last executing test programs: 6.642467252s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x0, 0x0) 6.388894689s ago: executing program 1 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='usbip-vudc\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='pcspkr\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00') symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000780)='pcspkr\x00', 0x6) r3 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559}) 5.911489191s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0) write(r3, &(0x7f0000001900)='Y\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000900)='127.0.0.1 / 2147483647 74754 0 0 0\n', 0x23) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000b00)='127.0.0.1 4 00000000 2147483647 /\n', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0) write(r7, &(0x7f0000000f00)='1\n', 0x2) nanosleep(&(0x7f0000001c00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1,port=2049,sec=sys\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x1ff) write(r8, &(0x7f0000001500)='test\x00', 0x4) 5.834666853s ago: executing program 1 (id=6): syz_usb_connect(0x2, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da0b31280001000000010902190001010080320904000001ffffff0007058102000200"], &(0x7f0000000040)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 5.119500181s ago: executing program 3 (id=4): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0xc0, 0x98, 0x2, "1400"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000240)={0xc0, 0x98, 0x2, "1400"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000340)={0xc0, 0x98, 0x2, "1400"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0x84, &(0x7f0000000440)={0xc0, 0x9a, 0x4, '\x00s\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) nanosleep(&(0x7f0000000600)={0x1, 0x1dcd6500}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000700), 0x2, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000800)={0x53, 0xfffffffffffffffe, 0xa, 0x0, @buffer={0x0, 0x200, &(0x7f0000000900)=""/512}, &(0x7f0000000a00)="2a00ffffffff00000100", &(0x7f0000000b00)=""/32, 0x1, 0x0, 0x0, 0x0}) 3.95224182s ago: executing program 2 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x777) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='\x00 / 128\n\x00', 0x8) 3.707695326s ago: executing program 2 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/pm_test\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='core\n', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='mem\n', 0x4) 3.062107083s ago: executing program 1 (id=11): r0 = syz_usb_connect(0x2, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="9000"/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000240)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000140)="8200"/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000280)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000180)="8400"/64) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/class/atm/cxacru0/device/downstream_rate\x00', 0x0, 0x0) read(r1, &(0x7f0000000700)=""/256, 0x100) 2.864045488s ago: executing program 0 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='devtmpfs\x00', &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl(r0, 0x40186f40, &(0x7f0000000300)="ffffffff00"/24) nanosleep(&(0x7f0000000600)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x2625a00}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r1, 0xc01c6f06, &(0x7f0000000500)='\x00'/28) 2.41426127s ago: executing program 0 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='0\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='0\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000140)='1\n\x00', 0x2) (async) nanosleep(&(0x7f0000000150)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000240)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r6, &(0x7f00000002c0)='mydomain 1 \\x00000000 2147483647 /\n\x00', 0x23) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r7, &(0x7f0000000340)='mydomain / 2147483647 9218 0 0 0\n\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f00000003c0)='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)) 1.928161922s ago: executing program 3 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x1, 0x0) pwrite64(r0, &(0x7f0000000200)='disk\n\x00', 0x6, 0x0) 1.732027457s ago: executing program 3 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./backing_file\x00', 0x42, 0x1ed) ftruncate(r1, 0x100000) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='./backing_file\x00', 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000580)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1\x00', 0x1ed) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r5, &(0x7f0000000680)='loop\x00', 0x4) symlinkat(&(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testnqn\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r6, &(0x7f0000000780)='transport=loop,nqn=testnqn\x00', 0x1a) nanosleep(&(0x7f0000000800)={0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/nvme/nvme0/nvme0n1/wwid\x00', 0x0, 0x0) read(r7, &(0x7f0000000900), 0x64) r8 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/nvme/nvme1/nvme1n1/wwid\x00', 0x0, 0x0) read(r8, &(0x7f0000000980), 0x64) 929.318987ms ago: executing program 1 (id=17): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40e80489680001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_ep_read(r0, 0x81, 0xc, &(0x7f0000000100)=""/12) syz_usb_ep_write(r0, 0x2, 0x18, &(0x7f0000000200)='\x00'/24) syz_usb_ep_read(r0, 0x81, 0xc, &(0x7f0000000300)=""/12) syz_usb_ep_write(r0, 0x2, 0x1c, &(0x7f0000000400)='\x00'/28) syz_usb_ep_write(r0, 0x2, 0x1a, &(0x7f0000000500)="5744040000000000000057440400000000000000575a00000800") nanosleep(&(0x7f0000000600)={0x3}, 0x0) 832.861089ms ago: executing program 3 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0) write(r3, &(0x7f0000001900)='Y\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000900)='127.0.0.1 / 2147483647 74754 0 0 0\n', 0x23) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000b00)='127.0.0.1 4 00000000 2147483647 /\n', 0x22) 684.052653ms ago: executing program 0 (id=19): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x1b, {"90909090909090909090"}}], 0x1b}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc1, 