last executing test programs: 4.427356136s ago: executing program 3 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000300)='\nBTO', 0x4, 0x40) pwrite64(r0, &(0x7f0000000310)="000000a0", 0x4, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='0000:00:02.0\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='dwc2-pci\x00', 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/dwc2-pci/bind\x00', 0x2, 0x0) write(r3, &(0x7f0000000900)='0000:00:02.0\x00', 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000001300)='\nBTO', 0x4, 0x40) pwrite64(r4, &(0x7f0000001310)="000000a0", 0x4, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x2, 0x0) write(r5, &(0x7f0000001500)='0000:00:03.0\x00', 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x2, 0x0) write(r6, &(0x7f0000001700)='dwc2-pci\x00', 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./sys/bus/pci/drivers/dwc2-pci/bind\x00', 0x2, 0x0) write(r7, &(0x7f0000001900)='0000:00:03.0\x00', 0xc) 4.218118127s ago: executing program 3 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='proc\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000000)='10000\x00', 0x5, 0x0) pwrite64(r0, &(0x7f0000000000)='0\x00', 0x1, 0x0) nanosleep(&(0x7f0000000000)={0x1}, 0x0) 3.912736015s ago: executing program 4 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0) write(r3, &(0x7f0000001900)='Y\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000900)='127.0.0.1 / 2147483647 74754 0 0 0\n', 0x23) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000b00)='127.0.0.1 1 \\x00000000 2147483647 /\n', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0) write(r7, &(0x7f0000000f00)='2\n', 0x2) nanosleep(&(0x7f0000001c00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x1ff) write(r8, &(0x7f0000001500)='test\x00', 0x4) 3.621172436s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='mem', 0x3) 3.512022283s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='e:mygroup/myevent sched.sched_switch\n\x00', 0x25) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/events/mygroup/myevent/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1\n\x00', 0x2) write(r1, &(0x7f00000001c0)='0\n\x00', 0x2) 3.233481486s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1a4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1/device_path\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='./file0\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1\x00', 0x2) write(r2, &(0x7f0000000200)='0\x00', 0x2) 3.099090712s ago: executing program 0 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x42, 0x1ff) pwrite64(r1, &(0x7f0000000000)='\x00', 0x1, 0xffffff) r2 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x1ff) pwrite64(r3, &(0x7f0000000000)='\x00', 0x1, 0xffffff) r4 = syz_open_dev$loop(&(0x7f0000000280), 0x1, 0x2) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") pwrite64(r1, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a3120313238203000", 0x36, 0x1000000) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e01000038010000010000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") 2.900789452s ago: executing program 1 (id=9): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='zstd\x00', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x15) 2.779369601s ago: executing program 1 (id=10): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40e80489680001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_ep_read(r0, 0x2, 0xc, &(0x7f0000000100)=""/12) syz_usb_ep_write(r0, 0x81, 0x18, &(0x7f0000000200)='\x00'/24) syz_usb_ep_read(r0, 0x2, 0xc, &(0x7f0000000300)=""/12) syz_usb_ep_write(r0, 0x81, 0x1c, &(0x7f0000000400)='\x00'/28) nanosleep(&(0x7f0000000500)={0x0, 0x10000000}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'\x00', 0x1}) syz_usb_ep_write(r0, 0x81, 0x1a, &(0x7f0000000800)="5744040000000000000057440400000000000000575a00000800") 2.578257572s ago: executing program 0 (id=11): unshare(0x40000000) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000600)={'lo\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000700)={'lo\x00', {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000800)={'lo\x00', {0x2, 0x0, @broadcast=0xff000000}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000640)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='10\n\x00', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='10\n\x00', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r4, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r5, &(0x7f0000000240)='1\n\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r6, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r7, &(0x7f0000000340)='mydomain / 2147483647 9216 0 0 0\n\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) mount(&(0x7f00000003c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000400)='nfs4\x00', 0x0, &(0x7f0000000440)='nolock,addr=127.0.0.1,retry=0,timeo=1,retrans=1,soft\x00') openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/file\x00', 0x42, 0x1ff) 2.516307385s ago: executing program 3 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000000314010000000000000000000900020073797a30000000000800410072786500070033006c6f0000"], 0x2c}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/infiniband_srp\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/2048, 0x800) 1.986899831s ago: executing program 4 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='udp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='1\n\x00', 0x2) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000600)={0x2, 0x801, @loopback}, 0x10) write(r3, &(0x7f0000000700)="123456780000000000000002000186a30000000300000000000003e700"/40, 0x28) write(r2, &(0x7f0000000a00)='0\n\x00', 0x2) 948.933259ms ago: executing program 3 (id=14): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x51) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0485605, &(0x7f0000000100)={0x1, 0x0, {0x280, 0x1e0, 0x3014}}) r1 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x51) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000001000)={0x1, @pix={0x280, 0x1e0, 0x42474752}}) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000001100)={0x1, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000001200)=0x1) r2 = syz_open_dev$video(&(0x7f0000000080), 0x1, 0x51) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000002000)={0x1, @pix={0x280, 0x1e0, 0x42474752}}) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000002100)={0x1, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000002200)=0x1) r3 = syz_open_dev$video(&(0x7f00000000c0), 0x2, 0x51) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000003000)={0x1, @pix={0x280, 0x1e0, 0x42474752}}) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000003100)={0x1, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000003200)=0x1) r4 = syz_open_dev$video(&(0x7f0000000140), 0x3, 0x51) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000004000)={0x1, @pix={0x280, 0x1e0, 0x42474752}}) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000004100)={0x1, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000004200)=0x1) r5 = syz_open_dev$video(&(0x7f0000000180), 0x4, 0x51) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000005000)={0x1, @pix={0x280, 0x1e0, 0x42474752}}) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000005100)={0x1, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000005200)=0x1) r6 = syz_open_dev$video(&(0x7f00000001c0), 0x5, 0x51) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000006000)={0x1, @pix={0x280, 0x1e0, 0x42474752}}) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000006100)={0x1, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000006200)=0x1) r7 = syz_open_dev$video(&(0x7f0000000200), 0x6, 0x51) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000007000)={0x1, @pix={0x280, 0x1e0, 0x42474752}}) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000007100)={0x1, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r7, 0x40045612, &(0x7f0000007200)=0x1) r8 = syz_open_dev$video(&(0x7f0000000240), 0x7, 0x51) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000008000)={0x1, @pix={0x280, 0x1e0, 0x42474752}}) ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000008100)={0x1, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r8, 0x40045612, &(0x7f0000008200)=0x1) 635.809366ms ago: executing program 3 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/64, 0x40) 539.827672ms ago: executing program 3 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x31, 0x5, 0x17ef, 0x6048, 0x0, 0x0, "05010902a1010901a10005091901290315002501950375018102950175058103c085180900150026ff00950275089102c0"}}, 0x149) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/hid/devices/0005:17EF:6048.0001/middleclick_workaround\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/hid/devices/0005:17EF:6048.0002/middleclick_workaround\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/hid/devices/0005:17EF:6048.0003/middleclick_workaround\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='1\x00', 0x2) 422.573492ms ago: executing program 0 (id=17): r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040109720770000000000010902350001010080320904000005ffffff000705810340000107058202400000070503024000000705840240000007050502400000"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000100)={0x2}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./ttyUSB0\x00', 0x81b6, 0xbc00) openat(0xffffffffffffff9c, &(0x7f0000000200)='./ttyUSB0\x00', 0x802, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000300)='AAAAAAA') syz_usb_ep_write(r0, 0x82, 0x7, &(0x7f0000000300)='BBBBBBB') syz_usb_ep_write(r0, 0x84, 0x7, &(0x7f0000000300)='CCCCCCC') nanosleep(&(0x7f0000000100)={0x1}, 0x0) 212.649999ms ago: executing program 1 (id=18): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x2) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x1ff) fallocate(r3, 0x0, 0x0, 0x100000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x1ff) fallocate(r4, 0x0, 0x0, 0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x42, 0x1ff) fallocate(r5, 0x0, 0x0, 0x100000) ioctl$LOOP_SET_FD(r0, 0x4c00, r3) ioctl$LOOP_SET_FD(r1, 0x4c00, r4) ioctl$LOOP_SET_FD(r2, 0x4c00, r5) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./my_md_device2\x00', 0x81b6, 0x900) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./my_md_device2\x00', 0x2, 0x0) ioctl(r6, 0x80081272, &(0x7f0000000300)) 0s ago: executing program 1 (id=19): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff040140861246200001000000010902200001010080fa0904000002ff0401000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_ep_read(r0, 0x2, 0x10, &(0x7f0000000100)=""/16) kernel console output (not intermixed with test programs): [ 57.168246][ T30] audit: type=1400 audit(1785858750.391:121): avc: denied { write } for pid=5531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.219916][ T30] audit: type=1400 audit(1785858750.441:122): avc: denied { write } for pid=5542 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.218' (ED25519) to the list of known hosts. [ 64.379442][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 64.379456][ T30] audit: type=1400 audit(1785858757.601:129): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 64.409642][ T30] audit: type=1400 audit(1785858757.631:130): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.412426][ T5596] cgroup: Unknown subsys name 'net' [ 64.438583][ T30] audit: type=1400 audit(1785858757.661:131): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.596523][ T5596] cgroup: Unknown subsys name 'cpuset' [ 64.604255][ T5596] cgroup: Unknown subsys name 'rlimit' [ 64.732463][ T30] audit: type=1400 audit(1785858757.951:132): avc: denied { setattr } for pid=5596 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.756676][ T30] audit: type=1400 audit(1785858757.951:133): avc: denied { create } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.803135][ T30] audit: type=1400 audit(1785858757.951:134): avc: denied { write } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.823820][ T30] audit: type=1400 audit(1785858757.951:135): avc: denied { read } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.844177][ T30] audit: type=1400 audit(1785858757.951:136): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 64.869205][ T30] audit: type=1400 audit(1785858757.951:137): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 64.904421][ T5599] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 64.913984][ T30] audit: type=1400 audit(1785858758.131:138): avc: denied { relabelto } for pid=5599 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 65.868298][ T5596] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.838395][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.846794][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.851274][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.860505][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.862602][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.868934][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.877906][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.883038][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.891746][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.898600][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.905079][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.911483][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.926615][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.927251][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.941254][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.941850][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.950118][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.957457][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.963123][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.970494][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.984360][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.984761][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.000149][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.000324][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.016741][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.223074][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.231202][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.238731][ T5611] bridge_slave_0: entered allmulticast mode [ 69.248888][ T5611] bridge_slave_0: entered promiscuous mode [ 69.271995][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.279154][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.286336][ T5611] bridge_slave_1: entered allmulticast mode [ 69.293002][ T5611] bridge_slave_1: entered promiscuous mode [ 69.348188][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.355351][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.362458][ T5608] bridge_slave_0: entered allmulticast mode [ 69.369327][ T5608] bridge_slave_0: entered promiscuous mode [ 69.398624][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.405790][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.412896][ T5608] bridge_slave_1: entered allmulticast mode [ 69.419816][ T5608] bridge_slave_1: entered promiscuous mode [ 69.429017][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.463295][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.477144][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.484304][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.491401][ T5617] bridge_slave_0: entered allmulticast mode [ 69.498370][ T5617] bridge_slave_0: entered promiscuous mode [ 69.528412][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.535610][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.542697][ T5617] bridge_slave_1: entered allmulticast mode [ 69.549784][ T5617] bridge_slave_1: entered promiscuous mode [ 69.564132][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.600704][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.611437][ T5611] team0: Port device team_slave_0 added [ 69.617357][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.624588][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.631693][ T5610] bridge_slave_0: entered allmulticast mode [ 69.638623][ T5610] bridge_slave_0: entered promiscuous mode [ 69.651999][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.659303][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.667002][ T5609] bridge_slave_0: entered allmulticast mode [ 69.673872][ T5609] bridge_slave_0: entered promiscuous mode [ 69.687496][ T5611] team0: Port device team_slave_1 added [ 