last executing test programs: 3.95793289s ago: executing program 4 (id=5): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000700)={0x1}, 0x0) 3.8696059s ago: executing program 3 (id=4): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x16, &(0x7f0000000200)={[{0x12, 0x4e00, "0000000a0000000000020100000102000000"}]}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 3.598403247s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x31, 0x3, 0x17ef, 0x6009, 0x0, 0x0, "05010902a1010901a10005091901290315002501950375018102950175058103c085180900150026ff00950275089102c0"}}, 0x149) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/hid/devices/0003:17EF:6009.0001/middleclick_workaround\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='1\x00', 0x2) 3.224077967s ago: executing program 1 (id=2): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], &(0x7f0000000100)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="010000000200000000000000"], 0x40) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000400)='\x00\x00\x00\x00', &(0x7f0000000500)=@tcp=r2}, 0x20) 3.139004578s ago: executing program 2 (id=3): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1000}]}}]}, 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f0000000a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000d00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000d40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000dc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000e00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000e80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000ec0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000f40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000f80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000001000)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001040)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001080)=[{&(0x7f00000010c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001100)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001140)=[{&(0x7f0000001180)='\x00', 0x1}], 0x1}}, {{&(0x7f00000011c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001200)=[{&(0x7f0000001240)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001280)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000001300)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001340)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001380)=[{&(0x7f00000013c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001400)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001440)=[{&(0x7f0000001480)='\x00', 0x1}], 0x1}}, {{&(0x7f00000014c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001500)=[{&(0x7f0000001540)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001580)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000001600)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001680)=[{&(0x7f00000016c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001740)=[{&(0x7f0000001780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000017c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001800)=[{&(0x7f0000001840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000001900)='\x00', 0x1}], 0x1}}], 0x14, 0x0) sendmmsg$inet(r0, &(0x7f0000001940)=[{{&(0x7f0000001e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001e80)=[{&(0x7f0000001ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002000)=[{&(0x7f0000002040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000020c0)=[{&(0x7f0000002100)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002140)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002180)=[{&(0x7f00000021c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002200)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002240)=[{&(0x7f0000002280)='\x00', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002300)=[{&(0x7f0000002340)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002380)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000002400)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002440)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002480)=[{&(0x7f00000024c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002500)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002540)=[{&(0x7f0000002580)='\x00', 0x1}], 0x1}}, {{&(0x7f00000025c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002640)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002680)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000026c0)=[{&(0x7f0000002700)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002740)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002780)=[{&(0x7f00000027c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002800)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002840)=[{&(0x7f0000002880)='\x00', 0x1}], 0x1}}, {{&(0x7f00000028c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002900)=[{&(0x7f0000002940)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002980)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000029c0)=[{&(0x7f0000002a00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002a80)=[{&(0x7f0000002ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002b40)=[{&(0x7f0000002b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002c00)=[{&(0x7f0000002c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002cc0)=[{&(0x7f0000002d00)='\x00', 0x1}], 0x1}}], 0x14, 0x0) sendmmsg$inet(r0, &(0x7f0000002d40)=[{{&(0x7f0000003240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003280)=[{&(0x7f00000032c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003340)=[{&(0x7f0000003380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000033c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003400)=[{&(0x7f0000003440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000034c0)=[{&(0x7f0000003500)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003540)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003580)=[{&(0x7f00000035c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003600)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003640)=[{&(0x7f0000003680)='\x00', 0x1}], 0x1}}, {{&(0x7f00000036c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003700)=[{&(0x7f0000003740)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003780)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000037c0)=[{&(0x7f0000003800)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003840)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003880)=[{&(0x7f00000038c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003900)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003940)=[{&(0x7f0000003980)='\x00', 0x1}], 0x1}}, {{&(0x7f00000039c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003a00)=[{&(0x7f0000003a40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003a80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003ac0)=[{&(0x7f0000003b00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003b40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003b80)=[{&(0x7f0000003bc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003c00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003c40)=[{&(0x7f0000003c80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003cc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003d00)=[{&(0x7f0000003d40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003d80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003dc0)=[{&(0x7f0000003e00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003e80)=[{&(0x7f0000003ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003f40)=[{&(0x7f0000003f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004000)=[{&(0x7f0000004040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000040c0)=[{&(0x7f0000004100)='\x00', 0x1}], 0x1}}], 0x14, 0x0) sendmmsg$inet(r0, &(0x7f0000004140)=[{{&(0x7f0000004640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004680)=[{&(0x7f00000046c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004740)=[{&(0x7f0000004780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000047c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004800)=[{&(0x7f0000004840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000048c0)=[{&(0x7f0000004900)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004940)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004980)=[{&(0x7f00000049c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004a00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004a40)=[{&(0x7f0000004a80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004ac0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004b00)=[{&(0x7f0000004b40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004b80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004bc0)=[{&(0x7f0000004c00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004c40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004c80)=[{&(0x7f0000004cc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004d00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004d40)=[{&(0x7f0000004d80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004dc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004e00)=[{&(0x7f0000004e40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004e80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004ec0)=[{&(0x7f0000004f00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004f40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004f80)=[{&(0x7f0000004fc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005000)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005040)=[{&(0x7f0000005080)='\x00', 0x1}], 0x1}}, {{&(0x7f00000050c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005100)=[{&(0x7f0000005140)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005180)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000051c0)=[{&(0x7f0000005200)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005280)=[{&(0x7f00000052c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005340)=[{&(0x7f0000005380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000053c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005400)=[{&(0x7f0000005440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000054c0)=[{&(0x7f0000005500)='\x00', 0x1}], 0x1}}], 0x14, 