0x0, 0xffffffffffffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x38f, 0x0, 0x1}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x186, 0x0, 0x5300c0}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0xc0010004, 0x0, 0xffffffffffffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0xc0010000, 0x0, 0x5300c0}]}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 427.50878ms ago: executing program 0 (id=20): r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x5f5e100}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='mem', 0x3) 352.148511ms ago: executing program 0 (id=21): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000102), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000302), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000302), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000302), 0x2) 0s ago: executing program 0 (id=22): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) listen(r0, 0x10) r1 = syz_io_uring_setup(0x10, &(0x7f0000000040), &(0x7f0000000100)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000110)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x1dcd6500}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x3, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='cifs\x00', 0x0, &(0x7f0000000480)='unc=\\\\127.0.0.1\\share,ip=127.0.0.1,port=20000,user=root,pass=root\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.81' (ED25519) to the list of known hosts. [ 76.567276][ T5763] cgroup: Unknown subsys name 'net' [ 76.702621][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.370189][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.966510][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.985215][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.003394][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.011620][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.020661][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.028683][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.064748][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.073096][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.081807][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.092397][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.101623][ T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.109248][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.170298][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.178979][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.187948][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.198682][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.205521][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.213908][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.213932][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.222474][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.235813][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.246033][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.266703][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.274245][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.635769][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 80.673577][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 80.832403][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 80.864198][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.871421][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.879948][ T5775] bridge_slave_0: entered allmulticast mode [ 80.887384][ T5775] bridge_slave_0: entered promiscuous mode [ 80.897242][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.904517][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.911708][ T5782] bridge_slave_0: entered allmulticast mode [ 80.919179][ T5782] bridge_slave_0: entered promiscuous mode [ 80.931795][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.939144][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.946421][ T5782] bridge_slave_1: entered allmulticast mode [ 80.953491][ T5782] bridge_slave_1: entered promiscuous mode [ 80.978182][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.985832][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.992997][ T5775] bridge_slave_1: entered allmulticast mode [ 81.000322][ T5775] bridge_slave_1: entered promiscuous mode [ 81.066206][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.078381][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.129757][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.146387][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 81.160784][ T5782] team0: Port device team_slave_0 added [ 81.169671][ T5782] team0: Port device team_slave_1 added [ 81.178814][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.268467][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.275965][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.283189][ T5778] bridge_slave_0: entered allmulticast mode [ 81.290572][ T5778] bridge_slave_0: entered promiscuous mode [ 81.313821][ T5775] team0: Port device team_slave_0 added [ 81.321265][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.328392][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.354375][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.368065][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.375302][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.401624][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.414325][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.421478][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.429224][ T5778] bridge_slave_1: entered allmulticast mode [ 81.436775][ T5778] bridge_slave_1: entered promiscuous mode [ 81.451900][ T5775] team0: Port device team_slave_1 added [ 81.539182][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.547897][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.555592][ T5780] bridge_slave_0: entered allmulticast mode [ 81.562454][ T5780] bridge_slave_0: entered promiscuous mode [ 