last executing test programs: 1m36.137616665s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1/nodeid\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000000000)="0200"/128, 0x80) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write(r3, &(0x7f0000000000)="060000000000000002000000040100000000000000000000666f6f00"/122, 0x78) (async) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/kernel/dlm/foo/event_done\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='0\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/dlm/foo/control\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='1\x00', 0x1) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/dlm_foo\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)="06000000000000000200000001010000030300008000000000000000000000000000000000000000000000000000000000000000000000007856341200000000000000000000000000000000000000007856341200000000000000000000000000000000000000000000000000000000000000000000000000000000666f6f", 0x7b) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/dlm_foo\x00', 0x2, 0x0) write(r7, &(0x7f0000000000)="06000000000000000200000001010000030300000040000000000000000000000000000000000000000000000000000000000000000000007856341200000000000000000000000000000000000000007856341200000000000000000000000000000000000000000000000000000000000000000000000000000000666f6f", 0x7b) 1m34.002559856s ago: executing program 1 (id=11): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001180)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x3e, 0x3, 0x18b1, 0x37, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000002af500000000000000000000000000000000000026f900"}}, 0x156) read(r0, &(0x7f0000001300)=""/4376, 0x1118) 1m29.996596491s ago: executing program 3 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='ep0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r4, &(0x7f0000000440)='3\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0) write(r5, &(0x7f00000004c0)='blk0\n', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0) write(r6, &(0x7f0000000540)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0/ep.1/ep_name\x00', 0x2, 0x0) write(r7, &(0x7f0000000640)='ep1\n', 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0) write(r8, &(0x7f00000006c0)='3\n', 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/name\x00', 0x2, 0x0) write(r9, &(0x7f0000000740)='blk1\n', 0x5) r10 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0) write(r10, &(0x7f00000007c0)='1\n', 0x2) symlinkat(&(0x7f0000000800)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r11 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r11, &(0x7f00000008c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1m29.689526945s ago: executing program 1 (id=15): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, "050c0a810115002501750195018102"}}, 0x127) read(r0, &(0x7f0000000200), 0x111c) 1m29.440619683s ago: executing program 0 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/netconsole\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/netconsole/parameters/netconsole\x00', 0x0, 0x0) 1m28.757092163s ago: executing program 3 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./lib\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lib/firmware\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./lib/firmware/htc_9271.fw\x00', 0x42, 0x1ff) 1m28.74359499s ago: executing program 0 (id=19): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00ff40240400950000000000010902270001010080fa0904000003ff00ff00070581020002000705020200020007058303100004"], 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0xa1, 0x4, "0000009e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000040)={0x1}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000400)={'\x00', &(0x7f0000000500)=@ethtool_wolinfo={0x6, 0x0, 0x1}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000400)={'\x00', &(0x7f0000000500)=@ethtool_wolinfo={0x6, 0x0, 0x1}}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000600)={'\x00', @ifru_flags=0x1}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000600)={'\x00', @ifru_flags=0x1}) nanosleep(&(0x7f0000000040)={0x1}, 0x0) 1m28.685827753s ago: executing program 1 (id=21): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_ep_read(r0, 0x2, 0x100, &(0x7f0000000500)=""/256) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000106)="0000ffffff0a00f6d7290000000000000003fd00") nanosleep(&(0x7f0000000400)={0x1}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) (async) syz_usb_ep_read(r0, 0x2, 0x100, &(0x7f0000000600)=""/256) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000206)="0000ffffff0300fdd72b00fe00") nanosleep(&(0x7f0000000400)={0x1}, 0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0) syz_usb_ep_read(r0, 0x2, 0x100, &(0x7f0000000700)=""/256) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000300)="0000ff00ff00") 1m28.527914218s ago: executing program 3 (id=22): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610000000000010902190001010080fa0904000001ff00000007050202000200"], &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="00001e0000004d61501d0000000000000000000050000000500000005000000050000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="00001e0000004d61501d0000000000000000000050000000500000005000000050000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="00001e0000004d61501d0000000000000000000050000000500000005000000050000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="00001e0000004d61501d0000000000000000000050000000500000005000000050000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="00001e0000004d61501d0000000000000000000050000000500000005000000050000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="00001e0000004d61501d0000000000000000000050000000500000005000000050000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="00001e0000004d61501d0000000000000000000050000000500000005000000050000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="00001e0000004d61501d0000000000000000000050000000500000005000000050000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r2 = syz_open_dev$dri(&(0x7f0000000400), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) r3 = syz_open_dev$dri(&(0x7f0000000400), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) 1m26.201096762s ago: executing program 0 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='md0\x00', 0x3) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/level\x00', 0x2, 0x0) 1m24.976158492s ago: executing program 0 (id=28): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001e14010000000000000000000900020073797a300000000008004100727865000a0033007665746830000000"]}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001e14010000000000000000000900020073797a310000000008004100727865000a0033007665746831000000"]}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10) listen(r1, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000500)={0x2, 0x0, @rand_addr=0xac141414}, 0x10) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10) 1m24.683432244s ago: executing program 3 (id=30): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca0401f00001010203010902270001010080fa0904000003ffffff00070501020002000705810200020007058602000200"], 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64) (async) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="01b3") (async) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64) (async) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="3001") (async) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1m24.311980547s ago: executing program 1 (id=31): syz_usb_connect(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040ba23000100010000000109026400020100803209040000000101000009240100011e0001010c2402010101000203000000092403020103000100090401000001020000090401010101020000072401010101000b2402010202100180bb0009050109c00001000007250100000000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[], [0x0, 0x20000]], '\x00', [], '\x00', 0xffffffff}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000400)={0x0, &(0x7f0000000500)='\x00'/16, 0x10}) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 1m24.104907445s ago: executing program 0 (id=32): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, &(0x7f0000000540)) 1m22.662444767s ago: executing program 0 (id=33): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{}, {0x2}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='disk', 0x4) 1m21.877020234s ago: executing program 2 (id=35): openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) 1m21.790906917s ago: executing program 1 (id=36): r0 = syz_usb_connect(0x0, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101403412785600000102030109023e0002010080fa0904000003e00101000705810240000107050202400000070583034000010904010002e00101000705840140000107050401400001"], 0x0) dup(r0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0x0, 0x1}, 0x6) write(r1, &(0x7f00000001c0)="f100040000", 0x5) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x400448ca, 0x0) bind$bt_hci(r2, &(0x7f0000000240), 0x6) write(r2, &(0x7f0000000280)="f100040000", 0x5) 1m21.183707494s ago: executing program 2 (id=37): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='2049\n\x00', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1\n\x00', 0x2) 1m20.569434261s ago: executing program 3 (id=38): openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0) 1m20.177932913s ago: executing program 2 (id=39): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./loop0\x00', 0x61b6, 0x700) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./loop0\x00', 0x2, 0x0) ioctl(r0, 0x4c00, &(0x7f0000000100)='\x00') 1m19.957295277s ago: executing program 3 (id=40): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_ep_read(r0, 0x2, 0x100, &(0x7f0000000500)=""/256) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000106)="0000ffffff0a00f6d7290000000000000003fd00") nanosleep(&(0x7f0000000400)={0x1}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) (async) syz_usb_ep_read(r0, 0x2, 0x100, &(0x7f0000000600)=""/256) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000206)="0000ffffff0300fdd72b00fe00") nanosleep(&(0x7f0000000400)={0x1}, 0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0) syz_usb_ep_read(r0, 0x2, 0x100, &(0x7f0000000700)=""/256) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000300)="0000ff00ff00") 1m19.75780046s ago: executing program 2 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='mem', 0x3) 1m19.373795653s ago: executing program 2 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/module/siw\x00', 0x2, 0x0) 1m19.18243322s ago: executing program 2 (id=43): syz_usb_connect(0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000408c0d030100010000000109026e0002010080320904000000010100000924010001280001010c24020101010002030000000a240602010101020200092403030103000200090401000001020000090401010101020000072401010101000b2402010202100180bb0009050109c00001000007250101000000"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x2, 