last executing test programs: 2.724275923s ago: executing program 1 (id=2): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1a2, &(0x7f0000000840)="$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") mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='file0\x00', &(0x7f0000000300)='tmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='file0/mysys\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='file0/mysys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='file0/mysys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='mem\x00', 0x3) 1.527504912s ago: executing program 4 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='sl811-hcd\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/sl811-hcd/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='pcspkr\x00', 0x7) close(r1) 1.002804145s ago: executing program 2 (id=3): mkdir(&(0x7f0000000000)='./my_sysfs\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./my_sysfs\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_sysfs/bus/pci/devices\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000500), 0x3e8) 673.080644ms ago: executing program 4 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) symlink(&(0x7f0000000280)='./config/usb_gadget/g1/functions/gser.usb0\x00', &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='Manufacturer\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='Product\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='Conf 1\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='dummy_udc.0\x00', 0xc) 295.280133ms ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/kvm/kvm_inj_virq/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/events/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/events/kvm/kvm_inj_virq/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='1\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/tracing/events/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='1\n\x00', 0x2) 128.897677ms ago: executing program 2 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='ucsi_acpi\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/ucsi_acpi/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='pcspkr\x00', 0x7) close(r1) 0s ago: executing program 4 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./export/child\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000180)='portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='2049\n\x00', 0x5) r2 = openat(r0, &(0x7f0000000200)='threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='2\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='nfs4\x00', 0x0, &(0x7f0000000380)='vers=4.0,addr=127.0.0.1,port=2049,clientaddr=127.0.0.1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/child\x00', 0x0, 0x0) name_to_handle_at(r3, &(0x7f0000000440)='\x00', &(0x7f0000000480)=@raw={0x80, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00'}}, &(0x7f0000000500), 0x1000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000480)=@raw={0x80, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00'}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.77' (ED25519) to the list of known hosts. [ 92.005781][ T5571] cgroup: Unknown subsys name 'net' [ 92.225722][ T31] cfg80211: failed to load regulatory.db [ 92.283039][ T5571] cgroup: Unknown subsys name 'cpuset' [ 92.331238][ T5571] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.331408][ T5571] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.826848][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.829950][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.838420][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.868593][ T5590] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.870264][ T5590] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.894333][ T5594] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.912507][ T5594] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.915788][ T5594] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.944414][ T4901] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.971812][ T5594] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.994555][ T5594] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.025940][ T5592] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.043534][ T5598] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.063753][ T5592] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.084332][ T5592] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.089746][ T5598] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.095242][ T5598] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.097230][ T5598] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.108325][ T5602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.118148][ T5590] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.161617][ T5590] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.167800][ T5590] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.169908][ T5602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.192258][ T5602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.206541][ T5602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.022712][ T4901] Bluetooth: hci4: command tx timeout [ 99.181269][ T4901] Bluetooth: hci0: command tx timeout [ 99.263815][ T4901] Bluetooth: hci3: command tx timeout [ 99.263960][ T4901] Bluetooth: hci2: command tx timeout [ 99.340584][ T5590] Bluetooth: hci1: command tx timeout [ 99.856174][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.857381][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.857558][ T5584] bridge_slave_0: entered allmulticast mode [ 99.860150][ T5584] bridge_slave_0: entered promiscuous mode [ 99.962734][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.962845][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.963005][ T5584] bridge_slave_1: entered allmulticast mode [ 99.964925][ T5584] bridge_slave_1: entered promiscuous mode [ 100.028309][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.028430][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.028574][ T5586] bridge_slave_0: entered allmulticast mode [ 100.030800][ T5586] bridge_slave_0: entered promiscuous mode [ 100.098808][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.098915][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.099062][ T5586] bridge_slave_1: entered allmulticast mode [ 100.104446][ T5586] bridge_slave_1: entered promiscuous mode [ 