last executing test programs: 4.778863939s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x1, 0x0) pwrite64(r0, &(0x7f0000000200)='disk\n\x00', 0x6, 0x0) 4.34380942s ago: executing program 2 (id=3): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/dri/0/gt0/reset\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/dri/0/i915_wedged\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='1\x00', 0x1) 4.175443135s ago: executing program 2 (id=5): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000001c0)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000240), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000280)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000340), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000380)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000003c0)={0x2, 0x64}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000400)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000440)={0x2, 0x73}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000480)={0x2, 0x2}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000004c0)={0x2, 0x64}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000500)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000540), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000580), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000005c0)={0x2, 0x8a}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000600)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000640)={0x2, 0x6}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000680)={0x2, 0x20}, 0x2) 3.95247052s ago: executing program 3 (id=4): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r0, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discov', 0x9d) 3.877984892s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='ep0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r4, &(0x7f0000000440)='3\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0) write(r5, &(0x7f00000004c0)='blk0\n', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0) write(r6, &(0x7f0000000540)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0/ep.1/ep_name\x00', 0x2, 0x0) write(r7, &(0x7f0000000640)='ep1\n', 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0) write(r8, &(0x7f00000006c0)='3\n', 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/name\x00', 0x2, 0x0) write(r9, &(0x7f0000000740)='blk1\n', 0x5) symlinkat(&(0x7f0000000800)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') write(0xffffffffffffffff, &(0x7f00000008c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 3.626991659s ago: executing program 3 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/kernel/printk\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='1 4 1 7\n\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='devices\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='mem\n\x00', 0x5) 3.18081379s ago: executing program 1 (id=7): syz_usb_connect$uac3(0x3, 0xeb, &(0x7f0000000800)=ANY=[], 0x0) 71.454008ms ago: executing program 1 (id=8): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='zstd\x00', 0x4) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r1, &(0x7f0000000000), 0x10000) r2 = eventfd(0x11111111) r3 = eventfd(0x11111111) r4 = eventfd(0x22222222) r5 = eventfd(0x11111111) r6 = eventfd(0x22222222) read(r2, &(0x7f0000000008), 0x8) read(0xffffffffffffffff, &(0x7f0000000010), 0x8) read(r3, &(0x7f0000000018), 0x8) read(r4, &(0x7f0000000020), 0x8) read(r5, &(0x7f0000000028), 0x8) read(r6, &(0x7f0000000030), 0x8) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) 0s ago: executing program 1 (id=9): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000407205feca00010102030109022e0001010080fa0904000004ff00000007058102000200070501020002000705820200020007050202000200"], 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="9000"/64) nanosleep(&(0x7f0000000200)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/atm/cxacru0/device/downstream_rate\x00', 0x0, 0x0) read(r1, &(0x7f0000000600), 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/atm/cxacru1/device/downstream_rate\x00', 0x0, 0x0) read(r2, &(0x7f0000000800), 0x100) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.181' (ED25519) to the list of known hosts. [ 72.747832][ T5761] cgroup: Unknown subsys name 'net' [ 72.882558][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.270544][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.684105][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.707753][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.709502][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.723734][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.730960][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.731796][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.746594][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.746636][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.753826][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.764384][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.776282][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.777775][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.784329][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.790931][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.805536][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.813995][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.826182][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.833945][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.841370][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.842154][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.851513][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.856500][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.863319][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.870109][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.252064][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 76.343112][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 76.384624][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 