last executing test programs: 12.104851868s ago: executing program 3 (id=4): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401e041c4000000000000109021b0001010080fa0904000001ffffff00090581010004010000"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000040)={0x1}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000000c0)=0x1) 10.067950904s ago: executing program 1 (id=2): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff406d04000900000102030109021b0001010080fa0904000001ff000000090581010002010000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000100), 0x9, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x1, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000400)=@mmap={0x0, 0x1}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000500)=0x1) 9.30962569s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0) write(r3, &(0x7f0000001900)='Y\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000900)='127.0.0.1 / 2147483647 74754 0 0 0\n', 0x23) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000b00)='127.0.0.1 1 \\x00\\x00\\x00\\x00 2147483647 /\n', 0x2d) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0) write(r7, &(0x7f0000000f00)='123\n', 0x4) nanosleep(&(0x7f0000001c00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1,port=2049,sec=sys\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x1ff) write(r8, &(0x7f0000001500)='test\x00', 0x4) 8.729383209s ago: executing program 3 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/pm_debug_messages\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_print_times\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) 8.029042722s ago: executing program 3 (id=7): r0 = syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c43000101020301010902190001010080fa0904000001ffffff0007058402000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000110)={0x84, &(0x7f0000000210)={0x40, 0x2, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000310), 0x0, 0x2) 7.986491545s ago: executing program 4 (id=8): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402505a0a40000000000010902240001010080fa0904000002ff000000090581020002000000090502020002000000"], 0x0) nanosleep(&(0x7f0000000400)={0x2}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0xc01c5564, &(0x7f0000000300)="000000000100000000040000000000000100"/28}) 7.764163996s ago: executing program 2 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/e1000/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:02.0\x00', 0xd) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) write(r0, &(0x7f0000000180)='0000:00:04.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/e1000/bind\x00', 0x801, 0x0) write(r1, &(0x7f0000000100)='0000:00:02.0\x00', 0xd) write(r1, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) write(r1, &(0x7f0000000180)='0000:00:04.0\x00', 0xd) 7.651646242s ago: executing program 0 (id=1): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="00221d0000000600ff0901a1010901150026ff007508954081020901750895409102c0"], 0x0}, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="20014000"/70], 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="00221d0000000600ff0901a1010901150026ff007508954081020901750895409102c0"], 0x0}, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="20014000"/70], 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="fe03") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0399") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="039a") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="034f") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="034f") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0200") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0340") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0200") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0344") nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(&(0x7f0000000480)=@filename='sysfs\x00', &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon0/name\x00', 0x0, 0x0) read(r1, &(0x7f0000000600)=""/64, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/hwmon/hwmon1/name\x00', 0x0, 0x0) read(r2, &(0x7f0000000600)=""/64, 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/hwmon/hwmon2/name\x00', 0x0, 0x0) read(r3, &(0x7f0000000600)=""/64, 0x40) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/class/hwmon/hwmon3/name\x00', 0x0, 0x0) read(r4, &(0x7f0000000600)=""/64, 0x40) 6.694667345s ago: executing program 2 (id=10): syslog(0x9, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='devices\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='mem\n', 0x4) 6.024514647s ago: executing program 1 (id=11): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) listen(r0, 0x10) write(0xffffffffffffffff, &(0x7f0000000800)="0100000000000000", 0x8) r1 = syz_io_uring_setup(0x10, &(0x7f0000000040), &(0x7f0000000100)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000110)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_URING_CMD=@generic_cmd_sqes={0x2e, 0x5, 0x0, 0x0, {0x3}, {0x1, 0xd}, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8, 0x7f0000000800}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, 0x0}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000380)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000400)=@IORING_OP_URING_CMD=@generic_cmd_sqes={0x2e, 0x5, 0x0, 0x0, {0x3}, {0x1, 0xd}, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8, 