last executing test programs: 6.678803952s ago: executing program 1 (id=2): r0 = syz_usb_connect$uac3(0x3, 0xeb, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902d9000301008032080b0003010020000904000000010120000a2401003d00000000000c240a030300000000000000142402010102000300000000000000000000000013240302010300010300000000000000000000090401000001022000090401010101022000162401020000000001010000000000000002100000000624020102100905010900020100000a250100000000000000090402000001022000090402010101022000162401010000000001010000000000000002100000000624020102100905820900020100000a250100000000000000"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000400)={0xa1, 0x1, 0x6, "060020010000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000000)={0x1}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x1, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x2, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x3, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x4, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x5, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x1, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x2, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x3, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x4, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x5, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 5.852164303s ago: executing program 2 (id=3): r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040109720770000000000010902350001010080320904000005ffffff000705810340000107058202400000070503024000000705840240000007050502400000"], 0x0) syz_usb_control_io(r0, &(0x7f00000000c0), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f00000001c0), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f00000002c0), &(0x7f0000000340)) syz_usb_control_io(r0, &(0x7f0000000440), &(0x7f0000000480)) nanosleep(&(0x7f0000000300)={0x2}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./ttyUSB0\x00', 0x81b6, 0xbc00) openat(0xffffffffffffff9c, &(0x7f0000000400)='./ttyUSB0\x00', 0x802, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000540)='AAAAAAA') syz_usb_ep_write(r0, 0x82, 0x7, &(0x7f0000000580)='BBBBBBB') syz_usb_ep_write(r0, 0x84, 0x7, &(0x7f00000005c0)='CCCCCCC') nanosleep(&(0x7f0000000300)={0x1}, 0x0) 5.539600701s ago: executing program 0 (id=1): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x105, 0x0, 0x0, {0xa, 0x40, 0x4, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}}, 0x0) 5.410155244s ago: executing program 0 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000006000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000006000)='./sys\x00', &(0x7f0000006100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000006200)='./sys/module/psmouse/parameters/synaptics_intertouch\x00', 0x1, 0x0) write(r0, &(0x7f0000006300)='1\x00', 0x2) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000006400), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000006502)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f0000006500), 0x2) writev(r1, &(0x7f0000002000)=[{&(0x7f0000003000)="02fa", 0x2}, {&(0x7f0000003002)="0200", 0x2}, {&(0x7f0000003002), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003004)="0205", 0x2}, {&(0x7f0000003006)="0247", 0x2}, {&(0x7f0000003008)="0207", 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f000000300a)="02aa", 0x2}, {&(0x7f0000003002), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003004), 0x2}, {&(0x7f0000003006), 0x2}, {&(0x7f0000003008), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003002), 0x2}, {&(0x7f0000003002), 0x2}, {&(0x7f0000003002), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f000000300c)="02c0", 0x2}, {&(0x7f0000003002), 0x2}, {&(0x7f0000003002), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003002), 0x2}, {&(0x7f0000003002), 0x2}, {&(0x7f0000003002), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003002), 0x2}, {&(0x7f000000300e)="0240", 0x2}, {&(0x7f0000003002), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003002), 0x2}, {&(0x7f0000003002), 0x2}, {&(0x7f0000003002), 0x2}], 0x5f) nanosleep(&(0x7f0000006600)={0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000006700)='./sys/bus/serio/devices/serio0/protocol\x00', 0x1, 0x0) write(r2, &(0x7f0000006800)='bare\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000006710)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r3, &(0x7f0000006800)='bare\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000006720)='./sys/bus/serio/devices/serio2/protocol\x00', 0x1, 0x0) write(r4, &(0x7f0000006800)='bare\x00', 0x4) 4.535042626s ago: executing program 0 (id=6): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r3, 0x3, 0x11, r2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000001000)="0f01180f0b", 0x5}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc1, 0x0, 0xffffffffffffffff}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x38f, 0x0, 0x1}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x186, 0x0, 0x5300c0}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0xc0010004, 0x0, 0xffffffffffffffff}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0xc0010000, 0x0, 0x5300c0}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.184379275s ago: executing program 1 (id=7): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000102030109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, &(0x7f0000001000)={0x0, 0x0, 0x2, {0x2}}, &(0x7f0000001100)={0x0, 0x0, 0x2, @string={0x2, 0x0}}, &(0x7f0000001200)={0x0, 0x0, 0x5, {0x5, 0x0, 0x5}}, &(0x7f0000001300)={0x0, 0x0, 0xf, {0xf, 0x0}}, &(0x7f0000001400)={0x0, 0x0, 0xc, {0xc, 0x0}}}, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000000"}, &(0x7f0000001500)={0x0, 0xa, 0x1}, &(0x7f0000001600)={0x0, 0x8, 0x1}, &(0x7f0000001700)={0x20, 0x0, 0x4}, &(0x7f0000001800)={0x20, 0x0, 0x8, {0x0, 0x0, [0x0]}}, &(0x7f0000001900)={0x40, 0x7, 0x2}, &(0x7f0000001a00)={0x40, 0x8, 0x1}, &(0x7f0000001b00)={0x40, 0xb, 0x2}, &(0x7f0000001c00)={0x40, 0xf, 0x2}, &(0x7f0000001d00)={0x40, 0x13, 0x6}, &(0x7f0000001e00)={0x40, 0x17, 0x6}, &(0x7f0000001f00)={0x40, 0x19, 0x2}, &(0x7f0000002000)={0x40, 0x1a, 0x2}, &(0x7f0000002100)={0x40, 0x1c, 0x1}, &(0x7f0000002200)={0x40, 0x1f, 0x1}, &(0x7f0000002300)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, &(0x7f0000000700), &(0x7f0000000800)={0x84, &(0x7f0000002400), &(0x7f0000001500), &(0x7f0000001600), &(0x7f0000001700), &(0x7f0000001800), &(0x7f0000001900), &(0x7f0000001a00), &(0x7f0000001b00), &(0x7f0000001c00), &(0x7f0000001d00), &(0x7f0000001e00), &(0x7f0000001f00), &(0x7f0000002000), &(0x7f0000002100), &(0x7f0000002200), &(0x7f0000002300)}) syz_usb_control_io(r0, &(0x7f0000000700), &(0x7f0000000300)={0x84, &(0x7f0000000400)={0xc0, 0x0, 0xf, "0f00000100"/15}, &(0x7f0000001500), &(0x7f0000001600), &(0x7f0000001700), &(0x7f0000001800), &(0x7f0000001900), &(0x7f0000001a00), &(0x7f0000001b00), &(0x7f0000001c00), &(0x7f0000001d00), &(0x7f0000001e00), &(0x7f0000001f00), &(0x7f0000002000), &(0x7f0000002100), &(0x7f0000002200), &(0x7f0000002300)}) nanosleep(&(0x7f0000000500)={0x1}, 