last executing test programs: 4.435519548s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@quota}, {@usrquota}, {@grpquota}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/f1\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x0, 0x10000) pwrite64(r0, &(0x7f0000000200)='hello world', 0xb, 0x0) fsync(r0) 4.163726479s ago: executing program 3 (id=6): syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040720c0d0000000000000109022000010100803209040000040000000007050102000200070581020002000705020200020007058202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000400)={'vcan0\x00', &(0x7f0000000500)=@ethtool_ts_info}) 3.854327976s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/power/mem_sleep\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='s2idle\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/power/pm_test\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='devices\n\x00', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/power/state\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='freeze\n\x00', 0x7) close(r2) 3.302193228s ago: executing program 1 (id=2): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x187f, 0x200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x0, 0x80, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}]}}]}}]}}, 0x0) nanosleep(&(0x7f0000000100)={0x3}, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000200), 0x0, 0x2) ioctl$FE_GET_INFO(r0, 0x80a86f3d, &(0x7f0000000300)) r1 = syz_open_dev$media(&(0x7f0000000400), 0x0, 0x2) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0x80807c00, &(0x7f0000000500)) 3.084172464s ago: executing program 2 (id=3): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_tracing={0x1a, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r0, 0x0, 0x1c, 0x0, @void}, 0x40) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r1}, 0x8) read(r2, &(0x7f00000002c0)=""/256, 0x100) 2.888302313s ago: executing program 2 (id=7): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f00000000c0)="01010101", 0x4) read(r0, &(0x7f0000000100)=""/4, 0x4) close(r0) r1 = socket(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x123, 0x234, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) mkdir(&(0x7f0000000200)='infiniband\x00', 0x1ff) mknod(&(0x7f0000000240)='infiniband/uverbs0\x00', 0x81b6, 0xe7c0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='infiniband/uverbs0\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='\x00'/100, 0x64) 2.155470704s ago: executing program 4 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/dvb_as102/parameters/fw_upload\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0', 0x1) syz_usb_connect(0x0, 0x32, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904000002ff0000000705010200020007058202000200"], 0x0) nanosleep(&(0x7f0000000500)={0x1}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000840), 0x1, 0x800) 2.119172252s ago: executing program 3 (id=8): syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000404319552201000000000109021900010100803209040000010000000007058102000200"], 0x0) nanosleep(&(0x7f0000000300)={0x3}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000100)) 135.919356ms ago: executing program 1 (id=9): syz_usb_connect(0x3, 0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c057d08000100000001090230000101008032090400000208065000070581020002000705020200020009040001010806620007058302000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_open_dev$usbfs(&(0x7f0000000400), 0x15, 0x2) 0s ago: executing program 2 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./trace\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/events/kvm/kvm_hv_synic_set_irq/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./trace/events/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1\n', 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.4' (ED25519) to the list of known hosts. [ 75.729582][ T5602] cgroup: Unknown subsys name 'net' [ 75.820510][ T5602] cgroup: Unknown subsys name 'cpuset' [ 75.830692][ T5602] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.405373][ T5602] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.859269][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.868361][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.876379][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.877381][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.892280][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.894654][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.901425][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.903890][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.908981][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.910848][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.912623][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.916077][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.922562][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.957359][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.968669][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.014421][ T5614] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.022718][ T5614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.032697][ T5614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.040823][ T5614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.049876][ T5614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.103738][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.115079][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.127890][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.139178][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.148593][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.845932][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.855182][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.862588][ T5612] bridge_slave_0: entered allmulticast mode [ 81.870699][ T5612] bridge_slave_0: entered promiscuous mode [ 81.914961][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.915225][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.915537][ T5612] bridge_slave_1: entered allmulticast mode [ 81.920716][ T5612] bridge_slave_1: entered promiscuous mode [ 81.939230][ T52] Bluetooth: hci1: command tx timeout [ 81.956326][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.956855][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.960819][ T5613] bridge_slave_0: entered allmulticast mode [ 81.964319][ T5613] bridge_slave_0: entered promiscuous mode [ 82.026854][ T5614] Bluetooth: hci2: command tx timeout [ 82.027528][ T52] Bluetooth: hci0: command tx timeout [ 82.032838][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.033079][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.033405][ T5613] bridge_slave_1: entered allmulticast mode [ 82.039780][ T5613] bridge_slave_1: entered promiscuous mode [ 82.089914][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.090127][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.091228][ T5629] bridge_slave_0: entered allmulticast mode [ 82.095869][ T5629] bridge_slave_0: entered promiscuous mode [ 82.097188][ T52] Bluetooth: hci3: command tx timeout [ 82.137533][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.155352][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.156902][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.157249][ T5629] bridge_slave_1: entered allmulticast mode [ 82.162192][ T5629] bridge_slave_1: entered promiscuous mode [ 82.182351][ T52] Bluetooth: hci4: command tx timeout [ 82.202089][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.203116][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.203398][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.203824][ T5623] bridge_slave_0: entered allmulticast mode [ 82.209669][ T5623] bridge_slave_0: entered promiscuous mode [ 82.217407][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.217689][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.217965][ T5623] bridge_slave_1: entered allmulticast mode [ 82.220125][ T5623] bridge_slave_1: entered promiscuous mode [ 82.268570][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.315773][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.366525][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.397073][ T5612] team0: Port device team_slave_0 added [ 82.404112][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.413139][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.420512][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.428903][ T5613] team0: Port device team_slave_0 added [ 82.430300][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.430575][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.430879][ T5617] bridge_slave_0: entered allmulticast mode [ 82.433567][ T5617] bridge_slave_0: entered promiscuous mode [ 82.464073][ T5612] team0: Port device team_slave_1 added [ 82.491777][ T5613] team0: Port device team_slave_1 added [ 82.505750][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.506062][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.506429][ T5617] bridge_slave_1: entered allmulticast mode [ 82.512590][ T5617] bridge_slave_1: entered promiscuous mode [ 82.606815][ T5629] team0: Port device team_slave_0 added [ 82.613169][ T5629] team0: Port device team_slave_1 added [ 82.619920][ T5623] team0: Port device team_slave_0 added [ 82.625838][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.626431][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.626488][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.646959][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.651179][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.651226][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.651288][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.724117][ T5623] team0: Port device team_slave_1 added [ 