last executing test programs: 9.725109ms ago: executing program 2 (id=3): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010080320904000002030001000921110100012223000905810340000a00000905020340000a0000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000600)={0x0, 0x3, 0x4, {0x4, 0x3, "0904"}}, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000640)={0x40, 0x2}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x8, "0200000000000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) syz_open_dev$hidraw(&(0x7f0000000500), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="028000000000000000") 9.429775ms ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:02.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='i915\x00', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/i915/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:02.0\x00', 0xd) 9.304659ms ago: executing program 3 (id=4): r0 = syz_usb_connect(0x0, 0x45, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040351201820001010203010902330002010080fa080b0002010020000904000000010120000924010002080900000904010001ff00000007058103400001"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000300)={0xa1, 0x0, 0x18, "0000000000000100"/24}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000300)={0xa1, 0x3, 0x10, "00000000000001000000000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000300)={0xa1, 0x3, 0x10, "00000000000001000000000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000300)={0xa1, 0x3, 0x10, "00000000000001000000000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000100)="0100000000000000") syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000100)="0100000000000000") 0s ago: executing program 0 (id=1): r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001223f000705810340000107050203400001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00223f0000000600ff0901a101850c0901150026ff00750895018102850f090175089501b10285090901750895019102850b0901750895018102850a0901750895019102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000000)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/2-1/power/control\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/3-1/power/control\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/4-1/power/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='auto\x00', 0x4) write(r2, &(0x7f0000000700)='auto\x00', 0x4) write(r3, &(0x7f0000000700)='auto\x00', 0x4) write(r4, &(0x7f0000000700)='auto\x00', 0x4) nanosleep(&(0x7f0000000000)={0x1}, 0x0) write(r1, &(0x7f0000000800)='on\x00', 0x2) write(r2, &(0x7f0000000800)='on\x00', 0x2) write(r3, &(0x7f0000000800)='on\x00', 0x2) write(r4, &(0x7f0000000800)='on\x00', 0x2) nanosleep(&(0x7f0000000000)={0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:12537' (ED25519) to the list of known hosts. [ 41.322196][ T5724] cgroup: Unknown subsys name 'net' [ 41.465410][ T5724] cgroup: Unknown subsys name 'cpuset' [ 41.469322][ T5724] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.373335][ T5724] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.784005][ T5747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.786814][ T5747] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.792892][ T5747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.795871][ T5747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.798735][ T5747] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.801741][ T5756] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.807152][ T5758] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.808095][ T5747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.810256][ T5758] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.812314][ T5755] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.812405][ T5747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.814454][ T5758] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.815924][ T5757] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.819243][ T5747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.819502][ T5755] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.819823][ T5755] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.821892][ T5758] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.823293][ T5100] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.841599][ T5744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.844690][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.366537][ T5750] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.368888][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.371124][ T5750] bridge_slave_0: entered allmulticast mode [ 46.373946][ T5750] bridge_slave_0: entered promiscuous mode [ 46.379743][ T5750] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.382019][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.385581][ T5750] bridge_slave_1: entered allmulticast mode [ 46.388679][ T5750] bridge_slave_1: entered promiscuous mode [ 46.457971][ T5750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.462373][ T5750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.480115][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.482556][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.485088][ T5739] bridge_slave_0: entered allmulticast mode [ 46.487814][ T5739] bridge_slave_0: entered promiscuous mode [ 46.491092][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.493336][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.495651][ T5740] bridge_slave_0: entered allmulticast mode [ 46.498504][ T5740] bridge_slave_0: entered promiscuous mode [ 46.501992][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.504197][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.506611][ T5740] bridge_slave_1: entered allmulticast mode [ 46.509276][ T5740] bridge_slave_1: entered promiscuous mode [ 46.524757][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.527130][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.529453][ T5739] bridge_slave_1: entered allmulticast mode [ 46.532936][ T5739] bridge_slave_1: entered promiscuous mode [ 46.576229][ T5750] team0: Port device team_slave_0 added [ 46.586279][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.588672][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.590928][ T5741] bridge_slave_0: entered allmulticast mode [ 46.593800][ T5741] bridge_slave_0: entered promiscuous mode [ 46.606200][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.612037][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.616644][ T5750] team0: Port device team_slave_1 added [ 46.624514][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.626859][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.629294][ T5741] bridge_slave_1: entered allmulticast mode [ 46.631996][ T5741] bridge_slave_1: entered promiscuous mode [ 46.642756][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.652052][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.669092][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.671366][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.679550][ T5750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.695326][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.698579][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.700795][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.708744][ T5750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.713215][ T5739] team0: Port device team_slave_0 added [ 46.723197][ T5740] team0: Port device team_slave_0 added [ 46.726347][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.737343][ T5739] team0: Port device team_slave_1 added [ 46.740017][ T5740] team0: Port device team_slave_1 added [ 46.765784][ T5741] team0: Port device team_slave_0 added [ 46.780873][ T5741] team0: Port device team_slave_1 added [ 46.788452][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.790676][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.798765][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.802995][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.805904][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.814435][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.824271][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.826447][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.834777][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.845782][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.848115][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.856151][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.873344][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.875530][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.883505][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.890332][ T5750] hsr_slave_0: entered promiscuous mode [ 46.892721][ T5750] hsr_slave_1: entered promiscuous mode [ 46.898505][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.900846][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.908944][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.936702][ T5739] hsr_slave_0: entered promiscuous mode [ 46.939373][ T5739] hsr_slave_1: entered promiscuous mode [ 46.941511][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 46.943438][ T5739] Cannot create hsr debugfs directory [ 46.961928][ T5740] hsr_slave_0: entered promiscuous mode [ 46.964300][ T5740] hsr_slave_1: entered promiscuous mode [ 46.966438][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 46.968232][ T5740] Cannot create hsr debugfs directory [ 47.045888][ T5741] hsr_slave_0: entered promiscuous mode [ 47.048141][ T5741] hsr_slave_1: entered promiscuous mode [ 47.050695][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 47.053141][ T5741] Cannot create hsr debugfs directory [ 47.282102][ T5750] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.292318][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.298360][ T5750] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.305009][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.308000][ T5750] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.317338][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.331168][ T5750] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.337459][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.371572][ T5739] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.378189][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.385629][ T5739] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.391309][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.395551][ T5739] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.401263][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.404741][ T5739] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.409814][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.455543][ T5741] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.461658][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.471334][ T5741] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.475378][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.478950][ T5741] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.488546][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.491972][ T5741] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.499986][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.549469][ T5740] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.553797][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.556537][ T5740] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.560307][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.569552][ T5740] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.574122][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.577431][ T5740] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.581970][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.629740][ T5750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.665830][ T5750] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.684499][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.687354][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.703959][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.706262][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.711212][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.727557][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.740916][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.756927][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.759202][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.780854][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.783207][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.788382][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.791441][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.811441][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.813757][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.826784][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.829156][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.838935][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.856107][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.859243][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.864385][ T64] Bluetooth: hci0: command tx timeout [ 47.864552][ T5744] Bluetooth: hci2: command tx timeout [ 47.865566][ T5747] Bluetooth: hci3: command tx timeout [ 47.865579][ T5748] Bluetooth: hci1: command tx timeout [ 47.890327][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.893205][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.915414][ T5741] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.919652][ T5741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.197187][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.206902][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.219123][ T5750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.259032][ T5741] veth0_vlan: entered promiscuous mode [ 48.269935][ T5739] veth0_vlan: entered promiscuous mode [ 48.280188][ T5741] veth1_vlan: entered promiscuous mode [ 48.289129][ T5750] veth0_vlan: entered promiscuous mode [ 48.300853][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.306103][ T5739] veth1_vlan: entered promiscuous mode [ 48.317370][ T5750] veth1_vlan: entered promiscuous mode [ 48.352123][ T5741] veth0_macvtap: entered promiscuous mode [ 48.360011][ T5739] veth0_macvtap: entered promiscuous mode [ 48.366191][ T5741] veth1_macvtap: entered promiscuous mode [ 48.370959][ T5750] veth0_macvtap: entered promiscuous mode [ 48.378547][ T5739] veth1_macvtap: entered promiscuous mode [ 48.383208][ T5750] veth1_macvtap: entered promiscuous mode [ 48.399912][ T5740] veth0_vlan: entered promiscuous mode [ 48.406725][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.414021][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.417635][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.424649][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.429732][ T5740] veth1_vlan: entered promiscuous mode [ 48.434372][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.442248][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.482996][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.518442][ T5740] veth0_macvtap: entered promiscuous mode [ 48.568730][ T5740] veth1_macvtap: entered promiscuous mode [ 48.584337][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.587733][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.588690][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.590201][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.623913][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.626399][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.632103][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.642649][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.655624][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.667589][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.672616][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.679483][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.682733][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.684042][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.686776][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.708284][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.713539][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.729477][ T5741] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.767887][ T5741] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.778976][ T5741] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.781121][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.785409][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.787249][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.790765][ T5741] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.791099][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.814729][ T5750] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.819904][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.823407][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.843003][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.853029][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.873079][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.881230][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.933196][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.936805][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.940122][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.944559][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.950275][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.956357][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.967571][ T5897] e1000e 0000:00:02.0 eth1: removed PHC [ 49.080258][ T5897] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 49.203534][ T5891] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 49.220964][ T5902] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN NOPTI [ 49.224792][ T5902] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 49.227505][ T5902] CPU: 2 UID: 0 PID: 5902 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 49.230269][ T5902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.232661][ T5889] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 49.233358][ T5902] RIP: 0010:i915_pci_probe+0x57/0x480 [ 49.237313][ T5902] Code: 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 f6 03 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 6c 24 18 4c 8d 6d 1c 4c 89 ea 48 c1 ea 03 <0f> b6 04 02 4c 89 ea 83 e2 07 38 d0 7f 08 84 c0 0f 85 86 03 00 00 [ 49.243173][ T5902] RSP: 0018:ffffc90006447988 EFLAGS: 00010207 [ 49.245197][ T5902] RAX: dffffc0000000000 RBX: ffff88802163c000 RCX: ffffc9000d005000 [ 49.247623][ T5902] RDX: 0000000000000003 RSI: ffffffff85d66fcd RDI: ffffffff8c438898 [ 49.250063][ T5902] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 49.252512][ T5902] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c438880 [ 49.254948][ T5902] R13: 000000000000001c R14: ffffffff85d66fb0 R15: ffff88802163c130 [ 49.257365][ T5902] FS: 0000000000000000(0000) GS:ffff888096ddf000(0063) knlGS:00000000f549cb40 [ 49.260053][ T5902] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 49.262133][ T5902] CR2: 00007f867cad9e9c CR3: 000000006ca7a000 CR4: 0000000000352ef0 [ 49.264547][ T5902] Call Trace: [ 49.265608][ T5902] [ 49.266543][ T5902] ? __pfx_i915_pci_probe+0x10/0x10 [ 49.268149][ T5902] local_pci_probe+0xdd/0x1b0 [ 49.269605][ T5902] pci_call_probe+0x176/0x800 [ 49.271055][ T5902] ? __pfx_pci_call_probe+0x10/0x10 [ 49.272674][ T5902] ? find_held_lock+0x2b/0x80 [ 49.274121][ T5902] ? pci_match_device+0x450/0x5f0 [ 49.275649][ T5902] ? pci_match_device+0x450/0x5f0 [ 49.277209][ T5902] ? pci_match_id+0x34d/0x3f0 [ 49.278683][ T5902] ? pci_match_device+0xb4/0x5f0 [ 49.280237][ T5902] pci_device_probe+0x1cd/0x370 [ 49.281763][ T5902] ? __pfx_pci_device_probe+0x10/0x10 [ 49.283374][ T5902] really_probe+0x241/0xa60 [ 49.284905][ T5902] __driver_probe_device+0x20e/0x450 [ 49.286524][ T5902] device_driver_attach+0xd1/0x220 [ 49.288094][ T5902] bind_store+0xf4/0x190 [ 49.289428][ T5902] ? __pfx_bind_store+0x10/0x10 [ 49.290957][ T5902] drv_attr_store+0x74/0xb0 [ 49.292399][ T5902] ? __pfx_drv_attr_store+0x10/0x10 [ 49.294079][ T5902] sysfs_kf_write+0xf2/0x150 [ 49.295598][ T5902] kernfs_fop_write_iter+0x3e0/0x5f0 [ 49.297300][ T5902] ? __pfx_sysfs_kf_write+0x10/0x10 [ 49.298962][ T5902] vfs_write+0x6ac/0x1050 [ 49.300293][ T5902] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 49.302081][ T5902] ? __pfx_vfs_write+0x10/0x10 [ 49.303545][ T5902] ? find_held_lock+0x2b/0x80 [ 49.305310][ T5902] ksys_write+0x12a/0x250 [ 49.306713][ T5902] ? __pfx_ksys_write+0x10/0x10 [ 49.308229][ T5902] __do_fast_syscall_32+0xe7/0x970 [ 49.309804][ T5902] do_fast_syscall_32+0x32/0x70 [ 49.311324][ T5902] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 49.313285][ T5902] RIP: 0023:0xf70cefec [ 49.314558][ T5902] Code: Unable to access opcode bytes at 0xf70cefc2. [ 49.316603][ T5902] RSP: 002b:00000000f549c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 49.319167][ T5902] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000140 [ 49.321618][ T5902] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 49.324077][ T5902] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 49.326582][ T5902] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 49.329088][ T5902] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 49.331575][ T5902] [ 49.332525][ T5902] Modules linked in: [ 49.334569][ T5902] ---[ end trace 0000000000000000 ]--- [ 49.338283][ T5902] RIP: 0010:i915_pci_probe+0x57/0x480 [ 49.338904][ T5847] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 49.339949][ T5902] Code: 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 f6 03 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 6c 24 18 4c 8d 6d 1c 4c 89 ea 48 c1 ea 03 <0f> b6 04 02 4c 89 ea 83 e2 07 38 d0 7f 08 84 c0 0f 85 86 03 00 00 [ 49.339963][ T5902] RSP: 0018:ffffc90006447988 EFLAGS: 00010207 [ 49.339974][ T5902] RAX: dffffc0000000000 RBX: ffff88802163c000 RCX: ffffc9000d005000 [ 49.352228][ T5902] RDX: 0000000000000003 RSI: ffffffff85d66fcd RDI: ffffffff8c438898 [ 49.354777][ T5902] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 49.357161][ T5902] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c438880 [ 49.359470][ T5902] R13: 000000000000001c R14: ffffffff85d66fb0 R15: ffff88802163c130 [ 49.361804][ T5902] FS: 0000000000000000(0000) GS:ffff888096edf000(0063) knlGS:00000000f549cb40 [ 49.364616][ T5902] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 49.366629][ T5902] CR2: 000000000c3e7006 CR3: 000000006ca7a000 CR4: 0000000000352ef0 [ 49.369727][ T5902] Kernel panic - not syncing: Fatal exception [ 49.372177][ T5902] Kernel Offset: disabled [ 49.373482][ T5902] Rebooting in 86400 seconds..