0x0) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000005a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005a80)=[{&(0x7f0000005ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005b40)=[{&(0x7f0000005b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005c00)=[{&(0x7f0000005c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005cc0)=[{&(0x7f0000005d00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005d40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005d80)=[{&(0x7f0000005dc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005e00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005e40)=[{&(0x7f0000005e80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005ec0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005f00)=[{&(0x7f0000005f40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005f80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005fc0)=[{&(0x7f0000006000)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006040)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006080)=[{&(0x7f00000060c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006100)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006140)=[{&(0x7f0000006180)='\x00', 0x1}], 0x1}}, {{&(0x7f00000061c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006200)=[{&(0x7f0000006240)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006280)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000062c0)=[{&(0x7f0000006300)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006340)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006380)=[{&(0x7f00000063c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006400)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006440)=[{&(0x7f0000006480)='\x00', 0x1}], 0x1}}, {{&(0x7f00000064c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006500)=[{&(0x7f0000006540)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006580)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000065c0)=[{&(0x7f0000006600)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006680)=[{&(0x7f00000066c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006740)=[{&(0x7f0000006780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000067c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006800)=[{&(0x7f0000006840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000068c0)=[{&(0x7f0000006900)='\x00', 0x1}], 0x1}}], 0x14, 0x0) sendmmsg$inet(r0, &(0x7f0000006940)=[{{&(0x7f0000006e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006e80)=[{&(0x7f0000006ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006f40)=[{&(0x7f0000006f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007000)=[{&(0x7f0000007040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000070c0)=[{&(0x7f0000007100)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007140)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007180)=[{&(0x7f00000071c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007200)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007240)=[{&(0x7f0000007280)='\x00', 0x1}], 0x1}}, {{&(0x7f00000072c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007300)=[{&(0x7f0000007340)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007380)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000073c0)=[{&(0x7f0000007400)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007440)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007480)=[{&(0x7f00000074c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007500)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007540)=[{&(0x7f0000007580)='\x00', 0x1}], 0x1}}, {{&(0x7f00000075c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007600)=[{&(0x7f0000007640)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007680)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000076c0)=[{&(0x7f0000007700)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007740)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007780)=[{&(0x7f00000077c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007800)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007840)=[{&(0x7f0000007880)='\x00', 0x1}], 0x1}}, {{&(0x7f00000078c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007900)=[{&(0x7f0000007940)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007980)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000079c0)=[{&(0x7f0000007a00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007a80)=[{&(0x7f0000007ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007b40)=[{&(0x7f0000007b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007c00)=[{&(0x7f0000007c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007cc0)=[{&(0x7f0000007d00)='\x00', 0x1}], 0x1}}], 0x14, 0x0) sendmmsg$inet(r0, &(0x7f0000007d40)=[{{&(0x7f0000008240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008280)=[{&(0x7f00000082c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008340)=[{&(0x7f0000008380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000083c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008400)=[{&(0x7f0000008440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000084c0)=[{&(0x7f0000008500)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008540)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008580)=[{&(0x7f00000085c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008600)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008640)=[{&(0x7f0000008680)='\x00', 0x1}], 0x1}}, {{&(0x7f00000086c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008700)=[{&(0x7f0000008740)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008780)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000087c0)=[{&(0x7f0000008800)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008840)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008880)=[{&(0x7f00000088c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008900)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008940)=[{&(0x7f0000008980)='\x00', 0x1}], 0x1}}, {{&(0x7f00000089c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008a00)=[{&(0x7f0000008a40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008a80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008ac0)=[{&(0x7f0000008b00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008b40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008b80)=[{&(0x7f0000008bc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008c00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008c40)=[{&(0x7f0000008c80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008cc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008d00)=[{&(0x7f0000008d40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008d80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008dc0)=[{&(0x7f0000008e00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008e80)=[{&(0x7f0000008ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008f40)=[{&(0x7f0000008f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009000)=[{&(0x7f0000009040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000090c0)=[{&(0x7f0000009100)='\x00', 0x1}], 0x1}}], 0x14, 0x0) sendmmsg$inet(r0, &(0x7f0000009140)=[{{&(0x7f0000009640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009680)=[{&(0x7f00000096c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009740)=[{&(0x7f0000009780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000097c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009800)=[{&(0x7f0000009840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000098c0)=[{&(0x7f0000009900)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009940)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009980)=[{&(0x7f00000099c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009a00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009a40)=[{&(0x7f0000009a80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009ac0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009b00)=[{&(0x7f0000009b40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009b80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009bc0)=[{&(0x7f0000009c00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009c40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009c80)=[{&(0x7f0000009cc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009d00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009d40)=[{&(0x7f0000009d80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009dc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009e00)=[{&(0x7f0000009e40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009e80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009ec0)=[{&(0x7f0000009f00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009f40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009f80)=[{&(0x7f0000009fc0)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a000)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a040)=[{&(0x7f000000a080)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a0c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a100)=[{&(0x7f000000a140)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a180)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a1c0)=[{&(0x7f000000a200)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a280)=[{&(0x7f000000a2c0)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a340)=[{&(0x7f000000a380)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a3c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a400)=[{&(0x7f000000a440)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a4c0)=[{&(0x7f000000a500)='\x00', 0x1}], 0x1}}], 0x14, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) sendto$inet(r0, &(0x7f0000000400)='\x00', 0x1, 0x0, &(0x7f0000000500)={0x2, 0x1234, @loopback}, 0x10) 3.128533342s ago: executing program 0 (id=6): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904000000ffffff00"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000100)={0x3}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='tps6598x 0x38\x00', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='tps6598x 0x38\x00', 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='tps6598x 0x38\x00', 0xe) 2.885747104s ago: executing program 1 (id=7): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000300)={0x0, 0x1, 0x12, {0x12, 0x1, "000200000010582005109bc100000001"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)={0x84, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) nanosleep(&(0x7f0000000700)={0x1}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2) ioctl$USBDEVFS_RESET(r1, 0x5514) 2.413441216s ago: executing program 2 (id=8): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='1\n\x00', 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r2, &(0x7f0000000600)=@in={0x2, 0x801, @local}, 0x10) sendto(r2, &(0x7f0000000700)="80000050123456780000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000006000000010000000461626364000000047465737400000000", 0x54, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.495761935s ago: executing program 2 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r0, &(0x7f0000000840)='0\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r1, &(0x7f0000000940)='0\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x2, 0x0) write(r2, &(0x7f0000000540)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f0000000440)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f00000000c0)='8\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000100)='./nfs_mnt\x00', &(0x7f0000000140)='nfs4\x00', 