last executing test programs: 1.245479651s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./debug\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='none\x00', &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/kvm/kvm_inj_virq/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\n', 0x2) 970.456975ms ago: executing program 2 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)="020000007f00000100"/128, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='1\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/dlm/cluster/comms/2\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000400)="020000007f00000100"/128, 0x80) 877.90827ms ago: executing program 2 (id=7): r0 = syz_open_dev$usbmon(&(0x7f0000001100), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x12345678, 0x0) 732.362593ms ago: executing program 2 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0fc5:1227:b\n', 0xc) close(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040c50f2712000101020301090212000101008032090400000000000000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/usb/devices/5-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='0\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/usb/devices/5-1/power/control\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)='auto\n', 0x5) close(r2) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/bus/usb/devices/5-1/power/control\x00', 0x2, 0x0) 521.654575ms ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='snd_hda_codec_generic\x00', 0x16) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/hdaudio/drivers/snd_hda_codec_generic/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='pcspkr\x00', 0x7) 427.19018ms ago: executing program 1 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000000f0)='0000:00:02.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='xhci_hcd\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/drivers/xhci_hcd/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='0000:00:02.0\x00', 0xd) 191.685669ms ago: executing program 3 (id=4): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x15, 0x101301) ioctl$USBDEVFS_RESET(r1, 0x5514) 48.02869ms ago: executing program 4 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='freeze\n\x00\x00\x00\x00\x00\x00\x00', 0x7) 0s ago: executing program 0 (id=1): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{}]}}]}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.245' (ED25519) to the list of known hosts. [ 29.006442][ T4698] cgroup: Unknown subsys name 'net' [ 29.146326][ T4698] cgroup: Unknown subsys name 'cpuset' [ 29.148579][ T4698] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.249182][ T4698] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.076624][ T4716] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.076877][ T4716] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.098171][ T4722] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.098977][ T4722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.099167][ T4722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.099511][ T4722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.099753][ T4722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.099920][ T4722] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.100299][ T4722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.100907][ T4712] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.101082][ T4712] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.101248][ T4712] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.102060][ T4722] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.102224][ T4722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.102466][ T4722] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.103056][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.109229][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.109575][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.109730][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.110044][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.110263][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.113754][ T4724] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.115343][ T4724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.118589][ T4724] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.122303][ T4724] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.429661][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.431382][ T4720] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.432830][ T4720] bridge_slave_0: entered allmulticast mode [ 30.434396][ T4720] bridge_slave_0: entered promiscuous mode [ 30.443240][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.444945][ T4720] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.446435][ T4720] bridge_slave_1: entered allmulticast mode [ 30.447971][ T4720] bridge_slave_1: entered promiscuous mode [ 30.484087][ T4720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.486079][ T4720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.513566][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.513719][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.513779][ T4710] bridge_slave_0: entered allmulticast mode [ 30.514203][ T4710] bridge_slave_0: entered promiscuous mode [ 30.522184][ T4720] team0: Port device team_slave_0 added [ 30.523131][ T4720] team0: Port device team_slave_1 added [ 30.527470][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.528793][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.530071][ T4710] bridge_slave_1: entered allmulticast mode [ 30.531543][ T4710] bridge_slave_1: entered promiscuous mode [ 30.544616][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.554125][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.559788][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.559815][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.559830][ T4720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.560578][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.560587][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.560602][ T4720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.594680][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.595001][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.595078][ T4708] bridge_slave_0: entered allmulticast mode [ 30.595549][ T4708] bridge_slave_0: entered promiscuous mode [ 30.604467][ T4720] hsr_slave_0: entered promiscuous mode [ 30.605280][ T4720] hsr_slave_1: entered promiscuous mode [ 30.609299][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.609641][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.609755][ T4708] bridge_slave_1: entered allmulticast mode [ 30.610560][ T4708] bridge_slave_1: entered