last executing test programs: 6.773369691s ago: executing program 3 (id=4): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000314050000000000000000000900020073797a300000000008004100727865000a0033007665746830000000"], 0x30}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4d2, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10) listen(r1, 0x1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4d2, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r2) close(r1) 6.218931816s ago: executing program 0 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff0000000705810200020007058202000200070583020002000705840200020007058602000200"], 0x0) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) ioctl(r0, 0xc0145608, &(0x7f0000000400)="03000000010000000100"/20) ioctl(r0, 0xc0405610, &(0x7f0000000500)="0100"/64) ioctl(r0, 0xc0145608, &(0x7f0000000b00)="00000000010000000100"/20) ioctl(r0, 0xc0145608, &(0x7f0000000600)="03000000010000000400"/20) ioctl(r0, 0xc058560f, &(0x7f0000000700)="0000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000500000000000000002c0100"/84) ioctl(r0, 0xc0145608, &(0x7f0000000b00)="00000000010000000400"/20) 5.936151139s ago: executing program 4 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='1\n\x00', 0x2) (async) r3 = fsopen(&(0x7f0000000180)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000300)='clientaddr\x00', &(0x7f0000000340)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000380)='vers\x00', &(0x7f00000003c0)='4.2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000400)='addr\x00', &(0x7f0000000440)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 5.715329397s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='+3\n\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='2049\n\x00', 0x5) 5.602718979s ago: executing program 1 (id=2): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300766574683000"/56], 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}}, {0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}}, r2, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{}, r2}}, 0x120) 4.581460407s ago: executing program 1 (id=8): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000300)={0x0, 0x1, 0x12, {0x12, 0x1, "000200000010582005109bc100000001"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)={0x84, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) nanosleep(&(0x7f0000000700)={0x1}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2) ioctl$USBDEVFS_RESET(r1, 0x5514) 4.572610331s ago: executing program 3 (id=9): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904000000ffffff00"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000100)={0x3}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='tps6598x 0x38\x00', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='tps6598x 0x38\x00', 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='tps6598x 0x38\x00', 0xe) 3.985122882s ago: executing program 4 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./upper\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./work\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./merge\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./lower/file\x00', 0x81c0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./merge\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './lower'}}, {@upperdir={'upperdir', 0x3d, './upper'}}, {@workdir={'workdir', 0x3d, './work'}}, {@index_on}, {@nfs_export_on}, {@uuid_on, 0x0}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./merge\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000300)='file\x00', &(0x7f0000000000)=@raw={0x40, 0x0, {'\x00'/64}}, &(0x7f0000000340), 0x0) close(r0) umount2(&(0x7f0000000380)='./merge\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./merge\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={[{@lowerdir={'lowerdir', 0x3d, './lower'}}, {@upperdir={'upperdir', 0x3d, './upper'}}, {@workdir={'workdir', 0x3d, './work'}}, {@index_on}, {@nfs_export_on}, {@uuid_on, 0x0}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./merge\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000000)=@raw={0x40, 0x0, {'\x00'/64}}, 0x0) 3.931262945s ago: executing program 2 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r0, &(0x7f0000000840)='0\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r1, &(0x7f0000000940)='0\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x2, 0x0) write(r2, &(0x7f0000000540)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f0000000440)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f00000000c0)='8\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000100)='./nfs_mnt\x00', &(0x7f0000000140)='nfs4\x00', 0x0, &(0x7f0000000180)='addr=127.0.0.1,port=2049,vers=4.2\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/clients/1/info\x00', 0x0, 0x0) read(r5, &(0x7f0000000300), 0x64) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/clients/2/info\x00', 0x0, 0x0) read(r6, &(0x7f0000000300), 0x64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/clients/3/info\x00', 0x0, 0x0) read(r7, &(0x7f0000000300), 0x64) 3.784279918s ago: executing program 0 (id=12): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000700)={0x1}, 0x0) 3.628910609s ago: executing program 4 (id=13): r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r0, 0x24, &(0x7f0000000400), 0x0) 3.555069581s ago: executing program 4 (id=14): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./img\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000200)="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", 0x5000) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='/dev/loop0,4096\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt\x00', 0x1ff) mount(&(0x7f0000000900)=@filename='mtd1\x00', &(0x7f0000000800)='./mnt\x00', &(0x7f0000000a00)='jffs2\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./mnt/test\x00', 0x42, 0x1ff) write(r3, &(0x7f0000000c00)='A', 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f0000000b00)='./mnt/test\x00', 0x0) 3.271883758s ago: executing program 4 (id=15): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x16, &(0x7f0000000200)={[{0x12, 0x4e00, "0000000a0000000000020100000102000000"}]}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 2.362571491s ago: executing program 2 (id=16): r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0) ftruncate(r0, 0x10000) pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008) pwrite64(r0, &(0x7f0000001020)="80000000800000000100000000100000000400000400000005000000", 0x1c, 0x2024) pwrite64(r0, &(0x7f0000001040)="00f0ffff00fcffff0c0000000a00000000000000000000000200000001000000", 0x20, 0x2048) pwrite64(r0, &(0x7f0000001060)="00080000000000000000000000040000200000000200000000000000", 0x1c, 0x2068) pwrite64(r0, &(0x7f0000001080)="0100000000000000", 0x8, 0x2088) pwrite64(r0, &(0x7f0000001090)="0d000000000400000004000001000000010000000100000001000000010000008000000080000000", 0x28, 0x2098) pwrite64(r0, &(0x7f00000010c0)="01000000640000006400000064000000", 0x10, 0x20c0) pwrite64(r0, &(0x7f00000010d0)="01", 0x1, 0x20d1) pwrite64(r0, &(0x7f00000011b0)="389d267c", 0x4, 0x24e0) pwrite64(r0, &(0x7f00000010e0)="54190100", 0x4, 0x2558) pwrite64(r0, &(0x7f00000010f0)="55020900", 0x4, 0x2804) pwrite64(r0, &(0x7f0000001100)="000000000100800080000000", 0xc, 0x280c) pwrite64(r0, &(0x7f0000001110)="01000000640000006400000064000000", 0x10, 0x2818) pwrite64(r0, &(0x7f0000001120)='\x00'/12, 0xc, 0x2828) pwrite64(r0, &(0x7f0000001130)="80000000a0000000c0000000e000000000010000", 0x14, 0x2854) pwrite64(r0, &(0x7f00000011a0)="04", 0x1, 0x28c0) pwrite64(r0, &(0x7f0000001150)="0000ffffffffffffffffffffffffffff", 0x10, 0x28e0) pwrite64(r0, &(0x7f0000001160)="ed410200", 0x4, 0x2d00) pwrite64(r0, &(0x7f0000001170)="0004000000000000", 0x8, 0x2d08) pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00', 0x4, 0x2d50) pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40302002e2e0000", 0x18, 0x3000) r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x1, &(0x7f0000005000)='ufstype=44bsd\x00') 2.251517413s ago: executing program 2 (id=17): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='1\n\x00', 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r2, &(0x7f0000000600)=@in={0x2, 0x801, @local}, 0x10) sendto(r2, &(0x7f0000000700)="80000050123456780000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000006000000010000000461626364000000047465737400000000", 0x54, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.957153106s ago: executing program 2 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000408612a41f0000000000010902200001010080fa0904000002ffffff000705020200020007058602000200"], &(0x7f0000000200)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}}) syz_usb_ep_read(r0, 0x2, 0x6, &(0x7f0000000300)=""/6) syz_usb_ep_write(r0, 0x86, 0x2, &(0x7f0000000300)='\x00\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='mem\x00', 0x4) 1.527503757s ago: executing program 2 (id=19): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='zstd\x00', 0x4) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r1, &(0x7f0000000000), 0x10000) r2 = eventfd(0x11111111) r3 = eventfd(0x22222222) r4 = eventfd(0x11111111) r5 = eventfd(0x22222222) r6 = eventfd(0x11111111) r7 = eventfd(0x22222222) r8 = eventfd(0x11111111) r9 = eventfd(0x22222222) read(r2, &(0x7f0000000008), 0x8) read(r3, &(0x7f0000000010), 0x8) read(r4, &(0x7f0000000018), 0x8) read(r5, &(0x7f0000000020), 0x8) read(r6, &(0x7f0000000028), 0x8) read(r7, &(0x7f0000000030), 0x8) read(r8, &(0x7f0000000038), 0x8) read(r9, &(0x7f0000000040), 0x8) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) 1.251017528s ago: executing program 32 (id=19): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='zstd\x00', 0x4) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r1, &(0x7f0000000000), 0x10000) r2 = eventfd(0x11111111) r3 = eventfd(0x22222222) r4 = eventfd(0x11111111) r5 = eventfd(0x22222222) r6 = eventfd(0x11111111) r7 = eventfd(0x22222222) r8 = eventfd(0x11111111) r9 = eventfd(0x22222222) read(r2, &(0x7f0000000008), 0x8) read(r3, &(0x7f0000000010), 0x8) read(r4, &(0x7f0000000018), 0x8) read(r5, &(0x7f0000000020), 0x8) read(r6, &(0x7f0000000028), 0x8) read(r7, &(0x7f0000000030), 0x8) read(r8, &(0x7f0000000038), 0x8) read(r9, &(0x7f0000000040), 0x8) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) 1.239677214s ago: executing program 1 (id=21): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x90, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x0, [], 0x1}, [@TCA_MQPRIO_MODE={0x6, 0x1, 0x1}]}}}]}, 0x90}}, 0x0) 1.197557037s ago: executing program 3 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/e1000/0000:00:04.0/net\x00', 0x90000, 0x0) 1.097644803s ago: executing program 1 (id=23): syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sh\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100)='#!/bin/sh\n/sbin/make-bcache -C /dev/loop0 && echo /dev/loop0 > /sys/fs/bcache/register\n\x00', 0x55) close(r0) execve(&(0x7f0000000000)='./sh\x00', &(0x7f0000000200)={[&(0x7f0000000000)]}, &(0x7f0000000300)) 1.057646748s ago: executing program 3 (id=24): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1000}]}}]}, 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f0000000a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000d00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000d40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000dc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000e00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000e80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000ec0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000f40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000f80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000001000)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001040)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001080)=[{&(0x7f00000010c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001100)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001140)=[{&(0x7f0000001180)='\x00', 0x1}], 0x1}}, {{&(0x7f00000011c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001200)=[{&(0x7f0000001240)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001280)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000001300)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001340)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001380)=[{&(0x7f00000013c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001400)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001440)=[{&(0x7f0000001480)='\x00', 0x1}], 0x1}}, {{&(0x7f00000014c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001500)=[{&(0x7f0000001540)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001580)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000001600)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001680)=[{&(0x7f00000016c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001740)=[{&(0x7f0000001780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000017c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001800)=[{&(0x7f0000001840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000001900)='\x00', 0x1}], 0x1}}], 0x14, 