last executing test programs: 9.239824555s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='proc\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000000)='500\x00', 0x3, 0x0) pwrite64(r0, &(0x7f0000000000)='0\x00', 0x1, 0x0) 8.36215413s ago: executing program 2 (id=7): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff040140861246200001000000010902200001010080fa0904000002ff0401000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) 8.104291522s ago: executing program 1 (id=8): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}]}, 0x58}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 7.651258578s ago: executing program 0 (id=1): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1000}]}}]}, 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f0000000a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000d00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000d40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000dc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000e00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000e80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000ec0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000f40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000f80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000001000)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001040)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001080)=[{&(0x7f00000010c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001100)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001140)=[{&(0x7f0000001180)='\x00', 0x1}], 0x1}}, {{&(0x7f00000011c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001200)=[{&(0x7f0000001240)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001280)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000001300)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001340)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001380)=[{&(0x7f00000013c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001400)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001440)=[{&(0x7f0000001480)='\x00', 0x1}], 0x1}}, {{&(0x7f00000014c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001500)=[{&(0x7f0000001540)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001580)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000001600)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001680)=[{&(0x7f00000016c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001740)=[{&(0x7f0000001780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000017c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001800)=[{&(0x7f0000001840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000001900)='\x00', 0x1}], 0x1}}], 0x14, 0x0) sendmmsg$inet(r0, &(0x7f0000001940)=[{{&(0x7f0000001e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001e80)=[{&(0x7f0000001ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002000)=[{&(0x7f0000002040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000020c0)=[{&(0x7f0000002100)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002140)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002180)=[{&(0x7f00000021c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002200)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002240)=[{&(0x7f0000002280)='\x00', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002300)=[{&(0x7f0000002340)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002380)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000002400)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002440)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002480)=[{&(0x7f00000024c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002500)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002540)=[{&(0x7f0000002580)='\x00', 0x1}], 0x1}}, {{&(0x7f00000025c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002640)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002680)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000026c0)=[{&(0x7f0000002700)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002740)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002780)=[{&(0x7f00000027c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002800)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002840)=[{&(0x7f0000002880)='\x00', 0x1}], 0x1}}, {{&(0x7f00000028c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002900)=[{&(0x7f0000002940)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002980)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000029c0)=[{&(0x7f0000002a00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002a80)=[{&(0x7f0000002ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002b40)=[{&(0x7f0000002b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002c00)=[{&(0x7f0000002c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002cc0)=[{&(0x7f0000002d00)='\x00', 0x1}], 0x1}}], 0x14, 0x0) sendmmsg$inet(r0, &(0x7f0000002d40)=[{{&(0x7f0000003240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003280)=[{&(0x7f00000032c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003340)=[{&(0x7f0000003380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000033c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003400)=[{&(0x7f0000003440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000034c0)=[{&(0x7f0000003500)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003540)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003580)=[{&(0x7f00000035c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003600)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003640)=[{&(0x7f0000003680)='\x00', 0x1}], 0x1}}, {{&(0x7f00000036c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003700)=[{&(0x7f0000003740)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003780)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000037c0)=[{&(0x7f0000003800)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003840)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003880)=[{&(0x7f00000038c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003900)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003940)=[{&(0x7f0000003980)='\x00', 0x1}], 