promiscuous mode [ 30.615524][ T4710] team0: Port device team_slave_0 added [ 30.616523][ T4710] team0: Port device team_slave_1 added [ 30.621813][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.622211][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.622321][ T4709] bridge_slave_0: entered allmulticast mode [ 30.622852][ T4709] bridge_slave_0: entered promiscuous mode [ 30.624087][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.624119][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.624169][ T4709] bridge_slave_1: entered allmulticast mode [ 30.624627][ T4709] bridge_slave_1: entered promiscuous mode [ 30.630128][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.644125][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.644518][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.644527][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.644538][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.645395][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.645404][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.645416][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.668135][ T4708] team0: Port device team_slave_0 added [ 30.671806][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.672815][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.682215][ T4709] team0: Port device team_slave_0 added [ 30.684336][ T4708] team0: Port device team_slave_1 added [ 30.689946][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.690030][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.690095][ T4718] bridge_slave_0: entered allmulticast mode [ 30.690518][ T4718] bridge_slave_0: entered promiscuous mode [ 30.691389][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.691410][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.691458][ T4718] bridge_slave_1: entered allmulticast mode [ 30.691928][ T4718] bridge_slave_1: entered promiscuous mode [ 30.697177][ T4709] team0: Port device team_slave_1 added [ 30.715933][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.715962][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.715975][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.716945][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.716953][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.716964][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.721543][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.723447][ T4710] hsr_slave_0: entered promiscuous mode [ 30.723768][ T4710] hsr_slave_1: entered promiscuous mode [ 30.723982][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 30.724019][ T4710] Cannot create hsr debugfs directory [ 30.729675][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.729685][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.729697][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.730350][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.730362][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.730388][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.734023][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.761913][ T4718] team0: Port device team_slave_0 added [ 30.767389][ T4708] hsr_slave_0: entered promiscuous mode [ 30.768515][ T4708] hsr_slave_1: entered promiscuous mode [ 30.768763][ T4708] debugfs: 'hsr0' already exists in 'hsr' [ 30.768773][ T4708] Cannot create hsr debugfs directory [ 30.770095][ T4718] team0: Port device team_slave_1 added [ 30.795756][ T4709] hsr_slave_0: entered promiscuous mode [ 30.796104][ T4709] hsr_slave_1: entered promiscuous mode [ 30.796314][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 30.796324][ T4709] Cannot create hsr debugfs directory [ 30.803611][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.803646][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.803664][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.804303][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.804313][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.804325][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.863859][ T4718] hsr_slave_0: entered promiscuous mode [ 30.865125][ T4718] hsr_slave_1: entered promiscuous mode [ 30.865576][ T4718] debugfs: 'hsr0' already exists in 'hsr' [ 30.865587][ T4718] Cannot create hsr debugfs directory [ 30.875521][ T4720] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.879154][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.890067][ T4720] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.893353][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.905889][ T4720] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.908379][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.919876][ T4720] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.922193][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.951114][ T4710] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.954708][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.956814][ T4710] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.959540][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.962694][ T4710] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.965291][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.967071][ T4710] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.969290][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.977071][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.977122][ T4720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.977258][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.977286][ T4720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.995530][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.995583][ T4710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.995693][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.995727][ T4710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.002696][ T4708] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.005373][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.006773][ T4708] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.007984][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.008397][ T4708] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.009648][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.018015][ T4708] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.020291][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.037341][ T4709] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.039917][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.041679][ T4709] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.043871][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.057012][ T4709] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.059712][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.061372][ T4709] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.063528][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.071128][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.071172][ T4708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.071246][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.071275][ T4708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.090758][ T4718] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.093205][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.100142][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.102577][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.102620][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.102704][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.102738][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.103492][ T4718] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.105402][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.105934][ T4718] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.107921][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.109964][ T4720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.113238][ T4720] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.120611][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.122982][ T4718] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.127319][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.132287][ T1493] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.133695][ T1493] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.135760][ T1493] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.137803][ T1493] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.139166][ T1493] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.140713][ T1493] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.154578][ T4720] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.154612][ T4720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.166762][ T1493] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.166822][ T1493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.180320][ T1493] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.180368][ T1493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.191783][ T4710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.192211][ T4710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.197717][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.201138][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.210915][ T1493] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.210952][ T1493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.214084][ T1493] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.214117][ T1493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.234015][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.239857][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.246132][ T1057] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.246187][ T1057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.246503][ T1057] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.246522][ T1057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.279358][ T4708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.315714][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.333857][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.356631][ T1057] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.356691][ T1057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.357260][ T1057] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.357279][ T1057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.371417][ T4718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.415255][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.429881][ T4720] veth0_vlan: entered promiscuous mode [ 31.441412][ T4720] veth1_vlan: entered promiscuous mode [ 31.464771][ T4720] veth0_macvtap: entered promiscuous mode [ 31.477029][ T4720] veth1_macvtap: entered promiscuous mode [ 31.486729][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.489470][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.497957][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.557804][ T39] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.558038][ T39] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.558112][ T39] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.558127][ T39] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.582514][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.583535][ T4854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.583546][ T4854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.603882][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.614436][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.616613][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.622931][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.654745][ T4718] veth0_vlan: entered promiscuous mode [ 31.663179][ T4720] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.663855][ T4718] veth1_vlan: entered promiscuous mode [ 31.673582][ T4709] veth0_vlan: entered promiscuous mode [ 31.680544][ T4708] veth0_vlan: entered promiscuous mode [ 31.686516][ T4710] veth0_vlan: entered promiscuous mode [ 31.690768][ T4708] veth1_vlan: entered promiscuous mode [ 31.693160][ T4718] veth0_macvtap: entered promiscuous mode [ 31.695835][ T4709] veth1_vlan: entered promiscuous mode [ 31.700104][ T4710] veth1_vlan: entered promiscuous mode [ 31.703460][ T4718] veth1_macvtap: entered promiscuous mode [ 31.712050][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.728605][ T4708] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 31.734645][ T4710] veth0_macvtap: entered promiscuous mode [ 31.747747][ T4710] veth1_macvtap: entered promiscuous mode [ 31.754256][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.786228][ T1493] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.787578][ T1493] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.788383][ T1493] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.788473][ T1493] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.845504][ T4708] veth0_macvtap: entered promiscuous mode [ 31.861564][ T4709] veth0_macvtap: entered promiscuous mode [ 31.887479][ T4708] veth1_macvtap: entered promiscuous mode [ 31.920394][ T4709] veth1_macvtap: entered promiscuous mode [ 31.941193][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.996756][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.042211][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.054173][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.057069][ T1493] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.057443][ T1493] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.057522][ T1493] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.057579][ T1493] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.101503][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.116543][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.119359][ T1057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.119448][ T1057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.156581][ T4724] Bluetooth: hci1: command tx timeout [ 32.156824][ T4724] Bluetooth: hci3: command tx timeout [ 32.156938][ T4724] Bluetooth: hci0: command tx timeout [ 32.157030][ T4724] Bluetooth: hci2: command tx timeout [ 32.157121][ T4724] Bluetooth: hci4: command tx timeout [ 32.170298][ T39] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.170840][ T39] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.171081][ T39] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.171340][ T39] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.207952][ T1493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.208006][ T1493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.237767][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.237870][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.237941][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.237980][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.248186][ T4898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.250679][ T4898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.350398][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.351983][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.374413][ T1493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.374479][ T1493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.525051][ T1057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.525096][ T1057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.525373][ T1057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.525397][ T1057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.620772][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.620831][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.652297][ T1057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.652360][ T1057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.818511][ T4907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.824755][ T4907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.963985][ T4909] PM: suspend entry (s2idle) [ 33.010927][ T15] Filesystems sync: 0.046 seconds [ 33.070333][ T4904] EXT4-fs (nvme0n1p2): shut down requested (2) [ 33.070443][ T4904] Aborting journal on device nvme0n1p2-8. [ 33.251590][ T4905] xhci_hcd 0000:00:02.0: xHCI Host Controller [ 33.256432][ T4905] xhci_hcd 0000:00:02.0: new USB bus registered, assigned bus number 34 [ 33.260432 ** replaying previous printk message ** [ 33.260432][ T4905] Unable to handle kernel paging request at virtual address ffff800097e240ff [ 33.260525][ T4905] KASAN: probably user-memory-access in range [0x00000004bf1207f8-0x00000004bf1207ff] [ 33.260541][ T4905] Mem abort info: [ 33.260548][ T4905] ESR = 0x0000000096000021 [ 33.260557][ T4905] EC = 0x25: DABT (current EL), IL = 32 bits [ 33.260567][ T4905] SET = 0, FnV = 0 [ 33.260574][ T4905] EA = 0, S1PTW = 0 [ 33.260581][ T4905] FSC = 0x21: alignment fault [ 33.260589][ T4905] Data abort info: [ 33.260595][ T4905] ISV = 0, ISS = 0x00000021, ISS2 = 0x00000000 [ 33.260603][ T4905] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 33.260612][ T4905] GCS = 0, Overlay = 0, DirtyBit = 0 [ 33.260620][ T4905] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000000021b049000 [ 33.260631][ T4905] [ffff800097e240ff] pgd=0000000000000000, p4d=1000000221341003, pud=1000000221342003, pmd=100000010c5a6403, pte=0068010000000713 [ 33.260728][ T4905] Internal error: Oops: 0000000096000021 [#1] SMP [ 33.277536][ T4905] Modules linked in: [ 33.278256][ T4905] CPU: 1 UID: 0 PID: 4905 Comm: syz.1.9 Not tainted syzkaller #0 PREEMPT [ 33.279717][ T4905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 33.281533][ T4905] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 33.282814][ T4905] pc : xhci_halt+0x64/0x1ec [ 33.283589][ T4905] lr : xhci_halt+0x40/0x1ec [ 33.284349][ T4905] sp : ffff8000989d73c0 [ 33.285050][ T4905] x29: ffff8000989d73c0 x28: ffff0000cfc22000 x27: dfff800000000000 [ 33.286454][ T4905] x26: ffff0000cfc22418 x25: 0000000000000f01 x24: ffff0000cfc226e8 [ 33.287887][ T4905] x23: ffff0000c2f1e0d0 x22: ffff0000cfc22418 x21: dfff800000000000 [ 33.289281][ T4905] x20: 1fffe00019f84483 x19: ffff0000cfc22400 x18: 1fffe00034bbbe28 [ 33.290652][ T4905] x17: 0000000000000003 x16: ffff800088b37000 x15: 0000000000000000 [ 33.292076][ T4905] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 33.293461][ T4905] x11: 000000000015de20 x10: 00000000fffffbf2 x9 : eae7e6e7ab5ffd00 [ 33.294798][ T4905] x8 : ffff800097e240ff x7 : 4348206568742074 x6 : 20746c6148202f2f [ 33.296224][ T4905] x5 : ffff0000f489d96a x4 : 0000000000000000 x3 : ffff8000833104ec [ 33.297700][ T4905] x2 : 0000000000000002 x1 : ffff0000c4bc0000 x0 : 0000000000000001 [ 33.299101][ T4905] Call trace: [ 33.299683][ T4905] xhci_halt+0x64/0x1ec (P) [ 33.300472][ T4905] xhci_gen_setup+0x5d8/0x111c [ 33.301280][ T4905] xhci_pci_setup+0x110/0x44c [ 33.302115][ T4905] usb_add_hcd+0x5c4/0xdec [ 33.302971][ T4905] usb_hcd_pci_probe+0x63c/0xaa4 [ 33.303869][ T4905] xhci_pci_common_probe+0x90/0x760 [ 33.304745][ T4905] xhci_pci_probe+0x44/0xdc [ 33.305541][ T4905] local_pci_probe+0xc8/0x158 [ 33.306351][ T4905] pci_device_probe+0x460/0x8d4 [ 33.307205][ T4905] really_probe+0x29c/0x800 [ 33.307975][ T4905] __driver_probe_device+0x1e0/0x350 [ 33.308888][ T4905] device_driver_attach+0x58/0xac [ 33.309755][ T4905] bind_store+0xf4/0x14c [ 33.310466][ T4905] drv_attr_store+0x80/0xa4 [ 33.311225][ T4905] sysfs_kf_write+0xe0/0x108 [ 33.311996][ T4905] kernfs_fop_write_iter+0x260/0x3b8 [ 33.312861][ T4905] vfs_write+0x51c/0xa0c [ 33.313574][ T4905] ksys_write+0x12c/0x228 [ 33.314311][ T4905] __arm64_sys_write+0x84/0x98 [ 33.315156][ T4905] invoke_syscall+0x98/0x244 [ 33.315986][ T4905] el0_svc_common+0x19c/0x23c [ 33.316800][ T4905] do_el0_svc+0x4c/0x5c [ 33.317511][ T4905] el0_svc+0x64/0x260 [ 33.318176][ T4905] el0t_64_sync_handler+0x44/0x104 [ 33.319039][ T4905] el0t_64_sync+0x198/0x19c [ 33.319792][ T4905] Code: 9762248f f94002c8 128081aa d503201f (b9400108) [ 33.320942][ T4905] ---[ end trace 0000000000000000 ]--- [ 33.612252][ T4905] Kernel panic - not syncing: Oops: Fatal exception [ 33.613359][ T4905] SMP: stopping secondary CPUs [ 33.614175][ T4905] Kernel Offset: disabled [ 33.614917][ T4905] CPU features: 0x14000000,003c0008,27020a02,a84ff6a7 [ 33.616036][ T4905] Memory Limit: none [ 33.888606][ T4905] Rebooting in 86400 seconds..