0x0) sendmmsg$inet(r0, &(0x7f0000001940)=[{{&(0x7f0000001e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001e80)=[{&(0x7f0000001ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002000)=[{&(0x7f0000002040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000020c0)=[{&(0x7f0000002100)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002140)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002180)=[{&(0x7f00000021c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002200)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002240)=[{&(0x7f0000002280)='\x00', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002300)=[{&(0x7f0000002340)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002380)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000002400)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002440)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002480)=[{&(0x7f00000024c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002500)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002540)=[{&(0x7f0000002580)='\x00', 0x1}], 0x1}}, {{&(0x7f00000025c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002640)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002680)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000026c0)=[{&(0x7f0000002700)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002740)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002780)=[{&(0x7f00000027c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002800)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002840)=[{&(0x7f0000002880)='\x00', 0x1}], 0x1}}, {{&(0x7f00000028c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002900)=[{&(0x7f0000002940)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002980)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000029c0)=[{&(0x7f0000002a00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002a80)=[{&(0x7f0000002ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002b40)=[{&(0x7f0000002b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002c00)=[{&(0x7f0000002c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002cc0)=[{&(0x7f0000002d00)='\x00', 0x1}], 0x1}}], 0x14, 0x0) sendmmsg$inet(r0, &(0x7f0000002d40)=[{{&(0x7f0000003240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003280)=[{&(0x7f00000032c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003340)=[{&(0x7f0000003380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000033c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003400)=[{&(0x7f0000003440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000034c0)=[{&(0x7f0000003500)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003540)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003580)=[{&(0x7f00000035c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003600)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003640)=[{&(0x7f0000003680)='\x00', 0x1}], 0x1}}, {{&(0x7f00000036c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003700)=[{&(0x7f0000003740)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003780)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000037c0)=[{&(0x7f0000003800)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003840)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003880)=[{&(0x7f00000038c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003900)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003940)=[{&(0x7f0000003980)='\x00', 0x1}], 0x1}}, {{&(0x7f00000039c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003a00)=[{&(0x7f0000003a40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003a80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003ac0)=[{&(0x7f0000003b00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003b40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003b80)=[{&(0x7f0000003bc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003c00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003c40)=[{&(0x7f0000003c80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003cc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003d00)=[{&(0x7f0000003d40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003d80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003dc0)=[{&(0x7f0000003e00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003e80)=[{&(0x7f0000003ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003f40)=[{&(0x7f0000003f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004000)=[{&(0x7f0000004040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000040c0)=[{&(0x7f0000004100)='\x00', 0x1}], 0x1}}], 0x14, 0x0) sendmmsg$inet(r0, &(0x7f0000004140)=[{{&(0x7f0000004640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004680)=[{&(0x7f00000046c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004740)=[{&(0x7f0000004780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000047c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004800)=[{&(0x7f0000004840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000048c0)=[{&(0x7f0000004900)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004940)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004980)=[{&(0x7f00000049c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004a00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004a40)=[{&(0x7f0000004a80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004ac0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004b00)=[{&(0x7f0000004b40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004b80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004bc0)=[{&(0x7f0000004c00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004c40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004c80)=[{&(0x7f0000004cc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004d00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004d40)=[{&(0x7f0000004d80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004dc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004e00)=[{&(0x7f0000004e40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004e80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004ec0)=[{&(0x7f0000004f00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004f40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004f80)=[{&(0x7f0000004fc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005000)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005040)=[{&(0x7f0000005080)='\x00', 0x1}], 0x1}}, {{&(0x7f00000050c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005100)=[{&(0x7f0000005140)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005180)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000051c0)=[{&(0x7f0000005200)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005280)=[{&(0x7f00000052c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005340)=[{&(0x7f0000005380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000053c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005400)=[{&(0x7f0000005440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000054c0)=[{&(0x7f0000005500)='\x00', 0x1}], 0x1}}], 0x14, 0x0) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000005a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005a80)=[{&(0x7f0000005ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005b40)=[{&(0x7f0000005b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005c00)=[{&(0x7f0000005c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005cc0)=[{&(0x7f0000005d00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005d40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005d80)=[{&(0x7f0000005dc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005e00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005e40)=[{&(0x7f0000005e80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005ec0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005f00)=[{&(0x7f0000005f40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005f80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005fc0)=[{&(0x7f0000006000)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006040)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006080)=[{&(0x7f00000060c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006100)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006140)=[{&(0x7f0000006180)='\x00', 0x1}], 0x1}}, {{&(0x7f00000061c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006200)=[{&(0x7f0000006240)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006280)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000062c0)=[{&(0x7f0000006300)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006340)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006380)=[{&(0x7f00000063c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006400)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006440)=[{&(0x7f0000006480)='\x00', 0x1}], 0x1}}, {{&(0x7f00000064c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006500)=[{&(0x7f0000006540)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006580)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000065c0)=[{&(0x7f0000006600)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006680)=[{&(0x7f00000066c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006740)=[{&(0x7f0000006780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000067c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006800)=[{&(0x7f0000006840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000068c0)=[{&(0x7f0000006900)='\x00', 0x1}], 0x1}}], 0x14, 0x0) sendmmsg$inet(r0, &(0x7f0000006940)=[{{&(0x7f0000006e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006e80)=[{&(0x7f0000006ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006f40)=[{&(0x7f0000006f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007000)=[{&(0x7f0000007040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000070c0)=[{&(0x7f0000007100)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007140)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007180)=[{&(0x7f00000071c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007200)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007240)=[{&(0x7f0000007280)='\x00', 0x1}], 0x1}}, {{&(0x7f00000072c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007300)=[{&(0x7f0000007340)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007380)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000073c0)=[{&(0x7f0000007400)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007440)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007480)=[{&(0x7f00000074c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007500)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007540)=[{&(0x7f0000007580)='\x00', 0x1}], 0x1}}, {{&(0x7f00000075c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007600)=[{&(0x7f0000007640)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007680)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000076c0)=[{&(0x7f0000007700)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007740)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007780)=[{&(0x7f00000077c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007800)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007840)=[{&(0x7f0000007880)='\x00', 0x1}], 0x1}}, {{&(0x7f00000078c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007900)=[{&(0x7f0000007940)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007980)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000079c0)=[{&(0x7f0000007a00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007a80)=[{&(0x7f0000007ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007b40)=[{&(0x7f0000007b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007c00)=[{&(0x7f0000007c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007cc0)=[{&(0x7f0000007d00)='\x00', 0x1}], 0x1}}], 0x14, 0x0) sendmmsg$inet(r0, &(0x7f0000007d40)=[{{&(0x7f0000008240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008280)=[{&(0x7f00000082c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008340)=[{&(0x7f0000008380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000083c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008400)=[{&(0x7f0000008440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000084c0)=[{&(0x7f0000008500)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008540)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008580)=[{&(0x7f00000085c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008600)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008640)=[{&(0x7f0000008680)='\x00', 0x1}], 0x1}}, {{&(0x7f00000086c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008700)=[{&(0x7f0000008740)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008780)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000087c0)=[{&(0x7f0000008800)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008840)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008880)=[{&(0x7f00000088c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008900)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008940)=[{&(0x7f0000008980)='\x00', 0x1}], 0x1}}, {{&(0x7f00000089c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008a00)=[{&(0x7f0000008a40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008a80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008ac0)=[{&(0x7f0000008b00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008b40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008b80)=[{&(0x7f0000008bc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008c00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008c40)=[{&(0x7f0000008c80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008cc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008d00)=[{&(0x7f0000008d40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008d80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008dc0)=[{&(0x7f0000008e00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008e80)=[{&(0x7f0000008ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008f40)=[{&(0x7f0000008f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009000)=[{&(0x7f0000009040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000090c0)=[{&(0x7f0000009100)='\x00', 