last executing test programs: 2.316425833s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc_mnt\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='foo / 32\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='foo / 2147483647 0\n', 0x13) write(r0, &(0x7f0000000300)='bar / 32\n', 0x9) 2.192223216s ago: executing program 0 (id=1): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='mnt/encrypted_dir/file\x00', 0x42, 0x180) write(r2, &(0x7f0000000740)='foo', 0x3) r3 = syz_open_procfs(0x0, &(0x7f0000000780)='mounts\x00') read(r3, &(0x7f00000007c0)=""/128, 0x100) close(r3) 1.507814933s ago: executing program 3 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./lower/dir1\x00', 0x1ff) mount$overlay(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, 'lower\x00'}}, {@upperdir={'upperdir', 0x3d, 'upper\x00'}}, {@workdir={'workdir', 0x3d, 'work\x00'}}, {@index_on}, {@nfs_export_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/dir1\x00', 0x210000, 0x0) name_to_handle_at(r0, &(0x7f0000000340)='\x00', &(0x7f0000000400)=@raw={0x80, 0x0, {'\x00'}}, &(0x7f0000000500), 0x1000) mkdirat(r0, &(0x7f0000000600)='sub\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./mnt\x00', 0x210000, 0x0) open_by_handle_at(r1, &(0x7f0000000400), 0x210000) 1.21147366s ago: executing program 0 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems/test_subsystem\x00', 0x1ff) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r0, &(0x7f0000000200)='transport=loop,nqn=test_subsystem\x00', 0x23) 835.32438ms ago: executing program 3 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='md0\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='raid1\x00', 0x5) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='2\x00', 0x1) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/block/md0/md/bitmap_location\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/block/md0/md/bitmap\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/block/md0/md/location\x00', 0x1, 0x0) 0s ago: executing program 3 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='vhci_hcd\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/platform/drivers/vhci_hcd/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='pcspkr\x00', 0x6) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 64.811340][ T5250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.832251][ T5250] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.169' (ED25519) to the list of known hosts. syzkaller login: [ 92.071993][ T10] cfg80211: failed to load regulatory.db [ 92.994834][ T5576] cgroup: Unknown subsys name 'net' [ 93.236201][ T5576] cgroup: Unknown subsys name 'cpuset' [ 93.310392][ T5576] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.373333][ T5576] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.796402][ T5599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.812334][ T5599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.816623][ T5599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.851722][ T5598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.865241][ T5598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.866845][ T5598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.889835][ T4903] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.895736][ T4903] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.917643][ T5606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.921870][ T5606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.932817][ T5606] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.943076][ T5606] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.947452][ T5606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.951023][ T5606] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.979900][ T5610] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.992904][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.996263][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.998812][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.999591][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.004499][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.187789][ T5606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.200500][ T5606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.229070][ T4903] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.254397][ T4903] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.275323][ T4903] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.922584][ T5608] Bluetooth: hci0: command tx timeout [ 101.160289][ T5608] Bluetooth: hci3: command tx timeout [ 101.239808][ T5608] Bluetooth: hci4: command tx timeout [ 101.239936][ T5608] Bluetooth: hci2: command tx timeout [ 101.321035][ T4903] Bluetooth: hci1: command tx timeout [ 101.873330][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.874517][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.874680][ T5596] bridge_slave_0: entered allmulticast mode [ 101.876707][ T5596] bridge_slave_0: entered promiscuous mode [ 101.956509][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.956669][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.956843][ T5596] bridge_slave_1: entered allmulticast mode [ 101.958899][ T5596] bridge_slave_1: entered promiscuous mode [ 101.963392][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.964449][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.970361][ T5594] bridge_slave_0: entered allmulticast mode [ 101.996756][ T5594] bridge_slave_0: entered promiscuous mode [ 102.027693][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.027808][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.027931][ T5595] bridge_slave_0: entered allmulticast mode [ 102.038923][ T5595] bridge_slave_0: entered promiscuous mode [ 102.094303][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.094427][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.094775][ T5594] bridge_slave_1: entered allmulticast mode [ 102.097834][ T5594] bridge_slave_1: entered promiscuous mode [ 102.138869][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.138992][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.139158][ T5595] bridge_slave_1: entered allmulticast mode [ 102.147907][ T5595] bridge_slave_1: entered promiscuous mode [ 102.211348][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.211453][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.211801][ T5593] bridge_slave_0: entered allmulticast mode [ 102.213639][ T5593] bridge_slave_0: entered promiscuous mode [ 