last executing test programs: 12.284701902s ago: executing program 1 (id=2): unshare(0x2020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tmp\x00', 0x1ff) mount$tmpfs(0x0, &(0x7f0000000000)='./tmp\x00', &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tmp/cg\x00', 0x1ff) mount$cgroup(0x0, &(0x7f0000000080)='./tmp/cg\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@subsystem='memory'}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tmp/cg/test\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tmp/cg/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='4096', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tmp/cg/test/tasks\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0', 0x1) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x10000)=nil, 0x10000) 12.189417815s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./rpc_pipefs\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='1\n\x00', 0x2) (async) nanosleep(&(0x7f0000000150)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000380)='mydomain 1 \\x00000000 2147483647 /\n\x00', 0x23) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000400)='mydomain / 2147483647 9218 0 0 0\n\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000480)=@filename='127.0.0.1:/\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f00000004c0)='nfs4\x00', 0x0, &(0x7f0000000500)='addr=127.0.0.1,clientaddr=127.0.0.1,soft,timeo=1,retrans=1,retry=0\x00') 11.108202482s ago: executing program 1 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/md_mod/parameters/create_on_open\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/256, 0x100) 10.726201092s ago: executing program 1 (id=7): syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040012012f10001010203010902190001010080fa0904000001ffffff0007058202000200"], 0x0) nanosleep(&(0x7f0000000100)={0x2}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000300)={&(0x7f0000000400)=[{0x50, 0x0, 0x1, &(0x7f0000000500)="aa"}], 0x1}) r1 = syz_open_dev$I2C(&(0x7f0000000200), 0x1, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000300)={&(0x7f0000000400)=[{0x50, 0x0, 0x1, &(0x7f0000000500)="aa"}], 0x1}) r2 = syz_open_dev$I2C(&(0x7f0000000200), 0x2, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000300)={&(0x7f0000000400)=[{0x50, 0x0, 0x1, &(0x7f0000000500)="aa"}], 0x1}) r3 = syz_open_dev$I2C(&(0x7f0000000200), 0x3, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000300)={&(0x7f0000000400)=[{0x50, 0x0, 0x1, &(0x7f0000000500)="aa"}], 0x1}) 10.061375535s ago: executing program 0 (id=1): pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0xc8000, 0x8, '9P2000.L'}, 0x15) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (async) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x80}}, 0x14) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write$P9_RGETATTR(r1, &(0x7f00000000c0)={0xa0, 0x19, 0x1, {0x3fff, {0x80}, 0x41ed, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x1000, 0x8}}, 0xa0) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000180)={0x43, 0x9, 0x2, {0x1000, 0x1000, 0x1000, 0x1000, 0x1000, 0x1000, 0x1000, 0x1000, 0x1000}}, 0x43) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/file\x00', 0x42, 0x1ff) write(r2, &(0x7f0000000300)='data', 0x4) 9.482983156s ago: executing program 2 (id=3): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x34, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="0123456789abcdef", 0x8, r1) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000140)='syz \x00', 0x5) listen(r0, 0xa) r2 = socket$rxrpc(0x21, 0x2, 0x2) add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)="0100000002000800ffffff7f010000000123456789abcdef0123456789abcdef", 0x20, 0xfffffffffffffffe) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000340)='syz \x00', 0x5) connect$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x34, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) sendto$rxrpc(r2, &(0x7f0000000400)='hello', 0x5, 0x0, 0x0, 0x0) 9.303802261s ago: executing program 0 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pnp/drivers/serial/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='00:04\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:04/resources\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='disable\n', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pnp/drivers/parport_pc/unbind\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='00:05\n', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pnp/devices/00:05/resources\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='disable\n', 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pnp/drivers/floppy/unbind\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='00:06\n', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pnp/devices/00:06/resources\x00', 0x2, 0x0) write(r5, &(0x7f0000000100)='disable\n', 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pnp/drivers/rtc_cmos/unbind\x00', 0x1, 0x0) write(r6, &(0x7f00000004c0)='00:02\n', 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0) write(r7, &(0x7f0000000100)='disable\n', 0x8) 8.832841898s ago: executing program 4 (id=5): add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="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", 0x1d8, 0xfffffffffffffffd) 7.763087655s ago: executing program 2 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='mem\x00', 0x3) 7.029506062s ago: executing program 4 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pnp/drivers/i8042/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='00:00\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:00/resources\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='disable\n', 