0x1}], 0x1}}], 0x14, 0x0) sendmmsg$inet(r0, &(0x7f0000009140)=[{{&(0x7f0000009640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009680)=[{&(0x7f00000096c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009740)=[{&(0x7f0000009780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000097c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009800)=[{&(0x7f0000009840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000098c0)=[{&(0x7f0000009900)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009940)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009980)=[{&(0x7f00000099c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009a00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009a40)=[{&(0x7f0000009a80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009ac0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009b00)=[{&(0x7f0000009b40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009b80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009bc0)=[{&(0x7f0000009c00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009c40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009c80)=[{&(0x7f0000009cc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009d00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009d40)=[{&(0x7f0000009d80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009dc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009e00)=[{&(0x7f0000009e40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009e80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009ec0)=[{&(0x7f0000009f00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009f40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009f80)=[{&(0x7f0000009fc0)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a000)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a040)=[{&(0x7f000000a080)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a0c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a100)=[{&(0x7f000000a140)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a180)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a1c0)=[{&(0x7f000000a200)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a280)=[{&(0x7f000000a2c0)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a340)=[{&(0x7f000000a380)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a3c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a400)=[{&(0x7f000000a440)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a4c0)=[{&(0x7f000000a500)='\x00', 0x1}], 0x1}}], 0x14, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) sendto$inet(r0, &(0x7f0000000400)='\x00', 0x1, 0x0, &(0x7f0000000500)={0x2, 0x1234, @loopback}, 0x10) 917.2502ms ago: executing program 1 (id=25): r0 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000200)='\x00', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x1}, &(0x7f00000000c0)='\x00', 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000200)='\x00', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r2}, &(0x7f00000000c0)=""/67, 0x43, 0x0) 858.934989ms ago: executing program 0 (id=26): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) pwrite64(r0, &(0x7f0000000040)="fc4e2ba901000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000a000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000008000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b532ba900"/240, 0x100, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200), 0x1, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='md123\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='1.1\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md123/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='7:1\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md123/md/array_state\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='active\x00', 0x7) 748.729392ms ago: executing program 1 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000006000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000006000)='./sys\x00', &(0x7f0000006100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000006200)='./sys/module/psmouse/parameters/synaptics_intertouch\x00', 0x1, 0x0) write(r0, &(0x7f0000006300)='1\x00', 0x2) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000006400), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000006502)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f0000006500), 0x2) writev(r1, &(0x7f0000002000)=[{&(0x7f0000003000)="02fa", 0x2}, {&(0x7f0000003002)="0200", 0x2}, {&(0x7f0000003002), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003004)="0205", 0x2}, {&(0x7f0000003006)="0247", 0x2}, {&(0x7f0000003008)="0207", 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f000000300a)="02aa", 0x2}, {&(0x7f0000003002), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003004), 0x2}, {&(0x7f0000003006), 0x2}, {&(0x7f0000003008), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003002), 0x2}, {&(0x7f0000003002), 0x2}, {&(0x7f0000003002), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f000000300c)="02c0", 0x2}, {&(0x7f0000003002), 0x2}, {&(0x7f0000003002), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003002), 0x2}, {&(0x7f0000003002), 0x2}, {&(0x7f0000003002), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003002), 0x2}, {&(0x7f000000300e)="0240", 0x2}, {&(0x7f0000003002), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003000), 0x2}, {&(0x7f0000003002), 0x2}, {&(0x7f0000003002), 0x2}, {&(0x7f0000003002), 0x2}], 0x5f) nanosleep(&(0x7f0000006600)={0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000006700)='./sys/bus/serio/devices/serio0/protocol\x00', 0x1, 0x0) write(r2, &(0x7f0000006800)='bare\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000006710)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r3, &(0x7f0000006800)='bare\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000006720)='./sys/bus/serio/devices/serio2/protocol\x00', 0x1, 0x0) write(r4, &(0x7f0000006800)='bare\x00', 0x4) 593.532955ms ago: executing program 0 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x1, &(0x7f0000005000)='ufstype=44bsd\x00') 478.417384ms ago: executing program 4 (id=29): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040341278560000000000010902200001010080fa0904000002080650000705810200020007050202000200"], 0x0) syz_usb_disconnect(r0) 431.987784ms ago: executing program 0 (id=30): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], &(0x7f0000000100)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="010000000200000000000000"], 0x40) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000400)='\x00\x00\x00\x00', &(0x7f0000000500)=@tcp=r2}, 0x20) 169.455307ms ago: executing program 3 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)="012032313437343833363437203020302030206b7262352000303030303030303030303030303030303030303030303030303030303030313130303030303030303030303030303030303030303030303030303030303030303030303030300a00", 0x62) 156.712542ms ago: executing program 0 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/my_nullb\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/my_nullb/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nullb/my_nullb/power\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='1\x00', 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) pwrite64(r2, &(0x7f0000002000)='\x00'/4096, 0x1000, 0x0) pwrite64(r2, &(0x7f0000001000)='SFOZ', 0x4, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt\x00', 0x1ff) mount(&(0x7f0000000700)=@nullb, &(0x7f0000000800)='./mnt\x00', &(0x7f0000000900)='zonefs\x00', 0x0, 0x0) 0s ago: executing program 3 (id=33): unshare(0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1 1\x00', 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x8}}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.5' (ED25519) to the list of known hosts. [ 72.293281][ T30] audit: type=1400 audit(1785856563.539:129): avc: denied { mounton } for pid=5593 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 72.317548][ T30] audit: type=1400 audit(1785856563.559:130): avc: denied { mount } for pid=5593 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 72.321032][ T5593] cgroup: Unknown subsys name 'net' [ 72.347489][ T30] audit: type=1400 audit(1785856563.589:131): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 72.485158][ T5593] cgroup: Unknown subsys name 'cpuset' [ 72.493185][ T5593] cgroup: Unknown subsys name 'rlimit' [ 72.614141][ T30] audit: type=1400 audit(1785856563.859:132): avc: denied { setattr } for pid=5593 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.637584][ T30] audit: type=1400 audit(1785856563.859:133): avc: denied { create } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.659551][ T30] audit: type=1400 audit(1785856563.859:134): avc: denied { write } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.711658][ T30] audit: type=1400 audit(1785856563.859:135): avc: denied { read } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 72.743436][ T30] audit: type=1400 audit(1785856563.909:136): avc: denied { mounton } for pid=5593 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 72.768025][ T5595] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 72.768591][ T30] audit: type=1400 audit(1785856563.909:137): avc: denied { mount } for pid=5593 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 72.800579][ T30] audit: type=1400 audit(1785856564.029:138): avc: denied { relabelto } for pid=5595 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 73.740045][ T5593] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.891339][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.901207][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.911725][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.928045][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.936385][ T5613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.940629][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.945396][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.952448][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.959660][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.969079][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.973363][ T5613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.981505][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.987738][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.003342][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.005501][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.012700][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.018783][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.026091][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.034453][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.039662][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.047464][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.054111][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.059677][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.074056][ T5609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.081609][ T5609] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.552831][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.560778][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.568090][ T5616] bridge_slave_0: entered allmulticast mode [ 77.575018][ T5616] bridge_slave_0: entered promiscuous mode [ 77.593510][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.600658][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.608106][ T5616] bridge_slave_1: entered allmulticast mode [ 77.614895][ T5616] bridge_slave_1: entered promiscuous mode [ 77.712556][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.729227][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.736375][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.744333][ T5605] bridge_slave_0: entered allmulticast mode [ 77.751086][ T5605] bridge_slave_0: entered promiscuous mode [ 77.758681][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.765843][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.773080][ T5607] bridge_slave_0: entered allmulticast mode [ 77.780130][ T5607] bridge_slave_0: entered promiscuous mode [ 77.793843][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.811135][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.818427][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.825608][ T5605] bridge_slave_1: entered allmulticast mode [ 77.832595][ T5605] bridge_slave_1: entered promiscuous mode [ 77.839435][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.846525][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.853770][ T5607] bridge_slave_1: entered allmulticast mode [ 77.860663][ T5607] bridge_slave_1: entered promiscuous mode [ 77.884142][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.891252][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.898705][ T5608] bridge_slave_0: entered allmulticast mode [ 77.906264][ T5608] bridge_slave_0: entered promiscuous mode [ 77.946549][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.954184][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.961316][ T5608] bridge_slave_1: entered allmulticast mode [ 77.969400][ T5608] bridge_slave_1: entered promiscuous mode [ 77.990797][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.998078][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.005583][ T5606] bridge_slave_0: entered allmulticast mode [ 78.012597][ T5606] bridge_slave_0: entered promiscuous mode [ 78.021021][ T5616] team0: Port device team_slave_0 added [ 