0x0, &(0x7f0000000180)='addr=127.0.0.1,port=2049,vers=4.2\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/clients/1/info\x00', 0x0, 0x0) read(r5, &(0x7f0000000300), 0x64) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/clients/2/info\x00', 0x0, 0x0) read(r6, &(0x7f0000000300), 0x64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/clients/3/info\x00', 0x0, 0x0) read(r7, &(0x7f0000000300), 0x64) 871.394598ms ago: executing program 4 (id=10): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./img\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000200)="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", 0x5000) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='/dev/loop0,4096\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt\x00', 0x1ff) mount(&(0x7f0000000900)=@filename='mtd1\x00', &(0x7f0000000800)='./mnt\x00', &(0x7f0000000a00)='jffs2\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./mnt/test\x00', 0x42, 0x1ff) write(r3, &(0x7f0000000c00)='A', 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f0000000b00)='./mnt/test\x00', 0x0) 801.531962ms ago: executing program 3 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./upper\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./work\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./merge\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./lower/file\x00', 0x81c0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./merge\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './lower'}}, {@upperdir={'upperdir', 0x3d, './upper'}}, {@workdir={'workdir', 0x3d, './work'}}, {@index_on}, {@nfs_export_on}, {@uuid_on, 0x0}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./merge\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000300)='file\x00', &(0x7f0000000000)=@raw={0x40, 0x0, {'\x00'/64}}, &(0x7f0000000340), 0x0) close(r0) umount2(&(0x7f0000000380)='./merge\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./merge\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={[{@lowerdir={'lowerdir', 0x3d, './lower'}}, {@upperdir={'upperdir', 0x3d, './upper'}}, {@workdir={'workdir', 0x3d, './work'}}, {@index_on}, {@nfs_export_on}, {@uuid_on, 0x0}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./merge\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000000)=@raw={0x40, 0x0, {'\x00'/64}}, 0x0) 520.966726ms ago: executing program 4 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff0000000705810200020007058202000200070583020002000705840200020007058602000200"], 0x0) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) ioctl(r0, 0xc0145608, &(0x7f0000000400)="03000000010000000100"/20) ioctl(r0, 0xc0405610, &(0x7f0000000500)="0100"/64) ioctl(r0, 0xc0145608, &(0x7f0000000b00)="00000000010000000100"/20) ioctl(r0, 0xc0145608, &(0x7f0000000600)="03000000010000000400"/20) ioctl(r0, 0xc058560f, &(0x7f0000000700)="0000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000500000000000000002c0100"/84) ioctl(r0, 0xc0145608, &(0x7f0000000b00)="00000000010000000400"/20) 501.687854ms ago: executing program 3 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r0, &(0x7f0000000070)='syz0:invalid_ip', 0xf) 384.301551ms ago: executing program 3 (id=14): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='none\x00', 0x5) 384.09141ms ago: executing program 3 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/drivers/hpet_acpi/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='PNP0103:00\x00', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/PNP0103:00/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='acpi-thermal\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/acpi-thermal/bind\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='PNP0103:00\x00', 0xb) 354.44753ms ago: executing program 3 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='freeze\n\x00', 0x8) 0s ago: executing program 0 (id=17): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) write(r0, &(0x7f0000000c00)='1\x00', 0x1) write(r0, &(0x7f0000000c40)='128\x00', 0x3) kernel console output (not intermixed with test programs): [ 52.892109][ T30] audit: type=1400 audit(1785856610.954:111): avc: denied { write } for pid=5459 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.953304][ T30] audit: type=1400 audit(1785856611.014:112): avc: denied { write } for pid=5470 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.314286][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 53.314302][ T30] audit: type=1400 audit(1785856611.374:115): avc: denied { write } for pid=5487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.366686][ T30] audit: type=1400 audit(1785856611.424:116): avc: denied { write } for pid=5498 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.534718][ T30] audit: type=1400 audit(1785856611.594:117): avc: denied { write } for pid=5501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.588003][ T30] audit: type=1400 audit(1785856611.644:118): avc: denied { write } for pid=5512 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.756333][ T30] audit: type=1400 audit(1785856611.814:119): avc: denied { write } for pid=5515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.809494][ T30] audit: type=1400 audit(1785856611.874:120): avc: denied { write } for pid=5526 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.976028][ T30] audit: type=1400 audit(1785856612.034:121): avc: denied { write } for pid=5529 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.030089][ T30] audit: type=1400 audit(1785856612.094:122): avc: denied { write } for pid=5540 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.197487][ T30] audit: type=1400 audit(1785856612.254:123): avc: denied { write } for pid=5543 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.251815][ T30] audit: type=1400 audit(1785856612.314:124): avc: denied { write } for pid=5554 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.35' (ED25519) to the list of known hosts. [ 58.517440][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 58.517457][ T30] audit: type=1400 audit(1785856616.574:129): avc: denied { mounton } for pid=5593 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.547109][ T30] audit: type=1400 audit(1785856616.604:130): avc: denied { mount } for pid=5593 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.550698][ T5593] cgroup: Unknown subsys name 'net' [ 58.577550][ T30] audit: type=1400 audit(1785856616.634:131): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.692284][ T5593] cgroup: Unknown subsys name 'cpuset' [ 58.699990][ T5593] cgroup: Unknown subsys name 'rlimit' [ 58.818651][ T30] audit: type=1400 audit(1785856616.874:132): avc: denied { setattr } for pid=5593 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.851809][ T30] audit: type=1400 audit(1785856616.874:133): avc: denied { create } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.872717][ T30] audit: type=1400 audit(1785856616.874:134): avc: denied { write } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.893587][ T30] audit: type=1400 audit(1785856616.874:135): avc: denied { read } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.918736][ T30] audit: type=1400 audit(1785856616.874:136): avc: denied { mounton } for pid=5593 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.939274][ T5596] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.947107][ T30] audit: type=1400 audit(1785856616.874:137): avc: denied { mount } for pid=5593 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 58.975666][ T30] audit: type=1400 audit(1785856617.014:138): avc: denied { relabelto } for pid=5596 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 59.901764][ T5593] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.948638][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.956343][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.964418][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.971740][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.979485][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.980523][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.987483][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.996057][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.003939][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.009920][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.016949][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.023802][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.031107][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.038449][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.045079][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.052521][ T5614] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.066700][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.069799][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.074969][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.086770][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.089105][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.095947][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.111775][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.119152][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.120269][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.396897][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.404661][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.411883][ T5611] bridge_slave_0: entered allmulticast mode [ 63.418604][ T5611] bridge_slave_0: entered promiscuous mode [ 63.432897][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.440242][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.447403][ T5607] bridge_slave_0: entered allmulticast mode [ 63.454229][ T5607] bridge_slave_0: entered promiscuous mode [ 63.471223][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.478372][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.485544][ T5611] bridge_slave_1: entered allmulticast mode [ 63.492257][ T5611] bridge_slave_1: entered promiscuous mode [ 63.505358][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.512499][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.519760][ T5607] bridge_slave_1: entered allmulticast mode [ 63.526456][ T5607] bridge_slave_1: entered promiscuous mode [ 63.553212][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.560414][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.567511][ T5606] bridge_slave_0: entered allmulticast mode [ 63.574317][ T5606] bridge_slave_0: entered promiscuous mode [ 63.603404][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.610629][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.617732][ T5606] bridge_slave_1: entered allmulticast mode [ 63.624554][ T5606] bridge_slave_1: entered promiscuous mode [ 