0x0) 4.014146639s ago: executing program 0 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='mydomain / 2147483647 8192 0 0 0\n\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount(&(0x7f0000000340)=@filename='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000380)='nfs4\x00', 0x0, &(0x7f00000003c0)='nolock,addr=127.0.0.1,port=2049\x00') openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/file\x00', 0x42, 0x1ff) 2.583403455s ago: executing program 0 (id=9): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x1ff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x400c642e, &(0x7f0000000200)={0x0, 0x0, r1}) 2.502863527s ago: executing program 0 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='disk\n\x00', 0x6) 2.059542819s ago: executing program 2 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/nf_conntrack_sip\x00', 0x0, 0x0) 1.846152894s ago: executing program 2 (id=15): r0 = syz_usb_connect(0x0, 0x91, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d04210800010102030109027f0002010080fa09040000010e0100000d240100013f000000000001010f24020101020000000000000000001a240603820661637050ab49b8ccb3855e8d22560101010101000924030201010003000705810308001009040100010e0200000e2401011700820002000000010009240901000000000007058205000401"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000001000)={0x0, 0x0, 0x1a, "0000010100000000000000000000000000000000000000040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x2) r2 = syz_open_dev$video(&(0x7f0000000100), 0x1, 0x2) r3 = syz_open_dev$video(&(0x7f0000000100), 0x10, 0x2) r4 = syz_open_dev$video(&(0x7f0000000100), 0x11, 0x2) r5 = syz_open_dev$video(&(0x7f0000000100), 0x40, 0x2) r6 = syz_open_dev$video(&(0x7f0000000100), 0x41, 0x2) ioctl(r1, 0xc0607520, &(0x7f0000000300)="016d040a74657374000000000000000000000000000000000000000000000000820661637050ab49b8ccb3855e8d225601100000010000000100"/88) ioctl(r2, 0xc0607520, &(0x7f0000000300)="016d040a74657374000000000000000000000000000000000000000000000000820661637050ab49b8ccb3855e8d225601100000010000000100"/88) ioctl(r3, 0xc0607520, &(0x7f0000000300)="016d040a74657374000000000000000000000000000000000000000000000000820661637050ab49b8ccb3855e8d225601100000010000000100"/88) ioctl(r4, 0xc0607520, &(0x7f0000000300)="016d040a74657374000000000000000000000000000000000000000000000000820661637050ab49b8ccb3855e8d225601100000010000000100"/88) ioctl(r5, 0xc0607520, &(0x7f0000000300)="016d040a74657374000000000000000000000000000000000000000000000000820661637050ab49b8ccb3855e8d225601100000010000000100"/88) ioctl(r6, 0xc0607520, &(0x7f0000000300)="016d040a74657374000000000000000000000000000000000000000000000000820661637050ab49b8ccb3855e8d225601100000010000000100"/88) 1.825626294s ago: executing program 3 (id=16): unshare(0x40000000) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x100, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x40) write$ppp(r1, &(0x7f0000000200)="150329", 0x3) ioctl(r1, 0x4010744d, &(0x7f0000000180)="00020020000000000300000000000000") r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000300)={0x11, 0x3, 0x1}, 0x14) sendto$packet(r3, &(0x7f0000000400)="000000000000000000000000886411000001000980fd02010007150329", 0x1d, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000500)="000000000000000000000000886411000001000600fd00000000", 0x1a, 0x0, 0x0, 0x0) 1.500490242s ago: executing program 3 (id=17): r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000100)={{}, {0x3}}, 0x0) 1.370048626s ago: executing program 3 (id=18): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ee, &(0x7f00000051c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000100)={{0x0}, 'subvol\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/subvol/file\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000300)='data', 0x2000) fsync(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/subvol\x00', 0x10000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000400)={{r2}, 0x0, 0x2, @unused, @name='snap1\x00'}) fallocate(r1, 0x3, 0x0, 0x1000) fsync(r1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000500)={{r2}, 0x0, 0x2, @unused, @name='snap2\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0/snap2\x00', 0x10000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./send_stream\x00', 0x42, 0x1ff) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000800)={{r4}, 0x0, 0x0, 0x101}) 1.180671761s ago: executing program 1 (id=19): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40402000240001010203010902200001010080fa0904000002ffffff000705810200020007050102000200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0800000100") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0801000000") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="080102000000") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') clock_nanosleep(0x0, 0x0, &(0x7f0000000200)={0x2}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5446, 0x0) 471.829538ms ago: executing program 3 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/e1000/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:04.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0000:00:04.0\x00', 0xd) 18.1767ms ago: executing program 3 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfs_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfs_mnt\x00', &(0x7f0000000100)='nfs4\x00', 0x0, &(0x7f0000000200)='v4\x00') 0s ago: executing program 3 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./recovery\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/recoverydir\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='./recovery\n\x00', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='tcp 2049\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='1\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='127.0.0.1:/\x00', &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='nfs4\x00', 0x0, &(0x7f0000000380)='addr=127.0.0.1,nolock\x00') r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/file\x00', 0x42, 0x1ff) fchmod(r4, 0x1ff) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 48.847826][ T5437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.864794][ T5437] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.16' (ED25519) to the list of known hosts. syzkaller login: [ 72.426029][ T5762] cgroup: Unknown subsys name 'net' [ 