last executing test programs: 5.729666034s ago: executing program 0 (id=1): syz_usb_connect(0x0, 0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408c0d030140000102030109021a000101c0c310080b000101223061090400000001013000"], 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x0) ioctl(r0, 0xc4c85512, &(0x7f0000000300)="0000000003000000000000000000000049454339353820506c61796261636b204d61736b00"/64) 4.777105331s ago: executing program 2 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv/720p\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/yuyv\x00') symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00') symlinkat(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f0000000600)='dummy_udc.0', 0xb) nanosleep(&(0x7f0000000640)={0x0, 0x5f5e100}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000680), 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000006c0)={0x0, 0x56595559}) 4.563207921s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='10 1 1', 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x34, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x35, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x36, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x37, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x38, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x39, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3a, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3b, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3c, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) 4.366038921s ago: executing program 2 (id=8): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.136742187s ago: executing program 3 (id=4): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xe) madvise(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x17) 3.934249531s ago: executing program 3 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./ffs\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='usb0\x00', &(0x7f0000000140)='./ffs\x00', &(0x7f00000001c0)='ext4\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs/ep0\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="030000001900000001000000010000000904000000ff000000", 0x19) write(r0, &(0x7f0000000280)="020000001000"/16, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/ffs.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='0x1d6b\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)='0x0104\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f00000004c0)={0x1}, 0x0) 3.918875695s ago: executing program 1 (id=10): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080fa0904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000700)={0x1}, 0x0) 3.667504608s ago: executing program 0 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='127.0.0.1:/\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='nfs4\x00', 0x0, &(0x7f00000002c0)='addr=127.0.0.1,nolock\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff) fchmod(r3, 0x1ff) 3.379684719s ago: executing program 5 (id=6): r0 = syz_usb_connect$hid(0x2, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c20000000000010902290001010080320904000002030001000921110100012223000705810340000a0705020340000a"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000600)={0x40, 0x2}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x8, "0200000000000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) syz_open_dev$hidraw(&(0x7f0000000500), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="028000000000000000") 2.948487197s ago: executing program 4 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfs_share\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfs_share\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='nfsd 127.0.0.1 2147483647 mydomain\n', 0x23) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='mydomain ./nfs_share 2147483647 8192 0 0 0\n', 0x2b) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='-2 -3 +4\n', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/nfsv4recoverydir\x00', 0x1, 0x0) write(r3, &(0x7f0000000640)='./nfs_share\n', 0xc) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='1\n', 0x2) close(r5) nanosleep(&(0x7f0000000380)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={[{'addr=127.0.0.1,port=2049'}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/file1\x00', 0x42, 0x1ff) close(r6) linkat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/file2\x00', 0x0) 2.821721098s ago: executing program 3 (id=12): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000700), 0x1, 0x676, &(0x7f0000000740)="$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") r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) read(r0, &(0x7f0000100000)=""/262144, 0x40000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r1, &(0x7f0000100000)='\x00'/262144, 0x40000) ftruncate(r1, 0x40000000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0) ioctl(r2, 0x40086610, &(0x7f0000000800)="0000100000000000") 2.5683785s ago: executing program 2 (id=13): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000008582005109bc10000000109021200010000000009048f0000bf575a00"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x0) ioctl$USBDEVFS_RESET(r0, 0x5514) 2.471410059s ago: executing program 3 (id=14): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r1 = openat(r0, &(0x7f0000000040)='net\x00', 0x0, 0x0) setns(r1, 0x40000000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/infiniband/syz0/node_desc\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='new_node_desc\x00', 0xe) 2.187440255s ago: executing program 5 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)='3\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/num_groups\x00', 0x2, 0x0) write(r4, &(0x7f00000004c0)='1\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0) write(r5, &(0x7f0000000540)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0) write(r6, &(0x7f0000000640)='3\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/num_groups\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0) write(r7, &(0x7f0000000780)='1\n', 0x2) symlinkat(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r8, &(0x7f0000000880)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1.463724952s ago: executing program 0 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r1, &(0x7f0000000e00)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) write(r2, &(0x7f0000001400)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(&(0x7f0000000900)=@filename='devtmpfs\x00', &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/nullb1\x00', 0x2, 0x0) write(r4, &(0x7f0000001000)="53464f5a05abbf59", 0x1000) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='./dev/nullb1\x00', &(0x7f0000001100)='./mnt\x00', &(0x7f0000001200)='zonefs\x00', 0x0, 0x0) 1.401820181s ago: executing program 5 (id=17): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x0, 0x400000) pwrite64(r0, &(0x7f0000000000)="fc4e2ba9", 0x4, 0x3f0000) pwrite64(r0, &(0x7f0000000000)='Z\x00\x00\x00', 