last executing test programs: 116.964876ms ago: executing program 2 (id=3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000180)={0x1, 0x0, [{0x4b564d04, 0x0, 0x3}]}) 116.024572ms ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys_final\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./sys_final\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_final/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='vivid.0', 0x7) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d89600001010203010902200001010080320904000002ffffff0007058102000200"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0xc0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0xc0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$swradio(&(0x7f0000000400), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000500)={0x8, 0xb, 0x1}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000600)=0xb) 113.407516ms ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1f7) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.usb0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.usb0/ep.2\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc) 67.101516ms ago: executing program 3 (id=4): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000001000)='rd_pages=8', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000001200)='1', 0x1) mkdir(&(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000001400)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)="30a126", 0x3) 0s ago: executing program 2 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/ext0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/ext0/baSourceID\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='1\n\x00', 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:24844' (ED25519) to the list of known hosts. [ 42.141450][ T5697] cgroup: Unknown subsys name 'net' [ 42.271259][ T5697] cgroup: Unknown subsys name 'cpuset' [ 42.277165][ T5697] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.185699][ T5697] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.204798][ T5753] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.207940][ T5753] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.212285][ T5757] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.215008][ T5757] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.219191][ T5757] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.219207][ T5755] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.219947][ T5756] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.221908][ T5756] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.223396][ T5757] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.224152][ T5757] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.227174][ T5758] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.228528][ T5756] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.234623][ T5755] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.236085][ T5755] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.238015][ T5746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.239425][ T5756] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.240142][ T5755] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.243101][ T5746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.247992][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.256418][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.895599][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.899282][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.902555][ T5742] bridge_slave_0: entered allmulticast mode [ 47.906375][ T5742] bridge_slave_0: entered promiscuous mode [ 47.911370][ T5750] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.914308][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.918050][ T5750] bridge_slave_0: entered allmulticast mode [ 47.921898][ T5750] bridge_slave_0: entered promiscuous mode [ 47.942733][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.945085][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.948126][ T5742] bridge_slave_1: entered allmulticast mode [ 47.950855][ T5742] bridge_slave_1: entered promiscuous mode [ 47.953931][ T5750] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.956001][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.958269][ T5750] bridge_slave_1: entered allmulticast mode [ 47.960856][ T5750] bridge_slave_1: entered promiscuous mode [ 47.980328][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.983360][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.986165][ T5740] bridge_slave_0: entered allmulticast mode [ 47.990082][ T5740] bridge_slave_0: entered promiscuous mode [ 48.023769][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.026944][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.029964][ T5740] bridge_slave_1: entered allmulticast mode [ 48.033699][ T5740] bridge_slave_1: entered promiscuous mode [ 48.056674][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.060086][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.063126][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.065785][ T5741] bridge_slave_0: entered allmulticast mode [ 48.069138][ T5741] bridge_slave_0: entered promiscuous mode [ 48.072473][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.074828][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.077332][ T5741] bridge_slave_1: entered allmulticast mode [ 48.079993][ T5741] bridge_slave_1: entered promiscuous mode [ 48.089656][ T5750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.095553][ T5750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.100587][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.131941][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.141703][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.146193][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.159008][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.163480][ T5742] team0: Port device team_slave_0 added [ 48.167360][ T5742] team0: Port device team_slave_1 added [ 48.175336][ T5750] team0: Port device team_slave_0 added [ 48.192667][ T5740] team0: Port device team_slave_0 added [ 48.202632][ T5750] team0: Port device team_slave_1 added [ 48.211319][ T5740] team0: Port device team_slave_1 added [ 48.234550][ T5741] team0: Port device team_slave_0 added [ 48.249506][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.252408][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.262295][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.268560][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.271218][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.279143][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.289693][ T5741] team0: Port device team_slave_1 added [ 48.301846][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.304088][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.312211][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.316726][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.319229][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.327395][ T5750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.332021][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.334323][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.342485][ T5750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.358717][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.360813][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.368997][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.379125][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.381475][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.390429][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.397887][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.400249][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.408142][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.432052][ T5742] hsr_slave_0: entered promiscuous mode [ 48.434370][ T5742] hsr_slave_1: entered promiscuous mode [ 48.457173][ T5750] hsr_slave_0: entered promiscuous mode [ 48.459389][ T5750] hsr_slave_1: entered promiscuous mode [ 48.461469][ T5750] debugfs: 'hsr0' already exists in 'hsr' [ 48.463246][ T5750] Cannot create hsr debugfs directory [ 48.494099][ T5740] hsr_slave_0: entered promiscuous mode [ 48.496312][ T5740] hsr_slave_1: entered promiscuous mode [ 48.498818][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 48.501055][ T5740] Cannot create hsr debugfs directory [ 48.505641][ T5741] hsr_slave_0: entered promiscuous mode [ 48.507962][ T5741] hsr_slave_1: entered promiscuous mode [ 48.510079][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 48.511794][ T5741] Cannot create hsr debugfs directory [ 48.803150][ T5750] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.809881][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.812731][ T5750] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.817658][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.820496][ T5750] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.826242][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.830555][ T5750] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.835324][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.900999][ T5742] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.908093][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.921902][ T5742] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.927868][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.930630][ T5742] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.934727][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.945907][ T5742] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.949926][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.975744][ T5741] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.981823][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.985826][ T5741] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.989937][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.992528][ T5741] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.996419][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.000000][ T5741] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.003885][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.071752][ T5740] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.077180][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.080215][ T5740] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.084123][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.087044][ T5740] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.091101][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.093935][ T5740] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.098406][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.152845][ T5750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.190176][ T5750] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.199908][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.215288][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.221489][ T774] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.224012][ T774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.237127][ T774] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.239410][ T774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.257189][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.261464][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.269104][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.275239][ T774] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.277540][ T774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.285235][ T774] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.287489][ T774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.299449][ T5751] Bluetooth: hci2: command tx timeout [ 49.306391][ T774] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.307273][ T5751] Bluetooth: hci3: command tx timeout [ 49.309485][ T774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.312621][ T64] Bluetooth: hci0: command tx timeout [ 49.312667][ T5101] Bluetooth: hci1: command tx timeout [ 49.313365][ T774] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.313408][ T774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.326357][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.341631][ T774] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.344538][ T774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.365971][ T774] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.368377][ T774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.389189][ T5742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.630083][ T5750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.636668][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.645414][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.692753][ T5742] veth0_vlan: entered promiscuous mode [ 49.704811][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.712080][ T5750] veth0_vlan: entered promiscuous mode [ 49.718502][ T5742] veth1_vlan: entered promiscuous mode [ 49.723382][ T5750] veth1_vlan: entered promiscuous mode [ 49.738839][ T5741] veth0_vlan: entered promiscuous mode [ 49.753326][ T5741] veth1_vlan: entered promiscuous mode [ 49.790256][ T5742] veth0_macvtap: entered promiscuous mode [ 49.795149][ T5750] veth0_macvtap: entered promiscuous mode [ 49.803023][ T5750] veth1_macvtap: entered promiscuous mode [ 49.815270][ T5742] veth1_macvtap: entered promiscuous mode [ 49.829778][ T5740] veth0_vlan: entered promiscuous mode [ 49.833755][ T5741] veth0_macvtap: entered promiscuous mode [ 49.842002][ T5741] veth1_macvtap: entered promiscuous mode [ 49.847827][ T5740] veth1_vlan: entered promiscuous mode [ 49.853670][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.858841][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.869001][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.874426][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.885353][ T5820] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.889739][ T5820] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.893653][ T5820] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.901342][ T5820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.904216][ T5820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.909577][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.913175][ T5820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.916057][ T5820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.933445][ T5820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.943193][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.954918][ T5820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.965428][ T5820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.969766][ T5820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.975701][ T5740] veth0_macvtap: entered promiscuous mode [ 49.987311][ T5820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.003171][ T5740] veth1_macvtap: entered promiscuous mode [ 50.030328][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.033596][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.058325][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.061491][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.076061][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.087874][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.088189][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.096048][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.104867][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.107921][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.124432][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.127171][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.130520][ T5820] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.133588][ T5820] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.146869][ T5820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.146992][ T5750] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.149513][ T5820] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.150812][ T5742] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.154973][ T774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.161806][ T5742] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.163591][ T774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.174244][ T5742] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.192628][ T5742] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.212433][ T774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.217609][ T774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.246593][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.249811][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.316704][ T5897] vivid-000: unregistering video7 [ 50.321622][ T5897] vivid-000: unregistering video8 [ 50.324409][ T5897] vivid-000: unregistering vbi0 [ 50.330024][ T5897] vivid-000: unregistering vbi1 [ 50.353439][ T5897] vivid-000: unregistering swradio0 [ 50.359847][ T5897] vivid-000: unregistering radio0 [ 50.370384][ T5899] sound umpC3D1: No UMP Group is found in FB [ 50.373605][ T5899] sound umpC3D2: No UMP Group is found in FB [ 50.384104][ T5897] vivid-000: unregistering radio1 [ 50.399537][ T5897] vivid-000: unregistering video9 [ 50.403589][ T5897] vivid-000: unregistering video10 [ 50.415881][ T5897] vivid-000: unregistering v4l-touch0 [ 50.429848][ T5907] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI [ 50.433435][ T5907] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 50.435996][ T5907] CPU: 0 UID: 0 PID: 5907 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 50.438608][ T5907] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.441573][ T5907] RIP: 0010:configfs_depend_item_unlocked+0x24a/0x6a0 [ 50.443553][ T5907] Code: 54 fc 08 c7 44 24 1c fe ff ff ff e9 a6 02 00 00 e8 ab a9 4a ff 48 8d 7d 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1d 04 00 00 48 bb 00 00 00 00 00 fc ff df 4c 8b [ 50.444255][ T5897] vivid-001: unregistering video11 [ 50.449159][ T5907] RSP: 0018:ffffc900065d7b18 EFLAGS: 00010206 [ 50.449177][ T5907] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90026652000 [ 50.449185][ T5907] RDX: 000000000000000c RSI: ffffffff82bf02b5 RDI: 0000000000000060 [ 50.449191][ T5907] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 50.449197][ T5907] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 50.449204][ T5907] R13: ffff8880601bc000 R14: ffff8880601bc000 R15: ffff8880601bc0b8 [ 50.449211][ T5907] FS: 0000000000000000(0000) GS:ffff888096be3000(0063) knlGS:00000000f5495b40 [ 50.449233][ T5907] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 50.453833][ T5897] vivid-001: unregistering video12 [ 50.455001][ T5907] CR2: 00000000f5494ff4 CR3: 000000006d4dd000 CR4: 0000000000352ef0 [ 50.455012][ T5907] Call Trace: [ 50.455017][ T5907] [ 50.455021][ T5907] ? __lock_acquire+0x49f/0x1a40 [ 50.455997][ T5903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.456119][ T5903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.462123][ T42] audit: type=1800 audit(1785415206.968:2): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5" name="baSourceID" dev="configfs" ino=10503 res=0 errno=0 [ 50.464130][ T5907] usbg_make_tpg+0x261/0x620 [ 50.464153][ T5907] ? __pfx_usbg_make_tpg+0x10/0x10 [ 50.479171][ T5897] vivid-001: unregistering vbi2 [ 50.480452][ T5907] ? find_held_lock+0x2b/0x80 [ 50.480474][ T5907] ? __pfx_usbg_make_tpg+0x10/0x10 [ 50.489419][ T5897] vivid-001: unregistering vbi3 [ 50.490153][ T5907] target_fabric_make_tpg+0xab/0x8c0 [ 50.492273][ T5897] vivid-001: unregistering swradio1 [ 50.493194][ T5907] configfs_mkdir+0x51e/0xb70 [ 50.493211][ T5907] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 50.497256][ T5897] vivid-001: unregistering radio2 [ 50.497600][ T5907] ? __pfx_configfs_mkdir+0x10/0x10 [ 50.501714][ T5897] vivid-001: unregistering radio3 [ 50.502091][ T5907] vfs_mkdir+0x361/0x850 [ 50.502108][ T5907] filename_mkdirat+0x48b/0x5e0 [ 50.502121][ T5907] ? __pfx_filename_mkdirat+0x10/0x10 [ 50.509261][ T5907] ? strncpy_from_user+0x19d/0x2d0 [ 50.510757][ T5907] ? do_getname+0x191/0x390 [ 50.512127][ T5907] __ia32_sys_mkdir+0x6a/0x90 [ 50.513541][ T5907] __do_fast_syscall_32+0xe7/0x970 [ 50.513955][ T5897] vivid-001: unregistering video13 [ 50.515073][ T5907] do_fast_syscall_32+0x32/0x70 [ 50.515090][ T5907] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 50.515105][ T5907] RIP: 0023:0xf7ff3fec [ 50.519122][ T5897] vivid-001: unregistering video14 [ 50.519870][ T5907] Code: Unable to access opcode bytes at 0xf7ff3fc2. [ 50.519877][ T5907] RSP: 002b:00000000f549550c EFLAGS: 00000292 ORIG_RAX: 0000000000000027 [ 50.519889][ T5907] RAX: ffffffffffffffda RBX: 0000000080000c00 RCX: 00000000000001ff [ 50.525608][ T5897] vivid-001: unregistering v4l-touch1 [ 50.526989][ T5907] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.526998][ T5907] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 50.527004][ T5907] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 50.527010][ T5907] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.527019][ T5907] [ 50.527023][ T5907] Modules linked in: [ 50.527477][ T5907] ---[ end trace 0000000000000000 ]--- [ 50.545137][ T5907] RIP: 0010:configfs_depend_item_unlocked+0x24a/0x6a0 [ 50.547369][ T5907] Code: 54 fc 08 c7 44 24 1c fe ff ff ff e9 a6 02 00 00 e8 ab a9 4a ff 48 8d 7d 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1d 04 00 00 48 bb 00 00 00 00 00 fc ff df 4c 8b [ 50.552097][ T5897] vivid-002: unregistering video15 [ 50.552999][ T5907] RSP: 0018:ffffc900065d7b18 EFLAGS: 00010206 [ 50.554874][ T5897] vivid-002: unregistering video16 [ 50.556333][ T5907] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90026652000 [ 50.558706][ T5897] vivid-002: unregistering vbi4 [ 50.560803][ T5907] RDX: 000000000000000c RSI: ffffffff82bf02b5 RDI: 0000000000000060 [ 50.563260][ T5897] vivid-002: unregistering vbi5 [ 50.564387][ T5907] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 50.566174][ T5897] vivid-002: unregistering swradio2 [ 50.568276][ T5907] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 50.572013][ T5907] R13: ffff8880601bc000 R14: ffff8880601bc000 R15: ffff8880601bc0b8 [ 50.572129][ T5897] vivid-002: unregistering radio4 [ 50.574319][ T5907] FS: 0000000000000000(0000) GS:ffff888096be3000(0063) knlGS:00000000f5495b40 [ 50.579874][ T5907] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 50.581890][ T5907] CR2: 00000000f7ff4000 CR3: 000000006d4dd000 CR4: 0000000000352ef0 [ 50.584279][ T5907] Kernel panic - not syncing: Fatal exception [ 50.586757][ T5907] Kernel Offset: disabled [ 50.588037][ T5907] Rebooting in 86400 seconds..