last executing test programs: 496.09511ms ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='md0\n\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='raid5\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='65536\n\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='3\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='1:0\n\x00', 0x4) write(r4, &(0x7f00000003c0)='1:1\n\x00', 0x4) write(r4, &(0x7f0000000400)='1:2\n\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='0\n\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000500)='1\n\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/dev-ram2/slot\x00', 0x1, 0x0) write(r7, &(0x7f0000000580)='2\n\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000600)='active\n\x00', 0x7) write(r4, &(0x7f0000000640)='1:3\n\x00', 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/block/md0/md/dev-ram3/slot\x00', 0x1, 0x0) write(r8, &(0x7f00000006c0)='3\n\x00', 0x2) write(r3, &(0x7f0000000700)='4\n\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000780)='reshape\n\x00', 0x8) 293.09783ms ago: executing program 1 (id=2): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040fd0b0b000100010203010902200001010080fa0904000002ffffff000705810200020007050102000200"], 0x0) syz_usb_ep_write(r0, 0x81, 0x22, &(0x7f0000000100)="2227000000000000000012048000"/34) syz_usb_ep_write(r0, 0x81, 0x22, &(0x7f0000000200)="22230001000000000000000000000000000000000000000000000000010000000000") r1 = socket$inet(0x2, 0x1, 0x0) ioctl(r1, 0x8914, &(0x7f0000000040)="63616e300000000000000000000000000100") syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000400)="041b0000") syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000500)="101400"/16) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000600)="10140000000000000000000040000000") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000900)={0x0, 0x13, 0x1, 0x70bd25, 0x25dfdbfb, "", [@generic="000000000200"/16, @nested={0x0, 0x12, 0x0, 0x1, [@typed={0x0, 0x1, 0x0, 0x0, @str='can\x00'}, @nested={0x0, 0x2, 0x0, 0x1, [@typed={0x0, 0x7}]}]}]}}], 0x1}, 0x0) 208.3844ms ago: executing program 2 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='0000:00:02.0\x00', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='net2280\x00', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/drivers/net2280/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='0000:00:02.0\x00', 0xd) close(r2) nanosleep(&(0x7f0000000900)={0x0, 0x5f5e100}, 0x0) 86.468766ms ago: executing program 0 (id=1): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x1000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./file1\x00', 0x42, 0x1b6) ftruncate(r1, 0x1000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x42, 0x1b6) ftruncate(r2, 0x1000000) r3 = syz_open_dev$loop(&(0x7f0000000060), 0x0, 0x2) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x1, 0x2) ioctl$LOOP_SET_FD(r4, 0x4c00, r1) r5 = syz_open_dev$loop(&(0x7f00000000a0), 0x2, 0x2) ioctl$LOOP_SET_FD(r5, 0x4c00, r2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000120)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000160)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r6, &(0x7f00000001a0)='md0\n', 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r7, &(0x7f0000000280)='131072\n', 0x7) r8 = openat(0xffffffffffffff9c, &(0x7f00000002a0)='./sys/block/md0/md/layout\x00', 0x1, 0x0) write(r8, &(0x7f00000002e0)='0\n', 0x2) 72.6516ms ago: executing program 3 (id=4): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x81, 0x2, 0x200}, {0x9, 0x5, 0x2, 0x2, 0x200}, {0x9, 0x5, 0x83, 0x3, 0x20, 0x1}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x8, {0x8, 0x11, '\b\x00'}}, 0x0}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 72.246841ms ago: executing program 4 (id=5): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200), 0x2) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 0s ago: executing program 0 (id=7): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f00307020100000000010902200001010080fa0904000002080580000705810200020007050202000200"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.100' (ED25519) to the list of known hosts. [ 22.064460][ T4684] cgroup: Unknown subsys name 'net' [ 22.184574][ T4684] cgroup: Unknown subsys name 'cpuset' [ 22.187240][ T4684] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 22.364401][ T4684] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 23.167168][ T4712] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 23.169761][ T4712] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 23.171623][ T4712] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 23.174796][ T4715] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 23.176504][ T4715] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 23.178404][ T4715] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 23.182239][ T4713] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 23.182404][ T4713] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 23.182747][ T4713] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 23.182923][ T4713] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 23.185657][ T4719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 23.190312][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 23.192366][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 23.194058][ T4719] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 23.195742][ T4719] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 23.198919][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 23.200753][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 