last executing test programs: 306.89113ms ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/serial8250/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='serial8250\x00', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/serial8250/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='serial8250\x00', 0xb) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000600)={0x1}) write(r2, &(0x7f0000000700)='hello\x00', 0x5) 270.263268ms ago: executing program 1 (id=2): syz_usb_connect(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ba23000100000000000109026400020100800009040000000101000009240100011e0001010c2402010101000203000000092403020103000100090401000001020000090401010101020000072401010101000b2402010202100180bb0009050101000201000007250100000000"], 0x0) nanosleep(&(0x7f0000000300)={0x3}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0x0, &(0x7f0000000540)) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000500)='\x00'/16, 0x10}) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x0, 0x0) 133.866934ms ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/target/core/rd_mcp_0/rd1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0/rd1/control\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='rd_pages=32768\x00', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/rd1/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='0x1d6b\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000140)='./config/target/core/rd_mcp_0/rd1\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0/rd1\x00') r4 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r4, &(0x7f0000000700)='naa.6001405123456789\x00', 0x14) r5 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/enable\x00', 0x2, 0x0) write(r5, &(0x7f0000000780)='1\x00', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r6, &(0x7f0000000800)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000840)={0x1}, 0x0) r7 = syz_open_dev$sg(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000008c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', 0x1c) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000880)={0x53, 0xfffffffe, 0xa, 0x0, @buffer={0x0, 0x1c, &(0x7f00000008c0)=""/28}, &(0x7f0000000900)="5f000000000000001c00", &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0}) 70.080398ms ago: executing program 0 (id=5): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r0, &(0x7f0000000100)="0101", 0x2) write(r0, &(0x7f0000000102)='\x00\x00', 0x2) write(r0, &(0x7f0000000300)="02fa02000200", 0x6) 69.90567ms ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/kernel/printk\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1 4 1 7\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='devices\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='mem\x00', 0x4) 0s ago: executing program 2 (id=6): syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004010110f900001000001010902390003010080320904000001ffffff000705840340000a0904010001ffffff00070502024000000904020001ffffff0007058202400000"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="1a03300030003100310032003200330033003400340035003500"]}]}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/dummy_hcd.0-1:1.0/stat_rxflow\x00', 0x0, 0x0) read(r0, &(0x7f0000000400), 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/dummy_hcd.0-2:1.0/stat_rxflow\x00', 0x0, 0x0) read(r1, &(0x7f0000000600), 0x100) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:39860' (ED25519) to the list of known hosts. [ 40.976671][ T5701] cgroup: Unknown subsys name 'net' [ 41.135338][ T5701] cgroup: Unknown subsys name 'cpuset' [ 41.141176][ T5701] cgroup: Unknown subsys name 'rlimit' [ 41.389619][ T5730] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.077363][ T5701] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.288352][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 45.288370][ T42] audit: type=1400 audit(1785869152.748:158): avc: denied { execmem } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.473063][ T42] audit: type=1400 audit(1785869152.938:159): avc: denied { create } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.479060][ T42] audit: type=1400 audit(1785869152.938:160): avc: denied { read write } for pid=5738 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.486471][ T42] audit: type=1400 audit(1785869152.938:161): avc: denied { open } for pid=5738 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.493696][ T42] audit: type=1400 audit(1785869152.938:162): avc: denied { ioctl } for pid=5739 comm="syz-executor" path="socket:[7431]" dev="sockfs" ino=7431 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.504586][ T5747] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.508213][ T5747] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.508786][ T5753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.509166][ T5754] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.510183][ T5755] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.510478][ T5754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.511609][ T5755] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.512178][ T5755] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.512529][ T5747] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.512897][ T5747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.513358][ T5747] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.514658][ T5753] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.515712][ T5747] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.516894][ T5747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.519718][ T5097] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.521066][ T5747] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.523285][ T42] audit: type=1400 audit(1785869152.988:163): avc: denied { read } for pid=5739 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.525597][ T5747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.526053][ T5097] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.528677][ T5745] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.529250][ T42] audit: type=1400 audit(1785869152.988:164): avc: denied { open } for pid=5739 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.529274][ T42] audit: type=1400 audit(1785869152.988:165): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.530173][ T5747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.530616][ T42] audit: type=1400 audit(1785869152.988:166): avc: denied { module_request } for pid=5741 