78.036611][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.047858][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.057511][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.064647][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.071759][ T5606] bridge_slave_1: entered allmulticast mode [ 78.078828][ T5606] bridge_slave_1: entered promiscuous mode [ 78.087742][ T5616] team0: Port device team_slave_1 added [ 78.102333][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.113542][ T5611] Bluetooth: hci1: command tx timeout [ 78.114431][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.122302][ T5611] Bluetooth: hci0: command tx timeout [ 78.128376][ T5613] Bluetooth: hci2: command tx timeout [ 78.157328][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.201084][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.202381][ T5611] Bluetooth: hci3: command tx timeout [ 78.210628][ T5613] Bluetooth: hci4: command tx timeout [ 78.244560][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.255211][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.262452][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.288375][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.311668][ T5605] team0: Port device team_slave_0 added [ 78.318905][ T5607] team0: Port device team_slave_0 added [ 78.326609][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.336681][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.343672][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.370094][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.382511][ T5608] team0: Port device team_slave_0 added [ 78.389471][ T5605] team0: Port device team_slave_1 added [ 78.404060][ T5607] team0: Port device team_slave_1 added [ 78.426312][ T5608] team0: Port device team_slave_1 added [ 78.459707][ T5606] team0: Port device team_slave_0 added [ 78.474496][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.481497][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.507474][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.528534][ T5606] team0: Port device team_slave_1 added [ 78.543704][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.550644][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.576794][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.589331][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.596431][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.622582][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.642302][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.649260][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.675276][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.694972][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.701999][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.727905][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.753396][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.760424][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.786494][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.818667][ T5616] hsr_slave_0: entered promiscuous mode [ 78.825008][ T5616] hsr_slave_1: entered promiscuous mode [ 78.837132][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.844229][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.871126][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.883695][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.890631][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.916745][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.984288][ T5605] hsr_slave_0: entered promiscuous mode [ 78.990436][ T5605] hsr_slave_1: entered promiscuous mode [ 78.996635][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 79.002963][ T5605] Cannot create hsr debugfs directory [ 79.021583][ T5608] hsr_slave_0: entered promiscuous mode [ 79.028485][ T5608] hsr_slave_1: entered promiscuous mode [ 79.034765][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 79.040490][ T5608] Cannot create hsr debugfs directory [ 79.088763][ T5607] hsr_slave_0: entered promiscuous mode [ 79.095784][ T5607] hsr_slave_1: entered promiscuous mode [ 79.101771][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 79.107730][ T5607] Cannot create hsr debugfs directory [ 79.176177][ T5606] hsr_slave_0: entered promiscuous mode [ 79.182618][ T5606] hsr_slave_1: entered promiscuous mode [ 79.188615][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 79.194381][ T5606] Cannot create hsr debugfs directory [ 79.584283][ T5616] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.598516][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.606377][ T5616] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.615974][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.624741][ T5616] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.633801][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.641700][ T5616] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.651172][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.711662][ T5606] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.721336][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.730089][ T5606] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.738875][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.747070][ T5606] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.756753][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.775746][ T5606] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.784516][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.848135][ T5605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.859105][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.867449][ T5605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.877010][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.891663][ T5605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.901349][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.909952][ T5605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.919803][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.011187][ T5608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.020917][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.029064][ T5608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.040187][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.057971][ T5608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.067924][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.076568][ T5608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.086565][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.129051][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.192563][ T5613] Bluetooth: hci0: command tx timeout [ 80.192700][ T5611] Bluetooth: hci1: command tx timeout [ 80.197991][ T5613] Bluetooth: hci2: command tx timeout [ 80.225812][ T5607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.235345][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.244297][ T5607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.254638][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.263282][ T5607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.271893][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.279168][ T5613] Bluetooth: hci4: command tx timeout [ 80.281850][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.285636][ T5613] Bluetooth: hci3: command tx timeout [ 80.304301][ T5607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.314704][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.330918][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.353510][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.361066][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.394169][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.401290][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.431405][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.448450][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.471917][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.479050][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.521177][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.528330][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.542554][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.571727][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.578900][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.601719][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.608855][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.628565][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.706018][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.734977][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.742138][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.775269][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.782472][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.842294][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.967068][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.007505][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.014673][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.051642][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.058815][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.641322][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.710451][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.834947][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.921116][ T5606] veth0_vlan: entered promiscuous mode [ 81.978005][ T5606] veth1_vlan: entered promiscuous mode [ 82.023459][ T5605] veth0_vlan: entered promiscuous mode [ 82.066327][ T5605] veth1_vlan: entered promiscuous mode [ 82.126703][ T5606] veth0_macvtap: entered promiscuous mode [ 82.158329][ T5606] veth1_macvtap: entered promiscuous mode [ 82.219579][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.258736][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.272935][ T5613] Bluetooth: hci1: command tx timeout [ 82.272960][ T5611] Bluetooth: hci0: command tx timeout [ 82.278349][ T5613] Bluetooth: hci2: command tx timeout [ 82.290086][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.311620][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.328797][ T5605] veth0_macvtap: entered promiscuous mode [ 82.340037][ T5605] veth1_macvtap: entered promiscuous mode [ 82.353240][ T5613] Bluetooth: hci4: command tx timeout [ 82.353295][ T5611] Bluetooth: hci3: command tx timeout [ 82.367505][ T5763] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.407227][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.449791][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.458262][ T5616] veth0_vlan: entered promiscuous mode [ 82.465490][ T5608] veth0_vlan: entered promiscuous mode [ 82.523214][ T364] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.534661][ T364] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.544952][ T5607] veth0_vlan: entered promiscuous mode [ 82.555297][ T5616] veth1_vlan: entered promiscuous mode [ 82.569681][ T5608] veth1_vlan: entered promiscuous mode [ 82.609716][ T5607] veth1_vlan: entered promiscuous mode [ 82.619721][ T112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.631950][ T112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.682558][ T112] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.714096][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.723786][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.740852][ T5607] veth0_macvtap: entered promiscuous mode [ 82.755716][ T5616] veth0_macvtap: entered promiscuous mode [ 82.768028][ T5607] veth1_macvtap: entered promiscuous mode [ 82.778447][ T364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.786430][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 82.786444][ T30] audit: type=1400 audit(1785856574.019:153): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.1Ty1d3/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 82.786802][ T5608] veth0_macvtap: entered promiscuous mode [ 82.794890][ T30] audit: type=1400 audit(1785856574.019:154): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 82.821848][ T5616] veth1_macvtap: entered promiscuous mode [ 82.823333][ T364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.862827][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.870379][ T30] audit: type=1400 audit(1785856574.019:155): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.1Ty1d3/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 82.896920][ T30] audit: type=1400 audit(1785856574.019:156): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 82.919767][ T30] audit: type=1400 audit(1785856574.109:157): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.1Ty1d3/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 82.927824][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.950880][ T30] audit: type=1400 audit(1785856574.109:158): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.1Ty1d3/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 82.957784][ T5608] veth1_macvtap: entered promiscuous mode [ 82.995365][ T30] audit: type=1400 audit(1785856574.109:159): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 83.006109][ T5606] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.016964][ T30] audit: type=1400 audit(1785856574.149:160): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 83.052576][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.054709][ T30] audit: type=1400 audit(1785856574.149:161): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="gadgetfs" ino=7665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 83.110630][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.115197][ T30] audit: type=1400 audit(1785856574.149:162): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 83.160717][ T112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.169852][ T364] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.190918][ T112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.211141][ T24] input: syz0 as /devices/virtual/misc/uhid/0003:17EF:6009.0001/input/input5 [ 83.213643][ T112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.256047][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.279626][ T24] lenovo 0003:17EF:6009.0001: input,hidraw0: USB HID v0.00 Mouse [syz0] on syz0 [ 83.339802][ T5618] udevd[5618]: Error opening device "/dev/input/event4": No such file or directory [ 83.347846][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.370684][ T5618] udevd[5618]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90010, key code 190): Inappropriate ioctl for device [ 83.412330][ T5618] udevd[5618]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90011, key code 148): Inappropriate ioctl for device [ 83.423179][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.440064][ T5618] udevd[5618]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90012, key code 152): Inappropriate ioctl for device [ 83.459763][ T5809] fido_id[5809]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 83.471423][ T5618] udevd[5618]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90013, key code 236): Inappropriate ioctl for device [ 83.495977][ T5618] udevd[5618]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90014, key code 238): Inappropriate ioctl for device [ 83.510707][ T364] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.510765][ T364] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.510809][ T364] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.510842][ T364] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.510876][ T364] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.510911][ T364] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.510945][ T364] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.510980][ T364] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.511013][ T364] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.528570][ T5618] udevd[5618]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90015, key code 212): Inappropriate ioctl for device [ 83.613492][ T5618] udevd[5618]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90016, key code 227): Inappropriate ioctl for device [ 83.628794][ T5618] udevd[5618]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90017, key code 191): Inappropriate ioctl for device [ 83.647434][ T5618] udevd[5618]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90019, key code 205): Inappropriate ioctl for device [ 83.690611][ T5814] loop0: detected capacity change from 0 to 128 [ 83.743865][ T112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.763439][ T112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.784969][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.785083][ T5814] ufs: ufs_fill_super(): bad magic number [ 83.805523][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.954327][ T5763] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.988846][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.006800][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.018555][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.028655][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.072077][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.094508][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.158996][ T5763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.188525][ T5763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.213770][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.232306][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.253536][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.276172][ T364] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.352282][ T5611] Bluetooth: hci2: command tx timeout [ 84.362669][ T5611] Bluetooth: hci0: command tx timeout [ 84.364259][ T5613] Bluetooth: hci1: command tx timeout [ 84.410832][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 84.426145][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 84.432897][ T5613] Bluetooth: hci4: command tx timeout [ 84.434405][ T5611] Bluetooth: hci3: command tx timeout [ 84.454810][ T10] usb 1-1: Product: syz [ 84.459296][ T10] usb 1-1: Manufacturer: syz [ 84.483743][ T5811] infiniband syz0: set active [ 84.496386][ T10] input: Samsung SUR40 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input6 [ 84.521365][ T5811] infiniband syz0: added veth0 [ 84.577221][ T5811] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 84.595103][ T5811] infiniband syz0: Couldn't open port 1 [ 84.619866][ T5811] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 84.635352][ T5811] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 84.655963][ T5811] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 84.703406][ T5811] RDS/IB: syz0: added [ 84.714936][ T5811] smc: adding ib device syz0 with port count 1 [ 84.721364][ T5811] smc: ib device syz0 port 1 has no pnetid [ 85.491863][ T5824] siw: device registration error -23 [ 85.754453][ T10] usb 1-1: USB disconnect, device number 2 [ 85.763045][ T5819] NFSD: Unable to initialize client recovery tracking! (-110) [ 85.771430][ T5819] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 85.786431][ T5819] NFSD: starting 90-second grace period (net f00003c6) [ 85.842245][ T4937] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 85.852330][ T5620] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 86.004481][ T4937] usb 2-1: not running at top speed; connect to a high speed hub [ 86.014289][ T5620] usb 4-1: not running at top speed; connect to a high speed hub [ 86.022136][ T4937] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 86.030540][ T4937] usb 2-1: config 0 has no interface number 0 [ 86.037507][ T4937] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 86.047195][ T4937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.056124][ T5620] usb 4-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 86.070955][ T4937] usb 2-1: config 0 descriptor?? [ 86.076513][ T5620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.123740][ T5620] i2c-tiny-usb 4-1:1.0: version 1.00 found at bus 004 address 002 [ 86.212946][ T4937] viperboard 2-1:0.143: version 0.00 found at bus 002 address 002 [ 86.265818][ T4937] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 86.282585][ T4937] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 86.428819][ T5838] overlayfs: failed to decode file handle (len=16, type=0, flags=0, err=-22) [ 86.466940][ T5847] i2c i2c-0: new_device: Instantiated device tps6598x at 0x38 [ 86.525484][ T29] cfg80211: failed to load regulatory.db [ 86.584160][ T5852] loop0: detected capacity change from 0 to 40 [ 86.622330][ T4937] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.655667][ T5855] MTDSB: Device #1 doesn't appear to exist [ 86.655667][ T5855] [ 86.676930][ T5852] ftl_cs: FTL header not found. [ 86.733415][ T5852] block2mtd: mtd1: [/dev/loop0] erase_size = 4KiB [4096] [ 86.778353][ T4937] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 86.795888][ T4937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.816445][ T4937] usb 1-1: probing VID:PID(0424:012C) [ 86.826454][ T4937] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 86.845551][ T4937] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 86.854419][ T4937] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 86.862025][ T4937] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 86.869636][ T4937] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 87.112990][ T5610] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.217957][ T4937] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 87.266005][ T5610] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 87.277003][ T5610] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.285269][ T5610] usb 5-1: Product: syz [ 87.289454][ T5610] usb 5-1: Manufacturer: syz [ 87.294772][ T5610] usb 5-1: SerialNumber: syz [ 87.402070][ T5716] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 87.419253][ T4937] usb 1-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 87.562412][ T5842] NFSD: Unable to initialize client recovery tracking! (-110) [ 87.570939][ T5842] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 87.580553][ T5842] NFSD: starting 90-second grace period (net f000041a) [ 87.811608][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 87.811624][ T30] audit: type=1400 audit(1785856579.049:196): avc: denied { mounton } for pid=5860 comm="syz.2.16" path="/2/mnt" dev="tmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 87.944638][ T5863] NFSD: Failed to start, no listeners configured. [ 88.099891][ T30] audit: type=1400 audit(1785856579.339:197): avc: denied { read } for pid=5607 comm="syz-executor" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 88.126528][ T30] audit: type=1400 audit(1785856579.339:198): avc: denied { open } for pid=5607 comm="syz-executor" path="/3/nfsd" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 88.147843][ T5607] audit: audit_backlog=65 > audit_backlog_limit=64 [ 88.150547][ T30] audit: type=1400 audit(1785856579.339:199): avc: denied { read } for pid=5607 comm="syz-executor" name="clients" dev="nfsd" ino=1048612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 88.167969][ T5607] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 88.177910][ T30] audit: type=1400 audit(1785856579.349:200): avc: denied { write } for pid=5607 comm="syz-executor" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 88.209971][ T5620] (null): error -EIO: failure setting delay to 10us [ 88.217705][ T5620] i2c-tiny-usb 4-1:1.0: probe with driver i2c-tiny-usb failed with error -5 [ 88.218141][ T5607] audit: backlog limit exceeded [ 88.229143][ T30] audit: type=1400 audit(1785856579.349:201): avc: denied { read } for pid=5607 comm="syz-executor" name="clients" dev="nfsd" ino=1048612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 88.247753][ T5607] audit: audit_backlog=65 > audit_backlog_limit=64 [ 88.635146][ T5620] usb 4-1: USB disconnect, device number 2 [ 88.656100][ T5805] usb 2-1: USB disconnect, device number 2 [ 88.691502][ T5716] usb 5-1: Service connection timeout for: 256 [ 88.698917][ T112] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.715813][ T5716] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 88.788527][ T5716] ath9k_htc: Failed to initialize the device [ 88.883888][ T5716] usb 5-1: ath9k_htc: USB layer deinitialized [ 88.980999][ T112] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.041355][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.058247][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.067682][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.083008][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.091970][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.127583][ T5804] usb 5-1: USB disconnect, device number 2 [ 89.137477][ T4937] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 89.194014][ T112] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.201745][ T5620] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 89.219561][ T4937] usb 1-1: USB disconnect, device number 3 [ 89.249064][ T5620] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 89.281536][ T5620] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 89.379239][ T112] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.427550][ T5884] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 89.586920][ T5894] /dev/loop0: Can't open blockdev [ 89.724329][ T5890] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input9 [ 89.780745][ T112] bridge_slave_1: left allmulticast mode [ 89.801263][ T112] bridge_slave_1: left promiscuous mode [ 89.825422][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.892702][ T112] bridge_slave_0: left allmulticast mode [ 89.916492][ T112] bridge_slave_0: left promiscuous mode [ 89.933772][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.982633][ T5716] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.988601][ T4937] USB vub300 remote SDIO host controller[0] now disconnected [ 90.133981][ T5908] null_blk: my_nullb: using native zone append [ 90.154850][ T5716] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 90.178853][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.192634][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:4487 [ 90.202702][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 112, name: kworker/u8:5 [ 90.210782][ T5716] usb-storage 5-1:1.0: USB Mass Storage device detected [ 90.211836][ C1] preempt_count: 101, expected: 0 [ 90.223845][ C1] RCU nest depth: 1, expected: 0 [ 90.228788][ C1] 6 locks held by kworker/u8:5/112: [ 90.234232][ C1] #0: ffff88801ce90940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 90.244678][ C1] #1: ffffc90002677d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 90.254670][ C1] #2: ffffffff90a875e8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 90.264062][ C1] #3: ffffffff90aa0200 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 90.273199][ C1] #4: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: atomic_notifier_call_chain+0x2f/0x1c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 90.283608][ C1] #5: ffffc90000a08ca0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11f/0x610 [ 90.294212][ C1] Preemption disabled at: [ 90.294225][ C1] [] preempt_schedule_notrace_thunk+0x16/0x30 [ 90.306250][ C1] CPU: 1 UID: 0 PID: 112 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 90.306282][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 90.306299][ C1] Workqueue: netns cleanup_net [ 90.306339][ C1] Call Trace: [ 90.306347][ C1] [ 90.306355][ C1] dump_stack_lvl+0x100/0x190 [ 90.306385][ C1] __might_resched.cold+0x1ec/0x232 [ 90.306415][ C1] ? __pfx___might_resched+0x10/0x10 [ 90.306445][ C1] ? kfree_const+0x5f/0x70 [ 90.306472][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 90.306516][ C1] cancel_delayed_work_sync+0xb8/0xf0 [ 90.306545][ C1] mmc_free_host+0x19/0x30 [ 90.306566][ C1] vub300_inactivity_timer_expired+0x42f/0x550 [ 90.306604][ C1] call_timer_fn+0x19a/0x610 [ 90.306633][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 90.306665][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 90.306703][ C1] ? mark_held_locks+0x40/0x70 [ 90.306732][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 90.306764][ C1] __run_timers+0x757/0xb00 [ 90.306796][ C1] ? __pfx___run_timers+0x10/0x10 [ 90.306831][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 90.306860][ C1] run_timer_base+0x114/0x190 [ 90.306887][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 90.306916][ C1] run_timer_softirq+0x1a/0x50 [ 90.306941][ C1] handle_softirqs+0x1ea/0x9b0 [ 90.306976][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 90.307003][ C1] ? _raw_spin_unlock+0x28/0x50 [ 90.307024][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 90.307044][ C1] __irq_exit_rcu+0x162/0x210 [ 90.307071][ C1] irq_exit_rcu+0x9/0x30 [ 90.307098][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 90.307124][ C1] [ 90.307130][ C1] [ 90.307137][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 90.307163][ C1] RIP: 0010:finish_task_switch.isra.0+0x2cd/0x10c0 [ 90.307193][ C1] Code: ab 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 8d 7f 48 e8 d0 25 e8 09 e8 ab b1 3c 00 fb 48 8d bb f8 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 90.307222][ C1] RSP: 0018:ffffc90002677308 EFLAGS: 00000206 [ 90.307242][ C1] RAX: 0000000000041e69 RBX: ffff88801f320000 RCX: 0000000000000040 [ 90.307257][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a8186 RDI: ffff88801f3216f8 [ 90.307272][ C1] RBP: ffffc90002677360 R08: 0000000000000001 R09: 0000000000000000 [ 90.307286][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888029948000 [ 90.307300][ C1] R13: 0000000000000000 R14: ffffffff9122baa4 R15: ffff8880b853b4c0 [ 90.307325][ C1] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 90.307364][ C1] __schedule+0x1264/0x6730 [ 90.307386][ C1] ? __queue_work+0x443/0x12b0 [ 90.307418][ C1] ? queue_work_on+0x11b/0x1e0 [ 90.307444][ C1] ? __pfx___schedule+0x10/0x10 [ 90.307466][ C1] ? addr_event.isra.0+0x396/0x560 [ 90.307503][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 90.307524][ C1] preempt_schedule_notrace+0x5f/0xd0 [ 90.307545][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 90.307569][ C1] ? notifier_call_chain+0x1c4/0x3f0 [ 90.307592][ C1] rcu_is_watching+0x8e/0xc0 [ 90.307626][ C1] notifier_call_chain+0x1d7/0x3f0 [ 90.307650][ C1] atomic_notifier_call_chain+0x71/0x1c0 [ 90.307674][ C1] addrconf_ifdown.isra.0+0xe85/0x1b70 [ 90.307698][ C1] ? trace_contention_end+0x126/0x160 [ 90.307725][ C1] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 90.307753][ C1] addrconf_notify+0x4a3/0x1ba0 [ 90.307777][ C1] ? __pfx_tls_dev_event+0x10/0x10 [ 90.307804][ C1] ? __pfx_addrconf_notify+0x10/0x10 [ 90.307826][ C1] ? ip6mr_device_event+0x1c4/0x230 [ 90.307851][ C1] notifier_call_chain+0x99/0x3f0 [ 90.307871][ C1] call_netdevice_notifiers_info+0xbe/0x110 [ 90.307905][ C1] netif_close_many+0x319/0x630 [ 90.307933][ C1] ? __pfx_netif_close_many+0x10/0x10 [ 90.307959][ C1] ? netif_close_many_and_unlock+0x1af/0x270 [ 90.307990][ C1] unregister_netdevice_many_notify+0x840/0x2140 [ 90.308023][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 90.308051][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 90.308082][ C1] ? mutex_is_locked+0x17/0x60 [ 90.308107][ C1] ? rtnl_is_locked+0x15/0x20 [ 90.308126][ C1] ops_undo_list+0x8ff/0xab0 [ 90.308154][ C1] ? __pfx_ops_undo_list+0x10/0x10 [ 90.308175][ C1] ? cleanup_net+0x332/0x920 [ 90.308200][ C1] ? idr_destroy+0x62/0x2e0 [ 90.308221][ C1] cleanup_net+0x499/0x920 [ 90.308249][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 90.308280][ C1] ? rcu_is_watching+0x12/0xc0 [ 90.308309][ C1] process_one_work+0xa23/0x1940 [ 90.308343][ C1] ? __pfx_process_one_work+0x10/0x10 [ 90.308371][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 90.308405][ C1] worker_thread+0x5ef/0xe50 [ 90.308440][ C1] ? kthread+0x13a/0x450 [ 90.308462][ C1] ? __pfx_worker_thread+0x10/0x10 [ 90.308493][ C1] kthread+0x370/0x450 [ 90.308513][ C1] ? __pfx_kthread+0x10/0x10 [ 90.308534][ C1] ret_from_fork+0x72b/0xd50 [ 90.308567][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 90.308600][ C1] ? __switch_to+0x800/0x10f0 [ 90.308641][ C1] ? __pfx_kthread+0x10/0x10 [ 90.308666][ C1] ret_from_fork_asm+0x1a/0x30 [ 90.308715][ C1] [ 90.309220][ C1] [ 90.817024][ C1] ============================= [ 90.821867][ C1] WARNING: suspicious RCU usage [ 90.826754][ C1] syzkaller #0 Tainted: G W [ 90.832755][ C1] ----------------------------- [ 90.837604][ C1] kernel/rcu/srcutree.c:1483 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 90.849616][ C1] [ 90.849616][ C1] other info that might help us debug this: [ 90.849616][ C1] [ 90.859870][ C1] [ 90.859870][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 90.867976][ C1] 6 locks held by kworker/u8:5/112: [ 90.873197][ C1] #0: ffff88801ce90940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 90.883629][ C1] #1: ffffc90002677d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 90.893616][ C1] #2: ffffffff90a875e8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 90.903026][ C1] #3: ffffffff90aa0200 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 90.912127][ C1] #4: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: atomic_notifier_call_chain+0x2f/0x1c0 [ 90.922567][ C1] #5: ffffc90000a08ca0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11f/0x610 [ 90.930077][ T5716] scsi host1: usb-storage 5-1:1.0 [ 90.933178][ C1] [ 90.933178][ C1] stack backtrace: [ 90.933196][ C1] CPU: 1 UID: 0 PID: 112 Comm: kworker/u8:5 Tainted: G W syzkaller #0 PREEMPT(full) [ 90.933224][ C1] Tainted: [W]=WARN [ 90.933231][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 90.933244][ C1] Workqueue: netns cleanup_net [ 90.933274][ C1] Call Trace: [ 90.933282][ C1] [ 90.933289][ C1] dump_stack_lvl+0x100/0x190 [ 90.933319][ C1] lockdep_rcu_suspicious.cold+0x4f/0xb1 [ 90.933358][ C1] __synchronize_srcu+0x29d/0x300 [ 90.933387][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 90.933426][ C1] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 90.933456][ C1] ? synchronize_srcu+0xa8/0x380 [ 90.933486][ C1] wakeup_source_unregister.part.0+0x12c/0x540 [ 90.933517][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 90.933554][ C1] wakeup_source_unregister+0x1f/0x30 [ 90.933582][ C1] mmc_host_classdev_release+0x42/0x120 [ 90.933617][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 90.933653][ C1] device_release+0xd2/0x270 [ 90.933675][ C1] kobject_put+0x1f7/0x640 [ 90.933710][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 90.933746][ C1] put_device+0x1f/0x30 [ 90.933766][ C1] vub300_inactivity_timer_expired+0x42f/0x550 [ 90.933802][ C1] call_timer_fn+0x19a/0x610 [ 90.933828][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 90.933857][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 90.933892][ C1] ? mark_held_locks+0x40/0x70 [ 90.933922][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 90.933962][ C1] __run_timers+0x757/0xb00 [ 90.933995][ C1] ? __pfx___run_timers+0x10/0x10 [ 90.934031][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 90.934059][ C1] run_timer_base+0x114/0x190 [ 90.934085][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 90.934114][ C1] run_timer_softirq+0x1a/0x50 [ 90.934139][ C1] handle_softirqs+0x1ea/0x9b0 [ 90.934173][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 90.934202][ C1] ? _raw_spin_unlock+0x28/0x50 [ 90.934223][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 90.934248][ C1] __irq_exit_rcu+0x162/0x210 [ 90.934276][ C1] irq_exit_rcu+0x9/0x30 [ 90.934302][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 90.934329][ C1] [ 90.934336][ C1] [ 90.934343][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 90.934368][ C1] RIP: 0010:finish_task_switch.isra.0+0x2cd/0x10c0 [ 90.934401][ C1] Code: ab 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 8d 7f 48 e8 d0 25 e8 09 e8 ab b1 3c 00 fb 48 8d bb f8 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 90.934422][ C1] RSP: 0018:ffffc90002677308 EFLAGS: 00000206 [ 90.934438][ C1] RAX: 0000000000041e69 RBX: ffff88801f320000 RCX: 0000000000000040 [ 90.934453][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a8186 RDI: ffff88801f3216f8 [ 90.934466][ C1] RBP: ffffc90002677360 R08: 0000000000000001 R09: 0000000000000000 [ 90.934479][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888029948000 [ 90.934492][ C1] R13: 0000000000000000 R14: ffffffff9122baa4 R15: ffff8880b853b4c0 [ 90.934520][ C1] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 90.934558][ C1] __schedule+0x1264/0x6730 [ 90.934581][ C1] ? __queue_work+0x443/0x12b0 [ 90.934615][ C1] ? queue_work_on+0x11b/0x1e0 [ 90.934641][ C1] ? __pfx___schedule+0x10/0x10 [ 90.934664][ C1] ? addr_event.isra.0+0x396/0x560 [ 90.934698][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 90.934723][ C1] preempt_schedule_notrace+0x5f/0xd0 [ 90.934751][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 90.934776][ C1] ? notifier_call_chain+0x1c4/0x3f0 [ 90.934799][ C1] rcu_is_watching+0x8e/0xc0 [ 90.934832][ C1] notifier_call_chain+0x1d7/0x3f0 [ 90.934859][ C1] atomic_notifier_call_chain+0x71/0x1c0 [ 90.934884][ C1] addrconf_ifdown.isra.0+0xe85/0x1b70 [ 90.934910][ C1] ? trace_contention_end+0x126/0x160 [ 90.934950][ C1] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 90.934988][ C1] addrconf_notify+0x4a3/0x1ba0 [ 90.935020][ C1] ? __pfx_tls_dev_event+0x10/0x10 [ 90.935054][ C1] ? __pfx_addrconf_notify+0x10/0x10 [ 90.935086][ C1] ? ip6mr_device_event+0x1c4/0x230 [ 90.935120][ C1] notifier_call_chain+0x99/0x3f0 [ 90.935146][ C1] call_netdevice_notifiers_info+0xbe/0x110 [ 90.935183][ C1] netif_close_many+0x319/0x630 [ 90.935220][ C1] ? __pfx_netif_close_many+0x10/0x10 [ 90.935255][ C1] ? netif_close_many_and_unlock+0x1af/0x270 [ 90.935293][ C1] unregister_netdevice_many_notify+0x840/0x2140 [ 90.935335][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 90.935366][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 90.935399][ C1] ? mutex_is_locked+0x17/0x60 [ 90.935426][ C1] ? rtnl_is_locked+0x15/0x20 [ 90.935450][ C1] ops_undo_list+0x8ff/0xab0 [ 90.935485][ C1] ? __pfx_ops_undo_list+0x10/0x10 [ 90.935513][ C1] ? cleanup_net+0x332/0x920 [ 90.935544][ C1] ? idr_destroy+0x62/0x2e0 [ 90.935570][ C1] cleanup_net+0x499/0x920 [ 90.935603][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 90.935638][ C1] ? rcu_is_watching+0x12/0xc0 [ 90.935676][ C1] process_one_work+0xa23/0x1940 [ 90.935710][ C1] ? __pfx_process_one_work+0x10/0x10 [ 90.935742][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 90.935776][ C1] worker_thread+0x5ef/0xe50 [ 90.935809][ C1] ? kthread+0x13a/0x450 [ 90.935829][ C1] ? __pfx_worker_thread+0x10/0x10 [ 90.935851][ C1] kthread+0x370/0x450 [ 90.935871][ C1] ? __pfx_kthread+0x10/0x10 [ 90.935894][ C1] ret_from_fork+0x72b/0xd50 [ 90.935932][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 90.935963][ C1] ? __switch_to+0x800/0x10f0 [ 90.935986][ C1] ? __pfx_kthread+0x10/0x10 [ 90.936009][ C1] ret_from_fork_asm+0x1a/0x30 [ 90.936054][ C1] [ 90.936085][ C1] ODEBUG: object ffffc90000a08a70 is NOT on stack ffffc90002670000, but annotated. [ 90.937558][ C1] [ 90.937565][ C1] ====================================================== [ 90.937572][ C1] WARNING: possible circular locking dependency detected [ 90.937581][ C1] syzkaller #0 Tainted: G W [ 90.937593][ C1] ------------------------------------------------------ [ 90.937599][ C1] kworker/u8:5/112 is trying to acquire lock: [ 90.937609][ C1] ffffffff8eaf4160 (console_owner){..-.}-{0:0}, at: vprintk_emit+0x4c0/0x6b0 [ 90.937669][ C1] [ 90.937669][ C1] but task is already holding lock: [ 90.937674][ C1] ffffffff9b9babe0 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0xec/0x3d0 [ 90.937726][ C1] [ 90.937726][ C1] which lock already depends on the new lock. [ 90.937726][ C1] [ 90.937732][ C1] [ 90.937732][ C1] the existing dependency chain (in reverse order) is: [ 90.937739][ C1] [ 90.937739][ C1] -> #3 (&obj_hash[i].lock){-.-.}-{2:2}: [ 90.937774][ C1] lock_acquire+0x1b9/0x370 [ 90.937798][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 90.937821][ C1] debug_object_assert_init+0x142/0x310 [ 90.937847][ C1] hrtimer_start_range_ns+0x4e/0x240 [ 90.937884][ C1] rpm_suspend+0x788/0x11a0 [ 90.937910][ C1] rpm_idle+0x60c/0x790 [ 90.937939][ C1] __pm_runtime_idle+0xba/0x1a0 [ 90.937964][ C1] __device_attach+0x37e/0x4d0 [ 90.937990][ C1] device_initial_probe+0xaf/0xd0 [ 90.938015][ C1] bus_probe_device+0x64/0x160 [ 90.938036][ C1] device_add+0x121d/0x1970 [ 90.938063][ C1] serdev_controller_add+0x93/0x650 [ 90.938084][ C1] serdev_tty_port_register+0x195/0x290 [ 90.938108][ C1] tty_port_register_device_attr_serdev+0x107/0x1d0 [ 90.938139][ C1] serial_core_register_port+0xcdf/0x16f0 [ 90.938166][ C1] serial8250_register_8250_port+0x15af/0x2330 [ 90.938187][ C1] serial_pnp_probe+0x436/0x930 [ 90.938206][ C1] pnp_device_probe+0x2b3/0x4a0 [ 90.938234][ C1] really_probe+0x241/0xa60 [ 90.938257][ C1] __driver_probe_device+0x20e/0x450 [ 90.938280][ C1] driver_probe_device+0x4a/0x140 [ 90.938301][ C1] __driver_attach+0x21f/0x5b0 [ 90.938320][ C1] bus_for_each_dev+0x13e/0x1d0 [ 90.938338][ C1] bus_add_driver+0x305/0x5b0 [ 90.938359][ C1] driver_register+0x1e2/0x360 [ 90.938382][ C1] serial8250_init+0xcc/0x1c0 [ 90.938413][ C1] do_one_initcall+0x11d/0x700 [ 90.938446][ C1] kernel_init_freeable+0x6ea/0x7b0 [ 90.938480][ C1] kernel_init+0x1f/0x1e0 [ 90.938512][ C1] ret_from_fork+0x72b/0xd50 [ 90.938533][ C1] ret_from_fork_asm+0x1a/0x30 [ 90.938558][ C1] [ 90.938558][ C1] -> #2 (&dev->power.lock){-...