0x1}}, {{&(0x7f00000039c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003a00)=[{&(0x7f0000003a40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003a80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003ac0)=[{&(0x7f0000003b00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003b40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003b80)=[{&(0x7f0000003bc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003c00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003c40)=[{&(0x7f0000003c80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003cc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003d00)=[{&(0x7f0000003d40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003d80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003dc0)=[{&(0x7f0000003e00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003e80)=[{&(0x7f0000003ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003f40)=[{&(0x7f0000003f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004000)=[{&(0x7f0000004040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000040c0)=[{&(0x7f0000004100)='\x00', 0x1}], 0x1}}], 0x14, 0x0) sendmmsg$inet(r0, &(0x7f0000004140)=[{{&(0x7f0000004640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004680)=[{&(0x7f00000046c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004740)=[{&(0x7f0000004780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000047c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004800)=[{&(0x7f0000004840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000048c0)=[{&(0x7f0000004900)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004940)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004980)=[{&(0x7f00000049c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004a00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004a40)=[{&(0x7f0000004a80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004ac0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004b00)=[{&(0x7f0000004b40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004b80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004bc0)=[{&(0x7f0000004c00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004c40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004c80)=[{&(0x7f0000004cc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004d00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004d40)=[{&(0x7f0000004d80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004dc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004e00)=[{&(0x7f0000004e40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004e80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004ec0)=[{&(0x7f0000004f00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004f40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004f80)=[{&(0x7f0000004fc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005000)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005040)=[{&(0x7f0000005080)='\x00', 0x1}], 0x1}}, {{&(0x7f00000050c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005100)=[{&(0x7f0000005140)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005180)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000051c0)=[{&(0x7f0000005200)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005280)=[{&(0x7f00000052c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005340)=[{&(0x7f0000005380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000053c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005400)=[{&(0x7f0000005440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000054c0)=[{&(0x7f0000005500)='\x00', 0x1}], 0x1}}], 0x14, 0x0) nanosleep(&(0x7f0000000000)={0x1, 0x1dcd6500}, 0x0) sendto$inet(r0, &(0x7f0000000400)='\x00', 0x1, 0x0, &(0x7f0000000500)={0x2, 0x1234, @loopback}, 0x10) 7.366999645s ago: executing program 1 (id=9): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@uexit={0x0, 0x18, 0x1}], 0x18}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read(r5, &(0x7f0000c00000)=""/4194304, 0x400000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x14) 7.266754838s ago: executing program 4 (id=5): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r1}) r2 = memfd_create(&(0x7f0000000080)='test\x00', 0x0) ftruncate(r2, 0x1000) ioctl(r0, 0x3b8f, &(0x7f00000000c0)="280000000600000001000000040000000000000000000000001000"/40) 7.014148733s ago: executing program 3 (id=10): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x100, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x40) write$ppp(r1, &(0x7f0000000200)="150329", 0x3) ioctl(r1, 0x4010744d, &(0x7f0000000180)) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000300)={0x11, 0x3, 0x1}, 0x14) sendto$packet(r3, &(0x7f0000000400)="000000000000000000000000886411000001000980fd02010007150329", 0x1d, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000500)="000000000000000000000000886411000001000600fd00000000", 0x1a, 0x0, 0x0, 0x0) 6.760002572s ago: executing program 4 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='1\n\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/dlm/cluster/comms/1/addr\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)="020052487f00000100"/128, 0x80) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/dlm/cluster/comms/2/addr\x00', 0x2, 0x0) write(r2, &(0x7f0000000440)="020030397f00000100"/128, 0x80) close(r2) r3 = syz_io_uring_setup(0x20, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000640)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r7, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="0600000000000000020000000401000000000000000000006d796c7300"/128, 0x80}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r8 = socket(0x2, 0x1, 0x0) setsockopt(r8, 0x1, 0x2, &(0x7f0000000780)="01000000", 0x4) bind(r8, &(0x7f00000007c0)=@generic={0x2, "30397f00000100"}, 0x10) connect(r8, &(0x7f0000000840)=@generic={0x2, "52487f00000100"}, 0x10) write(r8, &(0x7f00000008c0)="02000300000000000200000028000300050000000000000002000300000000000200000010000500", 0x28) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) write(r8, &(0x7f0000000900)="02000300010000000200000010000400", 0x10) 6.392938279s ago: executing program 0 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./rpc_pipefs\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='1\n\x00', 0x2) (async) nanosleep(&(0x7f0000000150)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000380)='mydomain 1 \\x00000000 2147483647 /\n\x00', 0x23) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000400)='mydomain / 2147483647 9218 0 0 0\n\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000480)=@filename='127.0.0.1:/\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f00000004c0)='nfs4\x00', 0x0, &(0x7f0000000500)='addr=127.0.0.1,clientaddr=127.0.0.1,soft,timeo=1,retrans=1,retry=0\x00') 5.705759557s ago: executing program 2 (id=13): r0 = syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cc1769190001010203010902370001010080fa0904000000ffffff000904000104ffffff0007058102000200070501020002000705820140000107050601400001"], 0x0) syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000100)="010000000001010101010101010100") nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) syz_usb_disconnect(r0) 5.654199399s ago: executing program 1 (id=14): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c41060ea0001000000010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) syz_usb_control_io(r0, &(0x7f0000001000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyUSB0\x00', 0x2, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000)={0x84, &(0x7f0000003000)={0x41}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000001000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000)={0x84, &(0x7f0000003000)={0x41}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000001000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000)={0x84, &(0x7f0000003000)={0x41}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000001000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000)={0x84, &(0x7f0000003000)={0x41}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000001000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000)={0x84, &(0x7f0000003000)={0x41}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000500)="01020304050607") 5.355162743s ago: executing program 4 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r1, &(0x7f0000000540)='0\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r2, &(0x7f00000005c0)='0\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f00000001c0)='8\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='127.0.0.1:/\x00', &(0x7f0000000200)='./nfs_mnt\x00', &(0x7f0000000280)='nfs4\x00', 0x0, &(0x7f00000002c0)='addr=127.0.0.1,port=2049,vers=4.2\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/clients/1/info\x00', 0x0, 0x0) read(r5, &(0x7f0000000340), 0x64) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/clients/2/info\x00', 0x0, 0x0) read(r6, &(0x7f00000003c0), 0x64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/clients/3/info\x00', 0x0, 0x0) read(r7, &(0x7f0000000440), 0x64) 4.725107491s ago: executing program 3 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0) write(r3, &(0x7f0000001900)='Y\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000900)='127.0.0.1 / 2147483647 74754 0 0 0\n', 0x23) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000b00)='127.0.0.1 1 00 2147483647 /\n', 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0) write(r7, &(0x7f0000000f00)='1\n', 0x2) nanosleep(&(0x7f0000001c00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1,port=2049,sec=sys\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x1ff) write(r8, &(0x7f0000001500)='test\x00', 0x4) 3.200487008s ago: executing program 2 (id=17): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl(r0, 0x40186f40, &(0x7f0000000040)='\x00'/24) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r1, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff) 2.798763265s ago: executing program 2 (id=18): r0 = memfd_create(&(0x7f0000000100)='test\x00', 0x0) write(r0, &(0x7f0000000000)="b875000000bb0e000000b900000000ba01000000be00000000bf00000000cd80c3", 0x21) r1 = syz_clone(0x11, &(0x7f0000010000), 0x1000, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, 0x0, 0x40000002, 0x0) ptrace$pokeuser(0x6, r1, 0x80, 0x20000000) ptrace$cont(0x7, r1, 0x0, 0x0) wait4(r1, 0x0, 0x40000002, 0x0) 2.594232585s ago: executing program 2 (id=19): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000044)=0x1) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x40) write$ppp(r1, &(0x7f0000000200)="150329", 0x3) ioctl(r1, 0x4010744d, &(0x7f0000000180)="00020000007f00000300000000000000") r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000300)={0x11, 0x3, 0x1}, 0x14) sendto$packet(r3, &(0x7f0000000400)="000000000000000000000000886411000001000980fd02010007150329", 0x1d, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000500)="000000000000000000000000886411000001000600fd00000000", 0x1a, 0x0, 0x0, 0x0) 2.334124097s ago: executing program 1 (id=20): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r3, 0x3, 0x11, r2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000001000)="48c7c0785634128900", 0x9}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc1, 0x0, 0xffffffffffffffff}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x38f, 0x0, 0x1}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x186, 0x0, 0x5300c0}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0xc0010004, 0x0, 0xffffffffffffffff}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0xc0010000, 0x0, 0x5300c0}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.901218828s ago: executing program 2 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='freeze', 0x6) 1.089255842s ago: executing program 1 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='proc\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000000)='500\x00', 0x3, 0x0) pwrite64(r0, &(0x7f0000000000)='0\x00', 0x1, 0x0) nanosleep(&(0x7f0000000000)={0x1}, 0x0) 172.001226ms ago: executing program 1 (id=23): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @loopback}, 0x10) listen(r0, 0x1) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source\x00', &(0x7f0000000780)='127.0.0.1:8080:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='ms_mode\x00', &(0x7f0000000880)='legacy\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept(r0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000001000)='ceph v027', 0x9, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000005000), 0x88, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000002000), 0xb2, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000003000)="07ffffffffffffffff00"/26, 0x1a, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000004000)="010100000000000000000000000000000012000000000022000000000000000000000000000100000000000000000000000000000000001e000000010118000000000000000000000000000000000000000100"/110, 0x6d, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 0s ago: executing program 0 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='usbip-vudc\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='pcspkr\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00') symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000780)='pcspkr\x00', 0x6) r3 = syz_open_dev$video(&(0x7f0000000800), 0x4, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559}) r4 = syz_open_dev$video(&(0x7f0000000800), 