100.197651][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.276487][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.276748][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.276987][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.277340][ T5587] bridge_slave_0: entered allmulticast mode [ 100.279210][ T5587] bridge_slave_0: entered promiscuous mode [ 100.353540][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.379959][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.380069][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.380217][ T5587] bridge_slave_1: entered allmulticast mode [ 100.389888][ T5587] bridge_slave_1: entered promiscuous mode [ 100.409004][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.409124][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.409316][ T5585] bridge_slave_0: entered allmulticast mode [ 100.416352][ T5585] bridge_slave_0: entered promiscuous mode [ 100.433358][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.433672][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.437574][ T5583] bridge_slave_0: entered allmulticast mode [ 100.448827][ T5583] bridge_slave_0: entered promiscuous mode [ 100.469665][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.514751][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.514878][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.515035][ T5585] bridge_slave_1: entered allmulticast mode [ 100.516980][ T5585] bridge_slave_1: entered promiscuous mode [ 100.518252][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.518370][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.518729][ T5583] bridge_slave_1: entered allmulticast mode [ 100.522113][ T5583] bridge_slave_1: entered promiscuous mode [ 100.585814][ T5584] team0: Port device team_slave_0 added [ 100.666812][ T5584] team0: Port device team_slave_1 added [ 100.670009][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.719258][ T5586] team0: Port device team_slave_0 added [ 100.747193][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.751776][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.781439][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.788162][ T5586] team0: Port device team_slave_1 added [ 100.836924][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.839984][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.873948][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.873962][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.873983][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.978673][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.978693][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.978722][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.985113][ T5587] team0: Port device team_slave_0 added [ 101.060735][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.060752][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.060780][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.100512][ T5590] Bluetooth: hci4: command tx timeout [ 101.119635][ T5587] team0: Port device team_slave_1 added [ 101.128036][ T5585] team0: Port device team_slave_0 added [ 101.134771][ T5583] team0: Port device team_slave_0 added [ 101.141049][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.141136][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.141219][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.204701][ T5585] team0: Port device team_slave_1 added [ 101.206811][ T5583] team0: Port device team_slave_1 added [ 101.260663][ T5590] Bluetooth: hci0: command tx timeout [ 101.340646][ T5590] Bluetooth: hci2: command tx timeout [ 101.340655][ T4901] Bluetooth: hci3: command tx timeout [ 101.420631][ T5590] Bluetooth: hci1: command tx timeout [ 101.697046][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.697063][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.697086][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.824692][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.824721][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.824751][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.826027][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.826039][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.826058][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.827271][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.827286][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.827314][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.973011][ T5584] hsr_slave_0: entered promiscuous mode [ 101.974417][ T5584] hsr_slave_1: entered promiscuous mode [ 101.993534][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.993547][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.993567][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.994790][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.994801][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.994821][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.133111][ T5586] hsr_slave_0: entered promiscuous mode [ 102.134178][ T5586] hsr_slave_1: entered promiscuous mode [ 102.135031][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 102.135119][ T5586] Cannot create hsr debugfs directory [ 102.290176][ T5587] hsr_slave_0: entered promiscuous mode [ 102.293751][ T5587] hsr_slave_1: entered promiscuous mode [ 102.296479][ T5587] debugfs: 'hsr0' already exists in 'hsr' [ 102.296553][ T5587] Cannot create hsr debugfs directory [ 102.458460][ T5585] hsr_slave_0: entered promiscuous mode [ 102.459536][ T5585] hsr_slave_1: entered promiscuous mode [ 102.462362][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 102.462419][ T5585] Cannot create hsr debugfs directory [ 102.488386][ T5583] hsr_slave_0: entered promiscuous mode [ 102.489540][ T5583] hsr_slave_1: entered promiscuous mode [ 102.494731][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 102.494811][ T5583] Cannot create hsr debugfs directory [ 103.180528][ T5590] Bluetooth: hci4: command tx timeout [ 103.309171][ T5584] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.340634][ T5590] Bluetooth: hci0: command tx timeout [ 103.375406][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.420678][ T5590] Bluetooth: hci2: command tx timeout [ 103.420715][ T5590] Bluetooth: hci3: command tx timeout [ 103.446160][ T5584] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.468101][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.484997][ T5584] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.502064][ T4901] Bluetooth: hci1: command tx timeout [ 103.521795][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.561473][ T5584] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.589680][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.756036][ T5587] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.788791][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.800412][ T5587] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.829217][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.864508][ T5587] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.887169][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.921612][ T5587] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.954585][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.118513][ T5583] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.155453][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.174381][ T5583] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.220321][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.244227][ T5583] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.284751][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.325385][ T5583] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.366958][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.586509][ T5586] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.614210][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.634468][ T5586] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.675379][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.693464][ T5586] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.725903][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.769404][ T5586] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.804863][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.996743][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.038571][ T5585] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.064246][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.078577][ T5585] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.108540][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.135777][ T5585] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.174824][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.192171][ T5585] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.214317][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.267538][ T4901] Bluetooth: hci4: command tx timeout [ 105.303157][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.382318][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.383879][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.412719][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.420584][ T4901] Bluetooth: hci0: command tx timeout [ 105.478263][ T3285] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.478357][ T3285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.500509][ T4901] Bluetooth: hci3: command tx timeout [ 105.500551][ T4901] Bluetooth: hci2: command tx timeout [ 105.580497][ T5590] Bluetooth: hci1: command tx timeout [ 105.607553][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.633639][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.712834][ T3285] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.713037][ T3285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.765811][ T3285] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.766012][ T3285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.844338][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.906978][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.928194][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.928376][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.993614][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.993779][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.151161][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.208253][ T3387] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.208509][ T3387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.237959][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.304550][ T3387] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.304765][ T3387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.434636][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.546012][ T183] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.557988][ T183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.670430][ T183] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.670562][ T183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.272108][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.921269][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.441349][ T5587] veth0_vlan: entered promiscuous mode [ 108.505577][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.609454][ T5587] veth1_vlan: entered promiscuous mode [ 108.709049][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.880022][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.899699][ T5584] veth0_vlan: entered promiscuous mode [ 108.974149][ T5584] veth1_vlan: entered promiscuous mode [ 108.977898][ T5587] veth0_macvtap: entered promiscuous mode [ 109.005614][ T5583] veth0_vlan: entered promiscuous mode [ 109.026137][ T5587] veth1_macvtap: entered promiscuous mode [ 109.086119][ T5583] veth1_vlan: entered promiscuous mode [ 109.088242][ T5586] veth0_vlan: entered promiscuous mode [ 109.143917][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.179161][ T5586] veth1_vlan: entered promiscuous mode [ 109.197103][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.217126][ T5585] veth0_vlan: entered promiscuous mode [ 109.231410][ T5584] veth0_macvtap: entered promiscuous mode [ 109.267572][ T5584] veth1_macvtap: entered promiscuous mode [ 109.291612][ T5585] veth1_vlan: entered promiscuous mode [ 109.391173][ T5583] veth0_macvtap: entered promiscuous mode [ 109.464871][ T5583] veth1_macvtap: entered promiscuous mode [ 109.480868][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.638686][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.639362][ T5586] veth0_macvtap: entered promiscuous mode [ 109.731123][ T5586] veth1_macvtap: entered promiscuous mode [ 109.778251][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.825270][ T5585] veth0_macvtap: entered promiscuous mode [ 109.859344][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.949216][ T5585] veth1_macvtap: entered promiscuous mode [ 110.027999][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.135743][ T183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.135775][ T183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.217325][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.461648][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.571409][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.719324][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.719365][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.890562][ T183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.890586][ T183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.319195][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.319216][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.856254][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.856276][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.937996][ T5779] loop1: detected capacity change from 0 to 8 [ 112.167897][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.167920][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.320694][ T3346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.320715][ T3346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.321089][ T3346] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.387090][ T5779] PM: suspend entry (deep) [ 112.709611][ T183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.709633][ T183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.903990][ T151] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.904821][ T3285] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.148458][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.148480][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.171656][ T3285] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.613249][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.613272][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.683748][ T42] Filesystems sync: 1.294 seconds [ 113.716170][ T66] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.716664][ T66] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.284617][ T3285] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.311814][ T3285] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.385416][ T5796] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000104: 0000 [#1] SMP KASAN PTI [ 114.385442][ T5796] KASAN: null-ptr-deref in range [0x0000000000000820-0x0000000000000827] [ 114.385473][ T5796] CPU: 0 UID: 0 PID: 5796 Comm: syz.2.7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 114.385498][ T5796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.385511][ T5796] RIP: 0010:ucsi_acpi_probe+0x6c/0x4b0 [ 114.385554][ T5796] Code: 89 74 24 08 4c 8b 23 4c 89 e7 e8 5f ae cf fd 49 83 c4 f0 45 31 f6 84 c0 4d 0f 45 f4 49 81 c6 24 08 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 16 04 00 00 41 8b 2e 31 ff 89 ee e8 6b [ 114.385574][ T5796] RSP: 0018:ffffc90004fa7ab8 EFLAGS: 00010203 [ 114.385600][ T5796] RAX: 0000000000000104 RBX: ffff88801d7b44e8 RCX: 0000000000080000 [ 114.385616][ T5796] RDX: ffffc90006141000 RSI: 00000000000002cb RDI: 00000000000002cc [ 114.385631][ T5796] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.385643][ T5796] R10: dffffc0000000000 R11: ffffffff8752d470 R12: fffffffffffffff0 [ 114.385659][ T5796] R13: dffffc0000000000 R14: 0000000000000824 R15: 1ffff11003af689d [ 114.385674][ T5796] FS: 00007f7110e966c0(0000) GS:ffff888125c3a000(0000) knlGS:0000000000000000 [ 114.385692][ T5796] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.385709][ T5796] CR2: 0000001b31e1bff8 CR3: 0000000041f08000 CR4: 00000000003526f0 [ 114.385738][ T5796] Call Trace: [ 114.385764][ T5796] [ 114.385776][ T5796] ? __pfx_ucsi_acpi_probe+0x10/0x10 [ 114.385807][ T5796] platform_probe+0xf9/0x190 [ 114.385836][ T5796] ? __pfx_platform_probe+0x10/0x10 [ 114.385861][ T5796] really_probe+0x254/0xae0 [ 114.385894][ T5796] __driver_probe_device+0x1e8/0x360 [ 114.385926][ T5796] device_driver_attach+0xe0/0x1d0 [ 114.385958][ T5796] bind_store+0x1d3/0x220 [ 114.385984][ T5796] ? __pfx_sysfs_kf_write+0x10/0x10 [ 114.386015][ T5796] kernfs_fop_write_iter+0x3a5/0x540 [ 114.386047][ T5796] vfs_write+0x61e/0xbb0 [ 114.386078][ T5796] ? __pfx_vfs_write+0x10/0x10 [ 114.386104][ T5796] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 114.386131][ T5796] ? lockdep_hardirqs_on+0x7a/0x110 [ 114.386159][ T5796] ? mutex_lock_nested+0x152/0x1d0 [ 114.386191][ T5796] ? fdget_pos+0x252/0x320 [ 114.386216][ T5796] ksys_write+0x156/0x270 [ 114.386244][ T5796] ? __pfx_ksys_write+0x10/0x10 [ 114.386274][ T5796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.386297][ T5796] do_syscall_64+0x174/0x580 [ 114.386323][ T5796] ? trace_irq_disable+0x3b/0x140 [ 114.386359][ T5796] ? clear_bhb_loop+0x70/0xc0 [ 114.386384][ T5796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.386406][ T5796] RIP: 0033:0x7f7112c3e0d9 [ 114.386431][ T5796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.386450][ T5796] RSP: 002b:00007f7110e96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 114.386473][ T5796] RAX: ffffffffffffffda RBX: 00007f7112ec5fa0 RCX: 00007f7112c3e0d9 [ 114.386489][ T5796] RDX: 0000000000000007 RSI: 0000200000000500 RDI: 0000000000000003 [ 114.386504][ T5796] RBP: 00007f7112cd5024 R08: 0000000000000000 R09: 0000000000000000 [ 114.386518][ T5796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.386531][ T5796] R13: 00007f7112ec6038 R14: 00007f7112ec5fa0 R15: 00007ffcdc72c328 [ 114.386557][ T5796] [ 114.386565][ T5796] Modules linked in: [ 114.386587][ T5796] ---[ end trace 0000000000000000 ]--- [ 114.386603][ T5796] RIP: 0010:ucsi_acpi_probe+0x6c/0x4b0 [ 114.386633][ T5796] Code: 89 74 24 08 4c 8b 23 4c 89 e7 e8 5f ae cf fd 49 83 c4 f0 45 31 f6 84 c0 4d 0f 45 f4 49 81 c6 24 08 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 16 04 00 00 41 8b 2e 31 ff 89 ee e8 6b [ 114.386649][ T5796] RSP: 0018:ffffc90004fa7ab8 EFLAGS: 00010203 [ 114.386664][ T5796] RAX: 0000000000000104 RBX: ffff88801d7b44e8 RCX: 0000000000080000 [ 114.386678][ T5796] RDX: ffffc90006141000 RSI: 00000000000002cb RDI: 00000000000002cc [ 114.386691][ T5796] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.386704][ T5796] R10: dffffc0000000000 R11: ffffffff8752d470 R12: fffffffffffffff0 [ 114.386719][ T5796] R13: dffffc0000000000 R14: 0000000000000824 R15: 1ffff11003af689d [ 114.386743][ T5796] FS: 00007f7110e966c0(0000) GS:ffff888125c3a000(0000) knlGS:0000000000000000 [ 114.386760][ T5796] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.386775][ T5796] CR2: 0000001b31e1bff8 CR3: 0000000041f08000 CR4: 00000000003526f0 [ 114.386796][ T5796] Kernel panic - not syncing: Fatal exception [ 114.386969][ T5796] Kernel Offset: disabled