last executing test programs: 2.877350027s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/cpuidle_haltpoll/parameters/force\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/256, 0x100) 2.787237869s ago: executing program 2 (id=5): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000031401002dbd7000000000000900020073797a30000000000800410073697700070033006c6f0000"], 0x2c}, 0x1, 0x0, 0x0, 0x854}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x1, 0x0) r2 = syz_io_uring_setup(0x4, &(0x7f0000000540), &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000040)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)='id_ext=0,ioc_guid=0,dest=127.0.0.1:3260\x00', 0x27}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000440)={0x0}, 0x106, 0x2}}, 0x20) write(r6, &(0x7f0000000480)="02000000280000fa000000000000000002000cbc7f00000100"/48, 0x30) write(r6, &(0x7f0000000500)="07000000080000fa0000000010000000", 0x10) write(r6, &(0x7f0000000540)="0c000000080000fa800500000000007f", 0x10) 1.914802042s ago: executing program 0 (id=1): unshare(0x40000000) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000600)={'lo\x00', 0x49}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000700)={'lo\x00', {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000800)={'lo\x00', {0x2, 0x0, @broadcast=0xff000000}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000640)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/nfsv4recoverydir\x00', 0x2, 0x0) write(r2, &(0x7f0000000840)='/tmp\n\x00', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r3, &(0x7f0000000140)='10\n\x00', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r4, &(0x7f00000001c0)='10\n\x00', 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r5, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r6, &(0x7f0000000240)='1\n\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r7, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r8, &(0x7f0000000340)='mydomain / 2147483647 9216 0 0 0\n\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) mount(&(0x7f00000003c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000400)='nfs4\x00', 0x0, &(0x7f0000000440)='nolock,addr=127.0.0.1\x00') openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/file\x00', 0x42, 0x1ff) 1.804670174s ago: executing program 2 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='raid1\x00', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='1:0\x00', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0) write(r3, &(0x7f0000000800)='0\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0) write(r4, &(0x7f0000000a00)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/block/md0/md/component_size\x00', 0x2, 0x0) write(r5, &(0x7f0000000c00)='4096\x00', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r6, &(0x7f0000000e00)='run\x00', 0x3) r7 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./sys/block/md0/md/serialize_policy\x00', 0x2, 0x0) write(r7, &(0x7f0000001000)='1\x00', 0x1) 1.725742396s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f00000044c0)='./file0\x00', 0x1ff) syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x0, &(0x7f00000047c0)=ANY=[@ANYBLOB='heartbeat=none\x00'], 0x1, 0x4705, &(0x7f0000004800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004700)='./file1\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x0, 0x2000000) 1.631138059s ago: executing program 3 (id=4): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff0000000705010200020007058202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x40, 0x1, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)={0x40, 0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000400)={0x40, 0x51, 0x8, "0102030405060708"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)={0x40, 0x54, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000600)={0x40, 0x56, 0x7d, "00ffffffffffff0004430100000000000000010480000000010000000000000000000000000001010101010101010101010101010101000000fd00324b1e53110200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.433147374s ago: executing program 2 (id=7): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="000000000000000200000008ffffffff000000010123456789abcdef0123456789abcdef", 0x24, r1) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000140)='syz \x00', 0x5) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x34, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @empty}}, 0x24) listen(r0, 0xa) r2 = socket$rxrpc(0x21, 0x2, 0xa) add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)="000000000000000200000008ffffffff000000010123456789abcdef0123456789abcdef", 0x24, 0xfffffffffffffffe) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000340)='syz \x00', 0x5) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x34, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @empty}}, 0x24) sendto$rxrpc(r2, &(0x7f0000000400)='hello', 0x5, 0x0, 0x0, 0x0) 1.283854998s ago: executing program 2 (id=8): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x1d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="00221d0000000600ff0901a1010901150026ff007508954081020901750895409102c0"], 0x0}, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="20014000"/70], 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="00221d0000000600ff0901a1010901150026ff007508954081020901750895409102c0"], 0x0}, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="20014000"/70], 0x0}) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="fe03") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0399") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="039a") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="034f") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="034f") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0200") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0340") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0200") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0344") nanosleep(&(0x7f0000000300)={0x0, 0x3b9aca00}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon0/curr2_input\x00', 0x0, 0x0) read(r1, &(0x7f0000000600)=""/64, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/hwmon/hwmon1/curr2_input\x00', 0x0, 0x0) read(r2, &(0x7f0000000600)=""/64, 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/hwmon/hwmon2/curr2_input\x00', 0x0, 0x0) read(r3, &(0x7f0000000600)=""/64, 0x40) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/class/hwmon/hwmon3/curr2_input\x00', 0x0, 0x0) read(r4, &(0x7f0000000600)=""/64, 0x40) 819.57696ms ago: executing program 1 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000402a1101000001010203010902270001010080fa0904000003ffffff00070581024000000705820240000007050302400000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/lirc0\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0100000002000000", 0x8) 0s ago: executing program 0 (id=10): r0 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cc1769190001010203010902450001010080320904000002ffffff0007058102400001070501024000010904000104ffffff0007058102400001070501024000010705820140000107050601400001"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000100)="010000000000000004040000000000") nanosleep(&(0x7f0000000200)={0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.8' (ED25519) to the list of known hosts. [ 72.968292][ T5765] cgroup: Unknown subsys name 'net' [ 73.105857][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.443508][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.819378][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.827837][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.835637][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.843698][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.854190][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.862259][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.879494][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.887912][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.898384][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.922088][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.930065][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.930476][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.944575][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.945216][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.961632][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.969685][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.977328][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.984708][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.000108][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.010955][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.018332][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.019388][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.032903][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.033417][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.445907][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 76.486970][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 76.536414][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 76.630558][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 76.661403][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.669284][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.676581][ T5780] bridge_slave_0: entered allmulticast mode [ 76.684492][ T5780] bridge_slave_0: entered promiscuous mode [ 76.699103][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.706266][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.713780][ T5780] bridge_slave_1: entered allmulticast mode [ 76.721473][ T5780] bridge_slave_1: entered promiscuous mode [ 76.757834][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.765266][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.773172][ T5786] bridge_slave_0: entered allmulticast mode [ 76.780700][ T5786] bridge_slave_0: entered promiscuous mode [ 76.823194][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.830491][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.837630][ T5786] bridge_slave_1: entered allmulticast mode [ 76.844606][ T5786] bridge_slave_1: entered promiscuous mode [ 76.863634][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.886288][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.893503][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.900980][ T5776] bridge_slave_0: entered allmulticast mode [ 76.907624][ T5776] bridge_slave_0: entered promiscuous mode [ 76.915356][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.922566][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.929975][ T5776] bridge_slave_1: entered allmulticast mode [ 76.936630][ T5776] bridge_slave_1: entered promiscuous mode [ 76.945136][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.975382][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.008323][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.055385][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.068086][ T5780] team0: Port device team_slave_0 added [ 77.096550][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.107300][ T5780] team0: Port device team_slave_1 added [ 77.115719][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.123147][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.130676][ T5779] bridge_slave_0: entered allmulticast mode [ 77.137409][ T5779] bridge_slave_0: entered promiscuous mode [ 77.145039][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.152252][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.159617][ T5779] bridge_slave_1: entered allmulticast mode [ 77.166322][ T5779] bridge_slave_1: entered promiscuous mode [ 77.175529][ T5786] team0: Port device team_slave_0 added [ 77.184032][ T5786] team0: Port device team_slave_1 added [ 77.254821][ T5776] team0: Port device team_slave_0 added [ 77.262050][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.269247][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.295263][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.318530][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.327406][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.356009][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.368149][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.375420][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.401386][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.414033][ T5776] team0: Port device team_slave_1 added [ 77.424586][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.436142][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.453940][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.463163][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.489920][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.575358][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.582666][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.609043][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.621727][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.628697][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.654723][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.677453][ T5780] hsr_slave_0: entered promiscuous mode [ 77.684349][ T5780] hsr_slave_1: entered promiscuous mode [ 77.702647][ T5779] team0: Port device team_slave_0 added [ 77.744217][ T5779] team0: Port device team_slave_1 added [ 77.823557][ T5776] hsr_slave_0: entered promiscuous mode [ 77.830091][ T5776] hsr_slave_1: entered promiscuous mode [ 77.836253][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.844295][ T5776] Cannot create hsr debugfs directory [ 77.855805][ T5786] hsr_slave_0: entered promiscuous mode [ 77.863508][ T5786] hsr_slave_1: entered promiscuous mode [ 77.870495][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.878115][ T5786] Cannot create hsr debugfs directory [ 77.885605][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.895144][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.923703][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.968375][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.976505][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.002816][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.053108][ T5783] Bluetooth: hci0: command tx timeout [ 78.053121][ T5782] Bluetooth: hci3: command tx timeout [ 78.087810][ T5779] hsr_slave_0: entered promiscuous mode [ 78.094726][ T5779] hsr_slave_1: entered promiscuous mode [ 78.101785][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.109684][ T5779] Cannot create hsr debugfs directory [ 78.128868][ T5783] Bluetooth: hci1: command tx timeout [ 78.134655][ T5783] Bluetooth: hci2: command tx timeout [ 