0x5, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559}) r5 = syz_open_dev$video(&(0x7f0000000800), 0x6, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.116' (ED25519) to the list of known hosts. [ 84.977414][ T5582] cgroup: Unknown subsys name 'net' [ 85.239202][ T5582] cgroup: Unknown subsys name 'cpuset' [ 85.314582][ T5582] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.771664][ T31] cfg80211: failed to load regulatory.db [ 87.191019][ T5582] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.793079][ T4909] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.802821][ T5603] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.803607][ T5603] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.817658][ T5605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.832438][ T5605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.832574][ T5603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.833998][ T5605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.860820][ T5605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.875882][ T5605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.881613][ T5605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.887359][ T5605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.892969][ T5605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.899294][ T4909] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.908429][ T5605] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.909234][ T5605] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.916625][ T5611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.952396][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.996604][ T5611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.999707][ T5611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.010622][ T5611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.073448][ T4909] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.084613][ T4909] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.085515][ T4909] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.087006][ T4909] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.088775][ T4909] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.995945][ T5611] Bluetooth: hci0: command tx timeout [ 92.996037][ T5611] Bluetooth: hci2: command tx timeout [ 93.075989][ T4909] Bluetooth: hci3: command tx timeout [ 93.091871][ T4909] Bluetooth: hci1: command tx timeout [ 93.154201][ T4909] Bluetooth: hci4: command tx timeout [ 93.546206][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.547091][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.547280][ T5598] bridge_slave_0: entered allmulticast mode [ 93.550840][ T5598] bridge_slave_0: entered promiscuous mode [ 93.597292][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.597368][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.597512][ T5598] bridge_slave_1: entered allmulticast mode [ 93.600250][ T5598] bridge_slave_1: entered promiscuous mode [ 93.767503][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.775726][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.775921][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.776411][ T5597] bridge_slave_0: entered allmulticast mode [ 93.779078][ T5597] bridge_slave_0: entered promiscuous mode [ 93.806030][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.806159][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.806648][ T5608] bridge_slave_0: entered allmulticast mode [ 93.810436][ T5608] bridge_slave_0: entered promiscuous mode [ 93.821890][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.836255][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.836404][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.836894][ T5597] bridge_slave_1: entered allmulticast mode [ 93.839863][ T5597] bridge_slave_1: entered promiscuous mode [ 93.894931][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.895006][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.895126][ T5606] bridge_slave_0: entered allmulticast mode [ 93.896773][ T5606] bridge_slave_0: entered promiscuous mode [ 93.898730][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.898860][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.899035][ T5608] bridge_slave_1: entered allmulticast mode [ 93.901013][ T5608] bridge_slave_1: entered promiscuous mode [ 93.952896][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.953043][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.953572][ T5606] bridge_slave_1: entered allmulticast mode [ 93.956612][ T5606] bridge_slave_1: entered promiscuous mode [ 94.047705][ T5598] team0: Port device team_slave_0 added [ 94.071820][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.096785][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.099174][ T5598] team0: Port device team_slave_1 added [ 94.099420][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.099562][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.099661][ T5607] bridge_slave_0: entered allmulticast mode [ 94.101269][ T5607] bridge_slave_0: entered promiscuous mode [ 94.108175][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.111744][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.118006][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.164559][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.164744][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.164903][ T5607] bridge_slave_1: entered allmulticast mode [ 94.167668][ T5607] bridge_slave_1: entered promiscuous mode [ 94.197418][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.279793][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.279805][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.279820][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.332008][ T5597] team0: Port device team_slave_0 added [ 94.349446][ T5608] team0: Port device team_slave_0 added [ 94.350452][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.350466][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.350493][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.353544][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.359487][ T5597] team0: Port device team_slave_1 added [ 94.362183][ T5606] team0: Port device team_slave_0 added [ 94.367242][ T5608] team0: Port device team_slave_1 added [ 94.385026][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.428275][ T5606] team0: Port device team_slave_1 added [ 