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.530641][ T42] audit: type=1400 audit(1785869152.988:167): avc: denied { module_request } for pid=5739 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.963663][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.966292][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.968521][ T5740] bridge_slave_0: entered allmulticast mode [ 45.971402][ T5740] bridge_slave_0: entered promiscuous mode [ 45.987106][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.989391][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.991920][ T5740] bridge_slave_1: entered allmulticast mode [ 45.994958][ T5740] bridge_slave_1: entered promiscuous mode [ 46.055981][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.072118][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.106979][ T5740] team0: Port device team_slave_0 added [ 46.123617][ T5740] team0: Port device team_slave_1 added [ 46.146726][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.149063][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.151665][ T5739] bridge_slave_0: entered allmulticast mode [ 46.154774][ T5739] bridge_slave_0: entered promiscuous mode [ 46.158067][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.160388][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.162965][ T5739] bridge_slave_1: entered allmulticast mode [ 46.166138][ T5739] bridge_slave_1: entered promiscuous mode [ 46.192055][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.194208][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.202041][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.210538][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.212983][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.215292][ T5741] bridge_slave_0: entered allmulticast mode [ 46.218061][ T5741] bridge_slave_0: entered promiscuous mode [ 46.222962][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.227277][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.229504][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.237890][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.245661][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.248134][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.250380][ T5741] bridge_slave_1: entered allmulticast mode [ 46.253769][ T5741] bridge_slave_1: entered promiscuous mode [ 46.257489][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.291040][ T5739] team0: Port device team_slave_0 added [ 46.321406][ T5739] team0: Port device team_slave_1 added [ 46.323294][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.325837][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.328136][ T5738] bridge_slave_0: entered allmulticast mode [ 46.330833][ T5738] bridge_slave_0: entered promiscuous mode [ 46.334913][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.352786][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.355226][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.357964][ T5738] bridge_slave_1: entered allmulticast mode [ 46.360894][ T5738] bridge_slave_1: entered promiscuous mode [ 46.365765][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.375228][ T5740] hsr_slave_0: entered promiscuous mode [ 46.379070][ T5740] hsr_slave_1: entered promiscuous mode [ 46.409144][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.411408][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.418927][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.435936][ T5741] team0: Port device team_slave_0 added [ 46.439223][ T5741] team0: Port device team_slave_1 added [ 46.441727][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.443946][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.451830][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.457404][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.485244][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.496849][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.499091][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.507161][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.512130][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.514394][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.522426][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.564817][ T5738] team0: Port device team_slave_0 added [ 46.573772][ T5738] team0: Port device team_slave_1 added [ 46.587741][ T5739] hsr_slave_0: entered promiscuous mode [ 46.589967][ T5739] hsr_slave_1: entered promiscuous mode [ 46.593684][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 46.595509][ T5739] Cannot create hsr debugfs directory [ 46.630693][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.634070][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.645073][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.655585][ T5741] hsr_slave_0: entered promiscuous mode [ 46.658919][ T5741] hsr_slave_1: entered promiscuous mode [ 46.662941][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 46.665406][ T5741] Cannot create hsr debugfs directory [ 46.676835][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.679799][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.690460][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.797335][ T5738] hsr_slave_0: entered promiscuous mode [ 46.799745][ T5738] hsr_slave_1: entered promiscuous mode [ 46.802374][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 46.804251][ T5738] Cannot create hsr debugfs directory [ 46.958107][ T5740] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.964895][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.002519][ T5740] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.007345][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.042534][ T5740] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.049791][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.059393][ T5740] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.064512][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.131050][ T5739] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.136907][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.140870][ T5739] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.148202][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.152042][ T5739] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.158292][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.164535][ T5739] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.171711][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.230220][ T5738] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.236272][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.238969][ T5738] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.244084][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.249087][ T5738] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.252819][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.256844][ T5738] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.260618][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.333816][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.344015][ T5741] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.348372][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.351874][ T5741] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.355731][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.362281][ T5741] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.366242][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.377862][ T5741] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.382301][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.411266][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.415578][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.441219][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.444402][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.449317][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.451873][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.465207][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.487119][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.489528][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.508957][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.511330][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.517661][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.546081][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.551687][ T5750] Bluetooth: hci1: command tx timeout [ 47.551911][ T5747] Bluetooth: hci3: command tx timeout [ 47.561739][ T5747] Bluetooth: hci2: command tx timeout [ 47.566770][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.569069][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.583028][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.585497][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.616420][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.639068][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.641108][ T5747] Bluetooth: hci0: command tx timeout [ 47.650664][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.652920][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.663230][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.665435][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.787316][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.815672][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.824795][ T5740] veth0_vlan: entered promiscuous mode [ 47.833767][ T5740] veth1_vlan: entered promiscuous mode [ 47.854221][ T5739] veth0_vlan: entered promiscuous mode [ 47.862073][ T5739] veth1_vlan: entered promiscuous mode [ 47.875013][ T5740] veth0_macvtap: entered promiscuous mode [ 47.880430][ T5740] veth1_macvtap: entered promiscuous mode [ 47.886005][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.899189][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.906570][ T5739] veth0_macvtap: entered promiscuous mode [ 47.913918][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.924695][ T5739] veth1_macvtap: entered promiscuous mode [ 47.932159][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.958261][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.970462][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.974399][ T5738] veth0_vlan: entered promiscuous mode [ 47.992111][ T5738] veth1_vlan: entered promiscuous mode [ 47.999333][ T5741] veth0_vlan: entered promiscuous mode [ 48.024599][ T5741] veth1_vlan: entered promiscuous mode [ 48.031985][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.036223][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.089495][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.092637][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.095642][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.095991][ T5741] veth0_macvtap: entered promiscuous mode [ 48.100416][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.103945][ T5738] veth0_macvtap: entered promiscuous mode [ 48.110678][ T5738] veth1_macvtap: entered promiscuous mode [ 48.118385][ T5741] veth1_macvtap: entered promiscuous mode [ 48.134088][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.140630][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.143335][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.144478][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.150183][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.159176][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.162578][ T5740] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.167119][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.179519][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.248651][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.251149][ T5817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.251194][ T5817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.251232][ T5817] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.262921][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.287577][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.290135][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.319657][ T108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.322349][ T108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.323065][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.330500][ T108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.333688][ T108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.341049][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.347566][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.382614][ T5817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.385716][ T5817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.388903][ T5817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.392851][ T5817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.395582][ T5817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.398250][ T5817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.401474][ T5817] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.404228][ T5817] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.412836][ T5895] misc userio: Invalid payload size [ 48.450599][ T5897] [ 48.451483][ T5897] ====================================================== [ 48.861450][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c0: 0000 [#1] SMP KASAN NOPTI [ 48.862491][ T24] usb 7-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 48.865131][ C1] KASAN: null-ptr-deref in range [0x0000000000000600-0x0000000000000607] [ 48.865147][ C1] CPU: 1 UID: 0 PID: 5137 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 48.865161][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 48.865168][ C1] RIP: 0010:usbg_submit_command.isra.0+0x7d/0xdd0 [ 48.868464][ T24] usb 7-1: config 1 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 48.870959][ C1] Code: 3c 02 00 0f 85 16 0c 00 00 49 8b 45 00 48 8d b8 00 06 00 00 48 89 44 24 10 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e1 0b 00 00 48 8b 44 24 10 48 8b 80 00 06 00 00 [ 48.870973][ C1] RSP: 0018:ffffc900006a0bb0 EFLAGS: 00010006 [ 48.870984][ C1] RAX: dffffc0000000000 RBX: ffff888059c7a810 RCX: ffffffff87e9c1a3 [ 48.870991][ C1] RDX: 00000000000000c0 RSI: ffffffff87e9b359 RDI: 0000000000000600 [ 48.870998][ C1] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 48.871005][ C1] R10: 0000000000000000 R11: ffffc900006a0ff8 R12: ffff888059a78000 [ 48.871011][ C1] R13: ffff888059a78000 R14: ffff888059c7a800 R15: dffffc0000000000 [ 48.871018][ C1] FS: 00007f1875c4fc80(0000) GS:ffff8880d5ed8000(0000) knlGS:0000000000000000 [ 48.871040][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.871049][ C1] CR2: 00007fee721eb700 CR3: 000000002d54b000 CR4: 0000000000352ef0 [ 48.871056][ C1] Call Trace: [ 48.877753][ T24] usb 7-1: string descriptor 0 read error: -22 [ 48.878948][ C1] [ 48.878955][ C1] ? lock_acquire+0x301/0x370 [ 48.878974][ C1] ? dummy_timer+0x120f/0x36f0 [ 48.878993][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 48.882460][ T24] usb 7-1: New USB device found, idVendor=1110, idProduct=900f, bcdDevice= 1.00 [ 48.888211][ C1] uasp_cmd_complete+0x97/0x110 [ 48.888235][ C1] dummy_timer+0x1221/0x36f0 [ 48.890266][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 48.892529][ C1] ? rcu_is_watching+0x12/0xc0 [ 48.892553][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 48.892569][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 48.892585][ C1] ? rcu_is_watching+0x12/0xc0 [ 48.892602][ C1] ? rcu_is_watching+0x12/0xc0 [ 48.934634][ C1] ? trace_irq_enable.constprop.0+0x122/0x160 [ 48.936686][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 48.938230][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 48.939841][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 48.941426][ C1] handle_softirqs+0x1ea/0x9b0 [ 48.942887][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 48.944508][ C1] ? _raw_spin_unlock+0x28/0x50 [ 48.946034][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 48.947710][ C1] __irq_exit_rcu+0x162/0x210 [ 48.949121][ C1] irq_exit_rcu+0x9/0x30 [ 48.950401][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 48.952174][ C1] [ 48.953067][ C1] [ 48.953996][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 48.955823][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0xb/0x70 [ 48.957713][ C1] Code: 64 00 be 03 00 00 00 5b e9 a2 32 13 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 45 1b 5a 12 <48> 8b 34 24 65 48 8b 15 21 1b 5a 12 a9 00 01 ff 00 74 1b f6 c4 01 [ 48.963697][ C1] RSP: 0018:ffffc9000cf7fcd0 EFLAGS: 00000293 [ 48.965555][ C1] RAX: 0000000080000000 RBX: ffff888020318040 RCX: ffffffff84d1ea86 [ 48.968088][ C1] RDX: 0000000000000048 RSI: ffffc9000cf7fd58 RDI: ffff888020318040 [ 48.970472][ C1] RBP: ffffc9000cf7fd58 R08: 0000000000000005 R09: 0000000000000000 [ 48.972855][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000048 [ 48.975188][ C1] R13: 0000000000000048 R14: ffff888020318040 R15: ffffc9000cf7fd58 [ 48.977581][ C1] ? security_socket_sendmsg+0xa6/0x230 [ 48.979288][ C1] tomoyo_socket_sendmsg+0x16/0x30 [ 48.980807][ C1] security_socket_sendmsg+0xd3/0x230 [ 48.982432][ C1] __sys_sendto+0x278/0x4e0 [ 48.983776][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 48.985281][ C1] ? do_syslog+0x18c/0x6d0 [ 48.986661][ C1] ? xfd_validate_state+0x129/0x190 [ 48.988246][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 48.989718][ C1] ? trace_irq_enable.constprop.0+0x122/0x160 [ 48.991592][ C1] do_syscall_64+0x115/0x870 [ 48.993040][ C1] ? clear_bhb_loop+0x40/0x90 [ 48.994450][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.996312][ C1] RIP: 0033:0x7f1875d9f407 [ 48.997672][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 49.003391][ C1] RSP: 002b:00007ffddca8df20 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 49.005894][ C1] RAX: ffffffffffffffda RBX: 00007f1875c4fc80 RCX: 00007f1875d9f407 [ 49.008363][ C1] RDX: 0000000000000048 RSI: 00007ffddca8e060 RDI: 0000000000000003 [ 49.010745][ C1] RBP: 00007ffddca8e490 R08: 0000000000000000 R09: 0000000000000000 [ 49.013179][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffddca8e4a8 [ 49.015520][ C1] R13: 00007ffddca8e060 R14: 000000000000002d R15: 00007ffddca8e060 [ 49.018012][ C1] [ 49.019070][ C1] Modules linked in: [ 49.020300][ C1] ---[ end trace 0000000000000000 ]--- [ 49.021054][ T24] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 49.021949][ C1] RIP: 0010:usbg_submit_command.isra.0+0x7d/0xdd0 [ 49.021983][ C1] Code: 3c 02 00 0f 85 16 0c 00 00 49 8b 45 00 48 8d b8 00 06 00 00 48 89 44 24 10 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e1 0b 00 00 48 8b 44 24 10 48 8b 80 00 06 00 00 [ 49.021994][ C1] RSP: 0018:ffffc900006a0bb0 EFLAGS: 00010006 [ 49.033779][ C1] RAX: dffffc0000000000 RBX: ffff888059c7a810 RCX: ffffffff87e9c1a3 [ 49.036149][ C1] RDX: 00000000000000c0 RSI: ffffffff87e9b359 RDI: 0000000000000600 [ 49.038444][ C1] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 49.040724][ C1] R10: 0000000000000000 R11: ffffc900006a0ff8 R12: ffff888059a78000 [ 49.043098][ C1] R13: ffff888059a78000 R14: ffff888059c7a800 R15: dffffc0000000000 [ 49.045487][ C1] FS: 00007f1875c4fc80(0000) GS:ffff8880d5ed8000(0000) knlGS:0000000000000000 [ 49.048349][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.050392][ C1] CR2: 00007fee721eb700 CR3: 000000002d54b000 CR4: 0000000000352ef0 [ 49.052848][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 49.055861][ C1] Kernel Offset: disabled [ 49.057290][ C1] Rebooting in 86400 seconds..