last executing test programs: 1.614923ms ago: executing program 2 (id=2): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810240000007050202400000"], 0x0) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000106)="0000ffffff0a00f6d7290000000000000003fd00") syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000206)="0000ffffff0300fdd72b00fe00") syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000300)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000306)="0000ffffff0400fcd72101000700") nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0) syz_usb_disconnect(r0) 218.243µs ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='disk\n', 0x4) 123.847µs ago: executing program 1 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='stusb1600 0x28\x00', 0xf) 0s ago: executing program 3 (id=4): syz_usb_connect$midi(0x3, 0x56, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x2a39, 0x3fd4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x7, 0x80, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0xa, [@ms_header={0x7, 0x24, 0x1, 0x100, 0x16}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x1}, @midi_out_jack={0x9, 0x24, 0x3, 0x1, 0x2, 0x1, [{0x1, 0x1}]}], [{{0x9, 0x5, 0x81, 0x2, 0x200, 0x0, 0x0, 0x0, {0x5, 0x25, 0x1, 0x1, "02"}}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x0, {0x5, 0x25, 0x1, 0x1, "01"}}}]}}}}}]}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x0, 0x2) write$midi(r0, &(0x7f0000000100)="0011223344", 0x5) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:11339' (ED25519) to the list of known hosts. [ 42.264614][ T5709] cgroup: Unknown subsys name 'net' [ 42.441606][ T5709] cgroup: Unknown subsys name 'cpuset' [ 42.447767][ T5709] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.461950][ T5709] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.192595][ T5757] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.194166][ T5752] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.196765][ T5757] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.199041][ T5752] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.201002][ T5762] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.202944][ T5760] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.204785][ T5752] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.205843][ T5752] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.206502][ T5762] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.207326][ T5762] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.207999][ T5762] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.208334][ T5757] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.209507][ T5760] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.210175][ T5760] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.212141][ T5752] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.213284][ T5760] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.217635][ T5757] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.219530][ T5760] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.221982][ T5106] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.245913][ T5106] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.780536][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.784041][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.786527][ T5747] bridge_slave_0: entered allmulticast mode [ 47.789494][ T5747] bridge_slave_0: entered promiscuous mode [ 47.794290][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.796616][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.799848][ T5747] bridge_slave_1: entered allmulticast mode [ 47.802556][ T5747] bridge_slave_1: entered promiscuous mode [ 47.843712][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.861315][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.892868][ T5755] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.895194][ T5755] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.897574][ T5755] bridge_slave_0: entered allmulticast mode [ 47.900569][ T5755] bridge_slave_0: entered promiscuous mode [ 47.903873][ T5755] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.906150][ T5755] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.908891][ T5755] bridge_slave_1: entered allmulticast mode [ 47.911566][ T5755] bridge_slave_1: entered promiscuous mode [ 47.929553][ T5747] team0: Port device team_slave_0 added [ 47.932790][ T5747] team0: Port device team_slave_1 added [ 47.971982][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.975003][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.978303][ T5756] bridge_slave_0: entered allmulticast mode [ 47.982067][ T5756] bridge_slave_0: entered promiscuous mode [ 47.988228][ T5755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.004207][ T5756] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.007479][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.010554][ T5756] bridge_slave_1: entered allmulticast mode [ 48.018450][ T5756] bridge_slave_1: entered promiscuous mode [ 48.034143][ T5755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.049308][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.052247][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.062643][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.069788][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.072747][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.083157][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.110941][ T5755] team0: Port device team_slave_0 added [ 48.130967][ T5756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.135569][ T5755] team0: Port device team_slave_1 added [ 48.159286][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.161496][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.169514][ T5755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.175309][ T5756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.192863][ T5748] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.195320][ T5748] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.197771][ T5748] bridge_slave_0: entered allmulticast mode [ 48.201369][ T5748] bridge_slave_0: entered promiscuous