last executing test programs: 4.387486637s ago: executing program 1 (id=2): r0 = syz_usb_connect(0x2, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040720541cb00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x82, 0x8, &(0x7f0000000100)="9000000000000000") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000240)=""/64) syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000140)="8200000000000000001122334455") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000280)=""/64) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000180)="8400000000000000") nanosleep(&(0x7f0000000300)={0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/1-1:1.0/downstream_rate\x00', 0x0, 0x0) read(r1, &(0x7f0000000700)=""/256, 0x100) 4.285946698s ago: executing program 3 (id=4): syslog(0x9, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='devices', 0x7) 4.210217939s ago: executing program 3 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/printk/parameters/console_suspend\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='N\n\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='0\n\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='core\n\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='disk\n\x00', 0x6) 1.864958175s ago: executing program 1 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/resource2\x00', 0x1, 0x0) 1.847276523s ago: executing program 1 (id=32): syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000200)='0100000000000000000000000000000000000000dc050000000000000000000000000000000000000100000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000', 0x54) bind(r0, &(0x7f0000000300)=@generic={0x8}, 0xc) 1.070055377s ago: executing program 4 (id=34): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./dm_control_test5\x00', 0x81b6, 0xafe) openat(0xffffffffffffff9c, &(0x7f0000000000)='./dm_control_test5\x00', 0x2, 0x0) 1.06999223s ago: executing program 4 (id=35): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r0, 0x88, 0x23) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000000)={&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00'/68, 0x44}) 1.062590124s ago: executing program 4 (id=36): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000102), 0x2) read(r0, &(0x7f0000000200)=""/1024, 0x400) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000302), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000302), 0x2) 910.097458ms ago: executing program 0 (id=40): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x14, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x14}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}]}, 0x14}}, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x1c, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x20}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000c00)={0x1c, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x20}]}, 0x1c}}, 0x0) nanosleep(&(0x7f0000000d00)={0x0, 0x1dcd6500}, 0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003200)={0x14, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x14}}, 0x0) nanosleep(&(0x7f0000003300)={0x0, 0x1dcd6500}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r2, &(0x7f0000000e00)={0x27, 0x1, 0x0, 0x5, 0x1, 0x0, 'service\x00'}, 0x60) 662.228078ms ago: executing program 2 (id=41): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01"], 0x17) nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) bind(r1, &(0x7f0000000300)=@generic={0x1f, "0000000000000100"}, 0x9) listen(r1, 0x1) 420.428684ms ago: executing program 4 (id=42): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn/namespaces\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='/dev/null\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='rdma\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) write(r5, &(0x7f0000000480)='ipv4\x00', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r6, &(0x7f0000000500)='127.0.0.1\x00', 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r7, &(0x7f0000000580)='4420\x00', 0x4) symlinkat(&(0x7f00000005c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/subsystems/testnqn\x00') r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write(r8, &(0x7f0000000680)='nqn=testnqn,transport=rdma,traddr=127.0.0.1,trsvcid=4420\x00', 0x38) 327.333838ms ago: executing program 4 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) 326.958858ms ago: executing program 2 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x2, 0x0) 326.790861ms ago: executing program 0 (id=45): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x1) r2 = socket$inet(0x2, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000300)="00000000000000000004000000000000") 326.611937ms ago: executing program 4 (id=46): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3100000000080041007278650014003300766574683000"/56], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) nanosleep(&(0x7f0000000a00)={0x0, 0xbebc200}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000200)={0x1, 0x110, 0xfa00, {r2, 0x3e8, 0x0, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}}}, 0x118) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000600)={0xc, 0x18, 0xfa00, {&(0x7f0000000700)}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000800)={0xc, 0x18, 0xfa00, {&(0x7f0000000900)}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x6, 0xf, '\x00', 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}, r2}}, 0x120) 