last executing test programs: 1.390103477s ago: executing program 1 (id=2): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x40, 0x0, "", [{}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81b6, 0xa600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)="deadbeef", 0x4) 1.277426926s ago: executing program 2 (id=3): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000085f0500a800010000000109022e0001010080320904000004ff00000007050102080000070582030800010705030240000007058402400000"], 0x0) syz_usb_ep_write(r0, 0x82, 0x8, &(0x7f0000000100)="bbbbbbbbbbbbbbbb") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x20) syz_usb_ep_write(r0, 0x82, 0x8, &(0x7f0000000100)="bbbbbbbbbbbbbbbb") write$char_usb(r1, &(0x7f0000000200)="5502000000000000", 0x8) 1.244661471s ago: executing program 0 (id=1): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={&(0x7f0000000000), 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000314050000000000000000000900020073797a30000000000800410072786500070033006c6f0000"], 0x2c}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0x0}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000400)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x1234, @loopback}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000500)={0x7, 0x8, 0xfa00, {r2, 0x10}}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000700)={0x0}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000800)={0x15, 0x38, 0xfa00, {r4, 0x3e8, 0x10, 0x10, 0x0, @in={0x2, 0x0, @loopback}, @in={0x2, 0x1234, @loopback}}}, 0x40) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000900)={0x4, 0x8, 0xfa00, {r4, 0x3e8}}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000a00)={0x6, 0x30, 0xfa00, {{}, r4}}, 0x38) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) 1.185241s ago: executing program 3 (id=4): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040401c34050001010203010902190001010080320904000000ff000000"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='ccgx-ucsi 0x08\n\x00', 0xf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='ccgx-ucsi 0x08\n\x00', 0xf) 1.177224405s ago: executing program 4 (id=5): syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902240001010000000904000002070103000905010200000000000905820200020000000000"], 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) 816.429154ms ago: executing program 1 (id=6): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402505a0a400010102030109022000010100c0320904000002ff0000000705010200020007058202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xc, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x15, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x16, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x1f, 0x0) 811.946176ms ago: executing program 0 (id=7): r0 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0x0, 0x0, 0x40, 0x6b9, 0x4061, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x2, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x81, 0x3, 0x40, 0x10}}]}}, {{0x9, 0x4, 0x1, 0x0, 0x0, 0xff}}, {{0x9, 0x4, 0x1, 0x1, 0x2, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x87, 0x2, 0x200}}, {{0x9, 0x5, 0x7, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000001f00)={0x30, &(0x7f0000002000)={0x0, 0x3, 0x1a, {0x1a, 0x3, '0\x000\x001\x001\x002\x002\x003\x003\x004\x004\x005\x005\x00'}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001000)={0x80, &(0x7f0000001040)={0x40, 0x12, 0x8, '\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000001f00), &(0x7f0000001000)) syz_usb_control_io(r0, &(0x7f0000001f00), &(0x7f0000001000)) syz_usb_control_io(r0, &(0x7f0000001f00), &(0x7f0000001000)) syz_usb_control_io(r0, &(0x7f0000001f00), &(0x7f0000001000)) syz_usb_control_io(r0, &(0x7f0000001f00), &(0x7f0000001000)) syz_usb_disconnect(r0) 739.52983ms ago: executing program 2 (id=8): r0 = syz_pidfd_open(0x1, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x0) process_mrelease(r0, 0x0) 680.51868ms ago: executing program 2 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='tcpm\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/tcpm/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x7) 680.278418ms ago: executing program 2 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='\n\x00', 0x2) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0x1d6b', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='0x0104', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/bmAttributes\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='0x80', 0x4) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/MaxPower\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='500', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='dummy_udc.0', 0xb) close(r5) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/usb/devices/5-1\x00', 0x0, 0x0) close(r6) 176.567831ms ago: executing program 2 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/dummy_hcd.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='dummy_hcd.0\x00', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/devices/dummy_hcd.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='intel_xhci_usb_sw\x00', 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/intel_xhci_usb_sw/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='dummy_hcd.0\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/usb_role_switches/dummy_hcd.0-role-switch/role\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='host\x00', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/devices/dummy_udc.