23.201548][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 23.201715][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 23.202127][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 23.202423][ T4723] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 23.202628][ T4724] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 23.213070][ T4712] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 23.216071][ T4715] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 23.217748][ T4715] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 23.540202][ T4725] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.544010][ T4725] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.544454][ T4725] bridge_slave_0: entered allmulticast mode [ 23.547692][ T4725] bridge_slave_0: entered promiscuous mode [ 23.549392][ T4725] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.549445][ T4725] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.550154][ T4725] bridge_slave_1: entered allmulticast mode [ 23.550604][ T4725] bridge_slave_1: entered promiscuous mode [ 23.599541][ T4725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.600638][ T4725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.614706][ T4725] team0: Port device team_slave_0 added [ 23.616759][ T4725] team0: Port device team_slave_1 added [ 23.622587][ T4725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.623988][ T4725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.624008][ T4725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.624870][ T4725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.624879][ T4725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.624894][ T4725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.638919][ T4725] hsr_slave_0: entered promiscuous mode [ 23.639289][ T4725] hsr_slave_1: entered promiscuous mode [ 23.657670][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.659073][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.660458][ T4710] bridge_slave_0: entered allmulticast mode [ 23.661947][ T4710] bridge_slave_0: entered promiscuous mode [ 23.666340][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.667700][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.669064][ T4710] bridge_slave_1: entered allmulticast mode [ 23.670657][ T4710] bridge_slave_1: entered promiscuous mode [ 23.676690][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.676734][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.676828][ T4711] bridge_slave_0: entered allmulticast mode [ 23.677242][ T4711] bridge_slave_0: entered promiscuous mode [ 23.704878][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.704921][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.704979][ T4711] bridge_slave_1: entered allmulticast mode [ 23.705407][ T4711] bridge_slave_1: entered promiscuous mode [ 23.739394][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.740731][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.741945][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.744472][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.751815][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.751859][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.751919][ T4718] bridge_slave_0: entered allmulticast mode [ 23.752368][ T4718] bridge_slave_0: entered promiscuous mode [ 23.756787][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.756844][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.756933][ T4718] bridge_slave_1: entered allmulticast mode [ 23.757347][ T4718] bridge_slave_1: entered promiscuous mode [ 23.767647][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.771841][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.782403][ T4711] team0: Port device team_slave_0 added [ 23.790236][ T4710] team0: Port device team_slave_0 added [ 23.791234][ T4711] team0: Port device team_slave_1 added [ 23.802952][ T4710] team0: Port device team_slave_1 added [ 23.812110][ T4718] team0: Port device team_slave_0 added [ 23.815691][ T4718] team0: Port device team_slave_1 added [ 23.822189][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.822213][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.822229][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.823703][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.823712][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.823725][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.824301][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.824310][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.824329][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.832709][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.832717][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.832728][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.840605][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.840669][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.840758][ T4717] bridge_slave_0: entered allmulticast mode [ 23.841219][ T4717] bridge_slave_0: entered promiscuous mode [ 23.842529][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.842537][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.842549][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.843723][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.843731][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.843748][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.864427][ T4711] hsr_slave_0: entered promiscuous mode [ 23.864760][ T4711] hsr_slave_1: entered promiscuous mode [ 23.864976][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 