63.656149][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.673669][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.686772][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.694209][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.701543][ T5615] bridge_slave_0: entered allmulticast mode [ 63.708184][ T5615] bridge_slave_0: entered promiscuous mode [ 63.716772][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.728125][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.739524][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.754341][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.761482][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.768595][ T5615] bridge_slave_1: entered allmulticast mode [ 63.775645][ T5615] bridge_slave_1: entered promiscuous mode [ 63.789633][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.837281][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.844493][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.851916][ T5608] bridge_slave_0: entered allmulticast mode [ 63.858587][ T5608] bridge_slave_0: entered promiscuous mode [ 63.873196][ T5611] team0: Port device team_slave_0 added [ 63.887303][ T5607] team0: Port device team_slave_0 added [ 63.893230][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.900363][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.907460][ T5608] bridge_slave_1: entered allmulticast mode [ 63.914352][ T5608] bridge_slave_1: entered promiscuous mode [ 63.922695][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.933234][ T5611] team0: Port device team_slave_1 added [ 63.940092][ T5606] team0: Port device team_slave_0 added [ 63.947030][ T5607] team0: Port device team_slave_1 added [ 63.966615][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.983672][ T5606] team0: Port device team_slave_1 added [ 64.021333][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.028374][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.054575][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.072652][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.088982][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.096218][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.122980][ T50] Bluetooth: hci3: command tx timeout [ 64.122981][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.141320][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.148285][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.174393][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.185680][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.193082][ T5618] Bluetooth: hci4: command tx timeout [ 64.193174][ T5618] Bluetooth: hci2: command tx timeout [ 64.198600][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.198860][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.204730][ T5618] Bluetooth: hci1: command tx timeout [ 64.239434][ T50] Bluetooth: hci0: command tx timeout [ 64.241563][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.268983][ T5615] team0: Port device team_slave_0 added [ 64.275111][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.282992][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.309133][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.320664][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.327662][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.353710][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.378175][ T5615] team0: Port device team_slave_1 added [ 64.402734][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.409933][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.436041][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.448022][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.455184][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.481160][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.493187][ T5608] team0: Port device team_slave_0 added [ 64.501000][ T5608] team0: Port device team_slave_1 added [ 64.567921][ T5607] hsr_slave_0: entered promiscuous mode [ 64.574358][ T5607] hsr_slave_1: entered promiscuous mode [ 64.591460][ T5611] hsr_slave_0: entered promiscuous mode [ 64.597581][ T5611] hsr_slave_1: entered promiscuous mode [ 64.603966][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 64.609756][ T5611] Cannot create hsr debugfs directory [ 64.615705][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.622877][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.648787][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.663678][ T5606] hsr_slave_0: entered promiscuous mode [ 64.669888][ T5606] hsr_slave_1: entered promiscuous mode [ 64.675836][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 64.681641][ T5606] Cannot create hsr debugfs directory [ 64.698771][ T5615] hsr_slave_0: entered promiscuous mode [ 64.705050][ T5615] hsr_slave_1: entered promiscuous mode [ 64.711336][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 64.717063][ T5615] Cannot create hsr debugfs directory [ 64.723501][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.730638][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.756543][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.909128][ T5608] hsr_slave_0: entered promiscuous mode [ 64.915381][ T5608] hsr_slave_1: entered promiscuous mode [ 64.921433][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 64.927163][ T5608] Cannot create hsr debugfs directory [ 65.176412][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.187624][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.195954][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.204626][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.212445][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.222182][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.230619][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.240748][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.290413][ T5615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.301591][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.314737][ T5615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.324725][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.344897][ T5615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.353456][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.361973][ T5615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.371586][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.415969][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.425553][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.433606][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.442955][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.450747][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.459126][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.466942][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.476239][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.558383][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.568133][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.576838][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.586048][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.594049][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.602683][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.610608][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.618967][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.660461][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.715204][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.726763][ T5608] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.736081][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.743908][ T5608] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.753347][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.762033][ T5608] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.770676][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.778362][ T5608] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.788276][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.800819][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.808216][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.841369][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.848467][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.871615][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.879669][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.901919][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.973965][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.983442][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.999231][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.011523][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.018664][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.042190][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.049778][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.098397][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.115630][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.148918][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.156013][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.173671][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.183202][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.190299][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.198317][ T50] Bluetooth: hci3: command tx timeout [ 66.200873][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.211258][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.241097][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.248174][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.265779][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.272777][ T50] Bluetooth: hci0: command tx timeout [ 66.278850][ T5618] Bluetooth: hci2: command tx timeout [ 66.278939][ T5614] Bluetooth: hci4: command tx timeout [ 66.285356][ T50] Bluetooth: hci1: command tx timeout [ 66.328164][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.335330][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.368518][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.375691][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.575776][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.074594][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.215748][ T5615] veth0_vlan: entered promiscuous mode [ 67.223944][ T5607] veth0_vlan: entered promiscuous mode [ 67.252177][ T5615] veth1_vlan: entered promiscuous mode [ 67.264570][ T5607] veth1_vlan: entered promiscuous mode [ 67.287877][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.375631][ T5607] veth0_macvtap: entered promiscuous mode [ 67.392547][ T5615] veth0_macvtap: entered promiscuous mode [ 67.406204][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.425165][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.438451][ T5607] veth1_macvtap: entered promiscuous mode [ 67.447841][ T5611] veth0_vlan: entered promiscuous mode [ 67.457562][ T5615] veth1_macvtap: entered promiscuous mode [ 67.477759][ T5611] veth1_vlan: entered promiscuous mode [ 67.490118][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.512299][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.534436][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.557347][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.598767][ T5608] veth0_vlan: entered promiscuous mode [ 67.629028][ T5608] veth1_vlan: entered promiscuous mode [ 67.645846][ T5606] veth0_vlan: entered promiscuous mode [ 67.661411][ T5611] veth0_macvtap: entered promiscuous mode [ 67.683466][ T5611] veth1_macvtap: entered promiscuous mode [ 67.701357][ T5606] veth1_vlan: entered promiscuous mode [ 67.721232][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.739030][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.747620][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.761089][ T1010] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.770452][ T1010] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.810505][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.822241][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.840830][ T5606] veth0_macvtap: entered promiscuous mode [ 67.846817][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.849795][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.865216][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.873921][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.884486][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.909199][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.909608][ T5606] veth1_macvtap: entered promiscuous mode [ 67.919468][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.934933][ T5608] veth0_macvtap: entered promiscuous mode [ 67.958996][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.960368][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 67.960380][ T30] audit: type=1400 audit(1785856626.014:152): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/root/syzkaller.X0Gf6J/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 67.998311][ T30] audit: type=1400 audit(1785856626.034:153): avc: denied { mount } for pid=5607 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.022724][ T30] audit: type=1400 audit(1785856626.034:154): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/root/syzkaller.X0Gf6J/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.033869][ T1010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.050156][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.060277][ T1010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.072816][ T30] audit: type=1400 audit(1785856626.034:155): avc: denied { mount } for pid=5607 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.077001][ T5608] veth1_macvtap: entered promiscuous mode [ 68.096925][ T30] audit: type=1400 audit(1785856626.034:156): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/root/syzkaller.X0Gf6J/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.133617][ T30] audit: type=1400 audit(1785856626.034:157): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/root/syzkaller.X0Gf6J/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 68.164115][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.175977][ T5607] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.197233][ T30] audit: type=1400 audit(1785856626.044:158): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.221674][ T30] audit: type=1400 audit(1785856626.124:159): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.245086][ T30] audit: type=1400 audit(1785856626.124:160): avc: denied { mount } for pid=5607 comm="syz-executor" name="/" dev="gadgetfs" ino=8332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.268046][ T30] audit: type=1400 audit(1785856626.134:161): avc: denied { mount } for pid=5607 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 68.276923][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.295761][ T50] Bluetooth: hci3: command tx timeout [ 68.309680][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.354220][ T50] Bluetooth: hci1: command tx timeout [ 68.354244][ T5617] Bluetooth: hci4: command tx timeout [ 68.359708][ T5614] Bluetooth: hci0: command tx timeout [ 68.371417][ T5618] Bluetooth: hci2: command tx timeout [ 68.388831][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.409916][ T1010] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.422210][ T1010] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.537211][ T1357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.547082][ T1357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.554952][ T133] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.594196][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.612125][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.616916][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.627752][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.635309][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.636065][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.701617][ T1357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.709567][ T133] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.709614][ T133] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.709644][ T133] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.733658][ T1357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.747798][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.756581][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.767468][ T5699] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.783407][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.843387][ T1357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.851888][ T5792] input: syz0 as /devices/virtual/misc/uhid/0003:17EF:6009.0001/input/input5 [ 68.861238][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.861282][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.861310][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.865494][ T1357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.882596][ T5792] lenovo 0003:17EF:6009.0001: input,hidraw0: USB HID v0.00 Mouse [syz0] on syz0 [ 68.943841][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 68.975204][ T5699] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 68.988918][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.991737][ T5800] fido_id[5800]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 68.998020][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.034045][ T5699] usb 4-1: Product: syz [ 69.038337][ T5699] usb 4-1: Manufacturer: syz [ 69.044121][ T5699] usb 4-1: SerialNumber: syz [ 69.055181][ T5599] udevd[5599]: Error opening device "/dev/input/event4": No such file or directory [ 69.063719][ T1357] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.075322][ T24] usb 5-1: probing VID:PID(0424:012C) [ 69.087449][ T5599] udevd[5599]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90010, key code 190): Inappropriate ioctl for device [ 69.116155][ T24] usb 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 69.136431][ T24] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 69.154631][ T5599] udevd[5599]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90011, key code 148): Inappropriate ioctl for device [ 69.180901][ T24] usb 5-1: vub300 testing BULK IN EndPoint(2) 83 [ 69.207206][ T24] usb 5-1: vub300 testing BULK OUT EndPoint(3) 04 [ 69.220083][ T5599] udevd[5599]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90012, key code 152): Inappropriate ioctl for device [ 69.242525][ T24] usb 5-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 69.297246][ T5599] udevd[5599]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90013, key code 236): Inappropriate ioctl for device [ 69.332309][ T5723] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 69.343026][ T5599] udevd[5599]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90014, key code 238): Inappropriate ioctl for device [ 69.369006][ T5599] udevd[5599]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90015, key code 212): Inappropriate ioctl for device [ 69.385531][ T5599] udevd[5599]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90016, key code 227): Inappropriate ioctl for device [ 69.400819][ T5599] udevd[5599]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90017, key code 191): Inappropriate ioctl for device [ 69.420485][ T5599] udevd[5599]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90019, key code 205): Inappropriate ioctl for device [ 69.497563][ T24] usb 5-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 69.549620][ T5707] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 69.700317][ T24] usb 5-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 69.721515][ T5792] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 69.731141][ T5707] usb 1-1: not running at top speed; connect to a high speed hub [ 69.742113][ T5707] usb 1-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 69.751839][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.777696][ T5707] i2c-tiny-usb 1-1:1.0: version 1.00 found at bus 001 address 002 [ 69.891371][ T5792] usb 2-1: not running at top speed; connect to a high speed hub [ 69.900924][ T5792] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 69.909198][ T5792] usb 2-1: config 0 has no interface number 0 [ 69.918657][ T5792] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 69.928263][ T5792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.952994][ T5792] usb 2-1: config 0 descriptor?? [ 70.073468][ T5792] viperboard 2-1:0.143: version 0.00 found at bus 002 address 002 [ 70.087890][ T5818] i2c i2c-0: new_device: Instantiated device tps6598x at 0x38 [ 70.132900][ T5792] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 70.144536][ T5792] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 70.349830][ T5617] Bluetooth: hci3: command tx timeout [ 70.422675][ T5816] NFSD: Failed to start, no listeners configured. [ 70.430393][ T5617] Bluetooth: hci1: command tx timeout [ 70.435939][ T5618] Bluetooth: hci0: command tx timeout [ 70.441491][ T50] Bluetooth: hci2: command tx timeout [ 70.443505][ T5617] Bluetooth: hci4: command tx timeout [ 70.589735][ T5723] usb 4-1: Service connection timeout for: 256 [ 70.596268][ T5723] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 70.625093][ T5723] ath9k_htc: Failed to initialize the device [ 70.637718][ T5723] usb 4-1: ath9k_htc: USB layer deinitialized [ 71.001764][ T5792] usb 4-1: USB disconnect, device number 2 [ 71.373273][ T24] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 71.400788][ T24] usb 5-1: USB disconnect, device number 2 [ 71.407813][ T5723] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 