}-{3:3}: [ 90.938584][ C1] lock_acquire+0x1b9/0x370 [ 90.938609][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 90.938632][ C1] __pm_runtime_resume+0xa9/0x170 [ 90.938660][ C1] __uart_start+0x1b0/0x510 [ 90.938682][ C1] uart_write+0x211/0xb20 [ 90.938704][ C1] n_tty_write+0x431/0x1160 [ 90.938732][ C1] file_tty_write.isra.0+0x4d2/0x890 [ 90.938758][ C1] redirected_tty_write+0xd4/0x120 [ 90.938784][ C1] vfs_write+0x6ac/0x1050 [ 90.938813][ C1] ksys_write+0x12a/0x250 [ 90.938829][ C1] do_syscall_64+0x115/0x870 [ 90.938849][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.938871][ C1] [ 90.938871][ C1] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 90.938901][ C1] lock_acquire+0x1b9/0x370 [ 90.938934][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 90.938956][ C1] serial8250_console_write+0x177/0x1a50 [ 90.938991][ C1] console_flush_one_record+0x790/0xe50 [ 90.939024][ C1] console_unlock+0x103/0x260 [ 90.939053][ C1] vprintk_emit+0x407/0x6b0 [ 90.939085][ C1] _printk+0xcf/0x110 [ 90.939104][ C1] register_console.cold+0xc0/0x248 [ 90.939124][ C1] univ8250_console_init+0x6f/0x80 [ 90.939151][ C1] console_init+0x3d5/0x5b0 [ 90.939173][ C1] start_kernel+0x314/0x490 [ 90.939202][ C1] x86_64_start_reservations+0x24/0x30 [ 90.939235][ C1] x86_64_start_kernel+0x12b/0x130 [ 90.939267][ C1] common_startup_64+0x13e/0x158 [ 90.939301][ C1] [ 90.939301][ C1] -> #0 (console_owner){..-.}-{0:0}: [ 90.939331][ C1] check_prev_add+0xeb/0xe60 [ 90.939355][ C1] __lock_acquire+0x136c/0x1a40 [ 90.939381][ C1] lock_acquire+0x1b9/0x370 [ 90.939404][ C1] vprintk_emit+0x4d1/0x6b0 [ 90.939435][ C1] _printk+0xcf/0x110 [ 90.939454][ C1] lookup_object_or_alloc.part.0.cold+0x18/0x40 [ 90.939483][ C1] __debug_object_init+0x2a9/0x3d0 [ 90.939510][ C1] __synchronize_srcu+0x1c3/0x300 [ 90.939540][ C1] wakeup_source_unregister.part.0+0x12c/0x540 [ 90.939570][ C1] wakeup_source_unregister+0x1f/0x30 [ 90.939598][ C1] mmc_host_classdev_release+0x42/0x120 [ 90.939630][ C1] device_release+0xd2/0x270 [ 90.939650][ C1] kobject_put+0x1f7/0x640 [ 90.939681][ C1] put_device+0x1f/0x30 [ 90.939700][ C1] vub300_inactivity_timer_expired+0x42f/0x550 [ 90.939735][ C1] call_timer_fn+0x19a/0x610 [ 90.939758][ C1] __run_timers+0x757/0xb00 [ 90.939781][ C1] run_timer_base+0x114/0x190 [ 90.939806][ C1] run_timer_softirq+0x1a/0x50 [ 90.939830][ C1] handle_softirqs+0x1ea/0x9b0 [ 90.939858][ C1] __irq_exit_rcu+0x162/0x210 [ 90.939885][ C1] irq_exit_rcu+0x9/0x30 [ 90.939912][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 90.939944][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 90.939968][ C1] finish_task_switch.isra.0+0x2cd/0x10c0 [ 90.939998][ C1] __schedule+0x1264/0x6730 [ 90.940020][ C1] preempt_schedule_notrace+0x5f/0xd0 [ 90.940045][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 90.940068][ C1] rcu_is_watching+0x8e/0xc0 [ 90.940100][ C1] notifier_call_chain+0x1d7/0x3f0 [ 90.940121][ C1] atomic_notifier_call_chain+0x71/0x1c0 [ 90.940144][ C1] addrconf_ifdown.isra.0+0xe85/0x1b70 [ 90.940170][ C1] addrconf_notify+0x4a3/0x1ba0 [ 90.940198][ C1] notifier_call_chain+0x99/0x3f0 [ 90.940217][ C1] call_netdevice_notifiers_info+0xbe/0x110 [ 90.940252][ C1] netif_close_many+0x319/0x630 [ 90.940282][ C1] unregister_netdevice_many_notify+0x840/0x2140 [ 90.940314][ C1] ops_undo_list+0x8ff/0xab0 [ 90.940342][ C1] cleanup_net+0x499/0x920 [ 90.940371][ C1] process_one_work+0xa23/0x1940 [ 90.940394][ C1] worker_thread+0x5ef/0xe50 [ 90.940416][ C1] kthread+0x370/0x450 [ 90.940434][ C1] ret_from_fork+0x72b/0xd50 [ 90.940462][ C1] ret_from_fork_asm+0x1a/0x30 [ 90.940493][ C1] [ 90.940493][ C1] other info that might help us debug this: [ 90.940493][ C1] [ 90.940500][ C1] Chain exists of: [ 90.940500][ C1] console_owner --> &dev->power.lock --> &obj_hash[i].lock [ 90.940500][ C1] [ 90.940535][ C1] Possible unsafe locking scenario: [ 90.940535][ C1] [ 90.940541][ C1] CPU0 CPU1 [ 90.940547][ C1] ---- ---- [ 90.940553][ C1] lock(&obj_hash[i].lock); [ 90.940567][ C1] lock(&dev->power.lock); [ 90.940583][ C1] lock(&obj_hash[i].lock); [ 90.940599][ C1] lock(console_owner); [ 90.940613][ C1] [ 90.940613][ C1] *** DEADLOCK *** [ 90.940613][ C1] [ 90.940618][ C1] 7 locks held by kworker/u8:5/112: [ 90.940631][ C1] #0: ffff88801ce90940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 90.940686][ C1] #1: ffffc90002677d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 90.940742][ C1] #2: ffffffff90a875e8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 90.940805][ C1] #3: ffffffff90aa0200 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 90.940864][ C1] #4: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: atomic_notifier_call_chain+0x2f/0x1c0 [ 90.940918][ C1] #5: ffffc90000a08ca0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11f/0x610 [ 90.940977][ C1] #6: ffffffff9b9babe0 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0xec/0x3d0 [ 90.941036][ C1] [ 90.941036][ C1] stack backtrace: [ 90.941049][ C1] CPU: 1 UID: 0 PID: 112 Comm: kworker/u8:5 Tainted: G W syzkaller #0 PREEMPT(full) [ 90.941083][ C1] Tainted: [W]=WARN [ 90.941090][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 90.941106][ C1] Workqueue: netns cleanup_net [ 90.941137][ C1] Call Trace: [ 90.941144][ C1] [ 90.941153][ C1] dump_stack_lvl+0x100/0x190 [ 90.941179][ C1] print_circular_bug.cold+0x178/0x1c7 [ 90.941215][ C1] check_noncircular+0x146/0x160 [ 90.941245][ C1] check_prev_add+0xeb/0xe60 [ 90.941273][ C1] __lock_acquire+0x136c/0x1a40 [ 90.941306][ C1] lock_acquire+0x1b9/0x370 [ 90.941333][ C1] ? vprintk_emit+0x4c0/0x6b0 [ 90.941368][ C1] ? vprintk_emit+0x4ae/0x6b0 [ 90.941405][ C1] vprintk_emit+0x4d1/0x6b0 [ 90.941439][ C1] ? vprintk_emit+0x4c0/0x6b0 [ 90.941473][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 90.941511][ C1] _printk+0xcf/0x110 [ 90.941531][ C1] ? __pfx__printk+0x10/0x10 [ 90.941551][ C1] ? lock_acquire+0x1b9/0x370 [ 90.941578][ C1] ? find_held_lock+0x2b/0x80 [ 90.941597][ C1] ? lookup_object_or_alloc.part.0+0xbd/0x4f0 [ 90.941629][ C1] ? lookup_object_or_alloc.part.0+0xbd/0x4f0 [ 90.941665][ C1] lookup_object_or_alloc.part.0.cold+0x18/0x40 [ 90.941697][ C1] __debug_object_init+0x2a9/0x3d0 [ 90.941729][ C1] ? __pfx___debug_object_init+0x10/0x10 [ 90.941761][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 90.941790][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 90.941818][ C1] ? __init_swait_queue_head+0xca/0x150 [ 90.941852][ C1] __synchronize_srcu+0x1c3/0x300 [ 90.941882][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 90.941917][ C1] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 90.941953][ C1] ? synchronize_srcu+0xa8/0x380 [ 90.941985][ C1] wakeup_source_unregister.part.0+0x12c/0x540 [ 90.942017][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 90.942054][ C1] wakeup_source_unregister+0x1f/0x30 [ 90.942083][ C1] mmc_host_classdev_release+0x42/0x120 [ 90.942119][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 90.942158][ C1] device_release+0xd2/0x270 [ 90.942177][ C1] kobject_put+0x1f7/0x640 [ 90.942206][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 90.942237][ C1] put_device+0x1f/0x30 [ 90.942256][ C1] vub300_inactivity_timer_expired+0x42f/0x550 [ 90.942291][ C1] call_timer_fn+0x19a/0x610 [ 90.942317][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 90.942345][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 90.942382][ C1] ? mark_held_locks+0x40/0x70 [ 90.942411][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 90.942446][ C1] __run_timers+0x757/0xb00 [ 90.942475][ C1] ? __pfx___run_timers+0x10/0x10 [ 90.942506][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 90.942530][ C1] run_timer_base+0x114/0x190 [ 90.942556][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 90.942584][ C1] run_timer_softirq+0x1a/0x50 [ 90.942611][ C1] handle_softirqs+0x1ea/0x9b0 [ 90.942643][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 90.942673][ C1] ? _raw_spin_unlock+0x28/0x50 [ 90.942695][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 90.942719][ C1] __irq_exit_rcu+0x162/0x210 [ 90.942748][ C1] irq_exit_rcu+0x9/0x30 [ 90.942776][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 90.942803][ C1] [ 90.942811][ C1] [ 90.942818][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 90.942846][ C1] RIP: 0010:finish_task_switch.isra.0+0x2cd/0x10c0 [ 90.942881][ C1] Code: ab 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 8d 7f 48 e8 d0 25 e8 09 e8 ab b1 3c 00 fb 48 8d bb f8 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 90.942902][ C1] RSP: 0018:ffffc90002677308 EFLAGS: 00000206 [ 90.942920][ C1] RAX: 0000000000041e69 RBX: ffff88801f320000 RCX: 0000000000000040 [ 90.942942][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a8186 RDI: ffff88801f3216f8 [ 90.942957][ C1] RBP: ffffc90002677360 R08: 0000000000000001 R09: 0000000000000000 [ 90.942972][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888029948000 [ 90.942987][ C1] R13: 0000000000000000 R14: ffffffff9122baa4 R15: ffff8880b853b4c0 [ 90.943011][ C1] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 90.943047][ C1] __schedule+0x1264/0x6730 [ 90.943072][ C1] ? __queue_work+0x443/0x12b0 [ 90.943102][ C1] ? queue_work_on+0x11b/0x1e0 [ 90.943128][ C1] ? __pfx___schedule+0x10/0x10 [ 90.943152][ C1] ? addr_event.isra.0+0x396/0x560 [ 90.943186][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 90.943212][ C1] preempt_schedule_notrace+0x5f/0xd0 [ 90.943239][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 90.943264][ C1] ? notifier_call_chain+0x1c4/0x3f0 [ 90.943287][ C1] rcu_is_watching+0x8e/0xc0 [ 90.943319][ C1] notifier_call_chain+0x1d7/0x3f0 [ 90.943344][ C1] atomic_notifier_call_chain+0x71/0x1c0 [ 90.943369][ C1] addrconf_ifdown.isra.0+0xe85/0x1b70 [ 90.943397][ C1] ? trace_contention_end+0x126/0x160 [ 90.943430][ C1] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 90.943463][ C1] addrconf_notify+0x4a3/0x1ba0 [ 90.943495][ C1] ? __pfx_tls_dev_event+0x10/0x10 [ 90.943528][ C1] ? __pfx_addrconf_notify+0x10/0x10 [ 90.943559][ C1] ? ip6mr_device_event+0x1c4/0x230 [ 90.943591][ C1] notifier_call_chain+0x99/0x3f0 [ 90.943616][ C1] call_netdevice_notifiers_info+0xbe/0x110 [ 90.943652][ C1] netif_close_many+0x319/0x630 [ 90.943688][ C1] ? __pfx_netif_close_many+0x10/0x10 [ 90.943723][ C1] ? netif_close_many_and_unlock+0x1af/0x270 [ 90.943761][ C1] unregister_netdevice_many_notify+0x840/0x2140 [ 90.943799][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 90.943832][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 90.943862][ C1] ? mutex_is_locked+0x17/0x60 [ 90.943891][ C1] ? rtnl_is_locked+0x15/0x20 [ 90.943915][ C1] ops_undo_list+0x8ff/0xab0 [ 90.943953][ C1] ? __pfx_ops_undo_list+0x10/0x10 [ 90.943983][ C1] ? cleanup_net+0x332/0x920 [ 90.944014][ C1] ? idr_destroy+0x62/0x2e0 [ 90.944038][ C1] cleanup_net+0x499/0x920 [ 90.944070][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 90.944105][ C1] ? rcu_is_watching+0x12/0xc0 [ 90.944140][ C1] process_one_work+0xa23/0x1940 [ 90.944170][ C1] ? __pfx_process_one_work+0x10/0x10 [ 90.944199][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 90.944232][ C1] worker_thread+0x5ef/0xe50 [ 90.944260][ C1] ? kthread+0x13a/0x450 [ 90.944281][ C1] ? __pfx_worker_thread+0x10/0x10 [ 90.944304][ C1] kthread+0x370/0x450 [ 90.944325][ C1] ? __pfx_kthread+0x10/0x10 [ 90.944348][ C1] ret_from_fork+0x72b/0xd50 [ 90.944380][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 90.944412][ C1] ? __switch_to+0x800/0x10f0 [ 90.944435][ C1] ? __pfx_kthread+0x10/0x10 [ 90.944457][ C1] ret_from_fork_asm+0x1a/0x30 [ 90.944495][ C1] [ 90.969581][ T5716] usb 5-1: USB disconnect, device number 3 [ 90.975761][ C1] ------------[ cut here ]------------ [ 92.993329][ C1] 1 [ 92.993340][ C1] WARNING: lib/debugobjects.c:672 at lookup_object_or_alloc.part.0.cold+0x19/0x40, CPU#1: kworker/u8:5/112 [ 93.007112][ C1] Modules linked in: [ 93.010999][ C1] CPU: 1 UID: 0 PID: 112 Comm: kworker/u8:5 Tainted: G W syzkaller #0 PREEMPT(full) [ 93.021927][ C1] Tainted: [W]=WARN [ 93.025706][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 93.035744][ C1] Workqueue: netns cleanup_net [ 93.040504][ C1] RIP: 0010:lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 93.047519][ C1] Code: c4 60 5b 5d 41 5c 41 5d 41 5e 41 5f e9 49 18 88 0a 83 c5 01 89 2d 20 43 57 1a 4c 89 e6 48 c7 c7 c0 31 40 8c e8 f1 ef eb ff 90 <0f> 0b 90 e9 d2 03 f1 03 83 c5 01 89 2d ff 42 57 1a 49 39 c4 73 da [ 93.067111][ C1] RSP: 0018:ffffc90000a08900 EFLAGS: 00010086 [ 93.073164][ C1] RAX: 0000000000000050 RBX: ffff8880365260a8 RCX: 0000000000000000 [ 93.081116][ C1] RDX: 0000000000000050 RSI: ffffffff81e8afd9 RDI: fffff52000141111 [ 93.089069][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 93.097022][ C1] R10: 0000000000000102 R11: 205d314320202020 R12: ffffc90000a08a70 [ 93.104977][ C1] R13: ffff88801f320000 R14: 