last executing test programs: 12.369431363s ago: executing program 0 (id=37): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, [{0xdd, 0x18, "0050f202000100"/24}]}, 0x50) nanosleep(&(0x7f0000000380)={0x0, 0x2faf080}, &(0x7f00000003c0)) syz_80211_inject_frame(&(0x7f0000000400)=@device_b, &(0x7f0000000440)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000480)={0x0, 0x2faf080}, &(0x7f00000004c0)) syz_80211_inject_frame(&(0x7f0000000500)=@device_b, &(0x7f0000000540)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 10.903675498s ago: executing program 0 (id=45): r0 = fsopen(&(0x7f0000000000)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='clientaddr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='proto\x00', &(0x7f0000000200)='tcp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 10.397178211s ago: executing program 2 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./backing_file\x00', 0x42, 0x1ed) ftruncate(r1, 0x100000) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='./backing_file\x00', 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000580)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1\x00', 0x1ed) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r5, &(0x7f0000000680)='loop\x00', 0x4) symlinkat(&(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testnqn\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r6, &(0x7f0000000780)='transport=loop,nqn=testnqn\x00', 0x1a) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/nvme/nvme0/nvme0n1/wwid\x00', 0x0, 0x0) read(r7, &(0x7f0000000900), 0x64) r8 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/nvme/nvme1/nvme1n1/wwid\x00', 0x0, 0x0) read(r8, &(0x7f0000000980), 0x64) 10.018929217s ago: executing program 0 (id=47): r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x22, 0x4e, {0x5, 0x1, "0901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001100)="0b06000000000000") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001100)="0b06000000000000") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000000)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='auto\x00', 0x4) write(r2, &(0x7f0000000700)='auto\x00', 0x4) write(r3, &(0x7f0000000700)='auto\x00', 0x4) write(r4, &(0x7f0000000700)='auto\x00', 0x4) nanosleep(&(0x7f0000000000)={0x1}, 0x0) write(r1, &(0x7f0000000800)='on\x00', 0x2) write(r2, &(0x7f0000000800)='on\x00', 0x2) write(r3, &(0x7f0000000800)='on\x00', 0x2) write(r4, &(0x7f0000000800)='on\x00', 0x2) nanosleep(&(0x7f0000000000)={0x1}, 0x0) 8.742150775s ago: executing program 2 (id=48): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000314010000000000000000000900020073797a30000000000800410072786500070033006c6f0000"]}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4d2, @loopback}, 0x10) listen(r1, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4d2, @loopback}, 0x10) accept4(r1, 0x0, 0x0, 0x0) 8.385886684s ago: executing program 3 (id=50): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000800)=0x70) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000801)) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000803)=0xc0) 8.097218103s ago: executing program 3 (id=52): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl(r2, 0x8914, &(0x7f0000000400)="736c30000000000000000000000000000100"/40) ioctl(r2, 0x8914, &(0x7f0000000500)="736c31000000000000000000000000000100"/40) ioctl(r2, 0x8914, &(0x7f0000000600)="736c32000000000000000000000000000100"/40) ioctl(r2, 0x8914, &(0x7f0000000700)="736c33000000000000000000000000000100"/40) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000800)=0x70) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000801)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000802)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000803)=0xc0) 7.563395481s ago: executing program 2 (id=53): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040e91700000000000000010902120001010080fa0904000000ff000000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/dri/0/VGA-1/edid_override\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/dri/1/VGA-1/edid_override\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="00ffffffffffff0004430000000000000000010480000000010000000000000000000000000001010101010101010101010101010101000000fd00000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a", 0x80) write(r1, &(0x7f0000000400)="00ffffffffffff0004430000000000000000010480000000010000000000000000000000000001010101010101010101010101010101000000fd00000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a", 0x80) r2 = syz_open_dev$dri(&(0x7f0000000500), 0x0, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000540), 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) 6.863769421s ago: executing program 1 (id=55): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='127.0.0.1:/\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='user=root,password=root\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt/file\x00', 0x2, 0x0) 6.266448265s ago: executing program 3 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) 6.19821836s ago: executing program 1 (id=57): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:01/resources\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='set