last executing test programs: 1m59.691474171s ago: executing program 0 (id=1): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00ff40240400950000000000010902270001010080fa0904000003ff00ff00070581020002000705020200020007058303100004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0xa1, 0x4, "0000009e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0xa1, 0x4, "0000009e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0xa1, 0x4, "0000009e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0xa1, 0x4, "0000009e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000040)={0x1}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000400)={'\x00', &(0x7f0000000500)=@ethtool_wolinfo={0x6, 0x0, 0x1}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000400)={'\x00', &(0x7f0000000500)=@ethtool_wolinfo={0x6, 0x0, 0x1}}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000600)={'\x00', @ifru_flags=0x1}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000600)={'\x00', @ifru_flags=0x1}) nanosleep(&(0x7f0000000040)={0x1}, 0x0) 1m58.007569965s ago: executing program 2 (id=3): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40240400750000010203010902270001010080fa0904000003ff000000070581020002000705020200020007058303400001"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0xa1, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1m57.256210335s ago: executing program 4 (id=5): syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040440647800001010203010902370004010080fa0904000000010100000a240100010a00020102090401000001010000090402000001010000090403000001010000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4405513, &(0x7f0000000200)={{0x0, 0x2}, 0x0, [0x7f]}) 1m55.004849095s ago: executing program 0 (id=7): mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='mem', 0x3) 1m54.730767648s ago: executing program 0 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='md0\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='5\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='4\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/chunk_size\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='4096\x00', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='1:0\x00', 0x4) write(r4, &(0x7f0000000380)='1:1\x00', 0x4) write(r4, &(0x7f00000003c0)='1:2\x00', 0x4) write(r4, &(0x7f0000000400)='1:3\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0) write(r5, &(0x7f0000000480)='0\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/dev-ram1/slot\x00', 0x2, 0x0) write(r6, &(0x7f0000000500)='1\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/dev-ram2/slot\x00', 0x2, 0x0) write(r7, &(0x7f0000000580)='2\x00', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/block/md0/md/dev-ram3/slot\x00', 0x2, 0x0) write(r8, &(0x7f0000000600)='3\x00', 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r9, &(0x7f0000000680)='active\x00', 0x7) 1m54.526213808s ago: executing program 0 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f0000000400)='3\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/num_groups\x00', 0x2, 0x0) write(r2, &(0x7f00000004c0)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0) write(r3, &(0x7f0000000540)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0) write(r4, &(0x7f0000000640)='3\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/num_groups\x00', 0x2, 0x0) write(r5, &(0x7f0000000700)='1\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0) write(r6, &(0x7f0000000780)='1\n', 0x2) symlinkat(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r7, &(0x7f0000000880)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1m53.931528659s ago: executing program 2 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='1\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='1\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f00000002c0)='1\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount(&(0x7f0000000340)=@filename='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000380)='nfs4\x00', 0x0, &(0x7f00000003c0)='addr=127.0.0.1,nolock\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/file\x00', 0x42, 0x1ff) fchmod(r5, 0x1ff) 1m53.682008749s ago: executing program 4 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='1\n', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f00000001c0)='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)) 1m53.596553982s ago: executing program 0 (id=15): r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x42, 0x1ff) sendfile(r1, r0, 0x0, 0xc00) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x42, 0x1ff) sendfile(r2, r0, 0x0, 0xc00) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/f3\x00', 0x42, 0x1ff) sendfile(r3, r0, 0x0, 0xc00) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./mnt/f4\x00', 0x42, 0x1ff) sendfile(r4, r0, 0x0, 0xc00) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/f5\x00', 0x42, 0x1ff) sendfile(r5, r0, 0x0, 0xc00) close(r5) unlinkat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/f3\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000001300)='./mnt/f4\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/f5\x00', 0x0) 1m53.197253169s ago: executing program 0 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='0', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='core', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='disk', 0x4) 1m52.478994142s ago: executing program 2 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='mem\x00', 0x4) 1m51.751254002s ago: executing program 3 (id=18): syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000200)) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000400)={0x2, 0x1, [{0x2, 0x1}]}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000400)={0x2, 0x1, [{0x2, 0x1}]}) 1m50.152135065s ago: executing program 1 (id=21): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010080000904000002030000000921110100012223000905810340000a00000905020340000a0000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000600)={0x40, 0x2}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000600)={0x40, 0x2}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000600)={0x40, 0x2}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000600)={0x40, 0x2}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) (async) nanosleep(&(0x7f0000000300)={0x0, 0x17d78400}, 0x0) syz_open_dev$hidraw(&(0x7f0000000500), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000500), 0x1, 0x0) syz_open_dev$hidraw(&(0x7f0000000500), 0x2, 0x0) syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="020000000000000000") syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="020000000000000000") 1m49.345403873s ago: executing program 3 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup_mem\x00', 0x1ff) mount$cgroup(0x0, &(0x7f0000000080)='./cgroup_mem\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@subsystem='memory'}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup_mem/test\x00', 0x1ff) rmdir(&(0x7f0000000180)='./cgroup_mem/test\x00') 1m49.233581925s ago: executing program 3 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mycgroup2\x00', 0x1ff) mount$cgroup2(0x0, &(0x7f0000000080)='./mycgroup2\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mycgroup2/cgroup.subtree_control\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='+memory\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mycgroup2/syz0\x00', 0x1ff) rmdir(&(0x7f00000001c0)='./mycgroup2/syz0\x00') nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) 1m48.464608026s ago: executing program 3 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='nfsd 127.0.0.1 2147483647 *\n', 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='* / 2147483647 8192 0 0 0 secinfo 0\n', 0x24) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/nfsd.export/content\x00', 0x0, 0x0) read(r2, &(0x7f0000000280)=""/4096, 0x1000) 1m48.305800624s ago: executing program 3 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000001c0)='0x0499\n', 0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f0000000400)='3\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/num_groups\x00', 0x2, 0x0) write(r2, &(0x7f00000004c0)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0) write(r3, &(0x7f0000000540)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0) write(r4, &(0x7f0000000640)='3\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/num_groups\x00', 0x2, 0x0) write(r5, &(0x7f0000000700)='1\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0) write(r6, &(0x7f0000000780)='1\n', 0x2) symlinkat(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r7, &(0x7f0000000880)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1m47.563872963s ago: executing program 4 (id=26): r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x42, 0x1ff) sendfile(r1, r0, 0x0, 0xc00) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x42, 0x1ff) sendfile(r2, r0, 0x0, 0xc00) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/f3\x00', 0x42, 0x1ff) sendfile(r3, r0, 0x0, 0xc00) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./mnt/f4\x00', 0x42, 0x1ff) sendfile(r4, r0, 0x0, 0xc00) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/f5\x00', 0x42, 0x1ff) sendfile(r5, r0, 0x0, 0xc00) close(r5) unlinkat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/f3\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000001300)='./mnt/f4\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/f5\x00', 0x0) 1m47.546628033s ago: executing program 3 (id=27): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40109710780001010203010902270001010080fa0904000003ffffff00070581031000010705820240000007050302400000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1m47.093779246s ago: executing program 2 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='disk\n\x00\x00\x00', 0x8) 1m47.02977482s ago: executing program 1 (id=29): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x5c}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x2, &(0x7f0000000140)=@raw=[@alu={0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0}, 0x94) r2 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r3, 0x25, 0x0, @void}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000500)="ffffffffffff0000000000000800", 0xe, 0x0, &(0x7f0000000600)={0x11, 0x300, r5}, 0x14) 1m46.881573815s ago: executing program 2 (id=30): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010080320904000002030000000921110100012223000905810340000a00000905020340000a0000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000600)={0x40, 0x2}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) syz_open_dev$hidraw(&(0x7f0000000500), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="028000000000000000") 1m46.738191403s ago: executing program 1 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/block/md0\x00', 0x0, 0x0) 1m46.630993021s ago: executing program 1 (id=32): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000240)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000540)='\xfb\x06\x00', 0x380246, &(0x7f0000000380)={@align=0xdd43, {0x800, 0x1, 0x0, 0x5}}, 0x2, &(0x7f0000000500)={@_ha_fsid}, &(0x7f00000003c0)=0x80000002}) getpid() r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000114010000000000000000000900020073797a3045b7"], 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)}], 0x1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x2000c000) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r7, 0x1, 0x2e, 0x0, &(0x7f0000000280)) 1m45.470148731s ago: executing program 1 (id=33): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1m45.321856731s ago: executing program 1 (id=34): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x10000000}, @TCA_CAKE_TARGET={0x8, 0x8, 0x1}]}}]}, 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f0000000a00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000a80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000ac0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000b40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000b80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000c00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000c40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000d00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000d80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000dc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000e40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000e80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000f00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000f40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000fc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001000)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001040)=[{&(0x7f0000001080)='\x00', 0x1}], 0x1}}, {{&(0x7f00000010c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001100)=[{&(0x7f0000001140)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000001200)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001280)=[{&(0x7f00000012c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001340)=[{&(0x7f0000001380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000013c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001500)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001540)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001580)=[{&(0x7f00000015c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001600)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001640)=[{&(0x7f0000001680)='\x00', 