last executing test programs: 6.178285468s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/module/nvme_core/parameters/admin_timeout\x00', 0x2, 0x0) write(r0, &(0x7f0000000d00)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444\x00', 0x2f) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x6c) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='127:1:0:1\x00', 0x9) close(r4) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r5, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery\x00', 0xa1) clock_nanosleep(0x0, 0x0, &(0x7f0000000b00)={0x2}, 0x0) getpid() close(r5) 4.929568372s ago: executing program 0 (id=6): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:11 1\x00', 0x1c) r2 = socket(0xa, 0x2, 0x0) sendto(r2, &(0x7f0000000200)='\x00', 0x1, 0x0, &(0x7f0000000240)=@in6={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 4.486254964s ago: executing program 0 (id=7): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000400)='1', 0x1) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e130100c800000110aaaaaaaaaa00000000000000"], 0x16) nanosleep(&(0x7f0000000a00)={0x0, 0x10000000}, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000200)='connect aa:aa:aa:aa:aa:10 1', 0x1b) nanosleep(&(0x7f0000000a00)={0x0, 0x10000000}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt(r2, 0x1, 0x19, &(0x7f0000000600)='bt0\x00', 0x4) sendto$inet6(r2, &(0x7f0000000700)='\x00', 0x1, 0x0, &(0x7f0000000800)={0xa, 0x0, 0x0, @mcast2}, 0x1c) write$6lowpan_control(r1, &(0x7f0000000900)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) 4.4646671s ago: executing program 3 (id=4): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f", 0x100, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000300)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f", 0x100, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000400)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f", 0x100, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000500)={r0, r1, r2}, &(0x7f0000000600), 0x100, 0x0) 3.511848838s ago: executing program 0 (id=8): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff0000000705010200020007058202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x40, 0x1, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)={0x40, 0x41}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000400)={0x40, 0x50, 0x5, '\v\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)={0x40, 0x51}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000600)={0x40, 0x54, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000700)={0x40, 0x56, 0x7d, "00ffffffffffff0004430100000000000000010480000000010000000000000000000000000001010101010101010101010101010101000000fd00324b1e53110200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000700)={0x40, 0x56, 0x7d, "00ffffffffffff0004430100000000000000010480000000010000000000000000000000000001010101010101010101010101010101000000fd00324b1e53110200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000700)={0x40, 0x56, 0x7d, "00ffffffffffff0004430100000000000000010480000000010000000000000000000000000001010101010101010101010101010101000000fd00324b1e53110200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.112776081s ago: executing program 3 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000100)={{}, {0x3}}, &(0x7f0000000180)) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='freeze\n\x00', 0x8) 2.274597209s ago: executing program 2 (id=3): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610000000000010902190001010080fa0904000001ff00000007050202000200"], &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="00001e0000004d61501d0100000000000000000050000000500000005000000050000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1.568142867s ago: executing program 4 (id=5): pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000008)={0x0, 0x0}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x2000, 0x8, '9P2000.L'}, 0x15) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x80}}, 0x14) write$P9_RGETATTR(r1, &(0x7f0000000300)={0xa0, 0x19, 0x2, {0x3fff, {0x80}, 0x41ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000}}, 0xa0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/file\x00', 0x42, 0x1ff) write(r3, &(0x7f00000001c0)='data', 0x4) 429.419048ms ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='snd_dummy\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/drivers/snd_dummy/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='pcspkr\x00', 0x7) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000240)=0x2) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000280)=0xac44) write$dsp(r2, &(0x7f0000002200)='\x00\x00\x00\x00', 0x4) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) ppoll(&(0x7f0000000340)=[{r3, 0x8108}], 0x1, 0x0, 0x0, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(r4, &(0x7f0000001400), 0x1000) 0s ago: executing program 4 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chmod(&(0x7f0000000080)='./sys/module/cx231xx/parameters/transfer_mode\x00', 