72.558521][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.942947][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.304045][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.320693][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.328304][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.338523][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.346860][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.354764][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.362074][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.379885][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.387624][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.396305][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.404252][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.411603][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.453272][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.473126][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.480912][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.489550][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.497430][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.505730][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.513829][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.522912][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.530457][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.546716][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.556913][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.572672][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.771015][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 75.844811][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 76.004348][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.011772][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.020175][ T5776] bridge_slave_0: entered allmulticast mode [ 76.027344][ T5776] bridge_slave_0: entered promiscuous mode [ 76.040450][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.047588][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.055073][ T5776] bridge_slave_1: entered allmulticast mode [ 76.061679][ T5776] bridge_slave_1: entered promiscuous mode [ 76.082620][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 76.101829][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.109238][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.116435][ T5773] bridge_slave_0: entered allmulticast mode [ 76.123678][ T5773] bridge_slave_0: entered promiscuous mode [ 76.153965][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.163398][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.170515][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.178748][ T5773] bridge_slave_1: entered allmulticast mode [ 76.185533][ T5773] bridge_slave_1: entered promiscuous mode [ 76.212029][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.283035][ T5776] team0: Port device team_slave_0 added [ 76.291150][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.312654][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 76.326535][ T5776] team0: Port device team_slave_1 added [ 76.344275][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.404611][ T5773] team0: Port device team_slave_0 added [ 76.416917][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.423886][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.450051][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.472624][ T5773] team0: Port device team_slave_1 added [ 76.488311][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.495449][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.521503][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.533402][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.540532][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.547873][ T5781] bridge_slave_0: entered allmulticast mode [ 76.554928][ T5781] bridge_slave_0: entered promiscuous mode [ 76.582696][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.589854][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.597203][ T5781] bridge_slave_1: entered allmulticast mode [ 76.603919][ T5781] bridge_slave_1: entered promiscuous mode [ 76.620757][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.627748][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.653664][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.681506][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.688674][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.714888][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.788356][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.810027][ T5776] hsr_slave_0: entered promiscuous mode [ 76.816325][ T5776] hsr_slave_1: entered promiscuous mode [ 76.835349][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.844865][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.851955][ T5784] bridge_slave_0: entered allmulticast mode [ 76.858822][ T5784] bridge_slave_0: entered promiscuous mode [ 76.867742][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.875279][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.882665][ T5784] bridge_slave_1: entered allmulticast mode [ 76.889562][ T5784] bridge_slave_1: entered promiscuous mode [ 76.898150][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.961968][ T5773] hsr_slave_0: entered promiscuous mode [ 76.968847][ T5773] hsr_slave_1: entered promiscuous mode [ 76.975234][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.983431][ T5773] Cannot create hsr debugfs directory [ 77.012982][ T5781] team0: Port device team_slave_0 added [ 77.037178][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.050529][ T5781] team0: Port device team_slave_1 added [ 77.077185][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.138915][ T5784] team0: Port device team_slave_0 added [ 77.151935][ T5784] team0: Port device team_slave_1 added [ 77.165468][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.172567][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.198695][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.216863][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.223848][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.249987][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.345773][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.354124][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.380583][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.393258][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.400202][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.426230][ T5775] Bluetooth: hci0: command tx timeout [ 77.431836][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.508698][ T5775] Bluetooth: hci1: command tx timeout [ 77.524458][ T5784] hsr_slave_0: entered promiscuous mode [ 77.530811][ T5784] hsr_slave_1: entered promiscuous mode [ 77.537035][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.544792][ T5784] Cannot create hsr debugfs directory [ 77.567989][ T5781] hsr_slave_0: entered promiscuous mode [ 77.574379][ T5781] hsr_slave_1: entered promiscuous mode [ 77.580339][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.583345][ T5775] Bluetooth: hci2: command tx timeout [ 77.588133][ T5781] Cannot create hsr debugfs directory [ 77.662361][ T5775] Bluetooth: hci3: command tx timeout [ 