71.421075][ T5723] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 71.497343][ T24] USB vub300 remote SDIO host controller[0] now disconnected [ 71.502300][ T5832] loop0: detected capacity change from 0 to 40 [ 71.593457][ T5836] MTDSB: Device #1 doesn't appear to exist [ 71.593457][ T5836] [ 71.636674][ T5832] ftl_cs: FTL header not found. [ 71.728817][ T5832] block2mtd: mtd1: [/dev/loop0] erase_size = 4KiB [4096] [ 71.770604][ T5838] overlayfs: failed to decode file handle (len=16, type=0, flags=0, err=-22) [ 71.790144][ T5707] (null): error -EIO: failure setting delay to 10us [ 71.803762][ T5707] i2c-tiny-usb 1-1:1.0: probe with driver i2c-tiny-usb failed with error -5 [ 72.002633][ T5850] PM: suspend entry (s2idle) [ 72.120264][ T5792] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 72.274338][ T5792] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 72.283703][ T5792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 72.291804][ T5792] usb 5-1: Product: syz [ 72.296720][ T13] Filesystems sync: 0.287 seconds [ 72.302657][ T5792] usb 5-1: Manufacturer: syz [ 72.315324][ T24] usb 1-1: USB disconnect, device number 2 [ 72.363418][ T5792] input: Samsung SUR40 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input6 [ 72.383424][ T5828] NFSD: Unable to initialize client recovery tracking! (-110) [ 72.402787][ T5828] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 72.412035][ T5828] NFSD: starting 90-second grace period (net f000052b) [ 72.429570][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:4487 [ 72.439115][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5828, name: syz.2.9 [ 72.447946][ C0] preempt_count: 100, expected: 0 [ 72.453000][ C0] RCU nest depth: 0, expected: 0 [ 72.457954][ C0] 2 locks held by syz.2.9/5828: [ 72.462859][ C0] #0: ffff88801bc2a9f8 (&mm->mmap_lock){++++}-{4:4}, at: acct_collect+0x54f/0x860 [ 72.472237][ C0] #1: ffffc90000007ca0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11f/0x610 [ 72.482858][ C0] Preemption disabled at: [ 72.482870][ C0] [] handle_softirqs+0xf0/0x9b0 [ 72.493649][ C0] CPU: 0 UID: 0 PID: 5828 Comm: syz.2.9 Not tainted syzkaller #0 PREEMPT(full) [ 72.493669][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 72.493678][ C0] Call Trace: [ 72.493683][ C0] [ 72.493689][ C0] dump_stack_lvl+0x100/0x190 [ 72.493712][ C0] __might_resched.cold+0x1ec/0x232 [ 72.493733][ C0] ? __pfx___might_resched+0x10/0x10 [ 72.493753][ C0] ? kfree_const+0x5f/0x70 [ 72.493770][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 72.493797][ C0] cancel_delayed_work_sync+0xb8/0xf0 [ 72.493820][ C0] mmc_free_host+0x19/0x30 [ 72.493835][ C0] vub300_inactivity_timer_expired+0x42f/0x550 [ 72.493865][ C0] call_timer_fn+0x19a/0x610 [ 72.493884][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 72.493905][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 72.493935][ C0] ? mark_held_locks+0x40/0x70 [ 72.493956][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 72.493979][ C0] __run_timers+0x757/0xb00 [ 72.494001][ C0] ? __pfx___run_timers+0x10/0x10 [ 72.494024][ C0] ? ktime_get+0x9f/0x320 [ 72.494042][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 72.494063][ C0] run_timer_base+0x114/0x190 [ 72.494081][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 72.494101][ C0] run_timer_softirq+0x1a/0x50 [ 72.494119][ C0] handle_softirqs+0x1ea/0x9b0 [ 72.494146][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 72.494166][ C0] ? _raw_spin_unlock+0x28/0x50 [ 72.494179][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 72.494196][ C0] __irq_exit_rcu+0x162/0x210 [ 72.494217][ C0] irq_exit_rcu+0x9/0x30 [ 72.494238][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 72.494257][ C0] [ 72.494262][ C0] [ 72.494269][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 72.494290][ C0] RIP: 0010:acct_collect+0x584/0x860 [ 72.494310][ C0] Code: 00 00 45 31 ed 49 be 00 00 00 00 00 fc ff df 48 89 04 24 eb 3a e8 dc c1 0b 00 49 8d 7f 08 48 89 fa 48 c1 ea 03 42 80 3c 32 00 <0f> 85 41 02 00 00 4c 89 f9 49 8b 57 08 48 c1 e9 03 42 80 3c 31 00 [ 72.494327][ C0] RSP: 0018:ffffc90004c47a28 EFLAGS: 00000246 [ 72.494343][ C0] RAX: 0000000000000000 RBX: ffff888029025700 RCX: ffffffff8bb3cef4 [ 72.494355][ C0] RDX: 1ffff1100fd096f1 RSI: ffffffff81fea304 RDI: ffff88807e84b788 [ 72.494366][ C0] RBP: ffff8880302fa540 R08: 0000000000000005 R09: 0000000000000000 [ 72.494377][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff92000988f4a [ 72.494388][ C0] R13: 0000000006a1b000 R14: dffffc0000000000 R15: ffff88807e84b780 [ 72.494405][ C0] ? mas_next_slot+0xa24/0x1960 [ 72.494429][ C0] ? acct_collect+0x574/0x860 [ 72.494449][ C0] ? acct_collect+0x574/0x860 [ 72.494470][ C0] ? __pfx_acct_collect+0x10/0x10 [ 72.494490][ C0] ? acct_update_integrals+0x3b4/0x470 [ 72.494512][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 72.494547][ C0] do_exit+0x1ade/0x2ae0 [ 72.494574][ C0] ? __pfx___might_resched+0x10/0x10 [ 72.494599][ C0] ? __pfx_do_exit+0x10/0x10 [ 72.494627][ C0] ? do_raw_spin_lock+0x128/0x260 [ 72.494653][ C0] ? find_held_lock+0x2b/0x80 [ 72.494670][ C0] ? get_signal+0x7e0/0x21e0 [ 72.494696][ C0] do_group_exit+0xd5/0x2a0 [ 72.494714][ C0] get_signal+0x1ec7/0x21e0 [ 72.494740][ C0] ? kick_process+0xf0/0x1a0 [ 72.494767][ C0] ? __pfx_get_signal+0x10/0x10 [ 72.494797][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 72.494819][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 72.494846][ C0] ? fput+0xd9/0x100 [ 72.494872][ C0] exit_to_user_mode_loop+0x139/0x6f0 [ 72.494896][ C0] ? rcu_is_watching+0x12/0xc0 [ 72.494932][ C0] do_syscall_64+0x666/0x870 [ 72.494953][ C0] ? clear_bhb_loop+0x40/0x90 [ 72.494975][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.494994][ C0] RIP: 0033:0x7f296b79e019 [ 72.495010][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.495026][ C0] RSP: 002b:00007f296c62a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.495044][ C0] RAX: fffffffffffffffc RBX: 00007f296ba26090 RCX: 00007f296b79e019 [ 72.495055][ C0] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000007 [ 72.495065][ C0] RBP: 00007f296b83500c R08: 0000000000000000 R09: 0000000000000000 [ 72.495076][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.495086][ C0] R13: 00007f296ba26128 R14: 00007f296ba26090 R15: 00007ffee9bda308 [ 72.495111][ C0] [ 72.495482][ C0] ODEBUG: object ffffc90000007a70 is NOT on stack ffffc90004c40000, but annotated. [ 72.496457][ C0] [ 72.496463][ C0] ====================================================== [ 72.496468][ C0] WARNING: possible circular locking dependency detected [ 72.496476][ C0] syzkaller #0 Tainted: G W [ 72.496486][ C0] ------------------------------------------------------ [ 72.496491][ C0] syz.2.9/5828 is trying to acquire lock: [ 72.496499][ C0] ffffffff8eaf4160 (console_owner){..-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 72.496545][ C0] [ 72.496545][ C0] but task is already holding lock: [ 72.496549][ C0] ffffffff9b97cd50 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0xec/0x3d0 [ 72.496590][ C0] [ 72.496590][ C0] which lock already depends on the new lock. [ 72.496590][ C0] [ 72.496595][ C0] [ 72.496595][ C0] the existing dependency chain (in reverse order) is: [ 72.496600][ C0] [ 72.496600][ C0] -> #3 (&obj_hash[i].lock){-.-.}-{2:2}: [ 72.496621][ C0] lock_acquire+0x1b9/0x370 [ 72.496639][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 72.496655][ C0] debug_object_assert_init+0x142/0x310 [ 72.496676][ C0] hrtimer_start_range_ns+0x4e/0x240 [ 72.496700][ C0] rpm_suspend+0x788/0x11a0 [ 72.496719][ C0] rpm_idle+0x60c/0x790 [ 72.496736][ C0] __pm_runtime_idle+0xba/0x1a0 [ 72.496756][ C0] __device_attach+0x37e/0x4d0 [ 72.496775][ C0] device_initial_probe+0xaf/0xd0 [ 72.496796][ C0] bus_probe_device+0x64/0x160 [ 72.496814][ C0] device_add+0x121d/0x1970 [ 72.496837][ C0] serdev_controller_add+0x93/0x650 [ 72.496854][ C0] serdev_tty_port_register+0x195/0x290 [ 72.496873][ C0] tty_port_register_device_attr_serdev+0x107/0x1d0 [ 72.496896][ C0] serial_core_register_port+0xcdf/0x16f0 [ 72.496918][ C0] serial8250_register_8250_port+0x15af/0x2330 [ 72.496942][ C0] serial_pnp_probe+0x436/0x930 [ 72.496958][ C0] pnp_device_probe+0x2b3/0x4a0 [ 72.496981][ C0] really_probe+0x241/0xa60 [ 72.497000][ C0] __driver_probe_device+0x20e/0x450 [ 72.497019][ C0] driver_probe_device+0x4a/0x140 [ 72.497039][ C0] __driver_attach+0x21f/0x5b0 [ 72.497058][ C0] bus_for_each_dev+0x13e/0x1d0 [ 72.497073][ C0] bus_add_driver+0x305/0x5b0 [ 72.497090][ C0] driver_register+0x1e2/0x360 [ 72.497111][ C0] serial8250_init+0xcc/0x1c0 [ 72.497132][ C0] do_one_initcall+0x11d/0x700 [ 72.497156][ C0] kernel_init_freeable+0x6ea/0x7b0 [ 72.497180][ C0] kernel_init+0x1f/0x1e0 [ 72.497203][ C0] ret_from_fork+0x72b/0xd50 [ 72.497225][ C0] ret_from_fork_asm+0x1a/0x30 [ 72.497248][ C0] [ 72.497248][ C0] -> #2 (&dev->power.lock){-...}-{3:3}: [ 72.497271][ C0] lock_acquire+0x1b9/0x370 [ 72.497290][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 72.497306][ C0] __pm_runtime_resume+0xa9/0x170 [ 72.497328][ C0] __uart_start+0x1b0/0x510 [ 72.497344][ C0] uart_write+0x211/0xb20 [ 72.497363][ C0] n_tty_write+0x431/0x1160 [ 72.497387][ C0] file_tty_write.isra.0+0x4d2/0x890 [ 72.497406][ C0] redirected_tty_write+0xd4/0x120 [ 72.497425][ C0] vfs_write+0x6ac/0x1050 [ 72.497451][ C0] ksys_write+0x12a/0x250 [ 72.497464][ C0] do_syscall_64+0x115/0x870 [ 72.497484][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.497501][ C0] [ 72.497501][ C0] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 72.497524][ C0] lock_acquire+0x1b9/0x370 [ 72.497544][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 72.497561][ C0] serial8250_console_write+0x177/0x1a50 [ 72.497586][ C0] console_flush_one_record+0x790/0xe50 [ 72.497613][ C0] console_unlock+0x103/0x260 [ 72.497637][ C0] vprintk_emit+0x407/0x6b0 [ 72.497661][ C0] _printk+0xcf/0x110 [ 72.497676][ C0] register_console.cold+0xc0/0x248 [ 72.497692][ C0] univ8250_console_init+0x6f/0x80 [ 72.497713][ C0] console_init+0x3d5/0x5b0 [ 72.497729][ C0] start_kernel+0x314/0x490 [ 72.497751][ C0] x86_64_start_reservations+0x24/0x30 [ 72.497776][ C0] x86_64_start_kernel+0x12b/0x130 [ 72.497799][ C0] common_startup_64+0x13e/0x158 [ 72.497825][ C0] [ 72.497825][ C0] -> #0 (console_owner){..-.