81.572348][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.585384][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.595124][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.602096][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.628415][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.640768][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.648017][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.674145][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.707486][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.715178][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.722365][ T5780] bridge_slave_1: entered allmulticast mode [ 81.729623][ T5780] bridge_slave_1: entered promiscuous mode [ 81.812249][ T5778] team0: Port device team_slave_0 added [ 81.823576][ T5782] hsr_slave_0: entered promiscuous mode [ 81.830659][ T5782] hsr_slave_1: entered promiscuous mode [ 81.839745][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.852993][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.875996][ T5778] team0: Port device team_slave_1 added [ 81.896578][ T5780] team0: Port device team_slave_0 added [ 81.935605][ T5780] team0: Port device team_slave_1 added [ 81.969594][ T5775] hsr_slave_0: entered promiscuous mode [ 81.976245][ T5775] hsr_slave_1: entered promiscuous mode [ 81.982364][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.990262][ T5775] Cannot create hsr debugfs directory [ 81.996767][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.003759][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.030451][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.052983][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.061470][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.087767][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.105271][ T5779] Bluetooth: hci0: command tx timeout [ 82.149908][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.159710][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.186405][ T5779] Bluetooth: hci1: command tx timeout [ 82.192648][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.214416][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.221412][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.247399][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.265287][ T5779] Bluetooth: hci3: command tx timeout [ 82.344172][ T5779] Bluetooth: hci2: command tx timeout [ 82.360369][ T5778] hsr_slave_0: entered promiscuous mode [ 82.367207][ T5778] hsr_slave_1: entered promiscuous mode [ 82.373698][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.381875][ T5778] Cannot create hsr debugfs directory [ 82.441375][ T5780] hsr_slave_0: entered promiscuous mode [ 82.448176][ T5780] hsr_slave_1: entered promiscuous mode [ 82.455091][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.462739][ T5780] Cannot create hsr debugfs directory [ 82.791147][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.815247][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.830895][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.841609][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.903164][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.917043][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.933582][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.954408][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.033366][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.057347][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.092147][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.127654][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.169464][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.189577][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.202051][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.227013][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.239264][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.270978][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.320816][ T3476] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.328173][ T3476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.370959][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.378203][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.405864][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.438344][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.451554][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.458818][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.507366][ T3476] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.514611][ T3476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.602499][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.671176][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.718017][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.742600][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.749802][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.803881][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.812977][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.820176][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.883410][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.890668][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.942482][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.949694][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.020412][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.153950][ T5782] veth0_vlan: entered promiscuous mode [ 84.196013][ T5779] Bluetooth: hci0: command tx timeout [ 84.224981][ T5782] veth1_vlan: entered promiscuous mode [ 84.255372][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.265035][ T5779] Bluetooth: hci1: command tx timeout [ 84.354772][ T5779] Bluetooth: hci3: command tx timeout [ 84.376538][ T5782] veth0_macvtap: entered promiscuous mode [ 84.417925][ T5782] veth1_macvtap: entered promiscuous mode [ 84.424485][ T5779] Bluetooth: hci2: command tx timeout [ 84.458693][ T5775] veth0_vlan: entered promiscuous mode [ 84.503844][ T5775] veth1_vlan: entered promiscuous mode [ 84.533790][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.545701][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.558178][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.590179][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.606723][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.616039][ T5782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.624900][ T5782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.633717][ T5782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.670494][ T5775] veth0_macvtap: entered promiscuous mode [ 84.708131][ T5775] veth1_macvtap: entered promiscuous mode [ 84.775580][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.783907][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.846618][ T5778] veth0_vlan: entered promiscuous mode [ 84.873565][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.889088][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.893671][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.911796][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.925354][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.937893][ T5778] veth1_vlan: entered promiscuous mode [ 84.960661][ T5780] veth0_vlan: entered promiscuous mode [ 84.970464][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.982855][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.000859][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.013233][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.025273][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.034022][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.043975][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.072351][ T5780] veth1_vlan: entered promiscuous mode [ 85.121934][ T5778] veth0_macvtap: entered promiscuous mode [ 85.157492][ T5778] veth1_macvtap: entered promiscuous mode [ 85.223988][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.259631][ T5780] veth0_macvtap: entered promiscuous mode [ 85.263063][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.291459][ T5780] veth1_macvtap: entered promiscuous mode [ 85.313831][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.326367][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.344939][ T28] audit: type=1800 audit(1785888059.205:2): pid=5834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2" name="active" dev="configfs" ino=6399 res=0 errno=0 [ 85.365181][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.378040][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.390549][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.443021][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.462333][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.478828][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.492701][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.502949][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.521063][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.531417][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.550295][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.568076][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.607031][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.619720][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.632402][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.645277][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.657397][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.673086][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.685713][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.696893][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.709336][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.721229][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.732667][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.747269][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.751736][ T5836] configfs-gadget.g1 gadget.33: uvc: uvc_function_bind() [ 85.775752][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.788858][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.803131][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.825186][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.870101][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.904397][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.913190][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.939667][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.250180][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.265155][ T5779] Bluetooth: hci0: command tx timeout [ 86.280959][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.325009][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.338618][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.355604][ T5779] Bluetooth: hci1: command tx timeout [ 86.369529][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.380942][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.424611][ T5779] Bluetooth: hci3: command tx timeout [ 86.454750][ T5814] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 86.502300][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.514677][ T5779] Bluetooth: hci2: command tx timeout [ 86.521583][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.668136][ T5814] usb 2-1: not running at top speed; connect to a high speed hub [ 86.705342][ T5814] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 86.723022][ T5814] usb 2-1: New USB device found, idVendor=0bda, idProduct=2831, bcdDevice= 1.00 [ 86.737268][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.772728][ T5843] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 87.040277][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.090133][ T28] audit: type=1804 audit(1785888060.945:3): pid=5853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7" name="/newroot/1/merge/file" dev="overlay" ino=33 res=1 errno=0 [ 87.247213][ T23] usb 4-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 87.264159][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.295029][ T23] ums-alauda 4-1:1.0: USB Mass Storage device detected [ 87.338271][ T23] ums-alauda 4-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 87.338271][ T23] Please send a copy of this message to and [ 87.403257][ T23] scsi host1: usb-storage 4-1:1.0 [ 87.454379][ T5841] NFSD: attempt to initialize umh client tracking in a container ignored. [ 87.495439][ T5841] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 87.524354][ T5841] NFSD: Unable to initialize client recovery tracking! (-22) [ 87.532182][ T5841] NFSD: starting 90-second grace period (net f00003c8) [ 87.880078][ T5814] dvb_usb_rtl28xxu 2-1:1.0: chip type detection failed -110 [ 87.911563][ T5814] dvb_usb_rtl28xxu: probe of 2-1:1.0 failed with error -110 [ 88.101652][ T5813] usb 2-1: USB disconnect, device number 2 [ 88.218702][ T5872] PM: suspend entry (deep) [ 88.344305][ T5779] Bluetooth: hci0: command tx timeout [ 88.424303][ T5779] Bluetooth: hci1: command tx timeout [ 88.505269][ T5779] Bluetooth: hci3: command tx timeout [ 88.514675][ T145] scsi 1:0:0:0: Direct-Access Fujifilm DPC-R1 (Alauda) 0102 PQ: 0 ANSI: 0 CCS [ 88.537947][ T145] scsi 1:0:0:1: Direct-Access Fujifilm DPC-R1 (Alauda) 0102 PQ: 0 ANSI: 0 CCS [ 88.559665][ T145] scsi 1:0:0:0: Attached scsi generic sg1 type 0 [ 88.579234][ T11] sd 1:0:0:0: [sdb] Media removed, stopped polling [ 88.586386][ T5779] Bluetooth: hci2: command tx timeout [ 88.620124][ T145] scsi 1:0:0:1: Attached scsi generic sg2 type 0 [ 88.640557][ T4536] sd 1:0:0:1: [sdc] Media removed, stopped polling [ 88.676370][ T5872] Filesystems sync: 0.451 seconds [ 88.684472][ T11] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 88.725079][ T4536] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 88.941883][ T5880] ubi0: attaching mtd0 [ 88.950480][ T5880] ubi0: scanning is finished [ 88.955540][ T5880] ubi0: empty MTD device detected [ 89.004190][ T5880] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 89.021327][ T5880] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 89.030344][ T5880] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 89.052324][ T5880] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 89.076750][ T5880] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 89.084228][ T790] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 89.095178][ T5880] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 89.106456][ T5872] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 89.112885][ T5872] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 89.127317][ T5880] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4252851438 [ 89.144142][ T5872] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 89.151557][ T5880] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 89.171785][ T5872] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 89.180474][ T5872] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 89.188572][ T5882] ubi0: background thread "ubi_bgt0d" started, PID 5882 [ 89.200956][ T5872] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 89.219967][ T5872] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 89.223094][ T5765] usb 4-1: USB disconnect, device number 2 [ 89.256365][ T5872] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 89.288786][ T5872] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 89.331910][ T5872] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 89.378202][ T5872] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 89.438000][ T5872] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 89.595242][ T5769] udevd[5769]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 89.610795][ T5873] udevd[5873]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 89.892554][ T5769] udevd[5769]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 89.923228][ T5877] udevd[5877]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 90.094533][ T28] audit: type=1800 audit(1785888063.955:4): pid=5900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.16" name="attr_allow_any_host" dev="configfs" ino=6807 res=0 errno=0 [ 90.117635][ T5900] nvmet: adding nsid 1 to subsystem testnqn [ 90.128332][ T28] audit: type=1800 audit(1785888063.985:5): pid=5900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.16" name="device_path" dev="configfs" ino=6809 res=0 errno=0 [ 90.154665][ T28] audit: type=1800 audit(1785888063.995:6): pid=5900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.16" name="buffered_io" dev="configfs" ino=7940 res=0 errno=0 [ 90.180144][ T28] audit: type=1800 audit(1785888064.005:7): pid=5900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.16" name="enable" dev="configfs" ino=7941 res=0 errno=0 [ 90.214904][ T28] audit: type=1800 audit(1785888064.035:8): pid=5900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.16" name="addr_trtype" dev="configfs" ino=7947 res=0 errno=0 [ 90.283546][ T5765] nvmet: creating nvm controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:9b3f046f-25e7-4458-95b1-fff79cacf027. [ 90.315921][ T5900] nvme nvme0: creating 2 I/O queues. [ 90.326965][ T5900] nvme nvme0: new ctrl: "testnqn" [ 90.347449][ T790] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 90.360222][ T790] usb 2-1: can't read configurations, error -71 [ 90.824625][ T5779] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.916313][ T5889] NFSD: attempt to initialize umh client tracking in a container ignored. [ 90.930530][ T5889] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 90.939761][ T5889] NFSD: Unable to initialize client recovery tracking! (-22) [ 90.947491][ T5889] NFSD: starting 90-second grace period (net f00004fa) [ 91.136492][ T5909] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.211463][ T5909] kvm: kvm [5908]: vcpu0, guest rIP: 0x55d80 Unhandled WRMSR(0xc1) = 0xffffffffffffffff [ 91.223506][ T5909] kvm: kvm [5908]: vcpu0, guest rIP: 0x55d80 Unhandled WRMSR(0x186) = 0x5300c0 [ 91.232677][ T5779] Bluetooth: hci3: command 0x0c1a tx timeout [ 91.239473][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.248679][ T5909] kvm: kvm [5908]: vcpu0, guest rIP: 0x55d80 Unhandled WRMSR(0xc0010004) = 0xffffffffffffffff [ 91.260390][ T790] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 91.275399][ T5909] kvm: kvm [5908]: vcpu0, guest rIP: 0x55d80 Unhandled WRMSR(0xc0010000) = 0x5300c0 [ 91.384939][ T5779] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.425841][ T5913] PM: suspend entry (deep) [ 91.430335][ T5913] PM: suspend exit [ 91.476074][ T790] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 91.504867][ T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.513028][ T790] usb 2-1: Product: syz [ 91.518408][ T790] usb 2-1: Manufacturer: syz [ 91.523146][ T790] usb 2-1: SerialNumber: syz [ 91.818208][ T5917] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 91.845773][ T5917] CIFS: Attempting to mount //127.0.0.1/share [ 92.028494][ T27] cfg80211: failed to load regulatory.db [ 92.036329][ T5872] Freezing user space processes [ 92.295991][ T5907] NFSD: attempt to initialize umh client tracking in a container ignored. [ 92.305185][ T5907] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 92.314256][ T5907] NFSD: Unable to initialize client recovery tracking! (-22) [ 92.321683][ T5907] NFSD: starting 90-second grace period (net f00004ff) [ 92.348923][ T5872] ------------[ cut here ]------------ [ 92.349749][ T5872] [ 92.349754][ T5872] ====================================================== [ 92.349759][ T5872] WARNING: possible circular locking dependency detected [ 92.349764][ T5872] syzkaller #0 Not tainted [ 92.349771][ T5872] ------------------------------------------------------ [ 92.349775][ T5872] syz.2.10/5872 is trying to acquire lock: [ 92.349783][ T5872] ffffffff8d1260a0 (console_owner){....