last executing test programs: 1.255752541s ago: executing program 2 (id=3): r0 = socket(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) mkdir(&(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='-2 -3\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f0000000800)='tcp 2049\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000a00)='1\n', 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r5 = openat(r4, &(0x7f0000000c00)='nfsd.export/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000d00)='localhost /tmp 2000000000 0 0 0 0\n', 0x22) r6 = openat(r4, &(0x7f0000000e00)='nfsd.fh/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000f00)="6c6f63616c686f7374203120010000002032303030303030303030202f746d700a", 0x21) nanosleep(&(0x7f0000001000)={0x1}, 0x0) mkdir(&(0x7f0000001100)='./mnt\x00', 0x1ff) mount(&(0x7f0000001200)=@filename='127.0.0.1:/tmp\x00', &(0x7f0000001300)='./mnt\x00', &(0x7f0000001400)='nfs\x00', 0x0, &(0x7f0000001500)='port=2049,addr=127.0.0.1,vers=4.1,clientaddr=127.0.0.1\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./mnt/file\x00', 0x42, 0x1ff) write(r7, &(0x7f0000001700)='hello\x00', 0x5) 913.95075ms ago: executing program 1 (id=2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@uexit]}) ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xae20, 0x3d0900) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xae20, 0x3d0900) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000300)={0xfee00000, 0x0, 0x41}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 380.581873ms ago: executing program 3 (id=4): syz_usb_connect(0x5, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x9, 0x1234, 0x5678, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x1, 0x2, 0x400}}]}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) 307.533502ms ago: executing program 1 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000020)='./sys\x00', &(0x7f0000000030)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/class/graphics/fb0/name\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0x40) 241.608507ms ago: executing program 0 (id=1): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c804200700000102000109022000010100803209040000020ff0000007058101400000000705020140000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0300"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000200), 0x0, 0x2) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000300)=0x1) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0x980900, 0x80}) 183.645632ms ago: executing program 1 (id=6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x40000000}) syz_io_uring_setup(0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x1a, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x40000000}) getpid() 0s ago: executing program 1 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='vhci_hcd\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/vhci_hcd/bind\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='pcspkr\x00', 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.141' (ED25519) to the list of known hosts. [ 73.210814][ T5602] cgroup: Unknown subsys name 'net' [ 73.327733][ T5602] cgroup: Unknown subsys name 'cpuset' [ 73.337191][ T5602] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.008512][ T5602] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.531730][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.539273][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.542506][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.551154][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.559727][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.560204][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.560633][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.569005][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.569277][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.569699][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.570979][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.573033][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.575034][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.575337][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.577897][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.579984][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.586893][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.594824][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.595975][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.596569][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.217987][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.218657][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.219519][ T5614] bridge_slave_0: entered allmulticast mode [ 80.221632][ T5614] bridge_slave_0: entered promiscuous mode [ 80.245883][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.246016][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.248652][ T5615] bridge_slave_0: entered allmulticast mode [ 80.253869][ T5615] bridge_slave_0: entered promiscuous mode [ 80.299947][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.300091][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.300259][ T5614] bridge_slave_1: entered allmulticast mode [ 80.302274][ T5614] bridge_slave_1: entered promiscuous mode [ 80.305397][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.305506][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.305907][ T5615] bridge_slave_1: entered allmulticast mode [ 80.308383][ T5615] bridge_slave_1: entered promiscuous mode [ 80.376931][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.405671][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.427372][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.463769][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.487242][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.488083][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.488485][ T5613] bridge_slave_0: entered allmulticast mode [ 80.490291][ T5613] bridge_slave_0: entered promiscuous mode [ 80.522248][ T5615] team0: Port device team_slave_0 added [ 80.523710][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.524089][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.524220][ T5613] bridge_slave_1: entered allmulticast mode [ 80.526066][ T5613] bridge_slave_1: entered promiscuous mode [ 80.543611][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.543775][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.543895][ T5612] bridge_slave_0: entered allmulticast mode [ 80.545988][ T5612] bridge_slave_0: entered promiscuous mode [ 80.549601][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.549767][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.549888][ T5612] bridge_slave_1: entered allmulticast mode [ 80.552238][ T5612] bridge_slave_1: entered promiscuous mode [ 80.557652][ T5614] team0: Port device team_slave_0 added [ 80.561426][ T5615] team0: Port device team_slave_1 added [ 80.598079][ T5614] team0: Port device team_slave_1 added [ 80.630913][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.636537][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.664732][ T54] Bluetooth: hci2: command tx timeout [ 80.664898][ T54] Bluetooth: hci0: command tx timeout [ 80.664933][ T5617] Bluetooth: hci3: command tx timeout [ 