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='dummy_udc.0\x00', 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/platform/devices/dummy_udc.0/driver_override\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='intel_xhci_usb_sw\x00', 0x12) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/intel_xhci_usb_sw/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='dummy_udc.0\x00', 0xc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/usb_role_switches/dummy_udc.0-role-switch/role\x00', 0x1, 0x0) write(r7, &(0x7f00000004c0)='host\x00', 0x5) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/devices/pcspkr/driver/unbind\x00', 0x1, 0x0) write(r8, &(0x7f0000000540)='pcspkr\x00', 0x7) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r9, &(0x7f00000005c0)='intel_xhci_usb_sw\x00', 0x12) r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/drivers/intel_xhci_usb_sw/bind\x00', 0x1, 0x0) write(r10, &(0x7f0000000640)='pcspkr\x00', 0x7) r11 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/class/usb_role_switches/pcspkr-role-switch/role\x00', 0x1, 0x0) write(r11, &(0x7f00000006c0)='host\x00', 0x5) r12 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/platform/devices/serial8250/driver/unbind\x00', 0x1, 0x0) write(r12, &(0x7f0000000740)='serial8250\x00', 0xb) r13 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/bus/platform/devices/serial8250/driver_override\x00', 0x1, 0x0) write(r13, &(0x7f00000007c0)='intel_xhci_usb_sw\x00', 0x12) r14 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/platform/drivers/intel_xhci_usb_sw/bind\x00', 0x1, 0x0) write(r14, &(0x7f0000000840)='serial8250\x00', 0xb) r15 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./sys/class/usb_role_switches/serial8250-role-switch/role\x00', 0x1, 0x0) write(r15, &(0x7f00000008c0)='host\x00', 0x5) 145.462841ms ago: executing program 3 (id=12): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x10) mount(&(0x7f0000000000)=@filename='10.0.0.1:6789:/\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='ceph\x00', 0x0, &(0x7f0000000300)='msgr=v2\x00') 84.549256ms ago: executing program 3 (id=13): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="50000000100005060100000000000000000000000000000001000000010000000c00030076786c616e300000240012000a00010076786c616e00000014000200080001002a0000000600050012b50000", 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000100)="0800000000002a0011223344", 0xc, 0x0, &(0x7f0000000200)={0x2, 0x12b5, @local}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500002c000000004011fa95ac141402ac14140112b512b5001800000800000000002a001122334455667788"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff000000000000080045000040000000004001fa91ac141402ac1414010303a5820000000045000024000000004011fa9dac141401ac14140212b512b5001000000800000000002a00"], 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 18.088074ms ago: executing program 2 (id=14): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) nanosleep(&(0x7f0000000100)={0x2}, 0x0) r0 = syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500010102030109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02000200"], &(0x7f00000000c0)) syz_usb_control_io(r0, &(0x7f0000000140), &(0x7f0000000180)) 0s ago: executing program 3 (id=15): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010001000000401e09030000000000000109022700010100c0000904000003ffffff00070581024000000705020240000007058303400001"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='ttyUSB0\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.43' (ED25519) to the list of known hosts. [ 28.103929][ T4700] cgroup: Unknown subsys name 'net' [ 28.244007][ T4700] cgroup: Unknown subsys name 'cpuset' [ 28.246093][ T4700] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.432123][ T4700] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.232310][ T4725] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.232718][ T4725] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.232926][ T4725] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.233069][ T4725] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.233641][ T4725] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.234035][ T4725] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.234197][ T4725] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.234397][ T4725] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.234539][ T4725] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.234911][ T4725] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.235127][ T4725] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.235681][ T4724] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.247915][ T4727] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.249729][ T4727] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.251124][ T4727] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.253582][ T4726] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.257853][ T4723] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.257929][ T4723] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.261301][ T4726] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.263382][ T4723] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.264828][ T4723] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.266367][ T4726] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.267819][ T4723] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.269475][ T4726] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.271004][ T4726] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.561599][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.561824][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.561889][ T4712] bridge_slave_0: entered allmulticast mode [ 29.562349][ T4712] bridge_slave_0: entered