0x1}], 0x1}}, {{&(0x7f00000016c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001700)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001780)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001840)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001880)=[{&(0x7f00000018c0)='\x00', 0x1}], 0x1}}], 0x14, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) 1m45.139449255s ago: executing program 4 (id=35): syz_usb_connect(0x2, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101403412785600000102030109023e0002010080fa0904000003e00101000705810240000107050202400000070583034000010904010002e00101000705840140000107050401400001"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000140)='\x00\x00\x00\x00') bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x0, 0x1}, 0x6) write(r0, &(0x7f00000001c0)="f100040000", 0x5) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000200)="01000000") bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1, 0x1}, 0x6) write(r0, &(0x7f0000000280)="f100040000", 0x5) 44.495259477s ago: executing program 32 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='0', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='core', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='disk', 0x4) 44.3644031s ago: executing program 33 (id=34): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x10000000}, @TCA_CAKE_TARGET={0x8, 0x8, 0x1}]}}]}, 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f0000000a00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000a80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000ac0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000b40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000b80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000c00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000c40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000d00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000d80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000dc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000e40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000e80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000f00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000f40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000fc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001000)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001040)=[{&(0x7f0000001080)='\x00', 0x1}], 0x1}}, {{&(0x7f00000010c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001100)=[{&(0x7f0000001140)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000001200)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001280)=[{&(0x7f00000012c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001340)=[{&(0x7f0000001380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000013c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001500)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001540)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001580)=[{&(0x7f00000015c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001600)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001640)=[{&(0x7f0000001680)='\x00', 0x1}], 0x1}}, {{&(0x7f00000016c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001700)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001780)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001840)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001880)=[{&(0x7f00000018c0)='\x00', 0x1}], 0x1}}], 0x14, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) 44.09139067s ago: executing program 34 (id=30): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010080320904000002030000000921110100012223000905810340000a00000905020340000a0000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000600)={0x40, 0x2}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) syz_open_dev$hidraw(&(0x7f0000000500), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="028000000000000000") 43.861395341s ago: executing program 35 (id=27): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40109710780001010203010902270001010080fa0904000003ffffff00070581031000010705820240000007050302400000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 43.624420367s ago: executing program 36 (id=35): syz_usb_connect(0x2, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101403412785600000102030109023e0002010080fa0904000003e00101000705810240000107050202400000070583034000010904010002e00101000705840140000107050401400001"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000140)='\x00\x00\x00\x00') bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x0, 0x1}, 0x6) write(r0, &(0x7f00000001c0)="f100040000", 0x5) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000200)="01000000") bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1, 0x1}, 0x6) write(r0, &(0x7f0000000280)="f100040000", 0x5) 11.945814555s ago: executing program 8 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/vim2m/parameters/multiplanar\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='2\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/vim2m/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='vim2m.0\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/vim2m/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='vim2m.0\x00', 0x8) r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000240)={0x9, @pix_mp={0x100, 0x100, 0x33324752, 0x0, 0x0, [], 0x1}}) 10.560581462s ago: executing program 6 (id=44): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000000)="30000000100001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000040)="30000000110001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000080)="30000000120001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000000c0)="30000000130001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000100)="30000000140001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000140)="30000000150001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000180)="30000000160001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000001c0)="30000000170001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000200)="30000000180001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000240)="30000000190001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000280)="300000001a0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000002c0)="300000001b0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000300)="300000001c0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000380)="300000001e0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) 10.365672157s ago: executing program 8 (id=45): r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x42, 0x1ff) sendfile(r1, r0, 0x0, 0xc00) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x42, 0x1ff) sendfile(r2, r0, 0x0, 0xc00) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/f3\x00', 0x42, 0x1ff) sendfile(r3, r0, 0x0, 0xc00) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./mnt/f4\x00', 0x42, 0x1ff) sendfile(r4, r0, 0x0, 0xc00) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/f5\x00', 0x42, 0x1ff) sendfile(r5, r0, 0x0, 0xc00) close(r5) unlinkat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/f3\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000001300)='./mnt/f4\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/f5\x00', 0x0) 10.247411414s ago: executing program 8 (id=46): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0xc0, 0x98, 0x2, "1400"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000240)={0xc0, 0x98, 0x2, "1400"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000340)={0xc0, 0x98, 0x2, "1400"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0x84, &(0x7f0000000440)={0xc0, 0x9a, 0x4, '\x00s\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_ep_read(r0, 0x2, 0x9, &(0x7f0000000500)=""/9) (async) nanosleep(&(0x7f0000000600)={0x3}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000700), 0x2, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000800)={0x53, 0xfffffffffffffffe, 0xa, 0x0, @buffer={0x0, 0x200, &(0x7f0000000900)=""/512}, &(0x7f0000000a00)="2a00ffffffff00000100", &(0x7f0000000b00)=""/32, 0x3e8, 0x0, 0x0, 0x0}) 10.245746844s ago: executing program 6 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000001c0)='0x0499\n', 0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f0000000400)='3\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/num_groups\x00', 0x2, 0x0) write(r2, &(0x7f00000004c0)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0) write(r3, &(0x7f0000000540)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0) write(r4, &(0x7f0000000640)='3\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/num_groups\x00', 0x2, 0x0) write(r5, &(0x7f0000000700)='1\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0) write(r6, &(0x7f0000000780)='1\n', 0x2) symlinkat(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r7, &(0x7f0000000880)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 9.057991775s ago: executing program 6 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='ahci\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ahci/bind\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) 8.840782195s ago: executing program 6 (id=49): syz_usb_connect(0x3, 0xa1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ba23000100010102030109028f00020100803209040000000101000009240100011e0001010c2402010101000203000000092403020103000100090401000001020000090401010101020000072401010101000b2402010202100180bb0009050109000201000007250100000000090401020101020000072401010101000b2402010202100180bb0009050109000201000007250100000000"], 0x0) (async) nanosleep(&(0x7f0000000300)={0x2, 0x2faf0800}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x3, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0x8], [0x0, 0x800], [0x1]], '\x00', [{0x20, 0x20, 0x0, 0x0, 0x1}, {0x40, 0x40, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xbb80, 0xbb80, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}], '\x00', 0xf07}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 8.398329708s ago: executing program 9 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/module/nvme_core/parameters/admin_timeout\x00', 0x1, 0x0) write(r0, &(0x7f0000000d00)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444\x00', 0x2f) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x6c) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='101:0:1\x00', 0x7) close(r4) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r5, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery\x00', 0xa1) nanosleep(&(0x7f0000000b00)={0x2}, 0x0) getpid() close(r5) 7.309509142s ago: executing program 9 (id=50): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x100000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000100000)={0x0, &(0x7f0000100100)=[@wrmsr={0x65, 0x20, {0x1b, 0xfee00d00}}, @wrmsr={0x65, 0x20, {0x80b}}], 0x40}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.84860409s ago: executing program 8 (id=51): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x7}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d0000000600ff0901a101150026ff007508954009018102090191020901b102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d0000000600ff0901a101150026ff007508954009018102090191020901b102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0}) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="fe0300"/64) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="039900"/64) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="039a00"/64) nanosleep(&(0x7f0000000700)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon0/curr1_input\x00', 0x0, 0x0) read(r1, &(0x7f0000000600)=""/64, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon1/curr1_input\x00', 0x0, 0x0) read(r2, &(0x7f0000000600)=""/64, 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon2/curr1_input\x00', 0x0, 0x0) read(r3, &(0x7f0000000600)=""/64, 0x40) 4.899990103s ago: executing program 6 (id=52): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000240)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000540)='\xfb\x06\x00', 0x380246, &(0x7f0000000380)={@align=0xdd43, {0x800, 0x1, 0x0, 0x5}}, 0x2, &(0x7f0000000500)={@_ha_fsid}, &(0x7f00000003c0)=0x80000002}) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000114010000000000000000000900020073797a3045b7"], 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)}], 0x1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x2000c000) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r7, 0x1, 0x2e, 0x0, &(0x7f0000000280)) 4.865165868s ago: executing program 7 (id=38): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) setsockopt(r0, 0x112, 0x11, &(0x7f0000000100)="00ff000000000000ff0000000500000001000000ff000000050000000100000000000000000000000000000000000000000000000a0000000a000000", 0x3c) connect(r0, &(0x7f0000000200)=@generic={0x1f, "0000000000000100"}, 0xa) 4.792778058s ago: executing program 9 (id=53): timerfd_create(0x9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='mem\x00', 0x3) 3.695987543s ago: executing program 7 (id=54): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x42, 0x1ff) sendfile(r1, r0, 0x0, 0xc00) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x42, 0x1ff) sendfile(r2, r0, 0x0, 0xc00) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/f3\x00', 