69.699409][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.706516][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.713591][ T5610] bridge_slave_1: entered allmulticast mode [ 69.720400][ T5610] bridge_slave_1: entered promiscuous mode [ 69.728593][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.737863][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.745645][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.752741][ T5609] bridge_slave_1: entered allmulticast mode [ 69.760108][ T5609] bridge_slave_1: entered promiscuous mode [ 69.787459][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.805003][ T5608] team0: Port device team_slave_0 added [ 69.811323][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.818345][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.844344][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.876752][ T5608] team0: Port device team_slave_1 added [ 69.882765][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.889751][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.916177][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.928828][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.946602][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.968858][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.979130][ T5617] team0: Port device team_slave_0 added [ 69.986481][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.002676][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.009663][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.035705][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.054398][ T5620] Bluetooth: hci0: command tx timeout [ 70.060360][ T5617] team0: Port device team_slave_1 added [ 70.060386][ T5623] Bluetooth: hci3: command tx timeout [ 70.072710][ T5620] Bluetooth: hci1: command tx timeout [ 70.072736][ T5625] Bluetooth: hci2: command tx timeout [ 70.078597][ T4929] Bluetooth: hci4: command tx timeout [ 70.101256][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.108238][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.134361][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.178061][ T5610] team0: Port device team_slave_0 added [ 70.184400][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.191404][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.217742][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.230040][ T5609] team0: Port device team_slave_0 added [ 70.239502][ T5611] hsr_slave_0: entered promiscuous mode [ 70.246151][ T5611] hsr_slave_1: entered promiscuous mode [ 70.254664][ T5610] team0: Port device team_slave_1 added [ 70.260788][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.267923][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.294648][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.307227][ T5609] team0: Port device team_slave_1 added [ 70.344401][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.351415][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.377649][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.395796][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.402736][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.428816][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.452914][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.460171][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.486312][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.501742][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.508864][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.534882][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.555527][ T5608] hsr_slave_0: entered promiscuous mode [ 70.561593][ T5608] hsr_slave_1: entered promiscuous mode [ 70.567617][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 70.573390][ T5608] Cannot create hsr debugfs directory [ 70.596981][ T5617] hsr_slave_0: entered promiscuous mode [ 70.603060][ T5617] hsr_slave_1: entered promiscuous mode [ 70.609509][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 70.615288][ T5617] Cannot create hsr debugfs directory [ 70.695991][ T5609] hsr_slave_0: entered promiscuous mode [ 70.702064][ T5609] hsr_slave_1: entered promiscuous mode [ 70.708127][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 70.714194][ T5609] Cannot create hsr debugfs directory [ 70.773150][ T5610] hsr_slave_0: entered promiscuous mode [ 70.779380][ T5610] hsr_slave_1: entered promiscuous mode [ 70.785808][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 70.791544][ T5610] Cannot create hsr debugfs directory [ 70.936428][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.943260][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.061377][ T5611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.071838][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.079503][ T5611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.088028][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.096469][ T5611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.105580][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.125364][ T5611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.134959][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.199460][ T5608] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.208882][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.217578][ T5608] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.226552][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.234349][ T5608] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.244152][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.251757][ T5608] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.263281][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.337006][ T5617] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.346456][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.354741][ T5617] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.363003][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.371617][ T5617] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.381469][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.389147][ T5617] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.397539][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.472486][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.479443][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.490863][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.507449][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.517147][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.525993][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.534969][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.542686][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.551227][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.601966][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.622298][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.629868][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.665605][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.672698][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.707613][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.717756][ T5610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.727324][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.735545][ T5610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.747803][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.765698][ T5610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.776280][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.791787][ T5610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.801955][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.819713][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.848375][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.855486][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.881524][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.888615][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.905073][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.989909][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.007640][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.014796][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.048059][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.055232][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.072890][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.136256][ T5623] Bluetooth: hci3: command tx timeout [ 72.143067][ T5620] Bluetooth: hci1: command tx timeout [ 72.143142][ T50] Bluetooth: hci2: command tx timeout [ 72.150022][ T4929] Bluetooth: hci4: command tx timeout [ 72.156739][ T5625] Bluetooth: hci0: command tx timeout [ 72.172419][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.218311][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.225482][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.262584][ T5617] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.275714][ T5617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.305073][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.312301][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.328636][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.412555][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.458140][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.465348][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.508654][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.549966][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.557122][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.726570][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.777307][ T5611] veth0_vlan: entered promiscuous mode [ 72.815948][ T5611] veth1_vlan: entered promiscuous mode [ 72.919911][ T5611] veth0_macvtap: entered promiscuous mode [ 72.956031][ T5611] veth1_macvtap: entered promiscuous mode [ 73.028539][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.061026][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.155628][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.200342][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.238388][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.269031][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.354543][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.438958][ T5608] veth0_vlan: entered promiscuous mode [ 73.450742][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.459029][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.470548][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.486773][ T5617] veth0_vlan: entered promiscuous mode [ 73.497277][ T5608] veth1_vlan: entered promiscuous mode [ 73.506853][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.525674][ T5617] veth1_vlan: entered promiscuous mode [ 73.555294][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.560595][ T5609] veth0_vlan: entered promiscuous mode [ 73.569401][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.593986][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 73.594001][ T30] audit: type=1400 audit(1785858766.811:152): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/root/syzkaller.g2iFs5/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 73.598903][ T5608] veth0_macvtap: entered promiscuous mode [ 73.606938][ T30] audit: type=1400 audit(1785858766.821:153): avc: denied { mount } for pid=5611 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.648314][ T5608] veth1_macvtap: entered promiscuous mode [ 73.653096][ T30] audit: type=1400 audit(1785858766.831:154): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/root/syzkaller.g2iFs5/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.683668][ T5609] veth1_vlan: entered promiscuous mode [ 73.697318][ T30] audit: type=1400 audit(1785858766.851:155): avc: denied { mount } for pid=5611 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 73.720007][ T30] audit: type=1400 audit(1785858766.851:156): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/root/syzkaller.g2iFs5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 73.751324][ T30] audit: type=1400 audit(1785858766.851:157): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/root/syzkaller.g2iFs5/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 73.760386][ T5610] veth0_vlan: entered promiscuous mode [ 73.781373][ T30] audit: type=1400 audit(1785858766.851:158): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 73.804834][ T30] audit: type=1400 audit(1785858766.911:159): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 73.833023][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.847654][ T30] audit: type=1400 audit(1785858766.921:160): avc: denied { mount } for pid=5611 comm="syz-executor" name="/" dev="gadgetfs" ino=6890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 73.851387][ T5609] veth0_macvtap: entered promiscuous mode [ 73.871002][ T30] audit: type=1400 audit(1785858766.951:161): avc: denied { mount } for pid=5611 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 73.884124][ T5609] veth1_macvtap: entered promiscuous mode [ 73.908193][ T5611] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.916204][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.933049][ T5617] veth0_macvtap: entered promiscuous mode [ 73.946819][ T5617] veth1_macvtap: entered promiscuous mode [ 73.970943][ T5610] veth1_vlan: entered promiscuous mode [ 74.027751][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.041761][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.055515][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.071747][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.080359][ T5801] lo: entered allmulticast mode [ 74.088824][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.097097][ T5800] lo: left allmulticast mode [ 74.104242][ T1167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.184885][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.214597][ T5625] Bluetooth: hci4: command tx timeout [ 74.220350][ T50] Bluetooth: hci3: command tx timeout [ 74.220384][ T5623] Bluetooth: hci0: command tx timeout [ 74.225792][ T50] Bluetooth: hci2: command tx timeout [ 74.237024][ T4929] Bluetooth: hci1: command tx timeout [ 74.257571][ T5610] veth0_macvtap: entered promiscuous mode [ 74.275450][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.285394][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.296770][ T63] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.338598][ T5610] veth1_macvtap: entered promiscuous mode [ 74.437703][ T195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.459793][ T195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.480297][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.504429][ T195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.531171][ T195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.573565][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.603624][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.619492][ T195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.636262][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.665098][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.713351][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.728865][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.762218][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.799967][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.809738][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.894363][ T195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.917917][ T195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.953180][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.988217][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.054643][ T5817] PM: suspend entry (deep) [ 75.115110][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.127744][ T195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.154585][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.162118][ T195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.406445][ T3379] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.434042][ T3379] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.465648][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.473106][ T5823] nvmet: adding nsid 1 to subsystem subsys1 [ 75.506764][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.532274][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.585687][ T5825] loop0: detected capacity change from 0 to 32768 [ 75.609334][ T5825] loop1: detected capacity change from 0 to 32768 [ 76.066495][ T5726] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.119454][ T5837] lo speed is unknown, defaulting to 1000 [ 76.137004][ T5837] lo speed is unknown, defaulting