0x8) 6.488837183s ago: executing program 4 (id=11): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c800000010102030109022e0001010080fa0904000004ffffff0007058103400001070501034000010705820140000107050601400001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x8, "ebaa550303010000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0xc0, 0x1, 0x8, '\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000500)={0x1}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000700)={{0x2}, 0x0, [0x10, 0x10]}) 6.227767832s ago: executing program 1 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testnqn/namespaces\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./backing_file\x00', 0x42, 0x1ed) ftruncate(r1, 0x100000) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='./backing_file\x00', 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000580)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1\x00', 0x1ed) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r5, &(0x7f0000000680)='loop\x00', 0x4) symlinkat(&(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testnqn\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r6, &(0x7f0000000780)='transport=loop,nqn=testnqn\x00', 0x1a) nanosleep(&(0x7f0000000800)={0x3}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/nvme/nvme0/nvme0n1/wwid\x00', 0x0, 0x0) read(r7, &(0x7f0000000900), 0x64) r8 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/nvme/nvme1/nvme1n1/wwid\x00', 0x0, 0x0) read(r8, &(0x7f0000000980), 0x64) 5.846854455s ago: executing program 0 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='10\n\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='10\n\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000140)='1\n\x00', 0x2) (async) nanosleep(&(0x7f0000000150)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000240)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r6, &(0x7f00000002c0)='mydomain 1 \\x00000000 2147483647 /\n\x00', 0x23) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r7, &(0x7f0000000340)='mydomain / 2147483647 9218 0 0 0\n\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f00000003c0)='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)) 5.351100639s ago: executing program 3 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:00.0/driver_override\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='thunderbolt\x00', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/thunderbolt/bind\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0000:00:00.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/thunderbolt/devices/0-0/authorized\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) 3.938352576s ago: executing program 3 (id=15): syz_usb_connect(0x2, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e0010140f30c00e300000000000109023e0002010080320904000003e00101000705810310000107058202400001070502024000010904010002e00101000705830100000107050301000001"], 0x0) 3.046879245s ago: executing program 3 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./ffs\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='usb0\x00', &(0x7f0000000140)='./ffs\x00', &(0x7f00000001c0)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs/ep0\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="030000001900000001000000010000000904000000ff000000", 0x19) write(r0, &(0x7f0000000280)="020000001000"/16, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/ffs.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='0x1d6b\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)='0x0104\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f00000004c0)={0x1}, 0x0) 2.057680415s ago: executing program 4 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/target/core/rd_mcp_0/rd1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0/rd1/control\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='rd_pages=32768\x00', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/rd1/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='0x1d6b\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget\x00', 0x1ff) 1.989022963s ago: executing program 3 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='1\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='nfsd 127.0.0.1 2147483647 127.0.0.1\n\x00', 0x24) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='127.0.0.1 / 2147483647 9218 0 0 0\n\x00', 0x22) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='127.0.0.1 0 \\x00\\x00\\x00\\x00 2147483647 /\n\x00', 0x2b) r5 = fsopen(&(0x7f0000000380)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000003c0)='source\x00', &(0x7f0000000400)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000440)='addr\x00', &(0x7f0000000480)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000004c0)='vers\x00', &(0x7f0000000500)='4.2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 1.588989759s ago: executing program 1 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./config\x00', &(0x7f0000000b00)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/dlm/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/dlm/mycluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/dlm/mycluster/comms/1/local\x00', 0x1, 0x0) write(r0, &(0x7f0000001000)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/dlm/mycluster/comms/1/addr_list\x00', 0x1, 0x0) write(r1, &(0x7f0000001200)="020000007f00000100"/128, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="0600000000000000020000000401000000000000000000006d796c7300"/124, 