last executing test programs: 1m34.842478005s ago: executing program 32 (id=7): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x605, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}}}, 0x0) nanosleep(&(0x7f0000000d00)={0x0, 0x1dcd6500}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000600)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1234, 0x0, @loopback}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000700)={0x7, 0x8, 0xfa00, {r2, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000a00)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x1234, 0x0, @loopback}, r3, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000b00)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000c00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r3}}, 0x120) 1m34.792271798s ago: executing program 2 (id=3): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r0, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,n', 0x79) 1m34.729054332s ago: executing program 2 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/nfsv4gracetime\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='10\n', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) write(r2, &(0x7f00000006c0)='10\n', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 *\n', 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='* ./ 2147483647 139296 0 0 0\n', 0x1d) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='* 1 \\x00000000 2147483647 ./\n', 0x1d) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r6, &(0x7f00000002c0)='tcp 2049\n', 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r7, &(0x7f0000000340)='1\n', 0x2) (async) nanosleep(&(0x7f0000000380)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='addr=127.0.0.1,clientaddr=127.0.0.1,vers=4.1\x00']) 1m34.132757967s ago: executing program 3 (id=12): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) ioctl(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x40) write$ppp(r1, &(0x7f0000000200)="150329", 0x3) ioctl(r1, 0x4010744d, &(0x7f0000000180)="00020000007f00000300000000000000") bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x3, 0x1}, 0x14) sendto$packet(0xffffffffffffffff, &(0x7f0000000400)="000000000000000000000000886411000001000980fd02010007150329", 0x1d, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000500)="000000000000000000000000886411000001000600fd00000000", 0x1a, 0x0, 0x0, 0x0) 1m33.876185035s ago: executing program 3 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='8\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f00000001c0)='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='vers=4.1,addr=127.0.0.1,clientaddr=127.0.0.1\x00']) 1m33.306402273s ago: executing program 2 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000010c0)='./sys/bus/pci/devices\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001100)=""/4096, 0x1000) 1m32.129077091s ago: executing program 3 (id=18): r0 = openat(0xffffffffffffff9c, &(0x7f0000006710)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r0, &(0x7f0000006800)='bare\x00', 0x4) 1m31.979427471s ago: executing program 2 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/pm_test\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='core\n', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='disk\n', 0x5) 1m31.342873808s ago: executing program 3 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='id_ext=0,ioc_guid=0,dest=0.0.0.0:3260\x00', 0x25) 1m30.720936082s ago: executing program 3 (id=26): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r0, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,n', 0x79) 1m30.475493959s ago: executing program 3 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/pm_test\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='devices', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='disk', 0x4) 1m29.66915545s ago: executing program 5 (id=8): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @empty}, 0x10) listen(r0, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/share,user=root,pass=root,port=445,vers=3.0\x00') (async) r1 = accept(r0, 0x0, 0x0) read(r1, &(0x7f0000000400), 0x100) write(r1, &(0x7f0000000500)="00000080fe534d4240000000000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000008000000000000000", 0x88) 1m29.494460068s ago: executing program 5 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000006000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000006000)='./sys\x00', &(0x7f0000006100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000006200)='./sys/module/psmouse/parameters/synaptics_intertouch\x00', 0x1, 0x0) write(r0, &(0x7f0000006300)='1\x00', 0x2) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000006400), 0x2, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000006500), 0x2) write(r1, &(0x7f0000000000)="02fa02000200", 0x6) write(r1, &(0x7f0000000000)="02fa", 0x2) write(r1, &(0x7f0000000000)="02fa02fa", 0x4) write(r1, &(0x7f0000000000)="02fa02fa", 0x4) write(r1, &(0x7f0000000000)="02fa02fa", 0x4) write(r1, &(0x7f0000000000)="02fa02fa", 0x4) write(r1, &(0x7f0000000000)="02fa020502470207", 0x8) write(r1, &(0x7f0000000000)="02fa02aa0200", 0x6) write(r1, &(0x7f0000000000)="02fa02fa02fa02fa02fa02fa02fa02fa02fa02fa", 0x14) write(r1, &(0x7f0000000000)="020502470207", 0x6) write(r1, &(0x7f0000000000)="02fa02fa02fa02fa02fa02fa02fa02fa02fa02fa", 0x14) write(r1, &(0x7f0000000000)="020002000200", 0x6) write(r1, &(0x7f0000000000)="02fa02fa02fa02fa02fa02fa02fa02fa02fa02fa", 0x14) write(r1, &(0x7f0000000000)="020002400200", 0x6) write(r1, &(0x7f0000000000)="02fa02fa02fa02fa02fa02fa02fa02fa02fa02fa", 0x14) write(r1, &(0x7f0000000000)="020002000200", 0x6) write(r1, &(0x7f0000000000)="02fa02fa02fa02fa02fa02fa02fa02fa02fa02fa", 0x14) write(r1, &(0x7f0000000000)="020002400200", 0x6) write(r1, &(0x7f0000000000)="02fa02fa02fa02fa02fa02fa02fa02fa02fa02fa", 0x14) write(r1, &(0x7f0000000000)="020002000200", 0x6) nanosleep(&(0x7f0000006600)={0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000006700)='./sys/bus/serio/devices/serio0/protocol\x00', 0x1, 0x0) write(r2, &(0x7f0000006800)='bare\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000006710)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r3, &(0x7f0000006800)='bare\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000006720)='./sys/bus/serio/devices/serio2/protocol\x00', 0x1, 0x0) 1m28.802992907s ago: executing program 33 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='disk\n', 0x5) close(r0) 1m28.55245367s ago: executing program 34 (id=35): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x8180, 0x900) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x2, 0x0) ioctl(r0, 0x1260, &(0x7f0000000200)) 1m28.54350945s ago: executing program 5 (id=37): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r0, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.n', 0x8d) 1m28.293781597s ago: executing program 5 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/kernel/printk\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1 4 1 7\n\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='devices\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='mem\n\x00', 0x5) 1m23.904289391s ago: executing program 6 (id=34): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000340)=""/258, 0x102) write$nci(r0, &(0x7f0000000480)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3}, 0x6) read$nci(r0, &(0x7f00000004c0)=""/258, 0x102) write$nci(r0, &(0x7f0000000600)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11, {{}, {0x0, 0x0, 0xff}}}, 0x14) read$nci(r0, &(0x7f0000000640)=""/258, 0x102) write$nci(r0, &(0x7f0000000780)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x2}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x2}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f00000007c0)=""/258, 0x102) write$nci(r0, &(0x7f0000000900)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) read$nci(r0, &(0x7f0000000940)=""/258, 0x102) write$nci(r0, &(0x7f0000000a80)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x1}, 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) close(r2) (async) read$nci(r0, &(0x7f0000000ac0)=""/258, 0x102) write$nci(r0, &(0x7f0000000c00)=@NCI_OP_RF_DEACTIVATE_RSP={0x1, 0x0, 0x2, 0x6, 0x1}, 0x4) close(r0) 1m23.664840513s ago: executing program 7 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='10 1 4\x00', 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x32, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x33, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x34, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x35, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x36, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x38, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x39, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3a, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3b, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) 1m23.589459154s ago: executing program 7 (id=39): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) listen(r1, 0x1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) poll(&(0x7f0000000000)=[{r2, 0x4}], 0x1, 0x3e8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001180)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 27.786259314s ago: executing program 35 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/kernel/printk\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1 4 1 7\n\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='devices\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='mem\n\x00', 0x5) 27.659590674s ago: executing program 36 (id=39): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) listen(r1, 0x1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) poll(&(0x7f0000000000)=[{r2, 0x4}], 0x1, 0x3e8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001180)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 27.544849502s ago: executing program 37 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/pm_test\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='core\n', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='disk\n', 0x5) 27.42893024s ago: executing program 38 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/pm_test\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='devices', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='disk', 0x4) 27.291704213s ago: executing program 39 (id=34): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000340)=""/258, 0x102) write$nci(r0, &(0x7f0000000480)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3}, 0x6) read$nci(r0, &(0x7f00000004c0)=""/258, 0x102) write$nci(r0, &(0x7f0000000600)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11, {{}, {0x0, 0x0, 0xff}}}, 0x14) read$nci(r0, &(0x7f0000000640)=""/258, 0x102) write$nci(r0, &(0x7f0000000780)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x2}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x2}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f00000007c0)=""/258, 