promiscuous mode [ 29.563853][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.563875][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.563923][ T4712] bridge_slave_1: entered allmulticast mode [ 29.564433][ T4712] bridge_slave_1: entered promiscuous mode [ 29.595650][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.612017][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.638683][ T4712] team0: Port device team_slave_0 added [ 29.647231][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.647318][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.647390][ T4717] bridge_slave_0: entered allmulticast mode [ 29.647822][ T4717] bridge_slave_0: entered promiscuous mode [ 29.652886][ T4712] team0: Port device team_slave_1 added [ 29.663860][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.663934][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.663994][ T4717] bridge_slave_1: entered allmulticast mode [ 29.664404][ T4717] bridge_slave_1: entered promiscuous mode [ 29.689353][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.692040][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.700046][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.700575][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.700595][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.708133][ T4717] team0: Port device team_slave_0 added [ 29.712933][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.714216][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.715622][ T4716] bridge_slave_0: entered allmulticast mode [ 29.717217][ T4716] bridge_slave_0: entered promiscuous mode [ 29.718075][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.718098][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.718182][ T4716] bridge_slave_1: entered allmulticast mode [ 29.718617][ T4716] bridge_slave_1: entered promiscuous mode [ 29.724693][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.726015][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.730953][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.735484][ T4717] team0: Port device team_slave_1 added [ 29.743915][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.745544][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.768322][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.768402][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.768459][ T4710] bridge_slave_0: entered allmulticast mode [ 29.768879][ T4710] bridge_slave_0: entered promiscuous mode [ 29.769944][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.769966][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.770373][ T4710] bridge_slave_1: entered allmulticast mode [ 29.770785][ T4710] bridge_slave_1: entered promiscuous mode [ 29.775171][ T4716] team0: Port device team_slave_0 added [ 29.775986][ T4716] team0: Port device team_slave_1 added [ 29.781595][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.782926][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.784274][ T4711] bridge_slave_0: entered allmulticast mode [ 29.785795][ T4711] bridge_slave_0: entered promiscuous mode [ 29.788951][ T4712] hsr_slave_0: entered promiscuous mode [ 29.789299][ T4712] hsr_slave_1: entered promiscuous mode [ 29.793165][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.794357][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.798693][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.800878][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.800900][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.800917][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.801478][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.801485][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.801500][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.811779][ T4716] hsr_slave_0: entered promiscuous mode [ 29.812050][ T4716] hsr_slave_1: entered promiscuous mode [ 29.812227][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 29.812264][ T4716] Cannot create hsr debugfs directory [ 29.821869][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.822675][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.822736][ T4711] bridge_slave_1: entered allmulticast mode [ 29.823138][ T4711] bridge_slave_1: entered promiscuous mode [ 29.827801][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.827819][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.827846][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.829218][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.845002][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.857872][ T4710] team0: Port device team_slave_0 added [ 29.858667][ T4710] team0: Port device team_slave_1 added [ 29.868987][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.877024][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.878483][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.882913][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.885403][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.885412][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.885425][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.888534][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.905794][ T4711] team0: Port device team_slave_0 added [ 29.907580][ T4717] hsr_slave_0: entered promiscuous mode [ 29.908285][ T4717] hsr_slave_1: entered promiscuous mode [ 29.908498][ T4717] debugfs: 'hsr0' already exists in 'hsr' [ 29.908508][ T4717] Cannot create hsr debugfs directory [ 29.915530][ T4711] team0: Port device team_slave_1 added [ 29.951755][ T4710] hsr_slave_0: entered promiscuous mode [ 29.953503][ T4710] hsr_slave_1: entered promiscuous mode [ 