last executing test programs: 3.002119505s ago: executing program 2 (id=3): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0xaa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2) 2.514204289s ago: executing program 4 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='proc\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000000)='500\x00', 0x3, 0x0) pwrite64(r0, &(0x7f0000000000)='0\x00', 0x1, 0x0) nanosleep(&(0x7f0000000000)={0x1}, 0x0) 2.34949234s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r1, &(0x7f0000000e00)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) write(r2, &(0x7f0000001400)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(&(0x7f0000000900)=@filename='devtmpfs\x00', &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/nullb1\x00', 0x2, 0x0) write(r4, &(0x7f0000001000)="53464f5ad309e7e5", 0x1000) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='./dev/nullb1\x00', &(0x7f0000001100)='./mnt\x00', &(0x7f0000001200)='zonefs\x00', 0x0, 0x0) 1.803452204s ago: executing program 5 (id=6): syz_usb_connect$uac1(0x2, 0xb2, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x100, 0x2a}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x201, 0x0, 0x1, 0x3}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x1, 0x2, [0x1, 0x1]}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x301, 0x0, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x8, 0x5}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x200, 0xfff}]}, {{0x9, 0x5, 0x1, 0x5, 0x200, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x8, 0x5}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x200, 0xfff}]}, {{0x9, 0x5, 0x82, 0x5, 0x200, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000200)={{0x1, 0x2}, 0x0, [0x1, 0x1, 0x1, 0x1]}) 1.730246937s ago: executing program 1 (id=2): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x34, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x1c) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f0000000080), &(0x7f0000000280)="0123456789abcdef", 0x8, r1) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000140)='syz \x00', 0x5) listen(r0, 0xa) r2 = socket$rxrpc(0x21, 0x2, 0x2) add_key$user(&(0x7f0000000300), &(0x7f00000000c0), &(0x7f0000000380)="0100000002000800ffffff7f010000000123456789abcdef0123456789abcdef", 0x20, 0xfffffffffffffffe) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000340)='syz \x00', 0x5) connect$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x34, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x1c) sendto$rxrpc(r2, &(0x7f0000000400)='hello', 0x5, 0x0, 0x0, 0x0) 1.503613212s ago: executing program 3 (id=7): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f00000000c0), &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24fc810149d79691c7ad75d", 0x1d8, r0) 1.4842185s ago: executing program 2 (id=8): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x5c, r1, 0x5, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_REG_RULES={0x38, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4c4b40}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5b8d80}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x27100}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7d0}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xea60}]}]}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a00)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}]]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000d00)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}]}, 0x24}}, 0x0) 1.294976879s ago: executing program 1 (id=9): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0xc0083b09, &(0x7f0000000040)={0xc, 0x0, 0x0}) r2 = memfd_create(&(0x7f0000000080)='test\x00', 0x0) ftruncate(r2, 0x1000) dup2(r2, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b8f, &(0x7f00000000c0)={0x20, 0x6, r1, 0x0, 0x0, 0x1000}) 1.130626902s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='1\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff) 884.226198ms ago: executing program 1 (id=10): r0 = syz_usb_connect(0x3, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40f30c749308010102030109024a0001010080fa0904000008ff0000000705810200020007058202000200070583020002000705840340000107050102000200070502020002000705030200020007050402000200"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000100)={0x1c, &(0x7f0000000200)={0x40, 0x2, 0xc, "0c0000008a08c83105000000"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000100)={0x1c, &(0x7f0000000200)={0x40, 0x2, 0xc, "0c0000008a08c83105000000"}, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 883.924503ms ago: executing program 2 (id=11): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39, 0x3, [0x0, 0x1, 0x2]}}) 484.087604ms ago: executing program 2 (id=12): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000106)="0000ffffff0a00f6d7290000000000000003fd00") syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000206)="0000ffffff0300fdd72b00fe00") syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000300)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000306)="0000ffffff0400fcd72101000700") nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) 399.713879ms ago: executing program 3 (id=13): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./ram1\x00', 0x8000, 0x101) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./ram1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000000)="fc4e2ba9", 0x4, 0x7ff0000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='md0\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='0.90', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:1', 0x3) 151.795388ms ago: executing program 4 (id=14): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={'syzkaller0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', 0x1043}) ioctl$sock_ifreq(r3, 0x8943, &(0x7f0000000380)={'syzkaller0\x00', @ifru_ivalue=0x3e8}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100)='syzkaller0\x00', 