0x4, 0x3f0008) pwrite64(r0, &(0x7f0000000000)="01000000", 0x4, 0x3f0028) pwrite64(r0, &(0x7f0000000000)=']O+', 0x3, 0x3f0098) pwrite64(r0, 0x0, 0x0, 0x3f0210) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f00000002c0)='7:0', 0x3) 1.10405687s ago: executing program 5 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1234\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x0, 0x2) write$midi(r3, &(0x7f0000000440)="001122", 0x3) 829.211429ms ago: executing program 1 (id=19): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x48032, 0xffffffffffffffff, 0x0) 733.104215ms ago: executing program 1 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/pm_debug_messages\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='0', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_print_times\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='0', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='devices', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='freeze\n', 0x7) 447.653065ms ago: executing program 2 (id=21): r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000003000)={&(0x7f0000002000)={0x0, 0x1000, 0x0, 0x1}}, 0x1) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x1000, 0x3, 0x13, r0, 0x20000000) 382.162255ms ago: executing program 2 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r0, &(0x7f0000000900), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/ports/1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000c00)='tcp\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) write(r1, &(0x7f0000000e00)='ipv4\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r2, &(0x7f0000001000)='127.0.0.1\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r3, &(0x7f0000001200)='44', 0x2) symlinkat(&(0x7f0000001300)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/nvmet/ports/1/subsystems/testnqn\x00') nanosleep(&(0x7f0000002000)={0x0, 0x5f5e100}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000003000)={0x2, 0x1144, @local}, 0x10) sendto$inet_nvme_pdu(r4, &(0x7f0000001500)=@cmd={{}, {@identify={0x6, 0x0, 0x0, 0x0, '\x00', @sgl, 0x19}}}, 0x48, 0x0, 0x0, 0x0) 214.989665ms ago: executing program 5 (id=23): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="000000000200000008000000ffffffff010000000123456789abcdef0123456789abcdef", 0x24, r1) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000140)='syz \x00', 0x5) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x34, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @empty}}, 0x24) listen(r0, 0xa) r2 = socket$rxrpc(0x21, 0x2, 0xa) add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)="000000000200000008000000ffffffff010000000123456789abcdef0123456789abcdef", 0x24, 0xfffffffffffffffe) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000340)='syz \x00', 0x5) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x34, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @empty}}, 0x24) sendto$rxrpc(r2, &(0x7f0000000400)='hello', 0x5, 0x0, 0x0, 0x0) 131.153719ms ago: executing program 2 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r1, &(0x7f0000000e00)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) write(r2, &(0x7f0000001400)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(&(0x7f0000000900)=@filename='devtmpfs\x00', &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/nullb1\x00', 0x2, 0x0) write(r4, &(0x7f0000001000)="53464f5a05abbf59", 0x1000) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='./dev/nullb1\x00', &(0x7f0000001100)='./mnt\x00', &(0x7f0000001200)='zonefs\x00', 0x0, 0x0) 0s ago: executing program 5 (id=25): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000007468696e706f6f6c00") ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000007e01000038010000010000000000000000000000000000000000000000000000000000007468696e706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000007468696e706f6f6c00") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts. [ 77.572460][ T5607] cgroup: Unknown subsys name 'net' [ 77.709465][ T5607] cgroup: Unknown subsys name 'cpuset' [ 77.721298][ T5607] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.210464][ T5607] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.379212][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.387643][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.396422][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.404892][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.415476][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.426726][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.435366][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.444414][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.453585][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.455473][ T5642] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.468373][ T5639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.469989][ T5642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.477472][ T5639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.491404][ T5642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.491617][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.499671][ T5642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.506935][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.521987][ T5642] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.532065][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.539830][ T5641] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.548698][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.552426][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.556475][ T4936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.568142][ T5639] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.578367][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.586256][ T5644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.596580][ T5643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.611189][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.621183][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.625002][ T4936] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.654535][ T4936] Bluetooth: hci4: command tx timeout [ 85.654539][ T5632] Bluetooth: hci1: command tx timeout [ 85.654747][ T5632] Bluetooth: hci3: command tx timeout [ 85.660663][ T4936] Bluetooth: hci0: command tx timeout [ 85.666532][ T5630] Bluetooth: hci5: command tx timeout [ 85.724691][ T4936] Bluetooth: hci2: command tx timeout [ 86.011038][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.018870][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.026119][ T5622] bridge_slave_0: entered allmulticast mode [ 86.033876][ T5622] bridge_slave_0: entered promiscuous mode [ 86.126303][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.134124][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.141669][ T5627] bridge_slave_0: entered allmulticast mode [ 86.150693][ T5627] bridge_slave_0: entered promiscuous