80.695659][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.709815][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.713281][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.713309][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.734705][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.744919][ T5626] Bluetooth: hci1: command tx timeout [ 80.750030][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.750047][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.750069][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.751485][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.751497][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.751519][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.768417][ T5613] team0: Port device team_slave_0 added [ 80.785799][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.785817][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.785840][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.792991][ T5613] team0: Port device team_slave_1 added [ 80.796996][ T5612] team0: Port device team_slave_0 added [ 80.857722][ T5612] team0: Port device team_slave_1 added [ 80.861464][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.861481][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.861503][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.999534][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.999586][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.000020][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.009849][ T5615] hsr_slave_0: entered promiscuous mode [ 81.011296][ T5615] hsr_slave_1: entered promiscuous mode [ 81.060301][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.060340][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.060365][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.073507][ T5614] hsr_slave_0: entered promiscuous mode [ 81.074769][ T5614] hsr_slave_1: entered promiscuous mode [ 81.075544][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 81.075621][ T5614] Cannot create hsr debugfs directory [ 81.076974][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.076987][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.077010][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.247409][ T5612] hsr_slave_0: entered promiscuous mode [ 81.248477][ T5612] hsr_slave_1: entered promiscuous mode [ 81.249157][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 81.249175][ T5612] Cannot create hsr debugfs directory [ 81.258091][ T5613] hsr_slave_0: entered promiscuous mode [ 81.259146][ T5613] hsr_slave_1: entered promiscuous mode [ 81.259879][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 81.259897][ T5613] Cannot create hsr debugfs directory [ 81.668110][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.684486][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.685710][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.697857][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.701408][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.710267][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.712161][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.727419][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.793683][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.806900][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.810198][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.820178][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.831637][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.841965][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.850341][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.860808][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.945147][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.962115][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.980864][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.990526][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.001993][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.012224][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.041660][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.055815][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.188972][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.190846][ T5612] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.206024][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.206906][ T5612] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.221036][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.237154][ T5612] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.251230][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.252190][ T5612] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.268553][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.345138][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.400053][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.416420][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.416583][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.468921][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.469635][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.527186][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.553878][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.554028][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.605488][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.605602][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.667760][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.745138][ T5626] Bluetooth: hci3: command tx timeout [ 82.745191][ T5626] Bluetooth: hci2: command tx timeout [ 82.745233][ T5626] Bluetooth: hci0: command tx timeout [ 82.768052][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.796944][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.797059][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.824859][ T5617] Bluetooth: hci1: command tx timeout [ 82.853046][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.858824][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.858964][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.958429][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.004655][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.004813][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.050046][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.050175][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.675167][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.832032][ T5615] veth0_vlan: entered promiscuous mode [ 83.876653][ T5615] veth1_vlan: entered promiscuous mode [ 83.981688][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.005915][ T5615] veth0_macvtap: entered promiscuous mode [ 84.029074][ T5615] veth1_macvtap: entered promiscuous mode [ 84.095219][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.110484][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.216570][ T5614] veth0_vlan: entered promiscuous mode [ 84.228852][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.286659][ T5614] veth1_vlan: entered promiscuous mode [ 84.337591][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.358205][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.450985][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.462303][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.466987][ T5614] veth0_macvtap: entered promiscuous mode [ 84.470164][ T1174] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.470221][ T1174] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.473622][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.495783][ T5614] veth1_macvtap: entered promiscuous mode [ 84.534279][ T5613] veth0_vlan: entered promiscuous mode [ 84.561178][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.561241][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.591953][ T5613] veth1_vlan: entered promiscuous mode [ 84.630683][ T5612] veth0_vlan: entered promiscuous mode [ 84.644946][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.675615][ T5612] veth1_vlan: entered promiscuous mode [ 84.687366][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.750256][ T5615] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.823597][ T5617] Bluetooth: hci0: command tx timeout [ 84.823659][ T5617] Bluetooth: hci2: command tx timeout [ 84.823699][ T5617] Bluetooth: hci3: command tx timeout [ 84.824136][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.824317][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.824890][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.824934][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.831935][ T5613] veth0_macvtap: entered promiscuous mode [ 84.883717][ T5613] veth1_macvtap: entered promiscuous mode [ 84.903516][ T5626] Bluetooth: hci1: command tx timeout [ 84.955652][ T5612] veth0_macvtap: entered promiscuous mode [ 84.968602][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.968645][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.007711][ T5612] veth1_macvtap: entered promiscuous mode [ 85.050969][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.051022][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.081631][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.095819][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.111914][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.135664][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.295447][ T27] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.296725][ T27] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.296770][ T27] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.296804][ T27] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.296837][ T27] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.296870][ T27] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.296902][ T27] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.296934][ T27] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.432615][ T5772] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.522462][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.522512][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.592409][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.592454][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.662293][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.662342][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.702943][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.702984][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.084412][ T5622] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.150013][ T5784] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 86.162196][ T5784] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 86.170702][ T5784] CPU: 0 UID: 0 PID: 5784 Comm: syz.1.7 Not tainted syzkaller #0 PREEMPT(full) [ 86.179734][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.189887][ T5784] RIP: 0010:vhci_hcd_probe+0x47/0x3e0 [ 86.195364][ T5784] Code: 7f da e0 f9 49 8d 9e 80 00 00 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 b3 54 4f fa 48 8b 1b 48 89 d8 48 c1 e8 03 <80> 3c 28 00 74 08 48 89 df e8 9b 54 4f fa 4c 8b 23 48 c7 c0 80 b8 [ 86.214983][ T5784] RSP: 0018:ffffc900048efac0 EFLAGS: 00010246 [ 86.221083][ T5784] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 86.229150][ T5784] RDX: ffffc900055b9000 RSI: 00000000000002e2 RDI: 00000000000002e3 [ 86.237132][ T5784] RBP: dffffc0000000000 R08: ffff88802b5c92d3 R09: 1ffff110056b925a [ 86.245118][ T5784] R10: dffffc0000000000 R11: ffffffff87e70290 R12: ffff88801d7ff000 [ 86.253129][ T5784] R13: ffffffff8fe7ee80 R14: ffff88801d7ff000 R15: ffffffff87e70290 [ 86.261215][ T5784] FS: 00007f200187a6c0(0000) GS:ffff8881248ab000(0000) knlGS:0000000000000000 [ 86.270167][ T5784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.276949][ T5784] CR2: 000000110c3435ac CR3: 0000000077a2e000 CR4: 00000000003526f0 [ 86.285201][ T5784] Call Trace: [ 86.288586][ T5784] [ 86.291791][ T5784] ? platform_probe+0xed/0x190 [ 86.296597][ T5784] ? __pfx_vhci_hcd_probe+0x10/0x10 [ 86.302214][ T5784] platform_probe+0xf9/0x190 [ 86.306843][ T5784] ? __pfx_platform_probe+0x10/0x10 [ 86.312433][ T5784] really_probe+0x254/0xae0 [ 86.317322][ T5784] __driver_probe_device+0x1e8/0x360 [ 86.322846][ T5784] device_driver_attach+0xe0/0x1d0 [ 86.327996][ T5784] bind_store+0x1d0/0x220 [ 86.332438][ T5784] ? __pfx_sysfs_kf_write+0x10/0x10 [ 86.337831][ T5784] kernfs_fop_write_iter+0x3a4/0x540 [ 86.343248][ T5784] vfs_write+0x612/0xba0 [ 86.347544][ T5784] ? __pfx_vfs_write+0x10/0x10 [ 86.352451][ T5784] ? __fget_files+0x2a/0x420 [ 86.353688][ T5622] usb 4-1: Invalid ep0 maxpacket: 9 [ 86.362546][ T5784] ksys_write+0x150/0x270 [ 86.366915][ T5784] ? __pfx_ksys_write+0x10/0x10 [ 86.371886][ T5784] do_syscall_64+0x166/0x520 [ 86.376670][ T5784] ? trace_irq_disable+0x3b/0x140 [ 86.381807][ T5784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.387969][ T5784] ? clear_bhb_loop+0x70/0xc0 [ 86.392658][ T5784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.398558][ T5784] RIP: 0033:0x7f200099e0d9 [ 86.402995][ T5784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.423048][ T5784] RSP: 002b:00007f200187a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.432001][ T5784] RAX: ffffffffffffffda RBX: 00007f2000c25fa0 RCX: 00007f200099e0d9 [ 86.440454][ T5784] RDX: 0000000000000006 RSI: 00002000000001c0 RDI: 0000000000000004 [ 86.448543][ T5784] RBP: 00007f2000a35024 R08: 0000000000000000 R09: 0000000000000000 [ 86.456889][ T5784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.465072][ T5784] R13: 00007f2000c26038 R14: 00007f2000c25fa0 R15: 00007ffe03034f68 [ 86.473071][ T5784] [ 86.476117][ T5784] Modules linked in: [ 86.483931][ T5784] ---[ end trace 0000000000000000 ]--- [ 86.492684][ T5784] RIP: 0010:vhci_hcd_probe+0x47/0x3e0 [ 86.492736][ T5784] Code: 7f da e0 f9 49 8d 9e 80 00 00 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 b3 54 4f fa 48 8b 1b 48 89 d8 48 c1 e8 03 <80> 3c 28 00 74 08 48 89 df e8 9b 54 4f fa 4c 8b 23 48 c7 c0 80 b8 [ 86.492763][ T5784] RSP: 0018:ffffc900048efac0 EFLAGS: 00010246 [ 86.492791][ T5784] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 86.492808][ T5784] RDX: ffffc900055b9000 RSI: 00000000000002e2 RDI: 00000000000002e3 [ 86.492827][ T5784] RBP: dffffc0000000000 R08: ffff88802b5c92d3 R09: 1ffff110056b925a [ 86.492845][ T5784] R10: dffffc0000000000 R11: ffffffff87e70290 R12: ffff88801d7ff000 [ 86.492864][ T5784] R13: ffffffff8fe7ee80 R14: ffff88801d7ff000 R15: ffffffff87e70290 [ 86.492883][ T5784] FS: 00007f200187a6c0(0000) GS:ffff8881248ab000(0000) knlGS:0000000000000000 [ 86.492902][ T5784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.492918][ T5784] CR2: 000000110c3435ac CR3: 0000000077a2e000 CR4: 00000000003526f0 [ 86.492943][ T5784] Kernel panic - not syncing: Fatal exception [ 86.597630][ T5784] Kernel Offset: disabled [ 86.602051][ T5784] Rebooting in 86400 seconds..