23.865013][ T4711] Cannot create hsr debugfs directory [ 23.865133][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.865192][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.865246][ T4717] bridge_slave_1: entered allmulticast mode [ 23.865687][ T4717] bridge_slave_1: entered promiscuous mode [ 23.881748][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.883871][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.888161][ T4710] hsr_slave_0: entered promiscuous mode [ 23.889652][ T4710] hsr_slave_1: entered promiscuous mode [ 23.891541][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 23.892613][ T4710] Cannot create hsr debugfs directory [ 23.915186][ T4717] team0: Port device team_slave_0 added [ 23.916002][ T4717] team0: Port device team_slave_1 added [ 23.920468][ T4718] hsr_slave_0: entered promiscuous mode [ 23.920958][ T4718] hsr_slave_1: entered promiscuous mode [ 23.921160][ T4718] debugfs: 'hsr0' already exists in 'hsr' [ 23.921170][ T4718] Cannot create hsr debugfs directory [ 23.931329][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.931357][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.931372][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.941706][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.941731][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.941760][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.976840][ T4725] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 23.980115][ T4725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.989283][ T4717] hsr_slave_0: entered promiscuous mode [ 23.989619][ T4717] hsr_slave_1: entered promiscuous mode [ 23.989807][ T4717] debugfs: 'hsr0' already exists in 'hsr' [ 23.989817][ T4717] Cannot create hsr debugfs directory [ 23.999341][ T4725] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 24.001891][ T4725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 24.003475][ T4725] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 24.005692][ T4725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 24.008734][ T4725] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 24.011139][ T4725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 24.075945][ T4725] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.076011][ T4725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.076175][ T4725] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.076212][ T4725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.092956][ T4711] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 24.095633][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 24.097415][ T4711] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.100013][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 24.101680][ T4711] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.104372][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 24.107173][ T4711] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 24.109512][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 24.130650][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.130700][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.130777][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.130812][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.139739][ T4718] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 24.142277][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 24.147198][ T4718] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.149372][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 24.149973][ T4718] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 24.151411][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 24.151841][ T4718] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 24.154647][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 24.162920][ T4725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.171677][ T1250] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.175256][ T1250] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.178441][ T1250] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.179782][ T1250] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.187346][ T4725] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.196840][ T1250] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.196887][ T1250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.200930][ T4710] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 24.204363][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 24.206321][ T4710] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 24.208640][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 24.210374][ T4710] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 24.212633][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 24.214164][ T4710] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 24.216244][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 24.222347][ T3417] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.222397][ T3417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.247978][ T4717] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 24.249027][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 24.249323][ T4717] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 24.250625][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 24.257891][ T4717] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 24.260086][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 24.262775][ T4717] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 24.265324][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 