0x102) write$nci(r0, &(0x7f0000000900)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) read$nci(r0, &(0x7f0000000940)=""/258, 0x102) write$nci(r0, &(0x7f0000000a80)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x1}, 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) close(r2) (async) read$nci(r0, &(0x7f0000000ac0)=""/258, 0x102) write$nci(r0, &(0x7f0000000c00)=@NCI_OP_RF_DEACTIVATE_RSP={0x1, 0x0, 0x2, 0x6, 0x1}, 0x4) close(r0) 15.220621272s ago: executing program 9 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfs_share\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfs_share\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='nfsd 127.0.0.1 2147483647 mydomain\n', 0x23) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='mydomain ./nfs_share 2147483647 8192 0 0 0\n', 0x2b) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f0000000840)='-2 -3 +4\n', 0x9) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./rpc_pipefs\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='tcp 2049\n', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1\n', 0x2) 13.150017006s ago: executing program 0 (id=51): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfs_share\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfs_share\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='nfsd 127.0.0.1 2147483647 mydomain\n', 0x23) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='mydomain ./nfs_share 2147483647 8192 0 0 0\n', 0x2b) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f0000000840)='-2 -3 +4\n', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1\n', 0x2) (async) close(r4) nanosleep(&(0x7f0000000380)={0x1}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/v4_end_grace\x00', 0x1, 0x0) write(r5, &(0x7f0000000640)='Y\n', 0x2) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049\x00']) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file1\x00', 0x42, 0x1ff) close(r6) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file1\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./mnt/file2\x00', 0x0) 10.244927966s ago: executing program 9 (id=56): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca0401f00001010203010902270001010080fa0904000003ffffff00070501020002000705810200020007058602000200"], 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="01b3") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="3001") nanosleep(&(0x7f0000000300)={0x1}, 0x0) 9.891525068s ago: executing program 1 (id=57): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='10\n\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='10\n\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./nfsd/versions\x00', 0x2, 0x0) write(r2, &(0x7f0000000580)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./rpc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./rpc\x00', &(0x7f0000000740)='rpc_pipefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='1\n\x00', 0x2) (async) nanosleep(&(0x7f0000000900)={0x1}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./rpc/nfsd4_cld/cld\x00', 0x0, 0x0) read(r5, &(0x7f0000000800)=""/1024, 0x400) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./export\x00', &(0x7f0000000640)='tmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r7, &(0x7f00000003c0)='mydomain ./export 2147483647 8192 0 0 0\n\x00', 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480)='nfs4\x00', 0x0, &(0x7f00000004c0)='nolock,addr=127.0.0.1\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file\x00', 0x42, 0x1ff) 8.631162334s ago: executing program 0 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000d00)='1', 0x1) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x22222222222', 0x2a) close(r0) write(0xffffffffffffffff, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444\x00', 0x2f) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x6c) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='101:0:1\x00', 0x7) close(r2) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r3, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery\x00', 0xa1) nanosleep(&(0x7f0000000b00)={0x2}, 0x0) close(r3) 7.299617542s ago: executing program 0 (id=67): syz_usb_connect(0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000408c0d030100010000000109026e0002010080320904000000010100000924010001280001010c24020101010002030000000a240602010101020200092403030103000200090401000001020000090401010101020000072401010101000b2402010202100180bb0009050109c00001000007250101000000"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000300)={{0x1, 0x3}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000300)={{0x2, 0x3}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000300)={{0x3, 0x3}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000300)={{0x4, 0x3}}) 6.631201467s ago: executing program 1 (id=71): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mycgroup2\x00', 0x1ff) mount$cgroup2(0x0, &(0x7f0000000080)='./mycgroup2\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mycgroup2/cgroup.subtree_control\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='+memory\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mycgroup2/syz1\x00', 0x1ff) rmdir(&(0x7f00000001c0)='./mycgroup2/syz1\x00') nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) 5.823731174s ago: executing program 8 (id=75): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl(r0, 0x80047437, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x40) write$ppp(r1, &(0x7f0000000200)="150329", 0x3) ioctl(r1, 0x4010744d, &(0x7f0000000180)="00020000007f00000300000000000000") bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x3, 0x1}, 0x14) sendto$packet(0xffffffffffffffff, &(0x7f0000000400)="000000000000000000000000886411000001000980fd02010007150329", 0x1d, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000500)="000000000000000000000000886411000001000600fd00000000", 0x1a, 0x0, 0x0, 0x0) 5.767377756s ago: executing program 1 (id=76): r0 = syz_usb_connect(0x2, 0xab, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015160500011516050009040101010e02000007058105000401"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0x20, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000200)={0x1, @pix={0x280, 0x1e0, 0x56595559, 0x1}}) 5.637866198s ago: executing program 8 (id=77): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x42, 0x1ff) fallocate(r1, 0x0, 0x0, 0x1000000) r2 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x1ff) r4 = syz_open_dev$loop(&(0x7f0000000280), 0x1, 0x2) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") write(r0, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a3120313238203000", 0x36) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e01000038010000010000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") 5.10512209s ago: executing program 8 (id=78): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r0, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.', 0x97) 5.017358983s ago: executing program 0 (id=79): syz_usb_connect$cdc_ecm(0x5, 0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003fefefe401111222200010102030109022c0001010080320904000002fefefe000705810200020006300004000007050202000200063000040000"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000200)) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000400)={0x2, 0x1, [{0x2, 0x1}]}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000400)={0x2, 0x1, [{0x2, 0x1}]}) 5.012545275s ago: executing program 4 (id=80): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x400, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x1000000, 0x0, 0x80c9}, 0x20000040) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0x0}, 0x2, 0x8}}, 0x20) write(r1, &(0x7f0000000080)="1400000090000000000000001000000002004e20ac1414aa00"/128, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {0x0, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000310)={0x0}, 0x2, 0x8}}, 0x20) write(r1, &(0x7f00000001c0)="1400000090000000010000001000000002004e20ac1414aa00"/128, 0x90) nanosleep(&(0x7f0000000400)={0x0, 0x10000000}, 0x0) write(r1, &(0x7f0000000300)="040000001000000001000000e8030000", 0x10) nanosleep(&(0x7f0000000400)={0x0, 0x10000000}, 0x0) write(r1, &(0x7f0000000340)="06000000200100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000", 0x120) nanosleep(&(0x7f0000000400)={0x0, 0x10000000}, 0x0) 4.804498512s ago: executing program 9 (id=81): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfs_share\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfs_share\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./rpc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./rpc\x00', &(0x7f0000000740)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='nfsd 127.0.0.1 2147483647 mydomain\n', 0x23) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='mydomain ./nfs_share 2147483647 8192 0 0 0\n', 0x2b) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='-2 -3 +4\n', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/nfsv4gracetime\x00', 0x1, 0x0) write(r3, &(0x7f0000000640)='10\n', 0x3) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) write(r4, &(0x7f00000006c0)='10\n', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./rpc/nfsd/cld\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r7, &(0x7f0000000340)='1\n', 0x2) (async) close(r7) read(r6, &(0x7f0000000800)=""/1024, 0x400) close(r6) nanosleep(&(0x7f0000000380)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={[{'addr=127.0.0.1,port=2049'}]}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/file1\x00', 0x42, 0x1ff) close(r8) linkat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/file2\x00', 0x0) 4.625254525s ago: executing program 8 (id=82): unshare(0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/x25/route\x00', 0x0, 0x0) 4.162901154s ago: executing program 8 (id=83): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='-2 -3 -4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='1\n\x00', 0x2) 3.362163187s ago: executing program 1 (id=84): r0 = syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c43000101020301010902190001010080fa0904000001ffffff0007058402000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000110)={0x84, &(0x7f0000000210)={0xc0, 0x2, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000310), 0x0, 0x2) 2.971478266s ago: executing program 9 (id=85): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff040140861246200001000000010902200001010080fa0904000002ff0401000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) (async) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) (async) 2.803129516s ago: executing program 4 (id=86): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='127.0.0.1', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f0000000200), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\x00', 0x1) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='512\x00', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0) write(r5, &(0x7f0000000440)='255\x00', 