io 0-0\x00', 0xb) write(r0, &(0x7f0000000140)='activate\x00', 0x9) 5.878447637s ago: executing program 3 (id=58): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40e80489680001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_ep_read(r0, 0x81, 0xc, &(0x7f0000000100)=""/12) syz_usb_ep_write(r0, 0x2, 0x18, &(0x7f0000000200)='\x00'/24) syz_usb_ep_read(r0, 0x81, 0xc, &(0x7f0000000300)=""/12) syz_usb_ep_write(r0, 0x2, 0x1c, &(0x7f0000000400)='\x00'/28) nanosleep(&(0x7f0000000500)={0x1}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl(r1, 0x8914, &(0x7f0000000600)="7777616e3000000000000000000000000100"/40) ioctl(r1, 0x8914, &(0x7f0000000700)="7777616e3100000000000000000000000100"/40) syz_usb_ep_write(r0, 0x2, 0x1a, &(0x7f0000000800)="5744040000000000000057440400000000000000575a00000800") 5.646216395s ago: executing program 1 (id=59): pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000008)={0x0, 0x0}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x2000, 0x8, '9P2000.L'}, 0x15) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x80}}, 0x14) write$P9_RGETATTR(r1, &(0x7f0000000300)={0xa0, 0x19, 0x1, {0x3fff, {0x80}, 0x41ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000}}, 0xa0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/file\x00', 0x42, 0x1ff) write(r3, &(0x7f00000001c0)='data', 0x4) 4.810077878s ago: executing program 1 (id=60): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000800)=0x70) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000801)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000802)) ioctl$TIOCSTI(r1, 0x5412, 0x0) 4.387010765s ago: executing program 2 (id=61): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b113420000000102030109024a00010100c0fa0904000008ff0000000705810200020007058202000200070583020002000705840340000107050102000200070502020002000705030200020007050402000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x2, 0xc, "0c0000000100020500000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.178257603s ago: executing program 1 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='+2', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='mem', 0x3) 3.449150528s ago: executing program 1 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='freeze', 0x6) 2.59726121s ago: executing program 3 (id=64): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402505a0a40000000000010902240001010080fa0904000002ff000000090581020002000000090502020002000000"], 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0xc01c5564, &(0x7f0000000300)="000000000100000000040000000000000100"/28}) 2.275041131s ago: executing program 0 (id=65): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x400, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x1000000, 0x0, 0x80c9}, 0x20000040) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0x0}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000080)={0x14, 0x98, 0xfa00, {0x0, 0x10, 0x0, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0x14}}}}, 0xa0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {0x0, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000310)={0x0}, 0x2, 0x8}}, 0x20) write(r1, &(0x7f00000001c0)="150000001801000001000000e8030000100010000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ac14141400"/261, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000300)={0x4, 0x8, 0xfa00, {0x1, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000340)={0x6, 0x20, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1}}, 0x28) 1.950177807s ago: executing program 0 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./backing_file\x00', 0x42, 0x1ed) ftruncate(r1, 0x100000) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='./backing_file\x00', 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000580)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1\x00', 0x1ed) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r5, &(0x7f0000000680)='loop\x00', 0x4) symlinkat(&(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testnqn\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r6, &(0x7f0000000780)='transport=loop,nqn=testnqn\x00', 0x1a) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/nvme/nvme0/nvme0n1/wwid\x00', 0x0, 0x0) read(r7, &(0x7f0000000900), 0x64) r8 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/nvme/nvme1/nvme1n1/wwid\x00', 0x0, 0x0) read(r8, &(0x7f0000000980), 0x64) 1.165337358s ago: executing program 2 (id=67): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/block/sda/hctx0/tags\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/1024, 0x400) 792.948624ms ago: executing program 2 (id=68): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff) 658.017719ms ago: executing program 0 (id=69): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x35, 0x3, 0x46d, 0xc21c, 0x0, 0x0, "0600ff0900a10185010901150026ff007508950781028502090275089501b1028505090575089504b1028507090775089504b102c0"}}, 0x14d) read(r0, &(0x7f0000001000)=""/4380, 0x111c) write(r0, &(0x7f0000002000)="0a00000001000000000005000000000000", 0x11) write(r0, &(0x7f0000002000)="0a00000002000000000005000000000000", 0x11) write(r0, &(0x7f0000002000)="0a00000003000000000008000000000000000000", 