94.498655][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.498668][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.498683][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.499970][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.499985][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.500010][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.542858][ T5607] team0: Port device team_slave_0 added [ 94.543865][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.543877][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.543900][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.549386][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.549399][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.549422][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.550962][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.550973][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.550996][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.579770][ T5607] team0: Port device team_slave_1 added [ 94.606434][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.606448][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.606471][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.618214][ T5598] hsr_slave_0: entered promiscuous mode [ 94.619703][ T5598] hsr_slave_1: entered promiscuous mode [ 94.756529][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.756545][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.756568][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.835291][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.835303][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.835318][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.842638][ T5597] hsr_slave_0: entered promiscuous mode [ 94.843475][ T5597] hsr_slave_1: entered promiscuous mode [ 94.845884][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 94.845986][ T5597] Cannot create hsr debugfs directory [ 94.856477][ T5608] hsr_slave_0: entered promiscuous mode [ 94.857827][ T5608] hsr_slave_1: entered promiscuous mode [ 94.858672][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 94.858693][ T5608] Cannot create hsr debugfs directory [ 94.937817][ T5606] hsr_slave_0: entered promiscuous mode [ 94.938616][ T5606] hsr_slave_1: entered promiscuous mode [ 94.939178][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 94.939196][ T5606] Cannot create hsr debugfs directory [ 95.074198][ T4909] Bluetooth: hci2: command tx timeout [ 95.074233][ T4909] Bluetooth: hci0: command tx timeout [ 95.154193][ T5611] Bluetooth: hci1: command tx timeout [ 95.154225][ T5611] Bluetooth: hci3: command tx timeout [ 95.234147][ T5611] Bluetooth: hci4: command tx timeout [ 95.564771][ T5607] hsr_slave_0: entered promiscuous mode [ 95.566288][ T5607] hsr_slave_1: entered promiscuous mode [ 95.567263][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 95.567285][ T5607] Cannot create hsr debugfs directory [ 96.161350][ T5598] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.195598][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.200511][ T5598] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.220152][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.223901][ T5598] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.268091][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.290468][ T5598] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.318416][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.422422][ T5597] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.458145][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.467353][ T5597] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.498076][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.510935][ T5597] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.538182][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.565379][ T5597] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.598345][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.737759][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.778884][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.786062][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.818621][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.821546][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.856750][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.880988][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.917876][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.072891][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.099418][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.112087][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.137721][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.141629][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.154328][ T5611] Bluetooth: hci0: command tx timeout [ 97.154355][ T5611] Bluetooth: hci2: command tx timeout [ 97.177637][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.220100][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.234243][ T4909] Bluetooth: hci3: command tx timeout [ 97.244746][ T4909] Bluetooth: hci1: command tx timeout [ 97.258380][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.315281][ T4909] Bluetooth: hci4: command tx timeout [ 97.347744][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.393547][ T5608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.437207][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.447224][ T5608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.492425][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.501829][ T5608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.527578][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.542546][ T5608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.568262][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.599605][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.647930][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.659984][ T2949] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.660162][ T2949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.719275][ T2949] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.719379][ T2949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.790489][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.828421][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.828542][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.861363][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.873517][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.873623][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.961748][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.013319][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.028816][ T90] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.029017][ T90] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.085674][ T90] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.085892][ T90] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.179682][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.237838][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.248429][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.248626][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.379868][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.380030][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.459818][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.526844][ T2949] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.527003][ T2949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.611554][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.611705][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.237331][ T4909] Bluetooth: hci2: command tx timeout [ 99.237362][ T4909] Bluetooth: hci0: command tx timeout [ 99.314203][ T5611] Bluetooth: hci1: command tx timeout [ 99.314238][ T5611] Bluetooth: hci3: command tx timeout [ 99.394198][ T4909] Bluetooth: hci4: command tx timeout [ 99.580554][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.830613][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.023151][ T5598] veth0_vlan: entered promiscuous mode [ 100.084297][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.129370][ T5598] veth1_vlan: entered promiscuous mode [ 100.272312][ T5597] veth0_vlan: entered promiscuous mode [ 100.350049][ T5597] veth1_vlan: entered promiscuous mode [ 100.369061][ T5598] veth0_macvtap: entered promiscuous mode [ 100.422693][ T5598] veth1_macvtap: entered promiscuous mode [ 100.433476][ T5606] veth0_vlan: entered promiscuous mode [ 100.452110][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.471054][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.490881][ T5606] veth1_vlan: entered promiscuous mode [ 100.520787][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.599299][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.601029][ T5597] veth0_macvtap: entered promiscuous mode [ 100.668646][ T5597] veth1_macvtap: entered promiscuous mode [ 100.903028][ T5606] veth0_macvtap: entered promiscuous mode [ 100.917826][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.986747][ T5606] veth1_macvtap: entered promiscuous mode [ 100.990593][ T5608] veth0_vlan: entered promiscuous mode [ 101.011118][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.096495][ T5608] veth1_vlan: entered promiscuous mode [ 101.121041][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.226841][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.242212][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.242231][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.442389][ T5607] veth0_vlan: entered promiscuous mode [ 101.545588][ T159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.545606][ T159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.680884][ T5607] veth1_vlan: entered promiscuous mode [ 101.727071][ T5608] veth0_macvtap: entered promiscuous mode [ 101.742868][ T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.742885][ T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.889049][ T5608] veth1_macvtap: entered promiscuous mode [ 102.091356][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.127271][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.127290][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.188284][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.220568][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.220587][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.246633][ T5607] veth0_macvtap: entered promiscuous mode [ 102.288138][ T5607] veth1_macvtap: entered promiscuous mode [ 102.444539][ T37] audit: type=1800 audit(1785853590.572:2): pid=5786 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2" name="zoned" dev="configfs" ino=8405 res=0 errno=0 [ 102.470634][ T37] audit: type=1800 audit(1785853590.592:3): pid=5786 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2" name="memory_backed" dev="configfs" ino=8406 res=0 errno=0 [ 102.499037][ T37] audit: type=1800 audit(1785853590.632:4): pid=5787 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2" name="zone_nr_conv" dev="configfs" ino=8424 res=0 errno=0 [ 102.505946][ T37] audit: type=1800 audit(1785853590.632:5): pid=5787 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2" name="power" dev="configfs" ino=8425 res=0 errno=0 [ 102.543563][ T159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.543581][ T159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.555490][ T5786] null_blk: nullb1: using native zone append [ 102.692929][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.926743][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.016772][ T5786] null_blk: disk nullb1 created [ 103.364741][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.364761][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.728412][ T78] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.909550][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.909573][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.092604][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.092625][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.104905][ T2949] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.558138][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.558161][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.562636][ T5804] batman_adv: batadv0: Adding interface: veth0 [ 104.562653][ T5804] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.562686][ T5804] batman_adv: batadv0: Interface activated: veth0 [ 104.834889][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.884824][ T5610] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.945686][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.948747][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.949154][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.949534][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.112095][ T5610] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 105.112136][ T5610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.211379][ T5809] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.264834][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.345568][ T5610] usb 3-1: NFC: intf ffff88807b09c000 id ffffffff8ebb9580 [ 105.508659][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.666048][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.669661][ T78] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.813748][ T5610] nfcmrvl 3-1:1.0: NFC: registered with nci successfully [ 105.869774][ T5610] usb 3-1: USB disconnect, device number 2 [ 105.975223][ T5610] usb 3-1: NFC: intf ffff88807b09c000 [ 106.087644][ T37] audit: type=1800 audit(1785853594.222:6): pid=5822 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.11" name="local" dev="configfs" ino=8608 res=0 errno=0 [ 106.440727][ T5831] dlm: no local IP address has been set [ 106.440742][ T5831] dlm: cannot start dlm midcomms -107 [ 106.820469][ T78] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.263859][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.265126][ T734] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.280542][ T734] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.310257][ T1725] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.374230][ T5727] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.520313][ T5610] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.597706][ T55] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.597906][ T55] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.644775][ T5727] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 107.644807][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.644827][ T5727] usb 3-1: Product: syz [ 107.644841][ T5727] usb 3-1: Manufacturer: syz [ 107.644856][ T5727] usb 3-1: SerialNumber: syz [ 107.654215][ T5841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.726565][ T5610] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea60, bcdDevice= 1.00 [ 107.726598][ T5610] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.881938][ T90] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.997882][ T5610] cp210x 2-1:1.0: cp210x converter detected [ 108.190396][ T5610] cp210x 2-1:1.0: failed to get vendor val 0x370b size 1: -32 [ 108.190435][ T5610] cp210x 2-1:1.0: querying part number failed [ 108.302051][ T5727] snd-usb-caiaq 3-1:1.0: can't set alt interface. [ 108.302077][ T5727] usb 3-1: unable to init card! (ret=-5) [ 108.359629][ T5727] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 108.389356][ T5727] usb 3-1: USB disconnect, device number 3 [ 108.468800][ T5610] usb 2-1: cp210x converter now attached to ttyUSB0 [ 109.266087][ T5865] ubi0: attaching mtd0 [ 109.283304][ T5865] ubi0: scanning is finished [ 109.283318][ T5865] ubi0: empty MTD device detected [ 109.386260][ T5868] UBIFS error (pid: 5868): cannot open "ubi0_0", error -19 [ 109.542715][ T5865] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 109.542743][ T5865] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 109.542762][ T5865] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 109.542778][ T5865] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 109.542795][ T5865] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 109.542812][ T5865] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 109.542828][ T5865] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1379373846 [ 109.542848][ T5865] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 109.548911][ T5869] ubi0: background thread "ubi_bgt0d" started, PID 5869 [ 110.077741][ T36] usb 2-1: USB disconnect, device number 2 [ 110.221330][ T36] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 110.222814][ T36] cp210x 2-1:1.0: device disconnected [ 110.594001][ T5882] PM: suspend entry (s2idle) [ 111.243499][ T5827] NFSD: Failed to start, no listeners configured. [ 111.505364][ T12] Filesystems sync: 0.873 seconds [ 111.638505][ T5882] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.638651][ T5882] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.798870][ T5882] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.900328][ T5882] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.900444][ T5882] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.956826][ T5882] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 112.107285][ T5882] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 112.107472][ T5882] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.188337][ T5882] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.280801][ T5882] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 112.280899][ T5882] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 112.410510][ T5882] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 112.538348][ T5882] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 112.538476][ T5882] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 112.725072][ T5882] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 112.800964][ T5882] Freezing user space processes [ 112.835499][ T5888] ceph: No mds server is up or the cluster is laggy [ 113.635053][ T4909] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.834212][ T5852] NFSD: Unable to initialize client recovery tracking! (-110) [ 113.834232][ T5852] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 113.834244][ T5852] NFSD: starting 90-second grace period (net f00005af) [ 113.906468][ T5882] ------------[ cut here ]------------ [ 113.906482][ T5882] debug_locks && p->lockdep_depth [ 113.906490][ T5882] WARNING: kernel/freezer.c:139 at __set_task_frozen+0x260/0x340, CPU#1: syz.2.21/5882 [ 113.906541][ T5882] Modules linked in: [ 113.906560][ T5882] CPU: 1 UID: 0 PID: 5882 Comm: syz.2.21 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 113.906585][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.906598][ T5882] RIP: 0010:__set_task_frozen+0x260/0x340 [ 113.906631][ T5882] Code: 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 15 09 97 09 cc e8 ef 21 15 00 90 0f 0b 90 e9 f7 fe ff ff e8 e1 21 15 00 90 <0f> 0b 90 eb 93 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c c3 fd ff ff [ 113.906648][ T5882] RSP: 0018:ffffc9000617f9f0 EFLAGS: 00010087 [ 113.906662][ T5882] RAX: ffffffff81b0b75f RBX: ffff88802f678000 RCX: 0000000000080000 [ 113.906674][ T5882] RDX: ffffc900054a9000 RSI: 0000000000073eba RDI: 0000000000073ebb [ 113.906685][ T5882] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 113.906695][ T5882] R10: dffffc0000000000 R11: ffffffff81b0b500 R12: ffff88802f678018 [ 113.906707][ T5882] R13: 1ffff11005ecf003 R14: 0000000000000000 R15: ffff88802f678c00 [ 113.906718][ T5882] FS: 00007f0a443966c0(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 