0xb) nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0) sendto$inet(r3, &(0x7f0000000240)="80", 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r3, &(0x7f0000000240)="80", 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r3, &(0x7f0000000240)="80", 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10) 0s ago: executing program 3 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000900)='127.0.0.1 / 2147483647 9218 0 0 0\n', 0x22) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000b00)='127.0.0.1 1 \\x00000000 2147483647 /\n', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0) write(r4, &(0x7f0000000f00)='2\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs\x00', 0x0, &(0x7f0000001300)='nolock,v3,addr=127.0.0.1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x0) write(r5, &(0x7f0000001500)='test\x00', 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.164' (ED25519) to the list of known hosts. [ 82.143772][ T5609] cgroup: Unknown subsys name 'net' [ 82.257191][ T5609] cgroup: Unknown subsys name 'cpuset' [ 82.267555][ T5609] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.887326][ T5609] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.667387][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.680005][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.691845][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.700741][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.714993][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.738528][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.749647][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.758917][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.772913][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.781995][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.790573][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.798465][ T5632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.800483][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.814962][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.815700][ T5632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.869730][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.886161][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.895318][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.904514][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.914712][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.948374][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.960016][ T5632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.971912][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.984521][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.993845][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.003104][ T5623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.018602][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.027770][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.037641][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.048402][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.762823][ T5632] Bluetooth: hci0: command tx timeout [ 88.841770][ T5632] Bluetooth: hci2: command tx timeout [ 88.921634][ T5632] Bluetooth: hci1: command tx timeout [ 89.001556][ T5632] Bluetooth: hci3: command tx timeout [ 89.081566][ T5632] Bluetooth: hci4: command tx timeout [ 89.081586][ T51] Bluetooth: hci5: command tx timeout [ 89.343862][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.360026][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.372889][ T5622] bridge_slave_0: entered allmulticast mode [ 89.381239][ T5622] bridge_slave_0: entered promiscuous mode [ 89.450098][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.457367][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.464698][ T5622] bridge_slave_1: entered allmulticast mode [ 89.472318][ T5622] bridge_slave_1: entered promiscuous mode [ 89.578501][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.644950][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.770599][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.777973][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.785336][ T5627] bridge_slave_0: entered allmulticast mode [ 89.793107][ T5627] bridge_slave_0: entered promiscuous mode [ 89.804165][ T5622] team0: Port device team_slave_0 added [ 89.857875][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.865433][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.872906][ T5627] bridge_slave_1: entered allmulticast mode [ 89.880488][ T5627] bridge_slave_1: entered promiscuous mode [ 89.889622][ T5622] team0: Port device team_slave_1 added [ 89.923810][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.931361][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.939466][ T5634] bridge_slave_0: entered allmulticast mode [ 89.947178][ T5634] bridge_slave_0: entered promiscuous mode [ 90.001305][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.008511][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.015837][ T5626] bridge_slave_0: entered allmulticast mode [ 90.023519][ T5626] bridge_slave_0: entered promiscuous mode [ 90.031107][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.038296][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.046394][ T5634] bridge_slave_1: entered allmulticast mode [ 90.054170][ T5634] bridge_slave_1: entered promiscuous mode [ 90.106476][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.113575][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.139687][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.151781][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.158924][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.167284][ T5626] bridge_slave_1: entered allmulticast mode [ 90.175232][ T5626] bridge_slave_1: entered promiscuous mode [ 