77.702032][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.713030][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.739924][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.750264][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.897300][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.924763][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.934379][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.947894][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.020401][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.056377][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.065980][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.076488][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.158192][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.177970][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.200030][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.208080][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.218770][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.235694][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.247721][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.255060][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.278647][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.285799][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.330856][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.363461][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.417448][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.424634][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.437258][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.444422][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.502042][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.609528][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.647089][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.654286][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.684411][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.691910][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.725770][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.781258][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.811782][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.837199][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.844377][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.855238][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.862392][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.970449][ T5773] veth0_vlan: entered promiscuous mode [ 78.997026][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.034856][ T5773] veth1_vlan: entered promiscuous mode [ 79.116114][ T5773] veth0_macvtap: entered promiscuous mode [ 79.154931][ T5773] veth1_macvtap: entered promiscuous mode [ 79.209325][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.264981][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.294679][ T5776] veth0_vlan: entered promiscuous mode [ 79.304124][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.317232][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.327562][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.336456][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.371299][ T5776] veth1_vlan: entered promiscuous mode [ 79.421968][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.440616][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.481596][ T5776] veth0_macvtap: entered promiscuous mode [ 79.503248][ T5775] Bluetooth: hci0: command tx timeout [ 79.527949][ T5776] veth1_macvtap: entered promiscuous mode [ 79.562164][ T5784] veth0_vlan: entered promiscuous mode [ 79.582897][ T5775] Bluetooth: hci1: command tx timeout [ 79.611142][ T5784] veth1_vlan: entered promiscuous mode [ 79.623403][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.631340][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.663087][ T5775] Bluetooth: hci2: command tx timeout [ 79.684752][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.695303][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.706082][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.706921][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.725488][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.744780][ T5775] Bluetooth: hci3: command tx timeout [ 79.757578][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.772330][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.787342][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.797741][ T5781] veth0_vlan: entered promiscuous mode [ 79.829585][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.838496][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.847622][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.856459][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.877141][ T5781] veth1_vlan: entered promiscuous mode [ 79.928806][ T5784] veth0_macvtap: entered promiscuous mode [ 79.965964][ T5784] veth1_macvtap: entered promiscuous mode [ 80.004602][ T5781] veth0_macvtap: entered promiscuous mode [ 80.024580][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.035478][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.046292][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.056965][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.070945][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.081134][ T5781] veth1_macvtap: entered promiscuous mode [ 80.098703][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.109524][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.120709][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.132032][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.144322][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.169801][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.181141][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.189967][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.199846][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.217393][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.228978][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.238961][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.249607][ T28] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.253455][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.268828][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.280991][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.294407][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.346099][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.358261][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.370512][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.381430][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.392634][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.403256][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.414940][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.429869][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.441890][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.450869][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.461167][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.466840][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.478758][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.481249][ T28] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 80.509471][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.523204][ T28] usb 2-1: Product: syz [ 80.527395][ T28] usb 2-1: Manufacturer: syz [ 80.532000][ T28] usb 2-1: SerialNumber: syz [ 80.577880][ T3461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.592663][ T3461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.655569][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.668229][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.723770][ T3486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.760149][ T3486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.804793][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.823643][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.865459][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.878646][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.082551][ T5835] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.315350][ T5835] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 81.325658][ T5835] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 81.351546][ T5835] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 81.363216][ T5835] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 81.374730][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.382669][ T5835] usb 3-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 81.391727][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.404741][ T5840] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 81.412762][ T5840] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 81.420067][ T5840] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 81.425628][ T5849] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input7 [ 81.428476][ T5840] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 81.454117][ T5835] mos7720 3-1:1.0: Moschip 2 port adapter converter detected [ 81.582714][ T5775] Bluetooth: hci0: command tx timeout [ 81.596950][ T23] usb 4-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice= 0.00 [ 81.607827][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.630741][ T23] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 81.661072][ T5835] usb 3-1: mos7720: usb_control_msg() failed: 0 [ 81.663588][ T5775] Bluetooth: hci1: command tx timeout [ 81.713056][ T5835] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 81.742851][ T5775] Bluetooth: hci2: command tx timeout [ 81.761494][ T5835] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 81.778521][ T28] usb 2-1: 1:1 : unsupported format bits 0x2020000 [ 81.813486][ T28] usb 2-1: 2:1 : unsupported format bits 0x2020000 [ 81.826234][ T5775] Bluetooth: hci3: command tx timeout [ 81.875941][ T28] usb 2-1: USB disconnect, device number 2 [ 81.940963][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 82.114540][ T5854] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.229119][ T5857] kvm: kvm [5853]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0xffffffffffffffff [ 82.245944][ T5857] kvm: kvm [5853]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0x5300c0 [ 82.259103][ T5857] kvm: kvm [5853]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0xffffffffffffffff [ 82.282753][ T5857] kvm: kvm [5853]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x5300c0 [ 82.762520][ T5812] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 82.954876][ T5812] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 82.964115][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.972127][ T5812] usb 2-1: Product: syz [ 82.976905][ T5812] usb 2-1: Manufacturer: syz [ 82.982145][ T5812] usb 2-1: SerialNumber: syz [ 83.662387][ T5775] Bluetooth: hci0: command tx timeout [ 83.742498][ T5775] Bluetooth: hci1: command tx timeout [ 83.822511][ T5775] Bluetooth: hci2: command tx timeout [ 83.842489][ T5862] NFSD: attempt to initialize umh client tracking in a container ignored. [ 83.852362][ T5862] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 83.861209][ T5862] NFSD: Unable to initialize client recovery tracking! (-22) [ 83.869186][ T5862] NFSD: starting 90-second grace period (net f0000509) [ 83.906363][ T5775] Bluetooth: hci3: command tx timeout [ 84.117176][ T5872] PM: hibernation: hibernation entry [ 84.245926][ T2321] pvrusb2: Failed to submit write-control URB status=-2 [ 84.271607][ T2321] pvrusb2: Device being rendered inoperable [ 84.274093][ T23] usb 4-1: USB disconnect, device number 2 [ 84.310470][ T2321] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 84.327931][ T27] audit: type=1800 audit(1785894846.152:2): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.11" name="zoned" dev="configfs" ino=8213 res=0 errno=0 [ 84.340272][ T2321] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 84.357004][ T27] audit: type=1800 audit(1785894846.162:3): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.11" name="power" dev="configfs" ino=8214 res=0 errno=0 [ 84.389791][ T5875] zonefs (nullb0) ERROR: Not a zoned block device [ 84.417822][ T5874] null_blk: disk my_nullb created [ 84.483479][ T8] usb 3-1: USB disconnect, device number 2 [ 84.504399][ T8] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 84.546307][ T8] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 84.562873][ T8] mos7720 3-1:1.0: device disconnected [ 84.806260][ T5812] usb 2-1: probing VID:PID(0424:012C) [ 84.823906][ T5812] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 84.830861][ T5812] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 84.839414][ T5812] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 84.846510][ T5812] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 84.856503][ T5812] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 84.876641][ T5812] vub300: probe of 2-1:1.0 failed with error -71 [ 84.899982][ T5812] usb 2-1: USB disconnect, device number 3 [ 84.940369][ T5872] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 84.950711][ T5872] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 84.961301][ T5872] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 84.970121][ T5872] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 84.976905][ T5872] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 84.985645][ T5872] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 84.992419][ T5872] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 84.998380][ T5872] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 85.007703][ T5872] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 85.019550][ T5872] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 85.032177][ T5872] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 85.052546][ T5872] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 85.097124][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.193781][ T5891] syz.3.18[5891]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 85.325610][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 85.337212][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.353587][ T8] usb 3-1: Product: syz [ 85.357798][ T8] usb 3-1: Manufacturer: syz [ 85.372447][ T8] usb 3-1: SerialNumber: syz [ 85.422694][ T8] usb 3-1: Found UVC 1.00 device syz (046d:0821) [ 85.429200][ T8] usb 3-1: No streaming interface found for terminal 2. [ 85.495774][ T5872] Filesystems sync: 0.387 seconds [ 85.580431][ T5891] loop3: detected capacity change from 0 to 32768 [ 85.600681][ T5891] BTRFS: device fsid 28302361-d975-4c41-bd4c-c547b14b74a1 devid 1 transid 8 /dev/loop3 scanned by syz.3.18 (5891) [ 85.653080][ T5891] BTRFS info (device loop3): first mount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1 [ 85.664998][ T5891] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 85.674549][ T5891] BTRFS info (device loop3): using free space tree [ 85.753372][ T5812] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 85.762004][ T5891] BTRFS info (device loop3): enabling ssd optimizations [ 85.779302][ T5891] BTRFS info (device loop3): auto enabling async discard [ 85.990069][ T5812] usb 2-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 1.00 [ 86.009503][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.019621][ T5812] usb 2-1: Product: syz [ 86.029745][ T5812] usb 2-1: Manufacturer: syz [ 86.039858][ T5812] usb 2-1: SerialNumber: syz [ 86.075303][ T5812] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 86.175389][ T5784] BTRFS info (device loop3): last unmount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1 [ 86.222324][ T5775] Bluetooth: hci0: command 0x0c1a tx timeout [ 86.790045][ T5872] Freezing user space processes [ 86.795188][ T1200] cfg80211: failed to load regulatory.db [ 87.022952][ T5775] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.029981][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.032370][ T5087] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.377459][ T2321] usb 2-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 87.387889][ T2321] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 87.844752][ T5919] NFSD: attempt to initialize umh client tracking in a container ignored. [ 87.854148][ T5919] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 87.862987][ T5919] NFSD: Unable to initialize client recovery tracking! (-22) [ 87.870386][ T5919] NFSD: starting 90-second grace period (net f0000591) [ 87.896024][ T5872] ------------[ cut here ]------------ [ 87.896673][ T5872] [ 87.896679][ T5872] ====================================================== [ 87.896684][ T5872] WARNING: possible circular locking dependency detected [ 87.896690][ T5872] syzkaller #0 Not tainted [ 87.896698][ T5872] ------------------------------------------------------ [ 87.896703][ T5872] syz.0.10/5872 is trying to acquire lock: [ 87.896712][ T5872] ffffffff8d1260a0 (console_owner){....}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 87.896768][ T5872] [ 87.896768][ T5872] but task is already holding lock: [ 87.896773][ T5872] ffff88802e5b6418 (&p->pi_lock){-.-.}-{2:2}, at: task_call_func+0x43/0x260 [ 87.896808][ T5872] [ 87.896808][ T5872] which lock already depends on the new lock. [ 87.896808][ T5872] [ 87.896812][ T5872] [ 87.896812][ T5872] the existing dependency chain (in reverse order) is: [ 87.896817][ T5872] [ 87.896817][ T5872] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 87.896838][ T5872] _raw_spin_lock_irqsave+0xb4/0x100 [ 87.896862][ T5872] try_to_wake_up+0x5b/0x10e0 [ 87.896876][ T5872] __wake_up_common+0x28e/0x4d0 [ 87.896894][ T5872] __wake_up+0x125/0x1a0 [ 87.896909][ T5872] tty_port_default_wakeup+0xa2/0xf0 [ 87.896925][ T5872] serial8250_tx_chars+0x6a2/0x8b0 [ 87.896944][ T5872] serial8250_handle_irq+0x567/0x730 [ 87.896962][ T5872] serial8250_default_handle_irq+0xb8/0x1a0 [ 87.896982][ T5872] serial8250_interrupt+0x9f/0x1c0 [ 87.897008][ T5872] __handle_irq_event_percpu+0x271/0x940 [ 87.897030][ T5872] handle_irq_event+0x8b/0x1e0 [ 87.897052][ T5872] handle_edge_irq+0x246/0xb20 [ 87.897068][ T5872] __common_interrupt+0x13b/0x230 [ 87.897086][ T5872] common_interrupt+0xb4/0xd0 [ 87.897103][ T5872] asm_common_interrupt+0x26/0x40 [ 87.897120][ T5872] pv_native_safe_halt+0xf/0x10 [ 87.897139][ T5872] default_idle+0x13/0x20 [ 87.897159][ T5872] default_idle_call+0x6c/0xa0 [ 87.897178][ T5872] do_idle+0x221/0x5c0 [ 87.897193][ T5872] cpu_startup_entry+0x43/0x60 [ 87.897209][ T5872] rest_init+0x2e2/0x300 [ 87.897229][ T5872] arch_call_rest_init+0xe/0x10 [ 87.897250][ T5872] start_kernel+0x461/0x4e0 [ 87.897270][ T5872] x86_64_start_reservations+0x2a/0x30 [ 87.897289][ T5872] copy_bootdata+0x0/0xd0 [ 87.897306][ T5872] secondary_startup_64_no_verify+0x179/0x17b [ 87.897327][ T5872] [ 87.897327][ T5872] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 87.897348][ T5872] _raw_spin_lock_irqsave+0xb4/0x100 [ 87.897370][ T5872] __wake_up+0x10b/0x1a0 [ 87.897386][ T5872] tty_port_default_wakeup+0xa2/0xf0 [ 87.897401][ T5872] serial8250_tx_chars+0x6a2/0x8b0 [ 87.897419][ T5872] serial8250_handle_irq+0x567/0x730 [ 87.897435][ T5872] serial8250_default_handle_irq+0xb8/0x1a0 [ 87.897451][ T5872] serial8250_interrupt+0x9f/0x1c0 [ 87.897464][ T5872] __handle_irq_event_percpu+0x271/0x940 [ 87.897481][ T5872] handle_irq_event+0x8b/0x1e0 [ 87.897498][ T5872] handle_edge_irq+0x246/0xb20 [ 87.897511][ T5872] __common_interrupt+0x13b/0x230 [ 87.897525][ T5872] common_interrupt+0xb4/0xd0 [ 87.897538][ T5872] asm_common_interrupt+0x26/0x40 [ 87.897551][ T5872] pv_native_safe_halt+0xf/0x10 [ 87.897565][ T5872] default_idle+0x13/0x20 [ 87.897581][ T5872] default_idle_call+0x6c/0xa0 [ 87.897596][ T5872] do_idle+0x221/0x5c0 [ 87.897610][ T5872] cpu_startup_entry+0x43/0x60 [ 87.897623][ T5872] rest_init+0x2e2/0x300 [ 87.897639][ T5872] arch_call_rest_init+0xe/0x10 [ 87.897654][ T5872] start_kernel+0x461/0x4e0 [ 87.897670][ T5872] x86_64_start_reservations+0x2a/0x30 [ 87.897685][ T5872] copy_bootdata+0x0/0xd0 [ 87.897698][ T5872] secondary_startup_64_no_verify+0x179/0x17b [ 87.897714][ T5872] [ 87.897714][ T5872] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 87.897730][ T5872] _raw_spin_lock_irqsave+0xb4/0x100 [ 87.897747][ T5872] serial8250_console_write+0x181/0x18b0 [ 87.897762][ T5872] console_flush_all+0x6ad/0xcf0 [ 87.897776][ T5872] console_unlock+0xad/0x350 [ 87.897790][ T5872] vprintk_emit+0x497/0x610 [ 87.897803][ T5872] _printk+0xde/0x130 [ 87.897820][ T5872] register_console+0xb96/0xf00 [ 87.897834][ T5872] univ8250_console_init+0x45/0x50 [ 87.897850][ T5872] console_init+0x17b/0x5d0 [ 87.897866][ T5872] start_kernel+0x2c8/0x4e0 [ 87.897882][ T5872] x86_64_start_reservations+0x2a/0x30 [ 87.897896][ T5872] copy_bootdata+0x0/0xd0 [ 87.897910][ T5872] secondary_startup_64_no_verify+0x179/0x17b [ 87.897925][ T5872] [ 87.897925][ T5872] -> #0 (console_owner){....