mode [ 86.197155][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.204661][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.211989][ T5622] bridge_slave_1: entered allmulticast mode [ 86.220402][ T5622] bridge_slave_1: entered promiscuous mode [ 86.228810][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.235994][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.243460][ T5629] bridge_slave_0: entered allmulticast mode [ 86.251905][ T5629] bridge_slave_0: entered promiscuous mode [ 86.279792][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.287263][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.294892][ T5627] bridge_slave_1: entered allmulticast mode [ 86.302972][ T5627] bridge_slave_1: entered promiscuous mode [ 86.370106][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.377565][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.385140][ T5629] bridge_slave_1: entered allmulticast mode [ 86.393465][ T5629] bridge_slave_1: entered promiscuous mode [ 86.519268][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.545200][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.558275][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.567677][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.576192][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.583485][ T5621] bridge_slave_0: entered allmulticast mode [ 86.591486][ T5621] bridge_slave_0: entered promiscuous mode [ 86.614736][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.624023][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.632049][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.639734][ T5624] bridge_slave_0: entered allmulticast mode [ 86.647267][ T5624] bridge_slave_0: entered promiscuous mode [ 86.657560][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.670046][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.679871][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.688190][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.695664][ T5621] bridge_slave_1: entered allmulticast mode [ 86.703251][ T5621] bridge_slave_1: entered promiscuous mode [ 86.735008][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.742283][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.749963][ T5624] bridge_slave_1: entered allmulticast mode [ 86.757713][ T5624] bridge_slave_1: entered promiscuous mode [ 86.814482][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.821688][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.829623][ T5620] bridge_slave_0: entered allmulticast mode [ 86.837650][ T5620] bridge_slave_0: entered promiscuous mode [ 86.887925][ T5629] team0: Port device team_slave_0 added [ 86.906064][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.913329][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.920925][ T5620] bridge_slave_1: entered allmulticast mode [ 86.929197][ T5620] bridge_slave_1: entered promiscuous mode [ 86.938394][ T5627] team0: Port device team_slave_0 added [ 86.960164][ T5622] team0: Port device team_slave_0 added [ 86.968769][ T5629] team0: Port device team_slave_1 added [ 86.977411][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.001929][ T5627] team0: Port device team_slave_1 added [ 87.011075][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.023045][ T5622] team0: Port device team_slave_1 added [ 87.056482][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.093899][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.144267][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.180636][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.187758][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.213999][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.226991][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.233978][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.260401][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.287492][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.309937][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.317100][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.343134][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.371650][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.379530][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.407099][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.419106][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.426612][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.453337][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.475729][ T5621] team0: Port device team_slave_0 added [ 87.495503][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.502687][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.528953][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.542716][ T5624] team0: Port device team_slave_0 added [ 87.569203][ T5621] team0: Port device team_slave_1 added [ 87.577350][ T5620] team0: Port device team_slave_0 added [ 87.593742][ T5624] team0: Port device team_slave_1 added [ 87.629661][ T5620] team0: Port device team_slave_1 added [ 87.701840][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.708841][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.724683][ T4936] Bluetooth: hci0: command tx timeout [ 87.735386][ T50] Bluetooth: hci3: command tx timeout [ 87.741292][ T4936] Bluetooth: hci5: command tx timeout [ 87.746092][ T5632] Bluetooth: hci4: command tx timeout [ 87.746504][ T5632] Bluetooth: hci1: command tx timeout [ 87.753398][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.789327][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.796381][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.822505][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.822884][ T50] Bluetooth: hci2: command tx timeout [ 87.835473][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.846101][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.872726][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.915281][ T5629] hsr_slave_0: entered promiscuous mode [ 87.922162][ T5629] hsr_slave_1: entered promiscuous mode [ 87.949237][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.956371][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.982467][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.009351][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.016656][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.042979][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.056023][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.063062][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.089046][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.134649][ T5622] hsr_slave_0: entered promiscuous mode [ 88.141331][ T5622] hsr_slave_1: entered promiscuous mode [ 88.147989][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 88.153788][ T5622] Cannot create hsr debugfs directory [ 88.196839][ T5627] hsr_slave_0: entered promiscuous mode [ 88.203425][ T5627] hsr_slave_1: entered promiscuous mode [ 