90.195685][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.208493][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.215773][ T5639] bridge_slave_0: entered allmulticast mode [ 90.223441][ T5639] bridge_slave_0: entered promiscuous mode [ 90.248469][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.263317][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.273196][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.280134][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.306510][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.345109][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.352384][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.359549][ T5639] bridge_slave_1: entered allmulticast mode [ 90.367613][ T5639] bridge_slave_1: entered promiscuous mode [ 90.424698][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.437538][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.478073][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.485338][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.492603][ T5641] bridge_slave_0: entered allmulticast mode [ 90.500239][ T5641] bridge_slave_0: entered promiscuous mode [ 90.525686][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.550069][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.559835][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.567301][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.574752][ T5641] bridge_slave_1: entered allmulticast mode [ 90.582486][ T5641] bridge_slave_1: entered promiscuous mode [ 90.591809][ T5627] team0: Port device team_slave_0 added [ 90.616570][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.641207][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.665216][ T5627] team0: Port device team_slave_1 added [ 90.699034][ T5634] team0: Port device team_slave_0 added [ 90.751881][ T5622] hsr_slave_0: entered promiscuous mode [ 90.758942][ T5622] hsr_slave_1: entered promiscuous mode [ 90.780968][ T5634] team0: Port device team_slave_1 added [ 90.802919][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.826795][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.834160][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.860080][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.861828][ T5632] Bluetooth: hci0: command tx timeout [ 90.875066][ T5626] team0: Port device team_slave_0 added [ 90.896222][ T5639] team0: Port device team_slave_0 added [ 90.904504][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.921565][ T5632] Bluetooth: hci2: command tx timeout [ 90.929305][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.936615][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.962736][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.976095][ T5626] team0: Port device team_slave_1 added [ 90.998423][ T5639] team0: Port device team_slave_1 added [ 91.004124][ T5632] Bluetooth: hci1: command tx timeout [ 91.077334][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.084520][ T5632] Bluetooth: hci3: command tx timeout [ 91.084568][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.116484][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.151397][ T5641] team0: Port device team_slave_0 added [ 91.160699][ T5641] team0: Port device team_slave_1 added [ 91.167391][ T5632] Bluetooth: hci5: command tx timeout [ 91.171570][ T5632] Bluetooth: hci4: command tx timeout [ 91.176370][ T10] cfg80211: failed to load regulatory.db [ 91.198391][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.205447][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.232196][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.244152][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.251113][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.277372][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.337762][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.344830][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.371262][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.392431][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.399395][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.426206][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.467209][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.474229][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.500235][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.512830][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.519963][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.545966][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.595683][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.603013][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.629041][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.676010][ T5634] hsr_slave_0: entered promiscuous mode [ 91.682526][ T5634] hsr_slave_1: entered promiscuous mode [ 91.688701][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 91.694521][ T5634] Cannot create hsr debugfs directory [ 91.706750][ T5627] hsr_slave_0: entered promiscuous mode [ 91.713350][ T5627] hsr_slave_1: entered promiscuous mode [ 91.719503][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 91.725283][ T5627] Cannot create hsr debugfs directory [ 91.855294][ T5626] hsr_slave_0: entered promiscuous mode [ 91.862718][ T5626] hsr_slave_1: entered promiscuous mode [ 91.868888][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 91.874856][ T5626] Cannot create hsr debugfs directory [ 91.921971][ T5639] hsr_slave_0: entered promiscuous mode [ 91.928414][ T5639] hsr_slave_1: entered promiscuous mode [ 91.934737][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 91.940475][ T5639] Cannot create hsr debugfs directory [ 91.983300][ T5641] hsr_slave_0: entered promiscuous mode [ 91.989792][ T5641] hsr_slave_1: entered promiscuous mode [ 91.996535][ T5641] debugfs: 'hsr0' already exists in 'hsr' [ 92.002472][ T5641] Cannot create hsr debugfs directory [ 92.586864][ T5622] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.600789][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.647187][ T5622] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.658129][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.695542][ T5622] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.705262][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.725398][ T5622] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.736884][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.796412][ T5627] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.807131][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.815366][ T5627] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.826501][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.835138][ T5627] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.845754][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.859391][ T5627] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.870419][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.923272][ T5632] Bluetooth: hci0: command tx timeout [ 92.961423][ T5626] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 92.976881][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.986059][ T5626] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 92.996034][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.003513][ T5632] Bluetooth: hci2: command tx timeout [ 93.013228][ T5626] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.025331][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.047840][ T5626] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 93.058270][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.081666][ T5632] Bluetooth: hci1: command tx timeout [ 93.172121][ T5632] Bluetooth: hci3: command tx timeout [ 93.173219][ T5641] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.188409][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.207561][ T5641] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.217961][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.226143][ T5641] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.236189][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.243733][ T51] Bluetooth: hci5: command tx timeout [ 93.243824][ T5632] Bluetooth: hci4: command tx timeout [ 93.256033][ T5641] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.267154][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.384576][ T5639] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.396008][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.405816][ T5639] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.416793][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.435514][ T5639] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.445944][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.454631][ T5639] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.467726][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.490402][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.592999][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.615047][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.674495][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.682041][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.700640][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.709930][ T5634] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.720265][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.729403][ T5634] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.739352][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.755692][ T5634] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.765919][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.777732][ T132] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.784951][ T132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.803652][ T5634] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.816560][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.832899][ T132] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.840036][ T132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.899756][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.906913][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.926809][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.039761][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.067834][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.075095][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.094757][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.118034][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.125169][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.195611][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.219185][ T5641] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.285381][ T669] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.292594][ T669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.331089][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.338655][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.400478][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.428467][ T5626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.458060][ T132] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.465308][ T132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.519788][ T132] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.527010][ T132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.670524][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.808239][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.860673][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.867873][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.943600][ T669] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.950773][ T669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.002231][ T5632] Bluetooth: hci0: command tx timeout [ 95.081648][ T5632] Bluetooth: hci2: command tx timeout [ 95.164326][ T5632] Bluetooth: hci1: command tx timeout [ 95.241636][ T5632] Bluetooth: hci3: command tx timeout [ 95.321678][ T5632] Bluetooth: hci4: command tx timeout [ 95.327152][ T51] Bluetooth: hci5: command tx timeout [ 95.466491][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.180789][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.230521][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.475810][ T5627] veth0_vlan: entered promiscuous mode [ 96.510828][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.596764][ T5627] veth1_vlan: entered promiscuous mode [ 96.682515][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.773241][ T5622] veth0_vlan: entered promiscuous mode [ 96.879502][ T5641] veth0_vlan: entered promiscuous mode [ 96.896687][ T5622] veth1_vlan: entered promiscuous mode [ 96.913457][ T5627] veth0_macvtap: entered promiscuous mode [ 96.947818][ T5627] veth1_macvtap: entered promiscuous mode [ 96.976331][ T5641] veth1_vlan: entered promiscuous mode [ 97.010707][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.044997][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.080408][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.102959][ T5639] veth0_vlan: entered promiscuous mode [ 97.146258][ T5622] veth0_macvtap: entered promiscuous mode [ 97.185982][ T5639] veth1_vlan: entered promiscuous mode [ 97.207523][ T5622] veth1_macvtap: entered promiscuous mode [ 97.224012][ T5626] veth0_vlan: entered promiscuous mode [ 97.286591][ T5641] veth0_macvtap: entered promiscuous mode [ 97.299208][ T5634] veth0_vlan: entered promiscuous mode [ 97.314036][ T5626] veth1_vlan: entered promiscuous mode [ 97.327652][ T5641] veth1_macvtap: entered promiscuous mode [ 97.377973][ T5634] veth1_vlan: entered promiscuous mode [ 97.395336][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.405587][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.415186][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.423185][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.459350][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.469977][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.479384][ T1178] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.495343][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.545570][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.558094][ T5639] veth0_macvtap: entered promiscuous mode [ 97.585558][ T132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.590339][ T5626] veth0_macvtap: entered promiscuous mode [ 97.600025][ T132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.633115][ T5639] veth1_macvtap: entered promiscuous mode [ 97.660775][ T5626] veth1_macvtap: entered promiscuous mode [ 97.696495][ T5627] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.709705][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.741613][ T5634] veth0_macvtap: entered promiscuous mode [ 97.753523][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.810478][ T5634] veth1_macvtap: entered promiscuous mode [ 97.835416][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.938722][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.977862][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.985948][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.051223][ T132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.061562][ T132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.066355][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.104793][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.147447][ T132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.156352][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.165641][ T132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.209336][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.219866][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.241807][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.355797][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.376152][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.413128][ T132] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.500342][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.514758][ T1178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.525048][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.613708][ T132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.631607][ T132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.665933][ T31] audit: type=1800 audit(1785885553.369:2): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="zoned" dev="configfs" ino=8549 res=0 errno=0 [ 98.711644][ T5862] null_blk: nullb1: using native zone append [ 98.730726][ T31] audit: type=1800 audit(1785885553.389:3): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="memory_backed" dev="configfs" ino=8550 res=0 errno=0 [ 98.750454][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.753347][ T132] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.795033][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.809045][ T132] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.827579][ T31] audit: type=1800 audit(1785885553.389:4): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="zone_nr_conv" dev="configfs" ino=8551 res=0 errno=0 [ 98.854019][ T31] audit: type=1800 audit(1785885553.389:5): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="power" dev="configfs" ino=8552 res=0 errno=0 [ 99.065015][ T5862] null_blk: disk nullb1 created [ 99.065960][ T1178] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.112790][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.151519][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.337355][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.367095][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.376917][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.442382][ T1126] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.455477][ T5780] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 99.490250][ T1126] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.621824][ T1178] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.677597][ T5780] usb 6-1: unable to get BOS descriptor or descriptor too short [ 99.710282][ T5780] usb 6-1: not running at top speed; connect to a high speed hub [ 99.751877][ T5780] usb 6-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 99.784358][ T5780] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.807363][ T1178] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.825699][ T5780] usb 6-1: Product: syz [ 99.844857][ T5780] usb 6-1: Manufacturer: syz [ 99.851559][ T1178] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.867923][ T5780] usb 6-1: SerialNumber: syz [ 100.061865][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.104190][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.243210][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.291825][ T1178] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.365840][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.401998][ T803] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.412613][ T1126] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.472059][ T1178] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.497771][ T1178] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.597035][ T803] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice= 1.08 [ 100.628434][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.639173][ T803] usb 2-1: Product: syz [ 100.644922][ T803] usb 2-1: Manufacturer: syz [ 100.649726][ T803] usb 2-1: SerialNumber: syz [ 100.768225][ T5896] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 100.845562][ T5745] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.049109][ T5745] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 101.063686][ T5745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.079349][ T5745] usb 3-1: Product: syz [ 101.088463][ T5745] usb 3-1: Manufacturer: syz [ 101.095631][ T5745] usb 3-1: SerialNumber: syz [ 101.155266][ T803] usb 2-1: Direct firmware load for ath6k/AR6004/hw1.3/bdata.bin failed with error -2 [ 101.169693][ T803] usb 2-1: Falling back to sysfs fallback for: ath6k/AR6004/hw1.3/bdata.bin [ 101.267022][ T5780] usb 6-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 101.276834][ T5780] usb 6-1: found format II with max.bitrate = 512, frame size=4095 [ 101.285906][ T5780] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 101.307565][ T5780] usb 6-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 101.316084][ T5780] usb 6-1: found format II with max.bitrate = 512, frame size=4095 [ 101.326551][ T5780] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 101.342265][ T5780] usb 6-1: 2:0: failed to get current value for ch 1 (-22) [ 101.366175][ T5780] usb 6-1: 2:0: failed to get current value for ch 0 (-22) [ 101.537377][ T5780] usb 6-1: USB disconnect, device number 2 [ 101.563517][ T5745] ------------[ cut here ]------------ [ 101.569310][ T5745] URB ffff888020eab900 submitted while active [ 101.575673][ T5745] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x1689/0x19b0, CPU#0: kworker/0:4/5745 [ 101.586319][ T5745] Modules linked in: [ 101.590773][ T5745] CPU: 0 UID: 0 PID: 5745 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 101.600552][ T5745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 101.614630][ T5745] Workqueue: usb_hub_wq hub_event [ 101.619795][ T5745] RIP: 0010:usb_submit_urb+0x168c/0x19b0 [ 101.626261][ T5745] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 70 ff ff ff bb ed ff ff ff e9 ac f1 ff ff e8 3e 2c 8b fa 48 8d 3d 47 0a b1 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 8e f1 ff ff c7 44 24 30 00 00 00 [ 101.647784][ T5745] RSP: 0018:ffffc900046c6e38 EFLAGS: 00010287 [ 101.648088][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.654535][ T5745] RAX: 00000000000261cf RBX: ffff888020eab900 RCX: ffffc9001dd2b000 [ 101.654574][ T5745] RDX: 0000000000100000 RSI: ffff888020eab900 RDI: ffffffff913031d0 [ 101.654602][ T5745] RBP: ffff88807c3b4868 R08: 0000000000000001 R09: 0000000000000000 [ 101.694710][ T5745] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807c3b4838 [ 101.702890][ T5745] R13: ffff88807c209b00 R14: ffff888055caac80 R15: ffff88807c3b4860 [ 101.714216][ T5745] FS: 0000000000000000(0000) GS:ffff888123dd9000(0000) knlGS:0000000000000000 [ 101.724120][ T5745] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.731635][ T5745] CR2: 00007ffddb083838 CR3: 000000005696c000 CR4: 0000000000350ef0 [ 101.739716][ T5745] Call Trace: [ 101.743086][ T5745] [ 101.746088][ T5745] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 101.751811][ T5745] ? port100_send_cmd_async+0xba/0xc60 [ 101.757409][ T5745] port100_send_cmd_async+0x7f7/0xc60 [ 101.762950][ T5745] port100_probe+0xb4c/0x1190 [ 101.767758][ T5745] ? __pfx_port100_probe+0x10/0x10 [ 101.773054][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.778806][ T5745] ? _raw_spin_lock_irqsave+0x52/0x60 [ 101.784340][ T5745] ? find_held_lock+0x2b/0x80 [ 101.789156][ T5745] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 101.795146][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.800886][ T5745] ? __pm_runtime_set_status+0x13c/0x970 [ 101.810686][ T5745] usb_probe_interface+0x303/0x8f0 [ 101.815974][ T5745] ? __pfx_usb_probe_interface+0x10/0x10 [ 101.821771][ T5745] really_probe+0x241/0xa60 [ 101.826399][ T5745] __driver_probe_device+0x20e/0x450 [ 101.831841][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.837559][ T5745] driver_probe_device+0x4a/0x140 [ 101.842726][ T5745] __device_attach_driver+0x1df/0x320 [ 101.848226][ T5745] ? __pfx___device_attach_driver+0x10/0x10 [ 