0x42, 0x1ff) sendfile(r3, r0, 0x0, 0xc00) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./mnt/f4\x00', 0x42, 0x1ff) sendfile(r4, r0, 0x0, 0xc00) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/f5\x00', 0x42, 0x1ff) sendfile(r5, r0, 0x0, 0xc00) close(r5) unlinkat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/f3\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/f5\x00', 0x0) 3.579242472s ago: executing program 8 (id=55): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f0000000400)='3\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/num_groups\x00', 0x2, 0x0) write(r3, &(0x7f00000004c0)='1\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0) write(r4, &(0x7f0000000540)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0) write(r5, &(0x7f0000000640)='3\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/num_groups\x00', 0x2, 0x0) write(r6, &(0x7f0000000700)='1\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0) write(r7, &(0x7f0000000780)='1\n', 0x2) symlinkat(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r8, &(0x7f0000000880)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 2.172816309s ago: executing program 8 (id=56): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040012012f10001010203010902190001010080fa0904000001ffffff0007058202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) 2.170725684s ago: executing program 7 (id=57): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x36, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r2}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @loopback}, r2, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000380)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f00000003c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000500), r2}}, 0x18) 1.90605364s ago: executing program 5 (id=36): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x0, 0x1403, 0x605, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/infiniband/syz2\x00', 0x0, 0x0) 1.474323473s ago: executing program 5 (id=58): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xc, &(0x7f0000000400)="01000000", 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0x1c}}, 0x0) 1.474097788s ago: executing program 7 (id=59): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="05000000010000", 0x7) nanosleep(&(0x7f0000000200)={0x0, 0x35a4e900}, 0x0) 933.734563ms ago: executing program 5 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000600)=@in={0x2, 0x801, @empty}, 0x10) listen(r0, 0x10) dup2(r0, 0x64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000540)='100\n\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 myclient\n\x00', 0x23) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='myclient / 2147483647 0 0 0 0\n\x00', 0x1e) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r5, &(0x7f00000002c0)='myclient 0 0 2147483647 /\n\x00', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ed) mount(&(0x7f0000000340)=@filename='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000380)='nfs\x00', 0x0, &(0x7f00000003c0)='vers=4.1,addr=127.0.0.1,clientaddr=127.0.0.1\x00') 253.940025ms ago: executing program 7 (id=61): syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040443322110000010203010902450001010080fa0904000003ff0000000705010200020007058102000200070586020002000904000103ff000000070501020002000705810200020007058602000200"], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x409}}, {0x1c, &(0x7f0000001100)=@string={0x1c, 0x3, 'L\x00M\x00E\x002\x005\x001\x000\x00C\x00 \x00W\x00A\x00R\x00M\x00'}}, {0x11, &(0x7f0000001300)=@string={0x11, 0x3, '\x00'/15}}, {0x0, 0x0}]}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 0s ago: executing program 6 (id=62): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000000c0)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140), 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.221' (ED25519) to the list of known hosts. [ 73.578290][ T5586] cgroup: Unknown subsys name 'net' [ 73.799867][ T5586] cgroup: Unknown subsys name 'cpuset' [ 73.854220][ T5586] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.466702][ T5586] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.741433][ T5609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.760159][ T5609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.786833][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.789495][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.817494][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.821191][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.834127][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.846873][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.848173][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.850610][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.860654][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.866683][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.869622][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.869847][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.871687][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.874041][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.878045][ T4915] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.884278][ T4915] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.924745][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.926744][ T4915] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.928594][ T4915] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.928958][ T4915] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.932743][ T5609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.004645][ T4915] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.021564][ T5609] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.954941][ T5604] Bluetooth: hci0: command tx timeout [ 80.034019][ T5604] Bluetooth: hci4: command tx timeout [ 80.034044][ T5609] Bluetooth: hci2: command tx timeout [ 80.034193][ T5604] Bluetooth: hci1: command tx timeout [ 80.045441][ T5611] Bluetooth: hci3: command tx timeout [ 80.163499][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.163872][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.164024][ T5598] bridge_slave_0: entered allmulticast mode [ 80.167031][ T5598] bridge_slave_0: entered promiscuous mode [ 80.217516][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.217606][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.217702][ T5598] bridge_slave_1: entered allmulticast mode [ 80.219060][ T5598] bridge_slave_1: entered promiscuous mode [ 80.287194][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.287323][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.287422][ T5602] bridge_slave_0: entered allmulticast mode [ 80.288852][ T5602] bridge_slave_0: entered promiscuous mode [ 80.343243][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.343353][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.343504][ T5602] bridge_slave_1: entered allmulticast mode [ 80.347775][ T5602] bridge_slave_1: entered promiscuous mode [ 80.397060][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.440933][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.441067][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.441257][ T5600] bridge_slave_0: entered allmulticast mode [ 80.442970][ T5600] bridge_slave_0: entered promiscuous mode [ 80.453161][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.488694][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.488803][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.489365][ T5599] bridge_slave_0: entered allmulticast mode [ 80.490740][ T5599] bridge_slave_0: entered promiscuous mode [ 80.491851][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.491957][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.492097][ T5600] bridge_slave_1: entered allmulticast mode [ 80.494544][ T5600] bridge_slave_1: entered promiscuous mode [ 80.516301][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.516605][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.516747][ T5601] bridge_slave_0: entered allmulticast mode [ 80.520156][ T5601] bridge_slave_0: entered promiscuous mode [ 80.531648][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.532818][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.532934][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.533090][ T5599] bridge_slave_1: entered allmulticast mode [ 80.539757][ T5599] bridge_slave_1: entered promiscuous mode [ 80.580518][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.581590][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.585047][ T5601] bridge_slave_1: entered allmulticast mode [ 80.587425][ T5601] bridge_slave_1: entered promiscuous mode [ 80.666498][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.694675][ T5598] team0: Port device team_slave_0 added [ 80.733354][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.739020][ T5598] team0: Port device team_slave_1 added [ 80.771178][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.773322][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.794599][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.797602][ T5602] team0: Port device team_slave_0 added [ 80.801964][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.840398][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.842410][ T5602] team0: Port device team_slave_1 added [ 80.878977][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.878987][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.879000][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.939337][ T5600] team0: Port device team_slave_0 added [ 80.940128][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.940141][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.940163][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.042337][ T5599] team0: Port device team_slave_0 added [ 81.051123][ T5600] team0: Port device team_slave_1 added [ 81.068459][ T5601] team0: Port device team_slave_0 added [ 81.069209][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.069222][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.069245][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.071738][ T5599] team0: Port device team_slave_1 added [ 81.095445][ T5601] team0: Port device team_slave_1 added [ 81.096392][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.096403][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.096426][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.194511][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.194525][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.194538][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.215407][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.215423][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.215445][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.236741][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.236757][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.236779][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.241907][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.241922][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.241960][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.247220][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.247234][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.247256][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.261339][ T5598] hsr_slave_0: entered promiscuous mode [ 81.262730][ T5598] hsr_slave_1: entered promiscuous mode [ 81.298114][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.298129][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.298152][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.360728][ T5602] hsr_slave_0: entered promiscuous mode [ 81.361889][ T5602] hsr_slave_1: entered promiscuous mode [ 81.362766][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 81.362878][ T5602] Cannot create hsr debugfs directory [ 81.524874][ T5600] hsr_slave_0: entered promiscuous mode [ 81.525900][ T5600] hsr_slave_1: entered promiscuous mode [ 81.526432][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 81.526446][ T5600] Cannot create hsr debugfs directory [ 81.549589][ T5599] hsr_slave_0: entered promiscuous mode [ 81.550679][ T5599] hsr_slave_1: entered promiscuous mode [ 81.551559][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 81.551580][ T5599] Cannot create hsr debugfs directory [ 81.617219][ T5601] hsr_slave_0: entered promiscuous mode [ 81.619474][ T5601] hsr_slave_1: entered promiscuous mode [ 81.619960][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 81.619986][ T5601] Cannot create hsr debugfs directory [ 82.034073][ T5611] Bluetooth: hci0: command tx timeout [ 82.113821][ T5609] Bluetooth: hci3: command tx timeout [ 82.113857][ T5609] Bluetooth: hci4: command tx timeout [ 82.113914][ T5604] Bluetooth: hci2: command tx timeout [ 82.113921][ T5611] Bluetooth: hci1: command tx timeout [ 82.730777][ T5598] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.797782][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.802847][ T5598] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.859407][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.862969][ T5598] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.903452][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.927979][ T5598] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.957695][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.060809][ T5602] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.099845][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.111483][ T5602] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.138216][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.140935][ T5602] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.178829][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.203491][ T5602] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.228051][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.378578][ T5600] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.418302][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.436318][ T5600] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.477615][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.481943][ T5600] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.526911][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.559821][ T5600] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.590127][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.701904][ T5599] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.729469][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.741256][ T5599] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.767311][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.779726][ T5599] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.808465][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.837227][ T5599] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.866813][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.926754][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.012641][ T5601] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.048105][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.051335][ T5601] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.098454][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.113824][ T5604] Bluetooth: hci0: command tx timeout [ 84.131469][ T5601] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.158302][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.175558][ T5601] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.194232][ T5604] Bluetooth: hci1: command tx timeout [ 84.194260][ T5604] Bluetooth: hci4: command tx timeout [ 84.194277][ T5604] Bluetooth: hci2: command tx timeout [ 84.194294][ T5604] Bluetooth: hci3: command tx timeout [ 84.221461][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.229425][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.266541][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.273490][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.288647][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.336822][ T1421] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.336905][ T1421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.400528][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.439510][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.439628][ T4313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.484732][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.484823][ T4313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.492320][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.606646][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.613558][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.681388][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.681574][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.752316][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.752471][ T4367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.811390][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.887381][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.887491][ T4313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.923204][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.958204][ T1421] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.958330][ T1421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.130868][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.223374][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.223563][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.291136][ T1514] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.295230][ T1514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.607787][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.914026][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.074553][ T5598] veth0_vlan: entered promiscuous mode [ 86.161391][ T5598] veth1_vlan: entered promiscuous mode [ 86.193717][ T5611] Bluetooth: hci0: command tx timeout [ 86.273814][ T5611] Bluetooth: hci3: command tx timeout [ 86.273845][ T5611] Bluetooth: hci2: command tx timeout [ 86.273865][ T5611] Bluetooth: hci4: command tx timeout [ 86.273882][ T5611] Bluetooth: hci1: command tx timeout [ 86.409852][ T5602] veth0_vlan: entered promiscuous mode [ 86.468213][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.480586][ T5602] veth1_vlan: entered promiscuous mode [ 86.523298][ T5598] veth0_macvtap: entered promiscuous mode [ 86.551021][ T5598] veth1_macvtap: entered promiscuous mode [ 86.617062][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.655571][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.681561][ T5602] veth0_macvtap: entered promiscuous mode [ 86.710027][ T31] cfg80211: failed to load regulatory.db [ 86.712781][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.732194][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.787851][ T5602] veth1_macvtap: entered promiscuous mode [ 86.810741][ T5600] veth0_vlan: entered promiscuous mode [ 86.852669][ T5600] veth1_vlan: entered promiscuous mode [ 86.983363][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.103469][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.210424][ T5599] veth0_vlan: entered promiscuous mode [ 87.358077][ T5600] veth0_macvtap: entered promiscuous mode [ 87.359320][ T4313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.359340][ T4313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.427690][ T5599] veth1_vlan: entered promiscuous mode [ 87.488360][ T5600] veth1_macvtap: entered promiscuous mode [ 87.668321][ T5601] veth0_vlan: entered promiscuous mode [ 87.691246][ T4367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.691264][ T4367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.770007][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.773299][ T5601] veth1_vlan: entered promiscuous mode [ 87.798711][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.798729][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.870879][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.928420][ T5599] veth0_macvtap: entered promiscuous mode [ 87.932659][ T1421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.932676][ T1421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.977327][ T5599] veth1_macvtap: entered promiscuous mode [ 88.377101][ T5601] veth0_macvtap: entered promiscuous mode [ 88.410895][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.589277][ T5601] veth1_macvtap: entered promiscuous mode [ 88.613219][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.803255][ T4313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.803275][ T4313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.914571][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.139465][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.435920][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.435941][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.558932][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.955484][ T31] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 89.955511][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.183223][ T5800] infiniband syz2: set active [ 90.183242][ T5800] infiniband syz2: added syz_tun [ 90.341072][ T5800] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 90.468560][ T5800] infiniband syz2: Couldn't open port 1 [ 90.505788][ T5800] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 90.506034][ T5800] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 90.506069][ T5800] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 90.854857][ T1533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.854876][ T1533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.928050][ T31] gud 4-1:1.0: Failed to get connectors (error=-5) [ 90.928089][ T31] gud 4-1:1.0: probe with driver gud failed with error -5 [ 91.032145][ T5800] RDS/IB: syz2: added [ 91.092801][ T5800] smc: adding ib device syz2 with port count 1 [ 91.093359][ T5800] smc: ib device syz2 port 1 has no pnetid [ 91.215679][ T5738] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.245177][ T1421] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.308837][ T182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.309030][ T182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.309788][ T182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.381021][ T1421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.381039][ T1421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.464913][ T5738] usb 1-1: New USB device found, idVendor=0424, idProduct=9500, bcdDevice= 0.00 [ 91.464942][ T5738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.786980][ T4367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.787016][ T4367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.322085][ T1421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.322102][ T1421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.448029][ T4313] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.545269][ T5739] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.626118][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.626490][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.626635][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.825170][ T5739] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice= 0.00 [ 92.825199][ T5739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.825269][ T5739] usb 3-1: Product: syz [ 92.825283][ T5739] usb 3-1: Manufacturer: syz [ 92.825296][ T5739] usb 3-1: SerialNumber: syz [ 93.079474][ T1533] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.156121][ T1533] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.159814][ T4367] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.159851][ T4367] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.159879][ T4367] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.159904][ T4367] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.159927][ T4367] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.159951][ T4367] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.159975][ T4367] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.160000][ T4367] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.160022][ T4367] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.160046][ T4367] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.865434][ T5716] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.150496][ T5716] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 94.150524][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.150542][ T5716] usb 5-1: Product: syz [ 94.150555][ T5716] usb 5-1: Manufacturer: syz [ 94.150568][ T5716] usb 5-1: SerialNumber: syz [ 94.154340][ T5738] smsc95xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 94.154368][ T5738] smsc95xx 1-1:1.0 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 94.303173][ T5738] smsc95xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 94.350607][ T5738] smsc95xx 1-1:1.0: probe with driver smsc95xx failed with error -71 [ 94.437085][ T5607] usb 4-1: USB disconnect, device number 2 [ 94.628349][ T5739] smsc75xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 94.628379][ T5739] smsc75xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 94.628396][ T5739] smsc75xx 3-1:1.0 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 94.628632][ T5739] smsc75xx 3-1:1.0: probe with driver smsc75xx failed with error -61 [ 94.638115][ T5738] usb 1-1: USB disconnect, device number 2 [ 94.969274][ T5716] usb 5-1: cannot find UAC_HEADER [ 94.969539][ T5716] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 95.167732][ T5716] usb 5-1: cannot find UAC_HEADER [ 95.167774][ T5716] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 95.224751][ T5716] usb 5-1: cannot find UAC_HEADER [ 95.752633][ T5604] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:200' [ 95.752676][ T5604] CPU: 1 UID: 0 PID: 5604 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 95.752704][ T5604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.752717][ T5604] Workqueue: hci3 hci_rx_work [ 95.752758][ T5604] Call Trace: [ 95.752765][ T5604] [ 95.752774][ T5604] dump_stack_lvl+0xe8/0x150 [ 95.752806][ T5604] sysfs_create_dir_ns+0x271/0x2a0 [ 95.752830][ T5604] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 95.752854][ T5604] ? rt_spin_unlock+0x163/0x200 [ 95.752878][ T5604] kobject_add_internal+0x62c/0xce0 [ 95.752905][ T5604] kobject_add+0x163/0x240 [ 95.752921][ T5604] ? rt_spin_unlock+0x157/0x200 [ 95.752944][ T5604] ? __pfx_kobject_add+0x10/0x10 [ 95.752978][ T5604] ? get_device_parent+0x370/0x3a0 [ 95.753005][ T5604] device_add+0x3fa/0xb80 [ 95.753032][ T5604] hci_conn_add_sysfs+0xd5/0x210 [ 95.753065][ T5604] le_conn_complete_evt+0xfef/0x1580 [ 95.753103][ T5604] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 95.753130][ T5604] ? lockdep_hardirqs_on+0x7a/0x110 [ 95.753153][ T5604] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 95.753175][ T5604] ? rt_mutex_slowunlock+0x219/0x460 [ 95.753194][ T5604] ? skb_pull_data+0xf0/0x200 [ 95.753224][ T5604] hci_le_conn_complete_evt+0x187/0x470 [ 95.753256][ T5604] hci_event_packet+0x67a/0xf10 [ 95.753283][ T5604] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 95.753306][ T5604] ? __pfx_hci_event_packet+0x10/0x10 [ 95.753329][ T5604] ? rt_spin_unlock+0x157/0x200 [ 95.753357][ T5604] ? hci_send_to_monitor+0xe2/0x590 [ 95.753378][ T5604] hci_rx_work+0x3ee/0x1020 [ 95.753409][ T5604] ? process_scheduled_works+0xa20/0x14e0 [ 95.753432][ T5604] process_scheduled_works+0xa8e/0x14e0 [ 95.753481][ T5604] ? __pfx_process_scheduled_works+0x10/0x10 [ 95.753509][ T5604] ? assign_work+0x3cf/0x5d0 [ 95.753535][ T5604] worker_thread+0xa47/0xfb0 [ 95.753581][ T5604] kthread+0x388/0x470 [ 95.753609][ T5604] ? __pfx_worker_thread+0x10/0x10 [ 95.753633][ T5604] ? __pfx_kthread+0x10/0x10 [ 95.753661][ T5604] ret_from_fork+0x514/0xb70 [ 95.753692][ T5604] ? __pfx_ret_from_fork+0x10/0x10 [ 95.753720][ T5604] ? __switch_to+0xc89/0x1420 [ 95.753747][ T5604] ? __pfx_kthread+0x10/0x10 [ 95.753773][ T5604] ret_from_fork_asm+0x1a/0x30 [ 95.753805][ T5604] [ 95.754063][ T5604] kobject: kobject_add_internal failed for hci3:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 95.754099][ T5604] Bluetooth: hci3: failed to register connection device [ 96.071595][ T36] usb 3-1: USB disconnect, device number 2 [ 96.204920][ T5716] snd-usb-audio 5-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 96.294696][ T5716] usb 5-1: USB disconnect, device number 2 [ 97.116628][ T5869] PM: hibernation: hibernation entry [ 97.788447][ T5869] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 97.797614][ T5611] Bluetooth: hci3: command 0x2016 tx timeout [ 97.813458][ T5869] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 98.430378][ T5869] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 98.619121][ T5869] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 98.619273][ T5869] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.653781][ T201] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.714135][ T5869] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.808222][ T201] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.808250][ T201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 98.808266][ T201] usb 4-1: SerialNumber: syz [ 98.827058][ T5869] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.827166][ T5869] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.928525][ T5869] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 99.011816][ T5869] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 99.044821][ T5869] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 99.044902][ T5869] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 99.137113][ T5869] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 99.223494][ T5869] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 99.230902][ T5869] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 99.287484][ T5869] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 99.291369][ T5875] PM: suspend entry (s2idle) [ 99.291378][ T5875] PM: Unsupported test mode for suspend to idle, please choose none/freezer/devices/platform. [ 99.291384][ T5875] PM: suspend exit [ 99.610833][ T5716] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 99.720460][ T5604] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.782682][ T5878] fido_id[5878]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 100.087073][ T5716] usb 4-1: USB disconnect, device number 3 [ 100.186016][ T5870] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.335424][ T5870] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 100.335445][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.583409][ T5870] lg-g15 0003:046D:C222.0002: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 100.674310][ T5604] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.834728][ T5604] Bluetooth: hci3: command 0x2016 tx timeout [ 101.074261][ T5604] Bluetooth: hci4: command 0x0c1a tx timeout [ 101.243750][ T5604] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.794759][ T5604] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.810144][ T37] audit: type=1800 audit(1785858984.007:2): pid=5898 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.25" name="idProduct" dev="configfs" ino=8571 res=0 errno=0 [ 101.851791][ T37] audit: type=1800 audit(1785858984.057:3): pid=5898 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.25" name="UDC" dev="configfs" ino=8574 res=0 errno=0 [ 101.890513][ T5898] Config c/1 of g1 needs at least one function. [ 101.893042][ T5898] udc dummy_udc.0: failed to start g1: -22 [ 101.893069][ T5898] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 101.924435][ T5898] UDC core: g1: couldn't find an available UDC or it's busy [ 102.356830][ T5857] NFSD: Unable to initialize client recovery tracking! (-110) [ 102.356850][ T5857] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 102.356862][ T5857] NFSD: starting 90-second grace period (net f00004d0) [ 102.755971][ T5604] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.924172][ T5604] Bluetooth: hci3: command 0x2016 tx timeout [ 102.955808][ T5870] lg-g15 0003:046D:C222.0002: Error -71 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 102.981262][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.073582][ T5870] usb 2-1: USB disconnect, device number 2 [ 103.153998][ T5604] Bluetooth: hci4: command 0x0c1a tx timeout [ 103.172380][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 103.172409][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 103.198982][ T10] usb 4-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 103.199010][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.199028][ T10] usb 4-1: Product: syz [ 103.199041][ T10] usb 4-1: Manufacturer: syz [ 103.199054][ T10] usb 4-1: SerialNumber: syz [ 103.241995][ T5904] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 103.242088][ T5904] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 103.270662][ T10] mos7840 4-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 103.316287][ T5604] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.594297][ T5739] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.749717][ T10] mos7840 ttyUSB0: probe with driver mos7840 failed with error -32 [ 103.876158][ T5916] Zero length message leads to an empty skb [ 103.931121][ T5604] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.453153][ T5739] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 104.453172][ T5739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.838715][ T5604] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.926900][ T4313] Filesystems sync: 5.527 seconds [ 104.981628][ T5869] Freezing user space processes [ 104.999960][ T5604] Bluetooth: hci3: command 0x2016 tx timeout [ 105.026985][ T5869] Freezing user space processes completed (elapsed 0.045 seconds) [ 105.027308][ T5869] OOM killer disabled. [ 105.031055][ T5869] Freezing remaining freezable tasks [ 105.234546][ T5604] Bluetooth: hci4: command 0x0c1a tx timeout [ 105.393754][ T5604] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.073771][ T5604] Bluetooth: hci3: command 0x2016 tx timeout [ 109.907822][ T5739] usbhid 3-1:1.0: can't add hid device: -32 [ 109.907891][ T5739] usbhid 3-1:1.0: probe with driver usbhid failed with error -32 [ 109.928832][ T5869] Freezing remaining freezable tasks completed (elapsed 4.897 seconds) [ 109.969773][ T5869] PM: hibernation: Preallocating image memory [ 132.757533][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.757648][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 146.026886][ T5869] PM: hibernation: Allocated 715578 pages for snapshot [ 146.026901][ T5869] PM: hibernation: Allocated 2862312 kbytes in 36.05 seconds (79.39 MB/s) [ 146.026923][ T5869] printk: Suspending console(s) (use no_console_suspend to debug) [ 147.535452][ T5869] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 147.535572][ T5869] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 147.535674][ T5869] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 147.535780][ T5869] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 147.535882][ T5869] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 147.535984][ T5869] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 147.536086][ T5869] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 147.536207][ T5869] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 147.536332][ T5869] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 147.536434][ T5869] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 147.536538][ T5869] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 147.536640][ T5869] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 147.536741][ T5869] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 147.536865][ T5869] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 147.536966][ T5869] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 148.431201][ T5869] ACPI: PM: Preparing to enter system sleep state S4 [ 148.431891][ T5869] ACPI: PM: Saving platform NVS memory [ 148.456446][ T5869] Disabling non-boot CPUs ... [ 148.591062][ T5869] smpboot: CPU 1 is now offline [ 148.630361][ T5869] PM: hibernation: hibernation debug: Waiting for 0 second(s). [ 148.652954][ T5869] Enabling non-boot CPUs ... [ 148.654861][ T5869] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 148.716409][ T5869] CPU1 is up [ 148.717838][ T5869] ACPI: PM: Waking up from system sleep state S4 [ 156.940232][ T6039] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 157.662552][ T6010] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 157.672298][ T6017] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 157.805958][ T6010] usb 3-1: device descriptor read/64, error -32 [ 158.056264][ T6010] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 158.185936][ T6010] usb 3-1: device descriptor read/64, error -32 [ 158.425883][ T6010] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 158.471297][ T6010] usb 3-1: device descriptor read/8, error -32 [ 158.646065][ T6010] raw-gadget.1 gadget.2: failed to queue resume event [ 158.705890][ T6010] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 158.726633][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 158.726760][ T6010] usb 3-1: device descriptor read/8, error -32 [ 158.842131][ T6010] raw-gadget.1 gadget.2: failed to queue suspend event [ 162.835882][ T6017] usb 4-1: device descriptor read/64, error -110 [ 163.085844][ T6017] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 163.215888][ T6017] usb 4-1: device descriptor read/64, error -32 [ 163.456076][ T6017] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 163.478452][ T6017] usb 4-1: device descriptor read/8, error -32 [ 163.658949][ T6017] raw-gadget.0 gadget.3: failed to queue resume event [ 163.715925][ T6017] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 163.736474][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 163.736599][ T6017] usb 4-1: device descriptor read/8, error -32 [ 163.845960][ T6017] raw-gadget.0 gadget.3: failed to queue suspend event [ 164.139304][ T5869] OOM killer enabled. [ 164.139316][ T5869] Restarting tasks: Starting [ 164.151705][ T5843] usb 4-1: USB disconnect, device number 4 [ 164.167950][ T824] usb 3-1: USB disconnect, device number 3 [ 164.438283][ T5843] mos7840 4-1:1.0: device disconnected [ 164.460330][ T5869] Restarting tasks: Done [ 164.556875][ T5869] PM: hibernation: hibernation exit [ 164.615962][ T824] raw-gadget.1 gadget.2: failed to queue reset event [ 164.616614][ T5843] raw-gadget.0 gadget.3: failed to queue reset event [ 164.714119][ T5843] raw-gadget.0 gadget.3: failed to queue resume event [ 164.714297][ T824] raw-gadget.1 gadget.2: failed to queue resume event [ 164.806011][ T5870] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 164.806155][ T824] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 164.806338][ T5843] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 164.806503][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 164.806804][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 164.806971][ T5843] raw-gadget.0 gadget.3: failed to queue reset event [ 164.807159][ T824] raw-gadget.1 gadget.2: failed to queue reset event [ 164.887407][ T5843] raw-gadget.0 gadget.3: failed to queue resume event [ 164.890654][ T824] raw-gadget.1 gadget.2: failed to queue resume event [ 164.947884][ T5843] usb 4-1: device descriptor read/64, error -32 [ 164.957265][ T824] usb 3-1: device descriptor read/64, error -32 [ 165.208757][ T5901] raw-gadget.0 gadget.3: failed to queue suspend event [ 165.217318][ T5843] raw-gadget.0 gadget.3: failed to queue suspend event [ 165.259783][ T5901] raw-gadget.0 gadget.3: failed to queue disconnect event [ 165.274686][ T5910] raw-gadget.1 gadget.2: failed to queue suspend event [ 165.294888][ T5910] raw-gadget.1 gadget.2: failed to queue disconnect event [ 166.749640][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 166.791408][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 166.794594][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 166.801470][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 