78.368175][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.404146][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.424938][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.435981][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.513907][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.543060][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.555582][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.580396][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.636864][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.665871][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.692470][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.703306][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.762103][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.775821][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.785454][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.795393][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.836315][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.893479][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.917042][ T2929] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.924476][ T2929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.941447][ T2929] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.948606][ T2929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.024298][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.099938][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.116615][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.136107][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.143326][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.194325][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.201563][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.221991][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.253696][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.260928][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.285005][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.329959][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.337128][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.357818][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.402249][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.409495][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.421757][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.428970][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.477961][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.663082][ T5780] veth0_vlan: entered promiscuous mode [ 79.704271][ T5780] veth1_vlan: entered promiscuous mode [ 79.788233][ T5780] veth0_macvtap: entered promiscuous mode [ 79.832376][ T5780] veth1_macvtap: entered promiscuous mode [ 79.896792][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.912679][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.962578][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.984482][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.994357][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.003208][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.013345][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.032236][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.078957][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.106405][ T5776] veth0_vlan: entered promiscuous mode [ 80.129421][ T5783] Bluetooth: hci3: command tx timeout [ 80.129954][ T5782] Bluetooth: hci0: command tx timeout [ 80.171664][ T5776] veth1_vlan: entered promiscuous mode [ 80.209034][ T5782] Bluetooth: hci1: command tx timeout [ 80.209777][ T5783] Bluetooth: hci2: command tx timeout [ 80.228832][ T5786] veth0_vlan: entered promiscuous mode [ 80.273746][ T5779] veth0_vlan: entered promiscuous mode [ 80.284336][ T5786] veth1_vlan: entered promiscuous mode [ 80.306244][ T5779] veth1_vlan: entered promiscuous mode [ 80.320525][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.334359][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.391380][ T5776] veth0_macvtap: entered promiscuous mode [ 80.404021][ T2981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.405113][ T5786] veth0_macvtap: entered promiscuous mode [ 80.419551][ T2981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.444241][ T5786] veth1_macvtap: entered promiscuous mode [ 80.469797][ T5776] veth1_macvtap: entered promiscuous mode [ 80.493124][ T5779] veth0_macvtap: entered promiscuous mode [ 80.526111][ T5779] veth1_macvtap: entered promiscuous mode [ 