last executing test programs: 336.678µs ago: executing program 1 (id=2): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3, {0x0, 0x1}}, 0x6) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x2c}}, 0x0) (async) 210.384µs ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/printk/parameters/console_suspend\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='0\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='0\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='core\n', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/kernel/printk\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='1 1 1 1\n', 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='disk\n', 0x5) 88.816µs ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='0000:00:02.0\x00', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='e100\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/e100/bind\x00', 0x1, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x4c4b40}}) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x4, &(0x7f0000000200)=[{&(0x7f0000000240)='\x00\x00', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r5, r6, r7, &(0x7f00000005c0)=@IORING_OP_TIMEOUT={0xb, 0x8, 0x0, 0x0, 0x0, &(0x7f0000000320)={0x0, 0x989680}}) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000640)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x4, &(0x7f0000000200)=[{&(0x7f0000000240)='\x00\x00', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r5, r6, r7, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x8, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x0, 0xe4e1c0}}) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000740)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x4, &(0x7f0000000200)=[{&(0x7f0000000240)='\x00\x00', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x6, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000280)='0000:00:02.0\x00', 0xc) 0s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='3\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0) write(r3, &(0x7f0000000440)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0) write(r4, &(0x7f0000000540)='3\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0) write(r5, &(0x7f00000005c0)='1\n', 0x2) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r6, &(0x7f00000006c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:36382' (ED25519) to the list of known hosts. [ 42.245951][ T5721] cgroup: Unknown subsys name 'net' [ 42.410687][ T5721] cgroup: Unknown subsys name 'cpuset' [ 42.414575][ T5721] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.321892][ T5721] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.225033][ T5755] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.225988][ T5754] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.227104][ T5756] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.228529][ T5757] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.229661][ T5756] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.230196][ T5755] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.231601][ T5756] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.232428][ T5754] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.233121][ T5754] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.234800][ T5757] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.234988][ T5754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.235718][ T5756] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.236367][ T5754] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.237590][ T5754] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.237922][ T5754] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.238333][ T5755] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.239301][ T5754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.242800][ T5756] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.244963][ T5755] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.271855][ T5755] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.861452][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.864539][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.866880][ T5741] bridge_slave_0: entered allmulticast mode [ 47.870222][ T5741] bridge_slave_0: entered promiscuous mode [ 47.874888][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.877215][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.879547][ T5741] bridge_slave_1: entered allmulticast mode [ 47.882280][ T5741] bridge_slave_1: entered promiscuous mode [ 47.904003][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.906285][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.908660][ T5745] bridge_slave_0: entered allmulticast mode [ 47.911381][ T5745] bridge_slave_0: entered promiscuous mode [ 47.940817][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.943166][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.945399][ T5745] bridge_slave_1: entered allmulticast mode [ 47.948386][ T5745] bridge_slave_1: entered promiscuous mode [ 47.957032][ T5751] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.959880][ T5751] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.962942][ T5751] bridge_slave_0: entered allmulticast mode [ 47.966732][ T5751] bridge_slave_0: entered promiscuous mode [ 47.977495][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.979852][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.982186][ T5740] bridge_slave_0: entered allmulticast mode [ 47.984817][ T5740] bridge_slave_0: entered promiscuous mode [ 48.002600][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.007128][ T5751] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.009378][ T5751] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.011786][ T5751] bridge_slave_1: entered allmulticast mode [ 48.014433][ T5751] bridge_slave_1: entered promiscuous mode [ 48.029177][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.031494][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.033840][ T5740] bridge_slave_1: entered allmulticast mode [ 48.036504][ T5740] bridge_slave_1: entered promiscuous mode [ 48.040246][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.045780][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.050747][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.061875][ T5751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.089274][ T5745] team0: Port device team_slave_0 added [ 48.092221][ T5751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.106232][ T5741] team0: Port device team_slave_0 added [ 48.110697][ T5741] team0: Port device team_slave_1 added [ 48.113409][ T5745] team0: Port device team_slave_1 added [ 48.122150][ T5751] team0: Port device team_slave_0 added [ 48.125068][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.130215][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.150974][ T5751] team0: Port device team_slave_1 added [ 48.170056][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.172250][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.180324][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.185614][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.188066][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.195936][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.211843][ T5740] team0: Port device team_slave_0 added [ 48.214337][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.216527][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.224749][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.232831][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.235077][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.244063][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.248734][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.251146][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.259114][ T5751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.265304][ T5740] team0: Port device team_slave_1 added [ 48.285396][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.287967][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.296423][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.300859][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.303093][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.311266][ T5751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.322071][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.324365][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.332629][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.389443][ T5751] hsr_slave_0: entered promiscuous mode [ 48.391875][ T5751] hsr_slave_1: entered promiscuous mode [ 48.396879][ T5741] hsr_slave_0: entered promiscuous mode [ 48.399358][ T5741] hsr_slave_1: entered promiscuous mode [ 48.401417][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 48.403255][ T5741] Cannot create hsr debugfs directory [ 48.408572][ T5745] hsr_slave_0: entered promiscuous mode [ 48.410803][ T5745] hsr_slave_1: entered promiscuous mode [ 48.412940][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 48.414736][ T5745] Cannot create hsr debugfs directory [ 48.464173][ T5740] hsr_slave_0: entered promiscuous mode [ 48.466409][ T5740] hsr_slave_1: entered promiscuous mode [ 48.468659][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 48.471163][ T5740] Cannot create hsr debugfs directory [ 48.724700][ T5745] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.733374][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.736449][ T5745] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.742304][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.746173][ T5745] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.752519][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.761550][ T5745] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.768462][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.812799][ T5741] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.820061][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.822953][ T5741] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.827288][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.830130][ T5741] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.836050][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.839399][ T5741] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.845348][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.905896][ T5751] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.910120][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.913440][ T5751] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.918101][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.924139][ T5751] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.929299][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.932734][ T5751] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.936578][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.000050][ T5740] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.006663][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.011262][ T5740] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.016878][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.026123][ T5740] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.031162][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.039061][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.042164][ T5740] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.047818][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.078869][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.091473][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.106374][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.109045][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.131005][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.135012][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.137327][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.161696][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.164082][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.174148][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.177167][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.203051][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.251484][ T5751] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.262957][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.278606][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.281946][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.287748][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.291149][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.319200][ T5746] Bluetooth: hci2: command tx timeout [ 49.328384][ T5746] Bluetooth: hci0: command tx timeout [ 49.328414][ T5755] Bluetooth: hci1: command tx timeout [ 49.328669][ T5101] Bluetooth: hci3: command tx timeout [ 49.336110][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.351305][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.354416][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.375808][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.378857][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.624979][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.648978][ T5751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.657514][ T5745] veth0_vlan: entered promiscuous mode [ 49.667560][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.672548][ T5745] veth1_vlan: entered promiscuous mode [ 49.706391][ T5751] veth0_vlan: entered promiscuous mode [ 49.716500][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.725145][ T5751] veth1_vlan: entered promiscuous mode [ 49.731357][ T5745] veth0_macvtap: entered promiscuous mode [ 49.742270][ T5745] veth1_macvtap: entered promiscuous mode [ 49.750926][ T5741] veth0_vlan: entered promiscuous mode [ 49.770063][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.779136][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.788632][ T5741] veth1_vlan: entered promiscuous mode [ 49.806112][ T5751] veth0_macvtap: entered promiscuous mode [ 49.813703][ T5740] veth0_vlan: entered promiscuous mode [ 49.827650][ T5751] veth1_macvtap: entered promiscuous mode [ 49.841412][ T5740] veth1_vlan: entered promiscuous mode [ 49.870618][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.884151][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.887201][ T5741] veth0_macvtap: entered promiscuous mode [ 49.900463][ T5741] veth1_macvtap: entered promiscuous mode [ 49.915764][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.920812][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.929250][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.949370][ T5740] veth0_macvtap: entered promiscuous mode [ 49.955149][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.964481][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.968897][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.983816][ T5740] veth1_macvtap: entered promiscuous mode [ 50.007350][ T5794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.039777][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.043289][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.044222][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.062885][ T5745] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.080672][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.082352][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.084533][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.084781][ T5745] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.090866][ T5745] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.099144][ T5745] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.110343][ T5821] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.113439][ T5745] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.115858][ T5821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.147829][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.151188][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x8f000) [ 50.218935][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.223946][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.245219][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.249098][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.251717][ T1132] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 50.254070][ T1132] ata1: failed to read log page 10h (errno=-5) [ 50.256096][ T1132] ata1.00: exception Emask 0x1 SAct 0x40001000 SErr 0x0 action 0x0 [ 50.260991][ T1132] ata1.00: irq_stat 0x41000000 [ 50.262565][ T1132] ata1.00: failed command: READ FPDMA QUEUED [ 50.264459][ T1132] ata1.00: cmd 60/08:60:1e:7b:03/05:00:00:00:00/40 tag 12 ncq dma 659456 in [ 50.264459][ T1132] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 50.268054][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.270607][ T1132] ata1.00: status: { DRDY } [ 50.274176][ T1132] ata1.00: failed command: READ FPDMA QUEUED [ 50.276048][ T1132] ata1.00: cmd 60/78:f0:de:84:03/04:00:00:00:00/40 tag 30 ncq dma 585728 in [ 50.276048][ T1132] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 50.282835][ T1132] ata1.00: status: { DRDY } [ 50.288032][ T1132] ata1.00: configured for UDMA/100 [ 50.290048][ T1132] sd 0:0:0:0: [sda] tag#12 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 50.663219][ T5907] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 50.666296][ T5907] CPU: 0 UID: 0 PID: 5907 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) [ 50.670367][ T5907] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.674521][ T5907] Call Trace: [ 50.675929][ T5907] [ 50.677185][ T5907] dump_stack_lvl+0x100/0x190 [ 50.679162][ T5907] vpanic+0x552/0x970 [ 50.680849][ T5907] ? __pfx_vpanic+0x10/0x10 [ 50.682580][ T5907] panic+0xd1/0xe0 [ 50.683819][ T5907] ? __pfx_panic+0x10/0x10 [ 50.685256][ T5907] check_panic_on_warn.cold+0x19/0x34 [ 50.686942][ T5907] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 50.688956][ T5907] e100_eeprom_load.cold+0x55/0x9e [ 50.690621][ T5907] ? dma_alloc_attrs+0x1cd/0x3a0 [ 50.692311][ T5907] ? __pfx_e100_eeprom_load+0x10/0x10 [ 50.694040][ T5907] ? lockdep_init_map_type+0x5c/0x250 [ 50.695748][ T5907] e100_probe+0xd07/0x1ab0 [ 50.697177][ T5907] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 50.699005][ T5907] ? __pfx_e100_probe+0x10/0x10 [ 50.700570][ T5907] local_pci_probe+0xdd/0x1b0 [ 50.702061][ T5907] pci_call_probe+0x176/0x800 [ 50.703601][ T5907] ? __pfx_pci_call_probe+0x10/0x10 [ 50.705263][ T5907] ? find_held_lock+0x2b/0x80 [ 50.706751][ T5907] ? pci_match_device+0x450/0x5f0 [ 50.708247][ T5907] ? pci_match_device+0x450/0x5f0 [ 50.709806][ T5907] ? pci_match_id+0x34d/0x3f0 [ 50.711292][ T5907] ? pci_match_device+0xb4/0x5f0 [ 50.712852][ T5907] pci_device_probe+0x1cd/0x370 [ 50.714427][ T5907] ? __pfx_pci_device_probe+0x10/0x10 [ 50.716107][ T5907] really_probe+0x241/0xa60 [ 50.717623][ T5907] __driver_probe_device+0x20e/0x450 [ 50.719288][ T5907] device_driver_attach+0xd1/0x220 [ 50.720922][ T5907] bind_store+0xf4/0x190 [ 50.722281][ T5907] ? __pfx_bind_store+0x10/0x10 [ 50.723867][ T5907] drv_attr_store+0x74/0xb0 [ 50.725296][ T5907] ? __pfx_drv_attr_store+0x10/0x10 [ 50.726946][ T5907] sysfs_kf_write+0xf2/0x150 [ 50.728421][ T5907] kernfs_fop_write_iter+0x3e0/0x5f0 [ 50.730115][ T5907] ? __pfx_sysfs_kf_write+0x10/0x10 [ 50.731759][ T5907] vfs_write+0x6ac/0x1050 [ 50.733122][ T5907] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 50.734982][ T5907] ? __pfx_vfs_write+0x10/0x10 [ 50.736481][ T5907] ? find_held_lock+0x2b/0x80 [ 50.738343][ T5907] ksys_write+0x12a/0x250 [ 50.740158][ T5907] ? __pfx_ksys_write+0x10/0x10 [ 50.741899][ T5907] __do_fast_syscall_32+0xe7/0x970 [ 50.743514][ T5907] do_fast_syscall_32+0x32/0x70 [ 50.745083][ T5907] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 50.747052][ T5907] RIP: 0023:0xf704efec [ 50.748355][ T5907] Code: Unable to access opcode bytes at 0xf704efc2. [ 50.750449][ T5907] RSP: 002b:00000000f541c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 50.753374][ T5907] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000280 [ 50.755871][ T5907] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 50.758317][ T5907] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 50.760780][ T5907] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 50.763267][ T5907] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.765751][ T5907] [ 50.767425][ T5907] Kernel Offset: disabled [ 50.768846][ T5907] Rebooting in 86400 seconds..