mode [ 48.206249][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.208495][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.216209][ T5755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.240343][ T5747] hsr_slave_0: entered promiscuous mode [ 48.242685][ T5747] hsr_slave_1: entered promiscuous mode [ 48.245056][ T5748] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.247525][ T5748] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.250126][ T5748] bridge_slave_1: entered allmulticast mode [ 48.252828][ T5748] bridge_slave_1: entered promiscuous mode [ 48.257536][ T5756] team0: Port device team_slave_0 added [ 48.260748][ T5756] team0: Port device team_slave_1 added [ 48.288811][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.291534][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.301064][ T5756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.333781][ T5748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.338234][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.341252][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.351628][ T5756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.370165][ T5748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.387995][ T5755] hsr_slave_0: entered promiscuous mode [ 48.390885][ T5755] hsr_slave_1: entered promiscuous mode [ 48.393299][ T5755] debugfs: 'hsr0' already exists in 'hsr' [ 48.395198][ T5755] Cannot create hsr debugfs directory [ 48.415374][ T5748] team0: Port device team_slave_0 added [ 48.419011][ T5748] team0: Port device team_slave_1 added [ 48.468621][ T5756] hsr_slave_0: entered promiscuous mode [ 48.471658][ T5756] hsr_slave_1: entered promiscuous mode [ 48.474497][ T5756] debugfs: 'hsr0' already exists in 'hsr' [ 48.477005][ T5756] Cannot create hsr debugfs directory [ 48.490842][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.493116][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.501174][ T5748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.505727][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.508050][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.516348][ T5748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.666492][ T5748] hsr_slave_0: entered promiscuous mode [ 48.669125][ T5748] hsr_slave_1: entered promiscuous mode [ 48.671881][ T5748] debugfs: 'hsr0' already exists in 'hsr' [ 48.673778][ T5748] Cannot create hsr debugfs directory [ 48.770464][ T5747] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.779612][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.782432][ T5747] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.788431][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.791063][ T5747] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.795980][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.802408][ T5747] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.806424][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.875864][ T5755] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.880604][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.883359][ T5755] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.887551][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.904506][ T5755] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.909397][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.912298][ T5755] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.916161][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.959914][ T5756] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.964849][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.968118][ T5756] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.972109][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.983183][ T5756] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.988918][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.991666][ T5756] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.995884][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.068926][ T5748] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.072658][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.075606][ T5748] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.079836][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.084318][ T5748] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.092486][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.096267][ T5748] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.105889][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.136030][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.155731][ T5755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.162657][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.179936][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.182731][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.187332][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.189958][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.205485][ T5756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.215830][ T5755] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.229651][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.231970][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.238388][ T5106] Bluetooth: hci2: command tx timeout [ 49.238397][ T64] Bluetooth: hci0: command tx timeout [ 49.257028][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.259554][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.270987][ T5756] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.290656][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.292899][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.312033][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.314912][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.317852][ T5106] Bluetooth: hci3: command tx timeout [ 49.327562][ T5106] Bluetooth: hci1: command tx timeout [ 49.330015][ T5748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.379395][ T5748] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.390187][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.393353][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.410480][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.413000][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.624505][ T5755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.633734][ T5756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.670595][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.680722][ T5748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.685936][ T5755] veth0_vlan: entered promiscuous mode [ 49.717631][ T5756] veth0_vlan: entered promiscuous mode [ 49.720894][ T5755] veth1_vlan: entered promiscuous mode [ 49.738259][ T5756] veth1_vlan: entered promiscuous mode [ 49.764696][ T5747] veth0_vlan: entered promiscuous mode [ 49.769159][ T5748] veth0_vlan: entered promiscuous mode [ 49.780020][ T5747] veth1_vlan: entered promiscuous mode [ 49.790211][ T5748] veth1_vlan: entered promiscuous mode [ 49.796246][ T5755] veth0_macvtap: entered promiscuous mode [ 49.801217][ T5756] veth0_macvtap: entered promiscuous mode [ 49.807886][ T5756] veth1_macvtap: entered promiscuous mode [ 49.812653][ T5755] veth1_macvtap: entered promiscuous mode [ 49.831092][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.851572][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.863268][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.872330][ T5747] veth0_macvtap: entered promiscuous mode [ 49.878810][ T5748] veth0_macvtap: entered promiscuous mode [ 49.882699][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.894647][ T5747] veth1_macvtap: entered promiscuous mode [ 49.899302][ T5748] veth1_macvtap: entered promiscuous mode [ 49.923280][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.937877][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.945012][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.951648][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.963435][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.986992][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.995168][ T230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.000163][ T230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.006048][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.011533][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.018568][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.027641][ T5583] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.031078][ T5583] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.072019][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.074411][ T230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.074431][ T230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.074550][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.084837][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.087547][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.097937][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.100817][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.107136][ T5583] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.133435][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.138866][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.139486][ T5583] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.152378][ T5755] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.157402][ T5756] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.161936][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.164558][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.170077][ T5756] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.172587][ T5755] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.189496][ T5583] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.190464][ T5756] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.192249][ T5583] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.217467][ T5826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.225438][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x9d000) [ 50.248144][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.253526][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.261144][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.266154][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.270273][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.318318][ T1132] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 50.322947][ T1132] ata1: failed to read log page 10h (errno=-5) [ 50.325451][ T1132] ata1.00: NCQ disabled due to excessive errors [ 50.328842][ T1132] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 50.331682][ T1132] ata1.00: irq_stat 0x40000000 [ 50.333520][ T1132] ata1.00: failed command: READ FPDMA QUEUED [ 50.335875][ T1132] ata1.00: cmd 60/e8:70:4e:91:03/04:00:00:00:00/40 tag 14 ncq dma 643072 in [ 50.335875][ T1132] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 50.342258][ T1132] ata1.00: status: { DRDY } [ 50.344071][ T1132] ata1.00: failed command: READ FPDMA QUEUED [ 50.346283][ T1132] ata1.00: cmd 60/50:78:1e:7b:03/06:00:00:00:00/40 tag 15 ncq dma 827392 in [ 50.346283][ T1132] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 50.352860][ T1132] ata1.00: status: { DRDY } [ 50.355077][ T1132] ata1.00: configured for UDMA/100 [ 50.357061][ T1132] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 50.360089][ T1132] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 50.362569][ T1132] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 50.365782][ T1132] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 03 91 4e 00 04 e8 00 [ 50.369181][ T1132] I/O error, dev sda, sector 233806 op 0x0:(READ) flags 0x80700 phys_seg 157 prio class 2 [ 50.372977][ T1132] sd 0:0:0:0: [sda] tag#15 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 50.376567][ T1132] sd 0:0:0:0: [sda] tag#15 Sense Key : Aborted Command [current] [ 50.379682][ T1132] sd 0:0:0:0: [sda] tag#15 Add. Sense: No additional sense information [ 50.382440][ T1132] sd 0:0:0:0: [sda] tag#15 CDB: Read(10) 28 00 00 03 7b 1e 00 06 50 00 [ 50.386072][ T1132] I/O error, dev sda, sector 228126 op 0x0:(READ) flags 0x80700 phys_seg 102 prio class 2 [ 50.390291][ T1132] ata1: EH complete [ 50.400433][ T5903] PM: hibernation: hibernation entry [ 50.407920][ T5904] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN NOPTI [ 50.411900][ T5904] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 50.414658][ T5904] CPU: 0 UID: 0 PID: 5904 Comm: syz.1.3 Not tainted syzkaller #0 PREEMPT(full) [ 50.417379][ T5904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.420466][ T5904] RIP: 0010:regmap_get_i2c_bus+0xbe/0xc60 [ 50.422334][ T5904] Code: 89 c6 e8 55 3a a5 fb 45 85 e4 0f 85 84 01 00 00 e8 d7 3f a5 fb 4c 8d 73 1c 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 <0f> b6 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 a2 [ 50.429398][ T5904] RSP: 0018:ffffc900066e7550 EFLAGS: 00010207 [ 50.431576][ T5904] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90007b51000 [ 50.434297][ T5904] RDX: 0000000000000003 RSI: ffffffff86647129 RDI: ffff888029560000 [ 50.437013][ T5904] RBP: ffff8880217a6000 R08: 0000000000000005 R09: 0000000000000000 [ 50.439832][ T5904] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 50.442651][ T5904] R13: ffff8880217a6018 R14: 000000000000001c R15: ffff8880217a6000 [ 50.445271][ T5904] FS: 0000000000000000(0000) GS:ffff888096bdf000(0063) knlGS:00000000f540db40 [ 50.448004][ T5904] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 50.450163][ T5904] CR2: 00000000f7387598 CR3: 000000006cf30000 CR4: 0000000000352ef0 [ 50.452739][ T5904] Call Trace: [ 50.453934][ T5904] [ 50.454859][ T5904] ? lockdep_hardirqs_on+0x78/0x100 [ 50.456458][ T5904] __devm_regmap_init_i2c+0x28/0x80 [ 50.458151][ T5904] stusb160x_probe+0xe4/0x1ae0 [ 50.459790][ T5904] ? _raw_spin_unlock+0x3e/0x50 [ 50.461320][ T5904] ? __pfx_stusb160x_probe+0x10/0x10 [ 50.462920][ T5904] ? dput.part.0+0x4f/0x240 [ 50.464317][ T5904] ? dput+0x24/0x30 [ 50.465499][ T5904] ? end_dirop+0x82/0xa0 [ 50.466814][ T5904] ? __pfx_stusb160x_probe+0x10/0x10 [ 50.468648][ T5904] i2c_device_probe+0x658/0xd10 [ 50.470145][ T5904] ? kernfs_put+0x3f/0x60 [ 50.471465][ T5904] ? __pfx_i2c_device_probe+0x10/0x10 [ 50.473112][ T5904] ? sysfs_create_link+0x68/0xc0 [ 50.474628][ T5904] ? __pfx_i2c_device_probe+0x10/0x10 [ 50.476287][ T5904] really_probe+0x241/0xa60 [ 50.477735][ T5904] __driver_probe_device+0x20e/0x450 [ 50.479323][ T5904] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.481203][ T5904] driver_probe_device+0x4a/0x140 [ 50.482782][ T5904] __device_attach_driver+0x1df/0x320 [ 50.484424][ T5904] ? __pfx___device_attach_driver+0x10/0x10 [ 50.486221][ T5904] bus_for_each_drv+0x159/0x1e0 [ 50.487717][ T5904] ? __pfx_bus_for_each_drv+0x10/0x10 [ 50.489398][ T5904] ? lockdep_hardirqs_on+0x78/0x100 [ 50.490975][ T5904] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 50.492723][ T5904] __device_attach+0x1e4/0x4d0 [ 50.494192][ T5904] ? __pfx___device_attach+0x10/0x10 [ 50.495823][ T5904] ? do_raw_spin_unlock+0x145/0x1e0 [ 50.497423][ T5904] device_initial_probe+0xaf/0xd0 [ 50.499042][ T5904] bus_probe_device+0x64/0x160 [ 50.500453][ T5904] device_add+0x121d/0x1970 [ 50.501831][ T5904] ? __pfx_device_add+0x10/0x10 [ 50.503303][ T5904] ? lockdep_init_map_type+0x5c/0x250 [ 50.504939][ T5904] ? __init_waitqueue_head+0xca/0x150 [ 50.506572][ T5904] i2c_new_client_device+0x660/0xd30 [ 50.508149][ T5904] new_device_store+0x20f/0x420 [ 50.509614][ T5904] ? __lock_acquire+0x49f/0x1a40 [ 50.511115][ T5904] ? __pfx_new_device_store+0x10/0x10 [ 50.512729][ T5904] ? find_held_lock+0x2b/0x80 [ 50.514200][ T5904] ? sysfs_file_kobj+0xe4/0x290 [ 50.515662][ T5904] ? sysfs_file_kobj+0xe4/0x290 [ 50.517162][ T5904] ? __pfx_new_device_store+0x10/0x10 [ 50.518764][ T5904] dev_attr_store+0x58/0x80 [ 50.520154][ T5904] ? __pfx_dev_attr_store+0x10/0x10 [ 50.521727][ T5904] sysfs_kf_write+0xf2/0x150 [ 50.523151][ T5904] kernfs_fop_write_iter+0x3e0/0x5f0 [ 50.524776][ T5904] ? __pfx_sysfs_kf_write+0x10/0x10 [ 50.526367][ T5904] vfs_write+0x6ac/0x1050 [ 50.527731][ T5904] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 50.529564][ T5904] ? __pfx_vfs_write+0x10/0x10 [ 50.531033][ T5904] ? find_held_lock+0x2b/0x80 [ 50.532494][ T5904] ksys_write+0x12a/0x250 [ 50.533842][ T5904] ? __pfx_ksys_write+0x10/0x10 [ 50.535329][ T5904] __do_fast_syscall_32+0xe7/0x970 [ 50.536916][ T5904] do_fast_syscall_32+0x32/0x70 [ 50.538430][ T5904] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 50.540711][ T5904] RIP: 0023:0xf701efec [ 50.541993][ T5904] Code: Unable to access opcode bytes at 0xf701efc2. [ 50.544063][ T5904] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 50.546581][ T5904] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 50.546950][ T846] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 50.549012][ T5904] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 50.553902][ T5904] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 50.556292][ T5904] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 50.558791][ T5904] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.561165][ T5904] [ 50.562128][ T5904] Modules linked in: [ 50.563998][ T5904] ---[ end trace 0000000000000000 ]--- [ 50.566303][ T5904] RIP: 0010:regmap_get_i2c_bus+0xbe/0xc60 [ 50.568989][ T5904] Code: 89 c6 e8 55 3a a5 fb 45 85 e4 0f 85 84 01 00 00 e8 d7 3f a5 fb 4c 8d 73 1c 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 <0f> b6 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 a2 [ 50.578841][ T5904] RSP: 0018:ffffc900066e7550 EFLAGS: 00010207 [ 50.580854][ T5904] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90007b51000 [ 50.583389][ T5904] RDX: 0000000000000003 RSI: ffffffff86647129 RDI: ffff888029560000 [ 50.585915][ T5904] RBP: ffff8880217a6000 R08: 0000000000000005 R09: 0000000000000000 [ 50.586912][ T1357] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 50.589034][ T5904] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 50.593982][ T5904] R13: ffff8880217a6018 R14: 000000000000001c R15: ffff8880217a6000 [ 50.597231][ T5904] FS: 0000000000000000(0000) GS:ffff888096ddf000(0063) knlGS:00000000f540db40 [ 50.600391][ T5904] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 50.602564][ T5904] CR2: 0000559010d4e000 CR3: 000000006cf30000 CR4: 0000000000352ef0 [ 50.605095][ T5904] Kernel panic - not syncing: Fatal exception [ 50.607881][ T5904] Kernel Offset: disabled [ 50.609304][ T5904] Rebooting in 86400 seconds..