret_from_fork+0x514/0xb70 [ 141.200406][ T31] report_bug_entry+0x19b/0x290 [ 141.201385][ T31] ? usb_submit_urb+0x7c/0x18b0 [ 141.202419][ T31] ? usb_submit_urb+0x81/0x18b0 [ 141.204038][ T31] handle_bug+0xce/0x200 [ 141.204706][ T31] exc_invalid_op+0x1a/0x50 [ 141.205826][ T31] asm_exc_invalid_op+0x1a/0x20 [ 141.206959][ T31] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 141.208800][ T31] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 f9 a7 4d fb 49 83 3e 00 74 40 e8 7e be e1 fa 48 8d 3d 77 b4 d9 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 63 be e1 fa eb 05 e8 5c be [ 141.213023][ T31] RSP: 0018:ffffc90000a5eac0 EFLAGS: 00010287 [ 141.214021][ T31] RAX: ffffffff86e50592 RBX: ffff88803a0c2500 RCX: 0000000000100000 [ 141.215529][ T31] RDX: ffffc9001bffc000 RSI: ffff88803a0c2500 RDI: ffffffff8fbeba10 [ 141.217306][ T31] RBP: dffffc0000000000 R08: ffffffff8fb22b7f R09: 1ffffffff1f6456f [ 141.219344][ T31] R10: dffffc0000000000 R11: fffffbfff1f64570 R12: ffff8880601c2458 [ 141.220993][ T31] R13: 1ffff1100c03848b R14: ffff88803a0c2508 R15: 0000000000000cc0 [ 141.222871][ T31] ? usb_submit_urb+0x72/0x18b0 [ 141.224739][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 141.226398][ T31] ? mutex_lock_nested+0x152/0x1d0 [ 141.228523][ T31] ? port100_send_cmd_async+0x6d3/0xcc0 [ 141.230124][ T31] port100_send_cmd_async+0x84f/0xcc0 [ 141.232032][ T31] port100_set_command_type+0x1c8/0x390 [ 141.233687][ T31] ? pcpu_alloc+0x10/0x310 [ 141.235050][ T31] ? __pfx_port100_set_command_type+0x10/0x10 [ 141.236698][ T31] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 141.238409][ T31] port100_probe+0x7b2/0xba0 [ 141.239529][ T31] ? __pfx_port100_probe+0x10/0x10 [ 141.241277][ T31] ? __pm_runtime_set_status+0x977/0xc40 [ 141.242915][ T31] usb_probe_interface+0x788/0xe50 [ 141.244387][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 141.245955][ T31] ? sysfs_do_create_link_sd+0xe0/0x110 [ 141.247913][ T31] ? driver_sysfs_add+0x1fe/0x210 [ 141.249535][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 141.251231][ T31] really_probe+0x254/0xae0 [ 141.252310][ T31] __driver_probe_device+0x1e8/0x360 [ 141.253781][ T31] driver_probe_device+0x4f/0x240 [ 141.254715][ T31] __device_attach_driver+0x270/0x410 [ 141.255719][ T31] bus_for_each_drv+0x25b/0x2f0 [ 141.256527][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 141.257474][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 141.258365][ T31] ? rt_spin_unlock+0x165/0x200 [ 141.259330][ T31] __device_attach+0x2c7/0x450 [ 141.260212][ T31] ? rt_spin_unlock+0x159/0x200 [ 141.261177][ T31] ? __pfx___device_attach+0x10/0x10 [ 141.262187][ T31] device_initial_probe+0xa1/0xd0 [ 141.262982][ T31] bus_probe_device+0x12d/0x220 [ 141.263710][ T31] device_add+0x7d7/0xb80 [ 141.264389][ T31] usb_set_configuration+0x1ad8/0x2180 [ 141.265208][ T31] usb_generic_driver_probe+0x8d/0x150 [ 141.266014][ T31] usb_probe_device+0x1c3/0x3b0 [ 141.266693][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 141.267463][ T31] really_probe+0x254/0xae0 [ 141.268150][ T31] __driver_probe_device+0x1e8/0x360 [ 141.268951][ T31] driver_probe_device+0x4f/0x240 [ 141.269665][ T31] __device_attach_driver+0x270/0x410 [ 141.270445][ T31] bus_for_each_drv+0x25b/0x2f0 [ 141.271159][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 141.272055][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 141.272973][ T31] ? rt_spin_unlock+0x165/0x200 [ 141.273750][ T31] __device_attach+0x2c7/0x450 [ 141.274545][ T31] ? __pfx___device_attach+0x10/0x10 [ 141.275384][ T31] device_initial_probe+0xa1/0xd0 [ 141.276154][ T31] bus_probe_device+0x12d/0x220 [ 141.276941][ T31] device_add+0x7d7/0xb80 [ 141.277570][ T31] usb_new_device+0x99a/0x1680 [ 141.278412][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 141.279449][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 141.280354][ T31] hub_event+0x28cf/0x4cf0 [ 141.281108][ T31] ? __pfx_hub_event+0x10/0x10 [ 141.281771][ T31] ? rcu_is_watching+0x16/0xb0 [ 141.282463][ T31] ? process_scheduled_works+0x97a/0x1630 [ 141.283444][ T31] process_scheduled_works+0xc3d/0x1630 [ 141.284665][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 141.286295][ T31] ? assign_work+0x3cf/0x5d0 [ 141.287137][ T31] worker_thread+0xa47/0xfb0 [ 141.287921][ T31] kthread+0x38b/0x470 [ 141.288588][ T31] ? __pfx_worker_thread+0x10/0x10 [ 141.289417][ T31] ? __pfx_kthread+0x10/0x10 [ 141.290338][ T31] ret_from_fork+0x514/0xb70 [ 141.291184][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 141.292306][ T31] ? __switch_to+0xc89/0x1420 [ 141.293404][ T31] ? __pfx_kthread+0x10/0x10 [ 141.294334][ T31] ret_from_fork_asm+0x1a/0x30 [ 141.295511][ T31] [ 141.296514][ T31] Kernel Offset: disabled [ 141.297294][ T31] Rebooting in 86400 seconds..