}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 92.349841][ T5872] [ 92.349841][ T5872] but task is already holding lock: [ 92.349845][ T5872] ffff8880762be418 (&p->pi_lock){-.-.}-{2:2}, at: task_call_func+0x43/0x260 [ 92.349885][ T5872] [ 92.349885][ T5872] which lock already depends on the new lock. [ 92.349885][ T5872] [ 92.349889][ T5872] [ 92.349889][ T5872] the existing dependency chain (in reverse order) is: [ 92.349893][ T5872] [ 92.349893][ T5872] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 92.349911][ T5872] _raw_spin_lock_irqsave+0xb4/0x100 [ 92.349936][ T5872] try_to_wake_up+0x5b/0x10e0 [ 92.349949][ T5872] __wake_up_common+0x28e/0x4d0 [ 92.349965][ T5872] __wake_up+0x125/0x1a0 [ 92.349980][ T5872] tty_port_default_wakeup+0xa2/0xf0 [ 92.349995][ T5872] serial8250_tx_chars+0x6a2/0x8b0 [ 92.350013][ T5872] serial8250_handle_irq+0x567/0x730 [ 92.350031][ T5872] serial8250_default_handle_irq+0xb8/0x1a0 [ 92.350051][ T5872] serial8250_interrupt+0x9f/0x1c0 [ 92.350068][ T5872] __handle_irq_event_percpu+0x271/0x940 [ 92.350090][ T5872] handle_irq_event+0x8b/0x1e0 [ 92.350112][ T5872] handle_edge_irq+0x246/0xb20 [ 92.350127][ T5872] __common_interrupt+0x13b/0x230 [ 92.350146][ T5872] common_interrupt+0xb4/0xd0 [ 92.350163][ T5872] asm_common_interrupt+0x26/0x40 [ 92.350178][ T5872] pv_native_safe_halt+0xf/0x10 [ 92.350197][ T5872] default_idle+0x13/0x20 [ 92.350216][ T5872] default_idle_call+0x6c/0xa0 [ 92.350237][ T5872] do_idle+0x334/0x5c0 [ 92.350253][ T5872] cpu_startup_entry+0x43/0x60 [ 92.350270][ T5872] rest_init+0x2e2/0x300 [ 92.350291][ T5872] arch_call_rest_init+0xe/0x10 [ 92.350312][ T5872] start_kernel+0x461/0x4e0 [ 92.350332][ T5872] x86_64_start_reservations+0x2a/0x30 [ 92.350351][ T5872] copy_bootdata+0x0/0xd0 [ 92.350367][ T5872] secondary_startup_64_no_verify+0x179/0x17b [ 92.350389][ T5872] [ 92.350389][ T5872] -> #2 (&tty->write_wait){-...}-{2:2}: [ 92.350407][ T5872] _raw_spin_lock_irqsave+0xb4/0x100 [ 92.350429][ T5872] __wake_up+0x10b/0x1a0 [ 92.350444][ T5872] tty_port_default_wakeup+0xa2/0xf0 [ 92.350458][ T5872] serial8250_tx_chars+0x6a2/0x8b0 [ 92.350476][ T5872] serial8250_handle_irq+0x567/0x730 [ 92.350494][ T5872] serial8250_default_handle_irq+0xb8/0x1a0 [ 92.350514][ T5872] serial8250_interrupt+0x9f/0x1c0 [ 92.350530][ T5872] __handle_irq_event_percpu+0x271/0x940 [ 92.350552][ T5872] handle_irq_event+0x8b/0x1e0 [ 92.350574][ T5872] handle_edge_irq+0x246/0xb20 [ 92.350589][ T5872] __common_interrupt+0x13b/0x230 [ 92.350606][ T5872] common_interrupt+0xb4/0xd0 [ 92.350622][ T5872] asm_common_interrupt+0x26/0x40 [ 92.350637][ T5872] pv_native_safe_halt+0xf/0x10 [ 92.350655][ T5872] default_idle+0x13/0x20 [ 92.350675][ T5872] default_idle_call+0x6c/0xa0 [ 92.350695][ T5872] do_idle+0x334/0x5c0 [ 92.350711][ T5872] cpu_startup_entry+0x43/0x60 [ 92.350728][ T5872] rest_init+0x2e2/0x300 [ 92.350749][ T5872] arch_call_rest_init+0xe/0x10 [ 92.350769][ T5872] start_kernel+0x461/0x4e0 [ 92.350788][ T5872] x86_64_start_reservations+0x2a/0x30 [ 92.350807][ T5872] copy_bootdata+0x0/0xd0 [ 92.350823][ T5872] secondary_startup_64_no_verify+0x179/0x17b [ 92.350843][ T5872] [ 92.350843][ T5872] -> #1 (&port_lock_key){-...}-{2:2}: [ 92.350861][ T5872] _raw_spin_lock_irqsave+0xb4/0x100 [ 92.350890][ T5872] serial8250_console_write+0x181/0x18b0 [ 92.350909][ T5872] console_flush_all+0x6ad/0xcf0 [ 92.350926][ T5872] console_unlock+0xad/0x350 [ 92.350943][ T5872] vprintk_emit+0x497/0x610 [ 92.350960][ T5872] _printk+0xde/0x130 [ 92.350981][ T5872] register_console+0xb96/0xf00 [ 92.350999][ T5872] univ8250_console_init+0x45/0x50 [ 92.351018][ T5872] console_init+0x17b/0x5d0 [ 92.351039][ T5872] start_kernel+0x2c8/0x4e0 [ 92.351059][ T5872] x86_64_start_reservations+0x2a/0x30 [ 92.351077][ T5872] copy_bootdata+0x0/0xd0 [ 92.351094][ T5872] secondary_startup_64_no_verify+0x179/0x17b [ 92.351113][ T5872] [ 92.351113][ T5872] -> #0 (console_owner){....}-{0:0}: [ 92.351130][ T5872] __lock_acquire+0x37ef/0x7d80 [ 92.351147][ T5872] lock_acquire+0x19e/0x420 [ 92.351162][ T5872] console_flush_all+0x676/0xcf0 [ 92.351180][ T5872] console_unlock+0xad/0x350 [ 92.351206][ T5872] vprintk_emit+0x497/0x610 [ 92.351222][ T5872] _printk+0xde/0x130 [ 92.351240][ T5872] report_bug+0x34e/0x4f0 [ 92.351254][ T5872] handle_bug+0xcf/0x120 [ 92.351267][ T5872] exc_invalid_op+0x1a/0x50 [ 92.351280][ T5872] asm_exc_invalid_op+0x1a/0x20 [ 92.351293][ T5872] __set_task_frozen+0x210/0x2d0 [ 92.351308][ T5872] task_call_func+0x1a2/0x260 [ 92.351319][ T5872] freeze_task+0x217/0x3a0 [ 92.351334][ T5872] try_to_freeze_tasks+0x190/0x620 [ 92.351352][ T5872] freeze_processes+0xc9/0x1e0 [ 92.351363][ T5872] pm_suspend+0x275/0x950 [ 92.351376][ T5872] state_store+0x206/0x290 [ 92.351395][ T5872] kernfs_fop_write_iter+0x3a4/0x520 [ 92.351416][ T5872] vfs_write+0x474/0x9a0 [ 92.351434][ T5872] ksys_write+0x151/0x260 [ 92.351451][ T5872] do_syscall_64+0x55/0xb0 [ 92.351464][ T5872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.351477][ T5872] [ 92.351477][ T5872] other info that might help us debug this: [ 92.351477][ T5872] [ 92.351480][ T5872] Chain exists of: [ 92.351480][ T5872] console_owner --> &tty->write_wait --> &p->pi_lock [ 92.351480][ T5872] [ 92.351499][ T5872] Possible unsafe locking scenario: [ 92.351499][ T5872] [ 92.351502][ T5872] CPU0 CPU1 [ 92.351504][ T5872] ---- ---- [ 92.351507][ T5872] lock(&p->pi_lock); [ 92.351514][ T5872] lock(&tty->write_wait); [ 92.351522][ T5872] lock(&p->pi_lock); [ 92.351530][ T5872] lock(console_owner); [ 92.351537][ T5872] [ 92.351537][ T5872] *** DEADLOCK *** [ 92.351537][ T5872] [ 92.351540][ T5872] 10 locks held by syz.2.10/5872: [ 92.351547][ T5872] #0: ffff88807a7f4ac8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 92.351584][ T5872] #1: ffff88807bc38418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 92.351621][ T5872] #2: ffff888023b39888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 [ 92.351659][ T5872] #3: ffff88814167e9b8 (kn->active#62){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 [ 92.351699][ T5872] #4: ffffffff8cfe58a8 (system_transition_mutex){+.