0x3) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0) write(r6, &(0x7f00000004c0)='1\x00', 0x1) close(r6) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./backing_file\x00', 0x42, 0x1ff) fallocate(r8, 0x0, 0x0, 0x100000) ioctl$LOOP_SET_FD(r7, 0x4c00, r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0) write(r9, &(0x7f00000005c0)='3\x00', 0x1) (async) close(r9) 2.696954537s ago: executing program 8 (id=87): r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d0492080001000000010902220001010080320904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000003000)={0x84, &(0x7f0000003100)={0x0, 0x0, 0x1, '0'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000004000)={0x84, &(0x7f0000004100)={0x0, 0x0, 0x1, '1'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000300)={0x4, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000400)=0x1) 2.678129729s ago: executing program 0 (id=88): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444\x00', 0x2f) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x63) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='101:0:1\x00', 0x7) close(r3) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r4, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery\x00', 0xa1) (async) 2.637095455s ago: executing program 4 (id=89): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/module/nvme_core/parameters/admin_timeout\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444\x00', 0x2f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x6c) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='101:0:1\x00', 0x7) close(r3) write(0xffffffffffffffff, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery\x00', 0xa1) nanosleep(&(0x7f0000000b00)={0x2}, 0x0) 2.388906141s ago: executing program 0 (id=90): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080fa0904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000700)={0x1}, 0x0) 1.681180673s ago: executing program 4 (id=91): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000100)="1500000065ffff0020000008003950323030302e4c140000006901008000000000010000000000000043000000090200000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000160000006f0300010080000000000200000000000000a0000000190400ff3f00000000000080000000000200000000000000ff4100000000000000000000020000000000000000000000000000001000000000000000100000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000006f0500010080000000000100000000000000070000004d06000b0000000707005f000000", 0x14a) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r0, @ANYBLOB=',version=9p2000.L\x00']) unlinkat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/dir\x00', 0x200) 1.580917646s ago: executing program 4 (id=92): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r0, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.', 0x97) 1.426175088s ago: executing program 4 (id=93): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='disk\n', 0x5) 330.157244ms ago: executing program 9 (id=94): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/dummy_hcd/parameters/is_super_speed\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/16, 0x10) 219.519788ms ago: executing program 9 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000000)='10000', 0x5, 0x0) pwrite64(r0, &(0x7f0000000000)='0', 0x1, 0x0) nanosleep(&(0x7f0000000000)={0x1}, 0x0) 196.797195ms ago: executing program 1 (id=96): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./merge\x00', 0x1ff) mount$overlay(0x0, &(0x7f00000000c0)='./merge\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './lower'}}, {@upperdir={'upperdir', 0x3d, './upper'}}, {@workdir={'workdir', 0x3d, './work'}}, {@index_on}, {@nfs_export_on}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./merge/file\x00', 0x41, 0x1ff) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000001c0)='./merge/file\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="8000"/136], &(0x7f0000000300), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./merge\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000200)=ANY=[], 0x0) 0s ago: executing program 1 (id=97): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b113420000000102030109024a00010100c0fa0904000008ff0000000705810200020007058202000200070583020002000705840340000107050102000200070502020002000705030200020007050402000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x3, 0xc, "0c0000000100020500000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x5}, 0x0) kernel console output (not intermixed with test programs): [ 52.577321][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 52.577338][ T29] audit: type=1400 audit(1785854230.932:119): avc: denied { write } for pid=5517 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.624556][ T29] audit: type=1400 audit(1785854230.982:120): avc: denied { write } for pid=5528 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.168194][ T29] audit: type=1400 audit(1785854231.522:121): avc: denied { write } for pid=5531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.212245][ T29] audit: type=1400 audit(1785854231.572:122): avc: denied { write } for pid=5542 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.382717][ T29] audit: type=1400 audit(1785854231.742:123): avc: denied { write } for pid=5545 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.440864][ T29] audit: type=1400 audit(1785854231.802:124): avc: denied { write } for pid=5556 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.750507][ T29] audit: type=1400 audit(1785854232.112:125): avc: denied { write } for pid=5559 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.796103][ T29] audit: type=1400 audit(1785854232.152:126): avc: denied { write } for pid=5570 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.106831][ T29] audit: type=1400 audit(1785854232.462:127): avc: denied { write } for pid=5573 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.151758][ T29] audit: type=1400 audit(1785854232.512:128): avc: denied { write } for pid=5584 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.173' (ED25519) to the list of known hosts. [ 59.720580][ T29] audit: type=1400 audit(1785854238.082:129): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 59.744234][ T29] audit: type=1400 audit(1785854238.102:130): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.746754][ T5596] cgroup: Unknown subsys name 'net' [ 59.773079][ T29] audit: type=1400 audit(1785854238.132:131): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.912678][ T5596] cgroup: Unknown subsys name 'cpuset' [ 59.920441][ T5596] cgroup: Unknown subsys name 'rlimit' [ 60.001826][ T29] audit: type=1400 audit(1785854238.362:132): avc: denied { setattr } for pid=5596 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.035127][ T29] audit: type=1400 audit(1785854238.362:133): avc: denied { create } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.056321][ T29] audit: type=1400 audit(1785854238.362:134): avc: denied { write } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.076991][ T29] audit: type=1400 audit(1785854238.362:135): avc: denied { read } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.108874][ T29] audit: type=1400 audit(1785854238.372:136): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 60.124724][ T5598] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 60.134108][ T29] audit: type=1400 audit(1785854238.372:137): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 60.166049][ T29] audit: type=1400 audit(1785854238.502:138): avc: denied { relabelto } for pid=5598 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 61.110365][ T5596] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.164760][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.177665][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.188898][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.200520][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.206393][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.211869][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.222609][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.223733][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.231414][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.240018][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.245833][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.257289][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.259472][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.267789][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.273367][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.282407][ T5632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.287973][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.294183][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.302178][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.308755][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.316727][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.324534][ T4929] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.329900][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.337893][ T4929] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.353753][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.629416][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.636648][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.643854][ T5610] bridge_slave_0: entered allmulticast mode [ 64.650641][ T5610] bridge_slave_0: entered promiscuous mode [ 64.658106][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.665240][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.672847][ T5608] bridge_slave_0: entered allmulticast mode [ 64.679511][ T5608] bridge_slave_0: entered promiscuous mode [ 64.686730][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.693895][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.701110][ T5611] bridge_slave_0: entered allmulticast mode [ 64.707779][ T5611] bridge_slave_0: entered promiscuous mode [ 64.737231][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.744376][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.751523][ T5610] bridge_slave_1: entered allmulticast mode [ 64.758174][ T5610] bridge_slave_1: entered promiscuous mode [ 64.764970][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.772109][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.779205][ T5608] bridge_slave_1: entered allmulticast mode [ 64.786062][ T5608] bridge_slave_1: entered promiscuous mode [ 64.792771][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.799987][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.807089][ T5611] bridge_slave_1: entered allmulticast mode [ 64.813937][ T5611] bridge_slave_1: entered promiscuous mode [ 64.892282][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.903213][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.914550][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.938717][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.949051][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.966033][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.982464][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.989935][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.997138][ T5612] bridge_slave_0: entered allmulticast mode [ 65.004757][ T5612] bridge_slave_0: entered promiscuous mode [ 65.031081][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.038200][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.045400][ T5609] bridge_slave_0: entered allmulticast mode [ 65.052195][ T5609] bridge_slave_0: entered promiscuous mode [ 65.059244][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.066383][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.073793][ T5612] bridge_slave_1: entered allmulticast mode [ 65.080851][ T5612] bridge_slave_1: entered promiscuous mode [ 65.095760][ T5608] team0: Port device team_slave_0 added [ 65.108156][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.115445][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.122628][ T5609] bridge_slave_1: entered allmulticast mode [ 65.129383][ T5609] bridge_slave_1: entered promiscuous mode [ 65.144815][ T5610] team0: Port device team_slave_0 added [ 65.152095][ T5608] team0: Port device team_slave_1 added [ 65.158968][ T5611] team0: Port device team_slave_0 added [ 65.178194][ T5610] team0: Port device team_slave_1 added [ 65.197468][ T5611] team0: Port device team_slave_1 added [ 65.212070][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.228304][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.235460][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.261425][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.280883][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.292189][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.314548][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.321622][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.347704][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.366480][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.382904][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.390053][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.416187][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.426837][ T5623] Bluetooth: hci0: command tx timeout [ 65.427057][ T5628] Bluetooth: hci1: command tx timeout [ 65.432739][ T5623] Bluetooth: hci3: command tx timeout [ 65.438314][ T5625] Bluetooth: hci4: command tx timeout [ 65.445104][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.449579][ T50] Bluetooth: hci2: command tx timeout [ 65.455950][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.487385][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.511234][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.518196][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.544373][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.563501][ T5612] team0: Port device team_slave_0 added [ 65.575680][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.582955][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.609076][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.627288][ T5612] team0: Port device team_slave_1 added [ 65.658221][ T5609] team0: Port device team_slave_0 added [ 65.678046][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.685271][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.711168][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.725733][ T5608] hsr_slave_0: entered promiscuous mode [ 65.732339][ T5608] hsr_slave_1: entered promiscuous mode [ 65.740666][ T5609] team0: Port device team_slave_1 added [ 65.757289][ T5610] hsr_slave_0: entered promiscuous mode [ 65.763405][ T5610] hsr_slave_1: entered promiscuous mode [ 65.769241][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 65.775330][ T5610] Cannot create hsr debugfs directory [ 65.781469][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.788454][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.814558][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.874573][ T5611] hsr_slave_0: entered promiscuous mode [ 65.880663][ T5611] hsr_slave_1: entered promiscuous mode [ 65.886588][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 65.892553][ T5611] Cannot create hsr debugfs directory [ 65.910437][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.917400][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.943475][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.956121][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.963088][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.982052][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.990650][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.996353][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.049523][ T5612] hsr_slave_0: entered promiscuous mode [ 66.055650][ T5612] hsr_slave_1: entered promiscuous mode [ 66.062238][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 66.067963][ T5612] Cannot create hsr debugfs directory [ 66.165915][ T5609] hsr_slave_0: entered promiscuous mode [ 66.172342][ T5609] hsr_slave_1: entered promiscuous mode [ 66.178238][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 66.184088][ T5609] Cannot create hsr debugfs directory [ 66.441195][ T5608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.452787][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.460758][ T5608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.471125][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.478762][ T5608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.487728][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.495649][ T5608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.505077][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.578138][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.587358][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.596783][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.606228][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.617010][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.626158][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.644006][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.653095][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.719231][ T5612] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.727803][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.736436][ T5612] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.745141][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.753241][ T5612] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.762143][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.774566][ T5612] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.783997][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.814940][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.880610][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.887482][ T5611] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.896988][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.906924][ T5611] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.916804][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.924627][ T5611] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.933640][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.941932][ T5611] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.952454][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.981898][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.989038][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.012743][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.019857][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.089319][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.101625][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.109389][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.118997][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.127190][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.136982][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.145110][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.153670][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.179520][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.224843][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.249606][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.273559][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.288768][ T579] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.295977][ T579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.326164][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.333283][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.343057][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.350130][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.377741][ T579] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.384898][ T579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.444333][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.500143][ T5625] Bluetooth: hci4: command tx timeout [ 67.508141][ T5628] Bluetooth: hci1: command tx timeout [ 67.511673][ T5625] Bluetooth: hci3: command tx timeout [ 67.513645][ T5615] Bluetooth: hci0: command tx timeout [ 67.514213][ T50] Bluetooth: hci2: command tx timeout [ 67.522714][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.578427][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.585599][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.615738][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.645425][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.652584][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.763904][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.807231][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.814801][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.863693][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.870871][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.899151][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.067652][ T5608] veth0_vlan: entered promiscuous mode [ 68.118399][ T5608] veth1_vlan: entered promiscuous mode [ 68.203979][ T5608] veth0_macvtap: entered promiscuous mode [ 68.237626][ T5608] veth1_macvtap: entered promiscuous mode [ 68.313366][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.356372][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.386632][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.414252][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.593393][ T5610] veth0_vlan: entered promiscuous mode [ 68.651973][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.673496][ T5610] veth1_vlan: entered promiscuous mode [ 68.683247][ T5612] veth0_vlan: entered promiscuous mode [ 68.732107][ T1073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.743035][ T5612] veth1_vlan: entered promiscuous mode [ 68.745681][ T1073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.823503][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.835790][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.848129][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.867968][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 68.867990][ T29] audit: type=1400 audit(1785854247.222:152): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.0oFgV4/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.877276][ T5610] veth0_macvtap: entered promiscuous mode [ 68.927831][ T5612] veth0_macvtap: entered promiscuous mode [ 68.935038][ T29] audit: type=1400 audit(1785854247.262:153): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.961183][ T5612] veth1_macvtap: entered promiscuous mode [ 68.973312][ T1073] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.986511][ T29] audit: type=1400 audit(1785854247.262:154): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.0oFgV4/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.988998][ T5608] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.014711][ T5610] veth1_macvtap: entered promiscuous mode [ 69.033256][ T29] audit: type=1400 audit(1785854247.262:155): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.054959][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.092888][ T29] audit: type=1400 audit(1785854247.272:156): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.0oFgV4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.115194][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.124619][ T29] audit: type=1400 audit(1785854247.272:157): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.0oFgV4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 69.163709][ T5609] veth0_vlan: entered promiscuous mode [ 69.170272][ T1073] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.174589][ T29] audit: type=1400 audit(1785854247.272:158): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.200039][ T1125] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.212330][ T29] audit: type=1400 audit(1785854247.282:159): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 69.231821][ T5611] veth0_vlan: entered promiscuous mode [ 69.238785][ T29] audit: type=1400 audit(1785854247.282:160): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="gadgetfs" ino=7617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 69.280992][ T29] audit: type=1400 audit(1785854247.282:161): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 69.299914][ T1118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.322464][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.340457][ T5609] veth1_vlan: entered promiscuous mode [ 69.357520][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.398320][ T5611] veth1_vlan: entered promiscuous mode [ 69.489564][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.490459][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.500051][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.561129][ T5609] veth0_macvtap: entered promiscuous mode [ 69.581218][ T50] Bluetooth: hci3: command tx timeout [ 69.582281][ T5625] Bluetooth: hci2: command tx timeout [ 69.586652][ T50] Bluetooth: hci1: command tx timeout [ 69.598919][ T50] Bluetooth: hci4: command tx timeout [ 69.628075][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.635536][ T5609] veth1_macvtap: entered promiscuous mode [ 69.637116][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.670207][ T5611] veth0_macvtap: entered promiscuous mode [ 69.694778][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.716747][ T5611] veth1_macvtap: entered promiscuous mode [ 69.751140][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.764466][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.779778][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.787652][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.801787][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.827897][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.893337][ T1073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.913031][ T1073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.919286][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.947370][ T5809] nvme_fabrics: unknown parameter or missing value 'n' in ctrl creation request [ 69.996837][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.055875][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.070672][ T1073] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.093396][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.112215][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.121175][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.123923][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.131543][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.146915][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.171274][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.248253][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.369249][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.390407][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.410008][ T1073] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.420562][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.499976][ T1073] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.516778][ T5616] snd_hda_intel 0000:00:00.0: Unknown PCI class/subclass/prog-if information (0x060000) found, selecting HDAudio legacy driver [ 70.674590][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.682341][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.692042][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.706573][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.707444][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.798497][ T35] bridge_slave_1: left allmulticast mode [ 70.815974][ T35] bridge_slave_1: left promiscuous mode [ 70.830674][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.849532][ T35] bridge_slave_0: left allmulticast mode [ 70.867849][ T35] bridge_slave_0: left promiscuous mode [ 70.877483][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.094048][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.124360][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.136403][ T35] bond0 (unregistering): Released all slaves [ 71.185584][ T1073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.222089][ T1073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.290411][ T5811] NFSD: Unable to initialize client recovery tracking! (-110) [ 71.307951][ T5811] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 71.320120][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.342097][ T5811] NFSD: starting 10-second grace period (net f0000555) [ 71.399895][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 71.628694][ T5865] nvme_fabrics: unknown parameter or missing value 'n' in ctrl creation request [ 71.628917][ T35] hsr_slave_0: left promiscuous mode [ 71.648224][ T35] hsr_slave_1: left promiscuous mode [ 71.656944][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.661439][ T50] Bluetooth: hci4: command tx timeout [ 71.665420][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.669863][ T5628] Bluetooth: hci2: command tx timeout [ 71.676851][ T5625] Bluetooth: hci1: command tx timeout [ 71.683072][ T50] Bluetooth: hci3: command tx timeout [ 71.695555][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.717703][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.752813][ T35] veth1_macvtap: left promiscuous mode [ 71.758756][ T35] veth0_macvtap: left promiscuous mode [ 71.764541][ T35] veth1_vlan: left promiscuous mode [ 71.769889][ T35] veth0_vlan: left promiscuous mode [ 71.938007][ T35] team0 (unregistering): Port device team_slave_1 removed [ 71.950314][ T35] team0 (unregistering): Port device team_slave_0 removed [ 72.101094][ T1118] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.130874][ T1118] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.222609][ T50] Bluetooth: hci0: command tx timeout [ 72.389256][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.397531][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.409103][ T5812] bridge_slave_0: entered allmulticast mode [ 72.417197][ T5812] bridge_slave_0: entered promiscuous mode [ 72.428924][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.437042][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.444658][ T5812] bridge_slave_1: entered allmulticast mode [ 72.453406][ T5812] bridge_slave_1: entered promiscuous mode [ 72.495035][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.504700][ T5845] NFSD: Unable to initialize client recovery tracking! (-110) [ 72.508331][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 72.519473][ T5845] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 72.531565][ T5845] NFSD: starting 90-second grace period (net f0000401) [ 72.532046][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.597604][ T5812] team0: Port device team_slave_0 added [ 72.605354][ T5812] team0: Port device team_slave_1 added [ 72.662847][ T5866] svc: failed to register nfsdv3 RPC service (errno 512). [ 72.684538][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.696141][ T5866] svc: failed to register nfsaclv3 RPC service (errno 512). [ 72.709740][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.723234][ T5866] failed to unregister tcp with rpcbind [ 72.743499][ T5866] svc: failed to register nfsdv3 RPC service (errno 97). [ 72.754499][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.767353][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.768939][ T5866] svc: failed to register nfsaclv3 RPC service (errno 97). [ 72.775070][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.809834][ T5866] failed to unregister tcp with rpcbind [ 72.827873][ T5903] PM: hibernation: hibernation entry [ 72.838976][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.868483][ T5872] NFSD: Failed to start, no listeners configured. [ 72.934292][ T1118] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.947776][ T1118] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.966581][ T5812] hsr_slave_0: entered promiscuous mode [ 72.973119][ T5812] hsr_slave_1: entered promiscuous mode [ 73.029869][ T1118] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.038688][ T1118] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.079963][ T1073] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.326027][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 73.386785][ T5919] lo speed is unknown, defaulting to 1000 [ 73.397231][ T5812] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 73.405851][ T5812] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.414008][ T5812] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 73.423767][ T5812] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.431565][ T5812] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 73.440820][ T5812] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.449125][ T5919] lo speed is unknown, defaulting to 1000 [ 73.461755][ T5812] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 73.471736][ T5812] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.481550][ T5919] lo speed is unknown, defaulting to 1000 [ 73.491226][ T5919] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 73.508102][ T5919] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 73.530918][ T5919] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 73.554175][ T5919] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 73.625394][ T5919] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 73.653292][ T5903] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 73.667983][ T5903] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 73.719292][ T5903] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 73.722778][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.748099][ T5919] lo speed is unknown, defaulting to 1000 [ 73.748160][ T5903] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 73.767915][ T5903] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 73.775996][ T5919] lo speed is unknown, defaulting to 1000 [ 73.783466][ T5903] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 73.788235][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.803585][ T5903] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 73.812824][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.819975][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.821171][ T5903] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 73.842281][ T5919] lo speed is unknown, defaulting to 1000 [ 73.854997][ T5919] lo speed is unknown, defaulting to 1000 [ 73.866290][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.873483][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.893851][ T5919] lo speed is unknown, defaulting to 1000 [ 73.905815][ T5903] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 73.942602][ T5903] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 73.981329][ T5903] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 74.009107][ T5903] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 74.057817][ T5903] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 74.073972][ T5948] nvme_fabrics: unknown parameter or missing value 'n' in ctrl creation request [ 74.079833][ T5903] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 74.109478][ T5903] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 74.173943][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 74.173960][ T29] audit: type=1400 audit(1785854252.532:196): avc: denied { write } for pid=5934 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.310929][ T5955] rdma_rxe: rxe_newlink: failed to add lo [ 74.366921][ T29] audit: type=1400 audit(1785854252.722:197): avc: denied { write } for pid=5958 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.477758][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4 [ 74.605847][ T579] Filesystems sync: 0.451 seconds [ 74.632259][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.799246][ T5812] veth0_vlan: entered promiscuous mode [ 74.810795][ T5812] veth1_vlan: entered promiscuous mode [ 74.835765][ T5812] veth0_macvtap: entered promiscuous mode [ 74.844794][ T5812] veth1_macvtap: entered promiscuous mode [ 74.858131][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.877651][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.935630][ T579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.953952][ T579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.975812][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.984100][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.991645][ T1125] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.991681][ T1125] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.991710][ T1125] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.991739][ T1125] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.077118][ T29] audit: type=1400 audit(1785854253.432:198): avc: denied { node_bind } for pid=5978 comm="syz.5.8" src=445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 75.136124][ T5979] CIFS: Attempting to mount //127.0.0.1/share [ 75.154759][ T5983] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 75.170621][ T5979] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 75.189261][ T5979] CIFS: VFS: cifs_mount failed w/return code = -11 [ 75.255859][ T5988] misc userio: No port type given on /dev/userio [ 75.271884][ T5988] misc userio: Invalid payload size [ 75.284089][ T5988] misc userio: The device must be registered before sending interrupts [ 75.293092][ T5988] misc userio: Invalid payload size [ 75.300855][ T5988] misc userio: Invalid payload size [ 75.306344][ T5988] misc userio: Invalid payload size [ 75.313016][ T5988] misc userio: Invalid payload size [ 75.318546][ T5988] misc userio: Invalid payload size [ 75.318771][ T5990] NFSD: Failed to start, no listeners configured. [ 75.325806][ T5988] misc userio: Invalid payload size [ 75.344728][ T5988] misc userio: Invalid payload size [ 75.351230][ T5988] misc userio: Invalid payload size [ 75.356723][ T5988] misc userio: Invalid payload size [ 75.362784][ T5988] misc userio: Invalid payload size [ 75.368168][ T5988] misc userio: Invalid payload size [ 75.374768][ T5988] misc userio: Invalid payload size [ 75.381148][ T5988] misc userio: Invalid payload size [ 75.386528][ T5988] misc userio: Invalid payload size [ 75.393300][ T5988] misc userio: Invalid payload size [ 75.399187][ T5988] misc userio: Invalid payload size [ 75.405395][ T5988] misc userio: Invalid payload size [ 75.411393][ T5988] misc userio: Invalid payload size [ 75.474797][ T5992] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input5 [ 75.794418][ T579] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.820878][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 75.873921][ T579] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.929351][ T579] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.981085][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 76.021723][ T579] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.038270][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.047642][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.055815][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.063459][ T5625] Bluetooth: hci0: command 0x040f tx timeout [ 76.074153][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.086898][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.283043][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.292179][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.304247][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.313602][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.322188][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.349935][ T6001] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 76.475124][ T579] bridge_slave_1: left allmulticast mode [ 76.501277][ T579] bridge_slave_1: left promiscuous mode [ 76.522151][ T579] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.547128][ T579] bridge_slave_0: left allmulticast mode [ 166.171919][ C1] CPU: 1 UID: 0 PID: 7194 Comm: syz.4.93 Not tainted syzkaller #0 PREEMPT(full) [ 166.171943][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 166.171954][ C1] Call Trace: [ 166.171961][ C1] [ 166.171968][ C1] dump_stack_lvl+0x100/0x190 [ 166.171994][ C1] __might_resched.cold+0x1ec/0x232 [ 166.172020][ C1] ? __pfx___might_resched+0x10/0x10 [ 166.172043][ C1] ? kfree_const+0x5f/0x70 [ 166.172065][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 166.172096][ C1] cancel_delayed_work_sync+0xb8/0xf0 [ 166.172123][ C1] mmc_free_host+0x19/0x30 [ 166.172142][ C1] vub300_inactivity_timer_expired+0x42f/0x550 [ 166.172172][ C1] call_timer_fn+0x19a/0x610 [ 166.172194][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 166.172219][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 166.172247][ C1] ? mark_held_locks+0x40/0x70 [ 166.172274][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 166.172303][ C1] __run_timers+0x757/0xb00 [ 166.172333][ C1] ? __pfx___run_timers+0x10/0x10 [ 166.172364][ C1] ? ktime_get+0x9f/0x320 [ 166.172386][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 166.172411][ C1] run_timer_base+0x114/0x190 [ 166.172432][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 166.172458][ C1] run_timer_softirq+0x1a/0x50 [ 166.172480][ C1] handle_softirqs+0x1ea/0x9b0 [ 166.172509][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 166.172534][ C1] ? _raw_spin_unlock+0x28/0x50 [ 166.172553][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 166.172575][ C1] __irq_exit_rcu+0x162/0x210 [ 166.172599][ C1] irq_exit_rcu+0x9/0x30 [ 166.172622][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 166.172645][ C1] [ 166.172652][ C1] [ 166.172659][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 166.172680][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 166.172702][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 d0 27 f6 48 89 df e8 7e 20 28 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 2e 17 f6 65 8b 05 4e 57 a6 08 85 c0 74 16 5b [ 166.172720][ C1] RSP: 0018:ffffc9000500fb10 EFLAGS: 00000246 [ 166.172741][ C1] RAX: 0000000000000006 RBX: ffff88823fff8740 RCX: 0000000000000040 [ 166.172753][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a8186 RDI: ffffffff8c402680 [ 166.172765][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 166.172776][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000140001 [ 166.172788][ C1] R13: 00000000000a8d20 R14: ffffffff81e6a290 R15: 0000000000000005 [ 166.172801][ C1] ? __pfx_state_store+0x10/0x10 [ 166.172835][ C1] count_data_pages+0x7d/0xf0 [ 166.172864][ C1] hibernate_preallocate_memory+0x104/0x507 [ 166.172888][ C1] ? __pfx_state_store+0x10/0x10 [ 166.172910][ C1] hibernation_snapshot+0x1e6/0x9c0 [ 166.172938][ C1] ? __pfx_state_store+0x10/0x10 [ 166.172959][ C1] hibernate.cold+0x17c/0x6a2 [ 166.172978][ C1] ? __pfx_state_store+0x10/0x10 [ 166.173000][ C1] state_store+0x1ff/0x240 [ 166.173024][ C1] ? __pfx_state_store+0x10/0x10 [ 166.173045][ C1] kobj_attr_store+0x58/0x80 [ 166.173072][ C1] ? __pfx_kobj_attr_store+0x10/0x10 [ 166.173099][ C1] sysfs_kf_write+0xf2/0x150 [ 166.173127][ C1] kernfs_fop_write_iter+0x3e0/0x5f0 [ 166.173152][ C1] ? __pfx_sysfs_kf_write+0x10/0x10 [ 166.173183][ C1] vfs_write+0x6ac/0x1050 [ 166.173212][ C1] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 166.173240][ C1] ? __pfx_vfs_write+0x10/0x10 [ 166.173284][ C1] ksys_write+0x12a/0x250 [ 166.173301][ C1] ? __pfx_ksys_write+0x10/0x10 [ 166.173326][ C1] do_syscall_64+0x115/0x870 [ 166.173348][ C1] ? clear_bhb_loop+0x40/0x90 [ 166.173372][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.173392][ C1] RIP: 0033:0x7faa6b59e019 [ 166.173408][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.173425][ C1] RSP: 002b:00007faa6c4cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 166.173443][ C1] RAX: ffffffffffffffda RBX: 00007faa6b825fa0 RCX: 00007faa6b59e019 [ 166.173456][ C1] RDX: 0000000000000005 RSI: 0000200000000100 RDI: 0000000000000003 [ 166.173466][ C1] RBP: 00007faa6b63500c R08: 0000000000000000 R09: 0000000000000000 [ 166.173478][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.173490][ C1] R13: 00007faa6b826038 R14: 00007faa6b825fa0 R15: 00007ffe29482fa8 [ 166.173515][ C1] [ 166.173948][ C1] [ 166.482904][ C1] ================================ [ 166.487986][ C1] WARNING: inconsistent lock state [ 166.493068][ C1] syzkaller #0 Tainted: G W [ 166.499020][ C1] -------------------------------- [ 166.504098][ C1] inconsistent {SOFTIRQ-ON-R} -> {IN-SOFTIRQ-W} usage. [ 166.510918][ C1] syz.4.93/7194 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 166.517061][ C1] ffffffff8fc0ed18 (wakeup_srcu){.