last executing test programs: 1.658399482s ago: executing program 1 (id=2): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='bridge0\x00') ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000054000500000000000000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="00000000ef01010100000000000000000000000008000000"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000055000500000000000000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="00000000ef01010100000000000000000000000008000000"], 0x38}}, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x20000000}, 0x0) 817.816891ms ago: executing program 1 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ebe2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002222000000962313"], 0x0}, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/class/konepure/roccatkonepure0/macro\x00', 0x1, 0x0) write(r1, &(0x7f0000001000)='\x00'/2082, 0x822) 568.598563ms ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r1, &(0x7f00000001a0)='1', 0x1) close(r1) 183.239761ms ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3 +4.2\n', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1\n', 0x2) close(r2) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000900)={0x2, 0x801, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000a00)="80000070112233440000000000000002000186a30000000400000001000000000000000000000000000000000000000000000002000000010000004700"/116, 0x74, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000b00)=""/256, 0x100, 0x40, 0x0, 0x0) 79.719116ms ago: executing program 2 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='tcp 2049\n', 0x9) read(r0, &(0x7f0000000240), 0x100) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) 0s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='0\n\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='freezer\n\x00', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000600)='freeze\n\x00', 0x7) close(r2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.126' (ED25519) to the list of known hosts. [ 84.182717][ T5762] cgroup: Unknown subsys name 'net' [ 84.320445][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.070828][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.272063][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.280489][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.294261][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.302962][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.312968][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.332474][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.371872][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.374675][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.387266][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.396355][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.398108][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.411000][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.413539][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.419236][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.432971][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.441227][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.450036][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.457498][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.490976][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.502415][ T5085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.510976][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.523874][ T5085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.535819][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.543327][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.958735][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 89.076718][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 89.176235][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.184401][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.192279][ T5774] bridge_slave_0: entered allmulticast mode [ 89.199516][ T5774] bridge_slave_0: entered promiscuous mode [ 89.219933][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 89.238309][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 89.250071][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.258747][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.266166][ T5774] bridge_slave_1: entered allmulticast mode [ 89.273768][ T5774] bridge_slave_1: entered promiscuous mode [ 89.369553][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.388302][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.396499][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.403975][ T5779] bridge_slave_0: entered allmulticast mode [ 89.411061][ T5779] bridge_slave_0: entered promiscuous mode [ 89.430829][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.438138][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.445805][ T5779] bridge_slave_1: entered allmulticast mode [ 89.453655][ T5779] bridge_slave_1: entered promiscuous mode [ 89.462525][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.563006][ T5774] team0: Port device team_slave_0 added [ 89.581105][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.604024][ T5774] team0: Port device team_slave_1 added [ 89.623509][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.633002][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.640213][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.647980][ T5784] bridge_slave_0: entered allmulticast mode [ 89.655782][ T5784] bridge_slave_0: entered promiscuous mode [ 89.674544][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.683193][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.690405][ T5778] bridge_slave_0: entered allmulticast mode [ 89.698226][ T5778] bridge_slave_0: entered promiscuous mode [ 89.728642][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.737100][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.744684][ T5784] bridge_slave_1: entered allmulticast mode [ 89.751889][ T5784] bridge_slave_1: entered promiscuous mode [ 89.768679][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.775958][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.783260][ T5778] bridge_slave_1: entered allmulticast mode [ 89.790528][ T5778] bridge_slave_1: entered promiscuous mode [ 89.798335][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.805528][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.832122][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.847435][ T5779] team0: Port device team_slave_0 added [ 89.889294][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.896616][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.925640][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.938903][ T5779] team0: Port device team_slave_1 added [ 89.959300][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.010455][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.025183][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.058878][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.066393][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.097343][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.111265][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.136767][ T5774] hsr_slave_0: entered promiscuous mode [ 90.144242][ T5774] hsr_slave_1: entered promiscuous mode [ 90.152039][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.159030][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.186354][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.230448][ T5784] team0: Port device team_slave_0 added [ 90.253195][ T5778] team0: Port device team_slave_0 added [ 90.280771][ T5784] team0: Port device team_slave_1 added [ 90.288481][ T5778] team0: Port device team_slave_1 added [ 90.365455][ T5779] hsr_slave_0: entered promiscuous mode [ 90.372438][ T5779] hsr_slave_1: entered promiscuous mode [ 90.378724][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.386759][ T5779] Cannot create hsr debugfs directory [ 90.437254][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.444648][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.471393][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.483393][ T5782] Bluetooth: hci0: command tx timeout [ 90.489145][ T5782] Bluetooth: hci2: command tx timeout [ 90.493707][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.504855][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.531341][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.548802][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.556199][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.582280][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.592689][ T5777] Bluetooth: hci1: command tx timeout [ 90.593342][ T5782] Bluetooth: hci3: command tx timeout [ 90.650306][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.657483][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.684691][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.773380][ T5784] hsr_slave_0: entered promiscuous mode [ 90.780125][ T5784] hsr_slave_1: entered promiscuous mode [ 90.786494][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.794477][ T5784] Cannot create hsr debugfs directory [ 90.898349][ T5778] hsr_slave_0: entered promiscuous mode [ 90.905164][ T5778] hsr_slave_1: entered promiscuous mode [ 90.911444][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.919191][ T5778] Cannot create hsr debugfs directory [ 