to 1000 [ 76.151452][ T5837] lo speed is unknown, defaulting to 1000 [ 76.154159][ T5814] NFSD: Unable to initialize client recovery tracking! (-110) [ 76.166719][ T5814] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 76.178128][ T5814] NFSD: starting 90-second grace period (net f0000445) [ 76.250594][ T5726] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 76.260500][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.268853][ T5726] usb 2-1: Product: syz [ 76.274745][ T5726] usb 2-1: Manufacturer: syz [ 76.279403][ T5726] usb 2-1: SerialNumber: syz [ 76.294547][ T5623] Bluetooth: hci0: command tx timeout [ 76.299996][ T4929] Bluetooth: hci1: command tx timeout [ 76.305414][ T4929] Bluetooth: hci4: command tx timeout [ 76.307702][ T5620] Bluetooth: hci2: command tx timeout [ 76.310810][ T4929] Bluetooth: hci3: command tx timeout [ 76.358347][ T24] lo speed is unknown, defaulting to 1000 [ 76.364368][ T5837] infiniband syz0: set active [ 76.364420][ T5837] infiniband syz0: added lo [ 76.381723][ T5837] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 76.400435][ T5837] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 76.418128][ T5837] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 76.453285][ T5837] RDS/IB: syz0: added [ 76.465232][ T5837] smc: adding ib device syz0 with port count 1 [ 76.472862][ T5837] smc: ib device syz0 port 1 has no pnetid [ 76.481780][ T5723] lo speed is unknown, defaulting to 1000 [ 76.488429][ T5837] lo speed is unknown, defaulting to 1000 [ 76.684206][ T5837] lo speed is unknown, defaulting to 1000 [ 76.812573][ T5837] lo speed is unknown, defaulting to 1000 [ 76.989858][ T5837] lo speed is unknown, defaulting to 1000 [ 77.128755][ T5726] kalmia 2-1:1.0 wwan0: register 'kalmia' at usb-dummy_hcd.1-1, Samsung Kalmia LTE USB dongle, 3e:5d:f8:62:d8:db [ 77.130978][ T5837] lo speed is unknown, defaulting to 1000 [ 77.343487][ T5837] lo speed is unknown, defaulting to 1000 [ 77.671154][ T5726] usb 2-1: USB disconnect, device number 2 [ 77.696443][ T5866] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 77.703954][ T5846] NFSD: Unable to initialize client recovery tracking! (-110) [ 77.717847][ T5726] kalmia 2-1:1.0 wwan0: unregister 'kalmia' usb-dummy_hcd.1-1, Samsung Kalmia LTE USB dongle [ 77.722537][ T5866] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 77.740346][ T5846] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 77.765396][ T5846] NFSD: starting 10-second grace period (net f0000497) [ 77.819119][ T5866] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 78.149648][ T5704] input: syz0 as /devices/virtual/misc/uhid/0005:17EF:6048.0001/input/input5 [ 78.210141][ T5704] lenovo 0005:17EF:6048.0001: input,hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 78.474474][ T29] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.478164][ T5896] loop2: detected capacity change from 0 to 2048 [ 78.640575][ T29] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 78.661664][ T29] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 78.671866][ T29] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 78.683642][ T29] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 78.694427][ T29] usb 1-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 78.703496][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.716492][ T5886] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 78.731982][ T5886] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 78.739943][ T5886] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 78.747489][ T5886] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 78.759752][ T29] mos7720 1-1:1.0: Moschip 2 port adapter converter detected [ 78.869308][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 78.869324][ T30] audit: type=1400 audit(1785858772.091:250): avc: denied { write } for pid=5902 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.936460][ T30] audit: type=1400 audit(1785858772.161:251): avc: denied { write } for pid=5913 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.454200][ T5889] NFSD: Unable to initialize client recovery tracking! (-110) [ 79.461834][ T5889] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 79.470852][ T5889] NFSD: starting 90-second grace period (net f0000445) [ 83.825326][ T29] usb 1-1: mos7720: usb_control_msg() failed: -110 [ 83.847414][ T29] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 83.867892][ T29] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 86.306821][ T187] cfg80211: failed to load regulatory.db [ 132.379294][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.386104][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.366879][ T4978] udevd[4978]: worker [5632] /devices/virtual/misc/uhid/0005:17EF:6048.0001/hidraw/hidraw0 is taking a long time [ 190.773901][ T5622] Bluetooth: hci3: command 0x0406 tx timeout [ 190.774604][ T5621] Bluetooth: hci2: command 0x0406 tx timeout [ 190.782452][ T5620] Bluetooth: hci0: command 0x0406 tx timeout [ 190.788236][ T5613] Bluetooth: hci4: command 0x0406 tx timeout [ 190.792672][ T5622] Bluetooth: hci1: command 0x0406 tx timeout [ 193.821329][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.827736][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 227.743829][ T31] INFO: task kworker/u8:9:1167 blocked in I/O wait for more than 143 seconds. [ 227.752838][ T31] Not tainted syzkaller #0 [ 227.757829][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 227.766559][ T31] task:kworker/u8:9 state:D stack:25128 pid:1167 tgid:1167 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 227.779273][ T31] Workqueue: pm_fs_sync pm_fs_sync_work_fn [ 227.785244][ T31] Call Trace: [ 227.788528][ T31] [ 227.791461][ T31] __schedule+0x125c/0x6730 [ 227.796021][ T31] ? __pfx___schedule+0x10/0x10 [ 227.801248][ T31] ? find_held_lock+0x2b/0x80 [ 227.806031][ T31] ? schedule+0x225/0x2c0 [ 227.810376][ T31] schedule+0xdd/0x2c0 [ 227.814503][ T31] io_schedule+0x8a/0xf0 [ 227.818751][ T31] folio_wait_bit_common+0x414/0xa70 [ 227.824122][ T31] ? folio_wait_bit_common+0x2a0/0xa70 [ 227.829607][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 227.835487][ T31] ? filemap_get_folios_tag+0x430/0xbb0 [ 227.841037][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 227.846967][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 227.852565][ T31] ? rcu_is_watching+0x12/0xc0 [ 227.857393][ T31] folio_wait_writeback+0x92/0x130 [ 227.862501][ T31] __filemap_fdatawait_range+0x145/0x230 [ 227.868236][ T31] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 227.875129][ T31] ? do_raw_spin_lock+0x128/0x260 [ 227.880194][ T31] ? find_held_lock+0x2b/0x80 [ 227.884914][ T31] ? find_held_lock+0x2b/0x80 [ 227.889584][ T31] ? sync_inodes_sb+0x6a0/0xc80 [ 227.894560][ T31] ? sync_inodes_sb+0x6a0/0xc80 [ 227.899450][ T31] filemap_fdatawait_keep_errors+0x21/0x30 [ 227.905327][ T31] sync_inodes_sb+0x6ba/0xc80 [ 227.910006][ T31] ? sync_inodes_sb+0x6a0/0xc80 [ 227.914888][ T31] ? __pfx_sync_inodes_sb+0x10/0x10 [ 227.920085][ T31] ? super_lock+0x150/0x3f0 [ 227.924681][ T31] ? find_held_lock+0x2b/0x80 [ 227.929384][ T31] ? __iterate_supers+0x1b6/0x330 [ 227.934535][ T31] ? __iterate_supers+0x1b6/0x330 [ 227.939580][ T31] sync_inodes_one_sb+0x57/0x70 [ 227.944815][ T31] __iterate_supers+0x210/0x330 [ 227.949866][ T31] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 227.955484][ T31] ksys_sync+0x87/0xf0 [ 227.959553][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 227.964596][ T31] ? ktime_get+0x22c/0x320 [ 227.969035][ T31] ? ktime_get+0x23e/0x320 [ 227.973457][ T31] ? ktime_get+0x1a4/0x320 [ 227.978719][ T31] pm_fs_sync_work_fn+0x17/0xe0 [ 227.983612][ T31] process_one_work+0xa23/0x1940 [ 227.988839][ T31] ? __pfx_process_one_work+0x10/0x10 [ 227.994310][ T31] ? __pfx_pm_fs_sync_work_fn+0x10/0x10 [ 228.000048][ T31] worker_thread+0x5ef/0xe50 [ 228.004693][ T31] ? kthread+0x13a/0x450 [ 228.008932][ T31] ? __pfx_worker_thread+0x10/0x10 [ 228.014083][ T31] kthread+0x370/0x450 [ 228.018166][ T31] ? __pfx_kthread+0x10/0x10 [ 228.022748][ T31] ret_from_fork+0x72b/0xd50 [ 228.027373][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 228.032489][ T31] ? __switch_to+0x800/0x10f0 [ 228.037218][ T31] ? __pfx_kthread+0x10/0x10 [ 228.041802][ T31] ret_from_fork_asm+0x1a/0x30 [ 228.046615][ T31] [ 228.049703][ T31] INFO: task syz-executor:5596 blocked in I/O wait for more than 143 seconds. [ 228.058653][ T31] Not tainted syzkaller #0 [ 228.063576][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 228.072310][ T31] task:syz-executor state:D stack:22984 pid:5596 tgid:5596 ppid:5595 task_flags:0x440100 flags:0x00080000 [ 228.084899][ T31] Call Trace: [ 228.088215][ T31] [ 228.091139][ T31] __schedule+0x125c/0x6730 [ 228.095690][ T31] ? __pfx___schedule+0x10/0x10 [ 228.100547][ T31] ? find_held_lock+0x2b/0x80 [ 228.105267][ T31] ? schedule+0x225/0x2c0 [ 228.109607][ T31] schedule+0xdd/0x2c0 [ 228.113725][ T31] io_schedule+0x8a/0xf0 [ 228.117973][ T31] bit_wait_io+0xd/0xe0 [ 228.122127][ T31] __wait_on_bit+0x65/0x180 [ 228.126740][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 228.131849][ T31] out_of_line_wait_on_bit+0xdc/0x110 [ 228.137278][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 228.143351][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 228.148888][ T31] do_get_write_access+0x836/0x11e0 [ 228.154122][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 228.160220][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 228.166344][ T31] ext4_reserve_inode_write+0x1b7/0x330 [ 228.171897][ T31] __ext4_mark_inode_dirty+0x18f/0x880 [ 228.177398][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 228.183766][ T31] ? trace_jbd2_handle_start+0x83/0x240 [ 228.189389][ T31] ? jbd2__journal_start+0xf7/0x6a0 [ 228.194691][ T31] ? __ext4_journal_start_sb+0x367/0x670 [ 228.200347][ T31] ? __ext4_journal_start_sb+0x1ce/0x670 [ 228.206215][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 228.211200][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 228.217226][ T31] ext4_dirty_inode+0xd9/0x130 [ 228.222075][ T31] ? rcu_is_watching+0x12/0xc0 [ 228.227057][ T31] __mark_inode_dirty+0x1f3/0x16e0 [ 228.232225][ T31] file_update_time_flags+0x46b/0x500 [ 228.237723][ T31] ext4_page_mkwrite+0x324/0x1850 [ 228.242872][ T31] ? tcp_recvmsg+0x14c/0x630 [ 228.247661][ T31] ? tcp_recvmsg+0x14c/0x630 [ 228.252311][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 228.257989][ T31] ? vm_normal_page+0x1d5/0x390 [ 228.262856][ T31] ? find_held_lock+0x2b/0x80 [ 228.267625][ T31] ? rcu_read_unlock+0x2d/0xb0 [ 228.272499][ T31] do_page_mkwrite+0x17a/0x440 [ 228.277369][ T31] do_wp_page+0xa77/0x4350 [ 228.281812][ T31] ? __pfx_do_wp_page+0x10/0x10 [ 228.287590][ T31] ? do_raw_spin_lock+0x128/0x260 [ 228.292673][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 228.298426][ T31] __handle_mm_fault+0x1ab6/0x2a00 [ 228.303595][ T31] ? reacquire_held_locks+0xce/0x1e0 [ 228.309261][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 228.314832][ T31] ? lock_vma_under_rcu+0x17c/0x590 [ 228.320076][ T31] handle_mm_fault+0x37b/0xa30 [ 228.324972][ T31] do_user_addr_fault+0x5a3/0x12f0 [ 228.330132][ T31] exc_page_fault+0x6f/0xd0 [ 228.334804][ T31] asm_exc_page_fault+0x26/0x30 [ 228.339724][ T31] RIP: 0033:0x7fdc1f67c627 [ 228.344212][ T31] RSP: 002b:00007ffda7cea280 EFLAGS: 00010202 [ 228.350297][ T31] RAX: 00007fdc1d668000 RBX: 0000555574efa630 RCX: 0000000000000006 [ 228.358313][ T31] RDX: 0000000000003dd7 RSI: 0000555574eee0b8 RDI: 0000000000000040 [ 228.366421][ T31] RBP: 00007ffda7cea780 R08: 000000000000009f R09: 0000555574eee0b8 [ 228.374644][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffda7cea5c0 [ 228.382636][ T31] R13: 00007ffda7cea3b0 R14: 585858582e7a7973 R15: 00007ffda7cea300 [ 228.391733][ T31] [ 228.394856][ T31] INFO: task syz.3.16:5877 blocked in I/O wait for more than 144 seconds. [ 228.403375][ T31] Not tainted syzkaller #0 [ 228.408534][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 228.417260][ T31] task:syz.3.16 state:D stack:26680 pid:5877 tgid:5877 ppid:5611 task_flags:0x440040 flags:0x00080002 [ 228.429787][ T31] Call Trace: [ 228.433096][ T31] [ 228.436057][ T31] __schedule+0x125c/0x6730 [ 228.440592][ T31] ? __pfx___schedule+0x10/0x10 [ 228.445627][ T31] ? find_held_lock+0x2b/0x80 [ 228.450316][ T31] ? schedule+0x225/0x2c0 [ 228.455009][ T31] schedule+0xdd/0x2c0 [ 228.459105][ T31] io_schedule+0x8a/0xf0 [ 228.463349][ T31] bit_wait_io+0xd/0xe0 [ 228.467614][ T31] __wait_on_bit+0x65/0x180 [ 228.472208][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 228.477219][ T31] out_of_line_wait_on_bit+0xdc/0x110 [ 228.482610][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 228.489713][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 228.495284][ T31] do_get_write_access+0x836/0x11e0 [ 228.500554][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 228.506619][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 228.512726][ T31] ext4_reserve_inode_write+0x1b7/0x330 [ 228.518333][ T31] __ext4_mark_inode_dirty+0x18f/0x880 [ 228.523824][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 228.529794][ T31] ? trace_jbd2_handle_start+0x83/0x240 [ 228.535426][ T31] ? jbd2__journal_start+0xf7/0x6a0 [ 228.540663][ T31] ? __ext4_journal_start_sb+0x367/0x670 [ 228.546513][ T31] ? __ext4_journal_start_sb+0x1ce/0x670 [ 228.552172][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 228.557310][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 228.562711][ T31] ext4_dirty_inode+0xd9/0x130 [ 228.567562][ T31] ? rcu_is_watching+0x12/0xc0 [ 228.572345][ T31] __mark_inode_dirty+0x1f3/0x16e0 [ 228.577529][ T31] file_update_time_flags+0x46b/0x500 [ 228.582919][ T31] ext4_page_mkwrite+0x324/0x1850 [ 228.587994][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 228.594272][ T31] do_page_mkwrite+0x17a/0x440 [ 228.599076][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 228.604634][ T31] do_fault+0x3b5/0x1750 [ 228.608911][ T31] __handle_mm_fault+0x187d/0x2a00 [ 228.614628][ T31] ? reacquire_held_locks+0xce/0x1e0 [ 228.619996][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 228.625687][ T31] ? lock_vma_under_rcu+0x17c/0x590 [ 228.631071][ T31] handle_mm_fault+0x37b/0xa30 [ 228.635986][ T31] do_user_addr_fault+0x5a3/0x12f0 [ 228.641126][ T31] exc_page_fault+0x6f/0xd0 [ 228.645714][ T31] asm_exc_page_fault+0x26/0x30 [ 228.650597][ T31] RIP: 0033:0x7f45d4e72e52 [ 228.655054][ T31] RSP: 002b:00007ffc01fb08b0 EFLAGS: 00010202 [ 228.661132][ T31] RAX: 0000000000010008 RBX: 00007f45d5d55720 RCX: 0000000000000000 [ 228.669356][ T31] RDX: 0000001b33814000 RSI: 0000000000000008 RDI: 00007f45d5d55720 [ 228.677426][ T31] RBP: 0000000000000073 R08: 00007f45d5210000 R09: 00007f45d5226038 [ 228.685500][ T31] R10: 0000000000000001 R11: 0000000000000004 R12: ffffffff825dc539 [ 228.694726][ T31] R13: 00007f45d5226038 R14: 0000000000000016 R15: ffffffffffff0000 [ 228.702817][ T31] ? __might_fault+0x79/0x140 [ 228.707702][ T31] [ 228.710777][ T31] INFO: task syz.4.13:5879 blocked in I/O wait for more than 144 seconds. [ 228.719809][ T31] Not tainted syzkaller #0 [ 228.724853][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 228.733531][ T31] task:syz.4.13 state:D stack:27144 pid:5879 tgid:5879 ppid:5608 task_flags:0x440040 flags:0x00080002 [ 228.745566][ T31] Call Trace: [ 228.748860][ T31] [ 228.751791][ T31] __schedule+0x125c/0x6730 [ 228.756366][ T31] ? __pfx___schedule+0x10/0x10 [ 228.761236][ T31] ? find_held_lock+0x2b/0x80 [ 228.765972][ T31] ? schedule+0x225/0x2c0 [ 228.770309][ T31] schedule+0xdd/0x2c0 [ 228.774415][ T31] io_schedule+0x8a/0xf0 [ 228.778658][ T31] bit_wait_io+0xd/0xe0 [ 228.782814][ T31] __wait_on_bit+0x65/0x180 [ 228.787344][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 228.792281][ T31] out_of_line_wait_on_bit+0xdc/0x110 [ 228.798082][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 228.804462][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 228.809952][ T31] do_get_write_access+0x836/0x11e0 [ 228.815188][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 228.821172][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 228.827298][ T31] ext4_reserve_inode_write+0x1b7/0x330 [ 228.832848][ T31] __ext4_mark_inode_dirty+0x18f/0x880 [ 228.838355][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 228.844362][ T31] ? trace_jbd2_handle_start+0x83/0x240 [ 228.849898][ T31] ? jbd2__journal_start+0xf7/0x6a0 [ 228.855138][ T31] ? __ext4_journal_start_sb+0x367/0x670 [ 228.860775][ T31] ? __ext4_journal_start_sb+0x1ce/0x670 [ 228.866455][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 228.871401][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 