0x7f0000000800}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000480)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x6, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1ff) mount(&(0x7f0000000600)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='cifs\x00', 0x0, &(0x7f0000000580)='unc=\\\\127.0.0.1\\share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=2.0\x00') 3.855421335s ago: executing program 4 (id=12): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x1000}, {0x0, 0x1000}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x1000}, {0x0, 0x1000}}, 0x0) 3.399693568s ago: executing program 1 (id=13): r0 = syz_usb_connect(0x0, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101403412785600000102030109023e0002010080fa0904000003e00101000705810240000107050202400000070583034000010904010002e00101000705840140000107050401400001"], 0x0) dup(r0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0x0, 0x1}, 0x6) write(r1, &(0x7f00000001c0)="f100040000", 0x5) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x400448ca, 0x0) bind$bt_hci(r2, &(0x7f0000000240), 0x6) write(r2, &(0x7f0000000280)="0100000000", 0x5) 2.891082749s ago: executing program 4 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/ipv6/conf/lo/keep_addr_on_down\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='1\n', 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x1}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={@rand_addr, 0x40, 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00'}) 2.49532222s ago: executing program 3 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x2) 2.455387277s ago: executing program 4 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/serial8250/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='serial8250\x00', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/serial8250/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='ath9k\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/ath9k/bind\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='serial8250\x00', 0xb) 2.309365173s ago: executing program 0 (id=17): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x400, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x1000000, 0x0, 0x80c9}, 0x20000040) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0x0}, 0x2, 0x8}}, 0x20) write(r1, &(0x7f0000000080)="0200000020000000000000000000000002004e20ac14141400"/44, 0x28) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {0x0, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000310)={0x0}, 0x2, 0x8}}, 0x20) write(r1, &(0x7f00000001c0)="140000001001000001000000e8030000100010000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ac14141400"/261, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000300)={0x4, 0x8, 0xfa00, {0x1, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000340)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1}}, 0x120) 1.975891179s ago: executing program 4 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/module/nvme_core/parameters/admin_timeout\x00', 0x2, 0x0) write(r0, &(0x7f0000000d00)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444\x00', 0x2f) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x6c) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='101:0:1\x00', 0x7) close(r4) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r5, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery\x00', 0xa1) clock_nanosleep(0x0, 0x0, &(0x7f0000000b00)={0x2}, 0x0) getpid() close(r5) (async) 662.871354ms ago: executing program 4 (id=19): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000400)={0x5}, 0x0) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00") nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000106)="0000ffffff0a00f6d7290000000000000003fd00") nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00") nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000206)="0000ffffff0300fdd72b00fe00") nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000300)="0000ff00ff00") nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000306)="0000ffffff0400fcd72101000700") nanosleep(&(0x7f0000000400)={0x1}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000005100)={&(0x7f0000005200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000006100)={&(0x7f0000006200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000007100)={&(0x7f0000007200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0) 0s ago: executing program 1 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='processors\n', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='mem\n', 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.207' (ED25519) to the list of known hosts. [ 73.124883][ T5581] cgroup: Unknown subsys name 'net' [ 73.365287][ T5581] cgroup: Unknown subsys name 'cpuset' [ 73.422133][ T5581] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.037616][ T5581] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.805456][ T5601] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.821769][ T5601] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.825366][ T5601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.854707][ T5610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.872966][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.873436][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.882056][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.898357][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.924149][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.925297][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.939695][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.942494][ T5613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.943862][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.944608][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.945550][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.946573][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.947353][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.947817][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.951671][ T5605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.953740][ T5605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.954189][ T5605] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.956452][ T5605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.956891][ T5605] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.966984][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.971895][ T5615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.974610][ T59] Bluetooth: hci2: command tx timeout [ 81.052219][ T59] Bluetooth: hci0: command tx timeout [ 81.141246][ T59] Bluetooth: hci3: command tx timeout [ 81.141256][ T5617] Bluetooth: hci1: command tx timeout [ 81.203807][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.204572][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.204699][ T5597] bridge_slave_0: entered allmulticast mode [ 81.206564][ T5597] bridge_slave_0: entered promiscuous mode [ 81.212171][ T5617] Bluetooth: hci4: command tx timeout [ 81.280932][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.281006][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.281253][ T5597] bridge_slave_1: entered allmulticast mode [ 81.285685][ T5597] bridge_slave_1: entered promiscuous mode [ 81.308885][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.309016][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.309318][ T5596] bridge_slave_0: entered allmulticast mode [ 81.310679][ T5596] bridge_slave_0: entered promiscuous mode [ 81.318159][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.318267][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.318423][ T5598] bridge_slave_0: entered allmulticast mode [ 81.320757][ T5598] bridge_slave_0: entered promiscuous mode [ 81.374902][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.375087][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.375232][ T5596] bridge_slave_1: entered allmulticast mode [ 81.377572][ T5596] bridge_slave_1: entered promiscuous mode [ 81.378911][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.379029][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.379162][ T5598] bridge_slave_1: entered allmulticast mode [ 81.382333][ T5598] bridge_slave_1: entered promiscuous mode [ 81.464267][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.480167][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.480274][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.480413][ T5595] bridge_slave_0: entered allmulticast mode [ 81.485566][ T5595] bridge_slave_0: entered promiscuous mode [ 81.521605][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.521891][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.522018][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.522114][ T5599] bridge_slave_0: entered allmulticast mode [ 81.523394][ T5599] bridge_slave_0: entered promiscuous mode [ 81.524967][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.525070][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.525201][ T5595] bridge_slave_1: entered allmulticast mode [ 81.526764][ T5595] bridge_slave_1: entered promiscuous mode [ 81.530516][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.536001][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.555706][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.555795][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.555949][ T5599] bridge_slave_1: entered allmulticast mode [ 81.558200][ T5599] bridge_slave_1: entered promiscuous mode [ 81.582775][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.639892][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.683230][ T5597] team0: Port device team_slave_0 added [ 81.865973][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.884270][ T5597] team0: Port device team_slave_1 added [ 81.886719][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.908271][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.909763][ T5598] team0: Port device team_slave_0 added [ 81.929377][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.931550][ T5596] team0: Port device team_slave_0 added [ 81.950808][ T5598] team0: Port device team_slave_1 added [ 81.975916][ T5596] team0: Port device team_slave_1 added [ 82.000523][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.000534][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.000547][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.070092][ T5595] team0: Port device team_slave_0 added [ 82.084328][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.084340][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.084353][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.086138][ T5599] team0: Port device team_slave_0 added [ 82.110944][ T5595] team0: Port device team_slave_1 added [ 82.113275][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.113287][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.113310][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.136548][ T5599] team0: Port device team_slave_1 added [ 