102.253190][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.253315][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.253471][ T5592] bridge_slave_0: entered allmulticast mode [ 102.255417][ T5592] bridge_slave_0: entered promiscuous mode [ 102.275410][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.307539][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.307662][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.308203][ T5593] bridge_slave_1: entered allmulticast mode [ 102.312287][ T5593] bridge_slave_1: entered promiscuous mode [ 102.351475][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.351619][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.351811][ T5592] bridge_slave_1: entered allmulticast mode [ 102.354066][ T5592] bridge_slave_1: entered promiscuous mode [ 102.357946][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.375250][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.417835][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.463107][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.488753][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.548172][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.576627][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.584242][ T5596] team0: Port device team_slave_0 added [ 102.623905][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.655785][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.657884][ T5596] team0: Port device team_slave_1 added [ 102.671897][ T5594] team0: Port device team_slave_0 added [ 102.696016][ T5595] team0: Port device team_slave_0 added [ 102.730608][ T5594] team0: Port device team_slave_1 added [ 102.751528][ T5595] team0: Port device team_slave_1 added [ 102.803253][ T5593] team0: Port device team_slave_0 added [ 102.825874][ T5592] team0: Port device team_slave_0 added [ 102.827241][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.827254][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.827274][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.886141][ T5593] team0: Port device team_slave_1 added [ 102.907575][ T5592] team0: Port device team_slave_1 added [ 102.908335][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.908347][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.908367][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.909460][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.909470][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.909489][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.001164][ T4903] Bluetooth: hci0: command tx timeout [ 103.005323][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.005426][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.005507][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.073360][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.073373][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.073394][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.127762][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.127781][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.127809][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.193031][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.193049][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.193077][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.226052][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.226104][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.226181][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.240408][ T4903] Bluetooth: hci3: command tx timeout [ 103.278681][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.278699][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.278869][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.319900][ T4903] Bluetooth: hci2: command tx timeout [ 103.320039][ T4903] Bluetooth: hci4: command tx timeout [ 103.399848][ T5608] Bluetooth: hci1: command tx timeout [ 103.717945][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.717959][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.717979][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.841316][ T5596] hsr_slave_0: entered promiscuous mode [ 103.843916][ T5596] hsr_slave_1: entered promiscuous mode [ 103.913663][ T5595] hsr_slave_0: entered promiscuous mode [ 103.914949][ T5595] hsr_slave_1: entered promiscuous mode [ 103.916409][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 103.916490][ T5595] Cannot create hsr debugfs directory [ 103.938072][ T5594] hsr_slave_0: entered promiscuous mode [ 103.940604][ T5594] hsr_slave_1: entered promiscuous mode [ 103.944313][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 103.944379][ T5594] Cannot create hsr debugfs directory [ 104.034594][ T5593] hsr_slave_0: entered promiscuous mode [ 104.035682][ T5593] hsr_slave_1: entered promiscuous mode [ 104.036365][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 104.036383][ T5593] Cannot create hsr debugfs directory [ 104.078295][ T5592] hsr_slave_0: entered promiscuous mode [ 104.079405][ T5592] hsr_slave_1: entered promiscuous mode [ 104.087226][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 104.087308][ T5592] Cannot create hsr debugfs directory [ 105.081059][ T5608] Bluetooth: hci0: command tx timeout [ 105.162334][ T5596] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.215776][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.232672][ T5596] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.254499][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.258661][ T5596] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.293995][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.318273][ T5596] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.319893][ T5608] Bluetooth: hci3: command tx timeout [ 105.354742][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.399870][ T5608] Bluetooth: hci4: command tx timeout [ 105.399902][ T5608] Bluetooth: hci2: command tx timeout [ 105.464990][ T5594] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.479827][ T5608] Bluetooth: hci1: command tx timeout [ 105.524300][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.529506][ T5594] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.565509][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.584947][ T5594] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.624410][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.654533][ T5594] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.685105][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.834347][ T5593] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.873464][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.879393][ T5593] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.944880][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.961830][ T5593] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.005295][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.046680][ T5593] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.090553][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.232267][ T5592] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.273328][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.296158][ T5592] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.334440][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.338642][ T5592] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.384836][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.418284][ T5592] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.458482][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.575638][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.625734][ T5595] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.655191][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.687588][ T5595] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.717893][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.733191][ T5595] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.764735][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.783226][ T5595] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.824706][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.883533][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.938963][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.963218][ T1476] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.963379][ T1476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.025953][ T1476] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.028616][ T1476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.107258][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.157178][ T1065] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.157338][ T1065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.174654][ T5608] Bluetooth: hci0: command tx timeout [ 107.206447][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.230837][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.230976][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.339501][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.390688][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.399930][ T5608] Bluetooth: hci3: command tx timeout [ 107.424914][ T1435] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.425079][ T1435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.481043][ T5608] Bluetooth: hci4: command tx timeout [ 107.481500][ T5608] Bluetooth: hci2: command tx timeout [ 107.548241][ T1435] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.548358][ T1435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.559824][ T5608] Bluetooth: hci1: command tx timeout [ 107.642889][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.714427][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.716600][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.716745][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.796978][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.797147][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.920870][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.086260][ T1476] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.088605][ T1476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.200009][ T1435] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.200141][ T1435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.730743][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.130306][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.233127][ T5596] veth0_vlan: entered promiscuous mode [ 109.346190][ T5596] veth1_vlan: entered promiscuous mode [ 109.421390][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.715750][ T5596] veth0_macvtap: entered promiscuous mode [ 109.727534][ T5594] veth0_vlan: entered promiscuous mode [ 109.756135][ T5596] veth1_macvtap: entered promiscuous mode [ 109.817873][ T5594] veth1_vlan: entered promiscuous mode [ 109.854114][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.917491][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.974733][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.994876][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.084502][ T5594] veth0_macvtap: entered promiscuous mode [ 110.168012][ T5594] veth1_macvtap: entered promiscuous mode [ 110.425906][ T5592] veth0_vlan: entered promiscuous mode [ 110.458041][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.522741][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.524478][ T5593] veth0_vlan: entered promiscuous mode [ 110.553152][ T5595] veth0_vlan: entered promiscuous mode [ 110.585598][ T5592] veth1_vlan: entered promiscuous mode [ 110.634479][ T5593] veth1_vlan: entered promiscuous mode [ 110.647983][ T5595] veth1_vlan: entered promiscuous mode [ 110.666812][ T1435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.666843][ T1435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.906041][ T1452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.906060][ T1452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.291230][ T5592] veth0_macvtap: entered promiscuous mode [ 111.345740][ T1441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.345760][ T1441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.367429][ T5593] veth0_macvtap: entered promiscuous mode [ 111.392118][ T5595] veth0_macvtap: entered promiscuous mode [ 111.416858][ T5592] veth1_macvtap: entered promiscuous mode [ 111.454872][ T5593] veth1_macvtap: entered promiscuous mode [ 111.476743][ T5595] veth1_macvtap: entered promiscuous mode [ 111.545958][ T1441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.545980][ T1441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.656217][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.712673][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.765616][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.808895][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.845562][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.929181][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.086249][ T5782] loop0: detected capacity change from 0 to 128 [ 112.446665][ T5782] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.484028][ T5782] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 112.544156][ T5782] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 112.544603][ T5782] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 112.749248][ T5788] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 113.703133][ T5594] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.766920][ T1452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.766957][ T1452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.894752][ T5791] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 114.042101][ T1401] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.042394][ T1401] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.042433][ T1401] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.042470][ T1401] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.042505][ T1401] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.042542][ T1401] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.042576][ T1401] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.042612][ T1401] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.042649][ T1401] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.042685][ T1401] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.043307][ T1401] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.043357][ T1401] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.043394][ T1401] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.043433][ T1401] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.043471][ T1401] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.383025][ T1401] nvmet: connect request for invalid subsystem test_subsystem! [ 114.385164][ T5794] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "test_subsystem" [ 114.477598][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.477619][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.639313][ T5797] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 114.639341][ [ 114.639341][ T5797] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 114.639375][ T5797] CPU: 0 UID: 0 PID: 5797 Comm: syz.3.9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 114.639401][ T5797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.639415][ T5797] RIP: 0010:vhci_hcd_probe+0x47/0x3f0 [ 114.639478][ T5797] Code: 0f 38 7c fa 49 8d 9e 80 00 00 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 13 bc e5 fa 48 8b 1b 48 89 d8 48 c1 e8 03 <80> 3c 28 00 74 08 48 89 df e8 fb bb e5 fa 4c 8b 23 48 c7 c0 00 c8 [ 114.639501][ T5797] RSP: 0018:ffffc900054a7ac0 EFLAGS: 00010246 [ 114.639529][ T5797] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 114.639543][ T5797] RDX: ffffc900079b1000 RSI: 000000000000040b RDI: 000000000000040c [ 114.639558][ T5797] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.639572][ T5797] R10: dffffc0000000000 R11: ffffffff87499080 R12: ffff88801df42000 [ 114.639589][ T5797] R13: ffffffff8efd13e0 R14: ffff88801df42000 R15: ffffffff87499080 [ 114.639605][ T5797] FS: 00007f9db3dd66c0(0000) GS:ffff888125c3a000(0000) knlGS:0000000000000000 [ 114.639623][ T5797] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.639636][ T5797] CR2: 0000001b32319ffc CR3: 000000002a278000 CR4: 00000000003526f0 [ 114.639656][ T5797] Call Trace: [ 114.639664][ T5797] [ 114.639673][ T5797] ? platform_probe+0xed/0x190 [ 114.639701][ T5797] ? __pfx_vhci_hcd_probe+0x10/0x10 [ 114.639732][ T5797] platform_probe+0xf9/0x190 [ 114.639760][ T5797] ? __pfx_platform_probe+0x10/0x10 [ 114.639786][ T5797] really_probe+0x254/0xae0 [ 114.639819][ T5797] __driver_probe_device+0x1e8/0x360 [ 114.639848][ T5797] device_driver_attach+0xe0/0x1d0 [ 114.639880][ T5797] bind_store+0x1d3/0x220 [ 114.639907][ T5797] ? __pfx_sysfs_kf_write+0x10/0x10 [ 114.639942][ T5797] kernfs_fop_write_iter+0x3a5/0x540 [ 114.639974][ T5797] vfs_write+0x61e/0xbb0 [ 114.640004][ T5797] ? __pfx_vfs_write+0x10/0x10 [ 114.640030][ T5797] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 114.640057][ T5797] ? lockdep_hardirqs_on+0x7a/0x110 [ 114.640083][ T5797] ? mutex_lock_nested+0x152/0x1d0 [ 114.640116][ T5797] ? fdget_pos+0x252/0x320 [ 114.640140][ T5797] ksys_write+0x156/0x270 [ 114.640167][ T5797] ? __pfx_ksys_write+0x10/0x10 [ 114.640197][ T5797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.640221][ T5797] do_syscall_64+0x174/0x580 [ 114.640247][ T5797] ? trace_irq_disable+0x3b/0x140 [ 114.640282][ T5797] ? clear_bhb_loop+0x70/0xc0 [ 114.640307][ T5797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.640329][ T5797] RIP: 0033:0x7f9db5b7e0d9 [ 114.640357][ T5797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.640376][ T5797] RSP: 002b:00007f9db3dd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 114.640399][ T5797] RAX: ffffffffffffffda RBX: 00007f9db5e05fa0 RCX: 00007f9db5b7e0d9 [ 114.640415][ T5797] RDX: 0000000000000006 RSI: 0000200000000200 RDI: 0000000000000005 [ 114.640429][ T5797] RBP: 00007f9db5c15024 R08: 0000000000000000 R09: 0000000000000000 [ 114.640443][ T5797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.640456][ T5797] R13: 00007f9db5e06038 R14: 00007f9db5e05fa0 R15: 00007ffebedb3bf8 [ 114.640492][ T5797] [ 114.640499][ T5797] Modules linked in: [ 114.640568][ T5797] ---[ end trace 0000000000000000 ]--- [ 114.651299][ T5797] RIP: 0010:vhci_hcd_probe+0x47/0x3f0 [ 114.651422][ T5797] Code: 0f 38 7c fa 49 8d 9e 80 00 00 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 13 bc e5 fa 48 8b 1b 48 89 d8 48 c1 e8 03 <80> 3c 28 00 74 08 48 89 df e8 fb bb e5 fa 4c 8b 23 48 c7 c0 00 c8 [ 114.651475][ T5797] RSP: 0018:ffffc900054a7ac0 EFLAGS: 00010246 [ 114.651536][ T5797] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 114.651571][ T5797] RDX: ffffc900079b1000 RSI: 000000000000040b RDI: 000000000000040c [ 114.651612][ T5797] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.651653][ T5797] R10: dffffc0000000000 R11: ffffffff87499080 R12: ffff88801df42000 [ 114.651697][ T5797] R13: ffffffff8efd13e0 R14: ffff88801df42000 R15: ffffffff87499080 [ 114.653031][ T5797] FS: 00007f9db3dd66c0(0000) GS:ffff888125c3a000(0000) knlGS:0000000000000000 [ 114.653093][ T5797] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.653134][ T5797] CR2: 0000001b32319ffc CR3: 000000002a278000 CR4: 00000000003526f0 [ 114.653188][ T5797] Kernel panic - not syncing: Fatal exception [ 114.653913][ T5797] Kernel Offset: disabled