+-+}-{0:0}, at: __synchronize_srcu+0x1c/0x300 [ 166.526094][ C1] {SOFTIRQ-ON-R} state was registered at: [ 166.531786][ C1] lock_acquire+0x1b9/0x370 [ 166.536360][ C1] device_wakeup_arm_wake_irqs+0x53/0x130 [ 166.542149][ C1] dpm_suspend_end+0xe5/0x210 [ 166.546904][ C1] hibernation_snapshot+0x28b/0x9c0 [ 166.552174][ C1] hibernate.cold+0x17c/0x6a2 [ 166.556919][ C1] state_store+0x1ff/0x240 [ 166.561402][ C1] kobj_attr_store+0x58/0x80 [ 166.566061][ C1] sysfs_kf_write+0xf2/0x150 [ 166.570723][ C1] kernfs_fop_write_iter+0x3e0/0x5f0 [ 166.576075][ C1] vfs_write+0x6ac/0x1050 [ 166.580476][ C1] ksys_write+0x12a/0x250 [ 166.584868][ C1] do_syscall_64+0x115/0x870 [ 166.589527][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.595500][ C1] irq event stamp: 90148 [ 166.599714][ C1] hardirqs last enabled at (90148): [] _raw_spin_unlock_irqrestore+0x52/0x80 [ 166.610104][ C1] hardirqs last disabled at (90147): [] _raw_spin_lock_irqsave+0x52/0x60 [ 166.620060][ C1] softirqs last enabled at (89630): [] __irq_exit_rcu+0x162/0x210 [ 166.629497][ C1] softirqs last disabled at (89637): [] __irq_exit_rcu+0x162/0x210 [ 166.638943][ C1] [ 166.638943][ C1] other info that might help us debug this: [ 166.646983][ C1] Possible unsafe locking scenario: [ 166.646983][ C1] [ 166.654441][ C1] CPU0 [ 166.657706][ C1] ---- [ 166.660970][ C1] lock(wakeup_srcu); [ 166.665020][ C1] [ 166.668456][ C1] lock(wakeup_srcu); [ 166.672677][ C1] [ 166.672677][ C1] *** DEADLOCK *** [ 166.672677][ C1] [ 166.680793][ C1] 8 locks held by syz.4.93/7194: [ 166.685706][ C1] #0: ffff88807ade1430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 166.694741][ C1] #1: ffff888069482450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 166.703681][ C1] #2: ffff888055791080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 166.713405][ C1] #3: ffff88801f2c81e8 (kn->active#61){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 166.723393][ C1] #4: ffffffff8ea9fc80 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x56/0x70 [ 166.733721][ C1] #5: ffffffff8fbf46e0 (device_hotplug_lock){+.+.}-{4:4}, at: hibernate.cold+0x126/0x6a2 [ 166.743624][ C1] #6: ffffffff8f8c6bc0 (acpi_scan_lock){+.+.}-{4:4}, at: acpi_hibernation_begin+0xf6/0x1c0 [ 166.753697][ C1] #7: ffffc90000a08ca0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11f/0x610 [ 166.764199][ C1] [ 166.764199][ C1] stack backtrace: [ 166.770071][ C1] CPU: 1 UID: 0 PID: 7194 Comm: syz.4.93 Tainted: G W syzkaller #0 PREEMPT(full) [ 166.770092][ C1] Tainted: [W]=WARN [ 166.770097][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 166.770106][ C1] Call Trace: [ 166.770112][ C1] [ 166.770118][ C1] dump_stack_lvl+0x100/0x190 [ 166.770136][ C1] print_usage_bug.part.0+0x257/0x340 [ 166.770155][ C1] mark_lock+0x6b5/0xa20 [ 166.770171][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 166.770188][ C1] __lock_acquire+0xff3/0x1a40 [ 166.770205][ C1] ? check_prev_add+0x354/0xe60 [ 166.770226][ C1] ? __synchronize_srcu+0x1c/0x300 [ 166.770245][ C1] lock_sync+0x9d/0x110 [ 166.770262][ C1] ? __synchronize_srcu+0x1c/0x300 [ 166.770282][ C1] __synchronize_srcu+0xa2/0x300 [ 166.770300][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 166.770321][ C1] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 166.770338][ C1] ? synchronize_srcu+0xa8/0x380 [ 166.770357][ C1] wakeup_source_unregister.part.0+0x12c/0x540 [ 166.770377][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 166.770401][ C1] wakeup_source_unregister+0x1f/0x30 [ 166.770420][ C1] mmc_host_classdev_release+0x42/0x120 [ 166.770442][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 166.770465][ C1] device_release+0xd2/0x270 [ 166.770479][ C1] kobject_put+0x1f7/0x640 [ 166.770500][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 166.770524][ C1] put_device+0x1f/0x30 [ 166.770537][ C1] vub300_inactivity_timer_expired+0x42f/0x550 [ 166.770559][ C1] call_timer_fn+0x19a/0x610 [ 166.770574][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 166.770590][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 166.770613][ C1] ? mark_held_locks+0x40/0x70 [ 166.770630][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 166.770652][ C1] __run_timers+0x757/0xb00 [ 166.770671][ C1] ? __pfx___run_timers+0x10/0x10 [ 166.770689][ C1] ? ktime_get+0x9f/0x320 [ 166.770705][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 166.770722][ C1] run_timer_base+0x114/0x190 [ 166.770738][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 166.770756][ C1] run_timer_softirq+0x1a/0x50 [ 166.770772][ C1] handle_softirqs+0x1ea/0x9b0 [ 166.770791][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 166.770809][ C1] ? _raw_spin_unlock+0x28/0x50 [ 166.770823][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 166.770838][ C1] __irq_exit_rcu+0x162/0x210 [ 166.770855][ C1] irq_exit_rcu+0x9/0x30 [ 166.770873][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 166.770890][ C1] [ 166.770894][ C1] [ 166.770899][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 166.770916][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 166.770933][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 d0 27 f6 48 89 df e8 7e 20 28 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 2e 17 f6 65 8b 05 4e 57 a6 08 85 c0 74 16 5b [ 166.770947][ C1] RSP: 0018:ffffc9000500fb10 EFLAGS: 00000246 [ 166.770959][ C1] RAX: 0000000000000006 RBX: ffff88823fff8740 RCX: 0000000000000040 [ 166.770968][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a8186 RDI: ffffffff8c402680 [ 166.770978][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 166.770986][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000140001 [ 166.770995][ C1] R13: 00000000000a8d20 R14: ffffffff81e6a290 R15: 0000000000000005 [ 166.771004][ C1] ? __pfx_state_store+0x10/0x10 [ 166.771025][ C1] count_data_pages+0x7d/0xf0 [ 166.771047][ C1] hibernate_preallocate_memory+0x104/0x507 [ 166.771063][ C1] ? __pfx_state_store+0x10/0x10 [ 166.771078][ C1] hibernation_snapshot+0x1e6/0x9c0 [ 166.771099][ C1] ? __pfx_state_store+0x10/0x10 [ 166.771115][ C1] hibernate.cold+0x17c/0x6a2 [ 166.771128][ C1] ? __pfx_state_store+0x10/0x10 [ 166.771143][ C1] state_store+0x1ff/0x240 [ 166.771159][ C1] ? __pfx_state_store+0x10/0x10 [ 166.771174][ C1] kobj_attr_store+0x58/0x80 [ 166.771194][ C1] ? __pfx_kobj_attr_store+0x10/0x10 [ 166.771214][ C1] sysfs_kf_write+0xf2/0x150 [ 166.771239][ C1] kernfs_fop_write_iter+0x3e0/0x5f0 [ 166.771257][ C1] ? __pfx_sysfs_kf_write+0x10/0x10 [ 166.771278][ C1] vfs_write+0x6ac/0x1050 [ 166.771300][ C1] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 166.771319][ C1] ? __pfx_vfs_write+0x10/0x10 [ 166.771345][ C1] ksys_write+0x12a/0x250 [ 166.771357][ C1] ? __pfx_ksys_write+0x10/0x10 [ 166.771371][ C1] do_syscall_64+0x115/0x870 [ 166.771389][ C1] ? clear_bhb_loop+0x40/0x90 [ 166.771405][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.771419][ C1] RIP: 0033:0x7faa6b59e019 [ 166.771431][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.771445][ C1] RSP: 002b:00007faa6c4cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 166.771458][ C1] RAX: ffffffffffffffda RBX: 00007faa6b825fa0 RCX: 00007faa6b59e019 [ 166.771467][ C1] RDX: 0000000000000005 RSI: 0000200000000100 RDI: 0000000000000003 [ 166.771476][ C1] RBP: 00007faa6b63500c R08: 0000000000000000 R09: 0000000000000000 [ 166.771485][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.771494][ C1] R13: 00007faa6b826038 R14: 00007faa6b825fa0 R15: 00007ffe29482fa8 [ 166.771507][ C1] [ 166.776016][ T5628] Bluetooth: hci7: command 0x0c1a tx timeout [ 166.782225][ C1] ODEBUG: object ffffc90000a08a70 is NOT on stack ffffc90005008000, but annotated. [ 166.786017][ T5628] Bluetooth: hci6: command 0x0c1a tx timeout [ 166.796447][ C1] ------------[ cut here ]------------ [ 166.799341][ T5628] Bluetooth: hci2: command 0x0c1a tx timeout [ 166.802130][ C1] 1 [ 166.802138][ C1] WARNING: lib/debugobjects.c:672 at lookup_object_or_alloc.part.0.cold+0x19/0x40, CPU#1: syz.4.93/7194 [ 166.806785][ T5628] Bluetooth: hci0: command 0x0c1a tx timeout [ 166.812113][ C1] Modules linked in: [ 166.812131][ C1] CPU: 1 UID: 0 PID: 7194 Comm: syz.4.93 Tainted: G W syzkaller #0 PREEMPT(full) [ 167.354866][ C1] Tainted: [W]=WARN [ 167.358647][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 167.368696][ C1] RIP: 0010:lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 167.375720][ C1] Code: c4 60 5b 5d 41 5c 41 5d 41 5e 41 5f e9 49 18 88 0a 83 c5 01 89 2d 20 43 57 1a 4c 89 e6 48 c7 c7 c0 31 40 8c e8 f1 ef eb ff 90 <0f> 0b 90 e9 d2 03 f1 03 83 c5 01 89 2d ff 42 57 1a 49 39 c4 73 da [ 167.395310][ C1] RSP: 0018:ffffc90000a08900 EFLAGS: 00010086 [ 167.401362][ C1] RAX: 0000000000000050 RBX: ffff888076281508 RCX: 0000000000000000 [ 167.409313][ C1] RDX: 0000000000000050 RSI: ffffffff81e8afd9 RDI: fffff52000141111 [ 167.417274][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 167.425225][ C1] R10: 0000000000000102 R11: 205d314320202020 R12: ffffc90000a08a70 [ 167.433190][ C1] R13: ffff888033bc0000 R14: 0000000000000001 R15: 0000000000000000 [ 167.441157][ C1] FS: 00007faa6c4cf6c0(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 167.450072][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 167.456651][ C1] CR2: 0000200000000000 CR3: 00000000618ef000 CR4: 00000000003526f0 [ 167.464605][ C1] Call Trace: [ 167.467866][ C1] [ 167.470706][ C1] __debug_object_init+0x2a9/0x3d0 [ 167.475810][ C1] ? __pfx___debug_object_init+0x10/0x10 [ 167.481430][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 167.486789][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 167.492148][ C1] ? __init_swait_queue_head+0xca/0x150 [ 167.497683][ C1] __synchronize_srcu+0x1c3/0x300 [ 167.502692][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 167.508227][ C1] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 167.513757][ C1] ? synchronize_srcu+0xa8/0x380 [ 167.518681][ C1] wakeup_source_unregister.part.0+0x12c/0x540 [ 167.524821][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 167.530963][ C1] wakeup_source_unregister+0x1f/0x30 [ 167.536319][ C1] mmc_host_classdev_release+0x42/0x120 [ 167.541852][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 167.547995][ C1] device_release+0xd2/0x270 [ 167.552567][ C1] kobject_put+0x1f7/0x640 [ 167.556972][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 167.563635][ C1] put_device+0x1f/0x30 [ 167.567769][ C1] vub300_inactivity_timer_expired+0x42f/0x550 [ 167.573914][ C1] call_timer_fn+0x19a/0x610 [ 167.578487][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 167.583579][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 167.590242][ C1] ? mark_held_locks+0x40/0x70 [ 167.594991][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 167.601655][ C1] __run_timers+0x757/0xb00 [ 167.606143][ C1] ? __pfx___run_timers+0x10/0x10 [ 167.611153][ C1] ? ktime_get+0x9f/0x320 [ 167.615467][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 167.620474][ C1] run_timer_base+0x114/0x190 [ 167.625133][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 167.630312][ C1] run_timer_softirq+0x1a/0x50 [ 167.635060][ C1] handle_softirqs+0x1ea/0x9b0 [ 167.639810][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 167.645080][ C1] ? _raw_spin_unlock+0x28/0x50 [ 167.649908][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 167.655519][ C1] __irq_exit_rcu+0x162/0x210 [ 167.660180][ C1] irq_exit_rcu+0x9/0x30 [ 167.664408][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 167.670024][ C1] [ 167.672934][ C1] [ 167.675846][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 167.681820][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 167.688229][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 d0 27 f6 48 89 df e8 7e 20 28 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 2e 17 f6 65 8b 05 4e 57 a6 08 85 c0 74 16 5b [ 167.707817][ C1] RSP: 0018:ffffc9000500fb10 EFLAGS: 00000246 [ 167.713865][ C1] RAX: 0000000000000006 RBX: ffff88823fff8740 RCX: 0000000000000040 [ 167.721826][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a8186 RDI: ffffffff8c402680 [ 167.729776][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 167.737733][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000140001 [ 167.745692][ C1] R13: 00000000000a8d20 R14: ffffffff81e6a290 R15: 0000000000000005 [ 167.753667][ C1] ? __pfx_state_store+0x10/0x10 [ 167.758617][ C1] count_data_pages+0x7d/0xf0 [ 167.763283][ C1] hibernate_preallocate_memory+0x104/0x507 [ 167.769159][ C1] ? __pfx_state_store+0x10/0x10 [ 167.774083][ C1] hibernation_snapshot+0x1e6/0x9c0 [ 167.779269][ C1] ? __pfx_state_store+0x10/0x10 [ 167.784201][ C1] hibernate.cold+0x17c/0x6a2 [ 167.788860][ C1] ? __pfx_state_store+0x10/0x10 [ 167.793779][ C1] state_store+0x1ff/0x240 [ 167.798203][ C1] ? __pfx_state_store+0x10/0x10 [ 167.803122][ C1] kobj_attr_store+0x58/0x80 [ 167.807715][ C1] ? __pfx_kobj_attr_store+0x10/0x10 [ 167.812986][ C1] sysfs_kf_write+0xf2/0x150 [ 167.817565][ C1] kernfs_fop_write_iter+0x3e0/0x5f0 [ 167.822833][ C1] ? __pfx_sysfs_kf_write+0x10/0x10 [ 167.828017][ C1] vfs_write+0x6ac/0x1050 [ 167.832333][ C1] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 167.838123][ C1] ? __pfx_vfs_write+0x10/0x10 [ 167.842970][ C1] ksys_write+0x12a/0x250 [ 167.847290][ C1] ? __pfx_ksys_write+0x10/0x10 [ 167.852134][ C1] do_syscall_64+0x115/0x870 [ 167.856710][ C1] ? clear_bhb_loop+0x40/0x90 [ 167.861370][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.867246][ C1] RIP: 0033:0x7faa6b59e019 [ 167.871641][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.891245][ C1] RSP: 002b:00007faa6c4cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 167.899643][ C1] RAX: ffffffffffffffda RBX: 00007faa6b825fa0 RCX: 00007faa6b59e019 [ 167.907594][ C1] RDX: 0000000000000005 RSI: 0000200000000100 RDI: 0000000000000003 [ 167.915545][ C1] RBP: 00007faa6b63500c R08: 0000000000000000 R09: 0000000000000000 [ 167.923496][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.931456][ C1] R13: 00007faa6b826038 R14: 00007faa6b825fa0 R15: 00007ffe29482fa8 [ 167.939411][ C1] [ 167.942412][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 167.949672][ C1] CPU: 1 UID: 0 PID: 7194 Comm: syz.4.93 Tainted: G W syzkaller #0 PREEMPT(full) [ 167.960327][ C1] Tainted: [W]=WARN [ 167.964105][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 167.974138][ C1] Call Trace: [ 167.977396][ C1] [ 167.980221][ C1] dump_stack_lvl+0x100/0x190 [ 167.984882][ C1] vpanic+0x552/0x970 [ 167.988846][ C1] ? __pfx_vpanic+0x10/0x10 [ 167.993330][ C1] ? lock_release+0x24d/0x310 [ 167.997994][ C1] panic+0xd1/0xe0 [ 168.001693][ C1] ? __pfx_panic+0x10/0x10 [ 168.006090][ C1] ? check_panic_on_warn+0x1f/0x90 [ 168.011184][ C1] check_panic_on_warn.cold+0x19/0x34 [ 168.016542][ C1] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 168.022943][ C1] __warn.cold+0x191/0x318 [ 168.027342][ C1] __report_bug+0x30f/0x440 [ 168.031830][ C1] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 168.038228][ C1] ? __pfx___report_bug+0x10/0x10 [ 168.043233][ C1] ? rcu_is_watching+0x12/0xc0 [ 168.047984][ C1] ? vprintk_emit+0x516/0x6b0 [ 168.052647][ C1] ? lock_release+0x24d/0x310 [ 168.057308][ C1] ? __wake_up_klogd+0xe2/0x140 [ 168.062144][ C1] ? vprintk_emit+0x1c9/0x6b0 [ 168.066807][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 168.071817][ C1] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 168.078217][ C1] report_bug+0xb2/0x220 [ 168.082445][ C1] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 168.088844][ C1] handle_bug+0x16a/0x2a0 [ 168.093160][ C1] exc_invalid_op+0x17/0x50 [ 168.097652][ C1] asm_exc_invalid_op+0x1a/0x20 [ 168.102485][ C1] RIP: 0010:lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 168.109492][ C1] Code: c4 60 5b 5d 41 5c 41 5d 41 5e 41 5f e9 49 18 88 0a 83 c5 01 89 2d 20 43 57 1a 4c 89 e6 48 c7 c7 c0 31 40 8c e8 f1 ef eb ff 90 <0f> 0b 90 e9 d2 03 f1 03 83 c5 01 89 2d ff 42 57 1a 49 39 c4 73 da [ 168.129081][ C1] RSP: 0018:ffffc90000a08900 EFLAGS: 00010086 [ 168.135130][ C1] RAX: 0000000000000050 RBX: ffff888076281508 RCX: 0000000000000000 [ 168.143088][ C1] RDX: 0000000000000050 RSI: ffffffff81e8afd9 RDI: fffff52000141111 [ 168.151043][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 168.159005][ C1] R10: 0000000000000102 R11: 205d314320202020 R12: ffffc90000a08a70 [ 168.166959][ C1] R13: ffff888033bc0000 R14: 0000000000000001 R15: 0000000000000000 [ 168.174926][ C1] ? vprintk_emit+0x1c9/0x6b0 [ 168.179609][ C1] __debug_object_init+0x2a9/0x3d0 [ 168.184707][ C1] ? __pfx___debug_object_init+0x10/0x10 [ 168.190337][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 168.195693][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 168.201051][ C1] ? __init_swait_queue_head+0xca/0x150 [ 168.206583][ C1] __synchronize_srcu+0x1c3/0x300 [ 168.211604][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 168.217138][ C1] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 168.222667][ C1] ? synchronize_srcu+0xa8/0x380 [ 168.227590][ C1] wakeup_source_unregister.part.0+0x12c/0x540 [ 168.233727][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 168.239869][ C1] wakeup_source_unregister+0x1f/0x30 [ 168.245227][ C1] mmc_host_classdev_release+0x42/0x120 [ 168.250768][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 168.256909][ C1] device_release+0xd2/0x270 [ 168.261483][ C1] kobject_put+0x1f7/0x640 [ 168.265901][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 168.272564][ C1] put_device+0x1f/0x30 [ 168.276700][ C1] vub300_inactivity_timer_expired+0x42f/0x550 [ 168.282840][ C1] call_timer_fn+0x19a/0x610 [ 168.287412][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 168.292512][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 168.299183][ C1] ? mark_held_locks+0x40/0x70 [ 168.303938][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 168.310605][ C1] __run_timers+0x757/0xb00 [ 168.315092][ C1] ? __pfx___run_timers+0x10/0x10 [ 168.320099][ C1] ? ktime_get+0x9f/0x320 [ 168.324412][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 168.329447][ C1] run_timer_base+0x114/0x190 [ 168.334132][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 168.339320][ C1] run_timer_softirq+0x1a/0x50 [ 168.344153][ C1] handle_softirqs+0x1ea/0x9b0 [ 168.348905][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 168.354182][ C1] ? _raw_spin_unlock+0x28/0x50 [ 168.359015][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 168.364631][ C1] __irq_exit_rcu+0x162/0x210 [ 168.369295][ C1] irq_exit_rcu+0x9/0x30 [ 168.373528][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 168.379160][ C1] [ 168.382073][ C1] [ 168.384986][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 168.390952][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 168.397351][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 d0 27 f6 48 89 df e8 7e 20 28 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 2e 17 f6 65 8b 05 4e 57 a6 08 85 c0 74 16 5b [ 168.416943][ C1] RSP: 0018:ffffc9000500fb10 EFLAGS: 00000246 [ 168.423007][ C1] RAX: 0000000000000006 RBX: ffff88823fff8740 RCX: 0000000000000040 [ 168.430975][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a8186 RDI: ffffffff8c402680 [ 168.438926][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 168.446877][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000140001 [ 168.454830][ C1] R13: 00000000000a8d20 R14: ffffffff81e6a290 R15: 0000000000000005 [ 168.462784][ C1] ? __pfx_state_store+0x10/0x10 [ 168.467709][ C1] count_data_pages+0x7d/0xf0 [ 168.472378][ C1] hibernate_preallocate_memory+0x104/0x507 [ 168.478268][ C1] ? __pfx_state_store+0x10/0x10 [ 168.483188][ C1] hibernation_snapshot+0x1e6/0x9c0 [ 168.488377][ C1] ? __pfx_state_store+0x10/0x10 [ 168.493300][ C1] hibernate.cold+0x17c/0x6a2 [ 168.497978][ C1] ? __pfx_state_store+0x10/0x10 [ 168.502899][ C1] state_store+0x1ff/0x240 [ 168.507302][ C1] ? __pfx_state_store+0x10/0x10 [ 168.512224][ C1] kobj_attr_store+0x58/0x80 [ 168.516806][ C1] ? __pfx_kobj_attr_store+0x10/0x10 [ 168.522078][ C1] sysfs_kf_write+0xf2/0x150 [ 168.526658][ C1] kernfs_fop_write_iter+0x3e0/0x5f0 [ 168.531927][ C1] ? __pfx_sysfs_kf_write+0x10/0x10 [ 168.537114][ C1] vfs_write+0x6ac/0x1050 [ 168.541434][ C1] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 168.547252][ C1] ? __pfx_vfs_write+0x10/0x10 [ 168.552011][ C1] ksys_write+0x12a/0x250 [ 168.556322][ C1] ? __pfx_ksys_write+0x10/0x10 [ 168.561153][ C1] do_syscall_64+0x115/0x870 [ 168.565728][ C1] ? clear_bhb_loop+0x40/0x90 [ 168.570389][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.576262][ C1] RIP: 0033:0x7faa6b59e019 [ 168.580658][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.600251][ C1] RSP: 002b:00007faa6c4cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 168.608645][ C1] RAX: ffffffffffffffda RBX: 00007faa6b825fa0 RCX: 00007faa6b59e019 [ 168.616598][ C1] RDX: 0000000000000005 RSI: 0000200000000100 RDI: 0000000000000003 [ 168.624564][ C1] RBP: 00007faa6b63500c R08: 0000000000000000 R09: 0000000000000000 [ 168.632516][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.640473][ C1] R13: 00007faa6b826038 R14: 00007faa6b825fa0 R15: 00007ffe29482fa8 [ 168.648430][ C1] [ 168.651619][ C1] Kernel Offset: disabled [ 168.655927][ C1] Rebooting in 86400 seconds..