0x7c}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000900)={0x0, 0x1dcd6500}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/dlm/myls/nodir\x00', 0x1, 0x0) write(r7, &(0x7f0000000400)='1\x00', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/dlm/myls/control\x00', 0x1, 0x0) write(r8, &(0x7f0000000600)='1\x00', 0x2) 67.547419ms ago: executing program 4 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/kernel/mm/hugepages/hugepages-2048kB/free_hugepages\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/256, 0x100) 0s ago: executing program 1 (id=21): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @loopback}, 0x10) listen(r0, 0x1) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source\x00', &(0x7f0000000780)='127.0.0.1:8080:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='ms_mode\x00', &(0x7f0000000880)='legacy\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept(r0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000001000)='ceph v027', 0x9, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000005000), 0x90, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000002000), 0xb2, 0x40, 0x0, 0x0) sendto$inet(r2, &(0x7f0000003000)="07ffffffffffffffffffffffffffffffff000000000000000000", 0x1a, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000004000)="010100000000000000000000000000000012000000000022000000000000000000000000000100000000000000000000000000000000001e000000010118000000000000000000000000000000000000000100"/110, 0x6d, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x5}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts. [ 77.473594][ T5585] cgroup: Unknown subsys name 'net' [ 77.755359][ T5585] cgroup: Unknown subsys name 'cpuset' [ 77.799680][ T5585] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.428395][ T5585] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.835988][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.861710][ T5610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.882590][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.886291][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.902314][ T5610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.904169][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.906750][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.907539][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.912275][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.914495][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.943657][ T5607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.972689][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.976686][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.979715][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.980353][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.010803][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.036772][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.050991][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.051721][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.066475][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.070050][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.077102][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.083516][ T5613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.091883][ T4912] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.092801][ T4912] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.970237][ T4912] Bluetooth: hci1: command tx timeout [ 84.129742][ T4912] Bluetooth: hci0: command tx timeout [ 84.130285][ T5603] Bluetooth: hci3: command tx timeout [ 84.131009][ T5607] Bluetooth: hci2: command tx timeout [ 84.208991][ T4912] Bluetooth: hci4: command tx timeout [ 84.627465][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.629276][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.629470][ T5597] bridge_slave_0: entered allmulticast mode [ 84.631961][ T5597] bridge_slave_0: entered promiscuous mode [ 84.676747][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.676841][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.677145][ T5598] bridge_slave_0: entered allmulticast mode [ 84.678484][ T5598] bridge_slave_0: entered promiscuous mode [ 84.698488][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.698585][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.698766][ T5597] bridge_slave_1: entered allmulticast mode [ 84.702991][ T5597] bridge_slave_1: entered promiscuous mode [ 84.752685][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.752802][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.752950][ T5598] bridge_slave_1: entered allmulticast mode [ 84.754591][ T5598] bridge_slave_1: entered promiscuous mode [ 84.805185][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.805256][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.805370][ T5599] bridge_slave_0: entered allmulticast mode [ 84.806746][ T5599] bridge_slave_0: entered promiscuous mode [ 84.843244][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.843362][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.843510][ T5602] bridge_slave_0: entered allmulticast mode [ 84.845300][ T5602] bridge_slave_0: entered promiscuous mode [ 84.870932][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.871068][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.871211][ T5599] bridge_slave_1: entered allmulticast mode [ 84.874200][ T5599] bridge_slave_1: entered promiscuous mode [ 84.905897][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.906516][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.906604][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.906705][ T5602] bridge_slave_1: entered allmulticast mode [ 84.908394][ T5602] bridge_slave_1: entered promiscuous mode [ 84.962678][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.966413][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.061844][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.061943][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.062081][ T5601] bridge_slave_0: entered allmulticast mode [ 85.063479][ T5601] bridge_slave_0: entered promiscuous mode [ 85.091437][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.120703][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.120815][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.120962][ T5601] bridge_slave_1: entered allmulticast mode [ 85.122712][ T5601] bridge_slave_1: entered promiscuous mode [ 85.128187][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.172090][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.193493][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.211495][ T5597] team0: Port device team_slave_0 added [ 85.213753][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.248316][ T5598] team0: Port device team_slave_0 added [ 85.253998][ T5597] team0: Port device team_slave_1 added [ 85.273432][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.302140][ T5598] team0: Port device team_slave_1 added [ 85.320912][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.322564][ T5599] team0: Port device team_slave_0 added [ 85.360156][ T5602] team0: Port device team_slave_0 added [ 85.375356][ T5599] team0: Port device team_slave_1 added [ 85.376330][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.376340][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.376354][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.420248][ T5602] team0: Port device team_slave_1 added [ 85.472574][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.472586][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.472600][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.473414][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.473424][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.473438][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.494881][ T5601] team0: Port device team_slave_0 added [ 85.543972][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.543989][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.544014][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.589838][ T5601] team0: Port device team_slave_1 added [ 85.590673][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.590684][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.590709][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.621482][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.621497][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.621538][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.644163][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.644180][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.644204][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.656557][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.656574][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.656599][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.732526][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.732542][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.732566][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.785893][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.785909][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.785932][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.801902][ T5597] hsr_slave_0: entered promiscuous mode [ 85.803445][ T5597] hsr_slave_1: entered promiscuous mode [ 85.887666][ T5598] hsr_slave_0: entered promiscuous mode [ 85.889633][ T5598] hsr_slave_1: entered promiscuous mode [ 85.890752][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 85.890895][ T5598] Cannot create hsr debugfs directory [ 85.947481][ T5599] hsr_slave_0: entered promiscuous mode [ 85.948230][ T5599] hsr_slave_1: entered promiscuous mode [ 85.948812][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 85.948829][ T5599] Cannot create hsr debugfs directory [ 85.982035][ T5602] hsr_slave_0: entered promiscuous mode [ 85.982836][ T5602] hsr_slave_1: entered promiscuous mode [ 85.983347][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 85.983366][ T5602] Cannot create hsr debugfs directory [ 86.048991][ T4912] Bluetooth: hci1: command tx timeout [ 86.081655][ T5601] hsr_slave_0: entered promiscuous mode [ 86.082429][ T5601] hsr_slave_1: entered promiscuous mode [ 86.082919][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 86.082938][ T5601] Cannot create hsr debugfs directory [ 86.209096][ T4912] Bluetooth: hci0: command tx timeout [ 86.209128][ T4912] Bluetooth: hci2: command tx timeout [ 86.209160][ T4912] Bluetooth: hci3: command tx timeout [ 86.289116][ T5607] Bluetooth: hci4: command tx timeout [ 86.865040][ T200] cfg80211: failed to load regulatory.db [ 87.256200][ T5597] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.291416][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.309106][ T5597] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.355413][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.358385][ T5597] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.403634][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.422739][ T5597] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.447683][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.541265][ T5599] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.576758][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.601558][ T5599] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.634772][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.636848][ T5599] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.656588][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.686960][ T5599] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.717727][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.822663][ T5602] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.865152][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.884906][ T5602] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.923234][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.926805][ T5602] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.951940][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.982366][ T5602] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.013288][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.130119][ T5607] Bluetooth: hci1: command tx timeout [ 88.167548][ T5601] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.197171][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.203700][ T5601] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.246194][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.258981][ T5601] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.289257][ T5603] Bluetooth: hci3: command tx timeout [ 88.289344][ T4912] Bluetooth: hci2: command tx timeout [ 88.289408][ T5607] Bluetooth: hci0: command tx timeout [ 88.311361][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.347061][ T5601] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.369177][ T5607] Bluetooth: hci4: command tx timeout [ 88.374114][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.527856][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.540378][ T5598] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.583741][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.591442][ T5598] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.625510][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.639404][ T5598] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.673912][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.686086][ T5598] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.723674][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.791020][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.813174][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.845358][ T3334] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.845495][ T3334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.900046][ T3334] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.900174][ T3334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.970767][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.004930][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.024608][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.024988][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.067938][ T180] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.068077][ T180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.127274][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.174410][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.177668][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.177794][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.274074][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.274190][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.418906][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.537415][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.555179][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.587460][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.645102][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.645197][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.821144][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.910289][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.918157][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.997661][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.999046][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.209478][ T5607] Bluetooth: hci1: command tx timeout [ 90.370388][ T5607] Bluetooth: hci0: command tx timeout [ 90.370419][ T5607] Bluetooth: hci2: command tx timeout [ 90.370439][ T5607] Bluetooth: hci3: command tx timeout [ 90.371474][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.449614][ T4912] Bluetooth: hci4: command tx timeout [ 90.650145][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.867759][ T5597] veth0_vlan: entered promiscuous mode [ 90.951444][ T5597] veth1_vlan: entered promiscuous mode [ 91.014097][ T5599] veth0_vlan: entered promiscuous mode [ 91.127902][ T5599] veth1_vlan: entered promiscuous mode [ 91.226793][ T5597] veth0_macvtap: entered promiscuous mode [ 91.287067][ T5597] veth1_macvtap: entered promiscuous mode [ 91.325521][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.380071][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.427586][ T5599] veth0_macvtap: entered promiscuous mode [ 91.441410][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.476705][ T5599] veth1_macvtap: entered promiscuous mode [ 91.488677][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.629916][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.637687][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.724629][ T5602] veth0_vlan: entered promiscuous mode [ 91.781979][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.941892][ T5601] veth0_vlan: entered promiscuous mode [ 91.975684][ T5602] veth1_vlan: entered promiscuous mode [ 92.109273][ T5601] veth1_vlan: entered promiscuous mode [ 92.443698][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.443715][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.546177][ T5602] veth0_macvtap: entered promiscuous mode [ 92.565096][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.565117][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.597067][ T5602] veth1_macvtap: entered promiscuous mode [ 92.605829][ T5601] veth0_macvtap: entered promiscuous mode [ 92.665379][ T5601] veth1_macvtap: entered promiscuous mode [ 92.682698][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.682716][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.723053][ T5598] veth0_vlan: entered promiscuous mode [ 92.765999][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.766017][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.853835][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.887103][ T5598] veth1_vlan: entered promiscuous mode [ 92.905338][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.920765][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.972041][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.669329][ T5598] veth0_macvtap: entered promiscuous mode [ 93.771597][ T5598] veth1_macvtap: entered promiscuous mode [ 94.268347][ T3422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.268368][ T3422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.325332][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.366949][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.558346][ T3422] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.818595][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.818615][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.151689][ T1927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.151709][ T1927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.633393][ T1927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.633420][ T1927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.925354][ T3355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.925374][ T3355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.930879][ T3355] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.934348][ T3355] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.104360][ T3355] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.235839][ T5329] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.312899][ T5800] NFSD: Unable to initialize client recovery tracking! (-110) [ 96.312919][ T5800] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 96.312929][ T5800] NFSD: starting 90-second grace period (net f0000465) [ 96.343258][ T3334] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.388983][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.389428][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.389445][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.389829][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.620401][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.735833][ T5329] usb 2-1: New USB device found, idVendor=2001, idProduct=f112, bcdDevice= 1.00 [ 96.735865][ T5329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.735884][ T5329] usb 2-1: Product: syz [ 96.735898][ T5329] usb 2-1: Manufacturer: syz [ 96.735912][ T5329] usb 2-1: SerialNumber: syz [ 96.937619][ T5814] serial 00:04: in use; can't configure [ 97.025181][ T5814] serial 00:05: in use; can't configure [ 97.239580][ T1927] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.239807][ T1927] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.239983][ T1927] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.240162][ T1927] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.241001][ T1927] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.417031][ T1927] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.484557][ T5329] em28xx 2-1:1.0: New device syz syz @ 480 Mbps (2001:f112, interface 0, class 0) [ 97.484596][ T5329] em28xx 2-1:1.0: Video interface 0 found: bulk [ 97.540042][ T1927] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.540270][ T1927] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.540706][ T1927] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.542281][ T1927] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.542577][ T1927] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.692993][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.374167][ T5829] PM: suspend entry (deep) [ 98.758574][ T5329] em28xx 2-1:1.0: unknown em28xx chip ID (0) [ 99.306739][ T5833] i8042 kbd 00:00: in use; can't configure [ 99.872903][ T5329] em28xx 2-1:1.0: reading from i2c device at 0xa0 failed (error=-5) [ 99.872951][ T5329] em28xx 2-1:1.0: board has no eeprom [ 99.951208][ T5329] em28xx 2-1:1.0: Identified as D-Link DUB-T210 TV Tuner (card=24) [ 99.951235][ T5329] em28xx 2-1:1.0: [ 99.951235][ T5329] [ 99.951235][ T5329] The support for this board weren't valid yet. [ 99.951235][ T5329] Please send a report of having this working [ 99.951235][ T5329] not to V4L mailing list (and/or to other addresses) [ 99.951235][ T5329] [ 99.951256][ T5329] em28xx 2-1:1.0: analog set to bulk mode. [ 99.954103][ T9] em28xx 2-1:1.0: Registering V4L2 extension [ 100.409014][ T5733] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.508463][ T5329] usb 2-1: USB disconnect, device number 2 [ 100.535432][ T9] em28xx 2-1:1.0: reading from i2c device at 0x4a failed (error=-5) [ 100.613903][ T9] em28xx 2-1:1.0: reading from i2c device at 0x48 failed (error=-19) [ 100.614009][ T9] em28xx 2-1:1.0: reading from i2c device at 0x42 failed (error=-19) [ 100.614090][ T9] em28xx 2-1:1.0: reading from i2c device at 0x40 failed (error=-19) [ 100.701112][ T5329] em28xx 2-1:1.0: Disconnecting em28xx [ 101.002004][ T5733] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 101.002033][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.002052][ T5733] usb 5-1: Product: syz [ 101.002064][ T5733] usb 5-1: Manufacturer: syz [ 101.002077][ T5733] usb 5-1: SerialNumber: syz [ 101.250487][ T9] em28xx 2-1:1.0: Config register raw data: 0xffffffed [ 101.250511][ T9] em28xx 2-1:1.0: AC97 chip type couldn't be determined [ 101.250523][ T9] em28xx 2-1:1.0: No AC97 audio processor [ 101.352945][ T9] usb 2-1: Decoder not found [ 101.352964][ T9] em28xx 2-1:1.0: failed to create media graph [ 101.353031][ T9] em28xx 2-1:1.0: V4L2 device video103 deregistered [ 101.437428][ T9] em28xx 2-1:1.0: Remote control support is not available for this card. [ 101.454147][ T5329] em28xx 2-1:1.0: Closing input extension [ 101.592645][ T1927] Filesystems sync: 3.153 seconds [ 102.047801][ T5829] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 102.053748][ T5829] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.061439][ T3355] nvmet: connect request for invalid subsystem testnqn! [ 102.065696][ T5837] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 102.860355][ T5829] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 103.036335][ T5329] em28xx 2-1:1.0: Freeing device [ 103.836429][ T5829] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 103.836655][ T5829] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 104.023837][ T5829] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 104.052188][ T4912] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.218997][ T5829] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 104.219142][ T5829] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 104.623370][ T5829] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 104.944641][ T5829] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 104.944745][ T5829] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 104.975231][ T36] audit: type=1800 audit(1785852909.134:2): pid=5871 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.17" name="idProduct" dev="configfs" ino=8545 res=0 errno=0 [ 104.975282][ T36] audit: type=1800 audit(1785852909.144:3): pid=5869 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.17" name="idVendor" dev="configfs" ino=9296 res=0 errno=0 [ 105.380554][ T5829] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 105.496974][ T5829] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 105.502275][ T5829] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 105.816280][ T4912] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.836320][ T5829] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 106.133699][ T4912] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.258024][ T5829] Freezing user space processes [ 106.294298][ T4912] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.457572][ T5829] ------------[ cut here ]------------ [ 106.457586][ T5829] debug_locks && p->lockdep_depth [ 106.457604][ T5829] WARNING: kernel/freezer.c:139 at __set_task_frozen+0x260/0x340, CPU#0: syz.2.9/5829 [ 106.457658][ T5829] Modules linked in: [ 106.457689][ T5829] CPU: 0 UID: 0 PID: 5829 Comm: syz.2.9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 106.457720][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.457735][ T5829] RIP: 0010:__set_task_frozen+0x260/0x340 [ 106.457767][ T5829] Code: 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 15 09 97 09 cc e8 ef 21 15 00 90 0f 0b 90 e9 f7 fe ff ff e8 e1 21 15 00 90 <0f> 0b 90 eb 93 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c c3 fd ff ff [ 106.457781][ T5829] RSP: 0018:ffffc90005d2f9f0 EFLAGS: 00010087 [ 106.457798][ T5829] RAX: ffffffff81b0b75f RBX: ffff888037be8000 RCX: 0000000000080000 [ 106.457811][ T5829] RDX: ffffc90006ca9000 RSI: 00000000000251c8 RDI: 00000000000251c9 [ 106.457821][ T5829] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 106.457832][ T5829] R10: dffffc0000000000 R11: ffffffff81b0b500 R12: ffff888037be8018 [ 106.457844][ T5829] R13: 1ffff11006f7d003 R14: 0000000000000000 R15: ffff888037be8c00 [ 106.457856][ T5829] FS: 00007f4c96f166c0(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 106.457871][ T5829] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.457893][ T5829] CR2: 00007ff750df5d58 CR3: 000000002b8e8000 CR4: 00000000003526f0 [ 106.457909][ T5829] Call Trace: [ 106.457918][ T5829] [ 106.457929][ T5829] ? __pfx___set_task_frozen+0x10/0x10 [ 106.457957][ T5829] task_call_func+0x1aa/0x260 [ 106.457994][ T5829] freeze_task+0x216/0x390 [ 106.458021][ T5829] ? __pfx_rt_read_lock+0x10/0x10 [ 106.458044][ T5829] ? __pfx_freeze_task+0x10/0x10 [ 106.458074][ T5829] ? seqcount_lockdep_reader_access+0xec/0x100 [ 106.458097][ T5829] ? ktime_get_with_offset+0x27f/0x2d0 [ 106.458123][ T5829] try_to_freeze_tasks+0x190/0x620 [ 106.458159][ T5829] freeze_processes+0xce/0x1e0 [ 106.458185][ T5829] pm_suspend+0x2f1/0x760 [ 106.458211][ T5829] state_store+0x206/0x290 [ 106.458234][ T5829] ? __pfx_sysfs_kf_write+0x10/0x10 [ 106.458252][ T5829] kernfs_fop_write_iter+0x3a5/0x540 [ 106.458287][ T5829] vfs_write+0x61e/0xbb0 [ 106.458321][ T5829] ? __pfx_vfs_write+0x10/0x10 [ 106.458350][ T5829] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 