82.726584][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.726624][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.727558][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.761552][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.769378][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.769418][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.769488][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.872915][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.872962][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.872991][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.935059][ T5613] hsr_slave_0: entered promiscuous mode [ 82.939268][ T5613] hsr_slave_1: entered promiscuous mode [ 82.948073][ T5617] team0: Port device team_slave_0 added [ 82.953391][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.953438][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.953508][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.962274][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.962311][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.962375][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.981911][ T5617] team0: Port device team_slave_1 added [ 83.047748][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.047796][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.047841][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.162958][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.165519][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.165604][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.221513][ T5612] hsr_slave_0: entered promiscuous mode [ 83.224120][ T5612] hsr_slave_1: entered promiscuous mode [ 83.226029][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 83.226228][ T5612] Cannot create hsr debugfs directory [ 83.231804][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.231844][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.231911][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.349043][ T5623] hsr_slave_0: entered promiscuous mode [ 83.351691][ T5623] hsr_slave_1: entered promiscuous mode [ 83.353624][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 83.353668][ T5623] Cannot create hsr debugfs directory [ 83.383742][ T5629] hsr_slave_0: entered promiscuous mode [ 83.386466][ T5629] hsr_slave_1: entered promiscuous mode [ 83.389802][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 83.389863][ T5629] Cannot create hsr debugfs directory [ 83.485144][ T5617] hsr_slave_0: entered promiscuous mode [ 83.489064][ T5617] hsr_slave_1: entered promiscuous mode [ 83.490839][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 83.490857][ T5617] Cannot create hsr debugfs directory [ 83.815806][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.831904][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.874175][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.883612][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.915584][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.926443][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.966676][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.976193][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.017859][ T52] Bluetooth: hci1: command tx timeout [ 84.055188][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.069444][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.080560][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.092496][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.094853][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.099874][ T5614] Bluetooth: hci2: command tx timeout [ 84.100043][ T52] Bluetooth: hci0: command tx timeout [ 84.114392][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.129352][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.139400][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.177388][ T52] Bluetooth: hci3: command tx timeout [ 84.245923][ T5623] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.256790][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.258833][ T52] Bluetooth: hci4: command tx timeout [ 84.266571][ T5623] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.279030][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.289566][ T5623] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.299502][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.304386][ T5623] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.316161][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.378263][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.395981][ T5629] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.408260][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.430368][ T5629] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.440834][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.456368][ T5629] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.465948][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.474051][ T5629] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.483741][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.539133][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.600219][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.600590][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.638883][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.664592][ T5617] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.678381][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.688776][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.688980][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.710367][ T5617] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.721021][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.723111][ T5617] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.735471][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.758560][ T5617] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.768120][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.821020][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.852349][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.852554][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.885291][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.885518][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.924259][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.967680][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.032499][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.082205][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.094712][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.094933][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.152176][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.152423][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.164546][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.164806][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.196533][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.196916][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.330654][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.436132][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.492127][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.492254][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.529051][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.529329][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.917901][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.081857][ T5613] veth0_vlan: entered promiscuous mode [ 86.099996][ T52] Bluetooth: hci1: command tx timeout [ 86.135419][ T5613] veth1_vlan: entered promiscuous mode [ 86.177107][ T5614] Bluetooth: hci2: command tx timeout [ 86.182683][ T52] Bluetooth: hci0: command tx timeout [ 86.256790][ T52] Bluetooth: hci3: command tx timeout [ 86.321870][ T5613] veth0_macvtap: entered promiscuous mode [ 86.336798][ T52] Bluetooth: hci4: command tx timeout [ 86.370299][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.374091][ T5613] veth1_macvtap: entered promiscuous mode [ 86.476071][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.514614][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.642559][ T5612] veth0_vlan: entered promiscuous mode [ 86.682722][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.733106][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.737430][ T5612] veth1_vlan: entered promiscuous mode [ 86.789769][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.923369][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.923436][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.064915][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.089639][ T783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.089685][ T783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.122406][ T5612] veth0_macvtap: entered promiscuous mode [ 87.148976][ T5629] veth0_vlan: entered promiscuous mode [ 87.185731][ T5623] veth0_vlan: entered promiscuous mode [ 87.204916][ T5612] veth1_macvtap: entered promiscuous mode [ 87.236602][ T5629] veth1_vlan: entered promiscuous mode [ 87.262504][ T5623] veth1_vlan: entered promiscuous mode [ 87.274706][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.307142][ T5613] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.314758][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.428444][ T5629] veth0_macvtap: entered promiscuous mode [ 87.473605][ T5629] veth1_macvtap: entered promiscuous mode [ 87.506539][ T5623] veth0_macvtap: entered promiscuous mode [ 87.546118][ T5623] veth1_macvtap: entered promiscuous mode [ 87.557356][ T38] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.559082][ T783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.559184][ T783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.559264][ T783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.559349][ T783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.559429][ T783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.559519][ T783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.639789][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.719088][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.737012][ T2425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.737197][ T2425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.768073][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.808835][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.853323][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.853357][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.967997][ T2425] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.968059][ T2425] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.968113][ T2425] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.968152][ T2425] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.968191][ T2425] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.968284][ T2425] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.968384][ T2425] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.968478][ T2425] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.039354][ T2425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.039413][ T2425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.117253][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.146531][ T5617] veth0_vlan: entered promiscuous mode [ 88.159579][ T5813] PM: suspend entry (s2idle) [ 88.169307][ T783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.178094][ T52] Bluetooth: hci1: command tx timeout [ 88.188555][ T783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.232755][ T2425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.232790][ T2425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.257472][ T5614] Bluetooth: hci2: command tx timeout [ 88.265694][ T52] Bluetooth: hci0: command tx timeout [ 88.283341][ T5617] veth1_vlan: entered promiscuous mode [ 88.291697][ T9] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice= 0.00 [ 88.305985][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 88.322237][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.337017][ T52] Bluetooth: hci3: command tx timeout [ 88.417272][ T52] Bluetooth: hci4: command tx timeout [ 88.436555][ T783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.436596][ T783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.553649][ T5617] veth0_macvtap: entered promiscuous mode [ 88.604819][ T5617] veth1_macvtap: entered promiscuous mode [ 88.665769][ T12] Filesystems sync: 0.501 seconds [ 88.684242][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.733575][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.866802][ T5705] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.963453][ T5813] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 88.963658][ T5813] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 89.015544][ T5813] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 89.028731][ T5705] usb 2-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice= 1.00 [ 89.041908][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.049800][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.050300][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.056526][ T5813] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 89.057271][ T5813] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 89.084749][ T5705] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 89.084830][ T5705] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.112238][ T9] peak_usb 4-1:1.0 can0: unable to request usb[type=0 value=1] err=-71 [ 89.112280][ T9] peak_usb 4-1:1.0: unable to read PCAN-USB Pro firmware info (err -71) [ 89.131912][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.131967][ T5705] usb 2-1: Product: syz [ 89.132014][ T5705] usb 2-1: Manufacturer: syz [ 89.132033][ T5705] usb 2-1: SerialNumber: syz [ 89.179990][ T5705] smsusb:smsusb_probe: board id=2, interface number 0 [ 89.183229][ T5813] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 89.194870][ T5705] smsusb:smsusb_probe: Device initialized with return code -19 [ 89.209471][ T5813] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 89.210559][ T5813] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 89.229860][ T5813] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 89.248651][ T5824] lo speed is unknown, defaulting to 1000 [ 89.254613][ T5813] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 89.266308][ T5813] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 89.282124][ T9] peak_usb 4-1:1.0: probe with driver peak_usb failed with error -71 [ 89.301804][ T5813] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 89.328991][ T5813] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 89.333099][ T5824] lo speed is unknown, defaulting to 1000 [ 89.343528][ T5813] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 89.365494][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.365730][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.386013][ T9] usb 4-1: USB disconnect, device number 2 [ 89.393886][ T2425] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.421116][ T5813] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 89.451817][ T5824] lo speed is unknown, defaulting to 1000 [ 89.593245][ T2425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.593292][ T2425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.991588][ T5824] infiniband syz0: set active [ 89.992700][ T5748] lo speed is unknown, defaulting to 1000 [ 90.005085][ T5824] infiniband syz0: added lo [ 90.015214][ T5824] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 90.021389][ T5824] infiniband syz0: Couldn't open port 1 [ 90.036972][ T5824] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 90.052314][ T5824] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 90.070262][ T5824] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 90.080884][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.127964][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.157393][ T5824] RDS/IB: syz0: added [ 90.166333][ T5824] smc: adding ib device syz0 with port count 1 [ 90.176484][ T5824] smc: ib device syz0 port 1 has no pnetid [ 90.184422][ T5743] lo speed is unknown, defaulting to 1000 [ 90.192611][ T5824] lo speed is unknown, defaulting to 1000 [ 90.237625][ T9] usb 4-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice= 0.01 [ 90.248199][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.289832][ T9] usb 4-1: Direct firmware load for f2255usb.bin failed with error -2 [ 90.292031][ T25] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 90.300797][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.318159][ T9] usb 4-1: Falling back to sysfs fallback for: f2255usb.bin [ 90.393664][ T25] as10x_usb: device has been detected [ 90.400834][ T25] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 90.479369][ T25] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 90.516381][ T25] Registered device Abilis Systems DVB-Titan [ 90.821885][ T5824] lo speed is unknown, defaulting to 1000 [ 90.909563][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.057868][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 91.073952][ T5824] lo speed is unknown, defaulting to 1000 [ 91.217513][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.300449][ T5824] lo speed is unknown, defaulting to 1000 [ 91.307445][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 91.387015][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 91.527948][ T5824] lo speed is unknown, defaulting to 1000 [ 91.648963][ T5734] usb 2-1: USB disconnect, device number 2 [ 91.863067][ T10] cfg80211: failed to load regulatory.db [ 91.880613][ T5813] Freezing user space processes [ 92.066841][ T5734] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.976836][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 93.146793][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 93.296817][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 93.376865][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 93.457870][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 95.059363][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 95.216895][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 95.376895][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 95.456974][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.536813][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 95.627058][ T5813] Freezing user space processes completed (elapsed 3.738 seconds) [ 95.628915][ T5813] O ** replaying previous printk message ** [ 95.628915][ T5813] OOM killer disabled. [ 95.628936][ T5813] Freezing remaining freezable tasks [ 95.636611][ T9] ------------[ cut here ]------------ [ 95.636639][ T9] ret [ 95.636664][ T9] WARNING: drivers/base/firmware_loader/fallback.c:158 at firmware_fallback_sysfs+0x76d/0xa50, CPU#0: kworker/0:0/9 [ 95.671099][ T9] Modules linked in: [ 95.675281][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 95.684654][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.696374][ T9] Workqueue: usb_hub_wq hub_event [ 95.705414][ T9] RIP: 0010:firmware_fallback_sysfs+0x76d/0xa50 [ 95.712487][ T9] Code: 93 fb e9 48 fc ff ff e8 c1 64 93 fb c6 05 c9 7d 2e 0a 01 48 c7 c7 60 16 97 8c e8 8e 67 f3 fa e9 70 fc ff ff e8 a4 64 93 fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 60 17 97 8c 4c 89 e2 e8 9e e2 f7 fa e9 [ 95.732320][ T9] RSP: 0018:ffffc900000e6aa0 EFLAGS: 00010287 [ 95.738785][ T9] RAX: ffffffff8634588c RBX: dffffc0000000000 RCX: 0000000000100000 [ 95.746894][ T9] RDX: ffffc9001a037000 RSI: 000000000001003e RDI: 000000000001003f [ 95.754897][ T9] RBP: 0000000000000001 R08: ffffffff9079657f R09: 1ffffffff20f2caf [ 95.762925][ T9] R10: dffffc0000000000 R11: fffffbfff20f2cb0 R12: ffffffff8ce63320 [ 95.770956][ T9] R13: 0000000000001770 R14: ffff8880346f60b0 R15: 00000000fffffff5 [ 95.779070][ T9] FS: 