0000000000000001 R15: 0000000000000000 [ 93.112932][ C1] FS: 0000000000000000(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 93.121849][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.128438][ C1] CR2: 0000200000001000 CR3: 000000000e994000 CR4: 00000000003526f0 [ 93.136395][ C1] Call Trace: [ 93.139656][ C1] [ 93.142483][ C1] __debug_object_init+0x2a9/0x3d0 [ 93.147594][ C1] ? __pfx___debug_object_init+0x10/0x10 [ 93.153228][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 93.158591][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 93.163955][ C1] ? __init_swait_queue_head+0xca/0x150 [ 93.169493][ C1] __synchronize_srcu+0x1c3/0x300 [ 93.174507][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 93.180045][ C1] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 93.185587][ C1] ? synchronize_srcu+0xa8/0x380 [ 93.190520][ C1] wakeup_source_unregister.part.0+0x12c/0x540 [ 93.196664][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 93.202816][ C1] wakeup_source_unregister+0x1f/0x30 [ 93.208177][ C1] mmc_host_classdev_release+0x42/0x120 [ 93.213721][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 93.219872][ C1] device_release+0xd2/0x270 [ 93.224448][ C1] kobject_put+0x1f7/0x640 [ 93.228860][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 93.235531][ C1] put_device+0x1f/0x30 [ 93.239668][ C1] vub300_inactivity_timer_expired+0x42f/0x550 [ 93.245815][ C1] call_timer_fn+0x19a/0x610 [ 93.250393][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 93.255488][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 93.262158][ C1] ? mark_held_locks+0x40/0x70 [ 93.266909][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 93.273575][ C1] __run_timers+0x757/0xb00 [ 93.278073][ C1] ? __pfx___run_timers+0x10/0x10 [ 93.283088][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 93.288099][ C1] run_timer_base+0x114/0x190 [ 93.292761][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 93.297959][ C1] run_timer_softirq+0x1a/0x50 [ 93.302708][ C1] handle_softirqs+0x1ea/0x9b0 [ 93.307466][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 93.312746][ C1] ? _raw_spin_unlock+0x28/0x50 [ 93.317585][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 93.323208][ C1] __irq_exit_rcu+0x162/0x210 [ 93.327874][ C1] irq_exit_rcu+0x9/0x30 [ 93.332102][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 93.337723][ C1] [ 93.340633][ C1] [ 93.343545][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 93.349513][ C1] RIP: 0010:finish_task_switch.isra.0+0x2cd/0x10c0 [ 93.356003][ C1] Code: ab 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 8d 7f 48 e8 d0 25 e8 09 e8 ab b1 3c 00 fb 48 8d bb f8 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 93.375595][ C1] RSP: 0018:ffffc90002677308 EFLAGS: 00000206 [ 93.381643][ C1] RAX: 0000000000041e69 RBX: ffff88801f320000 RCX: 0000000000000040 [ 93.389599][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a8186 RDI: ffff88801f3216f8 [ 93.397550][ C1] RBP: ffffc90002677360 R08: 0000000000000001 R09: 0000000000000000 [ 93.405503][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888029948000 [ 93.413456][ C1] R13: 0000000000000000 R14: ffffffff9122baa4 R15: ffff8880b853b4c0 [ 93.421418][ C1] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 93.427312][ C1] __schedule+0x1264/0x6730 [ 93.431801][ C1] ? __queue_work+0x443/0x12b0 [ 93.436553][ C1] ? queue_work_on+0x11b/0x1e0 [ 93.441325][ C1] ? __pfx___schedule+0x10/0x10 [ 93.446333][ C1] ? addr_event.isra.0+0x396/0x560 [ 93.451438][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 93.457489][ C1] preempt_schedule_notrace+0x5f/0xd0 [ 93.462846][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 93.468722][ C1] ? notifier_call_chain+0x1c4/0x3f0 [ 93.473988][ C1] rcu_is_watching+0x8e/0xc0 [ 93.478571][ C1] notifier_call_chain+0x1d7/0x3f0 [ 93.483668][ C1] atomic_notifier_call_chain+0x71/0x1c0 [ 93.489285][ C1] addrconf_ifdown.isra.0+0xe85/0x1b70 [ 93.494731][ C1] ? trace_contention_end+0x126/0x160 [ 93.500113][ C1] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 93.505996][ C1] addrconf_notify+0x4a3/0x1ba0 [ 93.510838][ C1] ? __pfx_tls_dev_event+0x10/0x10 [ 93.515942][ C1] ? __pfx_addrconf_notify+0x10/0x10 [ 93.521215][ C1] ? ip6mr_device_event+0x1c4/0x230 [ 93.526404][ C1] notifier_call_chain+0x99/0x3f0 [ 93.531417][ C1] call_netdevice_notifiers_info+0xbe/0x110 [ 93.537305][ C1] netif_close_many+0x319/0x630 [ 93.542162][ C1] ? __pfx_netif_close_many+0x10/0x10 [ 93.547528][ C1] ? netif_close_many_and_unlock+0x1af/0x270 [ 93.553506][ C1] unregister_netdevice_many_notify+0x840/0x2140 [ 93.559830][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 93.566582][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 93.571777][ C1] ? mutex_is_locked+0x17/0x60 [ 93.576529][ C1] ? rtnl_is_locked+0x15/0x20 [ 93.581196][ C1] ops_undo_list+0x8ff/0xab0 [ 93.585779][ C1] ? __pfx_ops_undo_list+0x10/0x10 [ 93.590888][ C1] ? cleanup_net+0x332/0x920 [ 93.595489][ C1] ? idr_destroy+0x62/0x2e0 [ 93.599987][ C1] cleanup_net+0x499/0x920 [ 93.604416][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 93.609377][ C1] ? rcu_is_watching+0x12/0xc0 [ 93.614167][ C1] process_one_work+0xa23/0x1940 [ 93.619119][ C1] ? __pfx_process_one_work+0x10/0x10 [ 93.626142][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 93.631266][ C1] worker_thread+0x5ef/0xe50 [ 93.635867][ C1] ? kthread+0x13a/0x450 [ 93.640093][ C1] ? __pfx_worker_thread+0x10/0x10 [ 93.645191][ C1] kthread+0x370/0x450 [ 93.649248][ C1] ? __pfx_kthread+0x10/0x10 [ 93.653827][ C1] ret_from_fork+0x72b/0xd50 [ 93.658411][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 93.663535][ C1] ? __switch_to+0x800/0x10f0 [ 93.668211][ C1] ? __pfx_kthread+0x10/0x10 [ 93.672826][ C1] ret_from_fork_asm+0x1a/0x30 [ 93.677604][ C1] [ 93.680638][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 93.687920][ C1] CPU: 1 UID: 0 PID: 112 Comm: kworker/u8:5 Tainted: G W syzkaller #0 PREEMPT(full) [ 93.698853][ C1] Tainted: [W]=WARN [ 93.702636][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 93.712676][ C1] Workqueue: netns cleanup_net [ 93.717442][ C1] Call Trace: [ 93.720701][ C1] [ 93.723534][ C1] dump_stack_lvl+0x100/0x190 [ 93.728205][ C1] vpanic+0x552/0x970 [ 93.732187][ C1] ? __pfx_vpanic+0x10/0x10 [ 93.736673][ C1] ? lock_release+0x24d/0x310 [ 93.741343][ C1] panic+0xd1/0xe0 [ 93.745048][ C1] ? __pfx_panic+0x10/0x10 [ 93.749454][ C1] ? check_panic_on_warn+0x1f/0x90 [ 93.754554][ C1] check_panic_on_warn.cold+0x19/0x34 [ 93.759917][ C1] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 93.766323][ C1] __warn.cold+0x191/0x318 [ 93.770726][ C1] __report_bug+0x30f/0x440 [ 93.775220][ C1] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 93.781626][ C1] ? __pfx___report_bug+0x10/0x10 [ 93.786646][ C1] ? irq_work_queue+0xce/0x100 [ 93.791404][ C1] ? __wake_up_klogd+0xe2/0x140 [ 93.796250][ C1] ? vprintk_emit+0x1c9/0x6b0 [ 93.800922][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 93.805941][ C1] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 93.812345][ C1] report_bug+0xb2/0x220 [ 93.816579][ C1] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 93.823018][ C1] handle_bug+0x16a/0x2a0 [ 93.827346][ C1] exc_invalid_op+0x17/0x50 [ 93.831843][ C1] asm_exc_invalid_op+0x1a/0x20 [ 93.836682][ C1] RIP: 0010:lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 93.843697][ C1] Code: c4 60 5b 5d 41 5c 41 5d 41 5e 41 5f e9 49 18 88 0a 83 c5 01 89 2d 20 43 57 1a 4c 89 e6 48 c7 c7 c0 31 40 8c e8 f1 ef eb ff 90 <0f> 0b 90 e9 d2 03 f1 03 83 c5 01 89 2d ff 42 57 1a 49 39 c4 73 da [ 93.863293][ C1] RSP: 0018:ffffc90000a08900 EFLAGS: 00010086 [ 93.869346][ C1] RAX: 0000000000000050 RBX: ffff8880365260a8 RCX: 0000000000000000 [ 93.877301][ C1] RDX: 0000000000000050 RSI: ffffffff81e8afd9 RDI: fffff52000141111 [ 93.885254][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 93.893207][ C1] R10: 0000000000000102 R11: 205d314320202020 R12: ffffc90000a08a70 [ 93.901161][ C1] R13: ffff88801f320000 R14: 0000000000000001 R15: 0000000000000000 [ 93.909120][ C1] ? vprintk_emit+0x1c9/0x6b0 [ 93.913816][ C1] __debug_object_init+0x2a9/0x3d0 [ 93.918925][ C1] ? __pfx___debug_object_init+0x10/0x10 [ 93.924552][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 93.929930][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 93.935294][ C1] ? __init_swait_queue_head+0xca/0x150 [ 93.940837][ C1] __synchronize_srcu+0x1c3/0x300 [ 93.945852][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 93.951411][ C1] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 93.956946][ C1] ? synchronize_srcu+0xa8/0x380 [ 93.961872][ C1] wakeup_source_unregister.part.0+0x12c/0x540 [ 93.968030][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 93.974204][ C1] wakeup_source_unregister+0x1f/0x30 [ 93.979584][ C1] mmc_host_classdev_release+0x42/0x120 [ 93.985138][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 93.991295][ C1] device_release+0xd2/0x270 [ 93.995878][ C1] kobject_put+0x1f7/0x640 [ 94.000294][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 94.006971][ C1] put_device+0x1f/0x30 [ 94.011116][ C1] vub300_inactivity_timer_expired+0x42f/0x550 [ 94.017267][ C1] call_timer_fn+0x19a/0x610 [ 94.021845][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 94.026946][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 94.033621][ C1] ? mark_held_locks+0x40/0x70 [ 94.038379][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 94.045050][ C1] __run_timers+0x757/0xb00 [ 94.049546][ C1] ? __pfx___run_timers+0x10/0x10 [ 94.054564][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 94.059576][ C1] run_timer_base+0x114/0x190 [ 94.064252][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 94.069454][ C1] run_timer_softirq+0x1a/0x50 [ 94.074215][ C1] handle_softirqs+0x1ea/0x9b0 [ 94.078985][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 94.084269][ C1] ? _raw_spin_unlock+0x28/0x50 [ 94.089106][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 94.094724][ C1] __irq_exit_rcu+0x162/0x210 [ 94.099393][ C1] irq_exit_rcu+0x9/0x30 [ 94.103633][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 94.109256][ C1] [ 94.112168][ C1] [ 94.115081][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 94.121054][ C1] RIP: 0010:finish_task_switch.isra.0+0x2cd/0x10c0 [ 94.127552][ C1] Code: ab 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 8d 7f 48 e8 d0 25 e8 09 e8 ab b1 3c 00 fb 48 8d bb f8 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 94.147149][ C1] RSP: 0018:ffffc90002677308 EFLAGS: 00000206 [ 94.153211][ C1] RAX: 0000000000041e69 RBX: ffff88801f320000 RCX: 0000000000000040 [ 94.161166][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a8186 RDI: ffff88801f3216f8 [ 94.169118][ C1] RBP: ffffc90002677360 R08: 0000000000000001 R09: 0000000000000000 [ 94.177071][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888029948000 [ 94.185022][ C1] R13: 0000000000000000 R14: ffffffff9122baa4 R15: ffff8880b853b4c0 [ 94.192989][ C1] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 94.198895][ C1] __schedule+0x1264/0x6730 [ 94.203388][ C1] ? __queue_work+0x443/0x12b0 [ 94.208143][ C1] ? queue_work_on+0x11b/0x1e0 [ 94.212896][ C1] ? __pfx___schedule+0x10/0x10 [ 94.217734][ C1] ? addr_event.isra.0+0x396/0x560 [ 94.222847][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 94.228902][ C1] preempt_schedule_notrace+0x5f/0xd0 [ 94.234268][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 94.240155][ C1] ? notifier_call_chain+0x1c4/0x3f0 [ 94.245427][ C1] rcu_is_watching+0x8e/0xc0 [ 94.250016][ C1] notifier_call_chain+0x1d7/0x3f0 [ 94.255115][ C1] atomic_notifier_call_chain+0x71/0x1c0 [ 94.260735][ C1] addrconf_ifdown.isra.0+0xe85/0x1b70 [ 94.266185][ C1] ? trace_contention_end+0x126/0x160 [ 94.271552][ C1] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 94.277437][ C1] addrconf_notify+0x4a3/0x1ba0 [ 94.282282][ C1] ? __pfx_tls_dev_event+0x10/0x10 [ 94.287403][ C1] ? __pfx_addrconf_notify+0x10/0x10 [ 94.292702][ C1] ? ip6mr_device_event+0x1c4/0x230 [ 94.297910][ C1] notifier_call_chain+0x99/0x3f0 [ 94.302933][ C1] call_netdevice_notifiers_info+0xbe/0x110 [ 94.308829][ C1] netif_close_many+0x319/0x630 [ 94.313680][ C1] ? __pfx_netif_close_many+0x10/0x10 [ 94.319045][ C1] ? netif_close_many_and_unlock+0x1af/0x270 [ 94.325025][ C1] unregister_netdevice_many_notify+0x840/0x2140 [ 94.331350][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 94.338106][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 94.343305][ C1] ? mutex_is_locked+0x17/0x60 [ 94.348062][ C1] ? rtnl_is_locked+0x15/0x20 [ 94.352724][ C1] ops_undo_list+0x8ff/0xab0 [ 94.357312][ C1] ? __pfx_ops_undo_list+0x10/0x10 [ 94.362413][ C1] ? cleanup_net+0x332/0x920 [ 94.366996][ C1] ? idr_destroy+0x62/0x2e0 [ 94.371485][ C1] cleanup_net+0x499/0x920 [ 94.375896][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 94.380829][ C1] ? rcu_is_watching+0x12/0xc0 [ 94.385590][ C1] process_one_work+0xa23/0x1940 [ 94.390521][ C1] ? __pfx_process_one_work+0x10/0x10 [ 94.395886][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 94.400816][ C1] worker_thread+0x5ef/0xe50 [ 94.405397][ C1] ? kthread+0x13a/0x450 [ 94.409623][ C1] ? __pfx_worker_thread+0x10/0x10 [ 94.414750][ C1] kthread+0x370/0x450 [ 94.418806][ C1] ? __pfx_kthread+0x10/0x10 [ 94.423381][ C1] ret_from_fork+0x72b/0xd50 [ 94.427967][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 94.433069][ C1] ? __switch_to+0x800/0x10f0 [ 94.437735][ C1] ? __pfx_kthread+0x10/0x10 [ 94.442313][ C1] ret_from_fork_asm+0x1a/0x30 [ 94.447087][ C1] [ 94.450320][ C1] Kernel Offset: disabled [ 94.454625][ C1] Rebooting in 86400 seconds..