91.179293][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.192957][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.208973][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.221388][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.346589][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.368098][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.378696][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.404737][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.467212][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.480240][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.506021][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.518629][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.635798][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.649653][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.672814][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.711628][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.744542][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.843690][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.889755][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.903824][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.911268][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.942472][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.964077][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.971269][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.065254][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.084469][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.106293][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.123671][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.130854][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.156856][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.167676][ T23] cfg80211: failed to load regulatory.db [ 92.184941][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.192200][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.231554][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.238802][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.268076][ T3435] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.275349][ T3435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.330699][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.337951][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.359143][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.366429][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.564579][ T5782] Bluetooth: hci2: command tx timeout [ 92.570064][ T5782] Bluetooth: hci0: command tx timeout [ 92.642211][ T5782] Bluetooth: hci3: command tx timeout [ 92.642254][ T5777] Bluetooth: hci1: command tx timeout [ 92.757204][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.937268][ T5774] veth0_vlan: entered promiscuous mode [ 92.984153][ T5774] veth1_vlan: entered promiscuous mode [ 93.080106][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.093298][ T5774] veth0_macvtap: entered promiscuous mode [ 93.124658][ T5774] veth1_macvtap: entered promiscuous mode [ 93.140348][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.160703][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.215364][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.235621][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.286924][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.296835][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.310248][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.319435][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.344969][ T5778] veth0_vlan: entered promiscuous mode [ 93.421511][ T5779] veth0_vlan: entered promiscuous mode [ 93.437391][ T5778] veth1_vlan: entered promiscuous mode [ 93.473992][ T2122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.487065][ T2122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.516856][ T5779] veth1_vlan: entered promiscuous mode [ 93.559190][ T5784] veth0_vlan: entered promiscuous mode [ 93.591619][ T5784] veth1_vlan: entered promiscuous mode [ 93.600268][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.616675][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.652220][ T5778] veth0_macvtap: entered promiscuous mode [ 93.700622][ T5778] veth1_macvtap: entered promiscuous mode [ 93.715778][ T5779] veth0_macvtap: entered promiscuous mode [ 93.745179][ T5784] veth0_macvtap: entered promiscuous mode [ 93.766788][ T5779] veth1_macvtap: entered promiscuous mode [ 93.794979][ T5784] veth1_macvtap: entered promiscuous mode [ 93.806919][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.841702][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.862880][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.892213][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.902914][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.919452][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.932254][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.941390][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.951323][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.963221][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.990489][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.002427][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.016082][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.028245][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.040409][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