last executing test programs: 852.247334ms ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0fc5:1227:b\n', 0xc) close(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040c50f2712000101020301090212000101008032090400000000000000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/usb/devices/5-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='0\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/usb/devices/5-1/power/control\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)='auto\n', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/usb/devices/1-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='0\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) write(r4, &(0x7f0000000500)='auto\n', 0x5) close(r4) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/bus/usb/devices/5-1/power/control\x00', 0x2, 0x0) write(r5, &(0x7f0000000700)='on\n', 0x3) close(r5) 754.557687ms ago: executing program 1 (id=2): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000040)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000100)=""/36, 0x24, 0x5, 0x57e, 0x306}}, 0x120) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000001000)={0xc, {0x7, "20000002000064"}}, 0x111c) 715.229602ms ago: executing program 2 (id=3): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000100000040582005109bc100000001090212010000000009048f0000bf575a00"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='nodev\x00', &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0) read(r0, &(0x7f0000000500)=""/1000, 0x3e8) 619.578159ms ago: executing program 3 (id=4): syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="06010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/devices/1-1/power/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='auto\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/usb/devices/1-1/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0\x00', 0x1) close(r1) nanosleep(&(0x7f0000000300)={0x2}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/1-1/power/control\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='on\x00', 0x2) close(r2) 564.192721ms ago: executing program 4 (id=5): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x111}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0000:00:02.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='xhci_hcd\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/drivers/xhci_hcd/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='0000:00:02.0\x00', 0xd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.34' (ED25519) to the list of known hosts. [ 28.635702][ T4701] cgroup: Unknown subsys name 'net' [ 28.765386][ T4701] cgroup: Unknown subsys name 'cpuset' [ 28.767588][ T4701] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.964314][ T4701] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.840834][ T4714] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.842638][ T4714] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.844741][ T4714] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.847489][ T4714] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.849938][ T4714] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.859702][ T4712] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.862412][ T4727] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.862730][ T4727] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.864133][ T4727] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.864269][ T4727] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.864617][ T4727] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.865066][ T4727] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.865423][ T4727] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.866228][ T4727] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.866884][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.871992][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.873125][ T4727] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.873263][ T4727] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.874567][ T4722] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.875433][ T4729] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.875539][ T4729] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.879338][ T4729] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.880556][ T4729] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.881753][ T4729] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.884295][ T4714] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.224104][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.224173][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.224814][ T4717] bridge_slave_0: entered allmulticast mode [ 30.225343][ T4717] bridge_slave_0: entered promiscuous mode [ 30.226847][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.226870][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.226955][ T4717] bridge_slave_1: entered allmulticast mode [ 30.227603][ T4717] bridge_slave_1: entered promiscuous mode [ 30.252309][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.263554][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.283557][ T4717] team0: Port device team_slave_0 added [ 30.306877][ T4717] team0: Port device team_slave_1 added [ 30.320364][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.320393][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.320422][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.323433][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.323612][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.323671][ T4716] bridge_slave_0: entered allmulticast mode [ 30.324557][ T4716] bridge_slave_0: entered promiscuous mode [ 30.325624][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.325648][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.325732][ T4716] bridge_slave_1: entered allmulticast mode [ 30.326190][ T4716] bridge_slave_1: entered promiscuous mode [ 30.327133][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.327140][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.327152][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.360280][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.382302][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.394972][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.395088][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.395216][ T4715] bridge_slave_0: entered allmulticast mode [ 30.395636][ T4715] bridge_slave_0: entered promiscuous mode [ 30.401573][ T4717] hsr_slave_0: entered promiscuous mode [ 30.401937][ T4717] hsr_slave_1: entered promiscuous mode [ 30.402477][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.402503][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.402565][ T4711] bridge_slave_0: entered allmulticast mode [ 30.402965][ T4711] bridge_slave_0: entered promiscuous mode [ 30.403880][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.403900][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.403982][ T4711] bridge_slave_1: entered allmulticast mode [ 30.404484][ T4711] bridge_slave_1: entered promiscuous mode [ 30.417834][ T4716] team0: Port device team_slave_0 added [ 30.419144][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.419210][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.419334][ T4715] bridge_slave_1: entered allmulticast mode [ 30.419780][ T4715] bridge_slave_1: entered promiscuous mode [ 30.428163][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.433332][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.438066][ T4716] team0: Port device team_slave_1 added [ 30.462117][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.463574][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.467662][ T4715] team0: Port device team_slave_0 added [ 30.476098][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.477463][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.477503][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.480975][ T4715] team0: Port device team_slave_1 added [ 30.487174][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.488619][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.490117][ T4718] bridge_slave_0: entered allmulticast mode [ 30.492213][ T4718] bridge_slave_0: entered promiscuous mode [ 30.494429][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.495774][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.497159][ T4718] bridge_slave_1: entered allmulticast mode [ 30.498779][ T4718] bridge_slave_1: entered promiscuous mode [ 30.505344][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.506715][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.511516][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.514132][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.514157][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.514174][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.514790][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.514798][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.514815][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.525872][ T4711] team0: Port device team_slave_0 added [ 30.527004][ T4711] team0: Port device team_slave_1 added [ 30.535779][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.540136][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.548484][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.548512][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.548531][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.554440][ T4716] hsr_slave_0: entered promiscuous mode [ 30.555140][ T4716] hsr_slave_1: entered promiscuous mode [ 30.555370][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 30.555402][ T4716] Cannot create hsr debugfs directory [ 30.564489][ T4718] team0: Port device team_slave_0 added [ 30.564775][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.564782][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.564794][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.580848][ T4718] team0: Port device team_slave_1 added [ 30.599339][ T4715] hsr_slave_0: entered promiscuous mode [ 30.599680][ T4715] hsr_slave_1: entered promiscuous mode [ 30.599890][ T4715] debugfs: 'hsr0' already exists in 'hsr' [ 30.599901][ T4715] Cannot create hsr debugfs directory [ 30.603531][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.603612][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.603628][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.616619][ T4711] hsr_slave_0: entered promiscuous mode [ 30.618255][ T4711] hsr_slave_1: entered promiscuous mode [ 30.619701][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 30.620818][ T4711] Cannot create hsr debugfs directory [ 30.622250][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.622275][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.622288][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.652569][ T4718] hsr_slave_0: entered promiscuous mode [ 30.652899][ T4718] hsr_slave_1: entered promiscuous mode [ 30.653101][ T4718] debugfs: 'hsr0' already exists in 'hsr' [ 30.653111][ T4718] Cannot create hsr debugfs directory [ 30.729735][ T4717] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.733469][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.745839][ T4717] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.748391][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.748787][ T4717] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.751114][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.752829][ T4717] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.755583][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.781950][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.782005][ T4717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.782226][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.782265][ T4717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.788052][ T4716] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.790601][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.792510][ T4716] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.795548][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.797263][ T4716] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.799622][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.802672][ T4716] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.805143][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.828365][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.828416][ T4716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.828512][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.828545][ T4716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.832470][ T4711] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.834965][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.835753][ T4711] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.837054][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.837847][ T4711] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.839725][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.847497][ T4711] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.849678][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.865522][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.875980][ T4718] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.878592][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.878963][ T4718] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.880759][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.885709][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.885807][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.885887][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.885915][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.893757][ T4718] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.896663][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.897265][ T4718] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.898833][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.911140][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.919645][ T3265] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.921124][ T3265] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.924531][ T3265] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.925891][ T3265] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.927666][ T3265] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.929055][ T3265] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.946978][ T4715] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.948044][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.950990][ T3265] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.951049][ T3265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.951984][ T3265] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.952020][ T3265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.958032][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.964788][ T4715] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.966229][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.966545][ T4715] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.967949][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.968840][ T4715] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.970086][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.979486][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.999681][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.999727][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.000076][ T3461] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.000094][ T3461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.008176][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.023074][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.030966][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.032683][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.032733][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.060259][ T3265] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.060309][ T3265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.078589][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.082899][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.082958][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.084700][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.084727][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.091563][ T4718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.092340][ T4718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.102785][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.116680][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.121374][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.121418][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.141903][ T4711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.141950][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.164508][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.164559][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.199858][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.236485][ T4717] veth0_vlan: entered promiscuous mode [ 31.241115][ T4717] veth1_vlan: entered promiscuous mode [ 31.260166][ T4717] veth0_macvtap: entered promiscuous mode [ 31.269230][ T4717] veth1_macvtap: entered promiscuous mode [ 31.278174][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.297574][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.335696][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.337126][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.392578][ T4716] veth0_vlan: entered promiscuous mode [ 31.412772][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.417759][ T4716] veth1_vlan: entered promiscuous mode [ 31.424618][ T4716] veth0_macvtap: entered promiscuous mode [ 31.426607][ T4716] veth1_macvtap: entered promiscuous mode [ 31.427401][ T4718] veth0_vlan: entered promiscuous mode [ 31.429622][ T4718] veth1_vlan: entered promiscuous mode [ 31.430914][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.432677][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.445135][ T1211] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.445526][ T1211] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.445544][ T1211] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.445560][ T1211] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.450101][ T4718] veth0_macvtap: entered promiscuous mode [ 31.453352][ T4718] veth1_macvtap: entered promiscuous mode [ 31.458391][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.462056][ T3461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.462087][ T3461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.483073][ T1211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.483129][ T1211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.505407][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.525023][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.529542][ T4715] veth0_vlan: entered promiscuous mode [ 31.537576][ T1211] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.538163][ T1211] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.538190][ T1211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.538198][ T1211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.538492][ T1211] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.551830][ T4717] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.553213][ T4715] veth1_vlan: entered promiscuous mode [ 31.599841][ T1211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.600053][ T1211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.605780][ T4715] veth0_macvtap: entered promiscuous mode [ 31.608493][ T4715] veth1_macvtap: entered promiscuous mode [ 31.616814][ T1211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.616850][ T1211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.636655][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.640084][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.640124][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.641143][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.643585][ T4711] veth0_vlan: entered promiscuous mode [ 31.660013][ T4711] veth1_vlan: entered promiscuous mode [ 31.681281][ T4800] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 31.681322][ T4800] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 31.681351][ T4800] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 31.681365][ T4800] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 31.681378][ T4800] wiimote 0005:057E:0306.0001: unknown main item tag 0x7 [ 31.681391][ T4800] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 31.681402][ T4800] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 31.681414][ T4800] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 31.681425][ T4800] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 31.681437][ T4800] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 31.687730][ T4711] veth0_macvtap: entered promiscuous mode [ 31.700215][ T4800] wiimote 0005:057E:0306.