106.458378][ T5829] ? lockdep_hardirqs_on+0x7a/0x110 [ 106.458404][ T5829] ? mutex_lock_nested+0x152/0x1d0 [ 106.458423][ T5829] ? fdget_pos+0x252/0x320 [ 106.458453][ T5829] ksys_write+0x156/0x270 [ 106.458482][ T5829] ? __pfx_ksys_write+0x10/0x10 [ 106.458514][ T5829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.458537][ T5829] do_syscall_64+0x174/0x580 [ 106.458563][ T5829] ? trace_irq_disable+0x3b/0x140 [ 106.458583][ T5829] ? clear_bhb_loop+0x40/0x90 [ 106.458609][ T5829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.458631][ T5829] RIP: 0033:0x7f4c98cbe019 [ 106.458658][ T5829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.458676][ T5829] RSP: 002b:00007f4c96f16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 106.458695][ T5829] RAX: ffffffffffffffda RBX: 00007f4c98f45fa0 RCX: 00007f4c98cbe019 [ 106.458711][ T5829] RDX: 0000000000000003 RSI: 00002000000000c0 RDI: 0000000000000003 [ 106.458723][ T5829] RBP: 00007f4c98d5500c R08: 0000000000000000 R09: 0000000000000000 [ 106.458735][ T5829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.458748][ T5829] R13: 00007f4c98f46038 R14: 00007f4c98f45fa0 R15: 00007fff4a96dcb8 [ 106.458782][ T5829] [ 106.458793][ T5829] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 106.458809][ T5829] CPU: 0 UID: 0 PID: 5829 Comm: syz.2.9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 106.458831][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.458842][ T5829] Call Trace: [ 106.458849][ T5829] [ 106.458857][ T5829] vpanic+0x56c/0xa60 [ 106.458886][ T5829] ? __pfx__printk+0x10/0x10 [ 106.458911][ T5829] ? __pfx_vpanic+0x10/0x10 [ 106.458929][ T5829] ? is_bpf_text_address+0x292/0x2b0 [ 106.458952][ T5829] ? is_bpf_text_address+0x26/0x2b0 [ 106.458984][ T5829] panic+0xc5/0xd0 [ 106.459002][ T5829] ? __pfx_panic+0x10/0x10 [ 106.459039][ T5829] __warn+0x315/0x4c0 [ 106.459056][ T5829] ? __set_task_frozen+0x260/0x340 [ 106.459091][ T5829] ? __set_task_frozen+0x260/0x340 [ 106.459120][ T5829] __report_bug+0x276/0x570 [ 106.459151][ T5829] ? __set_task_frozen+0x260/0x340 [ 106.459187][ T5829] ? __pfx___report_bug+0x10/0x10 [ 106.459214][ T5829] ? __lock_acquire+0x683/0x2ce0 [ 106.459239][ T5829] ? __lock_acquire+0x683/0x2ce0 [ 106.459267][ T5829] ? __set_task_frozen+0x260/0x340 [ 106.459296][ T5829] report_bug+0x16a/0x220 [ 106.459322][ T5829] ? __set_task_frozen+0x260/0x340 [ 106.459348][ T5829] ? __set_task_frozen+0x262/0x340 [ 106.459372][ T5829] handle_bug+0x9c/0x200 [ 106.459401][ T5829] exc_invalid_op+0x1a/0x50 [ 106.459424][ T5829] asm_exc_invalid_op+0x1a/0x20 [ 106.459439][ T5829] RIP: 0010:__set_task_frozen+0x260/0x340 [ 106.459466][ T5829] Code: 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 15 09 97 09 cc e8 ef 21 15 00 90 0f 0b 90 e9 f7 fe ff ff e8 e1 21 15 00 90 <0f> 0b 90 eb 93 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c c3 fd ff ff [ 106.459481][ T5829] RSP: 0018:ffffc90005d2f9f0 EFLAGS: 00010087 [ 106.459498][ T5829] RAX: ffffffff81b0b75f RBX: ffff888037be8000 RCX: 0000000000080000 [ 106.459513][ T5829] RDX: ffffc90006ca9000 RSI: 00000000000251c8 RDI: 00000000000251c9 [ 106.459526][ T5829] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 106.459538][ T5829] R10: dffffc0000000000 R11: ffffffff81b0b500 R12: ffff888037be8018 [ 106.459552][ T5829] R13: 1ffff11006f7d003 R14: 0000000000000000 R15: ffff888037be8c00 [ 106.459570][ T5829] ? __pfx___set_task_frozen+0x10/0x10 [ 106.459600][ T5829] ? __set_task_frozen+0x25f/0x340 [ 106.459641][ T5829] ? __pfx___set_task_frozen+0x10/0x10 [ 106.459668][ T5829] task_call_func+0x1aa/0x260 [ 106.459699][ T5829] freeze_task+0x216/0x390 [ 106.459725][ T5829] ? __pfx_rt_read_lock+0x10/0x10 [ 106.459747][ T5829] ? __pfx_freeze_task+0x10/0x10 [ 106.459776][ T5829] ? seqcount_lockdep_reader_access+0xec/0x100 [ 106.459803][ T5829] ? ktime_get_with_offset+0x27f/0x2d0 [ 106.459829][ T5829] try_to_freeze_tasks+0x190/0x620 [ 106.459858][ T5829] freeze_processes+0xce/0x1e0 [ 106.459895][ T5829] pm_suspend+0x2f1/0x760 [ 106.459923][ T5829] state_store+0x206/0x290 [ 106.459948][ T5829] ? __pfx_sysfs_kf_write+0x10/0x10 [ 106.459968][ T5829] kernfs_fop_write_iter+0x3a5/0x540 [ 106.460003][ T5829] vfs_write+0x61e/0xbb0 [ 106.460039][ T5829] ? __pfx_vfs_write+0x10/0x10 [ 106.460064][ T5829] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 106.460092][ T5829] ? lockdep_hardirqs_on+0x7a/0x110 [ 106.460121][ T5829] ? mutex_lock_nested+0x152/0x1d0 [ 106.460141][ T5829] ? fdget_pos+0x252/0x320 [ 106.460170][ T5829] ksys_write+0x156/0x270 [ 106.460200][ T5829] ? __pfx_ksys_write+0x10/0x10 [ 106.460233][ T5829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.460255][ T5829] do_syscall_64+0x174/0x580 [ 106.460282][ T5829] ? trace_irq_disable+0x3b/0x140 [ 106.460301][ T5829] ? clear_bhb_loop+0x40/0x90 [ 106.460325][ T5829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.460343][ T5829] RIP: 0033:0x7f4c98cbe019 [ 106.460362][ T5829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.460378][ T5829] RSP: 002b:00007f4c96f16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 106.460399][ T5829] RAX: ffffffffffffffda RBX: 00007f4c98f45fa0 RCX: 00007f4c98cbe019 [ 106.460414][ T5829] RDX: 0000000000000003 RSI: 00002000000000c0 RDI: 0000000000000003 [ 106.460426][ T5829] RBP: 00007f4c98d5500c R08: 0000000000000000 R09: 0000000000000000 [ 106.460439][ T5829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.460450][ T5829] R13: 00007f4c98f46038 R14: 00007f4c98f45fa0 R15: 00007fff4a96dcb8 [ 106.460485][ T5829] [ 106.460770][ T5829] Kernel Offset: disabled