101.854272][ T5745] bus_for_each_drv+0x159/0x1e0 [ 101.859221][ T5745] ? __pfx_bus_for_each_drv+0x10/0x10 [ 101.864750][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.870527][ T5745] ? lockdep_hardirqs_on+0x78/0x100 [ 101.875881][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.876307][ T5885] NFSD: Unable to initialize client recovery tracking! (-110) [ 101.881831][ T5745] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 101.881895][ T5745] __device_attach+0x1e4/0x4d0 [ 101.882017][ T5745] ? __pfx___device_attach+0x10/0x10 [ 101.882080][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.882191][ T5745] ? do_raw_spin_unlock+0x145/0x1e0 [ 101.882251][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.890629][ T5885] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 101.895848][ T5745] device_initial_probe+0xaf/0xd0 [ 101.939991][ T5745] bus_probe_device+0x64/0x160 [ 101.946561][ T5745] device_add+0x121d/0x1970 [ 101.951188][ T5745] ? __pfx_device_add+0x10/0x10 [ 101.956373][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.962757][ T5745] usb_set_configuration+0xd97/0x1c60 [ 101.968489][ T5745] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 101.974745][ T5745] usb_generic_driver_probe+0xa1/0xe0 [ 101.980229][ T5745] usb_probe_device+0xef/0x400 [ 101.985159][ T5745] ? __pfx_usb_probe_device+0x10/0x10 [ 101.990653][ T5745] really_probe+0x241/0xa60 [ 101.995314][ T5745] __driver_probe_device+0x20e/0x450 [ 102.000726][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.006363][ T5885] NFSD: starting 90-second grace period (net f000055a) [ 102.016236][ T5745] driver_probe_device+0x4a/0x140 [ 102.021391][ T5745] __device_attach_driver+0x1df/0x320 [ 102.027505][ T5745] ? __pfx___device_attach_driver+0x10/0x10 [ 102.033607][ T5745] bus_for_each_drv+0x159/0x1e0 [ 102.038575][ T5745] ? __pfx_bus_for_each_drv+0x10/0x10 [ 102.048342][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.054457][ T5745] ? lockdep_hardirqs_on+0x78/0x100 [ 102.059747][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.065524][ T5745] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 102.071418][ T5745] __device_attach+0x1e4/0x4d0 [ 102.077123][ T5745] ? __pfx___device_attach+0x10/0x10 [ 102.082541][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.088256][ T5745] ? do_raw_spin_unlock+0x145/0x1e0 [ 102.093595][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.099429][ T5745] device_initial_probe+0xaf/0xd0 [ 102.104600][ T5745] bus_probe_device+0x64/0x160 [ 102.109452][ T5745] device_add+0x121d/0x1970 [ 102.114094][ T5745] ? __pfx_device_add+0x10/0x10 [ 102.121786][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.127856][ T5745] ? add_device_randomness+0xc9/0x110 [ 102.133591][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.139316][ T5745] usb_new_device.cold+0x685/0x115c [ 102.144631][ T5745] ? _mutex_trylock_nest_lock+0x241/0x310 [ 102.150463][ T5745] ? do_raw_spin_lock+0x128/0x260 [ 102.155598][ T5745] ? __pfx_usb_new_device+0x10/0x10 [ 102.160906][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.166654][ T5745] ? mark_held_locks+0x40/0x70 [ 102.171536][ T5745] hub_event+0x30a3/0x4a60 [ 102.176111][ T5745] ? __pfx_hub_event+0x10/0x10 [ 102.181055][ T5745] ? debug_object_deactivate+0x2e4/0x3b0 [ 102.186868][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.192625][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.198344][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.205091][ T5745] ? rcu_is_watching+0x12/0xc0 [ 102.210358][ T5745] process_one_work+0xa23/0x1940 [ 102.215438][ T5745] ? __pfx_process_one_work+0x10/0x10 [ 102.223772][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.229525][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.235347][ T5745] worker_thread+0x5ef/0xe50 [ 102.240025][ T5745] ? kthread+0x13a/0x450 [ 102.244417][ T5745] ? __pfx_worker_thread+0x10/0x10 [ 102.249599][ T5745] kthread+0x370/0x450 [ 102.253813][ T5745] ? __pfx_kthread+0x10/0x10 [ 102.258574][ T5745] ret_from_fork+0x72b/0xd50 [ 102.263298][ T5745] ? __pfx_ret_from_fork+0x10/0x10 [ 102.268494][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.274230][ T5745] ? __switch_to+0x800/0x10f0 [ 102.279002][ T5745] ? __switch_to_asm+0x39/0x70 [ 102.284587][ T5745] ? __pfx_kthread+0x10/0x10 [ 102.289419][ T5745] ret_from_fork_asm+0x1a/0x30 [ 102.294319][ T5745] [ 102.297405][ T5745] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.304682][ T5745] CPU: 0 UID: 0 PID: 5745 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 102.314065][ T5745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 102.324141][ T5745] Workqueue: usb_hub_wq hub_event [ 102.329201][ T5745] Call Trace: [ 102.332478][ T5745] [ 102.335411][ T5745] dump_stack_lvl+0x100/0x190 [ 102.340104][ T5745] vpanic+0x552/0x970 [ 102.344095][ T5745] ? __pfx_vpanic+0x10/0x10 [ 102.348639][ T5745] panic+0xd1/0xe0 [ 102.352369][ T5745] ? __pfx_panic+0x10/0x10 [ 102.356820][ T5745] check_panic_on_warn.cold+0x19/0x34 [ 102.362234][ T5745] ? usb_submit_urb+0x1689/0x19b0 [ 102.367272][ T5745] __warn.cold+0x191/0x318 [ 102.371702][ T5745] __report_bug+0x30f/0x440 [ 102.376228][ T5745] ? usb_submit_urb+0x1689/0x19b0 [ 102.381271][ T5745] ? __pfx___report_bug+0x10/0x10 [ 102.386318][ T5745] ? bus_for_each_drv+0x159/0x1e0 [ 102.391368][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.397036][ T5745] report_bug_entry+0xe1/0x290 [ 102.401828][ T5745] ? usb_submit_urb+0x168c/0x19b0 [ 102.406879][ T5745] handle_bug+0x1cd/0x2a0 [ 102.411239][ T5745] exc_invalid_op+0x17/0x50 [ 102.415783][ T5745] asm_exc_invalid_op+0x1a/0x20 [ 102.420643][ T5745] RIP: 0010:usb_submit_urb+0x168c/0x19b0 [ 102.426291][ T5745] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 70 ff ff ff bb ed ff ff ff e9 ac f1 ff ff e8 3e 2c 8b fa 48 8d 3d 47 0a b1 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 8e f1 ff ff c7 44 24 30 00 00 00 [ 102.445911][ T5745] RSP: 0018:ffffc900046c6e38 EFLAGS: 00010287 [ 102.451990][ T5745] RAX: 00000000000261cf RBX: ffff888020eab900 RCX: ffffc9001dd2b000 [ 102.459977][ T5745] RDX: 0000000000100000 RSI: ffff888020eab900 RDI: ffffffff913031d0 [ 102.467958][ T5745] RBP: ffff88807c3b4868 R08: 0000000000000001 R09: 0000000000000000 [ 102.475932][ T5745] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807c3b4838 [ 102.483905][ T5745] R13: ffff88807c209b00 R14: ffff888055caac80 R15: ffff88807c3b4860 [ 102.491900][ T5745] ? usb_submit_urb+0x1682/0x19b0 [ 102.496943][ T5745] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 102.502518][ T5745] ? port100_send_cmd_async+0xba/0xc60 [ 102.508012][ T5745] port100_send_cmd_async+0x7f7/0xc60 [ 102.513423][ T5745] port100_probe+0xb4c/0x1190 [ 102.518130][ T5745] ? __pfx_port100_probe+0x10/0x10 [ 102.523273][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.528928][ T5745] ? _raw_spin_lock_irqsave+0x52/0x60 [ 102.534319][ T5745] ? find_held_lock+0x2b/0x80 [ 102.539041][ T5745] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 102.544866][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.550515][ T5745] ? __pm_runtime_set_status+0x13c/0x970 [ 102.556187][ T5745] usb_probe_interface+0x303/0x8f0 [ 102.561341][ T5745] ? __pfx_usb_probe_interface+0x10/0x10 [ 102.567057][ T5745] really_probe+0x241/0xa60 [ 102.571592][ T5745] __driver_probe_device+0x20e/0x450 [ 102.576902][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.582557][ T5745] driver_probe_device+0x4a/0x140 [ 102.587608][ T5745] __device_attach_driver+0x1df/0x320 [ 102.593007][ T5745] ? __pfx___device_attach_driver+0x10/0x10 [ 102.598926][ T5745] bus_for_each_drv+0x159/0x1e0 [ 102.603795][ T5745] ? __pfx_bus_for_each_drv+0x10/0x10 [ 102.609185][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.614835][ T5745] ? lockdep_hardirqs_on+0x78/0x100 [ 102.620058][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.625713][ T5745] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 102.631550][ T5745] __device_attach+0x1e4/0x4d0 [ 102.636353][ T5745] ? __pfx___device_attach+0x10/0x10 [ 102.641672][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.647325][ T5745] ? do_raw_spin_unlock+0x145/0x1e0 [ 102.652548][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.658227][ T5745] device_initial_probe+0xaf/0xd0 [ 102.663282][ T5745] bus_probe_device+0x64/0x160 [ 102.668069][ T5745] device_add+0x121d/0x1970 [ 102.672609][ T5745] ? __pfx_device_add+0x10/0x10 [ 102.677494][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.683155][ T5745] usb_set_configuration+0xd97/0x1c60 [ 102.688578][ T5745] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 102.694661][ T5745] usb_generic_driver_probe+0xa1/0xe0 [ 102.700052][ T5745] usb_probe_device+0xef/0x400 [ 102.704847][ T5745] ? __pfx_usb_probe_device+0x10/0x10 [ 102.710261][ T5745] really_probe+0x241/0xa60 [ 102.714797][ T5745] __driver_probe_device+0x20e/0x450 [ 102.720107][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.725761][ T5745] driver_probe_device+0x4a/0x140 [ 102.730815][ T5745] __device_attach_driver+0x1df/0x320 [ 102.736222][ T5745] ? __pfx___device_attach_driver+0x10/0x10 [ 102.742142][ T5745] bus_for_each_drv+0x159/0x1e0 [ 102.747012][ T5745] ? __pfx_bus_for_each_drv+0x10/0x10 [ 102.752406][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.758064][ T5745] ? lockdep_hardirqs_on+0x78/0x100 [ 102.763285][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.768964][ T5745] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 102.774796][ T5745] __device_attach+0x1e4/0x4d0 [ 102.779589][ T5745] ? __pfx___device_attach+0x10/0x10 [ 102.784903][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.790553][ T5745] ? do_raw_spin_unlock+0x145/0x1e0 [ 102.795777][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.801432][ T5745] device_initial_probe+0xaf/0xd0 [ 102.806494][ T5745] bus_probe_device+0x64/0x160 [ 102.811285][ T5745] device_add+0x121d/0x1970 [ 102.815827][ T5745] ? __pfx_device_add+0x10/0x10 [ 102.820710][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.826372][ T5745] ? add_device_randomness+0xc9/0x110 [ 102.831792][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.837459][ T5745] usb_new_device.cold+0x685/0x115c [ 102.842685][ T5745] ? _mutex_trylock_nest_lock+0x241/0x310 [ 102.848431][ T5745] ? do_raw_spin_lock+0x128/0x260 [ 102.853480][ T5745] ? __pfx_usb_new_device+0x10/0x10 [ 102.858709][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.864359][ T5745] ? mark_held_locks+0x40/0x70 [ 102.869151][ T5745] hub_event+0x30a3/0x4a60 [ 102.873634][ T5745] ? __pfx_hub_event+0x10/0x10 [ 102.878423][ T5745] ? debug_object_deactivate+0x2e4/0x3b0 [ 102.884090][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.889743][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.895401][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.901049][ T5745] ? rcu_is_watching+0x12/0xc0 [ 102.905852][ T5745] process_one_work+0xa23/0x1940 [ 102.910819][ T5745] ? __pfx_process_one_work+0x10/0x10 [ 102.916199][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.921862][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.927518][ T5745] worker_thread+0x5ef/0xe50 [ 102.932135][ T5745] ? kthread+0x13a/0x450 [ 102.936412][ T5745] ? __pfx_worker_thread+0x10/0x10 [ 102.941621][ T5745] kthread+0x370/0x450 [ 102.945730][ T5745] ? __pfx_kthread+0x10/0x10 [ 102.950356][ T5745] ret_from_fork+0x72b/0xd50 [ 102.954975][ T5745] ? __pfx_ret_from_fork+0x10/0x10 [ 102.960115][ T5745] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.965765][ T5745] ? __switch_to+0x800/0x10f0 [ 102.970473][ T5745] ? __switch_to_asm+0x39/0x70 [ 102.975259][ T5745] ? __pfx_kthread+0x10/0x10 [ 102.979884][ T5745] ret_from_fork_asm+0x1a/0x30 [ 102.984695][ T5745] [ 102.987929][ T5745] Kernel Offset: disabled [ 102.992246][ T5745] Rebooting in 86400 seconds..