last executing test programs: 613.495013ms ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='3\n\x00', 0x2) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc0f8565c, &(0x7f0000000200)) 541.127431ms ago: executing program 0 (id=6): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x16, 0x2) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000100)) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000120)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x0, &(0x7f0000000200)='\x00\x00\x00\x00', 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 494.951168ms ago: executing program 0 (id=7): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000a00)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1388, @empty}}, 0x18) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000b00)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1389, @empty}}, 0x1c) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000c00)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x138a, @empty}}, 0x24) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000d00)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x138b, @empty}}, 0x80) 412.912924ms ago: executing program 0 (id=8): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e604050000010102030109022000010100803209040000020806f0000705020240000007058102400000"], 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x15, 0x2) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000300)=@usbdevfs_connect) r1 = syz_open_dev$usbfs(&(0x7f0000000400), 0xd, 0x2) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000500)=@usbdevfs_connect) r2 = syz_open_dev$usbfs(&(0x7f0000000600), 0x16, 0x2) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000700)=@usbdevfs_connect) r3 = syz_open_dev$usbfs(&(0x7f0000000800), 0x17, 0x2) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000900)=@usbdevfs_connect) 363.946469ms ago: executing program 3 (id=4): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040450c40600001000000010902320001010080320904000002000000000705810100020107050201000201"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 192.351101ms ago: executing program 2 (id=3): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000000314010000000000000000002500020073797a5f6465766963655f6e616d655f33325f63686172735f31323334353637000000000800410073697700070033006c6f0000"], 0x48}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0x0}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x1234, @loopback}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000400)={0x7, 0x8, 0xfa00, {r2, 0x10}}, 0x10) 190.337105ms ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='dev_mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='sys_mnt/block/zram0/reset\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='1', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='lzo-rle', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='algo=lzo-rle', 0xc) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='10485760', 0x8) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0) write(r4, &(0x7f0000000480)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) close(r4) 175.566953ms ago: executing program 4 (id=5): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3b80, &(0x7f0000000200)={0x48, 0x2, r1}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3b80, &(0x7f0000000300)={0x48, 0x5, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3b80, &(0x7f0000000400)={0x48, 0x7, r2, 0x0, 0x1, 0x0, 0x1000000, 0x800000}) 121.997539ms ago: executing program 4 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff) r3 = openat(r2, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r4 = openat(r3, &(0x7f00000001c0)='idVendor\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='0x1d6b\x00', 0x6) openat(r3, &(0x7f0000000240)='idProduct\x00', 0x2, 0x0) openat(r3, &(0x7f0000000250)='webusb/use\x00', 0x2, 0x0) mkdirat(r3, &(0x7f00000002c0)='strings/0x409\x00', 0x1ff) openat(r3, &(0x7f0000000300)='strings/0x409\x00', 0x0, 0x0) mkdirat(r3, &(0x7f00000004c0)='functions/Loopback.usb0\x00', 0x1ff) mkdirat(r3, &(0x7f0000000500)='configs/c.1\x00', 0x1ff) r5 = openat(r3, &(0x7f0000000540)='configs/c.1\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000580)='strings/0x409\x00', 0x1ff) symlinkat(&(0x7f0000000680)='./config/usb_gadget/g1/functions/Loopback.usb0\x00', r5, &(0x7f0000000700)='Loopback.usb0\x00') write(0xffffffffffffffff, &(0x7f0000000780)='usbip-vudc.0\n\x00', 0xd) nanosleep(&(0x7f0000000a00)={0x0, 0x5f5e100}, 0x0) write(r0, &(0x7f0000000880)='5\x00', 0x2) writev(r1, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009a0)='6 ', 0x2}, {&(0x7f00000009c0)='0 3\n', 0x4}], 0x3) nanosleep(&(0x7f0000000a00)={0x0, 0x1dcd6500}, 0x0) 121.112764ms ago: executing program 1 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0000:00:02.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='xhci_hcd\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/drivers/xhci_hcd/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0000:00:02.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:02.0/dbc_bInterfaceProtocol\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)='0\x00', 0x1) 105.303209ms ago: executing program 2 (id=11): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04100100"], 0x4) nanosleep(&(0x7f00000001c0)={0x0, 0x1312d00}, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e0a01091000001122334455"], 0xd) nanosleep(&(0x7f00000002c0)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000380)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x1312d00}, 0x0) 0s ago: executing program 2 (id=12): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000600)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000300)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}) ioctl(r0, 0x3b90, &(0x7f0000000500)="2800000000000000efbeadde04000000000000000300"/40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.167' (ED25519) to the list of known hosts. [ 28.675949][ T4703] cgroup: Unknown subsys name 'net' [ 28.805596][ T4703] cgroup: Unknown subsys name 'cpuset' [ 28.807615][ T4703] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.973317][ T4703] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.806367][ T4728] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.807031][ T4728] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.807637][ T4728] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.808005][ T4728] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.808366][ T4728] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.808568][ T4728] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.808785][ T4728] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.809010][ T4728] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.809270][ T4728] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.809515][ T4728] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.809673][ T4728] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.809832][ T4728] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.809976][ T4728] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.810351][ T4728] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.810681][ T4728] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.811866][ T4728] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.812026][ T4728] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.812312][ T4728] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.812483][ T4728] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.812798][ T4728] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.813696][ T4728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.813857][ T4728] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.814014][ T4728] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.817211][ T4722] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.822366][ T4720] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.231488][ T4723] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.231735][ T4723] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.231812][ T4723] bridge_slave_0: entered allmulticast mode [ 30.232296][ T4723] bridge_slave_0: entered promiscuous mode [ 30.233727][ T4723] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.233771][ T4723] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.233831][ T4723] bridge_slave_1: entered allmulticast mode [ 30.234443][ T4723] bridge_slave_1: entered promiscuous mode [ 30.246436][ T4724] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.246549][ T4724] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.246610][ T4724] bridge_slave_0: entered allmulticast mode [ 30.247033][ T4724] bridge_slave_0: entered promiscuous mode [ 30.260732][ T4724] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.260786][ T4724] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.260847][ T4724] bridge_slave_1: entered allmulticast mode [ 30.261330][ T4724] bridge_slave_1: entered promiscuous mode [ 30.266321][ T4723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.267337][ T4723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.289789][ T4723] team0: Port device team_slave_0 added [ 30.293212][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.294406][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.294467][ T4719] bridge_slave_0: entered allmulticast mode [ 30.294892][ T4719] bridge_slave_0: entered promiscuous mode [ 30.295585][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.295607][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.295657][ T4719] bridge_slave_1: entered allmulticast mode [ 30.296099][ T4719] bridge_slave_1: entered promiscuous mode [ 30.302572][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.304105][ T4724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.305471][ T4724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.309054][ T4723] team0: Port device team_slave_1 added [ 30.313310][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.313544][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.313619][ T4714] bridge_slave_0: entered allmulticast mode [ 30.314029][ T4714] bridge_slave_0: entered promiscuous mode [ 30.315803][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.315824][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.315876][ T4714] bridge_slave_1: entered allmulticast mode [ 30.316313][ T4714] bridge_slave_1: entered promiscuous mode [ 30.323268][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.323337][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.323393][ T4715] bridge_slave_0: entered allmulticast mode [ 30.323795][ T4715] bridge_slave_0: entered promiscuous mode [ 30.325217][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.325238][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.325290][ T4715] bridge_slave_1: entered allmulticast mode [ 30.325727][ T4715] bridge_slave_1: entered promiscuous mode [ 30.327360][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.333900][ T4724] team0: Port device team_slave_0 added [ 30.352149][ T4724] team0: Port device team_slave_1 added [ 30.356076][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.356432][ T4723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.356453][ T4723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.356825][ T4723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.357626][ T4723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.357638][ T4723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.357648][ T4723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.358469][ T4719] team0: Port device team_slave_0 added [ 30.359440][ T4719] team0: Port device team_slave_1 added [ 30.360680][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.361711][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.366270][ T4724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.366279][ T4724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.366294][ T4724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.367584][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.378056][ T4724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.378064][ T4724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.378078][ T4724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.397714][ T4715] team0: Port device team_slave_0 added [ 30.398503][ T4715] team0: Port device team_slave_1 added [ 30.403097][ T4724] hsr_slave_0: entered promiscuous mode [ 30.403933][ T4724] hsr_slave_1: entered promiscuous mode [ 