.060208][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.075680][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.086975][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.098939][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.109653][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.120596][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.133489][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.165561][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.179201][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.189435][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.200662][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.213535][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.229403][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.240241][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.261083][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.272282][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.282190][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.295087][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.307418][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.329188][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.338558][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.347625][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.357360][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.371376][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.380387][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.389209][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.398146][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.577054][ T2122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.590319][ T2122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.642012][ T5777] Bluetooth: hci2: command tx timeout [ 94.647711][ T5777] Bluetooth: hci0: command tx timeout [ 94.703294][ T3435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.711188][ T3435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.722545][ T5777] Bluetooth: hci1: command tx timeout [ 94.725195][ T5782] Bluetooth: hci3: command tx timeout [ 94.762405][ T2122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.772749][ T2122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.854523][ T3516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.874367][ T3516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.938024][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.947492][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.032357][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.078233][ T8] smpboot: CPU 1 is now offline [ 95.096139][ T3435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.147398][ T3435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.248965][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.335427][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.406874][ T23] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 95.475164][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.543879][ T23] usb 2-1: config 0 descriptor?? [ 95.718418][ T5858] PM: suspend entry (s2idle) [ 96.056722][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.071194][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.080284][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.102689][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.110320][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.121583][ T5858] Filesystems sync: 0.377 seconds [ 96.130427][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.148282][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.157972][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.180309][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.191515][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.206065][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.215140][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.225832][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.235547][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.253680][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.279183][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.294063][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.307969][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.318466][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.343758][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.351162][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.367058][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.381102][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.390641][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.403889][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.418111][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.426549][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.437245][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.446531][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.457622][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.466242][ T23] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 96.490214][ T23] konepure 0003:1E7D:2DBE.