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 31.702232][ T4800] wiimote 0005:057E:0306.0001: New device registered [ 31.715053][ T4711] veth1_macvtap: entered promiscuous mode [ 31.721004][ T4898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.721237][ T4898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.739944][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.739978][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.753195][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.753230][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.756111][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.762238][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.778634][ T4894] wiimote 0005:057E:0306.0001: Device removed [ 31.805242][ T1211] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.805501][ T1211] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.805528][ T1211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.805536][ T1211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.805681][ T1211] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.806139][ T3265] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.806243][ T3265] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.806460][ T3265] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.806477][ T3265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.806491][ T3265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.806504][ T3265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.806518][ T3265] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.806530][ T3265] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.806544][ T3265] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.806557][ T3265] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.813517][ T4904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.813712][ T4904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.825219][ T4893] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.837405][ T3265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.837441][ T3265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.868100][ T4906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.868301][ T4906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.934539][ T4712] Bluetooth: hci1: command tx timeout [ 31.934540][ T4729] Bluetooth: hci0: command tx timeout [ 31.934788][ T4712] Bluetooth: hci4: command tx timeout [ 31.934875][ T4712] Bluetooth: hci2: command tx timeout [ 31.934934][ T4712] Bluetooth: hci3: command tx timeout [ 31.975074][ T4893] usb 1-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice= 1.00 [ 31.978810][ T4893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.978842][ T4893] usb 1-1: Product: syz [ 31.978850][ T4893] usb 1-1: Manufacturer: syz [ 31.978857][ T4893] usb 1-1: SerialNumber: syz [ 31.985032][ T4893] usbsevseg 1-1:1.0: USB 7 Segment device now attached [ 32.482146][ T4912] EXT4-fs (nvme0n1p2): shut down requested (2) [ 32.482265][ T4912] Aborting journal on device nvme0n1p2-8. [ 32.654025][ T4913] xhci_hcd 0000:00:02.0: xHCI Host Controller [ 32.658697][ T4913] xhci_hcd ** replaying previous printk message ** [ 32.658697][ T4913] xhci_hcd 0000:00:02.0: new USB bus registered, assigned bus number 34 [ 32.659158][ T4913] Unable to handle kernel paging request at virtual address ffff800096a640ff [ 32.659178][ T4913] KASAN: probably user-memory-access in range [0x00000004b53207f8-0x00000004b53207ff] [ 32.659187][ T4913] Mem abort info: [ 32.659190][ T4913] ESR = 0x0000000096000021 [ 32.659195][ T4913] EC = 0x25: DABT (current EL), IL = 32 bits [ 32.659202][ T4913] SET = 0, FnV = 0 [ 32.659207][ T4913] EA = 0, S1PTW = 0 [ 32.659212][ T4913] FSC = 0x21: alignment fault [ 32.659217][ T4913] Data abort info: [ 32.659220][ T4913] ISV = 0, ISS = 0x00000021, ISS2 = 0x00000000 [ 32.659225][ T4913] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 32.659231][ T4913] GCS = 0, Overlay = 0, DirtyBit = 0 [ 32.659236][ T4913] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000000021b049000 [ 32.659243][ T4913] [ffff800096a640ff] pgd=0000000000000000, p4d=1000000221341003, pud=1000000221342003, pmd=100000010a0f1403, pte=0068010000000713 [ 32.659321][ T4913] Internal error: Oops: 0000000096000021 [#1] SMP [ 32.678175][ T4913] Modules linked in: [ 32.678948][ T4913] CPU: 0 UID: 0 PID: 4913 Comm: syz.4.6 Not tainted syzkaller #0 PREEMPT [ 32.680429][ T4913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 32.682130][ T4913] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 32.683506][ T4913] pc : xhci_halt+0x64/0x1ec [ 32.684311][ T4913] lr : xhci_halt+0x40/0x1ec [ 32.685164][ T4913] sp : ffff800095d073c0 [ 32.685919][ T4913] x29: ffff800095d073c0 x28: ffff0000cd25e000 x27: dfff800000000000 [ 32.687289][ T4913] x26: ffff0000cd25e418 x25: 0000000000000f01 x24: ffff0000cd25e6e8 [ 32.688681][ T4913] x23: ffff0000c2b100d0 x22: ffff0000cd25e418 x21: dfff800000000000 [ 32.690059][ T4913] x20: 1fffe00019a4bc83 x19: ffff0000cd25e400 x18: 00000000ffffffff [ 32.691443][ T4913] x17: ffff80008a7d6000 x16: 0000000000000006 x15: ffff80008a35fda0 [ 32.692877][ T4913] x14: ffff80008a5d5e28 x13: 0000000000000004 x12: 0000000000000000 [ 32.694293][ T4913] x11: ffff800095d072e0 x10: 00000000fffffbf2 x9 : e632bc4aba2c3000 [ 32.695712][ T4913] x8 : ffff800096a640ff x7 : 0000000000000000 x6 : 0000000000000000 [ 32.697190][ T4913] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000833104ec [ 32.698591][ T4913] x2 : 0000000000000001 x1 : ffff0000cae00000 x0 : 0000000000000001 [ 32.700052][ T4913] Call trace: [ 32.700606][ T4913] xhci_halt+0x64/0x1ec (P) [ 32.701417][ T4913] xhci_gen_setup+0x5d8/0x111c [ 32.702255][ T4913] xhci_pci_setup+0x110/0x44c [ 32.703080][ T4913] usb_add_hcd+0x5c4/0xdec [ 32.703855][ T4913] usb_hcd_pci_probe+0x63c/0xaa4 [ 32.704773][ T4913] xhci_pci_common_probe+0x90/0x760 [ 32.705750][ T4913] xhci_pci_probe+0x44/0xdc [ 32.706545][ T4913] local_pci_probe+0xc8/0x158 [ 32.707379][ T4913] pci_device_probe+0x460/0x8d4 [ 32.708248][ T4913] really_probe+0x29c/0x800 [ 32.709029][ T4913] __driver_probe_device+0x1e0/0x350 [ 32.709915][ T4913] device_driver_attach+0x58/0xac [ 32.710802][ T4913] bind_store+0xf4/0x14c [ 32.711564][ T4913] drv_attr_store+0x80/0xa4 [ 32.712352][ T4913] sysfs_kf_write+0xe0/0x108 [ 32.713193][ T4913] kernfs_fop_write_iter+0x260/0x3b8 [ 32.714079][ T4913] vfs_write+0x51c/0xa0c [ 32.714778][ T4913] ksys_write+0x12c/0x228 [ 32.715551][ T4913] __arm64_sys_write+0x84/0x98 [ 32.716379][ T4913] invoke_syscall+0x98/0x244 [ 32.717267][ T4913] el0_svc_common+0xec/0x23c [ 32.718089][ T4913] do_el0_svc+0x4c/0x5c [ 32.718831][ T4913] el0_svc+0x64/0x260 [ 32.719543][ T4913] el0t_64_sync_handler+0x44/0x104 [ 32.720442][ T4913] el0t_64_sync+0x198/0x19c [ 32.721260][ T4913] Code: 9762248f f94002c8 128081aa d503201f (b9400108) [ 32.722506][ T4913] ---[ end trace 0000000000000000 ]--- [ 32.990895][ T4913] Kernel panic - not syncing: Oops: Fatal exception [ 32.992027][ T4913] SMP: stopping secondary CPUs [ 32.992973][ T4913] Kernel Offset: disabled [ 32.993735][ T4913] CPU features: 0x14000000,003c0008,27020a02,a84ff6a7 [ 32.994849][ T4913] Memory Limit: none [ 33.239286][ T4913] Rebooting in 86400 seconds..