0x0) ioctl(r0, 0xc4c85512, &(0x7f0000000300)="0000000003000000000000000000000049454339353820506c61796261636b204d61736b00"/72) 55.287502486s ago: executing program 32 (id=33): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{}, {0x2}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='disk', 0x4) 55.01510964s ago: executing program 33 (id=36): r0 = syz_usb_connect(0x0, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101403412785600000102030109023e0002010080fa0904000003e00101000705810240000107050202400000070583034000010904010002e00101000705840140000107050401400001"], 0x0) dup(r0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0x0, 0x1}, 0x6) write(r1, &(0x7f00000001c0)="f100040000", 0x5) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x400448ca, 0x0) bind$bt_hci(r2, &(0x7f0000000240), 0x6) write(r2, &(0x7f0000000280)="f100040000", 0x5) 54.876487793s ago: executing program 34 (id=43): syz_usb_connect(0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000408c0d030100010000000109026e0002010080320904000000010100000924010001280001010c24020101010002030000000a240602010101020200092403030103000200090401000001020000090401010101020000072401010101000b2402010202100180bb0009050109c00001000007250101000000"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x2, 0x0) ioctl(r0, 0xc4c85512, &(0x7f0000000300)="0000000003000000000000000000000049454339353820506c61796261636b204d61736b00"/72) 54.710162876s ago: executing program 35 (id=40): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_ep_read(r0, 0x2, 0x100, &(0x7f0000000500)=""/256) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000106)="0000ffffff0a00f6d7290000000000000003fd00") nanosleep(&(0x7f0000000400)={0x1}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) (async) syz_usb_ep_read(r0, 0x2, 0x100, &(0x7f0000000600)=""/256) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000206)="0000ffffff0300fdd72b00fe00") nanosleep(&(0x7f0000000400)={0x1}, 0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0) syz_usb_ep_read(r0, 0x2, 0x100, &(0x7f0000000700)=""/256) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000300)="0000ff00ff00") 9.67728312s ago: executing program 6 (id=46): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402505a0a40000000000010902240001010080fa0904000002ff000000090581020002000000090502020002000000"], 0x0) nanosleep(&(0x7f0000000400)={0x2}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2) 6.302954975s ago: executing program 4 (id=51): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices\x00', 0x0, 0x0) 6.301329104s ago: executing program 5 (id=52): r0 = socket$nl_route(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000000)="4400000030000504000000000000000000000000300001802c0001800900010067617465000000001c00028018000200"/68, 0x44, 0x0, 0x0, 0x0) 5.982010244s ago: executing program 4 (id=53): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, [{0xdd, 0x7, "0050f202010100"}]}, 0x3f) nanosleep(&(0x7f0000000380)={0x0, 0x2faf080}, &(0x7f0000000390)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000380)={0x0, 0x2faf080}, &(0x7f0000000390)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 5.707567296s ago: executing program 5 (id=54): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x23, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) 5.707228142s ago: executing program 6 (id=55): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff) 5.18923728s ago: executing program 5 (id=58): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) mmap(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x11, r0, 0x0) 5.036212157s ago: executing program 7 (id=59): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000044)=0x1) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x40) write$ppp(r1, &(0x7f0000000200)="150329", 0x3) ioctl(r1, 0x4010744d, &(0x7f0000000180)="00020000007f00000300000000000000") r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000300)={0x11, 0x3, 0x1}, 0x14) sendto$packet(r3, &(0x7f0000000400)="000000000000000000000000886411000001000980fd02010007150329", 0x1d, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000500)="000000000000000000000000886411000001000600fd00000000", 0x1a, 0x0, 0x0, 0x0) 3.814416586s ago: executing program 4 (id=60): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000040)=@urb_type_control={0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.422654746s ago: executing program 5 (id=61): syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004082057d0000000000000109026800030100c0000904000000010100000904000101010200000b2402010203180144ac00070501010002010904010000010100000904010101010200000b2402010203180144ac00070582010002010904020002010300000705030200020007058402000200"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000400), 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000500), 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000600), 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000700), 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000800), 0x3, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000900), 0x3, 0x0) 3.281418178s ago: executing program 4 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='proc\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000000)='600\x00', 0x3, 0x0) pwrite64(r0, &(0x7f0000000000)='0\x00', 0x1, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) 2.302725922s ago: executing program 7 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='invalid\n', 0x8) 1.886622723s ago: executing program 7 (id=64): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0x1, 0x3, 0x0, 0x3, 0x3e, 0x1, 0x100, 0x40, 0x200, 0x0, 0x40, 0x38, 0x1, 0x40, 0x2, 0x1}, [{0x1, 0x0, 0x0, 0x10000, 0x150, 0x10, 0x7ffffffffffff000}], '\x00'/4096, ['\x00', '\x00', '\x00']}, 0x1378) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000001000), &(0x7f0000001100), 0x0) 1.232996273s ago: executing program 7 (id=65): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) 913.402ms ago: executing program 4 (id=66): syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0x4}, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="5400000012000100"/24, 0x18) 702.528331ms ago: executing program 5 (id=67): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='ep0\n', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0) 525.447319ms ago: executing program 7 (id=68): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='freeze\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) 289.904622ms ago: executing program 4 (id=69): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, &(0x7f0000000100)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='disk\n', 0x5) 206.709039ms ago: executing program 5 (id=70): r0 = syz_usb_connect(0x2, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x2, 0x5f5e100}, 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000240)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000140)="910100"/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000280)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000180)="840100"/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f00000002c0)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f00000001c0)="880100"/64) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/1-1:1.0/downstream_rate\x00', 0x0, 0x0) read(r1, &(0x7f0000000700)=""/256, 0x100) 0s ago: executing program 7 (id=71): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401e041c400000000000010902240001010080fa0904000001ffffff00090581010004010000"], 0x0) nanosleep(&(0x7f0000000040)={0x1}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000000c0)=0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.105' (ED25519) to the list of known hosts. [ 76.696876][ T5579] cgroup: Unknown subsys name 'net' [ 76.959577][ T5579] cgroup: Unknown subsys name 'cpuset' [ 77.023689][ T5579] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.678500][ T5579] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.528639][ T5597] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.559245][ T5600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.562154][ T5600] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.572843][ T5600] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.578270][ T5600] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.579635][ T5600] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.581386][ T5600] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.582091][ T5600] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.634273][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.655902][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.665720][ T5605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.672554][ T5605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.701914][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.702726][ T5607] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.710973][ T4907] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.714646][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.746112][ T5602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.751965][ T5602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.767872][ T5602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.772780][ T5602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.742618][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.743853][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.744118][ T5591] bridge_slave_0: entered allmulticast mode [ 84.747481][ T5591] bridge_slave_0: entered promiscuous mode [ 84.754728][ T5600] Bluetooth: hci2: command tx timeout [ 84.754734][ T5602] Bluetooth: hci0: command tx timeout [ 84.785877][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.786046][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.786204][ T5590] bridge_slave_0: entered allmulticast mode [ 84.788071][ T5590] bridge_slave_0: entered promiscuous mode [ 84.814283][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.814485][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.814687][ T5591] bridge_slave_1: entered allmulticast mode [ 84.833225][ T5600] Bluetooth: hci3: command tx timeout [ 84.843149][ T5600] Bluetooth: hci1: command tx timeout [ 84.855167][ T5591] bridge_slave_1: entered promiscuous mode [ 84.872919][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.873581][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.873831][ T5590] bridge_slave_1: entered allmulticast mode [ 84.878046][ T5590] bridge_slave_1: entered promiscuous mode [ 84.966994][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.967166][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.967310][ T5592] bridge_slave_0: entered allmulticast mode [ 84.969336][ T5592] bridge_slave_0: entered promiscuous