82.137589][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.137601][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.137624][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.163918][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.163933][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.163957][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.196629][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.196644][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.196673][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.289208][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.289224][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.289263][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.319093][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.319107][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.319130][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.325264][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.325279][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.325301][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.351223][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.351238][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.351261][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.396575][ T5597] hsr_slave_0: entered promiscuous mode [ 82.398034][ T5597] hsr_slave_1: entered promiscuous mode [ 82.508749][ T5598] hsr_slave_0: entered promiscuous mode [ 82.510094][ T5598] hsr_slave_1: entered promiscuous mode [ 82.513228][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 82.513355][ T5598] Cannot create hsr debugfs directory [ 82.545465][ T5596] hsr_slave_0: entered promiscuous mode [ 82.546210][ T5596] hsr_slave_1: entered promiscuous mode [ 82.546697][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 82.546713][ T5596] Cannot create hsr debugfs directory [ 82.647195][ T5595] hsr_slave_0: entered promiscuous mode [ 82.647937][ T5595] hsr_slave_1: entered promiscuous mode [ 82.648494][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 82.648511][ T5595] Cannot create hsr debugfs directory [ 82.683965][ T5599] hsr_slave_0: entered promiscuous mode [ 82.684793][ T5599] hsr_slave_1: entered promiscuous mode [ 82.685273][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 82.685289][ T5599] Cannot create hsr debugfs directory [ 83.056349][ T5617] Bluetooth: hci2: command tx timeout [ 83.131421][ T5617] Bluetooth: hci0: command tx timeout [ 83.211388][ T5617] Bluetooth: hci1: command tx timeout [ 83.211421][ T5617] Bluetooth: hci3: command tx timeout [ 83.291202][ T59] Bluetooth: hci4: command tx timeout [ 83.830441][ T5597] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.874844][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.880477][ T5597] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.926701][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.942625][ T5597] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.966885][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.986273][ T5597] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.027141][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.139157][ T5596] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.176876][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.198759][ T5596] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.226851][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.239113][ T5596] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.276066][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.297652][ T5596] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.343281][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.450304][ T5595] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.475607][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.480707][ T5595] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.505817][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.509843][ T5595] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.544466][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.570983][ T5595] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.606040][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.714646][ T5599] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.745716][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.768374][ T5599] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.804621][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.814416][ T5599] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.860553][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.889981][ T5599] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.914131][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.983468][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.066873][ T5598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.104004][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.110710][ T5598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.131277][ T59] Bluetooth: hci2: command tx timeout [ 85.156921][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.169648][ T5598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.197284][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.211229][ T59] Bluetooth: hci0: command tx timeout [ 85.214334][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.214608][ T5598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.265209][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.292666][ T59] Bluetooth: hci3: command tx timeout [ 85.292696][ T59] Bluetooth: hci1: command tx timeout [ 85.348116][ T1596] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.348869][ T1596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.373650][ T5617] Bluetooth: hci4: command tx timeout [ 85.401170][ T3836] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.401348][ T3836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.460437][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.517459][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.546266][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.599468][ T3836] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.600902][ T3836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.636390][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.638179][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.645130][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.696427][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.696550][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.730865][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.772279][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.772410][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.909972][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.993037][ T3802] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.995484][ T3802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.014863][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.050355][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.050470][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.189306][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.267465][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.267992][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.396317][ T1655] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.396455][ T1655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.744079][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.745688][ T10] cfg80211: failed to load regulatory.db [ 87.212904][ T5617] Bluetooth: hci2: command tx timeout [ 87.215827][ T5597] veth0_vlan: entered promiscuous mode [ 87.292180][ T5617] Bluetooth: hci0: command tx timeout [ 87.318358][ T5597] veth1_vlan: entered promiscuous mode [ 87.363773][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.371751][ T5617] Bluetooth: hci1: command tx timeout [ 87.371780][ T5617] Bluetooth: hci3: command tx timeout [ 87.451285][ T59] Bluetooth: hci4: command tx timeout [ 87.587501][ T5597] veth0_macvtap: entered promiscuous mode [ 87.626491][ T5597] veth1_macvtap: entered promiscuous mode [ 87.672252][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.747586][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.755107][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.809870][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.154269][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.159039][ T5595] veth0_vlan: entered promiscuous mode [ 88.295789][ T5595] veth1_vlan: entered promiscuous mode [ 88.344348][ T5599] veth0_vlan: entered promiscuous mode [ 88.435801][ T5599] veth1_vlan: entered promiscuous mode [ 88.448803][ T5596] veth0_vlan: entered promiscuous mode [ 88.463990][ T160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.464015][ T160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.550720][ T5596] veth1_vlan: entered promiscuous mode [ 88.565986][ T5598] veth0_vlan: entered promiscuous mode [ 88.592980][ T5595] veth0_macvtap: entered promiscuous mode [ 88.625674][ T5595] veth1_macvtap: entered promiscuous mode [ 88.625827][ T3836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.625842][ T3836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.637515][ T5598] veth1_vlan: entered promiscuous mode [ 88.705034][ T5599] veth0_macvtap: entered promiscuous mode [ 88.734580][ T5599] veth1_macvtap: entered promiscuous mode [ 88.757621][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.807093][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.834154][ T5596] veth0_macvtap: entered promiscuous mode [ 88.868903][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.888290][ T5596] veth1_macvtap: entered promiscuous mode [ 88.906167][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.927241][ T5598] veth0_macvtap: entered promiscuous mode [ 89.017413][ T5598] veth1_macvtap: entered promiscuous mode [ 89.178216][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.580801][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.660251][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.719423][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.719443][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.728255][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.898413][ T10] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 90.087989][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.088006][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.174968][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 90.204448][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 1023 [ 90.204497][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice= 0.00 [ 90.204518][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.399883][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 041e:401c [ 90.633844][ T160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.633861][ T160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.973267][ T10] gspca_zc3xx: reg_w_i err -110 [ 91.048151][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.048165][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.069208][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.280157][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.280177][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.413700][ T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.413721][ T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.443456][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.492349][ T160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.492367][ T160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.649730][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00 [ 91.649759][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.649777][ T31] usb 2-1: Product: syz [ 91.649789][ T31] usb 2-1: Manufacturer: syz [ 91.649800][ T31] usb 2-1: SerialNumber: syz [ 91.731610][ T10] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 91.731696][ T10] gspca_zc3xx 4-1:1.0: probe with driver gspca_zc3xx failed with error -110 [ 91.804476][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.804494][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.918017][ T31] gspca_main: spca500-2.14.0 probing 046d:0900 [ 91.972307][ T1655] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.973506][ T1655] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.151240][ T1174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.152988][ T1655] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.153376][ T1655] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.153676][ T1655] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.153965][ T1655] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.460341][ T10] usb 4-1: USB disconnect, device number 2 [ 92.749417][ T3802] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.750058][ T3802] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.836438][ T31] gspca_spca500: reg write: error -110 [ 92.836855][ T31] gspca_spca500: reg write: error -32 [ 92.837205][ T31] gspca_spca500: reg write: error -32 [ 92.837549][ T31] gspca_spca500: reg write: error -32 [ 92.839256][ T31] gspca_spca500: reg write: error -32 [ 92.840446][ T31] gspca_spca500: reg write: error -32 [ 92.840780][ T31] gspca_spca500: reg write: error -32 [ 92.872140][ T31] gspca_spca500: reg write: error -32 [ 92.897548][ T31] gspca_spca500: reg write: error -32 [ 92.897951][ T31] gspca_spca500: reg write: error -32 [ 92.899604][ T31] gspca_spca500: reg write: error -32 [ 92.918954][ T1596] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.919080][ T1596] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.919226][ T1596] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.919356][ T1596] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.919384][ T1596] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.919410][ T1596] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.919434][ T1596] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.919459][ T1596] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.919483][ T1596] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.919511][ T1596] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.882236][ T5735] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.118749][ T5735] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00 [ 94.118777][ T5735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.201862][ T5735] usbtest 5-1:1.0: Linux gadget zero [ 94.201882][ T5735] usbtest 5-1:1.0: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 94.273226][ T821] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.362392][ T5604] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.430596][ T821] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0043, bcdDevice= 1.01 [ 94.430623][ T821] usb 4-1: New USB device strings: Mfr=2, Product=3, SerialNumber=1 [ 94.430640][ T821] usb 4-1: Product: syz [ 94.430653][ T821] usb 4-1: Manufacturer: syz [ 94.430666][ T821] usb 4-1: SerialNumber: syz [ 94.541464][ T821] em28xx 4-1:1.0: New device syz syz @ 480 Mbps (0ccd:0043, interface 0, class 0) [ 94.541500][ T821] em28xx 4-1:1.0: DVB interface 0 found: bulk [ 94.625526][ T5604] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 94.625605][ T5604] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.843662][ T5828] PM: suspend entry (deep) [ 94.994337][ T10] usb 2-1: USB disconnect, device number 2 [ 95.156128][ T821] em28xx 4-1:1.0: unknown em28xx chip ID (64) [ 95.848069][ T5831] CIFS: Attempting to mount //127.0.0.1/share [ 96.403739][ T5604] corsair-psu 0003:1B1C:1C03.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1c03] on usb-dummy_hcd.0-1/input0 [ 96.640871][ T5608] usb 5-1: USB disconnect, device number 2 [ 96.785041][ T5604] corsair-psu 0003:1B1C:1C03.0001: unable to initialize device (-95) [ 96.805010][ T1072] Filesystems sync: 1.935 seconds [ 97.317693][ T5831] CIFS: VFS: cifs_mount failed w/return code = -512 [ 97.568816][ T5604] corsair-psu 0003:1B1C:1C03.0001: probe with driver corsair-psu failed with error -95 [ 97.661231][ T5828] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 97.661378][ T5828] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 97.686956][ T5831] syz.1.11 (5831) used greatest stack depth: 17184 bytes left [ 98.060462][ T5828] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.123103][ T821] em28xx 4-1:1.0: read from i2c device at 0xa0 failed with unknown error (status=254) [ 98.123152][ T821] em28xx 4-1:1.0: board has no eeprom [ 98.182804][ T5604] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.232713][ T5828] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 98.232857][ T5828] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.365862][ T5604] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 