113.906732][ T5882] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.906743][ T5882] CR2: 0000001b32b20ff8 CR3: 000000003c668000 CR4: 00000000003526f0 [ 113.906759][ T5882] Call Trace: [ 113.906765][ T5882] [ 113.906774][ T5882] ? __pfx___set_task_frozen+0x10/0x10 [ 113.906799][ T5882] task_call_func+0x1aa/0x260 [ 113.906830][ T5882] freeze_task+0x216/0x390 [ 113.906853][ T5882] ? __pfx_rt_read_lock+0x10/0x10 [ 113.906872][ T5882] ? __pfx_freeze_task+0x10/0x10 [ 113.906902][ T5882] ? usleep_range_state+0x95/0x180 [ 113.906924][ T5882] ? usleep_range_state+0x13a/0x180 [ 113.906948][ T5882] try_to_freeze_tasks+0x190/0x620 [ 113.906977][ T5882] freeze_processes+0xce/0x1e0 [ 113.906999][ T5882] pm_suspend+0x2f1/0x760 [ 113.907023][ T5882] state_store+0x206/0x290 [ 113.907043][ T5882] ? __pfx_sysfs_kf_write+0x10/0x10 [ 113.907058][ T5882] kernfs_fop_write_iter+0x3a5/0x540 [ 113.907086][ T5882] vfs_write+0x61e/0xbb0 [ 113.907116][ T5882] ? __pfx_vfs_write+0x10/0x10 [ 113.907139][ T5882] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 113.907161][ T5882] ? lockdep_hardirqs_on+0x7a/0x110 [ 113.907184][ T5882] ? mutex_lock_nested+0x152/0x1d0 [ 113.907199][ T5882] ? fdget_pos+0x252/0x320 [ 113.907225][ T5882] ksys_write+0x156/0x270 [ 113.907248][ T5882] ? __pfx_ksys_write+0x10/0x10 [ 113.907277][ T5882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.907295][ T5882] do_syscall_64+0x174/0x580 [ 113.907318][ T5882] ? clear_bhb_loop+0x40/0x90 [ 113.907338][ T5882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.907354][ T5882] RIP: 0033:0x7f0a4613e019 [ 113.907372][ T5882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.907385][ T5882] RSP: 002b:00007f0a44396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.907402][ T5882] RAX: ffffffffffffffda RBX: 00007f0a463c5fa0 RCX: 00007f0a4613e019 [ 113.907414][ T5882] RDX: 0000000000000006 RSI: 0000200000000180 RDI: 0000000000000003 [ 113.907424][ T5882] RBP: 00007f0a461d500c R08: 0000000000000000 R09: 0000000000000000 [ 113.907434][ T5882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.907443][ T5882] R13: 00007f0a463c6038 R14: 00007f0a463c5fa0 R15: 00007ffc75cf1c88 [ 113.907471][ T5882] [ 113.907479][ T5882] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 113.907491][ T5882] CPU: 1 UID: 0 PID: 5882 Comm: syz.2.21 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 113.907509][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.907518][ T5882] Call Trace: [ 113.907524][ T5882] [ 113.907530][ T5882] vpanic+0x56c/0xa60 [ 113.907547][ T5882] ? __pfx__printk+0x10/0x10 [ 113.907566][ T5882] ? __pfx_vpanic+0x10/0x10 [ 113.907580][ T5882] ? is_bpf_text_address+0x292/0x2b0 [ 113.907599][ T5882] ? is_bpf_text_address+0x26/0x2b0 [ 113.907626][ T5882] panic+0xc5/0xd0 [ 113.907641][ T5882] ? __pfx_panic+0x10/0x10 [ 113.907677][ T5882] __warn+0x315/0x4c0 [ 113.907691][ T5882] ? __set_task_frozen+0x260/0x340 [ 113.907718][ T5882] ? __set_task_frozen+0x260/0x340 [ 113.907740][ T5882] __report_bug+0x276/0x570 [ 113.907766][ T5882] ? __set_task_frozen+0x260/0x340 [ 113.907792][ T5882] ? __pfx___report_bug+0x10/0x10 [ 113.907818][ T5882] ? __lock_acquire+0x683/0x2ce0 [ 113.907836][ T5882] ? __lock_acquire+0x683/0x2ce0 [ 113.907852][ T5882] ? __set_task_frozen+0x260/0x340 [ 113.907869][ T5882] report_bug+0x16a/0x220 [ 113.907885][ T5882] ? __set_task_frozen+0x260/0x340 [ 113.907907][ T5882] ? __set_task_frozen+0x262/0x340 [ 113.907924][ T5882] handle_bug+0x9c/0x200 [ 113.907942][ T5882] exc_invalid_op+0x1a/0x50 [ 113.907960][ T5882] asm_exc_invalid_op+0x1a/0x20 [ 113.907971][ T5882] RIP: 0010:__set_task_frozen+0x260/0x340 [ 113.907988][ T5882] Code: 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 15 09 97 09 cc e8 ef 21 15 00 90 0f 0b 90 e9 f7 fe ff ff e8 e1 21 15 00 90 <0f> 0b 90 eb 93 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c c3 fd ff ff [ 113.907998][ T5882] RSP: 0018:ffffc9000617f9f0 EFLAGS: 00010087 [ 113.908008][ T5882] RAX: ffffffff81b0b75f RBX: ffff88802f678000 RCX: 0000000000080000 [ 113.908016][ T5882] RDX: ffffc900054a9000 RSI: 0000000000073eba RDI: 0000000000073ebb [ 113.908024][ T5882] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 113.908031][ T5882] R10: dffffc0000000000 R11: ffffffff81b0b500 R12: ffff88802f678018 [ 113.908040][ T5882] R13: 1ffff11005ecf003 R14: 0000000000000000 R15: ffff88802f678c00 [ 113.908051][ T5882] ? __pfx___set_task_frozen+0x10/0x10 [ 113.908069][ T5882] ? __set_task_frozen+0x25f/0x340 [ 113.908092][ T5882] ? __pfx___set_task_frozen+0x10/0x10 [ 113.908109][ T5882] task_call_func+0x1aa/0x260 [ 113.908131][ T5882] freeze_task+0x216/0x390 [ 113.908148][ T5882] ? __pfx_rt_read_lock+0x10/0x10 [ 113.908161][ T5882] ? __pfx_freeze_task+0x10/0x10 [ 113.908178][ T5882] ? usleep_range_state+0x95/0x180 [ 113.908194][ T5882] ? usleep_range_state+0x13a/0x180 [ 113.908212][ T5882] try_to_freeze_tasks+0x190/0x620 [ 113.908233][ T5882] freeze_processes+0xce/0x1e0 [ 113.908248][ T5882] pm_suspend+0x2f1/0x760 [ 113.908265][ T5882] state_store+0x206/0x290 [ 113.908279][ T5882] ? __pfx_sysfs_kf_write+0x10/0x10 [ 113.908290][ T5882] kernfs_fop_write_iter+0x3a5/0x540 [ 113.908310][ T5882] vfs_write+0x61e/0xbb0 [ 113.908331][ T5882] ? __pfx_vfs_write+0x10/0x10 [ 113.908348][ T5882] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 113.908364][ T5882] ? lockdep_hardirqs_on+0x7a/0x110 [ 113.908381][ T5882] ? mutex_lock_nested+0x152/0x1d0 [ 113.908392][ T5882] ? fdget_pos+0x252/0x320 [ 113.908411][ T5882] ksys_write+0x156/0x270 [ 113.908428][ T5882] ? __pfx_ksys_write+0x10/0x10 [ 113.908449][ T5882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.908462][ T5882] do_syscall_64+0x174/0x580 [ 113.908478][ T5882] ? clear_bhb_loop+0x40/0x90 [ 113.908493][ T5882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.908505][ T5882] RIP: 0033:0x7f0a4613e019 [ 113.908515][ T5882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.908524][ T5882] RSP: 002b:00007f0a44396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.908535][ T5882] RAX: ffffffffffffffda RBX: 00007f0a463c5fa0 RCX: 00007f0a4613e019 [ 113.908543][ T5882] RDX: 0000000000000006 RSI: 0000200000000180 RDI: 0000000000000003 [ 113.908550][ T5882] RBP: 00007f0a461d500c R08: 0000000000000000 R09: 0000000000000000 [ 113.908557][ T5882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.908564][ T5882] R13: 00007f0a463c6038 R14: 00007f0a463c5fa0 R15: 00007ffc75cf1c88 [ 113.908584][ T5882] [ 115.035098][ T5882] Shutting down cpus with NMI [ 115.035395][ T5882] Kernel Offset: disabled