0x14) read(r0, &(0x7f0000001000)=""/4380, 0x111c) write(r0, &(0x7f0000002000)="0a00000001000000000005000000000000", 0x11) write(r0, &(0x7f0000002000)="0a00000002000000000005000000000000", 0x11) write(r0, &(0x7f0000002000)="0a00000003000000000008000000000000000000", 0x14) read(r0, &(0x7f0000001000)=""/4380, 0x111c) write(r0, &(0x7f0000002000)="0a00000001000000000005000000000000", 0x11) write(r0, &(0x7f0000002000)="0a00000002000000000005000000000000", 0x11) write(r0, &(0x7f0000002000)="0a00000003000000000008000000000000000000", 0x14) read(r0, &(0x7f0000001000)=""/4380, 0x111c) write(r0, &(0x7f0000002000)="0a00000001000000000005000000000000", 0x11) write(r0, &(0x7f0000002000)="0a00000002000000000005000000000000", 0x11) write(r0, &(0x7f0000002000)="0a00000003000000000008000000000000000000", 0x14) read(r0, &(0x7f0000001000)=""/4380, 0x111c) write(r0, &(0x7f0000002000)="0a00000001000000000005000000000000", 0x11) write(r0, &(0x7f0000002000)="0a00000002000000000005000000000000", 0x11) write(r0, &(0x7f0000002000)="0a00000003000000000008000000000000000000", 0x14) read(r0, &(0x7f0000001000)=""/4380, 0x111c) write(r0, &(0x7f0000002000)="0a00000001000000000005000000000000", 0x11) write(r0, &(0x7f0000002000)="0a00000002000000000005000000000000", 0x11) write(r0, &(0x7f0000002000)="0a00000003000000000008000000000000000000", 0x14) read(r0, &(0x7f0000001000)=""/4380, 0x111c) write(r0, &(0x7f0000002000)="0a00000001000000000005000000000000", 0x11) write(r0, &(0x7f0000002000)="0a00000002000000000005000000000000", 0x11) write(r0, &(0x7f0000002000)="0a00000003000000000008000000000000000000", 0x14) nanosleep(&(0x7f0000001000)={0x0, 0x1dcd6500}, 0x0) 0s ago: executing program 3 (id=70): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl(r2, 0x8914, &(0x7f0000000400)="736c30000000000000000000000000000100"/40) ioctl(r2, 0x8914, &(0x7f0000000500)="736c31000000000000000000000000000100"/40) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000805)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.172' (ED25519) to the list of known hosts. [ 92.110455][ T10] cfg80211: failed to load regulatory.db [ 92.584424][ T5583] cgroup: Unknown subsys name 'net' [ 92.825925][ T5583] cgroup: Unknown subsys name 'cpuset' [ 92.880293][ T5583] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.858069][ T5583] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.526729][ T5601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.559373][ T5601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.565601][ T5601] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.569324][ T5608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.599033][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.627762][ T5606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.632523][ T5601] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.648788][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.666748][ T5606] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.696179][ T5606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.704272][ T5606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.730369][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.736159][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.736664][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.736911][ T5611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.740221][ T5612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.762376][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.764516][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.777305][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.805973][ T5604] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.843066][ T5608] Bluetooth: hci2: command tx timeout [ 99.919808][ T5608] Bluetooth: hci3: command tx timeout [ 100.001844][ T5608] Bluetooth: hci0: command tx timeout [ 100.015313][ T5608] Bluetooth: hci1: command tx timeout [ 100.267971][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.268242][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.273398][ T5598] bridge_slave_0: entered allmulticast mode [ 100.286563][ T5598] bridge_slave_0: entered promiscuous mode [ 100.356306][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.356706][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.357010][ T5598] bridge_slave_1: entered allmulticast mode [ 100.360018][ T5598] bridge_slave_1: entered promiscuous mode [ 100.402713][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.403071][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.403375][ T5600] bridge_slave_0: entered allmulticast mode [ 100.406138][ T5600] bridge_slave_0: entered promiscuous mode [ 100.468802][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.469085][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.469292][ T5596] bridge_slave_0: entered allmulticast mode [ 100.478082][ T5596] bridge_slave_0: entered promiscuous mode [ 100.502648][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.503014][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.503310][ T5600] bridge_slave_1: entered allmulticast mode [ 100.506000][ T5600] bridge_slave_1: entered promiscuous mode [ 100.564843][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.565211][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.565473][ T5596] bridge_slave_1: entered allmulticast mode [ 100.568337][ T5596] bridge_slave_1: entered promiscuous mode [ 100.613508][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.613788][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.614008][ T5599] bridge_slave_0: entered allmulticast mode [ 100.616556][ T5599] bridge_slave_0: entered promiscuous mode [ 100.649080][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.694300][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.694660][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.694947][ T5599] bridge_slave_1: entered allmulticast mode [ 100.697596][ T5599] bridge_slave_1: entered promiscuous mode [ 100.726253][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.756378][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.807609][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.819233][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.867595][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.902019][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.906567][ T5598] team0: Port device team_slave_0 added [ 100.964703][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.969027][ T5598] team0: Port device team_slave_1 added [ 101.008149][ T5600] team0: Port device team_slave_0 added [ 101.058047][ T5596] team0: Port device team_slave_0 added [ 101.073443][ T5600] team0: Port device team_slave_1 added [ 101.122621][ T5596] team0: Port device team_slave_1 added [ 101.149466][ T5599] team0: Port device team_slave_0 added [ 101.157427][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.157444][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.157464][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.233352][ T5599] team0: Port device team_slave_1 added [ 101.235548][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.235560][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.235580][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.298520][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.298534][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.298553][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.367714][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.367727][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.367746][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.371045][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.371061][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.371089][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.475351][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.475365][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.475384][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.477892][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.477903][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.477923][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.539149][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.539201][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.539368][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.694066][ T5598] hsr_slave_0: entered promiscuous mode [ 101.696223][ T5598] hsr_slave_1: entered promiscuous mode [ 101.921451][ T5608] Bluetooth: hci2: command tx timeout [ 101.999768][ T5608] Bluetooth: hci3: command tx timeout [ 102.056789][ T5600] hsr_slave_0: entered promiscuous mode [ 102.059197][ T5600] hsr_slave_1: entered promiscuous mode [ 102.072933][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 102.073034][ T5600] Cannot create hsr debugfs directory [ 102.083234][ T5608] Bluetooth: hci1: command tx timeout [ 102.083250][ T61] Bluetooth: hci0: command tx timeout [ 102.176306][ T5596] hsr_slave_0: entered promiscuous mode [ 102.178611][ T5596] hsr_slave_1: entered promiscuous mode [ 102.199796][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 102.199823][ T5596] Cannot create hsr debugfs directory [ 102.249097][ T5599] hsr_slave_0: entered promiscuous mode [ 102.255766][ T5599] hsr_slave_1: entered promiscuous mode [ 102.257329][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 102.257363][ T5599] Cannot create hsr debugfs directory [ 103.184902][ T5598] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.250975][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.266758][ T5598] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.307628][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.322694][ T5598] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.365046][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.394886][ T5598] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.428367][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.551693][ T5596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.587366][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.608896][ T5596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.649258][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.665321][ T5596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.696099][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.731910][ T5596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.759078][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.903184][ T5600] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.942836][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.964052][ T5600] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.995683][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.009216][ T5600] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.010571][ T5608] Bluetooth: hci2: command tx timeout [ 104.055834][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.088540][ T5600] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.091053][ T5608] Bluetooth: hci3: command tx timeout [ 104.114622][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.160187][ T61] Bluetooth: hci0: command tx timeout [ 104.160356][ T5608] Bluetooth: hci1: command tx timeout [ 104.274475][ T5599] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.316398][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.324672][ T5599] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.359198][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.385579][ T5599] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.424499][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.446893][ T5599] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.474802][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.556078][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.705646][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.769045][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.769263][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.865697][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.866673][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.895935][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.027053][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.096174][ T2166] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.097025][ T2166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.128999][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.186218][ T2158] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.186380][ T2158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.313812][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.335473][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.452321][ T1460] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.452641][ T1460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.557121][ T2166] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.557302][ T2166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.636372][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.697018][ T2158] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.697198][ T2158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.755247][ T2166] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.755415][ T2166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.082021][ T5608] Bluetooth: hci2: command tx timeout [ 106.159856][ T5608] Bluetooth: hci3: command tx timeout [ 106.242583][ T61] Bluetooth: hci0: command tx timeout [ 106.242641][ T5608] Bluetooth: hci1: command tx timeout [ 106.649488][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.114798][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.162712][ T5598] veth0_vlan: entered promiscuous mode [ 107.265185][ T5598] veth1_vlan: entered promiscuous mode [ 107.534397][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.549110][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.585833][ T5596] veth0_vlan: entered promiscuous mode [ 107.628034][ T5598] veth0_macvtap: entered promiscuous mode [ 107.660403][ T5596] veth1_vlan: entered promiscuous mode [ 107.686898][ T5598] veth1_macvtap: entered promiscuous mode [ 107.842250][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.888083][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.917065][ T5600] veth0_vlan: entered promiscuous mode [ 107.946998][ T5599] veth0_vlan: entered promiscuous mode [ 108.012280][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.038721][ T5596] veth0_macvtap: entered promiscuous mode [ 108.051944][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.072508][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.104985][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.109320][ T5600] veth1_vlan: entered promiscuous mode [ 108.132347][ T5596] veth1_macvtap: entered promiscuous mode [ 108.138984][ T5599] veth1_vlan: entered promiscuous mode [ 108.430223][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.556474][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.669178][ T2166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.692865][ T5600] veth0_macvtap: entered promiscuous mode [ 108.706146][ T2166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.708810][ T5599] veth0_macvtap: entered promiscuous mode [ 108.729661][ T2166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.735476][ T2166] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.817383][ T5599] veth1_macvtap: entered promiscuous mode [ 108.827624][ T5600] veth1_macvtap: entered promiscuous mode [ 108.953823][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.953845][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.257335][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.270169][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.321926][ T2166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.321948][ T2166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.367219][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.391392][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.435845][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.435866][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.508852][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.523319][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.555016][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.596640][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.632847][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.650482][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.710913][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.713155][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.713176][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.797574][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.943244][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.943266][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.456323][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.456345][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.696078][ T2166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.696116][ T2166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.746728][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.978482][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.978503][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.072436][ T10] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 112.072469][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 112.072490][ T10] usb 3-1: Product: syz [ 112.072505][ T10] usb 3-1: Manufacturer: syz [ 112.508769][ T10] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input5 [ 112.957448][ T5762] rdma_rxe: Failed to create IPv4 UDP tunnel [ 113.415654][ C1] usbtouchscreen 3-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 113.415663][ T10] usb 3-1: USB disconnect, device number 2 [ 113.864408][ T5770] rdma_rxe: rxe_newlink: failed to add veth0 [ 114.784169][ T5784] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.827962][ T5789] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 115.828004][ T5789] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 115.828045][ T5789] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 116.077751][ T5789] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 116.275366][ T5789] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 117.626055][ T5761] infiniband syz0: set active [ 117.653607][ T5761] infiniband syz0: added veth0 [ 117.889055][ T5761] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 117.889100][ T5761] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 117.889144][ T5761] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 118.016844][ T5761] RDS/IB: syz0: added [ 118.033992][ T5761] smc: adding ib device syz0 with port count 1 [ 118.034723][ T5761] smc: ib device syz0 port 1 has no pnetid [ 118.377878][ T5753] Flush: task=udevd[5753] dev=loop0 state=2 [ 118.542753][ T5753] Teardown: task=udevd[5753] dev=loop0 state=2 [ 118.770225][ T5803] NFSD: Unable to initialize client recovery tracking! (-110) [ 118.770247][ T5803] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 118.770259][ T5803] NFSD: starting 90-second grace period (net f00003ba) [ 118.979827][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.166911][ T10] usb 1-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice= 1.00 [ 119.166943][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.329105][ T10] r8152-cfgselector 1-1: Unknown version 0x0000 [ 119.489873][ T5703] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 119.643161][ T5703] usb 2-1: unable to get BOS descriptor or descriptor too short [ 119.643717][ T5703] usb 2-1: not running at top speed; connect to a high speed hub [ 119.647970][ T5703] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 119.647998][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.648020][ T5703] usb 2-1: Product: syz [ 119.648034][ T5703] usb 2-1: Manufacturer: syz [ 119.648048][ T5703] usb 2-1: SerialNumber: syz [ 119.795206][ T10] r8152-cfgselector 1-1: reset high-speed USB device number 2 using dummy_hcd [ 121.003452][ T5703] usb 2-1: 2:0: failed to get current value for ch 0 (-22) [ 121.227580][ T5703] usb 2-1: USB disconnect, device number 2 [ 121.426536][ T5837] zonefs (nullb0) ERROR: Not a zoned block device [ 121.576572][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.668672][ T10] r8152 1-1:1.0: USB reset failed, errno=-19 [ 121.779042][ T10] r8152-cfgselector 1-1: USB disconnect, device number 2 [ 122.220079][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.372490][ T38] audit: type=1800 audit(1785869805.412:2): pid=5852 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.26" name="local" dev="configfs" ino=7897 res=0 errno=0 [ 122.378056][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 122.378088][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.422587][ T38] audit: type=1800 audit(1785869805.492:3): pid=5855 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.26" name="nodeid" dev="configfs" ino=8332 res=0 errno=0 [ 123.289424][ T10] lg-g15 0003:046D:C222.0001: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 123.339674][ T32] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.489774][ T5775] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.494263][ T32] usb 3-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice= 1.00 [ 123.494294][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.494314][ T32] usb 3-1: Product: syz [ 123.494328][ T32] usb 3-1: Manufacturer: syz [ 123.494343][ T32] usb 3-1: SerialNumber: syz [ 123.749871][ T5775] usb 2-1: config index 0 descriptor too short (expected 143, got 141) [ 123.749903][ T5775] usb 2-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 123.757566][ T5775] usb 2-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 123.758165][ T5775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.758189][ T5775] usb 2-1: Product: syz [ 123.758205][ T5775] usb 2-1: Manufacturer: syz [ 123.758221][ T5775] usb 2-1: SerialNumber: syz [ 124.910004][ T10] lg-g15 0003:046D:C222.0001: Error -71 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 125.223097][ T32] logitech 0003:046D:C299.0002: unknown main item tag 0x0 [ 125.225227][ T32] logitech 0003:046D:C299.0002: unknown main item tag 0x0 [ 125.225260][ T32] logitech 0003:046D:C299.0002: unknown main item tag 0x0 [ 125.225287][ T32] logitech 0003:046D:C299.0002: unknown main item tag 0x0 [ 125.225314][ T32] logitech 0003:046D:C299.0002: unknown main item tag 0x0 [ 125.225342][ T32] logitech 0003:046D:C299.0002: unknown main item tag 0x0 [ 125.225368][ T32] logitech 0003:046D:C299.0002: unknown main item tag 0x0 [ 125.225394][ T32] logitech 0003:046D:C299.0002: unknown main item tag 0x0 [ 125.225421][ T32] logitech 0003:046D:C299.0002: unknown main item tag 0x0 [ 125.225446][ T32] logitech 0003:046D:C299.0002: unknown main item tag 0x0 [ 125.458244][ T5775] usb 2-1: 1:2 : no or invalid class specific endpoint descriptor [ 125.491800][ T5603] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 125.554278][ T10] usb 1-1: USB disconnect, device number 3 [ 125.631922][ T32] logitech 0003:046D:C299.0002: hidraw1: USB HID v1.11 Device [syz syz] on usb-dummy_hcd.2-1/input0 [ 139.894163][ T6082] ------------[ cut here ]------------ [ 139.894178][ T6082] debug_locks && p->lockdep_depth [ 139.894199][ T6082] WARNING: kernel/freezer.c:139 at __set_task_frozen+0x260/0x340, CPU#1: syz.1.63/6082 [ 139.894252][ T6082] Modules linked in: [ 139.894295][ T6082] CPU: 1 UID: 0 PID: 6082 Comm: syz.1.63 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 139.894320][ T6082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.894338][ T6082] RIP: 0010:__set_task_frozen+0x260/0x340 [ 139.894376][ T6082] Code: 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 55 96 a3 09 cc e8 5f 49 15 00 90 0f 0b 90 e9 f7 fe ff ff e8 51 49 15 00 90 <0f> 0b 90 eb 93 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c c3 fd ff ff [ 139.894395][ T6082] RSP: 0018:ffffc900065679f0 EFLAGS: 00010087 [ 139.894415][ T6082] RAX: ffffffff81b05a5f RBX: ffff888030ab3e80 RCX: 0000000000080000 [ 139.894431][ T6082] RDX: ffffc90010099000 RSI: 0000000000019c41 RDI: 0000000000019c42 [ 139.894446][ T6082] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 139.894460][ T6082] R10: dffffc0000000000 R11: ffffffff81b05800 R12: ffff888030ab3e98 [ 139.894476][ T6082] R13: 1ffff110061567d3 R14: 0000000000000000 R15: ffff888030ab4a88 [ 139.894492][ T6082] FS: 00007fb9a91d66c0(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 139.894511][ T6082] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.894526][ T6082] CR2: 000000110c49028c CR3: 000000005bd7e000 CR4: 00000000003526f0 [ 139.894545][ T6082] Call Trace: [ 139.894553][ T6082] [ 139.894566][ T6082] ? __pfx___set_task_frozen+0x10/0x10 [ 139.894602][ T6082] task_call_func+0x1aa/0x260 [ 139.894644][ T6082] freeze_task+0x216/0x390 [ 139.894670][ T6082] ? __pfx_rt_read_lock+0x10/0x10 [ 139.894699][ T6082] ? __pfx_freeze_task+0x10/0x10 [ 139.894728][ T6082] ? lockdep_hardirqs_on+0x7a/0x110 [ 139.894747][ T6082] ? ktime_get_with_offset+0x93/0x2d0 [ 139.894782][ T6082] ? ktime_get_with_offset+0x27f/0x2d0 [ 139.894833][ T6082] try_to_freeze_tasks+0x190/0x620 [ 139.894872][ T6082] freeze_processes+0xce/0x1e0 [ 139.894901][ T6082] pm_suspend+0x2f1/0x760 [ 139.894929][ T6082] state_store+0x206/0x290 [ 139.894953][ T6082] ? __pfx_sysfs_kf_write+0x10/0x10 [ 139.894986][ T6082] kernfs_fop_write_iter+0x3a5/0x540 [ 139.895022][ T6082] vfs_write+0x61e/0xbb0 [ 139.895058][ T6082] ? __pfx_vfs_write+0x10/0x10 [ 139.895086][ T6082] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 139.895109][ T6082] ? lockdep_hardirqs_on+0x7a/0x110 [ 139.895134][ T6082] ? mutex_lock_nested+0x152/0x1d0 [ 139.895161][ T6082] ? fdget_pos+0x252/0x320 [ 139.895189][ T6082] ksys_write+0x156/0x270 [ 139.895218][ T6082] ? __pfx_ksys_write+0x10/0x10 [ 139.895255][ T6082] do_syscall_64+0x17b/0x530 [ 139.895279][ T6082] ? irqentry_exit+0x10f/0x8f0 [ 139.895311][ T6082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.895333][ T6082] ? clear_bhb_loop+0x40/0x90 [ 139.895364][ T6082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.895388][ T6082] RIP: 0033:0x7fb9aaf7e019 [ 139.895419][ T6082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.895441][ T6082] RSP: 002b:00007fb9a91d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 139.895465][ T6082] RAX: ffffffffffffffda RBX: 00007fb9ab205fa0 RCX: 00007fb9aaf7e019 [ 139.895481][ T6082] RDX: 0000000000000006 RSI: 00002000000000c0 RDI: 0000000000000003 [ 139.895495][ T6082] RBP: 00007fb9ab01500c R08: 0000000000000000 R09: 0000000000000000 [ 139.895508][ T6082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.895520][ T6082] R13: 00007fb9ab206038 R14: 00007fb9ab205fa0 R15: 00007ffc3afd0b28 [ 139.895559][ T6082] [ 139.895571][ T6082] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 139.895586][ T6082] CPU: 1 UID: 0 PID: 6082 Comm: syz.1.63 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 139.895607][ T6082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.895618][ T6082] Call Trace: [ 139.895625][ T6082] [ 139.895632][ T6082] vpanic+0x56c/0xa60 [ 139.895652][ T6082] ? __pfx__printk+0x10/0x10 [ 139.895675][ T6082] ? __pfx_vpanic+0x10/0x10 [ 139.895692][ T6082] ? is_bpf_text_address+0x292/0x2b0 [ 139.895714][ T6082] ? is_bpf_text_address+0x26/0x2b0 [ 139.895745][ T6082] panic+0xc5/0xd0 [ 139.895763][ T6082] ? __pfx_panic+0x10/0x10 [ 139.895801][ T6082] __warn+0x315/0x4c0 [ 139.895818][ T6082] ? __set_task_frozen+0x260/0x340 [ 139.895848][ T6082] ? __set_task_frozen+0x260/0x340 [ 139.895874][ T6082] __report_bug+0x276/0x570 [ 139.895898][ T6082] ? __set_task_frozen+0x260/0x340 [ 139.895927][ T6082] ? __pfx___report_bug+0x10/0x10 [ 139.895948][ T6082] ? __lock_acquire+0x6df/0x2e40 [ 139.895970][ T6082] ? __lock_acquire+0x6df/0x2e40 [ 139.895988][ T6082] ? lockdep_hardirqs_on+0x7a/0x110 [ 139.896009][ T6082] ? __set_task_frozen+0x260/0x340 [ 139.896035][ T6082] report_bug+0x16a/0x220 [ 139.896054][ T6082] ? __set_task_frozen+0x260/0x340 [ 139.896079][ T6082] ? __set_task_frozen+0x262/0x340 [ 139.896105][ T6082] handle_bug+0x9c/0x200 [ 139.896128][ T6082] exc_invalid_op+0x1a/0x50 [ 139.896150][ T6082] asm_exc_invalid_op+0x1a/0x20 [ 139.896168][ T6082] RIP: 0010:__set_task_frozen+0x260/0x340 [ 139.896195][ T6082] Code: 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 55 96 a3 09 cc e8 5f 49 15 00 90 0f 0b 90 e9 f7 fe ff ff e8 51 49 15 00 90 <0f> 0b 90 eb 93 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c c3 fd ff ff [ 139.896210][ T6082] RSP: 0018:ffffc900065679f0 EFLAGS: 00010087 [ 139.896225][ T6082] RAX: ffffffff81b05a5f RBX: ffff888030ab3e80 RCX: 0000000000080000 [ 139.896239][ T6082] RDX: ffffc90010099000 RSI: 0000000000019c41 RDI: 0000000000019c42 [ 139.896251][ T6082] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 139.896261][ T6082] R10: dffffc0000000000 R11: ffffffff81b05800 R12: ffff888030ab3e98 [ 139.896275][ T6082] R13: 1ffff110061567d3 R14: 0000000000000000 R15: ffff888030ab4a88 [ 139.896304][ T6082] ? __pfx___set_task_frozen+0x10/0x10 [ 139.896333][ T6082] ? __set_task_frozen+0x25f/0x340 [ 139.896369][ T6082] ? __pfx___set_task_frozen+0x10/0x10 [ 139.896397][ T6082] task_call_func+0x1aa/0x260 [ 139.896431][ T6082] freeze_task+0x216/0x390 [ 139.896458][ T6082] ? __pfx_rt_read_lock+0x10/0x10 [ 139.896484][ T6082] ? __pfx_freeze_task+0x10/0x10 [ 139.896510][ T6082] ? lockdep_hardirqs_on+0x7a/0x110 [ 139.896527][ T6082] ? ktime_get_with_offset+0x93/0x2d0 [ 139.896558][ T6082] ? ktime_get_with_offset+0x27f/0x2d0 [ 139.896593][ T6082] try_to_freeze_tasks+0x190/0x620 [ 139.896625][ T6082] freeze_processes+0xce/0x1e0 [ 139.896649][ T6082] pm_suspend+0x2f1/0x760 [ 139.896675][ T6082] state_store+0x206/0x290 [ 139.896695][ T6082] ? __pfx_sysfs_kf_write+0x10/0x10 [ 139.896724][ T6082] kernfs_fop_write_iter+0x3a5/0x540 [ 139.896755][ T6082] vfs_write+0x61e/0xbb0 [ 139.896787][ T6082] ? __pfx_vfs_write+0x10/0x10 [ 139.896814][ T6082] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 139.896833][ T6082] ? lockdep_hardirqs_on+0x7a/0x110 [ 139.896853][ T6082] ? mutex_lock_nested+0x152/0x1d0 [ 139.896876][ T6082] ? fdget_pos+0x252/0x320 [ 139.896905][ T6082] ksys_write+0x156/0x270 [ 139.896929][ T6082] ? __pfx_ksys_write+0x10/0x10 [ 139.896961][ T6082] do_syscall_64+0x17b/0x530 [ 139.896980][ T6082] ? irqentry_exit+0x10f/0x8f0 [ 139.896997][ T6082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.897015][ T6082] ? clear_bhb_loop+0x40/0x90 [ 139.897040][ T6082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.897063][ T6082] RIP: 0033:0x7fb9aaf7e019 [ 139.897081][ T6082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.897100][ T6082] RSP: 002b:00007fb9a91d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 139.897120][ T6082] RAX: ffffffffffffffda RBX: 00007fb9ab205fa0 RCX: 00007fb9aaf7e019 [ 139.897134][ T6082] RDX: 0000000000000006 RSI: 00002000000000c0 RDI: 0000000000000003 [ 139.897147][ T6082] RBP: 00007fb9ab01500c R08: 0000000000000000 R09: 0000000000000000 [ 139.897161][ T6082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.897180][ T6082] R13: 00007fb9ab206038 R14: 00007fb9ab205fa0 R15: 00007ffc3afd0b28 [ 139.897215][ T6082] [ 139.899140][ T6082] Kernel Offset: disabled