166.818272][ T5609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 166.931672][ T4915] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 166.945183][ T4915] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 166.956735][ T4915] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 166.983771][ T4915] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 166.984477][ T4915] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 167.045160][ T4915] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 167.103997][ T4915] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 167.136455][ T4915] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 167.141318][ T4915] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 167.142990][ T4915] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 167.799548][ T4915] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 167.882465][ T5609] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 167.883576][ T5609] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 167.893476][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 167.966904][ T4915] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 167.972030][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 167.975159][ T5609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 167.978310][ T4915] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.980789][ T4915] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 168.000862][ T5611] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 168.936313][ T5604] Bluetooth: hci5: command tx timeout [ 169.179546][ T5604] Bluetooth: hci6: command tx timeout [ 169.337786][ T5604] Bluetooth: hci7: command tx timeout [ 169.572873][ T5965] smc: removing ib device syz2 [ 169.726326][ T10] syz2: Port: 1 Link DOWN [ 170.053802][ T5965] smbdirect: ib_dev[syz2] removed [ 170.143579][ T6002] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.378755][ T5604] Bluetooth: hci8: command tx timeout [ 170.378769][ T5611] Bluetooth: hci0: command tx timeout [ 170.731936][ T6002] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.016033][ T5611] Bluetooth: hci5: command tx timeout [ 171.255800][ T5611] Bluetooth: hci6: command tx timeout [ 171.427185][ T5611] Bluetooth: hci7: command tx timeout [ 171.512662][ T6002] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.030622][ T6002] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.456855][ T5611] Bluetooth: hci0: command tx timeout [ 172.457570][ T5611] Bluetooth: hci8: command tx timeout [ 173.006791][ T6002] bridge_slave_1: left allmulticast mode [ 173.006940][ T6002] bridge_slave_1: left promiscuous mode [ 173.012995][ T6002] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.096188][ T5611] Bluetooth: hci5: command tx timeout [ 173.169557][ T6002] bridge_slave_0: left allmulticast mode [ 173.169583][ T6002] bridge_slave_0: left promiscuous mode [ 173.169749][ T6002] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.335917][ T5611] Bluetooth: hci6: command tx timeout [ 173.496834][ T5611] Bluetooth: hci7: command tx timeout [ 173.966410][ T6002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.046440][ T6002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.070190][ T6002] bond0 (unregistering): Released all slaves [ 174.535949][ T5611] Bluetooth: hci8: command tx timeout [ 174.535976][ T5611] Bluetooth: hci0: command tx timeout [ 175.127781][ T6085] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.127903][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.128069][ T6085] bridge_slave_0: entered allmulticast mode [ 175.131141][ T6085] bridge_slave_0: entered promiscuous mode [ 175.188211][ T5604] Bluetooth: hci5: command tx timeout [ 175.230525][ T5262] 8021q: adding VLAN 0 to HW filter on device eth1 [ 175.230982][ T6085] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.231086][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.231284][ T6085] bridge_slave_1: entered allmulticast mode [ 175.233728][ T6085] bridge_slave_1: entered promiscuous mode [ 175.377604][ T6096] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.377709][ T6096] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.377830][ T6096] bridge_slave_0: entered allmulticast mode [ 175.379213][ T6096] bridge_slave_0: entered promiscuous mode [ 175.413032][ T6095] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.413117][ T6095] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.413415][ T6095] bridge_slave_0: entered allmulticast mode [ 175.417216][ T5604] Bluetooth: hci6: command tx timeout [ 175.419151][ T6095] bridge_slave_0: entered promiscuous mode [ 175.420931][ T6084] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.421052][ T6084] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.421216][ T6084] bridge_slave_0: entered allmulticast mode [ 175.424542][ T6084] bridge_slave_0: entered promiscuous mode [ 175.463572][ T6096] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.463680][ T6096] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.463885][ T6096] bridge_slave_1: entered allmulticast mode [ 175.473475][ T6096] bridge_slave_1: entered promiscuous mode [ 175.494980][ T6095] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.495082][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.495245][ T6095] bridge_slave_1: entered allmulticast mode [ 175.502316][ T6095] bridge_slave_1: entered promiscuous mode [ 175.504177][ T6084] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.504280][ T6084] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.504435][ T6084] bridge_slave_1: entered allmulticast mode [ 175.508470][ T6084] bridge_slave_1: entered promiscuous mode [ 175.511237][ T6086] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.511342][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.511512][ T6086] bridge_slave_0: entered allmulticast mode [ 175.513779][ T6086] bridge_slave_0: entered promiscuous mode [ 175.575779][ T5604] Bluetooth: hci7: command tx timeout [ 175.719919][ T6085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.748863][ T6086] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.748947][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.749056][ T6086] bridge_slave_1: entered allmulticast mode [ 175.750506][ T6086] bridge_slave_1: entered promiscuous mode [ 175.842559][ T6085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.890352][ T6096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.909594][ T6095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.913280][ T6084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.946623][ T6096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.971135][ T6095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.973379][ T6084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.981744][ T6086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.009192][ T6085] team0: Port device team_slave_0 added [ 176.041934][ T6086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.070034][ T6085] team0: Port device team_slave_1 added [ 176.205861][ T6002] hsr_slave_0: left promiscuous mode [ 176.225807][ T6002] hsr_slave_1: left promiscuous mode [ 176.226687][ T6002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.226754][ T6002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.267935][ T6002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.267960][ T6002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.327136][ T6002] veth1_macvtap: left promiscuous mode [ 176.328746][ T6002] veth0_macvtap: left promiscuous mode [ 176.328911][ T6002] veth1_vlan: left promiscuous mode [ 176.329107][ T6002] veth0_vlan: left promiscuous mode [ 176.615864][ T5604] Bluetooth: hci0: command tx timeout [ 176.615895][ T5604] Bluetooth: hci8: command tx timeout [ 177.056423][ T6002] team0 (unregistering): Port device team_slave_1 removed [ 177.087217][ T6002] team0 (unregistering): Port device team_slave_0 removed [ 177.315270][ T6096] team0: Port device team_slave_0 added [ 177.344863][ T6095] team0: Port device team_slave_0 added [ 177.648052][ T6084] team0: Port device team_slave_0 added [ 177.664671][ T6096] team0: Port device team_slave_1 added [ 177.680210][ T6095] team0: Port device team_slave_1 added [ 177.683731][ T6084] team0: Port device team_slave_1 added [ 177.687108][ T6086] team0: Port device team_slave_0 added [ 177.706502][ T6085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.706516][ T6085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.706533][ T6085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.751319][ T6086] team0: Port device team_slave_1 added [ 177.791142][ T6085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.791157][ T6085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.791181][ T6085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.884991][ T6096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.885007][ T6096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.885031][ T6096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.898486][ T6095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.898502][ T6095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.898524][ T6095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.900605][ T6084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.900618][ T6084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.900640][ T6084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.922431][ T6096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.922446][ T6096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.922469][ T6096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.926182][ T6095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.926196][ T6095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.926219][ T6095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.929849][ T6084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.929869][ T6084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.929892][ T6084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.931495][ T6086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.931506][ T6086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.931527][ T6086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.042915][ T6086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.042932][ T6086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.042955][ T6086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.254703][ T6085] hsr_slave_0: entered promiscuous mode [ 178.255501][ T6085] hsr_slave_1: entered promiscuous mode [ 178.266706][ T6085] debugfs: 'hsr0' already exists in 'hsr' [ 178.266731][ T6085] Cannot create hsr debugfs directory [ 178.562112][ T6095] hsr_slave_0: entered promiscuous mode [ 178.563447][ T6095] hsr_slave_1: entered promiscuous mode [ 178.564485][ T6095] debugfs: 'hsr0' already exists in 'hsr' [ 178.564506][ T6095] Cannot create hsr debugfs directory [ 178.662489][ T6096] hsr_slave_0: entered promiscuous mode [ 178.663838][ T6096] hsr_slave_1: entered promiscuous mode [ 178.664854][ T6096] debugfs: 'hsr0' already exists in 'hsr' [ 178.664875][ T6096] Cannot create hsr debugfs directory [ 178.674748][ T6084] hsr_slave_0: entered promiscuous mode [ 178.676531][ T6084] hsr_slave_1: entered promiscuous mode [ 178.677406][ T6084] debugfs: 'hsr0' already exists in 'hsr' [ 178.677428][ T6084] Cannot create hsr debugfs directory [ 178.743689][ T5262] 8021q: adding VLAN 0 to HW filter on device eth2 [ 178.760038][ T6086] hsr_slave_0: entered promiscuous mode [ 178.760829][ T6086] hsr_slave_1: entered promiscuous mode [ 178.761376][ T6086] debugfs: 'hsr0' already exists in 'hsr' [ 178.761390][ T6086] Cannot create hsr debugfs directory [ 180.134443][ T6002] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.185194][ T5262] 8021q: adding VLAN 0 to HW filter on device eth3 [ 180.354938][ T6085] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 180.402630][ T6085] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 180.581451][ T6002] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.638834][ T6085] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 180.678465][ T6085] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 180.692947][ T6085] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 180.725491][ T6085] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 180.754583][ T5262] 8021q: adding VLAN 0 to HW filter on device eth4 [ 180.754828][ T6085] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 180.791327][ T6085] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 180.928349][ T6002] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.280753][ T6002] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.322482][ T6095] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 181.342030][ T6095] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 181.352105][ T6095] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 181.385491][ T6095] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 181.474544][ T6095] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 181.509717][ T6095] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 181.517236][ T6095] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 181.560972][ T6095] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 181.793237][ T6096] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 181.828646][ T6096] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 