76.446398][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.454135][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.461712][ T5773] bridge_slave_0: entered allmulticast mode [ 76.468700][ T5773] bridge_slave_0: entered promiscuous mode [ 76.498959][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.507244][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.514487][ T5773] bridge_slave_1: entered allmulticast mode [ 76.521910][ T5773] bridge_slave_1: entered promiscuous mode [ 76.589662][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.601019][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.610546][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 76.692162][ T5773] team0: Port device team_slave_0 added [ 76.709107][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.716295][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.723421][ T5776] bridge_slave_0: entered allmulticast mode [ 76.731822][ T5776] bridge_slave_0: entered promiscuous mode [ 76.757250][ T5773] team0: Port device team_slave_1 added [ 76.763191][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.770523][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.780606][ T5775] bridge_slave_0: entered allmulticast mode [ 76.787425][ T5775] bridge_slave_0: entered promiscuous mode [ 76.795156][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.802710][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.809907][ T5775] bridge_slave_1: entered allmulticast mode [ 76.816995][ T5775] bridge_slave_1: entered promiscuous mode [ 76.823531][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.830932][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.838322][ T5776] bridge_slave_1: entered allmulticast mode [ 76.844941][ T5776] bridge_slave_1: entered promiscuous mode [ 76.904929][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.912009][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.938278][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.962677][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.974487][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.987855][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.004394][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.012844][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.039292][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.052285][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.095115][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.102616][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.110152][ T5774] bridge_slave_0: entered allmulticast mode [ 77.117685][ T5774] bridge_slave_0: entered promiscuous mode [ 77.145080][ T5776] team0: Port device team_slave_0 added [ 77.153139][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.160588][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.168008][ T5774] bridge_slave_1: entered allmulticast mode [ 77.174722][ T5774] bridge_slave_1: entered promiscuous mode [ 77.184299][ T5775] team0: Port device team_slave_0 added [ 77.193589][ T5775] team0: Port device team_slave_1 added [ 77.201917][ T5776] team0: Port device team_slave_1 added [ 77.272864][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.305122][ T5773] hsr_slave_0: entered promiscuous mode [ 77.312197][ T5773] hsr_slave_1: entered promiscuous mode [ 77.319655][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.329325][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.356129][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.369422][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.390802][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.398076][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.424232][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.437700][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.444673][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.470931][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.482676][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.492321][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.521071][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.569932][ T5774] team0: Port device team_slave_0 added [ 77.578298][ T5774] team0: Port device team_slave_1 added [ 77.630008][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.637288][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.663536][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.676196][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.683266][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.709505][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.771553][ T5775] hsr_slave_0: entered promiscuous mode [ 77.778899][ T5775] hsr_slave_1: entered promiscuous mode [ 77.785067][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.793748][ T5775] Cannot create hsr debugfs directory [ 77.844381][ T5776] hsr_slave_0: entered promiscuous mode [ 77.850926][ T5776] hsr_slave_1: entered promiscuous mode [ 77.858126][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.865706][ T5776] Cannot create hsr debugfs directory [ 77.937020][ T5779] Bluetooth: hci1: command tx timeout [ 77.942737][ T5779] Bluetooth: hci3: command tx timeout [ 77.948988][ T51] Bluetooth: hci2: command tx timeout [ 77.949009][ T5782] Bluetooth: hci0: command tx timeout [ 77.967200][ T5774] hsr_slave_0: entered promiscuous mode [ 77.973520][ T5774] hsr_slave_1: entered promiscuous mode [ 77.980068][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.987673][ T5774] Cannot create hsr debugfs directory [ 