mode [ 85.017649][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.018242][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.018600][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.018853][ T5592] bridge_slave_1: entered allmulticast mode [ 85.021161][ T5592] bridge_slave_1: entered promiscuous mode [ 85.031041][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.064166][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.088571][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.088968][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.089185][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.089332][ T5593] bridge_slave_0: entered allmulticast mode [ 85.091204][ T5593] bridge_slave_0: entered promiscuous mode [ 85.150620][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.150811][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.150995][ T5593] bridge_slave_1: entered allmulticast mode [ 85.153922][ T5593] bridge_slave_1: entered promiscuous mode [ 85.187978][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.355887][ T5591] team0: Port device team_slave_0 added [ 85.359337][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.362228][ T5590] team0: Port device team_slave_0 added [ 85.410066][ T5591] team0: Port device team_slave_1 added [ 85.412413][ T5590] team0: Port device team_slave_1 added [ 85.426902][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.482892][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.489313][ T5592] team0: Port device team_slave_0 added [ 85.522824][ T5592] team0: Port device team_slave_1 added [ 85.540521][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.540536][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.540550][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.545844][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.545860][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.545884][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.641901][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.641917][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.641942][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.650288][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.650304][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.650328][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.679070][ T5593] team0: Port device team_slave_0 added [ 85.714243][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.714259][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.714283][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.720243][ T5593] team0: Port device team_slave_1 added [ 85.740554][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.740569][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.740594][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.860325][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.860336][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.860349][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.926937][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.926952][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.926977][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.951001][ T5590] hsr_slave_0: entered promiscuous mode [ 85.953795][ T5590] hsr_slave_1: entered promiscuous mode [ 85.976298][ T5591] hsr_slave_0: entered promiscuous mode [ 85.978486][ T5591] hsr_slave_1: entered promiscuous mode [ 85.980439][ T5591] debugfs: 'hsr0' already exists in 'hsr' [ 85.980558][ T5591] Cannot create hsr debugfs directory [ 86.060982][ T5592] hsr_slave_0: entered promiscuous mode [ 86.062224][ T5592] hsr_slave_1: entered promiscuous mode [ 86.063980][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 86.064002][ T5592] Cannot create hsr debugfs directory [ 86.199234][ T5593] hsr_slave_0: entered promiscuous mode [ 86.200564][ T5593] hsr_slave_1: entered promiscuous mode [ 86.201572][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 86.201594][ T5593] Cannot create hsr debugfs directory [ 86.833234][ T5600] Bluetooth: hci2: command tx timeout [ 86.834829][ T5600] Bluetooth: hci0: command tx timeout [ 86.864236][ T32] cfg80211: failed to load regulatory.db [ 86.913247][ T5602] Bluetooth: hci3: command tx timeout [ 86.913336][ T5600] Bluetooth: hci1: command tx timeout [ 87.265555][ T5590] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.297302][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.314661][ T5590] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.357230][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.371626][ T5590] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.398191][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.423947][ T5590] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.464749][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.615279][ T5592] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.659546][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.668473][ T5592] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.705352][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.710565][ T5592] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.747640][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.769900][ T5592] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.807026][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.964293][ T5593] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.991418][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.005589][ T5593] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.030871][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.040917][ T5593] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.071855][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.098717][ T5593] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.138010][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.269680][ T5591] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.299171][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.309311][ T5591] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.351527][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.364207][ T5591] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.409363][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.423446][ T5591] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.474444][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.520604][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.614768][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.672703][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.672877][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.715728][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.741401][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.741510][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.828629][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.872634][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.872783][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.913330][ T5602] Bluetooth: hci2: command tx timeout [ 88.913418][ T5600] Bluetooth: hci0: command tx timeout [ 88.919142][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.929048][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.929271][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.996414][ T5602] Bluetooth: hci3: command tx timeout [ 88.996502][ T5600] Bluetooth: hci1: command tx timeout [ 89.079146][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.164893][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.196365][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.196496][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.271058][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.272085][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.411491][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.454443][ T1475] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.454661][ T1475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.565658][ T1475] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.565888][ T1475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.331543][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.511536][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.849312][ T5590] veth0_vlan: entered promiscuous mode [ 90.930448][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.932012][ T5592] veth0_vlan: entered promiscuous mode [ 90.971989][ T5590] veth1_vlan: entered promiscuous mode [ 90.994345][ T5602] Bluetooth: hci2: command tx timeout [ 90.994392][ T5600] Bluetooth: hci0: command tx timeout [ 91.046575][ T5592] veth1_vlan: entered promiscuous mode [ 91.073366][ T5602] Bluetooth: hci3: command tx timeout [ 91.073419][ T5600] Bluetooth: hci1: command tx timeout [ 91.159352][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.209442][ T5590] veth0_macvtap: entered promiscuous mode [ 91.244198][ T5590] veth1_macvtap: entered promiscuous mode [ 91.260879][ T5592] veth0_macvtap: entered promiscuous mode [ 91.262995][ T5593] veth0_vlan: entered promiscuous mode [ 91.302920][ T5592] veth1_macvtap: entered promiscuous mode [ 91.368019][ T5593] veth1_vlan: entered promiscuous mode [ 91.379651][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.416615][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.446598][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.478633][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.489906][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.514490][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.534399][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.535845][ T5591] veth0_vlan: entered promiscuous mode [ 91.540827][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.573938][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.584976][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.647653][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.657733][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.736900][ T5591] veth1_vlan: entered promiscuous mode [ 91.847457][ T5593] veth0_macvtap: entered promiscuous mode [ 92.137737][ T5593] veth1_macvtap: entered promiscuous mode [ 92.347701][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.347726][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.401519][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.438813][ T1475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.438831][ T1475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.464795][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.475322][ T5591] veth0_macvtap: entered promiscuous mode [ 92.517045][ T5591] veth1_macvtap: entered promiscuous mode [ 92.524776][ T1475] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.548524][ T1475] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.552868][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.552887][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.564400][ T1475] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.588861][ T1475] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.743921][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.743941][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.901020][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.020671][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.199033][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.215057][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.235092][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.261081][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.466518][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.466538][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.874591][ T38] audit: type=1800 audit(1785861190.473:2): pid=5750 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.3" name="idProduct" dev="configfs" ino=8277 res=0 errno=0 [ 93.874639][ T38] audit: type=1800 audit(1785861190.533:3): pid=5748 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.3" name="idVendor" dev="configfs" ino=8275 res=0 errno=0 [ 94.181637][ T1475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.181657][ T1475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.242931][ T38] audit: type=1800 audit(1785861190.933:4): pid=5748 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.3" name="UDC" dev="configfs" ino=8330 res=0 errno=0 [ 94.488502][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.488521][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.231010][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.231029][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.677366][ T5702] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.168700][ T5701] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.187450][ T5702] usb 1-1: Dual-Role OTG device on HNP port [ 96.187801][ T5702] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 96.187824][ T5702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.458387][ T5701] usb 3-1: New USB device found, idVendor=2040, idProduct=4200, bcdDevice= 1.00 [ 96.458415][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.692323][ T5768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.792257][ T5768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.006426][ T5768] digital: digital_start_poll: Unknown protocol [ 97.052227][ T5702] gspca_main: spca501-2.14.0 probing 0000:0000 [ 97.081142][ T5702] gspca_spca501: reg write: error -32 [ 97.081159][ T5702] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 97.081250][ T5702] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 97.095563][ T5701] em28xx 3-1:1.0: New device @ 480 Mbps (2040:4200, interface 0, class 0) [ 97.095599][ T5701] em28xx 3-1:1.0: Video interface 0 found: bulk [ 97.754023][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.833877][ T5701] em28xx 3-1:1.0: unknown em28xx chip ID (0) [ 98.184654][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 98.184683][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.184701][ T9] usb 4-1: Product: syz [ 98.184715][ T9] usb 4-1: Manufacturer: syz [ 98.184728][ T9] usb 4-1: SerialNumber: syz [ 99.322939][ T5701] em28xx 3-1:1.0: reading from i2c device at 0xa0 failed (error=-5) [ 99.322986][ T5701] em28xx 3-1:1.0: board has no eeprom [ 99.873114][ T5701] em28xx 3-1:1.0: Identified as Hauppauge WinTV USB 2 (card=4) [ 99.873141][ T5701] em28xx 3-1:1.0: analog set to bulk mode. [ 100.006176][ T5694] em28xx 3-1:1.0: Registering V4L2 extension [ 100.376635][ T5694] em28xx 3-1:1.0: reading from i2c device at 0x80 failed (error=-5) [ 100.378381][ T5694] em28xx 3-1:1.0: reading from i2c device at 0x88 failed (error=-5) [ 100.613661][ T5782] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 100.613698][ T5782] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 100.613736][ T5782] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 100.749261][ T5782] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 100.864641][ T5694] em28xx 3-1:1.0: reading from i2c device at 0xb8 failed (error=-5) [ 100.866425][ T5694] em28xx 3-1:1.0: reading from i2c device at 0xba failed (error=-5) [ 100.881344][ T5324] petalynx 0003:18B1:0037.0001: fixing up Petalynx Maxter Remote report descriptor [ 100.896613][ T5324] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 100.896657][ T5324] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 100.896682][ T5324] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 100.896707][ T5324] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 100.896732][ T5324] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 100.896755][ T5324] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 100.896779][ T5324] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 100.896803][ T5324] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 100.896827][ T5324] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 100.896851][ T5324] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 100.962577][ T5782] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 101.106521][ T5701] usb 3-1: USB disconnect, device number 2 [ 101.395966][ T5694] em28xx 3-1:1.0: reading from i2c device at 0x84 failed (error=-19) [ 101.396106][ T5694] em28xx 3-1:1.0: reading from i2c device at 0x86 failed (error=-19) [ 101.396210][ T5694] em28xx 3-1:1.0: reading from i2c device at 0x94 failed (error=-19) [ 101.396304][ T5694] em28xx 3-1:1.0: reading from i2c device at 0x96 failed (error=-19) [ 101.704320][ T5701] em28xx 3-1:1.0: Disconnecting em28xx [ 101.776269][ T5694] em28xx 3-1:1.0: Config register raw data: 0xffffffed [ 101.776293][ T5694] em28xx 3-1:1.0: AC97 chip type couldn't be determined [ 101.776306][ T5694] em28xx 3-1:1.0: No AC97 audio processor [ 101.776536][ T5694] em28xx 3-1:1.0: em28xx_v4l2_init: em28xx_write_reg - msp34xx(1) failed! error [-19] [ 101.777564][ T5694] em28xx 3-1:1.0: Registering input extension [ 101.794522][ C0] port100 4-1:1.0: NFC: Urb failure (status -71) [ 101.855153][ T9] port100 4-1:1.0: NFC: Could not get device firmware version [ 101.855173][ T9] port100 4-1:1.0: NFC: Sony NFC Port-100 Series attached (firmware v0.00) [ 101.890487][ T5324] petalynx 0003:18B1:0037.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 102.098606][ T5694] rc_core: IR keymap rc-hauppauge not found [ 102.098626][ T5694] Registered IR keymap rc-empty [ 102.340248][ T5803] fido_id[5803]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 102.427019][ T5694] rc rc0: Hauppauge WinTV USB 2 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/rc/rc0 [ 103.098986][ T5694] input: Hauppauge WinTV USB 2 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/rc/rc0/input5 [ 103.205826][ T38] audit: type=1800 audit(1785861199.903:5): pid=5808 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.3.14" name="idVendor" dev="configfs" ino=7565 res=0 errno=0 [ 103.238427][ T38] audit: type=1800 audit(1785861199.933:6): pid=5808 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.3.14" name="idProduct" dev="configfs" ino=7566 res=0 errno=0 [ 103.267628][ T38] audit: type=1800 audit(1785861199.933:7): pid=5808 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.3.14" name="process_ump" dev="configfs" ino=7567 res=0 errno=0 [ 103.297784][ T5694] em28xx 3-1:1.0: Input extension successfully initialized [ 103.299125][ T5701] em28xx 3-1:1.0: Closing input extension [ 103.317560][ T38] audit: type=1800 audit(1785861199.963:8): pid=5808 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.3.14" name="ep_name" dev="configfs" ino=7568 res=0 errno=0 [ 103.354567][ T38] audit: type=1800 audit(1785861200.053:9): pid=5808 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.3.14" name="direction" dev="configfs" ino=7569 res=0 errno=0 [ 103.357150][ T38] audit: type=1800 audit(1785861200.053:10): pid=5808 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.3.14" name="name" dev="configfs" ino=7570 res=0 errno=0 [ 103.358943][ T38] audit: type=1800 audit(1785861200.053:11): pid=5808 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.3.14" name="active" dev="configfs" ino=7571 res=0 errno=0 [ 103.476752][ T9] usb 4-1: USB disconnect, device number 2 [ 103.739075][ T38] audit: type=1800 audit(1785861200.433:12): pid=5808 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.3.14" name="UDC" dev="configfs" ino=7582 res=0 errno=0 [ 104.059572][ T5694] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 104.567961][ T5824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.645592][ T5824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.871643][ T5820] fido_id[5820]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 104.928927][ T5701] em28xx: Freeing device [ 105.124764][ T5694] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.335935][ T5694] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 105.335965][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.335984][ T5694] usb 2-1: Product: syz [ 105.335997][ T5694] usb 2-1: Manufacturer: syz [ 105.336010][ T5694] usb 2-1: SerialNumber: syz [ 105.508948][ T9] port100 4-1:1.0: NFC: Sony Port-100 NFC device disconnected [ 106.354506][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.546507][ T9] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 106.546596][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.093468][ T5851] digital: digital_start_poll: Unknown protocol [ 107.630468][ T38] audit: type=1800 audit(1785861204.323:13): pid=5860 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.26" name="idVendor" dev="configfs" ino=8488 res=0 errno=0 [ 107.634066][ T38] audit: type=1800 audit(1785861204.323:14): pid=5860 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.26" name="idProduct" dev="configfs" ino=8489 res=0 errno=0 [ 108.015619][ T5856] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 108.052815][ C1] port100 2-1:1.0: NFC: Urb failure (status -71) [ 108.056149][ T5694] port100 2-1:1.0: NFC: Could not get device firmware version [ 108.056170][ T5694] port100 2-1:1.0: NFC: Sony NFC Port-100 Series attached (firmware v0.00) [ 108.224088][ T5694] usb 2-1: USB disconnect, device number 2 [ 108.293673][ T5701] usb 4-1: USB disconnect, device number 3 [ 108.331903][ T5867] Zero length message leads to an empty skb [ 108.454074][ T5694] port100 2-1:1.0: NFC: Sony Port-100 NFC device disconnected [ 108.535196][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 108.719401][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 108.726550][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 108.800967][ T9] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 108.801055][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.801075][ T9] usb 3-1: Product: syz [ 108.801088][ T9] usb 3-1: Manufacturer: syz [ 108.801102][ T9] usb 3-1: SerialNumber: syz [ 108.933218][ T5701] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 109.087363][ T5701] usb 4-1: New USB device found, idVendor=04ca, idProduct=f001, bcdDevice= 1.00 [ 109.087393][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.087411][ T5701] usb 4-1: Product: syz [ 109.087425][ T5701] usb 4-1: Manufacturer: syz [ 109.087438][ T5701] usb 4-1: SerialNumber: syz [ 109.126739][ T5776] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.168634][ T5701] dvb-usb: found a 'LITE-ON USB2.0 DVB-T Tuner' in warm state. [ 109.246292][ T5877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.292789][ T5776] usb 2-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 109.292893][ T5776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.450912][ T5701] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 109.452933][ T5701] dvbdev: DVB: registering new adapter (LITE-ON USB2.0 DVB-T Tuner) [ 109.471213][ T5701] usb 4-1: media controller created [ 109.576352][ T5701] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.478939][ T5887] PM: hibernation: hibernation entry [ 110.811129][ T5776] usb 2-1: USB disconnect, device number 3 [ 110.832704][ T9] usb 3-1: 1:1: cannot set freq 44100 to ep 0x1 [ 110.900993][ T9] usb 3-1: 2:1: cannot set freq 44100 to ep 0x81 [ 111.099472][ T5889] PM: suspend entry (s2idle) [ 111.099487][ T5889] PM: suspend exit [ 111.321486][ T5887] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.347751][ T5887] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.265943][ T9] usb 3-1: USB disconnect, device number 3 [ 112.379672][ T5701] dvb-usb: bulk message failed: -71 (6/0) [ 112.396549][ T5701] dvb-usb: bulk message failed: -71 (6/0) [ 112.396679][ T5701] dvb-usb: no frontend was attached by 'LITE-ON USB2.0 DVB-T Tuner' [ 112.431665][ T5887] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.462229][ T5701] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 112.572844][ T5701] dvb-usb: schedule remote query interval to 150 msecs. [ 112.572870][ T5701] dvb-usb: LITE-ON USB2.0 DVB-T Tuner successfully initialized and connected. [ 112.645173][ T5887] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 112.645322][ T5887] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 112.673480][ T5600] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.687509][ T5701] usb 4-1: USB disconnect, device number 4 [ 112.724498][ T5694] dvb-usb: bulk message failed: -19 (1/0) [ 112.724546][ T5694] dvb-usb: error while querying for an remote control event. [ 112.774374][ T5887] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 113.320321][ T5887] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 113.320421][ T5887] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 113.491465][ T5887] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 113.743803][ T5776] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.750844][ T5887] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 113.750936][ T5887] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 113.891822][ T5887] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 113.905435][ T5776] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 113.905468][ T5776] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 113.908331][ T5776] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 113.908358][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.908375][ T5776] usb 2-1: Product: syz [ 113.908388][ T5776] usb 2-1: Manufacturer: syz [ 113.908402][ T5776] usb 2-1: SerialNumber: syz [ 114.008125][ T5892] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 114.008396][ T5892] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 114.202838][ T5776] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input7 [ 114.395789][ T5701] dvb-usb: LITE-ON USB2.0 DVB-T Tuner successfully deinitialized and disconnected. [ 114.754280][ T5600] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.017844][ T5701] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.247931][ T5701] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 115.247960][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.248030][ T5701] usb 4-1: Product: syz [ 115.248044][ T5701] usb 4-1: Manufacturer: syz [ 115.248058][ T5701] usb 4-1: SerialNumber: syz [ 115.393278][ T5600] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.579799][ T216] Filesystems sync: 1.401 seconds [ 115.757711][ T5776] usb 2-1: USB disconnect, device number 4 [ 115.784914][ T5918] udevd[5918]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 115.794125][ T5600] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.925220][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.926511][ T5887] Freezing user space processes [ 116.084065][ T5887] Freezing user space processes completed (elapsed 0.156 seconds) [ 116.089659][ T5887] OOM killer disabled. [ 116.177627][ T5887] Freezing remaining freezable tasks [ 116.834620][ T5600] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.473394][ T5600] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.874807][ T5600] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.563188][ T5600] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.953264][ T5600] Bluetooth: hci1: command 0x0c1a tx timeout [ 121.158658][ T9] usb 3-1: device descriptor read/all, error -110 [ 121.363200][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 121.503349][ T9] usb 3-1: device descriptor read/64, error -32 [ 121.617059][ T9] usb usb3-port1: attempt power cycle [ 121.989241][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 122.003515][ T9] usb 3-1: device descriptor read/8, error -32 [ 122.243207][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 122.263471][ T9] usb 3-1: device descriptor read/8, error -32 [ 122.374707][ T9] usb usb3-port1: unable to enumerate USB device [ 132.942868][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.947556][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.192235][ T5887] Freezing remaining freezable tasks failed after 20.014 seconds (0 tasks refusing to freeze, wq_busy=1): [ 136.192266][ T5887] Showing freezable workqueues that are still busy: [ 136.192350][ T5887] workqueue events_freezable: flags=0x104 [ 136.192405][ T5887] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=0 refcnt=2 [ 136.192453][ T5887] inactive: update_balloon_stats_func [ 136.192541][ T5887] workqueue usb_hub_wq: flags=0x104 [ 136.192549][ T5887] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 136.192568][ T5887] in-flight: 5701:hub_event for 23s hub_event [ 136.192711][ T5887] workqueue wg-kex-wg1: flags=0x6 [ 136.192718][ T5887] pwq 8: cpus=0-1 flags=0x4 nice=0 active=0 refcnt=2 [ 136.192735][ T5887] inactive: wg_packet_handshake_send_worker [ 136.192760][ T5887] workqueue wg-kex-wg1: flags=0x6 [ 136.192770][ T5887] pwq 8: cpus=0-1 flags=0x4 nice=0 active=0 refcnt=2 [ 136.192808][ T5887] inactive: wg_packet_handshake_send_worker [ 136.192883][ T5887] workqueue wg-kex-wg2: flags=0x6 [ 136.192890][ T5887] pwq 8: cpus=0-1 flags=0x4 nice=0 active=0 refcnt=2 [ 136.192906][ T5887] inactive: wg_packet_handshake_send_worker [ 136.192927][ T5887] workqueue wg-kex-wg2: flags=0x6 [ 136.192937][ T5887] pwq 8: cpus=0-1 flags=0x4 nice=0 active=0 refcnt=2 [ 136.192968][ T5887] inactive: wg_packet_handshake_send_worker [ 136.193357][ T5887] workqueue wg-kex-wg1: flags=0x6 [ 136.193372][ T5887] pwq 8: cpus=0-1 flags=0x4 nice=0 active=0 refcnt=2 [ 136.193402][ T5887] inactive: wg_packet_handshake_send_worker [ 136.193432][ T5887] workqueue wg-kex-wg2: flags=0x6 [ 136.213567][ T5887] pwq 8: cpus=0-1 flags=0x4 nice=0 active=0 refcnt=2 [ 136.213596][ T5887] inactive: wg_packet_handshake_send_worker [ 136.213627][ T5887] workqueue wg-kex-wg1: flags=0x6 [ 136.213637][ T5887] pwq 8: cpus=0-1 flags=0x4 nice=0 active=0 refcnt=2 [ 136.213675][ T5887] inactive: wg_packet_handshake_send_worker [ 136.241179][ T5887] workqueue wg-kex-wg2: flags=0x6 [ 136.241193][ T5887] pwq 8: cpus=0-1 flags=0x4 nice=0 active=0 refcnt=2 [ 136.241216][ T5887] inactive: wg_packet_handshake_send_worker [ 136.286208][ T5887] Restarting kernel threads ... [ 136.419602][ T5887] Done restarting kernel threads. [ 136.620053][ T5887] OOM killer enabled. [ 136.620067][ T5887] Restarting tasks: Starting [ 136.674632][ T5887] Restarting tasks: Done [ 137.338424][ T5887] PM: hibernation: hibernation exit [ 137.805146][ T5913] raw-gadget.2 gadget.2: failed to queue disconnect event [ 137.885290][ C1] port100 4-1:1.0: NFC: Urb failure (status -71) [ 137.956957][ T5701] port100 4-1:1.0: NFC: Could not get supported command types [ 138.103188][ T5701] usb 4-1: USB disconnect, device number 5 [ 139.759906][ T5597] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 139.780431][ T5597] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 139.789424][ T5597] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 139.911631][ T5605] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 139.936587][ T5605] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.947745][ T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 140.022178][ T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 140.024010][ T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 140.026761][ T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 140.031026][ T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 140.205568][ T5600] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 140.311968][ T5600] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 140.434874][ T5605] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 140.526588][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 140.561402][ T5600] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 140.573530][ T5600] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 140.596462][ T5600] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 140.626174][ T5602] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 140.680345][ T5600] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 140.681014][ T5600] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 142.609708][ T5602] Bluetooth: hci4: command tx timeout [ 142.617589][ T5597] Bluetooth: hci7: command tx timeout [ 142.993213][ T5597] Bluetooth: hci6: command tx timeout [ 142.993565][ T5597] Bluetooth: hci5: command tx timeout [ 143.264589][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.737456][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.100384][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.440790][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.673186][ T5602] Bluetooth: hci7: command tx timeout [ 144.673196][ T5597] Bluetooth: hci4: command tx timeout [ 145.080595][ T5602] Bluetooth: hci6: command tx timeout [ 145.084180][ T5602] Bluetooth: hci5: command tx timeout [ 145.594509][ T48] bridge_slave_1: left allmulticast mode [ 145.594696][ T48] bridge_slave_1: left promiscuous mode [ 145.604702][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.766452][ T48] bridge_slave_0: left allmulticast mode [ 145.766489][ T48] bridge_slave_0: left promiscuous mode [ 145.766727][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.753283][ T5597] Bluetooth: hci4: command tx timeout [ 146.760405][ T5602] Bluetooth: hci7: command tx timeout [ 146.884391][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.943963][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.966185][ T48] bond0 (unregistering): Released all slaves [ 147.154653][ T5602] Bluetooth: hci5: command tx timeout [ 147.154690][ T5602] Bluetooth: hci6: command tx timeout [ 148.833137][ T5602] Bluetooth: hci7: command tx timeout [ 148.833161][ T5597] Bluetooth: hci4: command tx timeout [ 149.234273][ T5597] Bluetooth: hci6: command tx timeout [ 149.234411][ T5597] Bluetooth: hci5: command tx timeout [ 149.273869][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.274135][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.274399][ T5933] bridge_slave_0: entered allmulticast mode [ 149.277415][ T5933] bridge_slave_0: entered promiscuous mode [ 149.280479][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.281704][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.281930][ T5932] bridge_slave_0: entered allmulticast mode [ 149.294102][ T5932] bridge_slave_0: entered promiscuous mode [ 149.347426][ T5253] 8021q: adding VLAN 0 to HW filter on device eth1 [ 149.364011][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.364624][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.364881][ T5933] bridge_slave_1: entered allmulticast mode [ 149.367637][ T5933] bridge_slave_1: entered promiscuous mode [ 149.449096][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.449471][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.496136][ T5932] bridge_slave_1: entered allmulticast mode [ 149.499190][ T5932] bridge_slave_1: entered promiscuous mode [ 149.702040][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.702515][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.702732][ T5931] bridge_slave_0: entered allmulticast mode [ 149.706736][ T5931] bridge_slave_0: entered promiscuous mode [ 149.717138][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.752492][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.903164][ T48] hsr_slave_0: left promiscuous mode [ 149.923357][ T48] hsr_slave_1: left promiscuous mode [ 149.925309][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.925472][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.970549][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.970575][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.068493][ T48] veth1_macvtap: left promiscuous mode [ 150.068737][ T48] veth0_macvtap: left promiscuous mode [ 150.069006][ T48] veth1_vlan: left promiscuous mode [ 150.069299][ T48] veth0_vlan: left promiscuous mode [ 151.035366][ T48] team0 (unregistering): Port device team_slave_1 removed [ 151.064874][ T48] team0 (unregistering): Port device team_slave_0 removed [ 151.512323][ T90] smbdirect: ib_dev[syz1] removed [ 151.529959][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.530306][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.530624][ T5931] bridge_slave_1: entered allmulticast mode [ 151.620359][ T5931] bridge_slave_1: entered promiscuous mode [ 151.700451][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.731578][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.763421][ T5324] syz1: Port: 1 Link DOWN [ 151.844344][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.844617][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.844872][ T5930] bridge_slave_0: entered allmulticast mode [ 151.847929][ T5930] bridge_slave_0: entered promiscuous mode [ 151.927885][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.928192][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.928460][ T5930] bridge_slave_1: entered allmulticast mode [ 151.931459][ T5930] bridge_slave_1: entered promiscuous mode [ 152.039657][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.045559][ T5933] team0: Port device team_slave_0 added [ 152.050835][ T5932] team0: Port device team_slave_0 added [ 152.087789][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.091571][ T5933] team0: Port device team_slave_1 added [ 152.098402][ T5932] team0: Port device team_slave_1 added [ 152.152162][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.262707][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.444815][ T5931] team0: Port device team_slave_0 added [ 152.448435][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.448451][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.448476][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.589942][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.589958][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.589982][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.643437][ T5931] team0: Port device team_slave_1 added [ 152.650912][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.650928][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.650968][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.657327][ T5930] team0: Port device team_slave_0 added [ 152.660507][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.660521][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.660545][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.801263][ T5930] team0: Port device team_slave_1 added [ 153.435517][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.435529][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.435547][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.440552][ T5253] 8021q: adding VLAN 0 to HW filter on device eth2 [ 153.494137][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.494148][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.494162][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.516908][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.516925][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.516949][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.609932][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.609948][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.609973][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.668400][ T5933] hsr_slave_0: entered promiscuous mode [ 153.670252][ T5933] hsr_slave_1: entered promiscuous mode [ 153.671843][ T5933] debugfs: 'hsr0' already exists in 'hsr' [ 153.671867][ T5933] Cannot create hsr debugfs directory [ 153.747448][ T5932] hsr_slave_0: entered promiscuous mode [ 153.749339][ T5932] hsr_slave_1: entered promiscuous mode [ 153.750879][ T5932] debugfs: 'hsr0' already exists in 'hsr' [ 153.750902][ T5932] Cannot create hsr debugfs directory [ 153.921426][ T5931] hsr_slave_0: entered promiscuous mode [ 153.929062][ T5931] hsr_slave_1: entered promiscuous mode [ 153.930555][ T5931] debugfs: 'hsr0' already exists in 'hsr' [ 153.930577][ T5931] Cannot create hsr debugfs directory [ 154.148754][ T5930] hsr_slave_0: entered promiscuous mode [ 154.150799][ T5930] hsr_slave_1: entered promiscuous mode [ 154.152316][ T5930] debugfs: 'hsr0' already exists in 'hsr' [ 154.152345][ T5930] Cannot create hsr debugfs directory [ 154.369488][ T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.977881][ T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.510380][ T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.627866][ T5253] 8021q: adding VLAN 0 to HW filter on device eth3 [ 155.899362][ T48] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.099318][ T5933] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 157.189118][ T5933] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 157.220459][ T5933] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 157.305090][ T5933] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 157.373561][ T5253] 8021q: adding VLAN 0 to HW filter on device eth4 [ 157.373937][ T5933] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 157.404871][ T5933] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 157.525900][ T5933] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 157.568091][ T5933] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 157.889479][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.411527][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.534546][ T5930] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 158.640909][ T5930] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 158.645844][ T5930] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 158.701120][ T5930] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 158.711205][ T5930] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 158.750838][ T5930] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 159.020404][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.057394][ T5930] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 159.099912][ T5930] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 159.187578][ T5253] 8021q: adding VLAN 0 to HW filter on device eth5 [ 159.511871][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.761125][ T5932] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 159.790998][ T5932] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 159.813518][ T5932] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 159.849398][ T5932] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 159.880082][ T5932] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 159.918465][ T5932] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 160.048057][ T5932] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 160.093611][ T5932] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 160.819811][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.062995][ T5931] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 161.111915][ T5931] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 161.148861][ T5931] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 161.181470][ T5931] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 161.436570][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.497267][ T5931] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 161.520725][ T5931] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 161.535006][ T5253] 8021q: adding VLAN 0 to HW filter on device eth6 [ 161.536092][ T5931] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 161.589374][ T5931] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 161.811934][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.851818][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.949201][ T90] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.949375][ T90] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.178184][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.252150][ T1475] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.252385][ T1475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.410206][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.710760][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.258853][ T5930] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.267366][ T5253] 8021q: adding VLAN 0 to HW filter on device eth7 [ 163.457581][ T90] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.458639][ T90] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.560058][ T1447] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.560939][ T1447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.605712][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.089947][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.246699][ T48] bridge_slave_1: left allmulticast mode [ 164.246723][ T48] bridge_slave_1: left promiscuous mode [ 164.246991][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.384171][ T48] bridge_slave_0: left allmulticast mode [ 164.384205][ T48] bridge_slave_0: left promiscuous mode [ 164.384470][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.633959][ T48] bridge_slave_1: left allmulticast mode [ 164.633983][ T48] bridge_slave_1: left promiscuous mode [ 164.638506][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.739583][ T48] bridge_slave_0: left allmulticast mode [ 164.739617][ T48] bridge_slave_0: left promiscuous mode [ 164.739837][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.987316][ T48] bridge_slave_1: left allmulticast mode [ 164.987339][ T48] bridge_slave_1: left promiscuous mode [ 164.988835][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.094439][ T48] bridge_slave_0: left allmulticast mode [ 165.094484][ T48] bridge_slave_0: left promiscuous mode [ 165.094719][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.155971][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.214041][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.264938][ T48] bond0 (unregistering): Released all slaves [ 166.855891][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.903978][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.946165][ T48] bond0 (unregistering): Released all slaves [ 167.625327][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.684951][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.705998][ T48] bond0 (unregistering): Released all slaves [ 167.804309][ T216] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.804459][ T216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.834492][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.949564][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.949851][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.351178][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.539889][ T90] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.540058][ T90] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.646966][ T1475] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.672900][ T1475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.561483][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.776231][ T5253] 8021q: adding VLAN 0 to HW filter on device eth8 [ 171.235255][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.030989][ T5253] 8021q: adding VLAN 0 to HW filter on device eth9 [ 172.287846][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.698698][ T5933] veth0_vlan: entered promiscuous mode [ 172.746215][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.926306][ T5933] veth1_vlan: entered promiscuous mode [ 173.705125][ T5930] veth0_vlan: entered promiscuous mode [ 173.903557][ T48] hsr_slave_0: left promiscuous mode [ 173.944594][ T48] hsr_slave_1: left promiscuous mode [ 173.956407][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.956436][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.987598][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.987675][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.203235][ T48] hsr_slave_0: left promiscuous mode [ 174.243235][ T48] hsr_slave_1: left promiscuous mode [ 174.244955][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.244985][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.285644][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.285675][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.443303][ T48] hsr_slave_0: left promiscuous mode [ 174.464574][ T48] hsr_slave_1: left promiscuous mode [ 174.466098][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.466119][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.504249][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.504276][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.631760][ T48] veth1_macvtap: left promiscuous mode [ 174.631856][ T48] veth0_macvtap: left promiscuous mode [ 174.632098][ T48] veth1_vlan: left promiscuous mode [ 174.632266][ T48] veth0_vlan: left promiscuous mode [ 174.753552][ T48] veth1_macvtap: left promiscuous mode [ 174.753648][ T48] veth0_macvtap: left promiscuous mode [ 174.762517][ T48] veth1_vlan: left promiscuous mode [ 174.762735][ T48] veth0_vlan: left promiscuous mode [ 174.883600][ T48] veth1_macvtap: left promiscuous mode [ 174.883700][ T48] veth0_macvtap: left promiscuous mode [ 174.883947][ T48] veth1_vlan: left promiscuous mode [ 174.884119][ T48] veth0_vlan: left promiscuous mode [ 176.083818][ T48] team0 (unregistering): Port device team_slave_1 removed [ 176.126337][ T48] team0 (unregistering): Port device team_slave_0 removed [ 176.883762][ T48] team0 (unregistering): Port device team_slave_1 removed [ 176.923980][ T48] team0 (unregistering): Port device team_slave_0 removed [ 177.633889][ T48] team0 (unregistering): Port device team_slave_1 removed [ 177.673928][ T48] team0 (unregistering): Port device team_slave_0 removed [ 177.932222][ T5253] 8021q: adding VLAN 0 to HW filter on device eth10 [ 178.040465][ T5933] veth0_macvtap: entered promiscuous mode [ 178.083722][ T5930] veth1_vlan: entered promiscuous mode [ 178.127689][ T5933] veth1_macvtap: entered promiscuous mode [ 178.203634][ T5932] veth0_vlan: entered promiscuous mode [ 178.339441][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.368828][ T5932] veth1_vlan: entered promiscuous mode [ 178.444902][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.454012][ T5931] veth0_vlan: entered promiscuous mode [ 178.689042][ T154] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.700463][ T154] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.780011][ T5930] veth0_macvtap: entered promiscuous mode [ 178.830458][ T154] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.842329][ T5931] veth1_vlan: entered promiscuous mode [ 178.910534][ T154] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.949191][ T5930] veth1_macvtap: entered promiscuous mode [ 179.260102][ T5253] 8021q: adding VLAN 0 to HW filter on device eth11 [ 179.584758][ T5932] veth0_macvtap: entered promiscuous mode [ 179.846175][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.168437][ T5932] veth1_macvtap: entered promiscuous mode [ 180.290229][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.411323][ T1447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.411343][ T1447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.484795][ T69] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.506569][ T69] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.508323][ T5931] veth0_macvtap: entered promiscuous mode [ 180.546988][ T69] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.567936][ T69] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.617003][ T5931] veth1_macvtap: entered promiscuous mode [ 180.669632][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.824291][ T216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.824312][ T216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.986468][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.467206][ T216] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.500093][ T216] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.627201][ T216] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.679267][ T216] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.714339][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.069441][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.069462][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.223426][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.803715][ T1171] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.811896][ T5253] 8021q: adding VLAN 0 to HW filter on device eth12 [ 182.812822][ T1171] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.816008][ T1171] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.975701][ T154] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.806324][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.806341][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.973402][ T5766] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 184.157663][ T1475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.157683][ T1475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.184291][ T5766] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00 [ 184.184371][ T5766] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.309918][ T5766] usbtest 7-1:1.0: Linux gadget zero [ 184.309938][ T5766] usbtest 7-1:1.0: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 185.022521][ T1475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.022542][ T1475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.391237][ T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.391256][ T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.902374][ T1475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.902392][ T1475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.570387][ T5324] usb 7-1: USB disconnect, device number 2 [ 187.912295][ T6323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.992793][ T6323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.124987][ T6323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.106343][ T5324] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 190.263239][ T5253] 8021q: adding VLAN 0 to HW filter on device eth13 [ 190.295746][ T5324] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 190.295776][ T5324] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.258177][ T38] kauditd_printk_skb: 8 callbacks suppressed [ 192.258195][ T38] audit: type=1800 audit(1785861288.953:23): pid=6369 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.7.65" name="idVendor" dev="configfs" ino=12953 res=0 errno=0 [ 192.303594][ T38] audit: type=1800 audit(1785861288.993:24): pid=6370 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.7.65" name="idProduct" dev="configfs" ino=11525 res=0 errno=0 [ 192.329574][ T38] audit: type=1800 audit(1785861289.023:25): pid=6369 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.7.65" name="process_ump" dev="configfs" ino=12958 res=0 errno=0 [ 192.349437][ T38] audit: type=1800 audit(1785861289.043:26): pid=6369 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.7.65" name="ep_name" dev="configfs" ino=12959 res=0 errno=0 [ 192.525042][ T5602] Bluetooth: hci4: Malformed HCI Event [ 192.537353][ T38] audit: type=1800 audit(1785861289.233:27): pid=6375 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.5.67" name="idVendor" dev="configfs" ino=12962 res=0 errno=0 [ 192.560346][ T38] audit: type=1800 audit(1785861289.253:28): pid=6375 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.5.67" name="idProduct" dev="configfs" ino=12966 res=0 errno=0 [ 192.594526][ T38] audit: type=1800 audit(1785861289.283:29): pid=6375 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.5.67" name="process_ump" dev="configfs" ino=12971 res=0 errno=0 [ 192.608192][ T38] audit: type=1800 audit(1785861289.303:30): pid=6375 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.5.67" name="ep_name" dev="configfs" ino=12972 res=0 errno=0 [ 192.622601][ T38] audit: type=1800 audit(1785861289.313:31): pid=6375 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.5.67" name="direction" dev="configfs" ino=12973 res=0 errno=0 [ 192.636978][ T38] audit: type=1800 audit(1785861289.333:32): pid=6375 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.5.67" name="name" dev="configfs" ino=12974 res=0 errno=0 [ 192.952698][ T6382] PM: hibernation: hibernation entry [ 193.633648][ T5766] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 193.709130][ T6382] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 193.709313][ T6382] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 193.826244][ T6382] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 193.922318][ T6382] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 193.922454][ T6382] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 193.962861][ T5324] usb 6-1: USB disconnect, device number 2 [ 194.016332][ T6382] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 194.127558][ T6382] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 194.127694][ T6382] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 194.266526][ T6382] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 194.380405][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.380850][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.457832][ T6382] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 194.457964][ T6382] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 194.602764][ T6382] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 194.907712][ T5766] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 194.907751][ T5766] usb 8-1: can't read configurations, error -71 [ 195.109120][ T5253] 8021q: adding VLAN 0 to HW filter on device eth14 [ 195.223237][ T5324] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 195.278374][ T69] Filesystems sync: 0.595 seconds [ 195.285231][ T6382] Freezing [ 195.285231][ T6382] Freezing user space processes [ 195.289294][ T6382] ------------[ cut here ]------------ [ 195.289305][ T6382] debug_locks && p->lockdep_depth [ 195.289321][ T6382] WARNING: kernel/freezer.c:139 at __set_task_frozen+0x260/0x340, CPU#1: syz.4.69/6382 [ 195.289366][ T6382] Modules linked in: [ 195.289397][ T6382] CPU: 1 UID: 0 PID: 6382 Comm: syz.4.69 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 195.289420][ T6382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.289439][ T6382] RIP: 0010:__set_task_frozen+0x260/0x340 [ 195.289473][ T6382] Code: 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 55 96 a3 09 cc e8 5f 49 15 00 90 0f 0b 90 e9 f7 fe ff ff e8 51 49 15 00 90 <0f> 0b 90 eb 93 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c c3 fd ff ff [ 195.289489][ T6382] RSP: 0018:ffffc90004947a10 EFLAGS: 00010083 [ 195.289505][ T6382] RAX: ffffffff81b05a5f RBX: ffff888031ea0000 RCX: 0000000000080000 [ 195.289519][ T6382] RDX: ffffc9001a2fe000 RSI: 000000000001db7b RDI: 000000000001db7c [ 195.289532][ T6382] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 195.289543][ T6382] R10: dffffc0000000000 R11: ffffffff81b05800 R12: ffff888031ea0018 [ 195.289557][ T6382] R13: 1ffff110063d4003 R14: 0000000000000000 R15: ffff888031ea0c08 [ 195.289571][ T6382] FS: 00007efdf53d66c0(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 195.289588][ T6382] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.289602][ T6382] CR2: 000055ef8c851078 CR3: 000000002a6aa000 CR4: 00000000003526f0 [ 195.289619][ T6382] Call Trace: [ 195.289626][ T6382] [ 195.289636][ T6382] ? __pfx___set_task_frozen+0x10/0x10 [ 195.289665][ T6382] task_call_func+0x1aa/0x260 [ 195.289700][ T6382] freeze_task+0x216/0x390 [ 195.289727][ T6382] ? __pfx_rt_read_lock+0x10/0x10 [ 195.289755][ T6382] ? __pfx_freeze_task+0x10/0x10 [ 195.289782][ T6382] ? seqcount_lockdep_reader_access+0xea/0x100 [ 195.289814][ T6382] ? ktime_get_with_offset+0x27f/0x2d0 [ 195.289849][ T6382] try_to_freeze_tasks+0x190/0x620 [ 195.289893][ T6382] freeze_processes+0xce/0x1e0 [ 195.289919][ T6382] hibernate+0x247/0x680 [ 195.289947][ T6382] state_store+0x234/0x290 [ 195.289971][ T6382] ? __pfx_sysfs_kf_write+0x10/0x10 [ 195.289999][ T6382] kernfs_fop_write_iter+0x3a5/0x540 [ 195.290032][ T6382] vfs_write+0x61e/0xbb0 [ 195.290068][ T6382] ? __pfx_vfs_write+0x10/0x10 [ 195.290094][ T6382] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 195.290114][ T6382] ? lockdep_hardirqs_on+0x7a/0x110 [ 195.290136][ T6382] ? mutex_lock_nested+0x152/0x1d0 [ 195.290159][ T6382] ? fdget_pos+0x252/0x320 [ 195.290190][ T6382] ksys_write+0x156/0x270 [ 195.290217][ T6382] ? __pfx_ksys_write+0x10/0x10 [ 195.290253][ T6382] do_syscall_64+0x17b/0x530 [ 195.290273][ T6382] ? irqentry_exit+0x10f/0x8f0 [ 195.290291][ T6382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.290311][ T6382] ? clear_bhb_loop+0x40/0x90 [ 195.290335][ T6382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.290355][ T6382] RIP: 0033:0x7efdf717e019 [ 195.290381][ T6382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.290398][ T6382] RSP: 002b:00007efdf53d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 195.290417][ T6382] RAX: ffffffffffffffda RBX: 00007efdf7405fa0 RCX: 00007efdf717e019 [ 195.290431][ T6382] RDX: 0000000000000005 RSI: 0000200000000180 RDI: 0000000000000003 [ 195.290443][ T6382] RBP: 00007efdf721500c R08: 0000000000000000 R09: 0000000000000000 [ 195.290456][ T6382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.290467][ T6382] R13: 00007efdf7406038 R14: 00007efdf7405fa0 R15: 00007ffc9a21c7e8 [ 195.290502][ T6382] [ 195.290511][ T6382] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 195.290525][ T6382] CPU: 1 UID: 0 PID: 6382 Comm: syz.4.69 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 195.290547][ T6382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.290558][ T6382] Call Trace: [ 195.290566][ T6382] [ 195.290574][ T6382] vpanic+0x56c/0xa60 [ 195.290595][ T6382] ? __pfx__printk+0x10/0x10 [ 195.290619][ T6382] ? __pfx_vpanic+0x10/0x10 [ 195.290636][ T6382] ? is_bpf_text_address+0x292/0x2b0 [ 195.290659][ T6382] ? is_bpf_text_address+0x26/0x2b0 [ 195.290693][ T6382] panic+0xc5/0xd0 [ 195.290713][ T6382] ? __pfx_panic+0x10/0x10 [ 195.290752][ T6382] __warn+0x315/0x4c0 [ 195.290769][ T6382] ? __set_task_frozen+0x260/0x340 [ 195.290800][ T6382] ? __set_task_frozen+0x260/0x340 [ 195.290828][ T6382] __report_bug+0x276/0x570 [ 195.290854][ T6382] ? __set_task_frozen+0x260/0x340 [ 195.290891][ T6382] ? __pfx___report_bug+0x10/0x10 [ 195.290914][ T6382] ? __lock_acquire+0x6df/0x2e40 [ 195.290937][ T6382] ? __lock_acquire+0x6df/0x2e40 [ 195.290963][ T6382] ? __set_task_frozen+0x260/0x340 [ 195.290991][ T6382] report_bug+0x16a/0x220 [ 195.291013][ T6382] ? __set_task_frozen+0x260/0x340 [ 195.291039][ T6382] ? __set_task_frozen+0x262/0x340 [ 195.291065][ T6382] handle_bug+0x9c/0x200 [ 195.291089][ T6382] exc_invalid_op+0x1a/0x50 [ 195.291111][ T6382] asm_exc_invalid_op+0x1a/0x20 [ 195.291130][ T6382] RIP: 0010:__set_task_frozen+0x260/0x340 [ 195.291157][ T6382] Code: 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 55 96 a3 09 cc e8 5f 49 15 00 90 0f 0b 90 e9 f7 fe ff ff e8 51 49 15 00 90 <0f> 0b 90 eb 93 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c c3 fd ff ff [ 195.291172][ T6382] RSP: 0018:ffffc90004947a10 EFLAGS: 00010083 [ 195.291188][ T6382] RAX: ffffffff81b05a5f RBX: ffff888031ea0000 RCX: 0000000000080000 [ 195.291203][ T6382] RDX: ffffc9001a2fe000 RSI: 000000000001db7b RDI: 000000000001db7c [ 195.291216][ T6382] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 195.291227][ T6382] R10: dffffc0000000000 R11: ffffffff81b05800 R12: ffff888031ea0018 [ 195.291241][ T6382] R13: 1ffff110063d4003 R14: 0000000000000000 R15: ffff888031ea0c08 [ 195.291260][ T6382] ? __pfx___set_task_frozen+0x10/0x10 [ 195.291289][ T6382] ? __set_task_frozen+0x25f/0x340 [ 195.291328][ T6382] ? __pfx___set_task_frozen+0x10/0x10 [ 195.291356][ T6382] task_call_func+0x1aa/0x260 [ 195.291389][ T6382] freeze_task+0x216/0x390 [ 195.291416][ T6382] ? __pfx_rt_read_lock+0x10/0x10 [ 195.291443][ T6382] ? __pfx_freeze_task+0x10/0x10 [ 195.291470][ T6382] ? seqcount_lockdep_reader_access+0xea/0x100 [ 195.291501][ T6382] ? ktime_get_with_offset+0x27f/0x2d0 [ 195.291531][ T6382] try_to_freeze_tasks+0x190/0x620 [ 195.291564][ T6382] freeze_processes+0xce/0x1e0 [ 195.291589][ T6382] hibernate+0x247/0x680 [ 195.291616][ T6382] state_store+0x234/0x290 [ 195.291638][ T6382] ? __pfx_sysfs_kf_write+0x10/0x10 [ 195.291666][ T6382] kernfs_fop_write_iter+0x3a5/0x540 [ 195.291700][ T6382] vfs_write+0x61e/0xbb0 [ 195.291734][ T6382] ? __pfx_vfs_write+0x10/0x10 [ 195.291761][ T6382] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 195.291781][ T6382] ? lockdep_hardirqs_on+0x7a/0x110 [ 195.291804][ T6382] ? mutex_lock_nested+0x152/0x1d0 [ 195.291828][ T6382] ? fdget_pos+0x252/0x320 [ 195.291859][ T6382] ksys_write+0x156/0x270 [ 195.291892][ T6382] ? __pfx_ksys_write+0x10/0x10 [ 195.291927][ T6382] do_syscall_64+0x17b/0x530 [ 195.291948][ T6382] ? irqentry_exit+0x10f/0x8f0 [ 195.291967][ T6382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.291987][ T6382] ? clear_bhb_loop+0x40/0x90 [ 195.292012][ T6382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.292031][ T6382] RIP: 0033:0x7efdf717e019 [ 195.292048][ T6382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.292064][ T6382] RSP: 002b:00007efdf53d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 195.292083][ T6382] RAX: ffffffffffffffda RBX: 00007efdf7405fa0 RCX: 00007efdf717e019 [ 195.292097][ T6382] RDX: 0000000000000005 RSI: 0000200000000180 RDI: 0000000000000003 [ 195.292110][ T6382] RBP: 00007efdf721500c R08: 0000000000000000 R09: 0000000000000000 [ 195.292123][ T6382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.292135][ T6382] R13: 00007efdf7406038 R14: 00007efdf7405fa0 R15: 00007ffc9a21c7e8 [ 195.292170][ T6382] [ 195.292323][ T6382] Kernel Offset: disabled