80.550756][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.566508][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.578372][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.604541][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.622553][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.632618][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.644075][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.658552][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.684501][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.715701][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.738556][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.761293][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.793907][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.804381][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.817784][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.830351][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.838998][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.852450][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.862547][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.874928][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.886300][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.896883][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.910745][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.926567][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.937932][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.948425][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.959524][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.969629][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.980341][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.993562][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.003417][ T5843] lo speed is unknown, defaulting to 1000 [ 81.006363][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.018177][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.030388][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.040938][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.055021][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.064547][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.073841][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.084863][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.098285][ T5843] lo speed is unknown, defaulting to 1000 [ 81.105036][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.114445][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.123522][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.132464][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.160370][ T5843] lo speed is unknown, defaulting to 1000 [ 81.175580][ T5843] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 81.253717][ T5843] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 81.324936][ T5843] lo speed is unknown, defaulting to 1000 [ 81.338629][ T5843] lo speed is unknown, defaulting to 1000 [ 81.344884][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.355359][ T5843] lo speed is unknown, defaulting to 1000 [ 81.361558][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.386698][ T5843] lo speed is unknown, defaulting to 1000 [ 81.400614][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.410684][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.447136][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.469103][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.487408][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.508003][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.556250][ T3460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.578172][ T3460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.669177][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.683093][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.846452][ T5848] lo speed is unknown, defaulting to 1000 [ 81.919322][ T5853] syz.1.2[5853]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 82.044526][ T5851] md: serialize_policy is only effective for raid1 [ 82.211342][ T5783] Bluetooth: hci0: command tx timeout [ 82.216974][ T5778] Bluetooth: hci3: command tx timeout [ 82.289656][ T5818] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.299940][ T5778] Bluetooth: hci1: command tx timeout [ 82.299947][ T5783] Bluetooth: hci2: command tx timeout [ 82.428354][ T5853] loop1: detected capacity change from 0 to 32768 [ 82.467026][ T5853] JBD2: Ignoring recovery information on journal [ 82.512971][ T5818] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 82.514737][ T5853] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 82.556202][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.643568][ T5787] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.742153][ T5776] ocfs2: Unmounting device (7,1) on (node local) [ 82.830802][ T5787] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 82.840348][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.282470][ T5787] corsair-psu 0003:1B1C:1C03.0001: hidraw0: USB HID v1.11 Device [HID 1b1c:1c03] on usb-dummy_hcd.2-1/input0 [ 83.296624][ T5835] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.349085][ T5856] NFSD: attempt to initialize umh client tracking in a container ignored. [ 83.361490][ T5856] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 83.370516][ T5856] NFSD: Unable to initialize client recovery tracking! (-22) [ 83.378613][ T5856] NFSD: starting 10-second grace period (net f00004e5) [ 83.445487][ T5818] gud 4-1:1.0: Failed to get connectors (error=-5) [ 83.452611][ T5818] gud: probe of 4-1:1.0 failed with error -5 [ 83.506296][ T5835] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 83.519392][ T5835] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 83.532255][ T5835] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 83.546366][ T5835] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00 [ 83.555812][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.564285][ T5835] usb 2-1: Product: syz [ 83.568657][ T5835] usb 2-1: Manufacturer: syz [ 83.589286][ T5835] usb 2-1: SerialNumber: syz [ 83.604485][ T5870] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 83.616182][ T5870] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 83.623775][ T5870] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 83.664926][ C1] corsair-psu 0003:1B1C:1C03.0001: Event data for report 0 was too short (64 vs 2) [ 83.868884][ T5818] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 84.052527][ T5818] usb 1-1: not running at top speed; connect to a high speed hub [ 84.064798][ T5818] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 84.074149][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.076505][ C1] corsair-psu 0003:1B1C:1C03.0001: Event data for report 0 was too short (64 vs 2) [ 84.082582][ T5818] usb 1-1: Product: syz [ 84.096009][ T5818] usb 1-1: Manufacturer: syz [ 84.100695][ T5818] usb 1-1: SerialNumber: syz [ 84.289016][ T5778] Bluetooth: hci3: command tx timeout [ 84.290049][ T5783] Bluetooth: hci0: command tx timeout [ 84.369598][ T5783] Bluetooth: hci1: command tx timeout [ 84.370312][ T5778] Bluetooth: hci2: command tx timeout [ 84.486298][ C1] corsair-psu 0003:1B1C:1C03.0001: Event data for report 0 was too short (64 vs 2) [ 84.529166][ C0] usb 1-1: received EP1 urb->status = -2 [ 84.534918][ T5818] usb 1-1: unable to init card! (ret=-110) [ 84.542593][ T5818] snd-usb-caiaq: probe of 1-1:1.0 failed with error -110 [ 84.850968][ T5835] redrat3 2-1:1.0: Problem fetching firmware ID [ 84.864244][ T5835] redrat3 2-1:1.0: Failed to read timeout from hardware [ 84.888639][ C1] corsair-psu 0003:1B1C:1C03.0001: Event data for report 0 was too short (64 vs 2) [ 84.959062][ T5835] rc_core: IR keymap rc-hauppauge not found [ 84.965059][ T5835] Registered IR keymap rc-empty [ 84.973849][ T5835] rc rc0: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/rc/rc0 [ 84.987768][ T5835] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/rc/rc0/input5 [ 85.006542][ T5835] redrat3 2-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 85.016927][ T5835] redrat3 2-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 85.025687][ T5835] redrat3 2-1:1.0: redrat3_enable_detector: detector status: -5, should be 1 [ 85.039536][ T5835] redrat3: probe of 2-1:1.0 failed with error -5 [ 85.058569][ T5142] ================================================================== [ 85.059110][ T5835] usb 2-1: USB disconnect, device number 2 [ 85.066657][ T5142] BUG: KASAN: slab-use-after-free in string+0x204/0x290 [ 85.079425][ T5142] Read of size 1 at addr ffff888146e5b760 by task udevd/5142 [ 85.086894][ T5142] [ 85.089252][ T5142] CPU: 0 PID: 5142 Comm: udevd Not tainted syzkaller #0 [ 85.096203][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.106299][ T5142] Call Trace: [ 85.109600][ T5142] [ 85.112546][ T5142] dump_stack_lvl+0x18c/0x250 [ 85.117248][ T5142] ? __lock_acquire+0x7d80/0x7d80 [ 85.122295][ T5142] ? show_regs_print_info+0x20/0x20 [ 85.127525][ T5142] ? load_image+0x420/0x420 [ 85.132051][ T5142] ? __virt_addr_valid+0x10c/0x380 [ 85.137167][ T5142] ? __virt_addr_valid+0x10c/0x380 [ 85.142301][ T5142] ? __virt_addr_valid+0x10c/0x380 [ 85.147422][ T5142] print_report+0xa8/0x210 [ 85.151840][ T5142] ? string+0x204/0x290 [ 85.156016][ T5142] kasan_report+0x117/0x150 [ 85.160525][ T5142] ? string+0x204/0x290 [ 85.164697][ T5142] string+0x204/0x290 [ 85.168696][ T5142] vsnprintf+0xf72/0x1ba0 [ 85.173035][ T5142] add_uevent_var+0x1d1/0x460 [ 85.177712][ T5142] ? vfs_read+0x486/0x990 [ 85.182057][ T5142] ? kobject_uevent_env+0x890/0x890 [ 85.187293][ T5142] rc_dev_uevent+0x15f/0x190 [ 85.191907][ T5142] dev_uevent+0x53a/0x7c0 [ 85.196260][ T5142] ? dev_uevent_name+0xa0/0xa0 [ 85.201058][ T5142] uevent_show+0x196/0x300 [ 85.205491][ T5142] dev_attr_show+0x54/0xc0 [ 85.209926][ T5142] sysfs_kf_seq_show+0x34d/0x4c0 [ 85.214858][ T5142] ? device_get_ownership+0xb0/0xb0 [ 85.220066][ T5142] seq_read_iter+0x464/0xc50 [ 85.224662][ T5142] ? common_file_perm+0x198/0x1f0 [ 85.229694][ T5142] vfs_read+0x486/0x990 [ 85.233897][ T5142] ? kernel_read+0x1e0/0x1e0 [ 85.238502][ T5142] ? __x64_sys_newfstat+0x1c4/0x250 [ 85.243748][ T5142] ? do_sys_openat2+0x170/0x1d0 [ 85.248657][ T5142] ? __fdget_pos+0x2ba/0x330 [ 85.253267][ T5142] ksys_read+0x151/0x260 [ 85.257521][ T5142] ? vfs_write+0x9a0/0x9a0 [ 85.261948][ T5142] ? lockdep_hardirqs_on+0x98/0x150 [ 85.267151][ T5142] do_syscall_64+0x55/0xb0 [ 85.272101][ T5142] ? clear_bhb_loop+0x40/0x90 [ 85.276799][ T5142] ? clear_bhb_loop+0x40/0x90 [ 85.281497][ T5142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.287503][ T5142] RIP: 0033:0x7fb59cea7407 [ 85.291929][ T5142] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 85.296674][ C1] corsair-psu 0003:1B1C:1C03.0001: Event data for report 0 was too short (64 vs 2) [ 85.311522][ T5142] RSP: 002b:00007ffe05319520 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 85.329314][ T5142] RAX: ffffffffffffffda RBX: 00007fb59d57d880 RCX: 00007fb59cea7407 [ 85.337318][ T5142] RDX: 0000000000001000 RSI: 0000556a6cdee550 RDI: 000000000000000c [ 85.345299][ T5142] RBP: 00007fb59cfefff0 R08: 0000000000000000 R09: 0000000000000000 [ 85.353277][ T5142] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 85.361259][ T5142] R13: 00007fb59cfefea0 R14: 0000000000000000 R15: 0000556a6cded9e0 [ 85.369251][ T5142] [ 85.372276][ T5142] [ 85.374601][ T5142] Allocated by task 5835: [ 85.378924][ T5142] kasan_set_track+0x4e/0x70 [ 85.383528][ T5142] __kasan_kmalloc+0x8f/0xa0 [ 85.388108][ T5142] redrat3_dev_probe+0x3f9/0x23d0 [ 85.393169][ T5142] usb_probe_interface+0x5c2/0xaf0 [ 85.398299][ T5142] really_probe+0x247/0xae0 [ 85.402811][ T5142] __driver_probe_device+0x1f5/0x390 [ 85.408102][ T5142] driver_probe_device+0x4f/0x420 [ 85.413130][ T5142] __device_attach_driver+0x2ca/0x510 [ 85.418509][ T5142] bus_for_each_drv+0x252/0x2e0 [ 85.423381][ T5142] __device_attach+0x2c1/0x420 [ 85.428147][ T5142] bus_probe_device+0x180/0x260 [ 85.433101][ T5142] device_add+0x87c/0xc40 [ 85.437446][ T5142] usb_set_configuration+0x1ad0/0x2150 [ 85.442915][ T5142] usb_generic_driver_probe+0x8d/0x150 [ 85.448390][ T5142] usb_probe_device+0x12a/0x260 [ 85.453253][ T5142] really_probe+0x247/0xae0 [ 85.457762][ T5142] __driver_probe_device+0x1f5/0x390 [ 85.463059][ T5142] driver_probe_device+0x4f/0x420 [ 85.468085][ T5142] __device_attach_driver+0x2ca/0x510 [ 85.473468][ T5142] bus_for_each_drv+0x252/0x2e0 [ 85.478324][ T5142] __device_attach+0x2c1/0x420 [ 85.483100][ T5142] bus_probe_device+0x180/0x260 [ 85.487957][ T5142] device_add+0x87c/0xc40 [ 85.492312][ T5142] usb_new_device+0x995/0x1550 [ 85.497071][ T5142] hub_event+0x29d5/0x4a80 [ 85.501590][ T5142] process_scheduled_works+0xa60/0x1600 [ 85.507150][ T5142] worker_thread+0xa5e/0xfe0 [ 85.511757][ T5142] kthread+0x2fa/0x390 [ 85.515857][ T5142] ret_from_fork+0x48/0x80 [ 85.520371][ T5142] ret_from_fork_asm+0x11/0x20 [ 85.525145][ T5142] [ 85.527453][ T5142] Freed by task 5835: [ 85.531422][ T5142] kasan_set_track+0x4e/0x70 [ 85.536016][ T5142] kasan_save_free_info+0x28/0x40 [ 85.541041][ T5142] ____kasan_slab_free+0x126/0x1f0 [ 85.546140][ T5142] slab_free_freelist_hook+0x130/0x1a0 [ 85.551599][ T5142] __kmem_cache_free+0xba/0x1f0 [ 85.556478][ T5142] redrat3_dev_probe+0x1b73/0x23d0 [ 85.561602][ T5142] usb_probe_interface+0x5c2/0xaf0 [ 85.566725][ T5142] really_probe+0x247/0xae0 [ 85.571233][ T5142] __driver_probe_device+0x1f5/0x390 [ 85.576529][ T5142] driver_probe_device+0x4f/0x420 [ 85.581566][ T5142] __device_attach_driver+0x2ca/0x510 [ 85.586953][ T5142] bus_for_each_drv+0x252/0x2e0 [ 85.591810][ T5142] __device_attach+0x2c1/0x420 [ 85.596592][ T5142] bus_probe_device+0x180/0x260 [ 85.601463][ T5142] device_add+0x87c/0xc40 [ 85.605799][ T5142] usb_set_configuration+0x1ad0/0x2150 [ 85.611257][ T5142] usb_generic_driver_probe+0x8d/0x150 [ 85.616716][ T5142] usb_probe_device+0x12a/0x260 [ 85.621576][ T5142] really_probe+0x247/0xae0 [ 85.626087][ T5142] __driver_probe_device+0x1f5/0x390 [ 85.631373][ T5142] driver_probe_device+0x4f/0x420 [ 85.636414][ T5142] __device_attach_driver+0x2ca/0x510 [ 85.641798][ T5142] bus_for_each_drv+0x252/0x2e0 [ 85.646649][ T5142] __device_attach+0x2c1/0x420 [ 85.651403][ T5142] bus_probe_device+0x180/0x260 [ 85.656252][ T5142] device_add+0x87c/0xc40 [ 85.660587][ T5142] usb_new_device+0x995/0x1550 [ 85.665342][ T5142] hub_event+0x29d5/0x4a80 [ 85.669753][ T5142] process_scheduled_works+0xa60/0x1600 [ 85.675313][ T5142] worker_thread+0xa5e/0xfe0 [ 85.679904][ T5142] kthread+0x2fa/0x390 [ 85.683975][ T5142] ret_from_fork+0x48/0x80 [ 85.688394][ T5142] ret_from_fork_asm+0x11/0x20 [ 85.693165][ T5142] [ 85.695497][ T5142] The buggy address belongs to the object at ffff888146e5b000 [ 85.695497][ T5142] which belongs to the cache kmalloc-2k of size 2048 [ 85.709559][ T5142] The buggy address is located 1888 bytes inside of [ 85.709559][ T5142] freed 2048-byte region [ffff888146e5b000, ffff888146e5b800) [ 85.713331][ C1] corsair-psu 0003:1B1C:1C03.0001: Event data for report 0 was too short (64 vs 2) [ 85.723509][ T5142] [ 85.723518][ T5142] The buggy address belongs to the physical page: [ 85.723538][ T5142] page:ffffea00051b9600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x146e58 [ 85.751756][ T5142] head:ffffea00051b9600 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 85.760724][ T5142] anon flags: 0x57ff00000000840(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 