last executing test programs: 310.466895ms ago: executing program 0 (id=1): r0 = socket(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='add 1-1\x00', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='add 2-1\x00', 0x8) close(r2) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1-1\x00', 0x4) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='2-1\x00', 0x4) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/usb/drivers/usbip-host/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='1-1\x00', 0x4) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/usb/drivers/usbip-host/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='2-1\x00', 0x4) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/usb/devices/1-1/usbip_sockfd\x00', 0x1, 0x0) write(r7, &(0x7f0000000500)='3\x00', 0x2) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/bus/usb/devices/2-1/usbip_sockfd\x00', 0x1, 0x0) write(r8, &(0x7f0000000580)='3\x00', 0x2) close(r8) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) write(r0, &(0x7f00000005c0)="00000002000000010000000000000000000000000000000200"/48, 0x30) 70.576421ms ago: executing program 2 (id=3): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007050102000200070581020002000705020200020007058202000200"], 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="9101000000112233445500"/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000400)) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000500)="840100"/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000600)) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000d00)=@filename='none\x00', &(0x7f0000000e00)='./sys\x00', &(0x7f0000000f00)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/bus/usb/drivers/cxacru/1-1:1.0/adsl_state\x00', 0x0, 0x0) read(r1, &(0x7f0000001100)=""/64, 0x40) 66.444068ms ago: executing program 4 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0000:00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='vp-vdpa\x00', 0x8) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0000:00:02.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='vp-vdpa\x00', 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='0000:00:02.0\x00', 0xd) 61.650337ms ago: executing program 3 (id=4): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/disk', 0x0, 0x0) getdents64(r0, &(0x7f0000000080), 0x100) 0s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000000f0)='0000:00:02.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='xhci_hcd\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/drivers/xhci_hcd/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='0000:00:02.0\x00', 0xd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.139' (ED25519) to the list of known hosts. [ 27.516157][ T4698] cgroup: Unknown subsys name 'net' [ 27.645877][ T4698] cgroup: Unknown subsys name 'cpuset' [ 27.647993][ T4698] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 27.807818][ T4698] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 28.574158][ T4712] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 28.574729][ T4712] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 28.580352][ T4715] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 28.582216][ T4715] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 28.585214][ T4713] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 28.586951][ T4713] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 28.588534][ T4713] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 28.589950][ T4713] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 28.590140][ T4713] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 28.593161][ T4713] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 28.594913][ T4713] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 28.598410][ T4713] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 28.598591][ T4713] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 28.601402][ T4713] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 28.603484][ T4718] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 28.605075][ T4718] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 28.607826][ T4712] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 28.608084][ T4712] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 28.611130][ T4718] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 28.613224][ T4718] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 28.619863][ T4718] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 28.626905][ T4711] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 28.627252][ T4711] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 28.637698][ T4711] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 28.639297][ T4711] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 28.933267][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.933536][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.933607][ T4709] bridge_slave_0: entered allmulticast mode [ 28.934093][ T4709] bridge_slave_0: entered promiscuous mode [ 28.939223][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.939251][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.939312][ T4709] bridge_slave_1: entered allmulticast mode [ 28.939768][ T4709] bridge_slave_1: entered promiscuous mode [ 28.976560][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.993991][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.005757][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.005838][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.005901][ T4708] bridge_slave_0: entered allmulticast mode [ 29.006307][ T4708] bridge_slave_0: entered promiscuous mode [ 29.008931][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.008954][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.009002][ T4708] bridge_slave_1: entered allmulticast mode [ 29.009388][ T4708] bridge_slave_1: entered promiscuous mode [ 29.027084][ T4709] team0: Port device team_slave_0 added [ 29.027849][ T4709] team0: Port device team_slave_1 added [ 29.043210][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.050372][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.050688][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.050707][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.051689][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.051697][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.051707][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.059228][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.098354][ T4708] team0: Port device team_slave_0 added [ 29.100425][ T4709] hsr_slave_0: entered promiscuous mode [ 29.101094][ T4709] hsr_slave_1: entered promiscuous mode [ 29.110792][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.111213][ T4722] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.111272][ T4722] bridge_slave_0: entered allmulticast mode [ 29.111737][ T4722] bridge_slave_0: entered promiscuous mode [ 29.112521][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.112542][ T4722] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.112628][ T4722] bridge_slave_1: entered allmulticast mode [ 29.113235][ T4722] bridge_slave_1: entered promiscuous mode [ 29.128331][ T4708] team0: Port device team_slave_1 added [ 29.134081][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.134312][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.134664][ T4716] bridge_slave_0: entered allmulticast mode [ 29.135093][ T4716] bridge_slave_0: entered promiscuous mode [ 29.136352][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.136373][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.136423][ T4716] bridge_slave_1: entered allmulticast mode [ 29.136844][ T4716] bridge_slave_1: entered promiscuous mode [ 29.150601][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.150630][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.150646][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.155829][ T4722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.165278][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.167016][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.167041][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.167057][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.178951][ T4708] hsr_slave_0: entered promiscuous mode [ 29.179269][ T4708] hsr_slave_1: entered promiscuous mode [ 29.179452][ T4708] debugfs: 'hsr0' already exists in 'hsr' [ 29.179487][ T4708] Cannot create hsr debugfs directory [ 29.180477][ T4722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.187668][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.198370][ T4716] team0: Port device team_slave_0 added [ 29.199660][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.199708][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.199769][ T4719] bridge_slave_0: entered allmulticast mode [ 29.200255][ T4719] bridge_slave_0: entered promiscuous mode [ 29.202107][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.202164][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.202258][ T4719] bridge_slave_1: entered allmulticast mode [ 29.202685][ T4719] bridge_slave_1: entered promiscuous mode [ 29.207170][ T4722] team0: Port device team_slave_0 added [ 29.210820][ T4716] team0: Port device team_slave_1 added [ 29.217030][ T4722] team0: Port device team_slave_1 added [ 29.235701][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.237049][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.241612][ T4722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.247078][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.248422][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.249032][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.255779][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.256879][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.257127][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.257134][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.257149][ T4722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.262106][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.262118][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.262136][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.282880][ T4719] team0: Port device team_slave_0 added [ 29.283988][ T4719] team0: Port device team_slave_1 added [ 29.301192][ T4722] hsr_slave_0: entered promiscuous mode [ 29.301541][ T4722] hsr_slave_1: entered promiscuous mode [ 29.301754][ T4722] debugfs: 'hsr0' already exists in 'hsr' [ 29.301764][ T4722] Cannot create hsr debugfs directory [ 29.328880][ T4716] hsr_slave_0: entered promiscuous mode [ 29.330339][ T4716] hsr_slave_1: entered promiscuous mode [ 29.331668][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 29.332675][ T4716] Cannot create hsr debugfs directory [ 29.334448][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.335771][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.340599][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.359866][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.359895][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.359909][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.391782][ T4709] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.395785][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.407720][ T4709] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.409999][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.410500][ T4709] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.412412][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.414292][ T4719] hsr_slave_0: entered promiscuous mode [ 29.415037][ T4719] hsr_slave_1: entered promiscuous mode [ 29.415247][ T4719] debugfs: 'hsr0' already exists in 'hsr' [ 29.415256][ T4719] Cannot create hsr debugfs directory [ 29.425900][ T4709] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.428212][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.473808][ T4708] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.477412][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.477765][ T4708] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.479780][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.481560][ T4708] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.483699][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.487896][ T4708] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.489959][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.492681][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.492741][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.492888][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.492916][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.513720][ T4716] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.516435][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.516770][ T4716] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.518560][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.526619][ T4716] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.529024][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.531853][ T4716] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.533817][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.544600][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.544642][ T4708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.544757][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.544816][ T4708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.561228][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.561426][ T4722] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.563550][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.563844][ T4722] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.566149][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.566931][ T4722] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.568739][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.571168][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.571192][ T4716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.571258][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.571286][ T4716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.582450][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.586867][ T4722] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.588992][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.591603][ T1451] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.593120][ T1451] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.595937][ T1451] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.597363][ T1451] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.600305][ T1451] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.602010][ T1451] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.621158][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.621213][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.630647][ T1451] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.630685][ T1451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.650151][ T4719] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.652761][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.653458][ T4719] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.656038][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.657539][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.659838][ T4719] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.662047][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.663894][ T4719] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.666539][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.684616][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.690761][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.698092][ T4722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.702642][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.705985][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.706031][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.708910][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.708951][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.714288][ T4722] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.740584][ T1451] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.740630][ T1451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.742511][ T1451] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.742537][ T1451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.747932][ T1451] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.747971][ T1451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.789834][ T1451] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.789876][ T1451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.846984][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.859807][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.874918][ T1250] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.874967][ T1250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.875527][ T1250] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.875548][ T1250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.890730][ T4719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.951700][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.970403][ T4709] veth0_vlan: entered promiscuous mode [ 29.984123][ T4709] veth1_vlan: entered promiscuous mode [ 29.987851][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.001352][ T4709] veth0_macvtap: entered promiscuous mode [ 30.009966][ T4709] veth1_macvtap: entered promiscuous mode [ 30.016461][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.019793][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.040653][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.094003][ T4722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.113930][ T4851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.113968][ T4851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.120807][ T4716] veth0_vlan: entered promiscuous mode [ 30.125703][ T15] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.126398][ T15] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.126463][ T15] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.126533][ T15] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.138362][ T4708] veth0_vlan: entered promiscuous mode [ 30.141515][ T4716] veth1_vlan: entered promiscuous mode [ 30.143944][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.143975][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.150417][ T4708] veth1_vlan: entered promiscuous mode [ 30.161230][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.173293][ T4722] veth0_vlan: entered promiscuous mode [ 30.181383][ T4722] veth1_vlan: entered promiscuous mode [ 30.188482][ T4709] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.189131][ T4708] veth0_macvtap: entered promiscuous mode [ 30.191920][ T4716] veth0_macvtap: entered promiscuous mode [ 30.196701][ T4708] veth1_macvtap: entered promiscuous mode [ 30.201835][ T4716] veth1_macvtap: entered promiscuous mode [ 30.223911][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.235960][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.240040][ T1103] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.240285][ T1103] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.246479][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.250671][ T4722] veth0_macvtap: entered promiscuous mode [ 30.252173][ T4719] veth0_vlan: entered promiscuous mode [ 30.253939][ T4722] veth1_macvtap: entered promiscuous mode [ 30.256359][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.259534][ T4719] veth1_vlan: entered promiscuous mode [ 30.269302][ T4719] veth0_macvtap: entered promiscuous mode [ 30.282442][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.286240][ T4719] veth1_macvtap: entered promiscuous mode [ 30.294334][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.308630][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.308661][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.316977][ T15] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.317193][ T15] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.317303][ T15] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.317389][ T15] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.317482][ T15] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.317515][ T15] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.337802][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.347211][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.350086][ T4851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.351882][ T4851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.355864][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.355890][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.376450][ T4851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.376974][ T4851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.377089][ T4851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.377179][ T4851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.377269][ T4851] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.377329][ T4851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.377345][ T4851] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.377360][ T4851] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.380538][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.380550][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.395104][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.395134][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.401648][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.401679][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.416060][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.417527][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.444167][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.444200][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.470097][ T4892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.470361][ T4892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.474715][ T4817] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.485831][ T4896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.488950][ T4896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.584147][ T4894] EXT4-fs (nvme0n1p2): shut down requested (2) [ 30.584242][ T4894] Aborting journal on device nvme0n1p2-8. [ 30.625334][ T4817] usb 1-1: Using ep0 maxpacket: 8 [ 30.626052][ T4817] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 30.627179][ T4817] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 30.627191][ T4817] usb 1-1: config 0 has no interface number 0 [ 30.627209][ T4817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.633501][ T4817] usb 1-1: config 0 descriptor?? [ 30.637235][ T4343] udevd[4343]: worker [4700] terminated by signal 7 (Bus error) [ 30.638760][ T4343] udevd[4343]: worker [4700] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1' [ 30.648643][ T4343] udevd[4343]: worker [4702] terminated by signal 7 (Bus error) [ 30.648705][ T4343] udevd[4343]: worker [4702] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.143' [ 30.664984][ T4711] Bluetooth: hci1: command tx timeout [ 30.665179][ T4711] Bluetooth: hci4: command tx timeout [ 30.665251][ T4711] Bluetooth: hci0: command tx timeout [ 30.665329][ T4711] Bluetooth: hci2: command tx timeout [ 30.665395][ T4711] Bluetooth: hci3: command tx timeout [ 30.746753][ T4900] xhci_hcd 0000:00:02.0: xHCI Host Controller [ 30.749487][ T4900] xhci_hcd 0000:00:02.0: new USB bus registered, assigned bus number 34 [ 30.751089][ T4817] viperboard 1-1:0.143: version 0.00 found at bus 001 address 002 [ 30.752908][ T4900] Unable to handle kernel paging request at virtual address ffff8000a8e780ff [ 30.754845][ T4900] KASAN: probably user-memory-access in range [0x00000005473c07f8-0x00000005473c07ff] [ 30.757013][ T4900] Mem abort info: [ 30.757716][ T4900] ESR = 0x0000000096000021 [ 30.758616][ T4900] EC = 0x25: DABT (current EL), IL = 32 bits [ 30.759657][ T4900] SET = 0, FnV = 0 [ 30.760723][ T4900] EA = 0, S1PTW = 0 [ 30.761517][ T4900] FSC = 0x21: alignment fault [ 30.762365][ T4900] Data abort info: [ 30.763045][ T4900] ISV = 0, ISS = 0x00000021, ISS2 = 0x00000000 [ 30.764488][ T4900] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 30.765532][ T4900] GCS = 0, Overlay = 0, DirtyBit = 0 [ 30.766465][ T4900] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000000021b049000 [ 30.767947][ T4900] [ffff8000a8e780ff] pgd=0000000000000000, p4d=1000000221341003, pud=1000000221342003, pmd=100000013295f403, pte=0068010000000713 [ 30.768075][ T4900] Internal error: Oops: 0000000096000021 [#1] SMP [ 30.770365][ T4817] viperboard-i2c viperboard-i2c.1.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 30.770397][ T4817] viperboard-i2c viperboard-i2c.1.auto: probe with driver viperboard-i2c failed with error -5 [ 30.774805][ T4900] Modules linked in: [ 30.775499][ T4900] CPU: 1 UID: 0 PID: 4900 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT [ 30.776985][ T4900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 30.778657][ T4900] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 30.779976][ T4900] pc : xhci_halt+0x64/0x1ec [ 30.780781][ T4900] lr : xhci_halt+0x40/0x1ec [ 30.781559][ T4900] sp : ffff8000962873c0 [ 30.782245][ T4900] x29: ffff8000962873c0 x28: ffff0000cac02000 x27: dfff800000000000 [ 30.783635][ T4900] x26: ffff0000cac02418 x25: 0000000000000f01 x24: ffff0000cac026e8 [ 30.785025][ T4900] x23: ffff0000c2b100d0 x22: ffff0000cac02418 x21: dfff800000000000 [ 30.786400][ T4900] x20: 1fffe00019580483 x19: ffff0000cac02400 x18: 00000000ffffffff [ 30.787756][ T4900] x17: ffff80008a7d6000 x16: 0000000000000006 x15: ffff80008a35fda0 [ 30.789114][ T4900] x14: ffff80008a5d5e28 x13: 0000000000000004 x12: 0000000000000000 [ 30.790427][ T4900] x11: ffff8000962872e0 x10: 00000000fffffbf2 x9 : f0174f730f437a00 [ 30.791788][ T4900] x8 : ffff8000a8e780ff x7 : 0000000000000000 x6 : 0000000000000000 [ 30.793072][ T4900] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000833104ec [ 30.794413][ T4900] x2 : 0000000000000002 x1 : ffff0000c69d0000 x0 : 0000000000000001 [ 30.795976][ T4900] Call trace: [ 30.796567][ T4900] xhci_halt+0x64/0x1ec (P) [ 30.797405][ T4900] xhci_gen_setup+0x5d8/0x111c [ 30.797627][ T4343] udevd[4343]: worker [4902] terminated by signal 7 (Bus error) [ 30.797662][ T4343] udevd[4343]: worker [4902] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.143' [ 30.801343][ T4900] xhci_pci_setup+0x110/0x44c [ 30.802162][ T4900] usb_add_hcd+0x5c4/0xdec [ 30.802945][ T4900] usb_hcd_pci_probe+0x63c/0xaa4 [ 30.803852][ T4900] xhci_pci_common_probe+0x90/0x760 [ 30.804803][ T4900] xhci_pci_probe+0x44/0xdc [ 30.805595][ T4900] local_pci_probe+0xc8/0x158 [ 30.806445][ T4900] pci_device_probe+0x460/0x8d4 [ 30.807315][ T4900] really_probe+0x29c/0x800 [ 30.808122][ T4900] __driver_probe_device+0x1e0/0x350 [ 30.809104][ T4900] device_driver_attach+0x58/0xac [ 30.809979][ T4900] bind_store+0xf4/0x14c [ 30.810725][ T4900] drv_attr_store+0x80/0xa4 [ 30.811539][ T4900] sysfs_kf_write+0xe0/0x108 [ 30.812339][ T4900] kernfs_fop_write_iter+0x260/0x3b8 [ 30.813274][ T4900] vfs_write+0x51c/0xa0c [ 30.813997][ T4900] ksys_write+0x12c/0x228 [ 30.814687][ T4900] __arm64_sys_write+0x84/0x98 [ 30.815452][ T4900] invoke_syscall+0x98/0x244 [ 30.816190][ T4900] el0_svc_common+0xec/0x23c [ 30.816959][ T4900] do_el0_svc+0x4c/0x5c [ 30.817670][ T4900] el0_svc+0x64/0x260 [ 30.818354][ T4900] el0t_64_sync_handler+0x44/0x104 [ 30.819257][ T4900] el0t_64_sync+0x198/0x19c [ 30.820052][ T4900] Code: 9762248f f94002c8 128081aa d503201f (b9400108) [ 30.821226][ T4900] ---[ end trace 0000000000000000 ]--- [ 31.077520][ T4900] Kernel panic - not syncing: Oops: Fatal exception [ 31.078681][ T4900] SMP: stopping secondary CPUs [ 31.079534][ T4900] Kernel Offset: disabled [ 31.080289][ T4900] CPU features: 0x14000000,003c0008,27020a02,a84ff6a7 [ 31.081511][ T4900] Memory Limit: none [ 31.326528][ T4900] Rebooting in 86400 seconds..