24.268584][ T4725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.287863][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.307224][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.327102][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.327142][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.328120][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.328143][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.332987][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.348655][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.362040][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.369621][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.369667][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.370065][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.370082][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.386461][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.397025][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.406587][ T1250] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.406648][ T1250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.414400][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.422722][ T3655] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.422767][ T3655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.452146][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.456661][ T4725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.462231][ T4718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.470239][ T3655] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.470286][ T3655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.483387][ T3417] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.483441][ T3417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.491045][ T4717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.492990][ T4717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.513677][ T4725] veth0_vlan: entered promiscuous mode [ 24.516876][ T4725] veth1_vlan: entered promiscuous mode [ 24.524162][ T4725] veth0_macvtap: entered promiscuous mode [ 24.536614][ T4725] veth1_macvtap: entered promiscuous mode [ 24.547704][ T4725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.550722][ T4725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.584113][ T1250] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.584293][ T1250] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.584429][ T1250] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.584509][ T1250] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.602179][ T1250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.602219][ T1250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.631200][ T1478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.631229][ T1478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.681706][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.691936][ T4725] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.695135][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.717808][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.730883][ T4883] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 24.745988][ T4711] veth0_vlan: entered promiscuous mode [ 24.747696][ T4711] veth1_vlan: entered promiscuous mode [ 24.755964][ T4711] veth0_macvtap: entered promiscuous mode [ 24.759862][ T4711] veth1_macvtap: entered promiscuous mode [ 24.767898][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.771548][ T4718] veth0_vlan: entered promiscuous mode [ 24.776766][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.779787][ T1250] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.780006][ T1250] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.780086][ T1250] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.780135][ T1250] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.786494][ T4718] veth1_vlan: entered promiscuous mode [ 24.826201][ T4718] veth0_macvtap: entered promiscuous mode [ 24.830843][ T4718] veth1_macvtap: entered promiscuous mode [ 24.841356][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.845535][ T3417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.845559][ T3417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.857302][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.859993][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.871585][ T4710] veth0_vlan: entered promiscuous mode [ 24.872730][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.875258][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.878328][ T4710] veth1_vlan: entered promiscuous mode [ 24.901237][ T4717] veth0_vlan: entered promiscuous mode [ 24.911457][ T4710] veth0_macvtap: entered promiscuous mode [ 24.914150][ T4710] veth1_macvtap: entered promiscuous mode [ 24.918976][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.920196][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.931134][ T4717] veth1_vlan: entered promiscuous mode [ 24.942848][ T4894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.946488][ T4894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.964151][ T3417] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.966457][ T15] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.966600][ T15] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.966740][ T15] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.970680][ T4717] veth0_macvtap: entered promiscuous mode [ 24.986705][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.986943][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.990580][ T4717] veth1_macvtap: entered promiscuous mode [ 25.002468][ T4894] Zero length message leads to an empty skb [ 25.005860][ T1250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.006191][ T1250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.017991][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.020257][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.026088][ T15] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.026537][ T15] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.026611][ T15] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.026675][ T15] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.036507][ T1250] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.036605][ T1250] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.036829][ T1250] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.036906][ T1250] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.048867][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.048894][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.050199][ T1250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.050211][ T1250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.075700][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.075729][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.090052][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.090109][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.149761][ T4900] EXT4-fs (nvme0n1p2): shut down requested (2) [ 25.151414][ T4900] Aborting journal on device nvme0n1p2-8. [ 25.157925][ T4905] loop0: detected capacity change from 0 to 32768 [ 25.159747][ T4905] loop1: detected capacity change from 0 to 32768 [ 25.166313][ T4905] loop2: detected capacity change from 0 to 32768 [ 25.174170][ T4905] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 25.273569][ T4719] Bluetooth: hci1: command tx timeout [ 25.273970][ T4715] Bluetooth: hci4: command tx timeout [ 25.284501][ T4715] Bluetooth: hci0: command tx timeout [ ** replaying previous printk message ** [ 25.336774][ T4901] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000048 [ 25.336812][ T4901] Mem abort info: [ 25.336837][ T4901] ESR = 0x0000000096000006 [ 25.336844][ T4901] EC = 0x25: DABT (current EL), IL = 32 bits [ 25.336852][ T4901] SET = 0, FnV = 0 [ 25.336857][ T4901] EA = 0, S1PTW = 0 [ 25.336862][ T4901] FSC = 0x06: level 2 translation fault [ 25.336867][ T4901] Data abort info: [ 25.336870][ T4901] ISV = 0, ISS = 0x00000006, ISS2 = 0x00000000 [ 25.336875][ T4901] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 25.336880][ T4901] GCS = 0, Overlay = 0, DirtyBit = 0 [ 25.336885][ T4901] user pgtable: 4k pages, 48-bit VAs, pgdp=000000010316c000 [ 25.336892][ T4901] [0000000000000048] pgd=08000001334c9403, p4d=08000001334c9403, pud=08000001334cf403, pmd=0000000000000000 [ 25.336960][ T4901] Internal error: Oops: 0000000096000006 [#1] SMP [ 25.351722][ T4901] Modules linked in: [ 25.352436][ T4901] CPU: 0 UID: 0 PID: 4901 Comm: syz.2.6 Not tainted syzkaller #0 PREEMPT [ 25.353832][ T4901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 25.355614][ T4901] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 25.356951][ T4901] pc : usb_reinit+0xbf4/0xfa0 [ 25.357798][ T4901] lr : usb_reinit+0xb6c/0xfa0 [ 25.358655][ T4901] sp : ffff8000933675a0 [ 25.359395][ T4901] x29: ffff8000933675e0 x28: dfff800000000000 x27: ffff800087354e38 [ 25.360779][ T4901] x26: ffff800087354e80 x25: 0000000000000060 x24: 1fffe0001969f183 [ 25.362216][ T4901] x23: ffff0000cb4f8c18 x22: 1fffe0001969f00b x21: 0000000000000011 [ 25.363511][ T4901] x20: ffff0000cb4f8058 x19: ffff0000cb4f8000 x18: 00000000ffffffff [ 25.364802][ T4901] x17: ffff80008a7d6000 x16: 0000000000000005 x15: ffff80008a35fda0 [ 25.366049][ T4901] x14: ffff80008a5d5e28 x13: 0000000000000001 x12: 0000000000000000 [ 25.367373][ T4901] x11: 1fffe0001969f178 x10: 0000000000080000 x9 : 0000000000003b8c [ 25.368654][ T4901] x8 : 0000000000000048 x7 : ffff800080aa1cb8 x6 : 0000000000000000 [ 25.369900][ T4901] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000835bf6bc [ 25.371165][ T4901] x2 : 0000000000000000 x1 : ffff0000c66c1d40 x0 : 0000000000000001 [ 25.372443][ T4901] Call trace: [ 25.372965][ T4901] usb_reinit+0xbf4/0xfa0 (P) [ 25.373728][ T4901] net2280_probe+0x5f4/0xef0 [ 25.374503][ T4901] local_pci_probe+0xc8/0x158 [ 25.375241][ T4901] pci_device_probe+0x460/0x8d4 [ 25.376057][ T4901] really_probe+0x29c/0x800 [ 25.376771][ T4901] __driver_probe_device+0x1e0/0x350 [ 25.377613][ T4901] device_driver_attach+0x58/0xac [ 25.378470][ T4901] bind_store+0xf4/0x14c [ 25.379162][ T4901] drv_attr_store+0x80/0xa4 [ 25.379930][ T4901] sysfs_kf_write+0xe0/0x108 [ 25.380693][ T4901] kernfs_fop_write_iter+0x260/0x3b8 [ 25.381520][ T4901] vfs_write+0x51c/0xa0c [ 25.382200][ T4901] ksys_write+0x12c/0x228 [ 25.382914][ T4901] __arm64_sys_write+0x84/0x98 [ 25.383735][ T4901] invoke_syscall+0x98/0x244 [ 25.384494][ T4901] el0_svc_common+0xec/0x23c [ 25.385257][ T4901] do_el0_svc+0x4c/0x5c [ 25.385946][ T4901] el0_svc+0x64/0x260 [ 25.386605][ T4901] el0t_64_sync_handler+0x44/0x104 [ 25.387465][ T4901] el0t_64_sync+0x198/0x19c [ 25.388225][ T4901] Code: 9757676c f94002e8 91012108 d503201f (b9400115) [ 25.389324][ T4901] ---[ end trace 0000000000000000 ]--- [ 25.652771][ T4901] Kernel panic - not syncing: Oops: Fatal exception [ 25.653846][ T4901] SMP: stopping secondary CPUs [ 25.654621][ T4901] Kernel Offset: disabled [ 25.655310][ T4901] CPU features: 0x14000000,003c0008,27020a02,a84ff6a7 [ 25.656405][ T4901] Memory Limit: none [ 25.924237][ T4901] Rebooting in 86400 seconds..