181.868861][ T6096] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 181.891181][ T6096] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 181.928894][ T6096] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 181.968577][ T6096] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 182.009288][ T6096] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 182.048672][ T6096] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 182.412885][ T6002] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.501600][ T6086] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 182.564399][ T6086] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 182.594573][ T6086] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 182.648407][ T6086] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 182.700509][ T6086] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 182.740950][ T6086] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 182.844650][ T6086] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 182.874928][ T6086] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 183.092727][ T6002] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.169551][ T6085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.259640][ T5262] 8021q: adding VLAN 0 to HW filter on device eth5 [ 183.453014][ T6002] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.562432][ T6084] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 183.593028][ T6084] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 183.604746][ T6085] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.734742][ T6002] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.767587][ T6084] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 183.809180][ T6084] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 183.812202][ T6084] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 183.838673][ T6084] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 183.844611][ T6095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.861495][ T6084] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 183.904988][ T6084] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 183.933977][ T6010] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.934071][ T6010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.978214][ T5986] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.978331][ T5986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.098609][ T6095] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.213785][ T6010] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.213915][ T6010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.278220][ T6096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.318635][ T6010] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.318857][ T6010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.611998][ T5262] 8021q: adding VLAN 0 to HW filter on device eth6 [ 184.723755][ T6096] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.791684][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.791810][ T5971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.859614][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.859729][ T5971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.084228][ T6002] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.170615][ T6086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.331162][ T6086] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.380377][ T6084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.581607][ T6002] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.653536][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.653727][ T5993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.768517][ T6054] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.768636][ T6054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.897205][ T6084] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.132147][ T6002] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.176184][ T5262] 8021q: adding VLAN 0 to HW filter on device eth7 [ 186.215536][ T6001] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.245766][ T6001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.325404][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.337911][ T6001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.510810][ T6002] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.753152][ T6085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.313720][ T6095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.877204][ T6096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.834552][ T6002] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.866068][ T5262] 8021q: adding VLAN 0 to HW filter on device eth8 [ 188.894977][ T6085] veth0_vlan: entered promiscuous mode [ 188.958667][ T6086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.194160][ T6002] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.243561][ T6085] veth1_vlan: entered promiscuous mode [ 189.273105][ T6084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.282913][ T6095] veth0_vlan: entered promiscuous mode [ 189.561306][ T6002] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.577571][ T6095] veth1_vlan: entered promiscuous mode [ 189.735137][ T6096] veth0_vlan: entered promiscuous mode [ 189.940520][ T6002] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.026771][ T6085] veth0_macvtap: entered promiscuous mode [ 190.075522][ T6085] veth1_macvtap: entered promiscuous mode [ 190.096480][ T6096] veth1_vlan: entered promiscuous mode [ 190.194313][ T6095] veth0_macvtap: entered promiscuous mode [ 190.255403][ T6095] veth1_macvtap: entered promiscuous mode [ 190.272531][ T6085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.309325][ T5262] 8021q: adding VLAN 0 to HW filter on device eth9 [ 190.310093][ T6086] veth0_vlan: entered promiscuous mode [ 190.322122][ T6085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.372240][ T6084] veth0_vlan: entered promiscuous mode [ 190.442001][ T6095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.444702][ T6086] veth1_vlan: entered promiscuous mode [ 190.491278][ T6096] veth0_macvtap: entered promiscuous mode [ 190.496517][ T6095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.530397][ T6084] veth1_vlan: entered promiscuous mode [ 190.661391][ T6096] veth1_macvtap: entered promiscuous mode [ 190.846205][ T6002] bridge_slave_1: left allmulticast mode [ 190.846229][ T6002] bridge_slave_1: left promiscuous mode [ 190.846389][ T6002] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.987646][ T6002] bridge_slave_0: left allmulticast mode [ 190.987670][ T6002] bridge_slave_0: left promiscuous mode [ 190.987827][ T6002] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.238810][ T6002] bridge_slave_1: left allmulticast mode [ 191.238833][ T6002] bridge_slave_1: left promiscuous mode [ 191.238986][ T6002] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.339777][ T6002] bridge_slave_0: left allmulticast mode [ 191.339801][ T6002] bridge_slave_0: left promiscuous mode [ 191.339959][ T6002] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.566247][ T6002] bridge_slave_1: left allmulticast mode [ 191.566281][ T6002] bridge_slave_1: left promiscuous mode [ 191.566516][ T6002] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.706912][ T6002] bridge_slave_0: left allmulticast mode [ 191.706936][ T6002] bridge_slave_0: left promiscuous mode [ 191.707106][ T6002] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.906260][ T6002] bridge_slave_1: left allmulticast mode [ 191.906294][ T6002] bridge_slave_1: left promiscuous mode [ 191.906910][ T6002] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.007484][ T6002] bridge_slave_0: left allmulticast mode [ 192.007507][ T6002] bridge_slave_0: left promiscuous mode [ 192.007647][ T6002] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.986418][ T6002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.047108][ T6002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.073404][ T6002] bond0 (unregistering): Released all slaves [ 193.536408][ T6002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.617748][ T6002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.663637][ T6002] bond0 (unregistering): Released all slaves [ 194.116290][ T6002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.176303][ T6002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.237078][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.237144][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.244696][ T6002] bond0 (unregistering): Released all slaves [ 194.706333][ T6002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.787018][ T6002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.830747][ T6002] bond0 (unregistering): Released all slaves [ 195.194329][ T5965] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.450662][ T6096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.934117][ T6086] veth0_macvtap: entered promiscuous mode [ 195.979295][ T6029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.979313][ T6029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.982921][ T6096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.053270][ T6086] veth1_macvtap: entered promiscuous mode [ 196.065245][ T6084] veth0_macvtap: entered promiscuous mode [ 196.254355][ T6084] veth1_macvtap: entered promiscuous mode [ 196.265003][ T6054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.265021][ T6054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.588495][ T6029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.588515][ T6029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.594608][ T6086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.009891][ T5262] 8021q: adding VLAN 0 to HW filter on device eth10 [ 197.085276][ T6086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.090279][ T6084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.284384][ T37] audit: type=1800 audit(1785859079.668:4): pid=6445 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.37" name="idProduct" dev="configfs" ino=13455 res=0 errno=0 [ 197.297858][ T37] audit: type=1800 audit(1785859079.698:5): pid=6445 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.37" name="UDC" dev="configfs" ino=13456 res=0 errno=0 [ 197.299117][ T6445] Config c/1 of g1 needs at least one function. [ 197.299276][ T6445] udc dummy_udc.0: failed to start g1: -22 [ 197.299296][ T6445] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 197.303192][ T6445] UDC core: g1: couldn't find an available UDC or it's busy [ 197.449536][ T5965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.449555][ T5965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.474173][ T6084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.573301][ T5993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.573320][ T5993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.334642][ T6454] vim2m vim2m.0: Removing vim2m [ 199.463946][ T6455] vim2m vim2m.0: Device registered as /dev/video3 [ 199.550365][ T6464] netlink: 'syz.6.44': attribute type 5 has an invalid length. [ 199.727516][ T6010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.727535][ T6010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.115529][ T37] audit: type=1800 audit(1785859082.518:6): pid=6470 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.47" name="idProduct" dev="configfs" ino=13742 res=0 errno=0 [ 200.574316][ T37] audit: type=1800 audit(1785859082.838:7): pid=6473 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.47" name="UDC" dev="configfs" ino=13744 res=0 errno=0 [ 200.677668][ T5739] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 200.828451][ T5739] usb 9-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 200.828481][ T5739] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.866724][ T5739] ums-alauda 9-1:1.0: USB Mass Storage device detected [ 200.904040][ T6054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.904059][ T6054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.983925][ T5739] ums-alauda 9-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 200.983925][ T5739] Please send a copy of this message to and [ 201.014828][ T5739] scsi host1: usb-storage 9-1:1.0 [ 201.609589][ T5723] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 201.718566][ T6010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.718584][ T6010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.721089][ T5262] 8021q: adding VLAN 0 to HW filter on device eth11 [ 201.805509][ T5723] usb 7-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 201.805538][ T5723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.805556][ T5723] usb 7-1: Product: syz [ 201.805568][ T5723] usb 7-1: Manufacturer: syz [ 201.805576][ T5723] usb 7-1: SerialNumber: syz [ 202.012212][ T6509] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 202.170890][ T5986] scsi 1:0:0:0: Direct-Access Fujifilm DPC-R1 (Alauda) 0102 PQ: 0 ANSI: 0 CCS [ 202.195406][ T5986] scsi 1:0:0:1: Direct-Access Fujifilm DPC-R1 (Alauda) 0102 PQ: 0 ANSI: 0 CCS [ 202.381357][ T6505] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 202.609692][ T5986] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 202.942608][ T6054] sd 1:0:0:0: [sdb] Media removed, stopped polling [ 203.141216][ T201] usb 9-1: USB disconnect, device number 2 [ 203.395260][ T6522] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 