29.953760][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 29.953782][ T4710] Cannot create hsr debugfs directory [ 29.954416][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.954425][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.954438][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.955288][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.955298][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.955315][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.999417][ T4711] hsr_slave_0: entered promiscuous mode [ 29.999744][ T4711] hsr_slave_1: entered promiscuous mode [ 29.999957][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 29.999966][ T4711] Cannot create hsr debugfs directory [ 30.023739][ T4716] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.026896][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.028617][ T4716] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.031025][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.041047][ T4716] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.043677][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.044001][ T4716] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.045793][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.092532][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.092616][ T4716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.092769][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.092799][ T4716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.094731][ T4712] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.096504][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.096811][ T4712] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.098733][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.101403][ T4712] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.103957][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.113930][ T4712] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.116604][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.129012][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.129052][ T4712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.129142][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.129176][ T4712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.132832][ T4717] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.134280][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.134579][ T4717] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.136823][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.141640][ T4717] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.144090][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.151764][ T4717] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.153882][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.166511][ T4710] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.169732][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.174491][ T4710] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.176602][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.178704][ T4710] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.180894][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.182457][ T4710] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.184814][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.198427][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.200389][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.200436][ T4717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.200531][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.200565][ T4717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.214635][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.216483][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.218648][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.220543][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.223547][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.225116][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.234252][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.239084][ T4711] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.241174][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.251703][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.254447][ T4711] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.256619][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.257086][ T4711] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.258615][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.260901][ T4711] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.264088][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.268840][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.268891][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.275913][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.275952][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.287138][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.288514][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.307819][ T4085] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.307862][ T4085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.308583][ T4085] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.308610][ T4085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.316337][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.327862][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.327905][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.334466][ T4085] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.334517][ T4085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.350293][ T4712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.350322][ T4712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.359901][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.372116][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.378098][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.387267][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.390759][ T4085] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.390808][ T4085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.406913][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.406950][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.411090][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.411127][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.427476][ T4710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.429608][ T4710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.435798][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.435842][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.440208][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.570229][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.599998][ T4716] veth0_vlan: entered promiscuous mode [ 30.602326][ T4716] veth1_vlan: entered promiscuous mode [ 30.613560][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.618732][ T4716] veth0_macvtap: entered promiscuous mode [ 30.622148][ T4716] veth1_macvtap: entered promiscuous mode [ 30.636433][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.639327][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.646557][ T4085] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.646982][ T4085] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.647011][ T4085] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.647034][ T4085] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.675873][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.684522][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.686138][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.708088][ T4710] veth0_vlan: entered promiscuous mode [ 30.719386][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.719413][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.731825][ T4717] veth0_vlan: entered promiscuous mode [ 30.736120][ T4710] veth1_vlan: entered promiscuous mode [ 30.748408][ T4710] veth0_macvtap: entered promiscuous mode [ 30.749513][ T4710] veth1_macvtap: entered promiscuous mode [ 30.750818][ T4711] veth0_vlan: entered promiscuous mode [ 30.755296][ T4711] veth1_vlan: entered promiscuous mode [ 30.756366][ T4717] veth1_vlan: entered promiscuous mode [ 30.758348][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.758376][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.781084][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.786579][ T4712] veth0_vlan: entered promiscuous mode [ 30.789200][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.795817][ T4717] veth0_macvtap: entered promiscuous mode [ 30.797080][ T4717] veth1_macvtap: entered promiscuous mode [ 30.799106][ T4712] veth1_vlan: entered promiscuous mode [ 30.801063][ T4716] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.801890][ T4154] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.801917][ T4154] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.801937][ T4154] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.801953][ T4154] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.805306][ T4711] veth0_macvtap: entered promiscuous mode [ 30.806764][ T4711] veth1_macvtap: entered promiscuous mode [ 30.810383][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.811470][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.829169][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.831709][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.854211][ T4712] veth0_macvtap: entered promiscuous mode [ 30.861380][ T4712] veth1_macvtap: entered promiscuous mode [ 30.882060][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.883381][ T4894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.883570][ T4894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.883644][ T4040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.883656][ T4040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.890787][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.901060][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.901091][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.910102][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.910130][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.934843][ T4040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.934873][ T4040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.943696][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.943978][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.943995][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.944011][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.944027][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.944042][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.944057][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.944072][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.944086][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.944100][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.944115][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.944130][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.988023][ T4040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.988053][ T4040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.000640][ T4896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.000826][ T4896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.000892][ T4040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.000900][ T4040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.026573][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.026611][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.037059][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.037088][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.085364][ T4898] lo speed is unknown, defaulting to 1000 [ 31.087183][ T4898] lo speed is unknown, defaulting to 1000 [ 31.091029][ T4902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.091219][ T4902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.092843][ T4898] lo speed is unknown, defaulting to 1000 [ 31.096601][ T4903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.099259][ T4903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.135875][ T4898] infiniband syz0: set active [ 31.136109][ T4827] lo speed is unknown, defaulting to 1000 [ 31.136296][ T4898] infiniband syz0: added lo [ 31.145399][ T4898] RDS/IB: syz0: added [ 31.147374][ T4898] smc: adding ib device syz0 with port count 1 [ 31.147428][ T4898] smc: ib device syz0 port 1 has no pnetid [ 31.148254][ T4898] lo speed is unknown, defaulting to 1000 [ 31.149199][ T4828] lo speed is unknown, defaulting to 1000 [ 31.189165][ T4898] lo speed is unknown, defaulting to 1000 [ 31.223605][ T4898] lo speed is unknown, defaulting to 1000 [ 31.257645][ T4898] lo speed is unknown, defaulting to 1000 [ 31.271151][ T4906] ucsi_ccg 0-0008: ucsi_ccg_init failed - -110 [ 31.273386][ T4906] ucsi_ccg 0-0008: probe with driver ucsi_ccg failed with error -110 [ 31.275609][ T4906] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 31.291791][ T4898] lo speed is unknown, defaulting to 1000 [ 31.303182][ T4722] Bluetooth: hci1: command tx timeout [ 31.303183][ T50] Bluetooth: hci0: command tx timeout [ 31.303409][ T50] Bluetooth: hci3: command tx timeout [ 31.303413][ T4722] Bluetooth: hci2: command tx timeout [ 31.303551][ T4722] Bluetooth: hci4: command tx timeout [ 31.410586][ T4909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.410770][ T4909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.569403][ T4918] UDC core: g1: couldn't find an available UDC or it's busy [ 31.692771][ T4827] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.843211][ T4827] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 31.844461][ T4827] usb 1-1: config index 0 descriptor too short (expected 63, got 45) [ 31.844486][ T4827] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 31.845853][ T4827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.845866][ T4827] usb 1-1: Product: syz [ 31.845874][ T4827] usb 1-1: Manufacturer: syz [ 31.845881][ T4827] usb 1-1: SerialNumber: syz [ 32.093192][ T4921] dummy_hcd dummy_hcd.0: remove, state 1 [ 32.093645][ T4921] usb usb1: USB disconnect, device number 1 [ 32.137335][ T4925] netlink: 'syz.3.13': attribute type 5 has an invalid length. [ 32.147442][ T4827] speedtch 1-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 32.147502][ T4827] speedtch 1-1:1.0: usbatm_usb_probe: bind failed: -71! [ 32.147526][ T4827] speedtch 1-1:1.0: probe with driver speedtch failed with error -71 [ 32.153865][ T1237] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.153971][ T4154] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.153987][ T4154] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.154001][ T4154] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.156474][ T4827] speedtch 1-1:1.1: speedtch_bind: setting interface to 1 failed (-19)! [ 32.156813][ T4827] speedtch 1-1:1.1: usbatm_usb_probe: bind failed: -19! [ 32.160641][ T4827] usb 1-1: USB disconnect, device number 2 [ 32.176973][ T4926] printk: legacy console [ttyS0] disabled [ 32.190473][ T4921] dummy_hcd dummy_hcd.0: stopped [ 32.190509][ T4921] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 32.249784][ T4929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.251798][ T4929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.264424][ T4911] ================================================================== [ 32.264436][ T4911] BUG: KASAN: slab-use-after-free in string_nocheck+0xd8/0x140 [ 32.264461][ T4911] Read of size 1 at addr ffff0000ca5aaa80 by task syz.0.7/4911 [ 32.264469][ T4911] [ 32.264474][ T4911] CPU: 0 UID: 0 PID: 4911 Comm: syz.0.7 Not tainted syzkaller #0 PREEMPT [ 32.264484][ T4911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 32.264489][ T4911] Call trace: [ 32.264492][ T4911] show_stack+0x2c/0x3c (C) [ 32.264508][ T4911] __dump_stack+0x30/0x40 [ 32.264520][ T4911] dump_stack_lvl+0xd8/0x12c [ 32.264532][ T4911] print_address_description+0xb0/0x238 [ 32.264541][ T4911] print_report+0x68/0x84 [ 32.264549][ T4911] kasan_report+0x8c/0xc4 [ 32.264560][ T4911] __asan_report_load1_noabort+0x20/0x2c [ 32.264572][ T4911] string_nocheck+0xd8/0x140 [ 32.264585][ T4911] string+0x8c/0xc8 [ 32.264596][ T4911] vsnprintf+0x880/0xd10 [ 32.264607][ T4911] snprintf+0xe0/0x130 [ 32.264619][ T4911] dev_vprintk_emit+0x2c0/0x3b4 [ 32.264627][ T4911] dev_printk_emit+0xe0/0x130 [ 32.264634][ T4911] __dev_printk+0x168/0x198 [ 32.264644][ T4911] _dev_err+0xfc/0x158 [ 32.264651][ T4911] raw_process_ep0_io+0x414/0x7c4 [ 32.264663][ T4911] raw_ioctl+0xbe8/0x356c [ 32.264673][ T4911] __arm64_sys_ioctl+0x154/0x1cc [ 32.264685][ T4911] invoke_syscall+0x98/0x244 [ 32.264697][ T4911] el0_svc_common+0xec/0x23c [ 32.264709][ T4911] do_el0_svc+0x4c/0x5c [ 32.264720][ T4911] el0_svc+0x64/0x260 [ 32.264730][ T4911] el0t_64_sync_handler+0x44/0x104 [ 32.264739][ T4911] el0t_64_sync+0x198/0x19c [ 32.264748][ T4911] [ 32.264750][ T4911] Allocated by task 1: [ 32.264754][ T4911] kasan_save_track+0x40/0x78 [ 32.264763][ T4911] kasan_save_alloc_info+0x40/0x50 [ 32.264773][ T4911] __kasan_kmalloc+0x9c/0xb4 [ 32.264781][ T4911] __kmalloc_node_track_caller_noprof+0x434/0x6d4 [ 32.264791][ T4911] kvasprintf+0x110/0x1e4 [ 32.264802][ T4911] kvasprintf_const+0x154/0x2e4 [ 32.264812][ T4911] kobject_set_name_vargs+0xd8/0x1c0 [ 32.264822][ T4911] dev_set_name+0xe8/0x13c [ 32.264832][ T4911] usb_add_gadget+0x408/0x640 [ 32.264838][ T4911] usb_add_gadget_udc_release+0x3c/0x7c [ 32.264845][ T4911] usb_add_gadget_udc+0x2c/0x3c [ 32.264851][ T4911] dummy_udc_probe+0x5e8/0x6f0 [ 32.264859][ T4911] platform_probe+0x100/0x1a4 [ 32.264866][ T4911] really_probe+0x29c/0x800 [ 32.264876][ T4911] __driver_probe_device+0x1e0/0x350 [ 32.264886][ T4911] driver_probe_device+0x6c/0x19c [ 32.264896][ T4911] __device_attach_driver+0x198/0x2f8 [ 32.264906][ T4911] bus_for_each_drv+0x144/0x1dc [ 32.264915][ T4911] __device_attach+0x248/0x390 [ 32.264924][ T4911] device_initial_probe+0x90/0xc8 [ 32.264940][ T4911] bus_probe_device+0x58/0x120 [ 32.264950][ T4911] device_add+0x6cc/0x9e0 [ 32.264956][ T4911] platform_device_add+0x3dc/0x6f0 [ 32.264963][ T4911] dummy_hcd_init+0x858/0xb9c [ 32.264972][ T4911] do_one_initcall+0x274/0xc38 [ 32.264983][ T4911] do_initcall_level+0x12c/0x1c4 [ 32.264992][ T4911] do_initcalls+0x70/0xd0 [ 32.265001][ T4911] do_basic_setup+0x7c/0x90 [ 32.265010][ T4911] kernel_init_freeable+0x268/0x3a8 [ 32.265020][ T4911] kernel_init+0x24/0x1dc [ 32.265030][ T4911] ret_from_fork+0x10/0x20 [ 32.265036][ T4911] [ 32.265038][ T4911] Freed by task 4926: [ 32.265041][ T4911] kasan_save_track+0x40/0x78 [ 32.265049][ T4911] kasan_save_free_info+0x54/0x6c [ 32.265059][ T4911] __kasan_slab_free+0x74/0xa4 [ 32.265068][ T4911] kfree+0x188/0x690 [ 32.265074][ T4911] kfree_const+0x4c/0x5c [ 32.265082][ T4911] kobject_put+0x210/0x4b8 [ 32.265092][ T4911] put_device+0x28/0x40 [ 32.265101][ T4911] usb_del_gadget_udc+0x28/0x38 [ 32.265108][ T4911] dummy_udc_remove+0x54/0x64 [ 32.265115][ T4911] platform_remove+0x6c/0x88 [ 32.265122][ T4911] device_remove+0xc4/0x134 [ 32.265132][ T4911] device_release_driver_internal+0x124/0x20c [ 32.265142][ T4911] device_driver_detach+0x48/0x58 [ 32.265152][ T4911] unbind_store+0xc0/0xf0 [ 32.265161][ T4911] drv_attr_store+0x80/0xa4 [ 32.265169][ T4911] sysfs_kf_write+0xe0/0x108 [ 32.265179][ T4911] kernfs_fop_write_iter+0x260/0x3b8 [ 32.265188][ T4911] vfs_write+0x51c/0xa0c [ 32.265194][ T4911] ksys_write+0x12c/0x228 [ 32.265200][ T4911] __arm64_sys_write+0x84/0x98 [ 32.265206][ T4911] invoke_syscall+0x98/0x244 [ 32.265216][ T4911] el0_svc_common+0xec/0x23c [ 32.265238][ T4911] do_el0_svc+0x4c/0x5c [ 32.265251][ T4911] el0_svc+0x64/0x260 [ 32.265258][ T4911] el0t_64_sync_handler+0x44/0x104 [ 32.265267][ T4911] el0t_64_sync+0x198/0x19c [ 32.265273][ T4911] [ 32.265274][ T4911] The buggy address belongs to the object at ffff0000ca5aaa80 [ 32.265274][ T4911] which belongs to the cache kmalloc-16 of size 16 [ 32.265281][ T4911] The buggy address is located 0 bytes inside of [ 32.265281][ T4911] freed 16-byte region [ffff0000ca5aaa80, ffff0000ca5aaa90) [ 32.265289][ T4911] [ 32.265291][ T4911] The buggy address belongs to the physical page: [ 32.265295][ T4911] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000ca5aa5e0 pfn:0x10a5aa [ 32.265302][ T4911] flags: 0x5ffc00000000200(workingset|node=0|zone=2|lastcpupid=0x7ff) [ 32.265310][ T4911] page_type: f5(slab) [ 32.265318][ T4911] raw: 05ffc00000000200 ffff0000c0001640 fffffdffc32aed90 fffffdffc3282fd0 [ 32.265325][ T4911] raw: ffff0000ca5aa5e0 0000000800800057 00000000f5000000 0000000000000000 [ 32.265329][ T4911] page dumped because: kasan: bad access detected [ 32.265333][ T4911] [ 32.265334][ T4911] Memory state around the buggy address: [ 32.265339][ T4911] ffff0000ca5aa980: fa fb fc fc fa fb fc fc 00 04 fc fc fa fb fc fc [ 32.265344][ T4911] ffff0000ca5aaa00: fa fb fc fc fa fb fc fc 00 01 fc fc 00 01 fc fc [ 32.265349][ T4911] >ffff0000ca5aaa80: fa fb fc fc fa fb fc fc 00 04 fc fc 00 04 fc fc [ 32.265353][ T4911] ^ [ 32.265357][ T4911] ffff0000ca5aab00: fa fb fc fc fa fb fc fc fa fb fc fc 00 04 fc fc [ 32.265362][ T4911] ffff0000ca5aab80: 00 04 fc fc 00 04 fc fc fa fb fc fc fa fb fc fc [ 32.265366][ T4911] ================================================================== [ 32.273037][ T4931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.273192][ T4931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.285448][ T4911] Disabling lock debugging due to kernel taint [ 32.285462][ T4911] gadget @][ó: fail, usb_ep_queue returned -108 [ 32.313987][ T4932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.314092][ T4932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.382607][ T4726] Bluetooth: hci3: command tx timeout [ 33.382630][ T4722] Bluetooth: hci1: command tx timeout [ 33.382644][ T50] Bluetooth: hci0: command tx timeout [ 33.382658][ T4722] Bluetooth: hci4: command tx timeout [ 33.382665][ T50] Bluetooth: hci2: command tx timeout [ 35.462965][ T4726] Bluetooth: hci2: command tx timeout [ 35.462988][ T50] Bluetooth: hci0: command tx timeout [ 35.463000][ T4726] Bluetooth: hci4: command tx timeout [ 35.463013][ T50] Bluetooth: hci1: command tx timeout [ 35.463850][ T4723] Bluetooth: hci3: command tx timeout [ 37.542586][ T4723] Bluetooth: hci3: command tx timeout [ 37.542607][ T50] Bluetooth: hci4: command tx timeout [ 37.542618][ T4723] Bluetooth: hci2: command tx timeout [ 37.545407][ T4722] Bluetooth: hci1: command tx timeout [ 37.552629][ T4722] Bluetooth: hci0: command tx timeout