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.1-1/input0 [ 96.543881][ T5858] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 96.580412][ T5858] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 96.588854][ T23] usb 2-1: USB disconnect, device number 2 [ 96.625601][ T5858] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 96.664351][ T5858] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 96.697629][ T5858] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 96.722274][ T5782] Bluetooth: hci2: command tx timeout [ 96.728648][ T5858] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 96.745989][ T5866] fido_id[5866]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 96.784220][ T5858] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 96.794776][ T5858] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 96.802970][ T5782] Bluetooth: hci3: command tx timeout [ 96.831601][ T5858] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 96.858353][ T5858] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 96.877827][ T5858] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 96.903872][ T5858] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 96.918353][ T5858] Freezing user space processes [ 96.932809][ T5855] NFSD: attempt to initialize umh client tracking in a container ignored. [ 96.946071][ T5855] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 96.957431][ T5855] NFSD: Unable to initialize client recovery tracking! (-22) [ 96.972669][ T5855] NFSD: starting 90-second grace period (net f0000496) [ 97.158796][ T5858] ------------[ cut here ]------------ [ 97.159424][ T5858] [ 97.159429][ T5858] ====================================================== [ 97.159433][ T5858] WARNING: possible circular locking dependency detected [ 97.159438][ T5858] syzkaller #0 Not tainted [ 97.159445][ T5858] ------------------------------------------------------ [ 97.159448][ T5858] syz.3.4/5858 is trying to acquire lock: [ 97.159455][ T5858] ffffffff8d1263e0 (console_owner){....}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 97.159507][ T5858] [ 97.159507][ T5858] but task is already holding lock: [ 97.159511][ T5858] ffff88802b524620 (&p->pi_lock){-.-.}-{2:2}, at: task_call_func+0x43/0x260 [ 97.159546][ T5858] [ 97.159546][ T5858] which lock already depends on the new lock. [ 97.159546][ T5858] [ 97.159550][ T5858] [ 97.159550][ T5858] the existing dependency chain (in reverse order) is: [ 97.159554][ T5858] [ 97.159554][ T5858] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 97.159571][ T5858] _raw_spin_lock_irqsave+0xb4/0x100 [ 97.159588][ T5858] try_to_wake_up+0x5b/0x10e0 [ 97.159601][ T5858] __wake_up_common+0x28e/0x4d0 [ 97.159616][ T5858] __wake_up+0x125/0x1a0 [ 97.159630][ T5858] tty_port_default_wakeup+0xa2/0xf0 [ 97.159645][ T5858] serial8250_tx_chars+0x6a2/0x8b0 [ 97.159664][ T5858] serial8250_handle_irq+0x567/0x730 [ 97.159683][ T5858] serial8250_default_handle_irq+0xb8/0x1a0 [ 97.159703][ T5858] serial8250_interrupt+0x9f/0x1c0 [ 97.159720][ T5858] __handle_irq_event_percpu+0x271/0x940 [ 97.159741][ T5858] handle_irq_event+0x8b/0x1e0 [ 97.159761][ T5858] handle_edge_irq+0x246/0xb20 [ 97.159776][ T5858] __common_interrupt+0x13b/0x230 [ 97.159793][ T5858] common_interrupt+0xb4/0xd0 [ 97.159813][ T5858] asm_common_interrupt+0x26/0x40 [ 97.159832][ T5858] skb_copy_datagram_from_iter+0x0/0x6f0 [ 97.159847][ T5858] unix_dgram_sendmsg+0x659/0x16e0 [ 97.159865][ T5858] sock_write_iter+0x2dc/0x420 [ 97.159883][ T5858] do_iter_write+0x747/0xc50 [ 97.159903][ T5858] do_writev+0x27f/0x480 [ 97.159915][ T5858] do_syscall_64+0x55/0xb0 [ 97.159932][ T5858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.159951][ T5858] [ 97.159951][ T5858] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 97.159968][ T5858] _raw_spin_lock_irqsave+0xb4/0x100 [ 97.159984][ T5858] __wake_up+0x10b/0x1a0 [ 97.159997][ T5858] tty_port_default_wakeup+0xa2/0xf0 [ 97.160012][ T5858] serial8250_tx_chars+0x6a2/0x8b0 [ 97.160030][ T5858] serial8250_handle_irq+0x567/0x730 [ 97.160048][ T5858] serial8250_default_handle_irq+0xb8/0x1a0 [ 97.160069][ T5858] serial8250_interrupt+0x9f/0x1c0 [ 97.160086][ T5858] __handle_irq_event_percpu+0x271/0x940 [ 97.160107][ T5858] handle_irq_event+0x8b/0x1e0 [ 97.160127][ T5858] handle_edge_irq+0x246/0xb20 [ 97.160141][ T5858] __common_interrupt+0x13b/0x230 [ 97.160157][ T5858] common_interrupt+0xb4/0xd0 [ 97.160177][ T5858] asm_common_interrupt+0x26/0x40 [ 97.160195][ T5858] _raw_spin_unlock_irqrestore+0xc0/0x120 [ 97.160211][ T5858] uart_write+0x45b/0x5d0 [ 97.160223][ T5858] n_tty_write+0xd3d/0x11e0 [ 97.160243][ T5858] file_tty_write+0x529/0x960 [ 97.160260][ T5858] vfs_write+0x474/0x9a0 [ 97.160279][ T5858] ksys_write+0x151/0x260 [ 97.160297][ T5858] do_syscall_64+0x55/0xb0 [ 97.160315][ T5858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.160333][ T5858] [ 97.160333][ T5858] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 97.160349][ T5858] _raw_spin_lock_irqsave+0xb4/0x100 [ 97.160365][ T5858] serial8250_console_write+0x181/0x18b0 [ 97.160385][ T5858] console_flush_all+0x6ad/0xcf0 [ 97.160401][ T5858] console_unlock+0xad/0x350 [ 97.160417][ T5858] vprintk_emit+0x497/0x610 [ 97.160433][ T5858] _printk+0xde/0x130 [ 97.160447][ T5858] register_console+0xb96/0xf00 [ 97.160464][ T5858] univ8250_console_init+0x45/0x50 [ 97.160477][ T5858] console_init+0x17b/0x5d0 [ 97.160491][ T5858] start_kernel+0x2c8/0x4e0 [ 97.160504][ T5858] x86_64_start_reservations+0x2a/0x30 [ 97.160516][ T5858] copy_bootdata+0x0/0xd0 [ 97.160577][ T5858] secondary_startup_64_no_verify+0x179/0x17b [ 97.160597][ T5858] [ 97.160597][ T5858] -> #0 (console_owner){....}-{0:0}: [ 97.160613][ T5858] __lock_acquire+0x37ef/0x7d80 [ 97.160629][ T5858] lock_acquire+0x19e/0x420 [ 97.160643][ T5858] console_flush_all+0x676/0xcf0 [ 97.160660][ T5858] console_unlock+0xad/0x350 [ 97.160676][ T5858] vprintk_emit+0x497/0x610 [ 97.160692][ T5858] _printk+0xde/0x130 [ 97.160706][ T5858] report_bug+0x34e/0x4f0 [ 97.160725][ T5858] handle_bug+0xcf/0x120 [ 97.160743][ T5858] exc_invalid_op+0x1a/0x50 [ 97.160762][ T5858] asm_exc_invalid_op+0x1a/0x20 [ 97.160779][ T5858] __set_task_frozen+0x210/0x2d0 [ 97.160796][ T5858] task_call_func+0x1a2/0x260 [ 97.160808][ T5858] freeze_task+0x217/0x3a0 [ 97.160823][ T5858] try_to_freeze_tasks+0x190/0x620 [ 97.160838][ T5858] freeze_processes+0xc9/0x1e0 [ 97.160849][ T5858] pm_suspend+0x275/0x950 [ 97.160861][ T5858] state_store+0x206/0x290 [ 97.160880][ T5858] kernfs_fop_write_iter+0x3a4/0x520 [ 97.160892][ T5858] vfs_write+0x474/0x9a0 [ 97.160911][ T5858] ksys_write+0x151/0x260 [ 97.160929][ T5858] do_syscall_64+0x55/0xb0 [ 97.160947][ T5858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.160966][ T5858] [ 97.160966][ T5858] other info that might help us debug this: [ 97.160966][ T5858] [ 97.160969][ T5858] Chain exists of: [ 97.160969][ T5858] console_owner --> &tty->write_wait --> &p->pi_lock [ 97.160969][ T5858] [ 97.160988][ T5858] Possible unsafe locking scenario: [ 97.160988][ T5858] [ 97.160991][ T5858] CPU0 CPU1 [ 97.160994][ T5858] ---- ---- [ 97.160997][ T5858] lock(&p->pi_lock); [ 97.161005][ T5858] lock(&tty->write_wait); [ 97.161013][ T5858] lock(&p->pi_lock); [ 97.161022][ T5858] lock(console_owner); [ 97.161029][ T5858] [ 97.161029][ T5858] *** DEADLOCK *** [ 97.161029][ T5858] [ 97.161032][ T5858] 10 locks held by syz.3.4/5858: [ 97.161039][ T5858] #0: ffff88802e4ee848 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 97.161091][ T5858] #1: ffff888024c98418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 97.161131][ T5858] #2: ffff88802e478488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 [ 97.161161][ T5858] #3: ffff888141a507c8 (kn->active#62){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 [ 97.161194][ T5858] #4: ffffffff8cfe5be8 (system_transition_mutex){+.+.}-{3:3}, at: pm_suspend+0x120/0x950 [ 97.161224][ T5858] #5: ffffffff8ce0a058 (tasklist_lock){.+.+}-{2:2}, at: try_to_freeze_tasks+0xe5/0x620 [ 97.161257][ T5858] #6: ffffffff8d145238 (freezer_lock){....}-{2:2}, at: freeze_task+0x80/0x3a0 [ 97.161291][ T5858] #7: ffff88802b524620 (&p->pi_lock){-.-.}-{2:2}, at: task_call_func+0x43/0x260 [ 97.161321][ T5858] #8: ffffffff8d1264c0 (console_lock){+.+.}-{0:0}, at: _printk+0xde/0x130 [ 97.161353][ T5858] #9: ffffffff8d00dcd0 (console_srcu){....}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 97.161388][ T5858] [ 97.161388][ T5858] stack backtrace: [ 97.161399][ T5858] CPU: 0 PID: 5858 Comm: syz.3.4 Not tainted syzkaller #0 [ 97.161411][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.161426][ T5858] Call Trace: [ 97.161431][ T5858] [ 97.161437][ T5858] dump_stack_lvl+0x18c/0x250 [ 97.161456][ T5858] ? load_image+0x420/0x420 [ 97.161472][ T5858] ? show_regs_print_info+0x20/0x20 [ 97.161495][ T5858] ? print_circular_bug+0x12b/0x1a0 [ 97.161514][ T5858] check_noncircular+0x2fc/0x400 [ 97.161539][ T5858] ? print_deadlock_bug+0x5d0/0x5d0 [ 97.161556][ T5858] ? lockdep_lock+0xf5/0x230 [ 97.161576][ T5858] __lock_acquire+0x37ef/0x7d80 [ 97.161603][ T5858] ? verify_lock_unused+0x140/0x140 [ 97.161632][ T5858] lock_acquire+0x19e/0x420 [ 97.161648][ T5858] ? console_flush_all+0x10b/0xcf0 [ 97.161669][ T5858] ? __lock_acquire+0x7d80/0x7d80 [ 97.161685][ T5858] ? do_raw_spin_lock+0x11f/0x2b0 [ 97.161705][ T5858] ? read_lock_is_recursive+0x20/0x20 [ 97.161722][ T5858] ? __rwlock_init+0x150/0x150 [ 97.161742][ T5858] ? do_raw_spin_unlock+0x121/0x230 [ 97.161763][ T5858] console_flush_all+0x676/0xcf0 [ 97.161781][ T5858] ? console_flush_all+0x10b/0xcf0 [ 97.161800][ T5858] ? console_flush_all+0x10b/0xcf0 [ 97.161821][ T5858] ? is_console_locked+0x20/0x20 [ 97.161844][ T5858] console_unlock+0xad/0x350 [ 97.161862][ T5858] ? other_cpu_in_panic+0xf0/0xf0 [ 97.161885][ T5858] vprintk_emit+0x497/0x610 [ 97.161903][ T5858] ? printk_sprint+0x460/0x460 [ 97.161922][ T5858] ? verify_lock_unused+0x140/0x140 [ 97.161942][ T5858] _printk+0xde/0x130 [ 97.161957][ T5858] ? __lock_acquire+0x7d80/0x7d80 [ 97.161975][ T5858] ? load_image+0x420/0x420 [ 97.161993][ T5858] ? find_bug+0xa5/0x3a0 [ 97.162012][ T5858] ? __set_task_frozen+0x210/0x2d0 [ 97.162031][ T5858] report_bug+0x34e/0x4f0 [ 97.162051][ T5858] ? __set_task_frozen+0x210/0x2d0 [ 97.162069][ T5858] ? __set_task_frozen+0x210/0x2d0 [ 97.162086][ T5858] ? __set_task_frozen+0x212/0x2d0 [ 97.162103][ T5858] handle_bug+0xcf/0x120 [ 97.162123][ T5858] exc_invalid_op+0x1a/0x50 [ 97.162143][ T5858] asm_exc_invalid_op+0x1a/0x20 [ 97.162164][ T5858] RIP: 0010:__set_task_frozen+0x210/0x2d0 [ 97.162184][ T5858] Code: 41 c7 06 00 80 00 00 bd 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 8c 90 11 00 0f 0b e9 0a ff ff ff e8 80 90 11 00 <0f> 0b eb 9d 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 14 fe ff ff 4c [ 97.162195][ T5858] RSP: 0018:ffffc90004767a50 EFLAGS: 00010046 [ 97.162206][ T5858] RAX: ffffffff8175fad0 RBX: ffff88802b523c00 RCX: 0000000000080000 [ 97.162217][ T5858] RDX: ffffc9000d763000 RSI: 000000000007ffff RDI: 0000000000080000 [ 97.162226][ T5858] RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000004 [ 97.162234][ T5858] R10: dffffc0000000000 R11: fffff520008ecf2c R12: 0000000000000000 [ 97.162244][ T5858] R13: 1ffff110056a4783 R14: ffff88802b523c18 R15: ffff88802b5246e0 [ 97.162257][ T5858] ? __set_task_frozen+0x210/0x2d0 [ 97.162277][ T5858] ? set_freezable+0x230/0x230 [ 97.162294][ T5858] task_call_func+0x1a2/0x260 [ 97.162310][ T5858] freeze_task+0x217/0x3a0 [ 97.162328][ T5858] ? __refrigerator+0x660/0x660 [ 97.162349][ T5858] try_to_freeze_tasks+0x190/0x620 [ 97.162368][ T5858] freeze_processes+0xc9/0x1e0 [ 97.162382][ T5858] pm_suspend+0x275/0x950 [ 97.162396][ T5858] state_store+0x206/0x290 [ 97.162417][ T5858] ? sysfs_kf_read+0x360/0x360 [ 97.162430][ T5858] kernfs_fop_write_iter+0x3a4/0x520 [ 97.162446][ T5858] vfs_write+0x474/0x9a0 [ 97.162468][ T5858] ? file_end_write+0x250/0x250 [ 97.162489][ T5858] ? __fget_files+0x3fc/0x460 [ 97.162512][ T5858] ? __fdget_pos+0x2a3/0x330 [ 97.162537][ T5858] ? ksys_write+0x74/0x260 [ 97.162558][ T5858] ksys_write+0x151/0x260 [ 97.162579][ T5858] ? __ia32_sys_read+0x90/0x90 [ 97.162601][ T5858] ? lockdep_hardirqs_on+0x98/0x150 [ 97.162616][ T5858] do_syscall_64+0x55/0xb0 [ 97.162634][ T5858] ? clear_bhb_loop+0x40/0x90 [ 97.162654][ T5858] ? clear_bhb_loop+0x40/0x90 [ 97.162675][ T5858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.162695][ T5858] RIP: 0033:0x7fcb49f9e159 [ 97.162719][ T5858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.162729][ T5858] RSP: 002b:00007fcb4aeb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 97.162742][ T5858] RAX: ffffffffffffffda RBX: 00007fcb4a225fa0 RCX: 00007fcb49f9e159 [ 97.162752][ T5858] RDX: 0000000000000007 RSI: 0000200000000600 RDI: 0000000000000003 [ 97.162760][ T5858] RBP: 00007fcb4a03503b R08: 0000000000000000 R09: 0000000000000000 [ 97.162769][ T5858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.162776][ T5858] R13: 00007fcb4a226038 R14: 00007fcb4a225fa0 R15: 00007ffde52f68d8 [ 97.162792][ T5858] [ 98.331876][ T5858] WARNING: CPU: 0 PID: 5858 at kernel/freezer.c:133 __set_task_frozen+0x210/0x2d0 [ 98.341102][ T5858] Modules linked in: [ 98.345003][ T5858] CPU: 0 PID: 5858 Comm: syz.3.4 Not tainted syzkaller #0 [ 98.352116][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.362188][ T5858] RIP: 0010:__set_task_frozen+0x210/0x2d0 [ 98.367918][ T5858] Code: 41 c7 06 00 80 00 00 bd 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 8c 90 11 00 0f 0b e9 0a ff ff ff e8 80 90 11 00 <0f> 0b eb 9d 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 14 fe ff ff 4c [ 98.387584][ T5858] RSP: 0018:ffffc90004767a50 EFLAGS: 00010046 [ 98.393662][ T5858] RAX: ffffffff8175fad0 RBX: ffff88802b523c00 RCX: 0000000000080000 [ 98.401721][ T5858] RDX: ffffc9000d763000 RSI: 000000000007ffff RDI: 0000000000080000 [ 98.409715][ T5858] RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000004 [ 98.417690][ T5858] R10: dffffc0000000000 R11: fffff520008ecf2c R12: 0000000000000000 [ 98.425673][ T5858] R13: 1ffff110056a4783 R14: ffff88802b523c18 R15: ffff88802b5246e0 [ 98.433665][ T5858] FS: 00007fcb4aeb06c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 98.442610][ T5858] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.449229][ T5858] CR2: 0000562605c0e270 CR3: 000000001afa5000 CR4: 00000000003506f0 [ 98.457213][ T5858] Call Trace: [ 98.460497][ T5858] [ 98.463466][ T5858] ? set_freezable+0x230/0x230 [ 98.468239][ T5858] task_call_func+0x1a2/0x260 [ 98.472922][ T5858] freeze_task+0x217/0x3a0 [ 98.477345][ T5858] ? __refrigerator+0x660/0x660 [ 98.482204][ T5858] try_to_freeze_tasks+0x190/0x620 [ 98.487328][ T5858] freeze_processes+0xc9/0x1e0 [ 98.492275][ T5858] pm_suspend+0x275/0x950 [ 98.496616][ T5858] state_store+0x206/0x290 [ 98.501049][ T5858] ? sysfs_kf_read+0x360/0x360 [ 98.505817][ T5858] kernfs_fop_write_iter+0x3a4/0x520 [ 98.511105][ T5858] vfs_write+0x474/0x9a0 [ 98.515357][ T5858] ? file_end_write+0x250/0x250 [ 98.520234][ T5858] ? __fget_files+0x3fc/0x460 [ 98.524926][ T5858] ? __fdget_pos+0x2a3/0x330 [ 98.529549][ T5858] ? ksys_write+0x74/0x260 [ 98.533978][ T5858] ksys_write+0x151/0x260 [ 98.538406][ T5858] ? __ia32_sys_read+0x90/0x90 [ 98.543184][ T5858] ? lockdep_hardirqs_on+0x98/0x150 [ 98.548393][ T5858] do_syscall_64+0x55/0xb0 [ 98.552844][ T5858] ? clear_bhb_loop+0x40/0x90 [ 98.557554][ T5858] ? clear_bhb_loop+0x40/0x90 [ 98.562245][ T5858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.568164][ T5858] RIP: 0033:0x7fcb49f9e159 [ 98.572606][ T5858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.592252][ T5858] RSP: 002b:00007fcb4aeb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 98.600688][ T5858] RAX: ffffffffffffffda RBX: 00007fcb4a225fa0 RCX: 00007fcb49f9e159 [ 98.608668][ T5858] RDX: 0000000000000007 RSI: 0000200000000600 RDI: 0000000000000003 [ 98.616640][ T5858] RBP: 00007fcb4a03503b R08: 0000000000000000 R09: 0000000000000000 [ 98.624610][ T5858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.632584][ T5858] R13: 00007fcb4a226038 R14: 00007fcb4a225fa0 R15: 00007ffde52f68d8 [ 98.640588][ T5858] [ 98.643628][ T5858] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 98.650922][ T5858] CPU: 0 PID: 5858 Comm: syz.3.4 Not tainted syzkaller #0 [ 98.658068][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.668387][ T5858] Call Trace: [ 98.671672][ T5858] [ 98.674606][ T5858] dump_stack_lvl+0x18c/0x250 [ 98.679318][ T5858] ? show_regs_print_info+0x20/0x20 [ 98.684533][ T5858] ? load_image+0x420/0x420 [ 98.689055][ T5858] panic+0x2ca/0x720 [ 98.692961][ T5858] ? bpf_jit_dump+0xd0/0xd0 [ 98.697477][ T5858] __warn+0x2e0/0x470 [ 98.701468][ T5858] ? __set_task_frozen+0x210/0x2d0 [ 98.706591][ T5858] ? __set_task_frozen+0x210/0x2d0 [ 98.711711][ T5858] report_bug+0x2be/0x4f0 [ 98.716050][ T5858] ? __set_task_frozen+0x210/0x2d0 [ 98.721170][ T5858] ? __set_task_frozen+0x210/0x2d0 [ 98.726310][ T5858] ? __set_task_frozen+0x212/0x2d0 [ 98.731428][ T5858] handle_bug+0xcf/0x120 [ 98.735683][ T5858] exc_invalid_op+0x1a/0x50 [ 98.740216][ T5858] asm_exc_invalid_op+0x1a/0x20 [ 98.745095][ T5858] RIP: 0010:__set_task_frozen+0x210/0x2d0 [ 98.750842][ T5858] Code: 41 c7 06 00 80 00 00 bd 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 8c 90 11 00 0f 0b e9 0a ff ff ff e8 80 90 11 00 <0f> 0b eb 9d 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 14 fe ff ff 4c [ 98.770466][ T5858] RSP: 0018:ffffc90004767a50 EFLAGS: 00010046 [ 98.776550][ T5858] RAX: ffffffff8175fad0 RBX: ffff88802b523c00 RCX: 0000000000080000 [ 98.784530][ T5858] RDX: ffffc9000d763000 RSI: 000000000007ffff RDI: 0000000000080000 [ 98.792510][ T5858] RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000004 [ 98.800517][ T5858] R10: dffffc0000000000 R11: fffff520008ecf2c R12: 0000000000000000 [ 98.808519][ T5858] R13: 1ffff110056a4783 R14: ffff88802b523c18 R15: ffff88802b5246e0 [ 98.816506][ T5858] ? __set_task_frozen+0x210/0x2d0 [ 98.821660][ T5858] ? set_freezable+0x230/0x230 [ 98.826460][ T5858] task_call_func+0x1a2/0x260 [ 98.831170][ T5858] freeze_task+0x217/0x3a0 [ 98.835609][ T5858] ? __refrigerator+0x660/0x660 [ 98.840495][ T5858] try_to_freeze_tasks+0x190/0x620 [ 98.845622][ T5858] freeze_processes+0xc9/0x1e0 [ 98.850573][ T5858] pm_suspend+0x275/0x950 [ 98.854924][ T5858] state_store+0x206/0x290 [ 98.859373][ T5858] ? sysfs_kf_read+0x360/0x360 [ 98.864162][ T5858] kernfs_fop_write_iter+0x3a4/0x520 [ 98.869471][ T5858] vfs_write+0x474/0x9a0 [ 98.873753][ T5858] ? file_end_write+0x250/0x250 [ 98.878638][ T5858] ? __fget_files+0x3fc/0x460 [ 98.883334][ T5858] ? __fdget_pos+0x2a3/0x330 [ 98.887954][ T5858] ? ksys_write+0x74/0x260 [ 98.892396][ T5858] ksys_write+0x151/0x260 [ 98.896747][ T5858] ? __ia32_sys_read+0x90/0x90 [ 98.901540][ T5858] ? lockdep_hardirqs_on+0x98/0x150 [ 98.906763][ T5858] do_syscall_64+0x55/0xb0 [ 98.911380][ T5858] ? clear_bhb_loop+0x40/0x90 [ 98.916101][ T5858] ? clear_bhb_loop+0x40/0x90 [ 98.920967][ T5858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.926961][ T5858] RIP: 0033:0x7fcb49f9e159 [ 98.931387][ T5858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.951034][ T5858] RSP: 002b:00007fcb4aeb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 98.959461][ T5858] RAX: ffffffffffffffda RBX: 00007fcb4a225fa0 RCX: 00007fcb49f9e159 [ 98.967459][ T5858] RDX: 0000000000000007 RSI: 0000200000000600 RDI: 0000000000000003 [ 98.975465][ T5858] RBP: 00007fcb4a03503b R08: 0000000000000000 R09: 0000000000000000 [ 98.983468][ T5858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.991467][ T5858] R13: 00007fcb4a226038 R14: 00007fcb4a225fa0 R15: 00007ffde52f68d8 [ 98.999508][ T5858] [ 99.002610][ T5858] Kernel Offset: disabled [ 99.006942][ T5858] Rebooting in 86400 seconds..