228.876830][ T31] ext4_dirty_inode+0xd9/0x130 [ 228.881595][ T31] ? rcu_is_watching+0x12/0xc0 [ 228.886470][ T31] __mark_inode_dirty+0x1f3/0x16e0 [ 228.891589][ T31] file_update_time_flags+0x46b/0x500 [ 228.897014][ T31] ext4_page_mkwrite+0x324/0x1850 [ 228.902646][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 228.908172][ T31] do_page_mkwrite+0x17a/0x440 [ 228.912960][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 228.918479][ T31] do_fault+0x3b5/0x1750 [ 228.922740][ T31] __handle_mm_fault+0x187d/0x2a00 [ 228.927922][ T31] ? reacquire_held_locks+0xce/0x1e0 [ 228.933215][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 228.938724][ T31] ? lock_vma_under_rcu+0x17c/0x590 [ 228.943967][ T31] handle_mm_fault+0x37b/0xa30 [ 228.948765][ T31] do_user_addr_fault+0x5a3/0x12f0 [ 228.953898][ T31] exc_page_fault+0x6f/0xd0 [ 228.958403][ T31] asm_exc_page_fault+0x26/0x30 [ 228.963245][ T31] RIP: 0033:0x7f17b3e72e52 [ 228.967752][ T31] RSP: 002b:00007ffdf82ce410 EFLAGS: 00010202 [ 228.973846][ T31] RAX: 0000000000023008 RBX: 00007f17b4d55720 RCX: 0000000000000000 [ 228.981827][ T31] RDX: 0000001b33901000 RSI: 0000000000000008 RDI: 00007f17b4d55720 [ 228.989850][ T31] RBP: 0000000000000452 R08: 00007f17b4210000 R09: 00007f17b4226128 [ 228.997866][ T31] R10: 0000000000000001 R11: 0000000000000007 R12: ffffffff8bb65c1e [ 229.006579][ T31] R13: 00007f17b4226128 R14: 0000000000000013 R15: fffffffffffdd000 [ 229.015006][ T31] ? idr_get_free+0x65e/0xa00 [ 229.019768][ T31] [ 229.022806][ T31] INFO: task syz.0.17:5884 blocked in I/O wait for more than 144 seconds. [ 229.031351][ T31] Not tainted syzkaller #0 [ 229.036315][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 229.045005][ T31] task:syz.0.17 state:D stack:26808 pid:5884 tgid:5884 ppid:5609 task_flags:0x440040 flags:0x00080002 [ 229.056961][ T31] Call Trace: [ 229.060234][ T31] [ 229.063150][ T31] __schedule+0x125c/0x6730 [ 229.067726][ T31] ? __pfx___schedule+0x10/0x10 [ 229.072580][ T31] ? find_held_lock+0x2b/0x80 [ 229.077352][ T31] ? schedule+0x225/0x2c0 [ 229.081685][ T31] schedule+0xdd/0x2c0 [ 229.085825][ T31] io_schedule+0x8a/0xf0 [ 229.090087][ T31] bit_wait_io+0xd/0xe0 [ 229.094288][ T31] __wait_on_bit+0x65/0x180 [ 229.098797][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 229.104460][ T31] out_of_line_wait_on_bit+0xdc/0x110 [ 229.109870][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 229.115889][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 229.121356][ T31] do_get_write_access+0x836/0x11e0 [ 229.126636][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 229.132643][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 229.138826][ T31] ext4_reserve_inode_write+0x1b7/0x330 [ 229.144434][ T31] __ext4_mark_inode_dirty+0x18f/0x880 [ 229.149896][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 229.155902][ T31] ? trace_jbd2_handle_start+0x83/0x240 [ 229.161466][ T31] ? jbd2__journal_start+0xf7/0x6a0 [ 229.166716][ T31] ? __ext4_journal_start_sb+0x367/0x670 [ 229.172370][ T31] ? __ext4_journal_start_sb+0x1ce/0x670 [ 229.178066][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 229.183018][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 229.188462][ T31] ext4_dirty_inode+0xd9/0x130 [ 229.193234][ T31] ? rcu_is_watching+0x12/0xc0 [ 229.198028][ T31] __mark_inode_dirty+0x1f3/0x16e0 [ 229.203152][ T31] file_update_time_flags+0x46b/0x500 [ 229.209236][ T31] ext4_page_mkwrite+0x324/0x1850 [ 229.214335][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 229.219814][ T31] do_page_mkwrite+0x17a/0x440 [ 229.224617][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 229.230075][ T31] do_fault+0x3b5/0x1750 [ 229.234387][ T31] __handle_mm_fault+0x187d/0x2a00 [ 229.239533][ T31] ? reacquire_held_locks+0xce/0x1e0 [ 229.244879][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 229.250352][ T31] ? lock_vma_under_rcu+0x17c/0x590 [ 229.255724][ T31] ? find_held_lock+0x2b/0x80 [ 229.260526][ T31] handle_mm_fault+0x37b/0xa30 [ 229.265430][ T31] do_user_addr_fault+0x5a3/0x12f0 [ 229.270573][ T31] exc_page_fault+0x6f/0xd0 [ 229.275243][ T31] asm_exc_page_fault+0x26/0x30 [ 229.280137][ T31] RIP: 0033:0x7fae66c72e52 [ 229.284592][ T31] RSP: 002b:00007fff863c5b70 EFLAGS: 00010202 [ 229.290654][ T31] RAX: 0000000000007008 RBX: 00007fae67b55720 RCX: 0000000000000000 [ 229.298660][ T31] RDX: 0000001b3351d000 RSI: 0000000000000008 RDI: 00007fae67b55720 [ 229.306662][ T31] RBP: 0000000000000e87 R08: 00007fae67010000 R09: 00007fae67026038 [ 229.315412][ T31] R10: 0000000000000007 R11: 0000000000000000 R12: ffffffff8bb870f1 [ 229.323405][ T31] R13: 00007fae67026038 R14: 000000000000007e R15: ffffffffffff9000 [ 229.331399][ T31] ? vsnprintf+0x611/0x1300 [ 229.336017][ T31] [ 229.339065][ T31] INFO: task syz.1.19:5901 blocked in I/O wait for more than 144 seconds. [ 229.347630][ T31] Not tainted syzkaller #0 [ 229.352571][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 229.361286][ T31] task:syz.1.19 state:D stack:27344 pid:5901 tgid:5901 ppid:5610 task_flags:0x440040 flags:0x00080002 [ 229.373243][ T31] Call Trace: [ 229.376543][ T31] [ 229.379471][ T31] __schedule+0x125c/0x6730 [ 229.384024][ T31] ? __pfx___schedule+0x10/0x10 [ 229.388868][ T31] ? find_held_lock+0x2b/0x80 [ 229.393538][ T31] ? schedule+0x225/0x2c0 [ 229.397901][ T31] schedule+0xdd/0x2c0 [ 229.401978][ T31] io_schedule+0x8a/0xf0 [ 229.406247][ T31] bit_wait_io+0xd/0xe0 [ 229.411147][ T31] __wait_on_bit+0x65/0x180 [ 229.415855][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 229.420831][ T31] out_of_line_wait_on_bit+0xdc/0x110 [ 229.426247][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 229.432252][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 229.437758][ T31] do_get_write_access+0x836/0x11e0 [ 229.442982][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 229.449031][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 229.455151][ T31] ext4_reserve_inode_write+0x1b7/0x330 [ 229.460809][ T31] __ext4_mark_inode_dirty+0x18f/0x880 [ 229.466324][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 229.472315][ T31] ? trace_jbd2_handle_start+0x83/0x240 [ 229.477922][ T31] ? jbd2__journal_start+0xf7/0x6a0 [ 229.483131][ T31] ? __ext4_journal_start_sb+0x367/0x670 [ 229.488799][ T31] ? __ext4_journal_start_sb+0x1ce/0x670 [ 229.494782][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 229.499754][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 229.505144][ T31] ext4_dirty_inode+0xd9/0x130 [ 229.509907][ T31] ? rcu_is_watching+0x12/0xc0 [ 229.515394][ T31] __mark_inode_dirty+0x1f3/0x16e0 [ 229.520539][ T31] file_update_time_flags+0x46b/0x500 [ 229.525946][ T31] ext4_page_mkwrite+0x324/0x1850 [ 229.530975][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 229.536512][ T31] do_page_mkwrite+0x17a/0x440 [ 229.541284][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 229.546788][ T31] do_fault+0x3b5/0x1750 [ 229.551046][ T31] ? __pmd_alloc+0x3fb/0x950 [ 229.555764][ T31] __handle_mm_fault+0x187d/0x2a00 [ 229.560890][ T31] ? reacquire_held_locks+0xce/0x1e0 [ 229.566235][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 229.571711][ T31] ? lock_vma_under_rcu+0x17c/0x590 [ 229.577024][ T31] handle_mm_fault+0x37b/0xa30 [ 229.581800][ T31] do_user_addr_fault+0x5a3/0x12f0 [ 229.586959][ T31] exc_page_fault+0x6f/0xd0 [ 229.591464][ T31] asm_exc_page_fault+0x26/0x30 [ 229.596382][ T31] RIP: 0033:0x7f29f726b9e3 [ 229.600807][ T31] RSP: 002b:00007ffc4449fa80 EFLAGS: 00010246 [ 229.606890][ T31] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b33064000 [ 229.615600][ T31] RDX: 0000001b33024000 RSI: 0000000000600000 RDI: 00007f29f75e0708 [ 229.623594][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 229.631614][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 229.639607][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc4449fd10 [ 229.647612][ T31] [ 229.650638][ T31] [ 229.650638][ T31] Showing all locks held in the system: [ 229.659131][ T31] 1 lock held by khungtaskd/31: [ 229.664093][ T31] #0: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 229.674609][ T31] 4 locks held by kworker/u8:8/1104: [ 229.679887][ T31] #0: ffff8880b853b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 229.689862][ T31] #1: ffff8880b8524568 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2e8e/0x6730 [ 229.698599][ T31] #2: ffff8880b8526298 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x124/0x1d0 [ 229.707930][ T31] #3: ffffffff9b927bc8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x144/0x4b0 [ 229.719022][ T31] 4 locks held by kworker/u8:9/1167: [ 229.724356][ T31] #0: ffff88801ce95940 ((wq_completion)pm_fs_sync){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 229.735224][ T31] #1: ffffc900056d7d08 (pm_fs_sync_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 229.745111][ T31] #2: ffff8880360540d8 (&type->s_umount_key#55){++++}-{4:4}, at: super_lock+0x320/0x3f0 [ 229.754981][ T31] #3: ffff888036054968 (&s->s_sync_lock){+.