}-{0:0}: [ 87.897940][ T5872] __lock_acquire+0x37ef/0x7d80 [ 87.897954][ T5872] lock_acquire+0x19e/0x420 [ 87.897966][ T5872] console_flush_all+0x676/0xcf0 [ 87.897981][ T5872] console_unlock+0xad/0x350 [ 87.897994][ T5872] vprintk_emit+0x497/0x610 [ 87.898013][ T5872] _printk+0xde/0x130 [ 87.898028][ T5872] report_bug+0x34e/0x4f0 [ 87.898042][ T5872] handle_bug+0xcf/0x120 [ 87.898054][ T5872] exc_invalid_op+0x1a/0x50 [ 87.898066][ T5872] asm_exc_invalid_op+0x1a/0x20 [ 87.898077][ T5872] __set_task_frozen+0x210/0x2d0 [ 87.898092][ T5872] task_call_func+0x1a2/0x260 [ 87.898103][ T5872] freeze_task+0x217/0x3a0 [ 87.898117][ T5872] try_to_freeze_tasks+0x190/0x620 [ 87.898130][ T5872] freeze_processes+0xc9/0x1e0 [ 87.898137][ T5872] hibernate+0x121/0x400 [ 87.898144][ T5872] state_store+0x22f/0x290 [ 87.898156][ T5872] kernfs_fop_write_iter+0x3a4/0x520 [ 87.898168][ T5872] vfs_write+0x474/0x9a0 [ 87.898180][ T5872] ksys_write+0x151/0x260 [ 87.898191][ T5872] do_syscall_64+0x55/0xb0 [ 87.898199][ T5872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.898218][ T5872] [ 87.898218][ T5872] other info that might help us debug this: [ 87.898218][ T5872] [ 87.898220][ T5872] Chain exists of: [ 87.898220][ T5872] console_owner --> &tty->write_wait --> &p->pi_lock [ 87.898220][ T5872] [ 87.898233][ T5872] Possible unsafe locking scenario: [ 87.898233][ T5872] [ 87.898235][ T5872] CPU0 CPU1 [ 87.898237][ T5872] ---- ---- [ 87.898239][ T5872] lock(&p->pi_lock); [ 87.898244][ T5872] lock(&tty->write_wait); [ 87.898249][ T5872] lock(&p->pi_lock); [ 87.898254][ T5872] lock(console_owner); [ 87.898259][ T5872] [ 87.898259][ T5872] *** DEADLOCK *** [ 87.898259][ T5872] [ 87.898261][ T5872] 10 locks held by syz.0.10/5872: [ 87.898266][ T5872] #0: ffff88802e509748 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 87.898291][ T5872] #1: ffff88807b698418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 87.898316][ T5872] #2: ffff888028f8f888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 [ 87.898339][ T5872] #3: ffff888141a519b8 (kn->active#64){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 [ 87.898365][ T5872] #4: ffffffff8cfe58a8 (system_transition_mutex){+.+.}-{3:3}, at: lock_system_sleep+0x49/0x70 [ 87.898389][ T5872] #5: ffffffff8ce0a058 (tasklist_lock){.+.+}-{2:2}, at: try_to_freeze_tasks+0xe5/0x620 [ 87.898413][ T5872] #6: ffffffff8d144ef8 (freezer_lock){....}-{2:2}, at: freeze_task+0x80/0x3a0 [ 87.898434][ T5872] #7: ffff88802e5b6418 (&p->pi_lock){-.-.}-{2:2}, at: task_call_func+0x43/0x260 [ 87.898452][ T5872] #8: ffffffff8d126180 (console_lock){+.+.}-{0:0}, at: _printk+0xde/0x130 [ 87.898475][ T5872] #9: ffffffff8d00d990 (console_srcu){....}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 87.898498][ T5872] [ 87.898498][ T5872] stack backtrace: [ 87.898509][ T5872] CPU: 0 PID: 5872 Comm: syz.0.10 Not tainted syzkaller #0 [ 87.898519][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.898529][ T5872] Call Trace: [ 87.898533][ T5872] [ 87.898536][ T5872] dump_stack_lvl+0x18c/0x250 [ 87.898547][ T5872] ? load_image+0x420/0x420 [ 87.898559][ T5872] ? show_regs_print_info+0x20/0x20 [ 87.898571][ T5872] ? print_circular_bug+0x12b/0x1a0 [ 87.898582][ T5872] check_noncircular+0x2fc/0x400 [ 87.898594][ T5872] ? print_deadlock_bug+0x5d0/0x5d0 [ 87.898605][ T5872] ? lockdep_lock+0xf5/0x230 [ 87.898617][ T5872] __lock_acquire+0x37ef/0x7d80 [ 87.898632][ T5872] ? verify_lock_unused+0x140/0x140 [ 87.898647][ T5872] lock_acquire+0x19e/0x420 [ 87.898656][ T5872] ? console_flush_all+0x10b/0xcf0 [ 87.898669][ T5872] ? __lock_acquire+0x7d80/0x7d80 [ 87.898678][ T5872] ? do_raw_spin_lock+0x11f/0x2b0 [ 87.898690][ T5872] ? read_lock_is_recursive+0x20/0x20 [ 87.898700][ T5872] ? __rwlock_init+0x150/0x150 [ 87.898712][ T5872] ? do_raw_spin_unlock+0x121/0x230 [ 87.898725][ T5872] console_flush_all+0x676/0xcf0 [ 87.898735][ T5872] ? console_flush_all+0x10b/0xcf0 [ 87.898747][ T5872] ? console_flush_all+0x10b/0xcf0 [ 87.898759][ T5872] ? is_console_locked+0x20/0x20 [ 87.898773][ T5872] console_unlock+0xad/0x350 [ 87.898784][ T5872] ? other_cpu_in_panic+0xf0/0xf0 [ 87.898797][ T5872] vprintk_emit+0x497/0x610 [ 87.898808][ T5872] ? printk_sprint+0x460/0x460 [ 87.898819][ T5872] ? verify_lock_unused+0x140/0x140 [ 87.898831][ T5872] _printk+0xde/0x130 [ 87.898844][ T5872] ? load_image+0x420/0x420 [ 87.898858][ T5872] ? find_bug+0xa5/0x3a0 [ 87.898867][ T5872] ? __set_task_frozen+0x210/0x2d0 [ 87.898878][ T5872] report_bug+0x34e/0x4f0 [ 87.898887][ T5872] ? __set_task_frozen+0x210/0x2d0 [ 87.898898][ T5872] ? __set_task_frozen+0x210/0x2d0 [ 87.898908][ T5872] ? __set_task_frozen+0x212/0x2d0 [ 87.898918][ T5872] handle_bug+0xcf/0x120 [ 87.898927][ T5872] exc_invalid_op+0x1a/0x50 [ 87.898937][ T5872] asm_exc_invalid_op+0x1a/0x20 [ 87.898946][ T5872] RIP: 0010:__set_task_frozen+0x210/0x2d0 [ 87.898958][ T5872] Code: 41 c7 06 00 80 00 00 bd 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4c 8f 11 00 0f 0b e9 0a ff ff ff e8 40 8f 11 00 <0f> 0b eb 9d 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 14 fe ff ff 4c [ 87.898966][ T5872] RSP: 0018:ffffc90004befa70 EFLAGS: 00010046 [ 87.898973][ T5872] RAX: ffffffff8175e240 RBX: ffff88802e5b5a00 RCX: 0000000000080000 [ 87.898980][ T5872] RDX: ffffc9000d4f2000 RSI: 000000000007ffff RDI: 0000000000080000 [ 87.898986][ T5872] RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000004 [ 87.898991][ T5872] R10: dffffc0000000000 R11: fffff5200097df30 R12: 0000000000000000 [ 87.899002][ T5872] R13: 1ffff11005cb6b43 R14: ffff88802e5b5a18 R15: ffff88802e5b64d8 [ 87.899010][ T5872] ? __set_task_frozen+0x210/0x2d0 [ 87.899022][ T5872] ? set_freezable+0x230/0x230 [ 87.899032][ T5872] task_call_func+0x1a2/0x260 [ 87.899042][ T5872] freeze_task+0x217/0x3a0 [ 87.899052][ T5872] ? __refrigerator+0x660/0x660 [ 87.899063][ T5872] ? preempt_schedule_thunk+0x1a/0x30 [ 87.899077][ T5872] try_to_freeze_tasks+0x190/0x620 [ 87.899091][ T5872] freeze_processes+0xc9/0x1e0 [ 87.899099][ T5872] hibernate+0x121/0x400 [ 87.899108][ T5872] state_store+0x22f/0x290 [ 87.899120][ T5872] ? sysfs_kf_read+0x360/0x360 [ 87.899129][ T5872] kernfs_fop_write_iter+0x3a4/0x520 [ 87.899143][ T5872] vfs_write+0x474/0x9a0 [ 87.899156][ T5872] ? file_end_write+0x250/0x250 [ 87.899169][ T5872] ? __fget_files+0x3fc/0x460 [ 87.899183][ T5872] ? __fdget_pos+0x2a3/0x330 [ 87.899194][ T5872] ? ksys_write+0x74/0x260 [ 87.899206][ T5872] ksys_write+0x151/0x260 [ 87.899218][ T5872] ? __ia32_sys_read+0x90/0x90 [ 87.899231][ T5872] ? lockdep_hardirqs_on+0x98/0x150 [ 87.899243][ T5872] do_syscall_64+0x55/0xb0 [ 87.899252][ T5872] ? clear_bhb_loop+0x40/0x90 [ 87.899262][ T5872] ? clear_bhb_loop+0x40/0x90 [ 87.899271][ T5872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.899281][ T5872] RIP: 0033:0x7f878bb9e019 [ 87.899292][ T5872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.899299][ T5872] RSP: 002b:00007f878c9f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.899307][ T5872] RAX: ffffffffffffffda RBX: 00007f878be25fa0 RCX: 00007f878bb9e019 [ 87.899314][ T5872] RDX: 0000000000000006 RSI: 0000200000000140 RDI: 0000000000000003 [ 87.899319][ T5872] RBP: 00007f878bc3500c R08: 0000000000000000 R09: 0000000000000000 [ 87.899324][ T5872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.899335][ T5872] R13: 00007f878be26038 R14: 00007f878be25fa0 R15: 00007fff35bc8268 [ 87.899344][ T5872] [ 89.100210][ T5872] WARNING: CPU: 0 PID: 5872 at kernel/freezer.c:133 __set_task_frozen+0x210/0x2d0 [ 89.109397][ T5872] Modules linked in: [ 89.113287][ T5872] CPU: 0 PID: 5872 Comm: syz.0.10 Not tainted syzkaller #0 [ 89.120475][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.130510][ T5872] RIP: 0010:__set_task_frozen+0x210/0x2d0 [ 89.136214][ T5872] Code: 41 c7 06 00 80 00 00 bd 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4c 8f 11 00 0f 0b e9 0a ff ff ff e8 40 8f 11 00 <0f> 0b eb 9d 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 14 fe ff ff 4c [ 89.155802][ T5872] RSP: 0018:ffffc90004befa70 EFLAGS: 00010046 [ 89.161851][ T5872] RAX: ffffffff8175e240 RBX: ffff88802e5b5a00 RCX: 0000000000080000 [ 89.169804][ T5872] RDX: ffffc9000d4f2000 RSI: 000000000007ffff RDI: 0000000000080000 [ 89.177770][ T5872] RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000004 [ 89.185738][ T5872] R10: dffffc0000000000 R11: fffff5200097df30 R12: 0000000000000000 [ 89.193694][ T5872] R13: 1ffff11005cb6b43 R14: ffff88802e5b5a18 R15: ffff88802e5b64d8 [ 89.201649][ T5872] FS: 00007f878c9f56c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 89.210559][ T5872] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.217121][ T5872] CR2: 00007fc3f69f4d58 CR3: 000000005830c000 CR4: 00000000003506f0 [ 89.225072][ T5872] Call Trace: [ 89.228339][ T5872] [ 89.231254][ T5872] ? set_freezable+0x230/0x230 [ 89.236024][ T5872] task_call_func+0x1a2/0x260 [ 89.240682][ T5872] freeze_task+0x217/0x3a0 [ 89.245081][ T5872] ? __refrigerator+0x660/0x660 [ 89.249913][ T5872] ? preempt_schedule_thunk+0x1a/0x30 [ 89.255286][ T5872] try_to_freeze_tasks+0x190/0x620 [ 89.260407][ T5872] freeze_processes+0xc9/0x1e0 [ 89.265166][ T5872] hibernate+0x121/0x400 [ 89.269398][ T5872] state_store+0x22f/0x290 [ 89.273820][ T5872] ? sysfs_kf_read+0x360/0x360 [ 89.278590][ T5872] kernfs_fop_write_iter+0x3a4/0x520 [ 89.283891][ T5872] vfs_write+0x474/0x9a0 [ 89.288225][ T5872] ? file_end_write+0x250/0x250 [ 89.293068][ T5872] ? __fget_files+0x3fc/0x460 [ 89.297732][ T5872] ? __fdget_pos+0x2a3/0x330 [ 89.302328][ T5872] ? ksys_write+0x74/0x260 [ 89.306737][ T5872] ksys_write+0x151/0x260 [ 89.311051][ T5872] ? __ia32_sys_read+0x90/0x90 [ 89.315798][ T5872] ? lockdep_hardirqs_on+0x98/0x150 [ 89.321005][ T5872] do_syscall_64+0x55/0xb0 [ 89.325400][ T5872] ? clear_bhb_loop+0x40/0x90 [ 89.330057][ T5872] ? clear_bhb_loop+0x40/0x90 [ 89.334728][ T5872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.340601][ T5872] RIP: 0033:0x7f878bb9e019 [ 89.344996][ T5872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.364580][ T5872] RSP: 002b:00007f878c9f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 89.372972][ T5872] RAX: ffffffffffffffda RBX: 00007f878be25fa0 RCX: 00007f878bb9e019 [ 89.380930][ T5872] RDX: 0000000000000006 RSI: 0000200000000140 RDI: 0000000000000003 [ 89.388886][ T5872] RBP: 00007f878bc3500c R08: 0000000000000000 R09: 0000000000000000 [ 89.396833][ T5872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.404794][ T5872] R13: 00007f878be26038 R14: 00007f878be25fa0 R15: 00007fff35bc8268 [ 89.412748][ T5872] [ 89.415750][ T5872] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 89.423007][ T5872] CPU: 0 PID: 5872 Comm: syz.0.10 Not tainted syzkaller #0 [ 89.430177][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.440207][ T5872] Call Trace: [ 89.443466][ T5872] [ 89.446377][ T5872] dump_stack_lvl+0x18c/0x250 [ 89.451036][ T5872] ? show_regs_print_info+0x20/0x20 [ 89.456213][ T5872] ? load_image+0x420/0x420 [ 89.460700][ T5872] panic+0x2ca/0x720 [ 89.464577][ T5872] ? bpf_jit_dump+0xd0/0xd0 [ 89.469063][ T5872] __warn+0x2e0/0x470 [ 89.473027][ T5872] ? __set_task_frozen+0x210/0x2d0 [ 89.478118][ T5872] ? __set_task_frozen+0x210/0x2d0 [ 89.483207][ T5872] report_bug+0x2be/0x4f0 [ 89.487514][ T5872] ? __set_task_frozen+0x210/0x2d0 [ 89.492617][ T5872] ? __set_task_frozen+0x210/0x2d0 [ 89.497712][ T5872] ? __set_task_frozen+0x212/0x2d0 [ 89.502801][ T5872] handle_bug+0xcf/0x120 [ 89.507023][ T5872] exc_invalid_op+0x1a/0x50 [ 89.511501][ T5872] asm_exc_invalid_op+0x1a/0x20 [ 89.516329][ T5872] RIP: 0010:__set_task_frozen+0x210/0x2d0 [ 89.522034][ T5872] Code: 41 c7 06 00 80 00 00 bd 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4c 8f 11 00 0f 0b e9 0a ff ff ff e8 40 8f 11 00 <0f> 0b eb 9d 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 14 fe ff ff 4c [ 89.541620][ T5872] RSP: 0018:ffffc90004befa70 EFLAGS: 00010046 [ 89.547662][ T5872] RAX: ffffffff8175e240 RBX: ffff88802e5b5a00 RCX: 0000000000080000 [ 89.555609][ T5872] RDX: ffffc9000d4f2000 RSI: 000000000007ffff RDI: 0000000000080000 [ 89.563572][ T5872] RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000004 [ 89.571534][ T5872] R10: dffffc0000000000 R11: fffff5200097df30 R12: 0000000000000000 [ 89.579493][ T5872] R13: 1ffff11005cb6b43 R14: ffff88802e5b5a18 R15: ffff88802e5b64d8 [ 89.587456][ T5872] ? __set_task_frozen+0x210/0x2d0 [ 89.592565][ T5872] ? set_freezable+0x230/0x230 [ 89.597316][ T5872] task_call_func+0x1a2/0x260 [ 89.601977][ T5872] freeze_task+0x217/0x3a0 [ 89.606377][ T5872] ? __refrigerator+0x660/0x660 [ 89.611207][ T5872] ? preempt_schedule_thunk+0x1a/0x30 [ 89.616565][ T5872] try_to_freeze_tasks+0x190/0x620 [ 89.621662][ T5872] freeze_processes+0xc9/0x1e0 [ 89.626402][ T5872] hibernate+0x121/0x400 [ 89.630640][ T5872] state_store+0x22f/0x290 [ 89.635046][ T5872] ? sysfs_kf_read+0x360/0x360 [ 89.639815][ T5872] kernfs_fop_write_iter+0x3a4/0x520 [ 89.645086][ T5872] vfs_write+0x474/0x9a0 [ 89.649311][ T5872] ? file_end_write+0x250/0x250 [ 89.654150][ T5872] ? __fget_files+0x3fc/0x460 [ 89.658819][ T5872] ? __fdget_pos+0x2a3/0x330 [ 89.663390][ T5872] ? ksys_write+0x74/0x260 [ 89.667803][ T5872] ksys_write+0x151/0x260 [ 89.672115][ T5872] ? __ia32_sys_read+0x90/0x90 [ 89.676861][ T5872] ? lockdep_hardirqs_on+0x98/0x150 [ 89.682057][ T5872] do_syscall_64+0x55/0xb0 [ 89.686468][ T5872] ? clear_bhb_loop+0x40/0x90 [ 89.691139][ T5872] ? clear_bhb_loop+0x40/0x90 [ 89.695794][ T5872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.701667][ T5872] RIP: 0033:0x7f878bb9e019 [ 89.706063][ T5872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.725664][ T5872] RSP: 002b:00007f878c9f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 89.734058][ T5872] RAX: ffffffffffffffda RBX: 00007f878be25fa0 RCX: 00007f878bb9e019 [ 89.742009][ T5872] RDX: 0000000000000006 RSI: 0000200000000140 RDI: 0000000000000003 [ 89.749960][ T5872] RBP: 00007f878bc3500c R08: 0000000000000000 R09: 0000000000000000 [ 89.757910][ T5872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.765859][ T5872] R13: 00007f878be26038 R14: 00007f878be25fa0 R15: 00007fff35bc8268 [ 89.773830][ T5872] [ 90.873074][ T5872] Shutting down cpus with NMI [ 90.877938][ T5872] Kernel Offset: disabled [ 90.882254][ T5872] Rebooting in 86400 seconds..