78.222363][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.246644][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.262995][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.272658][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.354789][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.377913][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.389762][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.432439][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.459222][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.481271][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.493691][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.516214][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.626833][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.638206][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.652524][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.677245][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.733873][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.761261][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.808819][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.828702][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.850724][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.858084][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.870643][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.877958][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.901483][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.908670][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.935053][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.953875][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.961057][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.002263][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.065118][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.083044][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.099548][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.106782][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.129126][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.136310][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.163561][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.170685][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.180590][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.187819][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.563996][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.657927][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.718512][ T5773] veth0_vlan: entered promiscuous mode [ 79.770745][ T5773] veth1_vlan: entered promiscuous mode [ 79.809700][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.841616][ T5773] veth0_macvtap: entered promiscuous mode [ 79.853968][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.861439][ T5775] veth0_vlan: entered promiscuous mode [ 79.877817][ T5773] veth1_macvtap: entered promiscuous mode [ 79.900315][ T5775] veth1_vlan: entered promiscuous mode [ 79.913902][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.937685][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.960089][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.971464][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.980838][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.989626][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.017257][ T51] Bluetooth: hci0: command tx timeout [ 80.022845][ T51] Bluetooth: hci1: command tx timeout [ 80.026300][ T5789] Bluetooth: hci2: command tx timeout [ 80.028908][ T5779] Bluetooth: hci3: command tx timeout [ 80.090066][ T5776] veth0_vlan: entered promiscuous mode [ 80.113743][ T5774] veth0_vlan: entered promiscuous mode [ 80.129784][ T5775] veth0_macvtap: entered promiscuous mode [ 80.141359][ T5775] veth1_macvtap: entered promiscuous mode [ 80.159979][ T5774] veth1_vlan: entered promiscuous mode [ 80.181767][ T5776] veth1_vlan: entered promiscuous mode [ 80.222532][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.234071][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.247989][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.275583][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.286546][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.299669][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.320874][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.329838][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.340816][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.355508][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.364642][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.374219][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.445460][ T5774] veth0_macvtap: entered promiscuous mode [ 80.454518][ T5776] veth0_macvtap: entered promiscuous mode [ 80.469467][ T5774] veth1_macvtap: entered promiscuous mode [ 80.486611][ T5776] veth1_macvtap: entered promiscuous mode [ 80.497023][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.504911][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.607425][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.620228][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.630466][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.642686][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.662616][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.672421][ T3433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.693206][ T3433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.721692][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.735123][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.758416][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.772208][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.790238][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.793988][ T5838] PM: hibernation: hibernation entry [ 80.805603][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.821518][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.830588][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.839436][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.860913][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.872705][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.882954][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.894612][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.904627][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.915488][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.927614][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.951873][ T3451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.963119][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.970377][ T3451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.978540][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.996464][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.008487][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.018766][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.029425][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.040343][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.058907][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.072269][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.082065][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.091893][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.275088][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.293724][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.349449][ T3433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.361980][ T3433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.411230][ T3451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.424704][ T3451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.442064][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.451603][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.625447][ T5838] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 81.651617][ T5838] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 81.682597][ T5838] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 81.707659][ T5838] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 81.719238][ T5838] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 81.731903][ T5838] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 81.743508][ T28] audit: type=1800 audit(1785896768.566:2): pid=5849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2" name="idVendor" dev="configfs" ino=7048 res=0 errno=0 [ 81.762636][ T5846] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 81.765318][ T28] audit: type=1800 audit(1785896768.586:3): pid=5849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2" name="idProduct" dev="configfs" ino=7049 res=0 errno=0 [ 81.800590][ T5838] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 81.807891][ T5838] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 81.818618][ T5838] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 81.837082][ T5838] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 81.843214][ T5838] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 81.851155][ T28] audit: type=1800 audit(1785896768.616:4): pid=5849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2" name="process_ump" dev="configfs" ino=7055 res=0 errno=0 [ 81.877281][ T5838] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 101.925543][ T5865] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 101.927539][ T5838] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 101.927567][ T5838] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 101.927651][ T5838] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 101.957107][ T5865] CPU: 1 PID: 5865 Comm: cxacru Not tainted syzkaller #0 [ 101.964153][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.974219][ T5865] Call Trace: [ 101.977510][ T5865] [ 101.980455][ T5865] dump_stack_lvl+0x18c/0x250 [ 101.985146][ T5865] ? show_regs_print_info+0x20/0x20 [ 101.990440][ T5865] ? load_image+0x420/0x420 [ 101.994966][ T5865] panic+0x2ca/0x720 [ 101.998877][ T5865] ? bpf_jit_dump+0xd0/0xd0 [ 102.003404][ T5865] ? ret_from_fork_asm+0x11/0x20 [ 102.008357][ T5865] __warn+0x2e0/0x470 [ 102.012352][ T5865] ? firmware_fallback_sysfs+0x722/0x950 [ 102.017999][ T5865] ? firmware_fallback_sysfs+0x722/0x950 [ 102.023646][ T5865] report_bug+0x2be/0x4f0 [ 102.027992][ T5865] ? firmware_fallback_sysfs+0x722/0x950 [ 102.033635][ T5865] ? firmware_fallback_sysfs+0x722/0x950 [ 102.039281][ T5865] ? firmware_fallback_sysfs+0x724/0x950 [ 102.044932][ T5865] handle_bug+0xcf/0x120 [ 102.049181][ T5865] exc_invalid_op+0x1a/0x50 [ 102.053696][ T5865] asm_exc_invalid_op+0x1a/0x20 [ 102.058557][ T5865] RIP: 0010:firmware_fallback_sysfs+0x722/0x950 [ 102.064829][ T5865] Code: df e8 c2 3c f9 ff 45 89 e7 eb bc e8 f8 61 33 fc c6 05 76 f1 22 09 01 48 c7 c7 a0 8b 42 8b e8 e5 53 2d 05 eb a7 e8 de 61 33 fc <0f> 0b 4c 89 f7 48 c7 c6 80 8c 42 8b 4c 89 e2 e8 ba 93 31 05 eb 8c [ 102.084554][ T5865] RSP: 0018:ffffc90004a77ac0 EFLAGS: 00010293 [ 102.090638][ T5865] RAX: ffffffff85540fa2 RBX: dffffc0000000000 RCX: ffff88802ad7bc00 [ 102.098655][ T5865] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 102.106673][ T5865] RBP: 0000000000000001 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 102.114661][ T5865] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: ffffc90004a77d20 [ 102.115000][ T5838] PM: hibernation: Basic memory bitmaps created [ 102.115397][ T5838] PM: hibernation: Preallocating image memory [ 102.134931][ T5865] R13: 0000000000001770 R14: ffff8881400e6078 R15: 00000000fffffff5 [ 102.142932][ T5865] ? firmware_fallback_sysfs+0x722/0x950 [ 102.148596][ T5865] ? kmem_cache_free+0xf8/0x290 [ 102.153470][ T5865] _request_firmware+0xf29/0x1520 [ 102.158531][ T5865] ? request_firmware+0x50/0x50 [ 102.163421][ T5865] ? vsprintf+0x30/0x30 [ 102.167689][ T5865] request_firmware+0x36/0x50 [ 102.172382][ T5865] cxacru_find_firmware+0x105/0x230 [ 102.177600][ T5865] ? cxacru_timeout_kill+0x40/0x40 [ 102.182738][ T5865] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 102.188737][ T5865] cxacru_heavy_init+0x17e/0xc40 [ 102.193697][ T5865] ? cxacru_bind+0x1020/0x1020 [ 102.198474][ T5865] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 102.204408][ T5865] ? _raw_spin_unlock+0x40/0x40 [ 102.209310][ T5865] ? complete+0xb1/0x1b0 [ 102.213561][ T5865] ? cxacru_bind+0x1020/0x1020 [ 102.218342][ T5865] usbatm_do_heavy_init+0x8e/0x110 [ 102.223553][ T5865] kthread+0x2fa/0x390 [ 102.227640][ T5865] ? skb_copy_to_linear_data+0x50/0x50 [ 102.233113][ T5865] ? kthread_blkcg+0xd0/0xd0 [ 102.237722][ T5865] ret_from_fork+0x48/0x80 [ 102.242169][ T5865] ? kthread_blkcg+0xd0/0xd0 [ 102.246772][ T5865] ret_from_fork_asm+0x11/0x20 [ 102.251564][ T5865] [ 103.011604][ T5865] Kernel Offset: disabled [ 103.016013][ T5865] Rebooting in 86400 seconds..