}-{0:0}: [ 72.497847][ C0] check_prev_add+0xeb/0xe60 [ 72.497865][ C0] __lock_acquire+0x136c/0x1a40 [ 72.497884][ C0] lock_acquire+0x1b9/0x370 [ 72.497902][ C0] console_lock_spinning_enable+0x72/0x80 [ 72.497934][ C0] console_flush_one_record+0x739/0xe50 [ 72.497958][ C0] console_unlock+0x103/0x260 [ 72.497981][ C0] vprintk_emit+0x407/0x6b0 [ 72.498005][ C0] _printk+0xcf/0x110 [ 72.498018][ C0] lookup_object_or_alloc.part.0.cold+0x18/0x40 [ 72.498041][ C0] __debug_object_init+0x2a9/0x3d0 [ 72.498063][ C0] __synchronize_srcu+0x1c3/0x300 [ 72.498084][ C0] wakeup_source_unregister.part.0+0x12c/0x540 [ 72.498106][ C0] wakeup_source_unregister+0x1f/0x30 [ 72.498127][ C0] mmc_host_classdev_release+0x42/0x120 [ 72.498155][ C0] device_release+0xd2/0x270 [ 72.498169][ C0] kobject_put+0x1f7/0x640 [ 72.498192][ C0] put_device+0x1f/0x30 [ 72.498206][ C0] vub300_inactivity_timer_expired+0x42f/0x550 [ 72.498233][ C0] call_timer_fn+0x19a/0x610 [ 72.498250][ C0] __run_timers+0x757/0xb00 [ 72.498268][ C0] run_timer_base+0x114/0x190 [ 72.498286][ C0] run_timer_softirq+0x1a/0x50 [ 72.498305][ C0] handle_softirqs+0x1ea/0x9b0 [ 72.498326][ C0] __irq_exit_rcu+0x162/0x210 [ 72.498347][ C0] irq_exit_rcu+0x9/0x30 [ 72.498367][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 72.498386][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 72.498404][ C0] acct_collect+0x584/0x860 [ 72.498417][ C0] do_exit+0x1ade/0x2ae0 [ 72.498438][ C0] do_group_exit+0xd5/0x2a0 [ 72.498450][ C0] get_signal+0x1ec7/0x21e0 [ 72.498469][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 72.498484][ C0] exit_to_user_mode_loop+0x139/0x6f0 [ 72.498504][ C0] do_syscall_64+0x666/0x870 [ 72.498522][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.498537][ C0] [ 72.498537][ C0] other info that might help us debug this: [ 72.498537][ C0] [ 72.498542][ C0] Chain exists of: [ 72.498542][ C0] console_owner --> &dev->power.lock --> &obj_hash[i].lock [ 72.498542][ C0] [ 72.498566][ C0] Possible unsafe locking scenario: [ 72.498566][ C0] [ 72.498571][ C0] CPU0 CPU1 [ 72.498575][ C0] ---- ---- [ 72.498579][ C0] lock(&obj_hash[i].lock); [ 72.498590][ C0] lock(&dev->power.lock); [ 72.498601][ C0] lock(&obj_hash[i].lock); [ 72.498613][ C0] lock(console_owner); [ 72.498623][ C0] [ 72.498623][ C0] *** DEADLOCK *** [ 72.498623][ C0] [ 72.498627][ C0] 5 locks held by syz.2.9/5828: [ 72.498637][ C0] #0: ffff88801bc2a9f8 (&mm->mmap_lock){++++}-{4:4}, at: acct_collect+0x54f/0x860 [ 72.498676][ C0] #1: ffffc90000007ca0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11f/0x610 [ 72.498717][ C0] #2: ffffffff9b97cd50 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0xec/0x3d0 [ 72.498758][ C0] #3: ffffffff8ebd45a0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 72.498797][ C0] #4: ffffffff8ebd4618 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 72.498846][ C0] [ 72.498846][ C0] stack backtrace: [ 72.498858][ C0] CPU: 0 UID: 0 PID: 5828 Comm: syz.2.9 Tainted: G W syzkaller #0 PREEMPT(full) [ 72.498882][ C0] Tainted: [W]=WARN [ 72.498888][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 72.498898][ C0] Call Trace: [ 72.498904][ C0] [ 72.498911][ C0] dump_stack_lvl+0x100/0x190 [ 72.498950][ C0] print_circular_bug.cold+0x178/0x1c7 [ 72.498978][ C0] check_noncircular+0x146/0x160 [ 72.499000][ C0] check_prev_add+0xeb/0xe60 [ 72.499021][ C0] __lock_acquire+0x136c/0x1a40 [ 72.499045][ C0] lock_acquire+0x1b9/0x370 [ 72.499065][ C0] ? console_lock_spinning_enable+0x61/0x80 [ 72.499091][ C0] ? console_lock_spinning_enable+0x4a/0x80 [ 72.499118][ C0] console_lock_spinning_enable+0x72/0x80 [ 72.499141][ C0] ? console_lock_spinning_enable+0x61/0x80 [ 72.499163][ C0] console_flush_one_record+0x739/0xe50 [ 72.499191][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 72.499217][ C0] ? __lock_acquire+0xd5b/0x1a40 [ 72.499240][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 72.499259][ C0] console_unlock+0x103/0x260 [ 72.499284][ C0] ? __pfx_console_unlock+0x10/0x10 [ 72.499313][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 72.499336][ C0] ? _printk+0xcf/0x110 [ 72.499351][ C0] vprintk_emit+0x407/0x6b0 [ 72.499377][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 72.499403][ C0] _printk+0xcf/0x110 [ 72.499418][ C0] ? __pfx__printk+0x10/0x10 [ 72.499434][ C0] ? do_raw_spin_lock+0x128/0x260 [ 72.499460][ C0] lookup_object_or_alloc.part.0.cold+0x18/0x40 [ 72.499485][ C0] __debug_object_init+0x2a9/0x3d0 [ 72.499508][ C0] ? __pfx___debug_object_init+0x10/0x10 [ 72.499533][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 72.499555][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 72.499575][ C0] ? __init_swait_queue_head+0xca/0x150 [ 72.499602][ C0] __synchronize_srcu+0x1c3/0x300 [ 72.499625][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 72.499651][ C0] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 72.499672][ C0] ? synchronize_srcu+0xa8/0x380 [ 72.499696][ C0] wakeup_source_unregister.part.0+0x12c/0x540 [ 72.499720][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 72.499749][ C0] wakeup_source_unregister+0x1f/0x30 [ 72.499771][ C0] mmc_host_classdev_release+0x42/0x120 [ 72.499798][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 72.499824][ C0] device_release+0xd2/0x270 [ 72.499841][ C0] kobject_put+0x1f7/0x640 [ 72.499867][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 72.499895][ C0] put_device+0x1f/0x30 [ 72.499911][ C0] vub300_inactivity_timer_expired+0x42f/0x550 [ 72.499945][ C0] call_timer_fn+0x19a/0x610 [ 72.499963][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 72.499984][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 72.500011][ C0] ? mark_held_locks+0x40/0x70 [ 72.500033][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 72.500060][ C0] __run_timers+0x757/0xb00 [ 72.500082][ C0] ? __pfx___run_timers+0x10/0x10 [ 72.500105][ C0] ? ktime_get+0x9f/0x320 [ 72.500125][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 72.500145][ C0] run_timer_base+0x114/0x190 [ 72.500165][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 72.500187][ C0] run_timer_softirq+0x1a/0x50 [ 72.500207][ C0] handle_softirqs+0x1ea/0x9b0 [ 72.500230][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 72.500252][ C0] ? _raw_spin_unlock+0x28/0x50 [ 72.500269][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 72.500288][ C0] __irq_exit_rcu+0x162/0x210 [ 72.500311][ C0] irq_exit_rcu+0x9/0x30 [ 72.500333][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 72.500354][ C0] [ 72.500359][ C0] [ 72.500366][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 72.500386][ C0] RIP: 0010:acct_collect+0x584/0x860 [ 72.500404][ C0] Code: 00 00 45 31 ed 49 be 00 00 00 00 00 fc ff df 48 89 04 24 eb 3a e8 dc c1 0b 00 49 8d 7f 08 48 89 fa 48 c1 ea 03 42 80 3c 32 00 <0f> 85 41 02 00 00 4c 89 f9 49 8b 57 08 48 c1 e9 03 42 80 3c 31 00 [ 72.500421][ C0] RSP: 0018:ffffc90004c47a28 EFLAGS: 00000246 [ 72.500434][ C0] RAX: 0000000000000000 RBX: ffff888029025700 RCX: ffffffff8bb3cef4 [ 72.500446][ C0] RDX: 1ffff1100fd096f1 RSI: ffffffff81fea304 RDI: ffff88807e84b788 [ 72.500457][ C0] RBP: ffff8880302fa540 R08: 0000000000000005 R09: 0000000000000000 [ 72.500467][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff92000988f4a [ 72.500476][ C0] R13: 0000000006a1b000 R14: dffffc0000000000 R15: ffff88807e84b780 [ 72.500487][ C0] ? mas_next_slot+0xa24/0x1960 [ 72.500508][ C0] ? acct_collect+0x574/0x860 [ 72.500525][ C0] ? acct_collect+0x574/0x860 [ 72.500542][ C0] ? __pfx_acct_collect+0x10/0x10 [ 72.500560][ C0] ? acct_update_integrals+0x3b4/0x470 [ 72.500582][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 72.500607][ C0] do_exit+0x1ade/0x2ae0 [ 72.500632][ C0] ? __pfx___might_resched+0x10/0x10 [ 72.500655][ C0] ? __pfx_do_exit+0x10/0x10 [ 72.500681][ C0] ? do_raw_spin_lock+0x128/0x260 [ 72.500705][ C0] ? find_held_lock+0x2b/0x80 [ 72.500720][ C0] ? get_signal+0x7e0/0x21e0 [ 72.500743][ C0] do_group_exit+0xd5/0x2a0 [ 72.500760][ C0] get_signal+0x1ec7/0x21e0 [ 72.500781][ C0] ? kick_process+0xf0/0x1a0 [ 72.500803][ C0] ? __pfx_get_signal+0x10/0x10 [ 72.500827][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 72.500848][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 72.500869][ C0] ? fput+0xd9/0x100 [ 72.500890][ C0] exit_to_user_mode_loop+0x139/0x6f0 [ 72.500912][ C0] ? rcu_is_watching+0x12/0xc0 [ 72.500944][ C0] do_syscall_64+0x666/0x870 [ 72.500965][ C0] ? clear_bhb_loop+0x40/0x90 [ 72.500984][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.501002][ C0] RIP: 0033:0x7f296b79e019 [ 72.501016][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.501031][ C0] RSP: 002b:00007f296c62a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.501048][ C0] RAX: fffffffffffffffc RBX: 00007f296ba26090 RCX: 00007f296b79e019 [ 72.501059][ C0] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000007 [ 72.501069][ C0] RBP: 00007f296b83500c R08: 0000000000000000 R09: 0000000000000000 [ 72.501080][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.501090][ C0] R13: 00007f296ba26128 R14: 00007f296ba26090 R15: 00007ffee9bda308 [ 72.501105][ C0] [ 74.316743][ C0] ------------[ cut here ]------------ [ 74.322192][ C0] 1 [ 74.322201][ C0] WARNING: lib/debugobjects.c:672 at lookup_object_or_alloc.part.0.cold+0x19/0x40, CPU#0: syz.2.9/5828 [ 74.335603][ C0] Modules linked in: [ 74.339503][ C0] CPU: 0 UID: 0 PID: 5828 Comm: syz.2.9 Tainted: G W syzkaller #0 PREEMPT(full) [ 74.350099][ C0] Tainted: [W]=WARN [ 74.353891][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.363949][ C0] RIP: 0010:lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 74.370967][ C0] Code: c4 60 5b 5d 41 5c 41 5d 41 5e 41 5f e9 49 18 88 0a 83 c5 01 89 2d 20 43 57 1a 4c 89 e6 48 c7 c7 c0 31 40 8c e8 f1 ef eb ff 90 <0f> 0b 90 e9 d2 03 f1 03 83 c5 01 89 2d ff 42 57 1a 49 39 c4 73 da [ 74.390560][ C0] RSP: 0018:ffffc90000007900 EFLAGS: 00010086 [ 74.396615][ C0] RAX: 0000000000000050 RBX: ffff888025bed9a0 RCX: 0000000000000000 [ 74.404586][ C0] RDX: 0000000000000050 RSI: ffffffff81e8afd9 RDI: fffff52000000f11 [ 74.412544][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 74.420513][ C0] R10: 0000000000000101 R11: 0000000000000001 R12: ffffc90000007a70 [ 74.428469][ C0] R13: ffff8880302fa540 R14: 0000000000000001 R15: 0000000000000000 [ 74.436427][ C0] FS: 00007f296c62a6c0(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 74.445347][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.451918][ C0] CR2: 0000001b33123ffc CR3: 0000000029496000 CR4: 00000000003526f0 [ 74.459877][ C0] Call Trace: [ 74.463138][ C0] [ 74.465964][ C0] __debug_object_init+0x2a9/0x3d0 [ 74.471067][ C0] ? __pfx___debug_object_init+0x10/0x10 [ 74.476689][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 74.482051][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 74.487411][ C0] ? __init_swait_queue_head+0xca/0x150 [ 74.492961][ C0] __synchronize_srcu+0x1c3/0x300 [ 74.497977][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 74.503511][ C0] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 74.509058][ C0] ? synchronize_srcu+0xa8/0x380 [ 74.513985][ C0] wakeup_source_unregister.part.0+0x12c/0x540 [ 74.520146][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 74.526304][ C0] wakeup_source_unregister+0x1f/0x30 [ 74.531674][ C0] mmc_host_classdev_release+0x42/0x120 [ 74.537237][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 74.543405][ C0] device_release+0xd2/0x270 [ 