+.}-{4:4}, at: sync_inodes_sb+0x299/0xc80 [ 229.764667][ T31] 6 locks held by kworker/u8:10/3379: [ 229.770042][ T31] #0: ffff888021680940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 229.780777][ T31] #1: ffffc9000e5b7d08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 229.792673][ T31] #2: ffff8880360540d8 (&type->s_umount_key#55){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 229.803258][ T31] #3: ffff888036052c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x278/0x600 [ 229.813539][ T31] #4: ffff888036050938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 229.823773][ T31] #5: ffff8880755914d8 (&ei->i_data_sem#2){++++}-{4:4}, at: ext4_map_blocks+0x45a/0xd30 [ 229.833693][ T31] 2 locks held by getty/5370: [ 229.838356][ T31] #0: ffff888037b370a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 229.848152][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 229.858325][ T31] 3 locks held by syz-executor/5596: [ 229.863593][ T31] #0: ffff888023af7bc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 229.872942][ T31] #1: ffff888036054548 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 229.882491][ T31] #2: ffff888036050938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 229.892156][ T31] 5 locks held by syz.2.3/5817: [ 229.897050][ T31] #0: ffff888031da49b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 229.906159][ T31] #1: ffff888039df0450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 229.915183][ T31] #2: ffff888033e44080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 229.925588][ T31] #3: ffff88801f6811e8 (kn->active#61){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 229.935677][ T31] #4: ffffffff8ea9fc80 (system_transition_mutex){+.+.}-{4:4}, at: pm_suspend+0x586/0x7b0 [ 229.945732][ T31] 3 locks held by syz.3.16/5877: [ 229.950665][ T31] #0: ffff88807a7a6308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 229.959982][ T31] #1: ffff888036054548 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 229.969501][ T31] #2: ffff888036050938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 229.979148][ T31] 3 locks held by syz.4.13/5879: [ 229.984114][ T31] #0: ffff88807b33f6c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 229.993366][ T31] #1: ffff888036054548 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 230.002886][ T31] #2: ffff888036050938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 230.012484][ T31] 3 locks held by syz.0.17/5884: [ 230.017675][ T31] #0: ffff8880299e7d08 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 230.027625][ T31] #1: ffff888036054548 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 230.037183][ T31] #2: ffff888036050938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 230.046804][ T31] 1 lock held by udevd/5885: [ 230.051388][ T31] #0: ffff888028de5ce0 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xaf/0x1730 [ 230.061724][ T31] 3 locks held by syz.1.19/5901: [ 230.066746][ T31] #0: ffff888057503088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 230.076007][ T31] #1: ffff888036054548 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 230.085524][ T31] #2: ffff888036050938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 230.095156][ T31] [ 230.097472][ T31] ============================================= [ 230.097472][ T31] [ 230.106011][ T31] NMI backtrace for cpu 0 [ 230.106024][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 230.106043][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 230.106053][ T31] Call Trace: [ 230.106059][ T31] [ 230.106065][ T31] dump_stack_lvl+0x100/0x190 [ 230.106093][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 230.106116][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 230.106141][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 230.106163][ T31] sys_info+0x141/0x190 [ 230.106189][ T31] watchdog+0xcb1/0x1030 [ 230.106216][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 230.106237][ T31] ? __pfx_watchdog+0x10/0x10 [ 230.106258][ T31] ? __kthread_parkme+0x18c/0x230 [ 230.106291][ T31] ? kthread+0x13a/0x450 [ 230.106307][ T31] ? __pfx_watchdog+0x10/0x10 [ 230.106326][ T31] kthread+0x370/0x450 [ 230.106342][ T31] ? __pfx_kthread+0x10/0x10 [ 230.106361][ T31] ret_from_fork+0x72b/0xd50 [ 230.106386][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 230.106409][ T31] ? __switch_to+0x800/0x10f0 [ 230.106428][ T31] ? __pfx_kthread+0x10/0x10 [ 230.106446][ T31] ret_from_fork_asm+0x1a/0x30 [ 230.106482][ T31] [ 230.106489][ T31] Sending NMI from CPU 0 to CPUs 1: [ 230.232779][ C1] NMI backtrace for cpu 1 [ 230.232796][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 230.232817][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 230.232825][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 230.232850][ C1] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 5f 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 230.232863][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 230.232876][ C1] RAX: 000000000111a54d RBX: ffff88801eaca540 RCX: ffffffff8bbb42d5 [ 230.232885][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a8186 RDI: ffffffff8c402680 [ 230.232894][ C1] RBP: ffffed1003d594a8 R08: 0000000000000001 R09: ffffed10170a678d [ 230.232902][ C1] R10: ffff8880b8533c6b R11: 0000000000000000 R12: 0000000000000000 [ 230.232911][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 230.232919][ C1] FS: 0000000000000000(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 230.232933][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.232942][ C1] CR2: 000055eeb367d040 CR3: 000000002bc9e000 CR4: 00000000003526f0 [ 230.232951][ C1] Call Trace: [ 230.232956][ C1] [ 230.232960][ C1] default_idle+0x9/0x10 [ 230.232979][ C1] default_idle_call+0x6c/0xb0 [ 230.232997][ C1] do_idle+0x3a7/0x5b0 [ 230.233017][ C1] ? __pfx_do_idle+0x10/0x10 [ 230.233034][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 230.233056][ C1] cpu_startup_entry+0x4f/0x60 [ 230.233074][ C1] start_secondary+0x21d/0x2d0 [ 230.233091][ C1] ? __pfx_start_secondary+0x10/0x10 [ 230.233110][ C1] common_startup_64+0x13e/0x158 [ 230.233136][ C1] [ 230.233961][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 230.233974][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 230.233991][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 230.234000][ T31] Call Trace: [ 230.234006][ T31] [ 230.234012][ T31] dump_stack_lvl+0x100/0x190 [ 230.234035][ T31] vpanic+0x552/0x970 [ 230.234051][ T31] ? __pfx_vpanic+0x10/0x10 [ 230.234067][ T31] ? rcu_is_watching+0x12/0xc0 [ 230.234094][ T31] panic+0xd1/0xe0 [ 230.234108][ T31] ? __pfx_panic+0x10/0x10 [ 230.234125][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 230.234142][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 230.234158][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 230.234173][ T31] ? watchdog.cold+0x1ec/0x234 [ 230.234191][ T31] ? watchdog+0xcc1/0x1030 [ 230.234210][ T31] watchdog.cold+0x1fd/0x234 [ 230.234231][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 230.234249][ T31] ? __pfx_watchdog+0x10/0x10 [ 230.234267][ T31] ? __kthread_parkme+0x18c/0x230 [ 230.234292][ T31] ? kthread+0x13a/0x450 [ 230.234307][ T31] ? __pfx_watchdog+0x10/0x10 [ 230.234328][ T31] kthread+0x370/0x450 [ 230.234342][ T31] ? __pfx_kthread+0x10/0x10 [ 230.234359][ T31] ret_from_fork+0x72b/0xd50 [ 230.234381][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 230.234402][ T31] ? __switch_to+0x800/0x10f0 [ 230.234418][ T31] ? __pfx_kthread+0x10/0x10 [ 230.234435][ T31] ret_from_fork_asm+0x1a/0x30 [ 230.234465][ T31] [ 230.554144][ T31] Kernel Offset: disabled [ 230.558455][ T31] Rebooting in 86400 seconds..