+.}-{3:3}, at: pm_suspend+0x3a8/0x950 [ 92.351728][ T5872] #5: ffffffff8ce0a058 (tasklist_lock){.+.+}-{2:2}, at: try_to_freeze_tasks+0xe5/0x620 [ 92.351764][ T5872] #6: ffffffff8d144ef8 (freezer_lock){....}-{2:2}, at: freeze_task+0x80/0x3a0 [ 92.351796][ T5872] #7: ffff8880762be418 (&p->pi_lock){-.-.}-{2:2}, at: task_call_func+0x43/0x260 [ 92.351825][ T5872] #8: ffffffff8d126180 (console_lock){+.+.}-{0:0}, at: _printk+0xde/0x130 [ 92.351860][ T5872] #9: ffffffff8d00d990 (console_srcu){....}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 92.351899][ T5872] [ 92.351899][ T5872] stack backtrace: [ 92.351910][ T5872] CPU: 1 PID: 5872 Comm: syz.2.10 Not tainted syzkaller #0 [ 92.351923][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.351937][ T5872] Call Trace: [ 92.351942][ T5872] [ 92.351947][ T5872] dump_stack_lvl+0x18c/0x250 [ 92.351962][ T5872] ? load_image+0x420/0x420 [ 92.351982][ T5872] ? show_regs_print_info+0x20/0x20 [ 92.351999][ T5872] ? print_circular_bug+0x12b/0x1a0 [ 92.352018][ T5872] check_noncircular+0x2fc/0x400 [ 92.352037][ T5872] ? print_deadlock_bug+0x5d0/0x5d0 [ 92.352053][ T5872] ? lockdep_lock+0xf5/0x230 [ 92.352073][ T5872] __lock_acquire+0x37ef/0x7d80 [ 92.352098][ T5872] ? verify_lock_unused+0x140/0x140 [ 92.352122][ T5872] lock_acquire+0x19e/0x420 [ 92.352137][ T5872] ? console_flush_all+0x10b/0xcf0 [ 92.352157][ T5872] ? __lock_acquire+0x7d80/0x7d80 [ 92.352172][ T5872] ? do_raw_spin_lock+0x11f/0x2b0 [ 92.352190][ T5872] ? read_lock_is_recursive+0x20/0x20 [ 92.352206][ T5872] ? __rwlock_init+0x150/0x150 [ 92.352225][ T5872] ? do_raw_spin_unlock+0x121/0x230 [ 92.352245][ T5872] console_flush_all+0x676/0xcf0 [ 92.352261][ T5872] ? console_flush_all+0x10b/0xcf0 [ 92.352279][ T5872] ? console_flush_all+0x10b/0xcf0 [ 92.352300][ T5872] ? is_console_locked+0x20/0x20 [ 92.352321][ T5872] console_unlock+0xad/0x350 [ 92.352339][ T5872] ? other_cpu_in_panic+0xf0/0xf0 [ 92.352360][ T5872] vprintk_emit+0x497/0x610 [ 92.352380][ T5872] ? printk_sprint+0x460/0x460 [ 92.352398][ T5872] ? verify_lock_unused+0x140/0x140 [ 92.352417][ T5872] _printk+0xde/0x130 [ 92.352436][ T5872] ? __lock_acquire+0x7d80/0x7d80 [ 92.352453][ T5872] ? load_image+0x420/0x420 [ 92.352475][ T5872] ? find_bug+0xa5/0x3a0 [ 92.352489][ T5872] ? __set_task_frozen+0x210/0x2d0 [ 92.352507][ T5872] report_bug+0x34e/0x4f0 [ 92.352521][ T5872] ? __set_task_frozen+0x210/0x2d0 [ 92.352538][ T5872] ? __set_task_frozen+0x210/0x2d0 [ 92.352554][ T5872] ? __set_task_frozen+0x212/0x2d0 [ 92.352570][ T5872] handle_bug+0xcf/0x120 [ 92.352584][ T5872] exc_invalid_op+0x1a/0x50 [ 92.352599][ T5872] asm_exc_invalid_op+0x1a/0x20 [ 92.352613][ T5872] RIP: 0010:__set_task_frozen+0x210/0x2d0 [ 92.352631][ T5872] Code: 41 c7 06 00 80 00 00 bd 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4c 8f 11 00 0f 0b e9 0a ff ff ff e8 40 8f 11 00 <0f> 0b eb 9d 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 14 fe ff ff 4c [ 92.352642][ T5872] RSP: 0018:ffffc90004b4fa50 EFLAGS: 00010046 [ 92.352653][ T5872] RAX: ffffffff8175e240 RBX: ffff8880762bda00 RCX: 0000000000080000 [ 92.352662][ T5872] RDX: ffffc9000db9d000 RSI: 000000000007ffff RDI: 0000000000080000 [ 92.352671][ T5872] RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000004 [ 92.352678][ T5872] R10: dffffc0000000000 R11: fffff52000969f2c R12: 0000000000000000 [ 92.352687][ T5872] R13: 1ffff1100ec57b43 R14: ffff8880762bda18 R15: ffff8880762be4d8 [ 92.352699][ T5872] ? __set_task_frozen+0x210/0x2d0 [ 92.352719][ T5872] ? set_freezable+0x230/0x230 [ 92.352735][ T5872] task_call_func+0x1a2/0x260 [ 92.352750][ T5872] freeze_task+0x217/0x3a0 [ 92.352767][ T5872] ? __refrigerator+0x660/0x660 [ 92.352786][ T5872] try_to_freeze_tasks+0x190/0x620 [ 92.352810][ T5872] freeze_processes+0xc9/0x1e0 [ 92.352823][ T5872] pm_suspend+0x275/0x950 [ 92.352836][ T5872] state_store+0x206/0x290 [ 92.352856][ T5872] ? sysfs_kf_read+0x360/0x360 [ 92.352868][ T5872] kernfs_fop_write_iter+0x3a4/0x520 [ 92.352897][ T5872] vfs_write+0x474/0x9a0 [ 92.352918][ T5872] ? file_end_write+0x250/0x250 [ 92.352939][ T5872] ? __fget_files+0x3fc/0x460 [ 92.352960][ T5872] ? __fdget_pos+0x2a3/0x330 [ 92.352978][ T5872] ? ksys_write+0x74/0x260 [ 92.352997][ T5872] ksys_write+0x151/0x260 [ 92.353017][ T5872] ? __ia32_sys_read+0x90/0x90 [ 92.353038][ T5872] ? lockdep_hardirqs_on+0x98/0x150 [ 92.353057][ T5872] do_syscall_64+0x55/0xb0 [ 92.353070][ T5872] ? clear_bhb_loop+0x40/0x90 [ 92.353085][ T5872] ? clear_bhb_loop+0x40/0x90 [ 92.353100][ T5872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.353114][ T5872] RIP: 0033:0x7f26b1f9e019 [ 92.353128][ T5872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.353139][ T5872] RSP: 002b:00007f26b2da8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 92.353151][ T5872] RAX: ffffffffffffffda RBX: 00007f26b2225fa0 RCX: 00007f26b1f9e019 [ 92.353160][ T5872] RDX: 0000000000000004 RSI: 0000200000000180 RDI: 0000000000000004 [ 92.353168][ T5872] RBP: 00007f26b203500c R08: 0000000000000000 R09: 0000000000000000 [ 92.353176][ T5872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.353183][ T5872] R13: 00007f26b2226038 R14: 00007f26b2225fa0 R15: 00007fff1f5ce4a8 [ 92.353197][ T5872] [ 93.555163][ T5872] WARNING: CPU: 1 PID: 5872 at kernel/freezer.c:133 __set_task_frozen+0x210/0x2d0 [ 93.564372][ T5872] Modules linked in: [ 93.568263][ T5872] CPU: 1 PID: 5872 Comm: syz.2.10 Not tainted syzkaller #0 [ 93.575468][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.585525][ T5872] RIP: 0010:__set_task_frozen+0x210/0x2d0 [ 93.591257][ T5872] Code: 41 c7 06 00 80 00 00 bd 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4c 8f 11 00 0f 0b e9 0a ff ff ff e8 40 8f 