203.530671][ T5965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.530690][ T5965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.965398][ T6001] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 204.079022][ T6001] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 204.079068][ T6001] sd 1:0:0:1: [sdc] Sense not available. [ 204.169265][ T6001] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 204.169295][ T6001] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 204.170847][ T6001] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 204.172579][ T6001] sd 1:0:0:1: [sdc] Asking for cache data failed [ 204.172694][ T6001] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 204.293175][ T5986] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 204.580241][ T6054] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 204.630363][ T6001] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 204.977010][ T6451] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 205.057682][ T6029] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.354729][ T5989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.354745][ T5989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.523347][ T6538] PM: suspend entry (deep) [ 206.140600][ T6010] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.141133][ T6010] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.232077][ T6029] Filesystems sync: 0.660 seconds [ 206.749286][ T37] audit: type=1800 audit(1785859089.148:8): pid=6550 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.55" name="idVendor" dev="configfs" ino=13263 res=0 errno=0 [ 206.749330][ T37] audit: type=1800 audit(1785859089.158:9): pid=6550 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.55" name="idProduct" dev="configfs" ino=13264 res=0 errno=0 [ 206.820584][ T37] audit: type=1800 audit(1785859089.218:10): pid=6550 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.55" name="UDC" dev="configfs" ino=13265 res=0 errno=0 [ 206.862459][ T6538] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 206.862564][ T6538] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 207.177483][ T6550] Config c/1 of g1 needs at least one function. [ 207.177621][ T6550] udc dummy_udc.0: failed to start g1: -22 [ 207.177643][ T6550] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 207.316840][ T5723] usb 7-1: USB disconnect, device number 2 [ 207.386398][ T6538] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 207.413824][ T6552] jffs2: notice: (6552) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 207.451668][ T6550] UDC core: g1: couldn't find an available UDC or it's busy [ 207.890397][ T6538] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 207.890563][ T6538] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 208.057400][ T5986] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.058173][ T6001] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.058358][ T6001] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.058528][ T6001] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.058716][ T6001] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.058852][ T6001] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.059402][ T6001] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.059575][ T6001] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.211305][ T6538] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 208.578039][ T1189] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.578216][ T1189] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.578407][ T1189] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.578799][ T1189] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.580056][ T6538] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 208.580194][ T6538] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 208.618768][ T1189] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.619722][ T1189] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.619870][ T1189] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.638570][ T1189] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.856118][ T5611] Bluetooth: hci5: command 0x0c1a tx timeout [ 208.960589][ T6538] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 209.092905][ T6578] Bluetooth: MGMT ver 1.23 [ 209.536486][ T6538] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 209.536582][ T6538] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 209.905736][ T5604] Bluetooth: hci6: command 0x0c1a tx timeout [ 210.087243][ T6538] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 210.346118][ T5870] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 210.630749][ T5604] Bluetooth: hci7: command 0x0c1a tx timeout [ 210.747592][ T6583] NFSD: Failed to start, no listeners configured. [ 210.765569][ T5870] usb 8-1: New USB device found, idVendor=3344, idProduct=1122, bcdDevice= 0.00 [ 210.768169][ T5870] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.768193][ T5870] usb 8-1: Manufacturer: LME2510C WARM [ 210.772678][ T6538] Freezing user space processes [ 210.944770][ T5604] Bluetooth: hci5: command 0x0c1a tx timeout [ 211.178275][ T5611] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 211.183060][ T5604] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.590907][ T5611] Bluetooth: hci8: command 0x0c1a tx timeout [ 211.994635][ T6002] hsr_slave_0: left promiscuous mode [ 211.995824][ T5611] Bluetooth: hci6: command 0x0c1a tx timeout [ 212.059391][ T6002] hsr_slave_1: left promiscuous mode [ 212.062947][ T6538] ------------[ cut here ]------------ [ 212.062958][ T6538] debug_locks && p->lockdep_depth [ 212.062974][ T6538] WARNING: kernel/freezer.c:139 at __set_task_frozen+0x260/0x340, CPU#0: syz.9.53/6538 [ 212.063027][ T6538] Modules linked in: [ 212.063052][ T6538] CPU: 0 UID: 0 PID: 6538 Comm: syz.9.53 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 212.063077][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.063090][ T6538] RIP: 0010:__set_task_frozen+0x260/0x340 [ 212.063120][ T6538] Code: 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 15 09 97 09 cc e8 ef 21 15 00 90 0f 0b 90 e9 f7 fe ff ff e8 e1 21 15 00 90 <0f> 0b 90 eb 93 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c c3 fd ff ff [ 212.063136][ T6538] RSP: 0018:ffffc90004a0f9f0 EFLAGS: 00010087 [ 212.063152][ T6538] RAX: ffffffff81b0b75f RBX: ffff8880407c8000 RCX: 0000000000080000 [ 212.063166][ T6538] RDX: ffffc90024ea9000 RSI: 0000000000066723 RDI: 0000000000066724 [ 212.063181][ T6538] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 212.063193][ T6538] R10: dffffc0000000000 R11: ffffffff81b0b500 R12: ffff8880407c8018 [ 212.063207][ T6538] R13: 1ffff110080f9003 R14: 0000000000000000 R15: ffff8880407c8c00 [ 212.063219][ T6538] FS: 00007effcd2766c0(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 212.063234][ T6538] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.063247][ T6538] CR2: 00007ffcc09def30 CR3: 0000000049b3c000 CR4: 00000000003526f0 [ 212.063265][ T6538] Call Trace: [ 212.063272][ T6538] [ 212.063282][ T6538] ? __pfx___set_task_frozen+0x10/0x10 [ 212.063313][ T6538] task_call_func+0x1aa/0x260 [ 212.063351][ T6538] freeze_task+0x216/0x390 [ 212.063379][ T6538] ? __pfx_rt_read_lock+0x10/0x10 [ 212.063410][ T6538] ? __pfx_freeze_task+0x10/0x10 [ 212.063436][ T6538] ? usleep_range_state+0x95/0x180 [ 212.063462][ T6538] ? usleep_range_state+0x13a/0x180 [ 212.063491][ T6538] try_to_freeze_tasks+0x190/0x620 [ 212.063526][ T6538] freeze_processes+0xce/0x1e0 [ 212.063552][ T6538] pm_suspend+0x2f1/0x760 [ 212.063576][ T6538] state_store+0x206/0x290 [ 212.063599][ T6538] ? __pfx_sysfs_kf_write+0x10/0x10 [ 212.063616][ T6538] kernfs_fop_write_iter+0x3a5/0x540 [ 212.063651][ T6538] vfs_write+0x61e/0xbb0 [ 212.063684][ T6538] ? __pfx_vfs_write+0x10/0x10 [ 212.063709][ T6538] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 212.063734][ T6538] ? lockdep_hardirqs_on+0x7a/0x110 [ 212.063763][ T6538] ? mutex_lock_nested+0x152/0x1d0 [ 212.063782][ T6538] ? fdget_pos+0x252/0x320 [ 212.063811][ T6538] ksys_write+0x156/0x270 [ 212.063845][ T6538] ? __pfx_ksys_write+0x10/0x10 [ 212.063878][ T6538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.063900][ T6538] do_syscall_64+0x174/0x580 [ 212.063927][ T6538] ? trace_irq_disable+0x3b/0x140 [ 212.063946][ T6538] ? clear_bhb_loop+0x40/0x90 [ 212.063967][ T6538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.063985][ T6538] RIP: 0033:0x7effcf01e019 [ 212.064012][ T6538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.064028][ T6538] RSP: 002b:00007effcd276028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 212.064047][ T6538] RAX: ffffffffffffffda RBX: 00007effcf2a5fa0 RCX: 00007effcf01e019 [ 212.064061][ T6538] RDX: 0000000000000003 RSI: 0000200000000140 RDI: 0000000000000004 [ 212.064073][ T6538] RBP: 00007effcf0b500c R08: 0000000000000000 R09: 0000000000000000 [ 212.064086][ T6538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.064097][ T6538] R13: 00007effcf2a6038 R14: 00007effcf2a5fa0 R15: 00007ffd308b1e88 [ 212.064127][ T6538] [ 212.064137][ T6538] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 212.064150][ T6538] CPU: 0 UID: 0 PID: 6538 Comm: syz.9.53 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 212.064172][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.064183][ T6538] Call Trace: [ 212.064190][ T6538] [ 212.064198][ T6538] vpanic+0x56c/0xa60 [ 212.064220][ T6538] ? __pfx__printk+0x10/0x10 [ 212.064245][ T6538] ? __pfx_vpanic+0x10/0x10 [ 212.064262][ T6538] ? is_bpf_text_address+0x292/0x2b0 [ 212.064284][ T6538] ? is_bpf_text_address+0x26/0x2b0 [ 212.064313][ T6538] panic+0xc5/0xd0 [ 212.064331][ T6538] ? __pfx_panic+0x10/0x10 [ 212.064364][ T6538] __warn+0x315/0x4c0 [ 212.064384][ T6538] ? __set_task_frozen+0x260/0x340 [ 212.064424][ T6538] ? __set_task_frozen+0x260/0x340 [ 212.064445][ T6538] __report_bug+0x276/0x570 [ 212.064470][ T6538] ? __set_task_frozen+0x260/0x340 [ 212.064497][ T6538] ? __pfx___report_bug+0x10/0x10 [ 212.064519][ T6538] ? __lock_acquire+0x683/0x2ce0 [ 212.064540][ T6538] ? __lock_acquire+0x683/0x2ce0 [ 212.064566][ T6538] ? __set_task_frozen+0x260/0x340 [ 212.064596][ T6538] report_bug+0x16a/0x220 [ 212.064622][ T6538] ? __set_task_frozen+0x260/0x340 [ 212.064650][ T6538] ? __set_task_frozen+0x262/0x340 [ 212.064678][ T6538] handle_bug+0x9c/0x200 [ 212.064709][ T6538] exc_invalid_op+0x1a/0x50 [ 212.064738][ T6538] asm_exc_invalid_op+0x1a/0x20 [ 212.064755][ T6538] RIP: 0010:__set_task_frozen+0x260/0x340 [ 212.064782][ T6538] Code: 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 15 09 97 09 cc e8 ef 21 15 00 90 0f 0b 90 e9 f7 fe ff ff e8 e1 21 15 00 90 <0f> 0b 90 eb 93 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c c3 fd ff ff [ 212.064798][ T6538] RSP: 0018:ffffc90004a0f9f0 EFLAGS: 00010087 [ 212.064815][ T6538] RAX: ffffffff81b0b75f RBX: ffff8880407c8000 RCX: 0000000000080000 [ 212.064830][ T6538] RDX: ffffc90024ea9000 RSI: 0000000000066723 RDI: 0000000000066724 [ 212.064843][ T6538] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 212.064855][ T6538] R10: dffffc0000000000 R11: ffffffff81b0b500 R12: ffff8880407c8018 [ 212.064871][ T6538] R13: 1ffff110080f9003 R14: 0000000000000000 R15: ffff8880407c8c00 [ 212.064889][ T6538] ? __pfx___set_task_frozen+0x10/0x10 [ 212.064919][ T6538] ? __set_task_frozen+0x25f/0x340 [ 212.064955][ T6538] ? __pfx___set_task_frozen+0x10/0x10 [ 212.064984][ T6538] task_call_func+0x1aa/0x260 [ 212.065023][ T6538] freeze_task+0x216/0x390 [ 212.065047][ T6538] ? __pfx_rt_read_lock+0x10/0x10 [ 212.065070][ T6538] ? __pfx_freeze_task+0x10/0x10 [ 212.065097][ T6538] ? usleep_range_state+0x95/0x180 [ 212.065123][ T6538] ? usleep_range_state+0x13a/0x180 [ 212.065152][ T6538] try_to_freeze_tasks+0x190/0x620 [ 212.065189][ T6538] freeze_processes+0xce/0x1e0 [ 212.065210][ T6538] pm_suspend+0x2f1/0x760 [ 212.065231][ T6538] state_store+0x206/0x290 [ 212.065253][ T6538] ? __pfx_sysfs_kf_write+0x10/0x10 [ 212.065270][ T6538] kernfs_fop_write_iter+0x3a5/0x540 [ 212.065303][ T6538] vfs_write+0x61e/0xbb0 [ 212.065330][ T6538] ? __pfx_vfs_write+0x10/0x10 [ 212.065350][ T6538] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 212.065369][ T6538] ? lockdep_hardirqs_on+0x7a/0x110 [ 212.065398][ T6538] ? mutex_lock_nested+0x152/0x1d0 [ 212.065412][ T6538] ? fdget_pos+0x252/0x320 [ 212.065435][ T6538] ksys_write+0x156/0x270 [ 212.065456][ T6538] ? __pfx_ksys_write+0x10/0x10 [ 212.065483][ T6538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.065499][ T6538] do_syscall_64+0x174/0x580 [ 212.065520][ T6538] ? trace_irq_disable+0x3b/0x140 [ 212.065536][ T6538] ? clear_bhb_loop+0x40/0x90 [ 212.065558][ T6538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.065575][ T6538] RIP: 0033:0x7effcf01e019 [ 212.065592][ T6538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.065603][ T6538] RSP: 002b:00007effcd276028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 212.065618][ T6538] RAX: ffffffffffffffda RBX: 00007effcf2a5fa0 RCX: 00007effcf01e019 [ 212.065630][ T6538] RDX: 0000000000000003 RSI: 0000200000000140 RDI: 0000000000000004 [ 212.065639][ T6538] RBP: 00007effcf0b500c R08: 0000000000000000 R09: 0000000000000000 [ 212.065648][ T6538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.065657][ T6538] R13: 00007effcf2a6038 R14: 00007effcf2a5fa0 R15: 00007ffd308b1e88 [ 212.065682][ T6538] [ 212.066352][ T6538] Kernel Offset: disabled