30.410452][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.410472][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.410501][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.414009][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.414018][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.414030][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.419926][ T4723] hsr_slave_0: entered promiscuous mode [ 30.420227][ T4723] hsr_slave_1: entered promiscuous mode [ 30.420427][ T4723] debugfs: 'hsr0' already exists in 'hsr' [ 30.420459][ T4723] Cannot create hsr debugfs directory [ 30.420741][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.420748][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.420767][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.423373][ T4714] team0: Port device team_slave_0 added [ 30.425237][ T4714] team0: Port device team_slave_1 added [ 30.428485][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.428493][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.428505][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.459935][ T4719] hsr_slave_0: entered promiscuous mode [ 30.460265][ T4719] hsr_slave_1: entered promiscuous mode [ 30.460473][ T4719] debugfs: 'hsr0' already exists in 'hsr' [ 30.460482][ T4719] Cannot create hsr debugfs directory [ 30.460767][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.460774][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.460787][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.461368][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.461375][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.461390][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.475742][ T4714] hsr_slave_0: entered promiscuous mode [ 30.476015][ T4714] hsr_slave_1: entered promiscuous mode [ 30.476193][ T4714] debugfs: 'hsr0' already exists in 'hsr' [ 30.476202][ T4714] Cannot create hsr debugfs directory [ 30.494858][ T4715] hsr_slave_0: entered promiscuous mode [ 30.495200][ T4715] hsr_slave_1: entered promiscuous mode [ 30.495398][ T4715] debugfs: 'hsr0' already exists in 'hsr' [ 30.495407][ T4715] Cannot create hsr debugfs directory [ 30.614979][ T4724] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.618129][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.620022][ T4724] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.622927][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.623541][ T4724] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.625429][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.628627][ T4724] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.631505][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.647225][ T4724] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.647288][ T4724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.647432][ T4724] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.647466][ T4724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.649635][ T4719] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.651161][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.656919][ T4719] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.659197][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.659620][ T4719] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.661339][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.665393][ T4719] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.667620][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.681197][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.681236][ T4719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.681314][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.681346][ T4719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.687955][ T4714] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.689917][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.691723][ T4714] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.694129][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.696519][ T4714] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.699040][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.706795][ T4714] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.708852][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.726995][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.735510][ T4723] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.736567][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.736873][ T4723] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.738341][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.742832][ T4723] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.745642][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.747458][ T4723] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.749698][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.752980][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.754956][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.757111][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.758759][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.771256][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.773597][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.773645][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.788903][ T4715] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.791015][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.793184][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.793206][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.806055][ T4724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.809873][ T4715] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.811874][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.812548][ T4715] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.813783][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.820251][ T4719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.838098][ T4724] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.841817][ T4715] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.844075][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.849098][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.852209][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.857682][ T1894] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.857730][ T1894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.858074][ T1894] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.858092][ T1894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.858615][ T1894] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.858635][ T1894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.865759][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.865800][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.885406][ T4723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.920204][ T4723] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.931034][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.933537][ T2000] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.933575][ T2000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.938144][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.938196][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.950002][ T4714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.950035][ T4714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.972359][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.978159][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.986157][ T1963] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.986202][ T1963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.992876][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.992916][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.010277][ T4715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.010311][ T4715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.028378][ T4719] veth0_vlan: entered promiscuous mode [ 31.030074][ T4719] veth1_vlan: entered promiscuous mode [ 31.068829][ T4719] veth0_macvtap: entered promiscuous mode [ 31.073549][ T4719] veth1_macvtap: entered promiscuous mode [ 31.081499][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.085698][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.125101][ T39] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.126928][ T39] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.127034][ T39] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.127101][ T39] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.146567][ T1963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.146598][ T1963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.152502][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.152532][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.200491][ T4719] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.208499][ T4724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.226859][ T4724] veth0_vlan: entered promiscuous mode [ 31.237526][ T4724] veth1_vlan: entered promiscuous mode [ 31.253201][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.268408][ T4724] veth0_macvtap: entered promiscuous mode [ 31.270765][ T4724] veth1_macvtap: entered promiscuous mode [ 31.285748][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.287626][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.316212][ T4723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.321695][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.353657][ T4715] veth0_vlan: entered promiscuous mode [ 31.377182][ T4715] veth1_vlan: entered promiscuous mode [ 31.386049][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.386075][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.388350][ T4723] veth0_vlan: entered promiscuous mode [ 31.390203][ T4723] veth1_vlan: entered promiscuous mode [ 31.418595][ T1963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.418625][ T1963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.430609][ T4714] veth0_vlan: entered promiscuous mode [ 31.434851][ T4715] veth0_macvtap: entered promiscuous mode [ 31.440058][ T4715] veth1_macvtap: entered promiscuous mode [ 31.442771][ T4723] veth0_macvtap: entered promiscuous mode [ 31.445203][ T4723] veth1_macvtap: entered promiscuous mode [ 31.449877][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.455672][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.458146][ T4714] veth1_vlan: entered promiscuous mode [ 31.462417][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.479001][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.483049][ T4905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.483573][ T4905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.497527][ T4714] veth0_macvtap: entered promiscuous mode [ 31.508732][ T4714] veth1_macvtap: entered promiscuous mode [ 31.514725][ T1167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.515107][ T1167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.515126][ T1167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.515143][ T1167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.515159][ T1167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.515174][ T1167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.515189][ T1167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.515204][ T1167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.519719][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.520961][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.535860][ T2000] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.536015][ T2000] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.536226][ T2000] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.552124][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.552155][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.563347][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.563382][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.565518][ T15] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.578796][ T2000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.578821][ T2000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.590997][ T2000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.591030][ T2000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.599052][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.599169][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.602700][ T2000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.602727][ T2000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.605031][ T1167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.605478][ T1167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.605635][ T1167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.605766][ T1167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.634433][ T1093] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.673541][ T4910] lo speed is unknown, defaulting to 1000 [ 31.673593][ T4910] lo speed is unknown, defaulting to 1000 [ 31.674106][ T4910] lo speed is unknown, defaulting to 1000 [ 31.675485][ T4910] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 31.683713][ T4909] zram0: detected capacity change from 0 to 20480 [ 31.686790][ T4910] lo speed is unknown, defaulting to 1000 [ 31.687209][ T4910] lo speed is unknown, defaulting to 1000 [ 31.697279][ T4910] lo speed is unknown, defaulting to 1000 [ 31.697682][ T4910] lo speed is unknown, defaulting to 1000 [ 31.698186][ T4910] lo speed is unknown, defaulting to 1000 [ 31.742043][ T4727] Bluetooth: hci3: hardware error 0x00 [ 31.787819][ T1093] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 31.789701][ T4918] usbip-vudc usbip-vudc.0: gadget not bound [ 31.791998][ T1093] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 31.792046][ T1093] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 31.793532][ T4918] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 31.793550][ T4918] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 31.793797][ T4918] vhci_hcd vhci_hcd.0: Device attached [ 31.802149][ T1093] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.804073][ T1093] usb 1-1: Product: syz [ 31.804105][ T1093] usb 1-1: Manufacturer: syz [ 31.804121][ T1093] usb 1-1: SerialNumber: syz [ 31.810053][ T4903] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 31.810676][ T4903] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 31.814503][ T1093] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 31.818339][ T1093] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P f0) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 31.818339][ T1093] Please send a copy of this message to and [ 31.830190][ T4916] EXT4-fs (nvme0n1p2): shut down requested (2) [ 31.830271][ T4916] Aborting journal on device nvme0n1p2-8. [ 31.864762][ T4728] Bluetooth: hci2: command tx timeout [ 31.864956][ T4728] Bluetooth: hci1: command tx timeout [ 31.865042][ T4728] Bluetooth: hci0: command tx timeout [ 31.865188][ T4720] Bluetooth: hci4: command tx timeout [ 31.982528][ T4921] xhci_hcd 0000:00:02.0: xHCI Host Controller [ 31.985813][ T4921 ** replaying previous printk message ** [ 31.985813][ T4921] xhci_hcd 0000:00:02.0: new USB bus registered, assigned bus number 34 [ 31.985964][ T4921] Unable to handle kernel paging request at virtual address ffff80009b9f40ff [ 31.985978][ T4921] KASAN: probably user-memory-access in range [0x00000004dcfa07f8-0x00000004dcfa07ff] [ 31.985989][ T4921] Mem abort info: [ 31.985992][ T4921] ESR = 0x0000000096000021 [ 31.985997][ T4921] EC = 0x25: DABT (current EL), IL = 32 bits [ 31.986003][ T4921] SET = 0, FnV = 0 [ 31.986008][ T4921] EA = 0, S1PTW = 0 [ 31.986012][ T4921] FSC = 0x21: alignment fault [ 31.986016][ T4921] Data abort info: [ 31.986019][ T4921] ISV = 0, ISS = 0x00000021, ISS2 = 0x00000000 [ 31.986025][ T4921] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 31.986030][ T4921] GCS = 0, Overlay = 0, DirtyBit = 0 [ 31.986035][ T4921] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000000021b049000 [ 31.986042][ T4921] [ffff80009b9f40ff] pgd=0000000000000000, p4d=1000000221341003, pud=1000000221342003, pmd=100000010ee62403, pte=0068010000000713 [ 31.986257][ T4921] Internal error: Oops: 0000000096000021 [#1] SMP [ 32.005617][ T4921] Modules linked in: [ 32.006321][ T4921] CPU: 1 UID: 0 PID: 4921 Comm: syz.1.10 Not tainted syzkaller #0 PREEMPT [ 32.007889][ T4921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 32.009657][ T4921] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 32.011017][ T4921] pc : xhci_halt+0x64/0x1ec [ 32.011823][ T4921] lr : xhci_halt+0x40/0x1ec [ 32.012622][ T4921] sp : ffff8000999c73c0 [ 32.013321][ T4921] x29: ffff8000999c73c0 x28: ffff0000cca16000 x27: dfff800000000000 [ 32.014757][ T4921] x26: ffff0000cca16418 x25: 0000000000000f01 x24: ffff0000cca166e8 [ 32.016163][ T4921] x23: ffff0000c2f0c0d0 x22: ffff0000cca16418 x21: dfff800000000000 [ 32.017593][ T4921] x20: 1fffe00019942c83 x19: ffff0000cca16400 x18: 00000000ffffffff [ 32.019061][ T4921] x17: ffff80008a7d6000 x16: 0000000000000006 x15: ffff80008a35fda0 [ 32.020466][ T4921] x14: ffff80008a5d5e28 x13: 0000000000000004 x12: 0000000000000000 [ 32.021888][ T4921] x11: ffff8000999c72e0 x10: 00000000fffffbf2 x9 : 392e068d129c5700 [ 32.023318][ T4921] x8 : ffff80009b9f40ff x7 : 0000000000000000 x6 : 0000000000000000 [ 32.024771][ T4921] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000833104ec [ 32.026175][ T4921] x2 : 0000000000000002 x1 : ffff0000c94bd7c0 x0 : 0000000000000001 [ 32.027661][ T4921] Call trace: [ 32.028265][ T4921] xhci_halt+0x64/0x1ec (P) [ 32.029065][ T4921] xhci_gen_setup+0x5d8/0x111c [ 32.029909][ T4921] xhci_pci_setup+0x110/0x44c [ 32.030745][ T4921] usb_add_hcd+0x5c4/0xdec [ 32.031543][ T4921] usb_hcd_pci_probe+0x63c/0xaa4 [ 32.032419][ T4921] xhci_pci_common_probe+0x90/0x760 [ 32.033351][ T4921] xhci_pci_probe+0x44/0xdc [ 32.034186][ T4921] local_pci_probe+0xc8/0x158 [ 32.035046][ T4921] pci_device_probe+0x460/0x8d4 [ 32.035938][ T4921] really_probe+0x29c/0x800 [ 32.036768][ T4921] __driver_probe_device+0x1e0/0x350 [ 32.037694][ T4921] device_driver_attach+0x58/0xac [ 32.038572][ T4921] bind_store+0xf4/0x14c [ 32.039294][ T4921] drv_attr_store+0x80/0xa4 [ 32.040069][ T4921] sysfs_kf_write+0xe0/0x108 [ 32.040866][ T4921] kernfs_fop_write_iter+0x260/0x3b8 [ 32.041804][ T4921] vfs_write+0x51c/0xa0c [ 32.042563][ T4921] ksys_write+0x12c/0x228 [ 32.043335][ T4921] __arm64_sys_write+0x84/0x98 [ 32.044217][ T4921] invoke_syscall+0x98/0x244 [ 32.045031][ T4921] el0_svc_common+0xec/0x23c [ 32.045875][ T4921] do_el0_svc+0x4c/0x5c [ 32.046620][ T4921] el0_svc+0x64/0x260 [ 32.047339][ T4921] el0t_64_sync_handler+0x44/0x104 [ 32.048287][ T4921] el0t_64_sync+0x198/0x19c [ 32.049091][ T4921] Code: 9762248f f94002c8 128081aa d503201f (b9400108) [ 32.050331][ T4921] ---[ end trace 0000000000000000 ]--- [ 32.310087][ T4921] Kernel panic - not syncing: Oops: Fatal exception [ 32.311285][ T4921] SMP: stopping secondary CPUs [ 32.312106][ T4921] Kernel Offset: disabled [ 32.312855][ T4921] CPU features: 0x14000000,003c0008,27020a02,a84ff6a7 [ 32.314026][ T4921] Memory Limit: none [ 32.567700][ T4921] Rebooting in 86400 seconds..