274.092266ms ago: executing program 2 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='8\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f00000001c0)='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)) 273.901726ms ago: executing program 1 (id=48): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x4000000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) pwrite64(r1, &(0x7f0000001000)="50146fe097739d2d08000000000000000000000000000000c68573f64e1a45ca8265f57f48ba6d8101010101010101010101010101010101020202020202020202020202020202020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000080080000100000000000000010001000100000000000000", 0xd8, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/fs/bcache/register\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='/dev/loop0\x00', 0xb) 251.740068ms ago: executing program 1 (id=49): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000500)='256\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/nullb/nullb1/zone_size\x00', 0x2, 0x0) write(r2, &(0x7f0000000900)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r3, &(0x7f0000000b00)='1\n', 0x2) 250.311792ms ago: executing program 2 (id=50): r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000000000), 0xc) sendto(r0, &(0x7f0000000040)='$\x00'/36, 0x24, 0x0, 0x0, 0x0) 166.2346ms ago: executing program 0 (id=51): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='0\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='freeze', 0x6) 165.991815ms ago: executing program 2 (id=52): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x34, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x18) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="0123456789abcdef", 0x8, r1) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000140)='syz \x00', 0x5) listen(r0, 0xa) r2 = socket$rxrpc(0x21, 0x2, 0x2) add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)="0100000002000800ffffff7f010000000123456789abcdef0123456789abcdef", 0x20, 0xfffffffffffffffe) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000340)='syz \x00', 0x5) connect$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x34, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x18) sendto$rxrpc(r2, &(0x7f0000000400)='hello', 0x5, 0x0, 0x0, 0x0) 153.516452ms ago: executing program 0 (id=53): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x9, 0x3, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x0, 0x0, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'RAS\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{}, {0x28}}}}, 0x2b8) sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x6b7, 0x0, @loopback}, 0x1c) 99.036205ms ago: executing program 2 (id=54): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file\x00', 0x42, 0x1ff) pwrite64(r0, &(0x7f0000000040)="fc4e2ba9010000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000a000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000008000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b532ba900"/248, 0x100, 0x0) pwrite64(r0, &(0x7f0000000140)='\x00', 0x1, 0x100000) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='md123\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1.1\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md123/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='7:1\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md123/md/array_state\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='active\x00', 0x7) 62.993604ms ago: executing program 0 (id=55): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/module/nvme_core/parameters/admin_timeout\x00', 0x2, 0x0) write(r0, &(0x7f0000000d00)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444\x00', 0x2f) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x6c) 0s ago: executing program 0 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/module/nvme_core/parameters/admin_timeout\x00', 0x2, 0x0) write(r0, &(0x7f0000000d00)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444\x00', 0x2f) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x6c) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='101:0:100\x00', 0xa) close(r4) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r5, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery,ctrl_loss_tmo=1\x00', 0xb2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.1' (ED25519) to the list of known hosts. [ 27.821872][ T4697] cgroup: Unknown subsys name 'net' [ 27.961822][ T4697] cgroup: Unknown subsys name 'cpuset' [ 27.963856][ T4697] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.166632][ T4697] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 28.917247][ T4710] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 28.921093][ T4710] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 28.922504][ T4710] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 28.938816][ T4714] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 28.939010][ T4714] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 28.942220][ T4712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 28.944363][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 28.946051][ T4712] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 28.948461][ T4723] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 28.950604][ T4723] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 28.952213][ T4723] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 28.954375][ T4710] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 28.956394][ T4710] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 28.958673][ T4710] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 28.961284][ T4710] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 28.962835][ T4710] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 28.964218][ T4724] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 28.967161][ T4710] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 28.968857][ T4724] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 28.970808][ T4724] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 28.972707][ T4710] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 28.972976][ T4710] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 28.973116][ T4710] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 28.979244][ T4714] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 28.981421][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.299722][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.299975][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.300046][ T4717] bridge_slave_0: entered allmulticast mode [ 29.300709][ T4717] bridge_slave_0: entered promiscuous mode [ 29.304161][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.304188][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.304241][ T4717] bridge_slave_1: entered allmulticast mode [ 29.304630][ T4717] bridge_slave_1: entered promiscuous mode [ 29.311481][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.332344][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.352904][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.352984][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.353050][ T4713] bridge_slave_0: entered allmulticast mode [ 29.353479][ T4713] bridge_slave_0: entered promiscuous mode [ 29.354464][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.354490][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.354541][ T4713] bridge_slave_1: entered allmulticast mode [ 29.354970][ T4713] bridge_slave_1: entered promiscuous mode [ 29.363688][ T4717] team0: Port device team_slave_0 added [ 29.364735][ T4717] team0: Port device team_slave_1 added [ 29.377635][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.393892][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.411119][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.411145][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.411166][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.412014][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.412021][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.412037][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.427184][ T4713] team0: Port device team_slave_0 added [ 29.427287][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.427361][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.427562][ T4709] bridge_slave_0: entered allmulticast mode [ 29.428006][ T4709] bridge_slave_0: entered promiscuous mode [ 29.428975][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.428999][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.429084][ T4709] bridge_slave_1: entered allmulticast mode [ 29.429517][ T4709] bridge_slave_1: entered promiscuous mode [ 29.440304][ T4717] hsr_slave_0: entered promiscuous mode [ 29.442033][ T4717] hsr_slave_1: entered promiscuous mode [ 29.445886][ T4713] team0: Port device team_slave_1 added [ 29.448070][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.449160][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.464260][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.464342][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.464397][ T4718] bridge_slave_0: entered allmulticast mode [ 29.464832][ T4718] bridge_slave_0: entered promiscuous mode [ 29.465900][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.465927][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.465977][ T4718] bridge_slave_1: entered allmulticast mode [ 29.466749][ T4718] bridge_slave_1: entered promiscuous mode [ 29.477036][ T4709] team0: Port device team_slave_0 added [ 29.485897][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.485984][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.486044][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.486141][ T4716] bridge_slave_0: entered allmulticast mode [ 29.486544][ T4716] bridge_slave_0: entered promiscuous mode [ 29.487311][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.487331][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.487378][ T4716] bridge_slave_1: entered allmulticast mode [ 29.487767][ T4716] bridge_slave_1: entered promiscuous mode [ 29.488909][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.488917][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.488931][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.489494][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.489501][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.489516][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.492305][ T4709] team0: Port device team_slave_1 added [ 29.498159][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.498167][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.498183][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.498988][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.498996][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.499011][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.502010][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.517972][ T4718] team0: Port device team_slave_0 added [ 29.523468][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.529032][ T4713] hsr_slave_0: entered promiscuous mode [ 29.529357][ T4713] hsr_slave_1: entered promiscuous mode [ 29.529581][ T4713] debugfs: 'hsr0' already exists in 'hsr' [ 29.529614][ T4713] Cannot create hsr debugfs directory [ 29.536370][ T4718] team0: Port device team_slave_1 added [ 29.540682][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.555992][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.556017][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.556033][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.561195][ T4709] hsr_slave_0: entered promiscuous mode [ 29.561504][ T4709] hsr_slave_1: entered promiscuous mode [ 29.561719][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 29.561729][ T4709] Cannot create hsr debugfs directory [ 29.571713][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.571740][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.571757][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.587008][ T4716] team0: Port device team_slave_0 added [ 29.590117][ T4716] team0: Port device team_slave_1 added [ 29.605914][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.605946][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.605957][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.606768][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.606775][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.606789][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.616958][ T4716] hsr_slave_0: entered promiscuous mode [ 29.617293][ T4716] hsr_slave_1: entered promiscuous mode [ 29.617500][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 29.617511][ T4716] Cannot create hsr debugfs directory [ 29.669880][ T4718] hsr_slave_0: entered promiscuous mode [ 29.670226][ T4718] hsr_slave_1: entered promiscuous mode [ 29.670954][ T4718] debugfs: 'hsr0' already exists in 'hsr' [ 29.670965][ T4718] Cannot create hsr debugfs directory [ 29.730204][ T4717] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.733946][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.739790][ T4717] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.742462][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.748470][ T4717] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.751041][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.751371][ T4717] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.753747][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.768294][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.768339][ T4717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.768502][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.768536][ T4717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.774030][ T4713] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.776541][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.783300][ T4713] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.785562][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.787376][ T4713] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.789601][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.793900][ T4713] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.796064][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.815948][ T4709] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.818290][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.820011][ T4709] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.822313][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.827141][ T4709] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.829276][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.831464][ T4709] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.833528][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.845926][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.845970][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.846059][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.846099][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.854001][ T4716] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.856213][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.856723][ T4716] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.858326][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.859168][ T4716] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.862525][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.864289][ T4716] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.866397][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.869277][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.869319][ T4713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.869397][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.869429][ T4713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.882052][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.894233][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.895650][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.898021][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.899345][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.901756][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.903578][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.917048][ T4718] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.919216][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.920072][ T4718] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.922141][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.923382][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.926293][ T4718] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.928468][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.930292][ T4718] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.932578][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.939193][ T3851] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.939242][ T3851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.945803][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.945842][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.965129][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.977613][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.982693][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.982733][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.986933][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.994299][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.994340][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.002097][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.007463][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.014042][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.021811][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.021856][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.031763][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.037599][ T4709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.040946][ T3851] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.040987][ T3851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.048411][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.070787][ T3851] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.070834][ T3851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.079703][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.079760][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.080068][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.080087][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.103127][ T4713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.105483][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.105509][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.125125][ T4716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.125178][ T4716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.171105][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.301961][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.322595][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.359301][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.361867][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.367655][ T4713] veth0_vlan: entered promiscuous mode [ 30.376090][ T4709] veth0_vlan: entered promiscuous mode [ 30.379331][ T4717] veth0_vlan: entered promiscuous mode [ 30.381306][ T4713] veth1_vlan: entered promiscuous mode [ 30.385447][ T4709] veth1_vlan: entered promiscuous mode [ 30.388746][ T4717] veth1_vlan: entered promiscuous mode [ 30.398205][ T4718] veth0_vlan: entered promiscuous mode [ 30.404974][ T4713] veth0_macvtap: entered promiscuous mode [ 30.414202][ T4718] veth1_vlan: entered promiscuous mode [ 30.417318][ T4709] veth0_macvtap: entered promiscuous mode [ 30.419518][ T4713] veth1_macvtap: entered promiscuous mode [ 30.426701][ T4709] veth1_macvtap: entered promiscuous mode [ 30.439665][ T4717] veth0_macvtap: entered promiscuous mode [ 30.442500][ T4717] veth1_macvtap: entered promiscuous mode [ 30.444411][ T4716] veth0_vlan: entered promiscuous mode [ 30.446295][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.452878][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.455777][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.457565][ T4718] veth0_macvtap: entered promiscuous mode [ 30.458585][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.462286][ T4716] veth1_vlan: entered promiscuous mode [ 30.466768][ T3851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.468624][ T3851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.470961][ T3851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.471013][ T3851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.474619][ T1742] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.478893][ T4718] veth1_macvtap: entered promiscuous mode [ 30.481652][ T1742] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.481695][ T1742] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.481729][ T1742] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.485336][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.486352][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.500155][ T784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.500213][ T784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.500251][ T784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.500276][ T784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.509283][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.512491][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.525162][ T3851] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.525226][ T3851] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.525251][ T3851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.525269][ T3851] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.547192][ T3851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.547226][ T3851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.566689][ T4716] veth0_macvtap: entered promiscuous mode [ 30.574915][ T1742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.574943][ T1742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.580138][ T4716] veth1_macvtap: entered promiscuous mode [ 30.589135][ T1742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.589372][ T1742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.598860][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.600254][ T3851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.600288][ T3851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.606398][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.611507][ T1742] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.611600][ T1742] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.611621][ T1742] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.611641][ T1742] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.623491][ T784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.623519][ T784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.645915][ T4713] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.663439][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.664451][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.672904][ T784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.672935][ T784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.692226][ T4891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.692443][ T4891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.712032][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.712065][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.724823][ T1742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.724843][ T1742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.745566][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.745601][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.836979][ T4906] PM: hibernation: hibernation entry [ 31.051708][ T4712] Bluetooth: hci2: command tx timeout [ 31.051929][ T50] Bluetooth: hci1: command tx timeout [ 31.052016][ T4712] Bluetooth: hci3: command tx timeout [ 31.052436][ T4714] Bluetooth: hci4: command tx timeout [ 31.122174][ T4921] lo speed is unknown, defaulting to 1000 [ 31.124238][ T4921] lo speed is unknown, defaulting to 1000 [ 31.125110][ T4921] lo speed is unknown, defaulting to 1000 [ 31.162406][ T4921] infiniband syz0: set active [ 31.162691][ T4810] lo speed is unknown, defaulting to 1000 [ 31.163182][ T4921] infiniband syz0: added lo [ 31.177030][ T4921] RDS/IB: syz0: added [ 31.177148][ T4921] smc: adding ib device syz0 with port count 1 [ 31.177184][ T4921] smc: ib device syz0 port 1 has no pnetid [ 31.177504][ T4796] lo speed is unknown, defaulting to 1000 [ 31.178192][ T4921] lo speed is unknown, defaulting to 1000 [ 31.217636][ T4921] lo speed is unknown, defaulting to 1000 [ 31.253483][ T4921] lo speed is unknown, defaulting to 1000 [ 31.296606][ T4921] lo speed is unknown, defaulting to 1000 [ 31.334453][ T4921] lo speed is unknown, defaulting to 1000 [ 31.392113][ T4925] PM: suspend entry (deep) [ 31.392878][ T4925] PM: suspend exit [ 31.661666][ T4906] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 31.661842][ T4906] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 31.666675][ T4906] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 31.669398][ T4906] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 31.669436][ T4906] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 31.673625][ T4906] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 31.677177][ T4906] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 31.677356][ T4906] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 31.682844][ T4906] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 31.685443][ T4906] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 31.686585][ T4906] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 31.688101][ T4906] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 31.690161][ T4906] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 31.690219][ T4906] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 31.693280][ T4906] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 31.769229][ T3851] Filesystems sync: 0.073 seconds [ 32.180678][ T4810] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.241853][ T4958] dlm: no local IP address has been set [ 32.241877][ T4958] dlm: cannot start dlm midcomms -107 [ 32.333271][ T4810] usb 1-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00 [ 32.333305][ T4810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.336464][ T4810] usb 1-1: config 0 descriptor?? [ 32.445348][ T4965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.446201][ T4965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.475869][ T4967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.476053][ T4967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.602084][ T4969] Bluetooth: MGMT ver 1.23 [ 32.603154][ T4969] Bluetooth: MGMT ver 1.23 [ 32.890434][ T4714] Bluetooth: hci0: command 0x041b tx timeout [ 33.232212][ T4973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.233744][ T4973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.552574][ T10] usb 1-1: USB disconnect, device number 2 [ 33.690661][ T4712] Bluetooth: hci4: command 0x040f tx timeout [ 33.690694][ T4724] Bluetooth: hci2: command 0x040f tx timeout [ 33.690710][ T4712] Bluetooth: hci1: command 0x040f tx timeout [ 33.690776][ T4714] Bluetooth: hci3: command 0x040f tx timeout [ 34.049397][ T4985] loop0: detected capacity change from 0 to 32768 [ 34.078998][ T4985] ftl_cs: FTL header not found. [ 34.097238][ T4985] block2mtd: mtd1: [/dev/loop0] erase_size = 64KiB [65536] [ 34.107809][ T4985] ubi0: attaching mtd0 [ 34.108463][ T4985] ubi0: scanning is finished [ 34.108472][ T4985] ubi0: empty MTD device detected [ 34.193899][ T4985] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 34.193938][ T4985] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 34.193965][ T4985] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 34.193982][ T4985] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 34.193999][ T4985] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 34.194011][ T4985] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 34.194022][ T4985] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3486530177 [ 34.194034][ T4985] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 34.194249][ T4997] ubi0: background thread "ubi_bgt0d" started, PID 4997 [ 34.381929][ T4985] UBIFS error (ubi0:0 pid 4985): ubifs_get_tree: too small LEBs (3968 bytes), min. is 15360 bytes [ 34.432461][ T5001] Bluetooth: ISO socket layer initialized [ 34.657933][ T5004] lo speed is unknown, defaulting to 1000 [ 34.657977][ T5004] lo speed is unknown, defaulting to 1000 [ 34.658317][ T5004] lo speed is unknown, defaulting to 1000 [ 34.658970][ T5004] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 34.660674][ T5004] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 34.667611][ T5004] lo speed is unknown, defaulting to 1000 [ 34.669257][ T5004] lo speed is unknown, defaulting to 1000 [ 34.669590][ T5004] lo speed is unknown, defaulting to 1000 [ 34.669950][ T5004] lo speed is unknown, defaulting to 1000 [ 34.670630][ T5004] lo speed is unknown, defaulting to 1000 [ 34.676466][ T5004] nvmet: adding nsid 1 to subsystem testnqn [ 34.677331][ T5004] nvmet: failed to open file /dev/null: (-22) [ 34.679049][ T5004] nvmet_rdma: enabling port 1 (127.0.0.1:4420) [ 34.693856][ T1742] nvme nvme1: rdma_resolve_route failed (-110). [ 34.696371][ T5004] nvme nvme1: rdma connection establishment failed (-19) [ 34.798045][ T5018] bcache: register_bcache() error : Bad checksum [ 34.861769][ T4700] udevd[4700]: incorrect bcache checksum on /dev/loop0 [ 34.887821][ T5031] PM: suspend entry (s2idle) [ 34.887850][ T5031] PM: Unsupported test mode for suspend to idle, please choose none/freezer/devices/platform. [ 34.887859][ T5031] PM: suspend exit [ 34.907206][ T5028] null_blk: nullb1: using native zone append [ 34.939600][ T4702] udevd[4702]: incorrect bcache checksum on /dev/loop0 [ 34.972113][ T4714] Bluetooth: hci0: command 0x041b tx timeout [ 34.998478][ T5016] infiniband syz1: set active [ 34.998569][ T5016] infiniband syz1: added veth0 [ 35.007506][ T5050] loop1: detected capacity change from 0 to 2048 [ 35.023112][ T5016] RDS/IB: syz1: added [ 35.023150][ T5016] smc: adding ib device syz1 with port count 1 [ 35.025814][ T5050] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 35.026066][ T5016] smc: ib device syz1 port 1 has no pnetid [ 35.043383][ T4703] udevd[4703]: incorrect bcache checksum on /dev/loop0 [ 35.072319][ T5050] md: invalid superblock checksum on loop1 [ 35.072350][ T5050] md: loop1 does not have a valid v1.1 superblock, not importing! [ ** replaying previous printk message ** [ 35.119496][ T5028] ------------[ cut here ]------------ [ 35.119535][ T5028] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 35.119571][ T5028] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0xd0c/0xf14, CPU#1: syz.1.49/5028 [ 35.123750][ T5059] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +99 instances [ 35.126145][ T5028] Modules linked in: [ 35.126846][ T5028] CPU: 1 UID: 0 PID: 5028 Comm: syz.1.49 Not tainted syzkaller #0 PREEMPT [ 35.128428][ T5028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 35.130294][ T5028] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 35.131607][ T5028] pc : __mutex_lock+0xd0c/0xf14 [ 35.132446][ T5028] lr : __mutex_lock+0xd0c/0xf14 [ 35.133243][ T5028] sp : ffff8000974c7240 [ 35.133931][ T5028] x29: ffff8000974c7390 x28: ffff8000825cb81c x27: ffff8000974c72e0 [ 35.135290][ T5028] x26: 0000000000000000 x25: ffff8000974c72e8 x24: 0000000000000000 [ 35.136589][ T5028] x23: ffff700012e98e58 x22: ffff8000974c7300 x21: dfff800000000000 [ 35.137925][ T5028] x20: ffff8000aac2c0a8 x19: ffff8000aac2c0a8 x18: 1fffe00035bc9e28 [ 35.139260][ T5028] x17: 0000000000000003 x16: ffff800088b07000 x15: 0000000000000000 [ 35.140650][ T5028] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 35.142031][ T5028] x11: 0000000000000000 x10: 0000000000080000 x9 : 87bfb99deda4d800 [ 35.143411][ T5028] x8 : 87bfb99deda4d800 x7 : 0000000000000000 x6 : ffff80008048e080 [ 35.144808][ T5028] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f8070 [ 35.146205][ T5028] x2 : 0000000100000000 x1 : ffff0000d3c78000 x0 : 0000000000000001 [ 35.147621][ T5028] Call trace: [ 35.148179][ T5028] __mutex_lock+0xd0c/0xf14 (P) [ 35.149033][ T5028] mutex_lock_nested+0x24/0x30 [ 35.149814][ T5028] null_report_zones+0x298/0x878 [ 35.150642][ T5028] blk_revalidate_disk_zones+0x7a4/0xe64 [ 35.151594][ T5028] null_register_zoned_dev+0xe4/0x134 [ 35.152430][ T5028] null_add_dev+0xeb0/0x1800 [ 35.153191][ T5028] nullb_device_power_store+0x160/0x398 [ 35.154076][ T5028] configfs_write_iter+0x27c/0x354 [ 35.154952][ T5028] vfs_write+0x51c/0xa0c [ 35.155630][ T5028] ksys_write+0x12c/0x228 [ 35.156321][ T5028] __arm64_sys_write+0x84/0x98 [ 35.157128][ T5028] invoke_syscall+0x98/0x244 [ 35.157882][ T5028] el0_svc_common+0xec/0x23c [ 35.157933][ T4702] udevd[4702]: incorrect bcache checksum on /dev/loop0 [ 35.159766][ T5028] do_el0_svc+0x4c/0x5c [ 35.160439][ T5028] el0_svc+0x64/0x260 [ 35.161111][ T5028] el0t_64_sync_handler+0x48/0x148 [ 35.161912][ T5028] el0t_64_sync+0x198/0x19c [ 35.162672][ T5028] irq event stamp: 131463 [ 35.163379][ T5028] hardirqs last enabled at (131463): [] finish_task_switch+0x234/0x858 [ 35.165018][ T5028] hardirqs last disabled at (131462): [] __schedule+0x2f8/0x2d80 [ 35.166491][ T5028] softirqs last enabled at (124352): [] handle_softirqs+0xc28/0xd98 [ 35.168051][ T5028] softirqs last disabled at (124285): [] __do_softirq+0x14/0x20 [ 35.169609][ T5028] ---[ end trace 0000000000000000 ]--- [ 35.181573][ T5028] Unable to handle kernel paging request at virtual address fbd529d5a0000006 [ 35.181601][ T5028] KASAN: maybe wild-memory-access in range [0xdead4ead00000030-0xdead4ead00000037] [ 35.181622][ T5028] Mem abort info: [ 35.181631][ T5028] ESR = 0x0000000096000004 [ 35.181641][ T5028] EC = 0x25: DABT (current EL), IL = 32 bits [ 35.181651][ T5028] SET = 0, FnV = 0 [ 35.181659][ T5028] EA = 0, S1PTW = 0 [ 35.181668][ T5028] FSC = 0x04: level 0 translation fault [ 35.181677][ T5028] Data abort info: [ 35.181683][ T5028] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 [ 35.181691][ T5028] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 35.181700][ T5028] GCS = 0, Overlay = 0, DirtyBit = 0 [ 35.181707][ T5028] [fbd529d5a0000006] address between user and kernel address ranges [ 35.181716][ T5028] Internal error: Oops: 0000000096000004 [#1] SMP [ 35.182888][ T12] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 35.182959][ T3851] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 35.183005][ T12] (NULL device *): queue 0 connect admin queue failed (-6). [ 35.183019][ T12] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 35.183031][ T12] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 35.183060][ T5059] nvme nvme1: NVME-FC{0}: new ctrl: NQN "nqn.2014-08.org.nvmexpress.discovery", hostnqn: nqn.2014-08.org.nvmexpress:uuid:15f72f9f-40b6-4f15-976c-c543315ab402 [ 35.206108][ T5028] Modules linked in: [ 35.206790][ T5028] CPU: 1 UID: 0 PID: 5028 Comm: syz.1.49 Tainted: G W syzkaller #0 PREEMPT [ 35.208550][ T5028] Tainted: [W]=WARN [ 35.209190][ T5028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 35.210926][ T5028] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 35.212226][ T5028] pc : mutex_can_spin_on_owner+0x1b0/0x300 [ 35.213239][ T5028] lr : mutex_can_spin_on_owner+0x188/0x300 [ 35.214241][ T5028] sp : ffff8000974c7200 [ 35.214944][ T5028] x29: ffff8000974c7200 x28: ffff8000825cb81c x27: ffff8000974c72e0 [ 35.216360][ T5028] x26: 0000000000000000 x25: ffff8000974c72e8 x24: 0000000000000000 [ 35.217703][ T5028] x23: ffff700012e98e58 x22: ffff8000974c7300 x21: dfff800000000000 [ 35.219099][ T5028] x20: dead4ead00000034 x19: dead4ead00000000 x18: 1fffe00035bc9e28 [ 35.220456][ T5028] x17: 0000000000000003 x16: ffff800088b07000 x15: 0000000000000000 [ 35.221804][ T5028] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 35.223171][ T5028] x11: 0000000000000000 x10: ffff700015585816 x9 : dfff800000000000 [ 35.224522][ T5028] x8 : 1bd5a9d5a0000006 x7 : 0000000000000000 x6 : ffff8000825cb81c [ 35.225927][ T5028] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800080458ecc [ 35.227340][ T5028] x2 : 0000000000000000 x1 : 0000000000000008 x0 : 0000000000000001 [ 35.228746][ T5028] Call trace: [ 35.229319][ T5028] mutex_can_spin_on_owner+0x1b0/0x300 (P) [ 35.230305][ T5028] __mutex_lock+0x188/0xf14 [ 35.231085][ T5028] mutex_lock_nested+0x24/0x30 [ 35.232067][ T5028] null_report_zones+0x298/0x878 [ 35.232944][ T5028] blk_revalidate_disk_zones+0x7a4/0xe64 [ 35.233970][ T5028] null_register_zoned_dev+0xe4/0x134 [ 35.234913][ T5028] null_add_dev+0xeb0/0x1800 [ 35.235687][ T5028] nullb_device_power_store+0x160/0x398 [ 35.236628][ T5028] configfs_write_iter+0x27c/0x354 [ 35.237540][ T5028] vfs_write+0x51c/0xa0c [ 35.238273][ T5028] ksys_write+0x12c/0x228 [ 35.239016][ T5028] __arm64_sys_write+0x84/0x98 [ 35.239818][ T5028] invoke_syscall+0x98/0x244 [ 35.240618][ T5028] el0_svc_common+0xec/0x23c [ 35.241369][ T5028] do_el0_svc+0x4c/0x5c [ 35.242042][ T5028] el0_svc+0x64/0x260 [ 35.242716][ T5028] el0t_64_sync_handler+0x48/0x148 [ 35.243584][ T5028] el0t_64_sync+0x198/0x19c [ 35.244348][ T5028] Code: f27df113 54000220 9100d274 d343fe88 (38f56908) [ 35.245498][ T5028] ---[ end trace 0000000000000000 ]--- [ 35.501856][ T5028] Kernel panic - not syncing: Oops: Fatal exception [ 35.502997][ T5028] SMP: stopping secondary CPUs [ 35.503835][ T5028] Kernel Offset: disabled [ 35.504566][ T5028] CPU features: 0x14000000,003c0008,27020501,5427fea7 [ 35.505737][ T5028] Memory Limit: none [ 35.762093][ T5028] Rebooting in 86400 seconds..