0000000000000000(0000) GS:ffff888124cf8000(0000) knlGS:0000000000000000 [ 95.788053][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.795594][ T9] CR2: 00007efd843556c8 CR3: 000000007ab90000 CR4: 00000000003526f0 [ 95.804054][ T9] Call Trace: [ 95.807421][ T9] [ 95.810389][ T9] ? kfree+0x1c5/0x650 [ 95.814520][ T9] _request_firmware+0x1049/0x1780 [ 95.819740][ T9] ? __pfx__request_firmware+0x10/0x10 [ 95.825245][ T9] ? __kasan_kmalloc+0x93/0xb0 [ 95.830082][ T9] ? __kmalloc_cache_noprof+0x321/0x600 [ 95.835670][ T9] ? __kmalloc_cache_noprof+0x14d/0x600 [ 95.841304][ T9] ? s2255_probe+0x83b/0x10b0 [ 95.846036][ T9] ? s2255_probe+0x83b/0x10b0 [ 95.850807][ T9] request_firmware+0x36/0x50 [ 95.855512][ T9] s2255_probe+0x90b/0x10b0 [ 95.860254][ T9] ? irqentry_exit+0x218/0x910 [ 95.865084][ T9] ? trace_irq_disable+0x3b/0x140 [ 95.870196][ T9] ? __pfx_s2255_probe+0x10/0x10 [ 95.875161][ T9] ? __pfx_s2255_probe+0x10/0x10 [ 95.880176][ T9] usb_probe_interface+0x788/0xe50 [ 95.885353][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 95.891060][ T9] ? sysfs_do_create_link_sd+0xe0/0x110 [ 95.897202][ T9] ? driver_sysfs_add+0x1fe/0x210 [ 95.902284][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 95.908357][ T9] really_probe+0x254/0xae0 [ 95.912905][ T9] __driver_probe_device+0x1e8/0x360 [ 95.918257][ T9] driver_probe_device+0x4f/0x240 [ 95.923331][ T9] __device_attach_driver+0x270/0x410 [ 95.928779][ T9] bus_for_each_drv+0x258/0x2f0 [ 95.933688][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 95.939663][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 95.945076][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 95.950950][ T9] __device_attach+0x2c4/0x450 [ 95.955762][ T9] ? __pfx___device_attach+0x10/0x10 [ 95.961114][ T9] ? do_raw_spin_unlock+0xf5/0x200 [ 95.966280][ T9] ? _raw_spin_unlock+0x28/0x50 [ 95.971223][ T9] device_initial_probe+0xa1/0xd0 [ 95.976291][ T9] bus_probe_device+0x12a/0x220 [ 95.981279][ T9] device_add+0x7d7/0xb80 [ 95.985656][ T9] usb_set_configuration+0x1ad8/0x2180 [ 95.991246][ T9] usb_generic_driver_probe+0x8d/0x150 [ 95.997207][ T9] usb_probe_device+0x1c3/0x3b0 [ 96.002094][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 96.007893][ T9] really_probe+0x254/0xae0 [ 96.012445][ T9] __driver_probe_device+0x1e8/0x360 [ 96.018123][ T9] driver_probe_device+0x4f/0x240 [ 96.023195][ T9] __device_attach_driver+0x270/0x410 [ 96.028784][ T9] bus_for_each_drv+0x258/0x2f0 [ 96.033686][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 96.039700][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 96.045112][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 96.051019][ T9] __device_attach+0x2c4/0x450 [ 96.055860][ T9] ? __pfx___device_attach+0x10/0x10 [ 96.061248][ T9] ? do_raw_spin_unlock+0xf5/0x200 [ 96.066410][ T9] ? _raw_spin_unlock+0x28/0x50 [ 96.071312][ T9] device_initial_probe+0xa1/0xd0 [ 96.076387][ T9] bus_probe_device+0x12a/0x220 [ 96.081373][ T9] device_add+0x7d7/0xb80 [ 96.085765][ T9] usb_new_device+0x9aa/0x1690 [ 96.090628][ T9] ? __pfx_usb_new_device+0x10/0x10 [ 96.095872][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 96.101777][ T9] hub_event+0x28e8/0x4d30 [ 96.106251][ T9] ? do_raw_spin_unlock+0xf5/0x200 [ 96.111857][ T9] ? __pfx_hub_event+0x10/0x10 [ 96.116722][ T9] ? rcu_is_watching+0x16/0xb0 [ 96.121548][ T9] ? process_scheduled_works+0x97a/0x1630 [ 96.127350][ T9] process_scheduled_works+0xc3d/0x1630 [ 96.132990][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 96.139082][ T9] ? assign_work+0x3cf/0x5d0 [ 96.143716][ T9] worker_thread+0xa47/0xfb0 [ 96.148430][ T9] kthread+0x38b/0x480 [ 96.152533][ T9] ? __pfx_worker_thread+0x10/0x10 [ 96.157699][ T9] ? __pfx_kthread+0x10/0x10 [ 96.162315][ T9] ret_from_fork+0x514/0xb70 [ 96.166975][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 96.172134][ T9] ? __switch_to+0xc89/0x1420 [ 96.177094][ T9] ? __pfx_kthread+0x10/0x10 [ 96.181706][ T9] ret_from_fork_asm+0x1a/0x30 [ 96.186520][ T9] [ 96.189577][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 96.196874][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 96.205999][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.216071][ T9] Workqueue: usb_hub_wq hub_event [ 96.221130][ T9] Call Trace: [ 96.224440][ T9] [ 96.227399][ T9] vpanic+0x56d/0xa60 [ 96.231430][ T9] ? __pfx__printk+0x10/0x10 [ 96.236059][ T9] ? __pfx_vpanic+0x10/0x10 [ 96.240605][ T9] ? is_bpf_text_address+0x292/0x2b0 [ 96.245923][ T9] ? is_bpf_text_address+0x26/0x2b0 [ 96.251166][ T9] panic+0xc5/0xd0 [ 96.254914][ T9] ? __pfx_panic+0x10/0x10 [ 96.259379][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 96.264397][ T9] __warn+0x315/0x4c0 [ 96.268417][ T9] ? firmware_fallback_sysfs+0x76d/0xa50 [ 96.274093][ T9] ? firmware_fallback_sysfs+0x76d/0xa50 [ 96.279746][ T9] __report_bug+0x276/0x570 [ 96.284274][ T9] ? firmware_fallback_sysfs+0x76d/0xa50 [ 96.289962][ T9] ? __pfx___report_bug+0x10/0x10 [ 96.295013][ T9] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 