98.365947][ T5604] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 98.386959][ T5604] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 98.387041][ T5604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.387061][ T5604] usb 2-1: Product: syz [ 98.387073][ T5604] usb 2-1: Manufacturer: syz [ 98.387085][ T5604] usb 2-1: SerialNumber: syz [ 98.548985][ T5828] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.617188][ T5843] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 98.617299][ T5843] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 98.653322][ T821] em28xx 4-1:1.0: Identified as Terratec Cinergy T XS (MT2060) (card=44) [ 98.653351][ T821] em28xx 4-1:1.0: dvb set to bulk mode. [ 98.767968][ T5838] em28xx 4-1:1.0: Binding DVB extension [ 98.781242][ T821] usb 4-1: USB disconnect, device number 3 [ 98.863811][ T5828] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 98.863935][ T5828] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 99.016367][ T5838] em28xx 4-1:1.0: writing to i2c device at 0x1e failed (error=-19) [ 99.016391][ T5838] zl10353_read_register: readreg error (reg=127, ret==-19) [ 99.016439][ T5838] em28xx 4-1:1.0: frontend initialization failed [ 99.027291][ T5838] em28xx 4-1:1.0: Remote control support is not available for this card. [ 99.033820][ T5584] usb 1-1: USB disconnect, device number 2 [ 99.074730][ T821] em28xx 4-1:1.0: Disconnecting em28xx [ 99.074855][ T821] em28xx 4-1:1.0: Closing input extension [ 99.343992][ T5604] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input5 [ 99.460414][ T5828] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 99.692067][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.943883][ T5828] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 99.981253][ T5828] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.262671][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.398016][ T5828] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.723172][ T5604] usb 2-1: USB disconnect, device number 3 [ 100.723262][ C0] usbtouchscreen 2-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 100.884679][ T5828] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 100.884753][ T5828] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.904347][ T5617] Bluetooth: hci4: command 0x0c1a tx timeout [ 101.007121][ T5828] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 101.010154][ T821] em28xx 4-1:1.0: Freeing device [ 101.081194][ T5728] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.174054][ T5828] Freezing user space processes [ 101.217088][ T5852] NFSD: Failed to start, no listeners configured. [ 101.248222][ T5728] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 101.248249][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.248267][ T5728] usb 5-1: Product: syz [ 101.248279][ T5728] usb 5-1: Manufacturer: syz [ 101.248291][ T5728] usb 5-1: SerialNumber: syz [ 101.635448][ T5858] infiniband syz0: set active [ 101.635468][ T5858] infiniband syz0: added veth0 [ 101.680453][ T5858] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 101.680492][ T5858] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 101.680525][ T5858] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 101.773256][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.805133][ T5858] RDS/IB: syz0: added [ 101.805736][ T5858] smc: adding ib device syz0 with port count 1 [ 101.805904][ T5858] smc: ib device syz0 port 1 has no pnetid [ 101.886433][ T5828] ------------[ cut here ]------------ [ 101.886447][ T5828] debug_locks && p->lockdep_depth [ 101.886466][ T5828] WARNING: kernel/freezer.c:139 at __set_task_frozen+0x260/0x340, CPU#0: syz.2.10/5828 [ 101.886521][ T5828] Modules linked in: [ 101.886552][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: syz.2.10 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 101.886579][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.886594][ T5828] RIP: 0010:__set_task_frozen+0x260/0x340 [ 101.886625][ T5828] Code: 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 15 09 97 09 cc e8 ef 21 15 00 90 0f 0b 90 e9 f7 fe ff ff e8 e1 21 15 00 90 <0f> 0b 90 eb 93 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c c3 fd ff ff [ 101.886641][ T5828] RSP: 0018:ffffc90005b179f0 EFLAGS: 00010087 [ 101.886657][ T5828] RAX: ffffffff81b0b75f RBX: ffff888028155d00 RCX: 0000000000080000 [ 101.886672][ T5828] RDX: ffffc900067c1000 RSI: 00000000000490ab RDI: 00000000000490ac [ 101.886686][ T5828] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 101.886697][ T5828] R10: dffffc0000000000 R11: ffffffff81b0b500 R12: ffff888028155d18 [ 101.886712][ T5828] R13: 1ffff1100502aba3 R14: 0000000000000000 R15: ffff888028156900 [ 101.886726][ T5828] FS: 00007f23b01b66c0(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 101.886742][ T5828] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.886756][ T5828] CR2: 00007efcf6005d58 CR3: 0000000040dea000 CR4: 00000000003526f0 [ 101.886773][ T5828] Call Trace: [ 101.886780][ T5828] [ 101.886790][ T5828] ? __pfx___set_task_frozen+0x10/0x10 [ 101.886828][ T5828] task_call_func+0x1aa/0x260 [ 101.886868][ T5828] freeze_task+0x216/0x390 [ 101.886901][ T5828] ? __pfx_freeze_task+0x10/0x10 [ 101.886945][ T5828] try_to_freeze_tasks+0x190/0x620 [ 101.886985][ T5828] freeze_processes+0xce/0x1e0 [ 101.887012][ T5828] pm_suspend+0x2f1/0x760 [ 101.887046][ T5828] state_store+0x206/0x290 [ 101.887070][ T5828] ? __pfx_sysfs_kf_write+0x10/0x10 [ 101.887088][ T5828] kernfs_fop_write_iter+0x3a5/0x540 [ 101.887123][ T5828] vfs_write+0x61e/0xbb0 [ 101.887160][ T5828] ? __pfx_vfs_write+0x10/0x10 [ 101.887189][ T5828] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 101.887217][ T5828] ? lockdep_hardirqs_on+0x7a/0x110 [ 101.887246][ T5828] ? mutex_lock_nested+0x152/0x1d0 [ 101.887266][ T5828] ? fdget_pos+0x252/0x320 [ 101.887298][ T5828] ksys_write+0x156/0x270 [ 101.887327][ T5828] ? __pfx_ksys_write+0x10/0x10 [ 101.887363][ T5828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.887385][ T5828] do_syscall_64+0x174/0x580 [ 101.887411][ T5828] ? trace_irq_disable+0x3b/0x140 [ 101.887431][ T5828] ? clear_bhb_loop+0x40/0x90 [ 101.887456][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.887475][ T5828] RIP: 0033:0x7f23b1f5e019 [ 101.887500][ T5828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.887516][ T5828] RSP: 002b:00007f23b01b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 101.887535][ T5828] RAX: ffffffffffffffda RBX: 00007f23b21e5fa0 RCX: 00007f23b1f5e019 [ 101.887550][ T5828] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 0000000000000004 [ 101.887562][ T5828] RBP: 00007f23b1ff500c R08: 0000000000000000 R09: 0000000000000000 [ 101.887574][ T5828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.887586][ T5828] R13: 00007f23b21e6038 R14: 00007f23b21e5fa0 R15: 00007fffd6b529b8 [ 101.887621][ T5828] [ 101.887631][ T5828] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 101.887644][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: syz.2.10 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 101.887666][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.887676][ T5828] Call Trace: [ 101.887684][ T5828] [ 101.887691][ T5828] vpanic+0x56c/0xa60 [ 101.887712][ T5828] ? __pfx__printk+0x10/0x10 [ 101.887736][ T5828] ? __pfx_vpanic+0x10/0x10 [ 101.887753][ T5828] ? is_bpf_text_address+0x292/0x2b0 [ 101.887777][ T5828] ? is_bpf_text_address+0x26/0x2b0 [ 101.887810][ T5828] panic+0xc5/0xd0 [ 101.887836][ T5828] ? __pfx_panic+0x10/0x10 [ 101.887876][ T5828] __warn+0x315/0x4c0 [ 101.887894][ T5828] ? __set_task_frozen+0x260/0x340 [ 101.887928][ T5828] ? __set_task_frozen+0x260/0x340 [ 101.887958][ T5828] __report_bug+0x276/0x570 [ 101.887991][ T5828] ? __set_task_frozen+0x260/0x340 [ 101.888025][ T5828] ? __pfx___report_bug+0x10/0x10 [ 101.888054][ T5828] ? __lock_acquire+0x683/0x2ce0 [ 101.888081][ T5828] ? __lock_acquire+0x683/0x2ce0 [ 101.888109][ T5828] ? __set_task_frozen+0x260/0x340 [ 101.888138][ T5828] report_bug+0x16a/0x220 [ 101.888165][ T5828] ? __set_task_frozen+0x260/0x340 [ 101.888192][ T5828] ? __set_task_frozen+0x262/0x340 [ 101.888221][ T5828] handle_bug+0x9c/0x200 [ 101.888252][ T5828] exc_invalid_op+0x1a/0x50 [ 101.888282][ T5828] asm_exc_invalid_op+0x1a/0x20 [ 101.888301][ T5828] RIP: 0010:__set_task_frozen+0x260/0x340 [ 101.888330][ T5828] Code: 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 15 09 97 09 cc e8 ef 21 15 00 90 0f 0b 90 e9 f7 fe ff ff e8 e1 21 15 00 90 <0f> 0b 90 eb 93 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c c3 fd ff ff [ 101.888345][ T5828] RSP: 0018:ffffc90005b179f0 EFLAGS: 00010087 [ 101.888361][ T5828] RAX: ffffffff81b0b75f RBX: ffff888028155d00 RCX: 0000000000080000 [ 101.888375][ T5828] RDX: ffffc900067c1000 RSI: 00000000000490ab RDI: 00000000000490ac [ 101.888389][ T5828] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 101.888400][ T5828] R10: dffffc0000000000 R11: ffffffff81b0b500 R12: ffff888028155d18 [ 101.888415][ T5828] R13: 1ffff1100502aba3 R14: 0000000000000000 R15: ffff888028156900 [ 101.888434][ T5828] ? __pfx___set_task_frozen+0x10/0x10 [ 101.888465][ T5828] ? __set_task_frozen+0x25f/0x340 [ 101.888505][ T5828] ? __pfx___set_task_frozen+0x10/0x10 [ 101.888535][ T5828] task_call_func+0x1aa/0x260 [ 101.888573][ T5828] freeze_task+0x216/0x390 [ 101.888606][ T5828] ? __pfx_freeze_task+0x10/0x10 [ 101.888650][ T5828] try_to_freeze_tasks+0x190/0x620 [ 101.888685][ T5828] freeze_processes+0xce/0x1e0 [ 101.888712][ T5828] pm_suspend+0x2f1/0x760 [ 101.888741][ T5828] state_store+0x206/0x290 [ 101.888765][ T5828] ? __pfx_sysfs_kf_write+0x10/0x10 [ 101.888783][ T5828] kernfs_fop_write_iter+0x3a5/0x540 [ 101.888818][ T5828] vfs_write+0x61e/0xbb0 [ 101.888862][ T5828] ? __pfx_vfs_write+0x10/0x10 [ 101.888892][ T5828] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 101.888919][ T5828] ? lockdep_hardirqs_on+0x7a/0x110 [ 101.888948][ T5828] ? mutex_lock_nested+0x152/0x1d0 [ 101.888968][ T5828] ? fdget_pos+0x252/0x320 [ 101.889000][ T5828] ksys_write+0x156/0x270 [ 101.889029][ T5828] ? __pfx_ksys_write+0x10/0x10 [ 101.889065][ T5828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.889087][ T5828] do_syscall_64+0x174/0x580 [ 101.889112][ T5828] ? trace_irq_disable+0x3b/0x140 [ 101.889132][ T5828] ? clear_bhb_loop+0x40/0x90 [ 101.889157][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.889177][ T5828] RIP: 0033:0x7f23b1f5e019 [ 101.889194][ T5828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.889209][ T5828] RSP: 002b:00007f23b01b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 101.889227][ T5828] RAX: ffffffffffffffda RBX: 00007f23b21e5fa0 RCX: 00007f23b1f5e019 [ 101.889241][ T5828] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 0000000000000004 [ 101.889253][ T5828] RBP: 00007f23b1ff500c R08: 0000000000000000 R09: 0000000000000000 [ 101.889265][ T5828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.889277][ T5828] R13: 00007f23b21e6038 R14: 00007f23b21e5fa0 R15: 00007fffd6b529b8 [ 101.889313][ T5828] [ 101.889450][ T5828] Kernel Offset: disabled