11 00 <0f> 0b eb 9d 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 14 fe ff ff 4c [ 93.610862][ T5872] RSP: 0018:ffffc90004b4fa50 EFLAGS: 00010046 [ 93.616928][ T5872] RAX: ffffffff8175e240 RBX: ffff8880762bda00 RCX: 0000000000080000 [ 93.624920][ T5872] RDX: ffffc9000db9d000 RSI: 000000000007ffff RDI: 0000000000080000 [ 93.632889][ T5872] RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000004 [ 93.640878][ T5872] R10: dffffc0000000000 R11: fffff52000969f2c R12: 0000000000000000 [ 93.648875][ T5872] R13: 1ffff1100ec57b43 R14: ffff8880762bda18 R15: ffff8880762be4d8 [ 93.656882][ T5872] FS: 00007f26b2da86c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 93.665809][ T5872] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.672389][ T5872] CR2: 00007f6459fab6b0 CR3: 000000005d1e8000 CR4: 00000000003506e0 [ 93.680359][ T5872] Call Trace: [ 93.683637][ T5872] [ 93.686581][ T5872] ? set_freezable+0x230/0x230 [ 93.691348][ T5872] task_call_func+0x1a2/0x260 [ 93.696028][ T5872] freeze_task+0x217/0x3a0 [ 93.700453][ T5872] ? __refrigerator+0x660/0x660 [ 93.705308][ T5872] try_to_freeze_tasks+0x190/0x620 [ 93.710437][ T5872] freeze_processes+0xc9/0x1e0 [ 93.715202][ T5872] pm_suspend+0x275/0x950 [ 93.719533][ T5872] state_store+0x206/0x290 [ 93.723958][ T5872] ? sysfs_kf_read+0x360/0x360 [ 93.728721][ T5872] kernfs_fop_write_iter+0x3a4/0x520 [ 93.734021][ T5872] vfs_write+0x474/0x9a0 [ 93.738288][ T5872] ? file_end_write+0x250/0x250 [ 93.743151][ T5872] ? __fget_files+0x3fc/0x460 [ 93.747838][ T5872] ? __fdget_pos+0x2a3/0x330 [ 93.752439][ T5872] ? ksys_write+0x74/0x260 [ 93.756884][ T5872] ksys_write+0x151/0x260 [ 93.761222][ T5872] ? __ia32_sys_read+0x90/0x90 [ 93.766006][ T5872] ? lockdep_hardirqs_on+0x98/0x150 [ 93.771210][ T5872] do_syscall_64+0x55/0xb0 [ 93.775626][ T5872] ? clear_bhb_loop+0x40/0x90 [ 93.780309][ T5872] ? clear_bhb_loop+0x40/0x90 [ 93.784990][ T5872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.790891][ T5872] RIP: 0033:0x7f26b1f9e019 [ 93.795306][ T5872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.814912][ T5872] RSP: 002b:00007f26b2da8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.823322][ T5872] RAX: ffffffffffffffda RBX: 00007f26b2225fa0 RCX: 00007f26b1f9e019 [ 93.831292][ T5872] RDX: 0000000000000004 RSI: 0000200000000180 RDI: 0000000000000004 [ 93.839258][ T5872] RBP: 00007f26b203500c R08: 0000000000000000 R09: 0000000000000000 [ 93.847226][ T5872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.855193][ T5872] R13: 00007f26b2226038 R14: 00007f26b2225fa0 R15: 00007fff1f5ce4a8 [ 93.863170][ T5872] [ 93.866217][ T5872] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 93.873491][ T5872] CPU: 1 PID: 5872 Comm: syz.2.10 Not tainted syzkaller #0 [ 93.880679][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.890737][ T5872] Call Trace: [ 93.894019][ T5872] [ 93.896951][ T5872] dump_stack_lvl+0x18c/0x250 [ 93.901653][ T5872] ? show_regs_print_info+0x20/0x20 [ 93.906877][ T5872] ? load_image+0x420/0x420 [ 93.911396][ T5872] panic+0x2ca/0x720 [ 93.915302][ T5872] ? bpf_jit_dump+0xd0/0xd0 [ 93.919828][ T5872] __warn+0x2e0/0x470 [ 93.923853][ T5872] ? __set_task_frozen+0x210/0x2d0 [ 93.928970][ T5872] ? __set_task_frozen+0x210/0x2d0 [ 93.934081][ T5872] report_bug+0x2be/0x4f0 [ 93.938412][ T5872] ? __set_task_frozen+0x210/0x2d0 [ 93.943525][ T5872] ? __set_task_frozen+0x210/0x2d0 [ 93.948637][ T5872] ? __set_task_frozen+0x212/0x2d0 [ 93.953749][ T5872] handle_bug+0xcf/0x120 [ 93.957990][ T5872] exc_invalid_op+0x1a/0x50 [ 93.962487][ T5872] asm_exc_invalid_op+0x1a/0x20 [ 93.967338][ T5872] RIP: 0010:__set_task_frozen+0x210/0x2d0 [ 93.973058][ T5872] Code: 41 c7 06 00 80 00 00 bd 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4c 8f 11 00 0f 0b e9 0a ff ff ff e8 40 8f 11 00 <0f> 0b eb 9d 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 14 fe ff ff 4c [ 93.992661][ T5872] RSP: 0018:ffffc90004b4fa50 EFLAGS: 00010046 [ 93.998727][ T5872] RAX: ffffffff8175e240 RBX: ffff8880762bda00 RCX: 0000000000080000 [ 94.006718][ T5872] RDX: ffffc9000db9d000 RSI: 000000000007ffff RDI: 0000000000080000 [ 94.014725][ T5872] RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000004 [ 94.022686][ T5872] R10: dffffc0000000000 R11: fffff52000969f2c R12: 0000000000000000 [ 94.030651][ T5872] R13: 1ffff1100ec57b43 R14: ffff8880762bda18 R15: ffff8880762be4d8 [ 94.038623][ T5872] ? __set_task_frozen+0x210/0x2d0 [ 94.043755][ T5872] ? set_freezable+0x230/0x230 [ 94.048519][ T5872] task_call_func+0x1a2/0x260 [ 94.053199][ T5872] freeze_task+0x217/0x3a0 [ 94.057620][ T5872] ? __refrigerator+0x660/0x660 [ 94.062475][ T5872] try_to_freeze_tasks+0x190/0x620 [ 94.067603][ T5872] freeze_processes+0xc9/0x1e0 [ 94.072365][ T5872] pm_suspend+0x275/0x950 [ 94.076694][ T5872] state_store+0x206/0x290 [ 94.081116][ T5872] ? sysfs_kf_read+0x360/0x360 [ 94.085873][ T5872] kernfs_fop_write_iter+0x3a4/0x520 [ 94.091179][ T5872] vfs_write+0x474/0x9a0 [ 94.095425][ T5872] ? file_end_write+0x250/0x250 [ 94.100275][ T5872] ? __fget_files+0x3fc/0x460 [ 94.104954][ T5872] ? __fdget_pos+0x2a3/0x330 [ 94.109573][ T5872] ? ksys_write+0x74/0x260 [ 94.113987][ T5872] ksys_write+0x151/0x260 [ 94.118315][ T5872] ? __ia32_sys_read+0x90/0x90 [ 94.123093][ T5872] ? lockdep_hardirqs_on+0x98/0x150 [ 94.128339][ T5872] do_syscall_64+0x55/0xb0 [ 94.132780][ T5872] ? clear_bhb_loop+0x40/0x90 [ 94.137458][ T5872] ? clear_bhb_loop+0x40/0x90 [ 94.142156][ T5872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.148072][ T5872] RIP: 0033:0x7f26b1f9e019 [ 94.152485][ T5872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.172092][ T5872] RSP: 002b:00007f26b2da8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.180502][ T5872] RAX: ffffffffffffffda RBX: 00007f26b2225fa0 RCX: 00007f26b1f9e019 [ 94.188487][ T5872] RDX: 0000000000000004 RSI: 0000200000000180 RDI: 0000000000000004 [ 94.196458][ T5872] RBP: 00007f26b203500c R08: 0000000000000000 R09: 0000000000000000 [ 94.204427][ T5872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.212394][ T5872] R13: 00007f26b2226038 R14: 00007f26b2225fa0 R15: 00007fff1f5ce4a8 [ 94.220374][ T5872] [ 95.363949][ T5872] Shutting down cpus with NMI [ 95.369274][ T5872] Kernel Offset: disabled [ 95.373607][ T5872] Rebooting in 86400 seconds..