96.300425][ T9] ? firmware_fallback_sysfs+0x76d/0xa50 [ 96.306083][ T9] report_bug+0x16b/0x220 [ 96.310441][ T9] ? firmware_fallback_sysfs+0x76d/0xa50 [ 96.316101][ T9] ? firmware_fallback_sysfs+0x76f/0xa50 [ 96.321756][ T9] handle_bug+0x9c/0x200 [ 96.326023][ T9] exc_invalid_op+0x1a/0x50 [ 96.330543][ T9] asm_exc_invalid_op+0x1a/0x20 [ 96.335410][ T9] RIP: 0010:firmware_fallback_sysfs+0x76d/0xa50 [ 96.341678][ T9] Code: 93 fb e9 48 fc ff ff e8 c1 64 93 fb c6 05 c9 7d 2e 0a 01 48 c7 c7 60 16 97 8c e8 8e 67 f3 fa e9 70 fc ff ff e8 a4 64 93 fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 60 17 97 8c 4c 89 e2 e8 9e e2 f7 fa e9 [ 96.361312][ T9] RSP: 0018:ffffc900000e6aa0 EFLAGS: 00010287 [ 96.367414][ T9] RAX: ffffffff8634588c RBX: dffffc0000000000 RCX: 0000000000100000 [ 96.375416][ T9] RDX: ffffc9001a037000 RSI: 000000000001003e RDI: 000000000001003f [ 96.383406][ T9] RBP: 0000000000000001 R08: ffffffff9079657f R09: 1ffffffff20f2caf [ 96.391416][ T9] R10: dffffc0000000000 R11: fffffbfff20f2cb0 R12: ffffffff8ce63320 [ 96.399411][ T9] R13: 0000000000001770 R14: ffff8880346f60b0 R15: 00000000fffffff5 [ 96.407420][ T9] ? firmware_fallback_sysfs+0x76c/0xa50 [ 96.413108][ T9] ? kfree+0x1c5/0x650 [ 96.417227][ T9] _request_firmware+0x1049/0x1780 [ 96.422401][ T9] ? __pfx__request_firmware+0x10/0x10 [ 96.427890][ T9] ? __kasan_kmalloc+0x93/0xb0 [ 96.432687][ T9] ? __kmalloc_cache_noprof+0x321/0x600 [ 96.438260][ T9] ? __kmalloc_cache_noprof+0x14d/0x600 [ 96.443828][ T9] ? s2255_probe+0x83b/0x10b0 [ 96.448529][ T9] ? s2255_probe+0x83b/0x10b0 [ 96.453241][ T9] request_firmware+0x36/0x50 [ 96.457955][ T9] s2255_probe+0x90b/0x10b0 [ 96.462497][ T9] ? irqentry_exit+0x218/0x910 [ 96.467292][ T9] ? trace_irq_disable+0x3b/0x140 [ 96.472343][ T9] ? __pfx_s2255_probe+0x10/0x10 [ 96.477306][ T9] ? __pfx_s2255_probe+0x10/0x10 [ 96.482283][ T9] usb_probe_interface+0x788/0xe50 [ 96.487426][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 96.493124][ T9] ? sysfs_do_create_link_sd+0xe0/0x110 [ 96.498705][ T9] ? driver_sysfs_add+0x1fe/0x210 [ 96.503772][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 96.509438][ T9] really_probe+0x254/0xae0 [ 96.514028][ T9] __driver_probe_device+0x1e8/0x360 [ 96.519342][ T9] driver_probe_device+0x4f/0x240 [ 96.524414][ T9] __device_attach_driver+0x270/0x410 [ 96.529825][ T9] bus_for_each_drv+0x258/0x2f0 [ 96.534961][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 96.540881][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 96.546281][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 96.552111][ T9] __device_attach+0x2c4/0x450 [ 96.556908][ T9] ? __pfx___device_attach+0x10/0x10 [ 96.562236][ T9] ? do_raw_spin_unlock+0xf5/0x200 [ 96.567389][ T9] ? _raw_spin_unlock+0x28/0x50 [ 96.572269][ T9] device_initial_probe+0xa1/0xd0 [ 96.577343][ T9] bus_probe_device+0x12a/0x220 [ 96.582241][ T9] device_add+0x7d7/0xb80 [ 96.586602][ T9] usb_set_configuration+0x1ad8/0x2180 [ 96.592131][ T9] usb_generic_driver_probe+0x8d/0x150 [ 96.597637][ T9] usb_probe_device+0x1c3/0x3b0 [ 96.602513][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 96.607905][ T9] really_probe+0x254/0xae0 [ 96.612445][ T9] __driver_probe_device+0x1e8/0x360 [ 96.617772][ T9] driver_probe_device+0x4f/0x240 [ 96.622827][ T9] __device_attach_driver+0x270/0x410 [ 96.628230][ T9] bus_for_each_drv+0x258/0x2f0 [ 96.633116][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 96.639031][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 96.644431][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 96.650263][ T9] __device_attach+0x2c4/0x450 [ 96.655057][ T9] ? __pfx___device_attach+0x10/0x10 [ 96.660384][ T9] ? do_raw_spin_unlock+0xf5/0x200 [ 96.665540][ T9] ? _raw_spin_unlock+0x28/0x50 [ 96.670419][ T9] device_initial_probe+0xa1/0xd0 [ 96.675479][ T9] bus_probe_device+0x12a/0x220 [ 96.680352][ T9] device_add+0x7d7/0xb80 [ 96.684726][ T9] usb_new_device+0x9aa/0x1690 [ 96.689540][ T9] ? __pfx_usb_new_device+0x10/0x10 [ 96.694782][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 96.700011][ T9] hub_event+0x28e8/0x4d30 [ 96.704476][ T9] ? do_raw_spin_unlock+0xf5/0x200 [ 96.709658][ T9] ? __pfx_hub_event+0x10/0x10 [ 96.714464][ T9] ? rcu_is_watching+0x16/0xb0 [ 96.719308][ T9] ? process_scheduled_works+0x97a/0x1630 [ 96.725107][ T9] process_scheduled_works+0xc3d/0x1630 [ 96.730742][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 96.736769][ T9] ? assign_work+0x3cf/0x5d0 [ 96.741411][ T9] worker_thread+0xa47/0xfb0 [ 96.746061][ T9] kthread+0x38b/0x480 [ 96.750156][ T9] ? __pfx_worker_thread+0x10/0x10 [ 96.755295][ T9] ? __pfx_kthread+0x10/0x10 [ 96.759912][ T9] ret_from_fork+0x514/0xb70 [ 96.764528][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 96.769682][ T9] ? __switch_to+0xc89/0x1420 [ 96.774403][ T9] ? __pfx_kthread+0x10/0x10 [ 96.779015][ T9] ret_from_fork_asm+0x1a/0x30 [ 96.783832][ T9] [ 96.787469][ T9] Kernel Offset: disabled [ 96.791815][ T9] Rebooting in 86400 seconds..