74.548006][ C0] kobject_put+0x1f7/0x640 [ 74.552414][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 74.559081][ C0] put_device+0x1f/0x30 [ 74.563221][ C0] vub300_inactivity_timer_expired+0x42f/0x550 [ 74.569365][ C0] call_timer_fn+0x19a/0x610 [ 74.573937][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 74.579035][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 74.585704][ C0] ? mark_held_locks+0x40/0x70 [ 74.590458][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 74.597122][ C0] __run_timers+0x757/0xb00 [ 74.601613][ C0] ? __pfx___run_timers+0x10/0x10 [ 74.606624][ C0] ? ktime_get+0x9f/0x320 [ 74.610940][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 74.615950][ C0] run_timer_base+0x114/0x190 [ 74.620610][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 74.625794][ C0] run_timer_softirq+0x1a/0x50 [ 74.630539][ C0] handle_softirqs+0x1ea/0x9b0 [ 74.635327][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 74.640599][ C0] ? _raw_spin_unlock+0x28/0x50 [ 74.645455][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 74.651072][ C0] __irq_exit_rcu+0x162/0x210 [ 74.655736][ C0] irq_exit_rcu+0x9/0x30 [ 74.659963][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 74.665598][ C0] [ 74.668524][ C0] [ 74.671443][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 74.677407][ C0] RIP: 0010:acct_collect+0x584/0x860 [ 74.682695][ C0] Code: 00 00 45 31 ed 49 be 00 00 00 00 00 fc ff df 48 89 04 24 eb 3a e8 dc c1 0b 00 49 8d 7f 08 48 89 fa 48 c1 ea 03 42 80 3c 32 00 <0f> 85 41 02 00 00 4c 89 f9 49 8b 57 08 48 c1 e9 03 42 80 3c 31 00 [ 74.702293][ C0] RSP: 0018:ffffc90004c47a28 EFLAGS: 00000246 [ 74.708345][ C0] RAX: 0000000000000000 RBX: ffff888029025700 RCX: ffffffff8bb3cef4 [ 74.716297][ C0] RDX: 1ffff1100fd096f1 RSI: ffffffff81fea304 RDI: ffff88807e84b788 [ 74.724252][ C0] RBP: ffff8880302fa540 R08: 0000000000000005 R09: 0000000000000000 [ 74.732205][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff92000988f4a [ 74.740182][ C0] R13: 0000000006a1b000 R14: dffffc0000000000 R15: ffff88807e84b780 [ 74.748139][ C0] ? mas_next_slot+0xa24/0x1960 [ 74.752985][ C0] ? acct_collect+0x574/0x860 [ 74.757649][ C0] ? acct_collect+0x574/0x860 [ 74.762307][ C0] ? __pfx_acct_collect+0x10/0x10 [ 74.767314][ C0] ? acct_update_integrals+0x3b4/0x470 [ 74.772757][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 74.777948][ C0] do_exit+0x1ade/0x2ae0 [ 74.782181][ C0] ? __pfx___might_resched+0x10/0x10 [ 74.787456][ C0] ? __pfx_do_exit+0x10/0x10 [ 74.792038][ C0] ? do_raw_spin_lock+0x128/0x260 [ 74.797053][ C0] ? find_held_lock+0x2b/0x80 [ 74.801712][ C0] ? get_signal+0x7e0/0x21e0 [ 74.806330][ C0] do_group_exit+0xd5/0x2a0 [ 74.810818][ C0] get_signal+0x1ec7/0x21e0 [ 74.815320][ C0] ? kick_process+0xf0/0x1a0 [ 74.819897][ C0] ? __pfx_get_signal+0x10/0x10 [ 74.824824][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 74.830356][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 74.836498][ C0] ? fput+0xd9/0x100 [ 74.840381][ C0] exit_to_user_mode_loop+0x139/0x6f0 [ 74.845766][ C0] ? rcu_is_watching+0x12/0xc0 [ 74.850521][ C0] do_syscall_64+0x666/0x870 [ 74.855104][ C0] ? clear_bhb_loop+0x40/0x90 [ 74.859765][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.865642][ C0] RIP: 0033:0x7f296b79e019 [ 74.870061][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.889683][ C0] RSP: 002b:00007f296c62a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 74.898099][ C0] RAX: fffffffffffffffc RBX: 00007f296ba26090 RCX: 00007f296b79e019 [ 74.906054][ C0] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000007 [ 74.914023][ C0] RBP: 00007f296b83500c R08: 0000000000000000 R09: 0000000000000000 [ 74.921993][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.929948][ C0] R13: 00007f296ba26128 R14: 00007f296ba26090 R15: 00007ffee9bda308 [ 74.937907][ C0] [ 74.940926][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 74.948192][ C0] CPU: 0 UID: 0 PID: 5828 Comm: syz.2.9 Tainted: G W syzkaller #0 PREEMPT(full) [ 74.958777][ C0] Tainted: [W]=WARN [ 74.962565][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.972619][ C0] Call Trace: [ 74.975884][ C0] [ 74.978710][ C0] dump_stack_lvl+0x100/0x190 [ 74.983379][ C0] vpanic+0x552/0x970 [ 74.987347][ C0] ? __pfx_vpanic+0x10/0x10 [ 74.991858][ C0] ? lock_release+0x24d/0x310 [ 74.996527][ C0] panic+0xd1/0xe0 [ 75.000236][ C0] ? __pfx_panic+0x10/0x10 [ 75.004638][ C0] ? check_panic_on_warn+0x1f/0x90 [ 75.009733][ C0] check_panic_on_warn.cold+0x19/0x34 [ 75.015090][ C0] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 75.021579][ C0] __warn.cold+0x191/0x318 [ 75.026000][ C0] __report_bug+0x30f/0x440 [ 75.030498][ C0] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 75.036900][ C0] ? __pfx___report_bug+0x10/0x10 [ 75.041910][ C0] ? irq_work_queue+0xce/0x100 [ 75.046663][ C0] ? __wake_up_klogd+0xe2/0x140 [ 75.051503][ C0] ? vprintk_emit+0x1c9/0x6b0 [ 75.056175][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 75.061193][ C0] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 75.067595][ C0] report_bug+0xb2/0x220 [ 75.071827][ C0] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 75.078245][ C0] handle_bug+0x16a/0x2a0 [ 75.082566][ C0] exc_invalid_op+0x17/0x50 [ 75.087058][ C0] asm_exc_invalid_op+0x1a/0x20 [ 75.091895][ C0] RIP: 0010:lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 75.098907][ C0] Code: c4 60 5b 5d 41 5c 41 5d 41 5e 41 5f e9 49 18 88 0a 83 c5 01 89 2d 20 43 57 1a 4c 89 e6 48 c7 c7 c0 31 40 8c e8 f1 ef eb ff 90 <0f> 0b 90 e9 d2 03 f1 03 83 c5 01 89 2d ff 42 57 1a 49 39 c4 73 da [ 75.118499][ C0] RSP: 0018:ffffc90000007900 EFLAGS: 00010086 [ 75.124559][ C0] RAX: 0000000000000050 RBX: ffff888025bed9a0 RCX: 0000000000000000 [ 75.132514][ C0] RDX: 0000000000000050 RSI: ffffffff81e8afd9 RDI: fffff52000000f11 [ 75.140471][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 75.148441][ C0] R10: 0000000000000101 R11: 0000000000000001 R12: ffffc90000007a70 [ 75.156399][ C0] R13: ffff8880302fa540 R14: 0000000000000001 R15: 0000000000000000 [ 75.164359][ C0] ? vprintk_emit+0x1c9/0x6b0 [ 75.169034][ C0] __debug_object_init+0x2a9/0x3d0 [ 75.174151][ C0] ? __pfx___debug_object_init+0x10/0x10 [ 75.179772][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 75.185136][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 75.190517][ C0] ? __init_swait_queue_head+0xca/0x150 [ 75.196100][ C0] __synchronize_srcu+0x1c3/0x300 [ 75.201116][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 75.206675][ C0] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 75.212228][ C0] ? synchronize_srcu+0xa8/0x380 [ 75.217154][ C0] wakeup_source_unregister.part.0+0x12c/0x540 [ 75.223310][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 75.229458][ C0] wakeup_source_unregister+0x1f/0x30 [ 75.234818][ C0] mmc_host_classdev_release+0x42/0x120 [ 75.240356][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 75.246500][ C0] device_release+0xd2/0x270 [ 75.251087][ C0] kobject_put+0x1f7/0x640 [ 75.255496][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 75.262165][ C0] put_device+0x1f/0x30 [ 75.266305][ C0] vub300_inactivity_timer_expired+0x42f/0x550 [ 75.272450][ C0] call_timer_fn+0x19a/0x610 [ 75.277025][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 75.282121][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 75.288790][ C0] ? mark_held_locks+0x40/0x70 [ 75.293552][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 75.300248][ C0] __run_timers+0x757/0xb00 [ 75.304764][ C0] ? __pfx___run_timers+0x10/0x10 [ 75.309795][ C0] ? ktime_get+0x9f/0x320 [ 75.314116][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 75.319135][ C0] run_timer_base+0x114/0x190 [ 75.323799][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 75.328982][ C0] run_timer_softirq+0x1a/0x50 [ 75.333731][ C0] handle_softirqs+0x1ea/0x9b0 [ 75.338485][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 75.343756][ C0] ? _raw_spin_unlock+0x28/0x50 [ 75.348588][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 75.354204][ C0] __irq_exit_rcu+0x162/0x210 [ 75.358869][ C0] irq_exit_rcu+0x9/0x30 [ 75.363105][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 75.368724][ C0] [ 75.371640][ C0] [ 75.374554][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 75.380520][ C0] RIP: 0010:acct_collect+0x584/0x860 [ 75.385790][ C0] Code: 00 00 45 31 ed 49 be 00 00 00 00 00 fc ff df 48 89 04 24 eb 3a e8 dc c1 0b 00 49 8d 7f 08 48 89 fa 48 c1 ea 03 42 80 3c 32 00 <0f> 85 41 02 00 00 4c 89 f9 49 8b 57 08 48 c1 e9 03 42 80 3c 31 00 [ 75.405386][ C0] RSP: 0018:ffffc90004c47a28 EFLAGS: 00000246 [ 75.411444][ C0] RAX: 0000000000000000 RBX: ffff888029025700 RCX: ffffffff8bb3cef4 [ 75.419400][ C0] RDX: 1ffff1100fd096f1 RSI: ffffffff81fea304 RDI: ffff88807e84b788 [ 75.427366][ C0] RBP: ffff8880302fa540 R08: 0000000000000005 R09: 0000000000000000 [ 75.435321][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff92000988f4a [ 75.443276][ C0] R13: 0000000006a1b000 R14: dffffc0000000000 R15: ffff88807e84b780 [ 75.451238][ C0] ? mas_next_slot+0xa24/0x1960 [ 75.456090][ C0] ? acct_collect+0x574/0x860 [ 75.460753][ C0] ? acct_collect+0x574/0x860 [ 75.465417][ C0] ? __pfx_acct_collect+0x10/0x10 [ 75.470427][ C0] ? acct_update_integrals+0x3b4/0x470 [ 75.475898][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 75.481091][ C0] do_exit+0x1ade/0x2ae0 [ 75.485333][ C0] ? __pfx___might_resched+0x10/0x10 [ 75.490612][ C0] ? __pfx_do_exit+0x10/0x10 [ 75.495217][ C0] ? do_raw_spin_lock+0x128/0x260 [ 75.500411][ C0] ? find_held_lock+0x2b/0x80 [ 75.505078][ C0] ? get_signal+0x7e0/0x21e0 [ 75.509660][ C0] do_group_exit+0xd5/0x2a0 [ 75.514148][ C0] get_signal+0x1ec7/0x21e0 [ 75.518640][ C0] ? kick_process+0xf0/0x1a0 [ 75.523217][ C0] ? __pfx_get_signal+0x10/0x10 [ 75.528065][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 75.533598][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 75.539742][ C0] ? fput+0xd9/0x100 [ 75.543629][ C0] exit_to_user_mode_loop+0x139/0x6f0 [ 75.548990][ C0] ? rcu_is_watching+0x12/0xc0 [ 75.553744][ C0] do_syscall_64+0x666/0x870 [ 75.558320][ C0] ? clear_bhb_loop+0x40/0x90 [ 75.562980][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.568856][ C0] RIP: 0033:0x7f296b79e019 [ 75.573254][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.592847][ C0] RSP: 002b:00007f296c62a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.601255][ C0] RAX: fffffffffffffffc RBX: 00007f296ba26090 RCX: 00007f296b79e019 [ 75.609209][ C0] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000007 [ 75.617168][ C0] RBP: 00007f296b83500c R08: 0000000000000000 R09: 0000000000000000 [ 75.625137][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.633105][ C0] R13: 00007f296ba26128 R14: 00007f296ba26090 R15: 00007ffee9bda308 [ 75.641069][ C0] [ 75.644280][ C0] Kernel Offset: disabled [ 75.648578][ C0] Rebooting in 86400 seconds..