0x1b6) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/cx231xx/parameters/transfer_mode\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0\x00', 0x2) r1 = syz_usb_connect(0x0, 0x45, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040191d086100000000000109023300030100c000080b01020000000009040000000000000009040100000000000009040200010000000007058102000200"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000240)={0xc0, 0x0, 0x4, "c0000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000400)={0x1}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000500), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000500), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r3, 0x4142, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.128' (ED25519) to the list of known hosts. [ 92.324353][ T9] cfg80211: failed to load regulatory.db [ 93.287779][ T5582] cgroup: Unknown subsys name 'net' [ 93.510354][ T5582] cgroup: Unknown subsys name 'cpuset' [ 93.592323][ T5582] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.585151][ T5582] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.115885][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.150082][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.166815][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.170358][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.178579][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.226550][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.251222][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.269747][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.282070][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.282892][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.433589][ T5595] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.469193][ T5595] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.477314][ T5595] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.479983][ T5595] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.487263][ T5595] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.512718][ T5595] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.516586][ T5595] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.523943][ T5595] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.538502][ T5595] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.565644][ T5595] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.568664][ T5595] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.570592][ T5595] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.624336][ T5595] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.624456][ T5605] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.629337][ T4911] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.373776][ T5595] Bluetooth: hci0: command tx timeout [ 100.373785][ T4911] Bluetooth: hci1: command tx timeout [ 100.611702][ T4911] Bluetooth: hci3: command tx timeout [ 100.772424][ T4911] Bluetooth: hci2: command tx timeout [ 100.772550][ T5595] Bluetooth: hci4: command tx timeout [ 101.504368][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.504777][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.504957][ T5593] bridge_slave_0: entered allmulticast mode [ 101.508132][ T5593] bridge_slave_0: entered promiscuous mode [ 101.510939][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.511061][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.511236][ T5603] bridge_slave_0: entered allmulticast mode [ 101.521155][ T5603] bridge_slave_0: entered promiscuous mode [ 101.543307][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.543638][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.558007][ T5599] bridge_slave_0: entered allmulticast mode [ 101.577477][ T5599] bridge_slave_0: entered promiscuous mode [ 101.616837][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.617027][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.617197][ T5596] bridge_slave_0: entered allmulticast mode [ 101.619316][ T5596] bridge_slave_0: entered promiscuous mode [ 101.653866][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.653984][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.654197][ T5603] bridge_slave_1: entered allmulticast mode [ 101.656051][ T5603] bridge_slave_1: entered promiscuous mode [ 101.657422][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.657550][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.657696][ T5593] bridge_slave_1: entered allmulticast mode [ 101.659665][ T5593] bridge_slave_1: entered promiscuous mode [ 101.661001][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.661119][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.661247][ T5599] bridge_slave_1: entered allmulticast mode [ 101.667855][ T5599] bridge_slave_1: entered promiscuous mode [ 101.673814][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.674136][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.674606][ T5600] bridge_slave_0: entered allmulticast mode [ 101.684556][ T5600] bridge_slave_0: entered promiscuous mode [ 101.782205][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.782331][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.782511][ T5596] bridge_slave_1: entered allmulticast mode [ 101.786095][ T5596] bridge_slave_1: entered promiscuous mode [ 101.893320][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.893447][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.893626][ T5600] bridge_slave_1: entered allmulticast mode [ 101.896867][ T5600] bridge_slave_1: entered promiscuous mode [ 102.030875][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.047427][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.052414][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.090931][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.108122][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.110776][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.120446][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.133438][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.155678][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.214003][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.334345][ T5593] team0: Port device team_slave_0 added [ 102.338305][ T5603] team0: Port device team_slave_0 added [ 102.353882][ T5599] team0: Port device team_slave_0 added [ 102.382684][ T5596] team0: Port device team_slave_0 added [ 102.386365][ T5593] team0: Port device team_slave_1 added [ 102.388775][ T5603] team0: Port device team_slave_1 added [ 102.391152][ T5599] team0: Port device team_slave_1 added [ 102.400143][ T5600] team0: Port device team_slave_0 added [ 102.421058][ T5596] team0: Port device team_slave_1 added [ 102.451701][ T5595] Bluetooth: hci0: command tx timeout [ 102.451737][ T5595] Bluetooth: hci1: command tx timeout [ 102.487250][ T5600] team0: Port device team_slave_1 added [ 102.584301][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.584346][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.584377][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.587691][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.587708][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.587736][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.590327][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.590344][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.590373][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.681519][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.681538][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.681567][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.688133][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.688181][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.688256][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.692865][ T4911] Bluetooth: hci3: command tx timeout [ 102.698851][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.698893][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.699004][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.715012][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.715063][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.715139][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.726495][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.726538][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.726612][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.737758][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.737803][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.737877][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.852152][ T5595] Bluetooth: hci2: command tx timeout [ 102.852608][ T4911] Bluetooth: hci4: command tx timeout [ 102.970336][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.970389][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.970464][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.666180][ T5593] hsr_slave_0: entered promiscuous mode [ 103.667487][ T5593] hsr_slave_1: entered promiscuous mode [ 103.685901][ T5603] hsr_slave_0: entered promiscuous mode [ 103.686903][ T5603] hsr_slave_1: entered promiscuous mode [ 103.687836][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 103.687932][ T5603] Cannot create hsr debugfs directory [ 103.711238][ T5599] hsr_slave_0: entered promiscuous mode [ 103.717140][ T5599] hsr_slave_1: entered promiscuous mode [ 103.719961][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 103.720036][ T5599] Cannot create hsr debugfs directory [ 103.762855][ T5596] hsr_slave_0: entered promiscuous mode [ 103.763938][ T5596] hsr_slave_1: entered promiscuous mode [ 103.764606][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 103.764624][ T5596] Cannot create hsr debugfs directory [ 103.785691][ T5600] hsr_slave_0: entered promiscuous mode [ 103.789687][ T5600] hsr_slave_1: entered promiscuous mode [ 103.794115][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 103.794192][ T5600] Cannot create hsr debugfs directory [ 104.531684][ T4911] Bluetooth: hci1: command tx timeout [ 104.531718][ T4911] Bluetooth: hci0: command tx timeout [ 104.771743][ T5595] Bluetooth: hci3: command tx timeout [ 104.910991][ T5593] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.933442][ T5595] Bluetooth: hci4: command tx timeout [ 104.933477][ T5595] Bluetooth: hci2: command tx timeout [ 104.990481][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.013800][ T5593] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.057609][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.061241][ T5593] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.115838][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.145274][ T5593] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.166543][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.267349][ T5596] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.310905][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.325032][ T5596] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.366852][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.385458][ T5596] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.427144][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.466770][ T5596] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.508537][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.646958][ T5603] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.687732][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.708300][ T5603] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.747476][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.766814][ T5603] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.806862][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.852797][ T5603] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.886285][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.103185][ T5599] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.154026][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.184271][ T5599] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.227510][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.251107][ T5599] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.286187][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.326483][ T5599] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.365669][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.538911][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.578248][ T5600] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.611929][ T5595] Bluetooth: hci1: command tx timeout [ 106.611978][ T4911] Bluetooth: hci0: command tx timeout [ 106.618186][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.645635][ T5600] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.688166][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.702552][ T5600] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.745727][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.765462][ T5600] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.807323][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.852126][ T4911] Bluetooth: hci3: command tx timeout [ 106.890573][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.960657][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.980953][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.981086][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.013723][ T5595] Bluetooth: hci4: command tx timeout [ 107.013775][ T4911] Bluetooth: hci2: command tx timeout [ 107.049494][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.049586][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.144368][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.147441][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.207512][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.207796][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.279802][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.279921][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.317420][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.372162][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.373257][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.430754][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.430909][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.460753][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.599291][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.661398][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.709890][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.710119][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.786299][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.801888][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.937907][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.003381][ T1393] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.003638][ T1393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.171287][ T3396] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.177539][ T3396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.883337][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.397608][ T5593] veth0_vlan: entered promiscuous mode [ 109.428141][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.486605][ T5593] veth1_vlan: entered promiscuous mode [ 109.586030][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.852817][ T5593] veth0_macvtap: entered promiscuous mode [ 109.880179][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.916229][ T5593] veth1_macvtap: entered promiscuous mode [ 110.049878][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.136919][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.165968][ T5603] veth0_vlan: entered promiscuous mode [ 110.246609][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.263553][ T5603] veth1_vlan: entered promiscuous mode [ 110.431007][ T5599] veth0_vlan: entered promiscuous mode [ 110.622971][ T5599] veth1_vlan: entered promiscuous mode [ 110.695473][ T5596] veth0_vlan: entered promiscuous mode [ 110.765410][ T5603] veth0_macvtap: entered promiscuous mode [ 110.825162][ T5596] veth1_vlan: entered promiscuous mode [ 110.828419][ T5603] veth1_macvtap: entered promiscuous mode [ 110.865981][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.866011][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.906535][ T5600] veth0_vlan: entered promiscuous mode [ 111.015081][ T5599] veth0_macvtap: entered promiscuous mode [ 111.018269][ T5600] veth1_vlan: entered promiscuous mode [ 111.040074][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.087444][ T3396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.087467][ T3396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.088356][ T5599] veth1_macvtap: entered promiscuous mode [ 111.155437][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.265995][ T5596] veth0_macvtap: entered promiscuous mode [ 111.326540][ T5596] veth1_macvtap: entered promiscuous mode [ 111.342328][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.447047][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.610398][ T5600] veth0_macvtap: entered promiscuous mode [ 111.759350][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.793547][ T5600] veth1_macvtap: entered promiscuous mode [ 111.890545][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.330209][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.330233][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.460309][ T5780] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 1 of fabric opcode x27 drop +-1 instances [ 112.480715][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.752181][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.838517][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 112.867235][ T56] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 112.869364][ T12] (NULL device *): queue 0 connect admin queue failed (-6). [ 112.869406][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 112.869428][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 112.917623][ T5780] nvme nvme0: NVME-FC{0}: new ctrl: NQN "nqn.2014-08.org.nvmexpress.discovery", hostnqn: nqn.2014-08.org.nvmexpress:uuid:c380194a-89b7-48f4-a0da-4b95378a5a5c [ 112.990336][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.990374][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.144232][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.630369][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.630391][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.841190][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.841212][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.906039][ T4911] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:200' [ 113.906092][ T4911] CPU: 0 UID: 0 PID: 4911 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 113.906125][ T4911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.906140][ T4911] Workqueue: hci0 hci_rx_work [ 113.906185][ T4911] Call Trace: [ 113.906194][ T4911] [ 113.906204][ T4911] dump_stack_lvl+0xe8/0x150 [ 113.906244][ T4911] sysfs_create_dir_ns+0x271/0x2a0 [ 113.906273][ T4911] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 113.906304][ T4911] ? rt_spin_unlock+0x163/0x200 [ 113.906332][ T4911] kobject_add_internal+0x62c/0xce0 [ 113.906363][ T4911] kobject_add+0x163/0x240 [ 113.906383][ T4911] ? rt_spin_unlock+0x157/0x200 [ 113.906412][ T4911] ? __pfx_kobject_add+0x10/0x10 [ 113.906455][ T4911] ? get_device_parent+0x370/0x3a0 [ 113.906490][ T4911] device_add+0x3fa/0xb80 [ 113.906522][ T4911] hci_conn_add_sysfs+0xd5/0x210 [ 113.906552][ T4911] le_conn_complete_evt+0xfef/0x1580 [ 113.906598][ T4911] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 113.906632][ T4911] ? lockdep_hardirqs_on+0x7a/0x110 [ 113.906661][ T4911] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 113.906692][ T4911] ? rt_mutex_slowunlock+0x219/0x460 [ 113.906716][ T4911] ? skb_pull_data+0xf0/0x200 [ 113.906755][ T4911] hci_le_conn_complete_evt+0x187/0x470 [ 113.906795][ T4911] hci_event_packet+0x67a/0xf10 [ 113.906831][ T4911] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 113.906862][ T4911] ? __pfx_hci_event_packet+0x10/0x10 [ 113.906889][ T4911] ? rt_spin_unlock+0x157/0x200 [ 113.906933][ T4911] ? hci_send_to_monitor+0xe2/0x590 [ 113.906959][ T4911] hci_rx_work+0x3ee/0x1020 [ 113.906996][ T4911] ? process_scheduled_works+0xa20/0x14e0 [ 113.907031][ T4911] process_scheduled_works+0xa8e/0x14e0 [ 113.907085][ T4911] ? __pfx_process_scheduled_works+0x10/0x10 [ 113.907117][ T4911] ? assign_work+0x3cf/0x5d0 [ 113.907149][ T4911] worker_thread+0xa47/0xfb0 [ 113.907191][ T4911] ? __kthread_parkme+0x71/0x1f0 [ 113.907233][ T4911] kthread+0x388/0x470 [ 113.907266][ T4911] ? __pfx_worker_thread+0x10/0x10 [ 113.907291][ T4911] ? __pfx_kthread+0x10/0x10 [ 113.907326][ T4911] ret_from_fork+0x514/0xb70 [ 113.907364][ T4911] ? __pfx_ret_from_fork+0x10/0x10 [ 113.907399][ T4911] ? __switch_to+0xc89/0x1420 [ 113.907432][ T4911] ? __pfx_kthread+0x10/0x10 [ 113.907468][ T4911] ret_from_fork_asm+0x1a/0x30 [ 113.907509][ T4911] [ 113.907568][ T4911] kobject: kobject_add_internal failed for hci0:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 113.907610][ T4911] Bluetooth: hci0: failed to register connection device [ 114.690403][ T1393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.690425][ T1393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.933746][ T988] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 114.934894][ T66] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 114.934993][ T988] (NULL device *): queue 0 connect admin queue failed (-6). [ 114.935015][ T988] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 114.935030][ T988] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 115.095010][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.095034][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.146580][ T5795] PM: suspend entry (s2idle) [ 115.750101][ T3331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.750123][ T3331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.816468][ T4977] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.900070][ T66] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.927489][ T66] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.927957][ T66] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.928568][ T66] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.985237][ T5595] Bluetooth: hci0: command 0x2016 tx timeout [ 116.035078][ T1479] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.299865][ T4977] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 116.299897][ T4977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.462419][ T1309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.462440][ T1309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.462701][ T1309] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.463982][ T1422] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.464047][ T1422] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.464086][ T1422] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.464119][ T1422] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.464162][ T1422] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.464191][ T1422] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.464221][ T1422] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.464251][ T1422] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.464284][ T1422] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.464315][ T1422] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.464345][ T1422] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.464376][ T1422] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.636605][ T1479] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.742014][ T819] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 116.996802][ T819] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 116.996836][ T819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.028638][ T56] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 117.028825][ T66] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 117.030386][ T56] (NULL device *): queue 0 connect admin queue failed (-6). [ 117.030414][ T56] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 117.030430][ T56] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 117.742642][ T1074] Filesystems sync: 2.565 seconds [ 118.052375][ T5595] Bluetooth: hci0: command 0x2016 tx timeout [ 118.321687][ T5795] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 118.325580][ T5795] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 118.814467][ T5803] ------------[ cut here ]------------ [ 118.814483][ T5803] UBSAN: array-index-out-of-bounds in sound/drivers/dummy.c:1020:40 [ 118.814504][ T5803] index -1 is out of range [ 118.814504][ T5803] index -1 is out of range for type 'int[8]' [ 118.814528][ T5803] CPU: 1 UID: 0 PID: 5803 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 118.814560][ T5803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.814573][ T5803] Call Trace: [ 118.814581][ T5803] [ 118.814590][ T5803] dump_stack_lvl+0xe8/0x150 [ 118.814642][ T5803] ubsan_epilogue+0xa/0x30 [ 118.814668][ T5803] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 118.814700][ T5803] ? __pfx_of_clk_set_defaults+0x10/0x10 [ 118.814724][ T5803] snd_dummy_probe+0x12c6/0x18f0 [ 118.814760][ T5803] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 118.814788][ T5803] ? up_write+0x5a/0x190 [ 118.814824][ T5803] ? __pfx_snd_dummy_probe+0x10/0x10 [ 118.814854][ T5803] ? kernfs_put+0x7bc/0x820 [ 118.814882][ T5803] ? is_acpi_device_node+0x26/0x70 [ 118.814904][ T5803] ? acpi_dev_pm_attach+0xe9/0x240 [ 118.814931][ T5803] ? dev_pm_domain_attach+0xbd/0xf0 [ 118.814957][ T5803] ? __pfx_snd_dummy_probe+0x10/0x10 [ 118.814987][ T5803] platform_probe+0xf9/0x190 [ 118.815017][ T5803] ? __pfx_platform_probe+0x10/0x10 [ 118.815047][ T5803] really_probe+0x254/0xae0 [ 118.815084][ T5803] __driver_probe_device+0x1e8/0x360 [ 118.815117][ T5803] device_driver_attach+0xe0/0x1d0 [ 118.815150][ T5803] bind_store+0x1d3/0x220 [ 118.815182][ T5803] ? __pfx_sysfs_kf_write+0x10/0x10 [ 118.815202][ T5803] kernfs_fop_write_iter+0x3a5/0x540 [ 118.815238][ T5803] vfs_write+0x61e/0xbb0 [ 118.815274][ T5803] ? __pfx_vfs_write+0x10/0x10 [ 118.815313][ T5803] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 118.815352][ T5803] ? lockdep_hardirqs_on+0x7a/0x110 [ 118.815411][ T5803] ? mutex_lock_nested+0x152/0x1d0 [ 118.815431][ T5803] ? fdget_pos+0x252/0x320 [ 118.815461][ T5803] ksys_write+0x156/0x270 [ 118.815489][ T5803] ? __pfx_ksys_write+0x10/0x10 [ 118.815523][ T5803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.815556][ T5803] do_syscall_64+0x174/0x580 [ 118.815585][ T5803] ? trace_irq_disable+0x3b/0x140 [ 118.815608][ T5803] ? clear_bhb_loop+0x40/0x90 [ 118.815634][ T5803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.815653][ T5803] RIP: 0033:0x7fdd8d9fe019 [ 118.815683][ T5803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.815701][ T5803] RSP: 002b:00007fdd8bc56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 118.815732][ T5803] RAX: ffffffffffffffda RBX: 00007fdd8dc85fa0 RCX: 00007fdd8d9fe019 [ 118.815748][ T5803] RDX: 0000000000000007 RSI: 0000200000000180 RDI: 0000000000000004 [ 118.815762][ T5803] RBP: 00007fdd8da9500c R08: 0000000000000000 R09: 0000000000000000 [ 118.815775][ T5803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.815787][ T5803] R13: 00007fdd8dc86038 R14: 00007fdd8dc85fa0 R15: 00007ffcc1c4c808 [ 118.815819][ T5803] [ 118.843959][ T5803] ---[ end trace ]--- [ 118.844081][ T5803] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 118.844112][ T5803] CPU: 1 UID: 0 PID: 5803 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 118.844142][ T5803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.844157][ T5803] Call Trace: [ 118.844168][ T5803] [ 118.844203][ T5803] vpanic+0x56c/0xa60 [ 118.844286][ T5803] ? __pfx_vpanic+0x10/0x10 [ 118.844315][ T5803] ? irqentry_exit+0x218/0x8f0 [ 118.844397][ T5803] panic+0xc5/0xd0 [ 118.844454][ T5803] ? __pfx_panic+0x10/0x10 [ 118.844485][ T5803] ? __pfx__printk+0x10/0x10 [ 118.844577][ T5803] check_panic_on_warn+0x89/0xb0 [ 118.844629][ T5803] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 118.844669][ T5803] ? __pfx_of_clk_set_defaults+0x10/0x10 [ 118.844739][ T5803] snd_dummy_probe+0x12c6/0x18f0 [ 118.844812][ T5803] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 118.844864][ T5803] ? up_write+0x5a/0x190 [ 118.844915][ T5803] ? __pfx_snd_dummy_probe+0x10/0x10 [ 118.844974][ T5803] ? kernfs_put+0x7bc/0x820 [ 118.845005][ T5803] ? is_acpi_device_node+0x26/0x70 [ 118.845067][ T5803] ? acpi_dev_pm_attach+0xe9/0x240 [ 118.845131][ T5803] ? dev_pm_domain_attach+0xbd/0xf0 [ 118.845165][ T5803] ? __pfx_snd_dummy_probe+0x10/0x10 [ 118.845246][ T5803] platform_probe+0xf9/0x190 [ 118.845315][ T5803] ? __pfx_platform_probe+0x10/0x10 [ 118.845347][ T5803] really_probe+0x254/0xae0 [ 118.845468][ T5803] __driver_probe_device+0x1e8/0x360 [ 118.845511][ T5803] device_driver_attach+0xe0/0x1d0 [ 118.845626][ T5803] bind_store+0x1d3/0x220 [ 118.845667][ T5803] ? __pfx_sysfs_kf_write+0x10/0x10 [ 118.845699][ T5803] kernfs_fop_write_iter+0x3a5/0x540 [ 118.845803][ T5803] vfs_write+0x61e/0xbb0 [ 118.845850][ T5803] ? __pfx_vfs_write+0x10/0x10 [ 118.845944][ T5803] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 118.845988][ T5803] ? lockdep_hardirqs_on+0x7a/0x110 [ 118.846043][ T5803] ? mutex_lock_nested+0x152/0x1d0 [ 118.846098][ T5803] ? fdget_pos+0x252/0x320 [ 118.846153][ T5803] ksys_write+0x156/0x270 [ 118.846207][ T5803] ? __pfx_ksys_write+0x10/0x10 [ 118.846303][ T5803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.846334][ T5803] do_syscall_64+0x174/0x580 [ 118.846419][ T5803] ? trace_irq_disable+0x3b/0x140 [ 118.846469][ T5803] ? clear_bhb_loop+0x40/0x90 [ 118.846502][ T5803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.846615][ T5803] RIP: 0033:0x7fdd8d9fe019 [ 118.846649][ T5803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.846671][ T5803] RSP: 002b:00007fdd8bc56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 118.846716][ T5803] RAX: ffffffffffffffda RBX: 00007fdd8dc85fa0 RCX: 00007fdd8d9fe019 [ 118.846780][ T5803] RDX: 0000000000000007 RSI: 0000200000000180 RDI: 0000000000000004 [ 118.846812][ T5803] RBP: 00007fdd8da9500c R08: 0000000000000000 R09: 0000000000000000 [ 118.846829][ T5803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.846844][ T5803] R13: 00007fdd8dc86038 R14: 00007fdd8dc85fa0 R15: 00007ffcc1c4c808 [ 118.846909][ T5803] [ 118.847599][ T5803] Kernel Offset: disabled