85.769229][ T5142] page_type: 0xffffffff() [ 85.773566][ T5142] raw: 057ff00000000840 ffff888017c42000 0000000000000000 dead000000000001 [ 85.782143][ T5142] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 85.790719][ T5142] page dumped because: kasan: bad access detected [ 85.797140][ T5142] page_owner tracks the page as allocated [ 85.802843][ T5142] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2727804100, free_ts 0 [ 85.822458][ T5142] post_alloc_hook+0x1c1/0x200 [ 85.827244][ T5142] get_page_from_freelist+0x2181/0x22a0 [ 85.832803][ T5142] __alloc_pages+0x1f0/0x460 [ 85.837403][ T5142] alloc_page_interleave+0x24/0x1e0 [ 85.842622][ T5142] alloc_slab_page+0x5d/0x180 [ 85.847325][ T5142] new_slab+0x87/0x2d0 [ 85.851390][ T5142] ___slab_alloc+0xc5c/0x12f0 [ 85.856072][ T5142] __kmem_cache_alloc_node+0x11f/0x250 [ 85.861535][ T5142] kmalloc_trace+0x2a/0xe0 [ 85.865958][ T5142] acpi_ds_create_walk_state+0xe6/0x280 [ 85.871490][ T5142] acpi_ds_execute_arguments+0x1f4/0x2c0 [ 85.877118][ T5142] acpi_ns_init_one_object+0x1c1/0x3e0 [ 85.882591][ T5142] acpi_ns_walk_namespace+0x223/0x6b0 [ 85.887974][ T5142] acpi_walk_namespace+0xe8/0x130 [ 85.893007][ T5142] acpi_ns_initialize_objects+0xc6/0x150 [ 85.898636][ T5142] acpi_load_tables+0x95/0x100 [ 85.903410][ T5142] page_owner free stack trace missing [ 85.908774][ T5142] [ 85.911099][ T5142] Memory state around the buggy address: [ 85.916746][ T5142] ffff888146e5b600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.924823][ T5142] ffff888146e5b680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.932905][ T5142] >ffff888146e5b700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.940962][ T5142] ^ [ 85.948153][ T5142] ffff888146e5b780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.956236][ T5142] ffff888146e5b800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 85.964303][ T5142] ================================================================== [ 85.994299][ T5142] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 86.001545][ T5142] CPU: 0 PID: 5142 Comm: udevd Not tainted syzkaller #0 [ 86.008502][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.018574][ T5142] Call Trace: [ 86.021874][ T5142] [ 86.024829][ T5142] dump_stack_lvl+0x18c/0x250 [ 86.029530][ T5142] ? show_regs_print_info+0x20/0x20 [ 86.034874][ T5142] ? load_image+0x420/0x420 [ 86.039405][ T5142] panic+0x2ca/0x720 [ 86.041189][ T23] usb 4-1: USB disconnect, device number 2 [ 86.049117][ T5142] ? bpf_jit_dump+0xd0/0xd0 [ 86.053648][ T5142] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 86.059659][ T5142] ? _raw_spin_unlock+0x40/0x40 [ 86.064538][ T5142] ? print_memory_metadata+0x314/0x400 [ 86.070017][ T5142] ? string+0x204/0x290 [ 86.074199][ T5142] check_panic_on_warn+0x84/0xa0 [ 86.079170][ T5142] ? string+0x204/0x290 [ 86.083336][ T5142] end_report+0x6f/0x130 [ 86.087580][ T5142] kasan_report+0x128/0x150 [ 86.092087][ T5142] ? string+0x204/0x290 [ 86.096235][ T5142] string+0x204/0x290 [ 86.100224][ T5142] vsnprintf+0xf72/0x1ba0 [ 86.104667][ T5142] add_uevent_var+0x1d1/0x460 [ 86.109371][ T5142] ? vfs_read+0x486/0x990 [ 86.113698][ T5142] ? kobject_uevent_env+0x890/0x890 [ 86.118895][ T5142] rc_dev_uevent+0x15f/0x190 [ 86.123477][ T5142] dev_uevent+0x53a/0x7c0 [ 86.127802][ T5142] ? dev_uevent_name+0xa0/0xa0 [ 86.132566][ T5142] uevent_show+0x196/0x300 [ 86.136974][ T5142] dev_attr_show+0x54/0xc0 [ 86.141386][ T5142] sysfs_kf_seq_show+0x34d/0x4c0 [ 86.146311][ T5142] ? device_get_ownership+0xb0/0xb0 [ 86.151517][ T5142] seq_read_iter+0x464/0xc50 [ 86.156124][ T5142] ? common_file_perm+0x198/0x1f0 [ 86.161145][ T5142] vfs_read+0x486/0x990 [ 86.165307][ T5142] ? kernel_read+0x1e0/0x1e0 [ 86.169889][ T5142] ? __x64_sys_newfstat+0x1c4/0x250 [ 86.175084][ T5142] ? do_sys_openat2+0x170/0x1d0 [ 86.179930][ T5142] ? __fdget_pos+0x2ba/0x330 [ 86.184515][ T5142] ksys_read+0x151/0x260 [ 86.188762][ T5142] ? vfs_write+0x9a0/0x9a0 [ 86.193183][ T5142] ? lockdep_hardirqs_on+0x98/0x150 [ 86.198372][ T5142] do_syscall_64+0x55/0xb0 [ 86.202775][ T5142] ? clear_bhb_loop+0x40/0x90 [ 86.207445][ T5142] ? clear_bhb_loop+0x40/0x90 [ 86.212110][ T5142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.217989][ T5142] RIP: 0033:0x7fb59cea7407 [ 86.222391][ T5142] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 86.242001][ T5142] RSP: 002b:00007ffe05319520 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 86.250428][ T5142] RAX: ffffffffffffffda RBX: 00007fb59d57d880 RCX: 00007fb59cea7407 [ 86.258413][ T5142] RDX: 0000000000001000 RSI: 0000556a6cdee550 RDI: 000000000000000c [ 86.266381][ T5142] RBP: 00007fb59cfefff0 R08: 0000000000000000 R09: 0000000000000000 [ 86.274343][ T5142] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 86.282304][ T5142] R13: 00007fb59cfefea0 R14: 0000000000000000 R15: 0000556a6cded9e0 [ 86.290277][ T5142] [ 86.293582][ T5142] Kernel Offset: disabled [ 86.297901][ T5142] Rebooting in 86400 seconds..