88.210287][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 88.216110][ T5627] Cannot create hsr debugfs directory [ 88.409033][ T5620] hsr_slave_0: entered promiscuous mode [ 88.415808][ T5620] hsr_slave_1: entered promiscuous mode [ 88.422077][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 88.427885][ T5620] Cannot create hsr debugfs directory [ 88.440278][ T5624] hsr_slave_0: entered promiscuous mode [ 88.448001][ T5624] hsr_slave_1: entered promiscuous mode [ 88.454437][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 88.460162][ T5624] Cannot create hsr debugfs directory [ 88.472728][ T5621] hsr_slave_0: entered promiscuous mode [ 88.479329][ T5621] hsr_slave_1: entered promiscuous mode [ 88.485809][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 88.491710][ T5621] Cannot create hsr debugfs directory [ 89.130035][ T5629] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.144192][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.188770][ T5629] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.200330][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.208790][ T5629] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.219905][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.228190][ T5629] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.238745][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.317243][ T5627] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.331410][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.340082][ T5627] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.350736][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.359384][ T5627] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.369021][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.377339][ T5627] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.388132][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.503233][ T5621] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.517094][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.526270][ T5621] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.537500][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.552256][ T5621] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.562814][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.571520][ T5621] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.582192][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.675878][ T5620] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 89.688540][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.704012][ T5620] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 89.716026][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.729578][ T5620] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 89.740047][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.748598][ T5620] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 89.759951][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.771535][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.805601][ T50] Bluetooth: hci5: command tx timeout [ 89.806953][ T5630] Bluetooth: hci4: command tx timeout [ 89.811726][ T50] Bluetooth: hci0: command tx timeout [ 89.817417][ T5632] Bluetooth: hci3: command tx timeout [ 89.821940][ T4936] Bluetooth: hci1: command tx timeout [ 89.885123][ T50] Bluetooth: hci2: command tx timeout [ 89.892338][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.946966][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.954879][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.968064][ T5622] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.978401][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.986670][ T5622] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.998924][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.021693][ T5622] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.032901][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.050255][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.057455][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.082999][ T5622] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.095154][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.198074][ T5624] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.209304][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.219800][ T5624] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.231298][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.257228][ T5624] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.269600][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.289330][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.298092][ T5624] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.308677][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.385892][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.467750][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.477791][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.485042][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.507162][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.522436][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.529613][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.621727][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.636556][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.652870][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.660011][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.702581][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.709714][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.737557][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.744770][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.761456][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.768575][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.801951][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.931346][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.988676][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.004643][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.011909][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.058626][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.065817][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.117318][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.183499][ T10] cfg80211: failed to load regulatory.db [ 91.210958][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.218178][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.308730][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.315944][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.383697][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.742361][ T5629] veth0_vlan: entered promiscuous mode [ 91.822193][ T5629] veth1_vlan: entered promiscuous mode [ 91.886879][ T4936] Bluetooth: hci1: command tx timeout [ 91.889872][ T5632] Bluetooth: hci3: command tx timeout [ 91.892328][ T4936] Bluetooth: hci4: command tx timeout [ 91.898286][ T5630] Bluetooth: hci5: command tx timeout [ 91.904420][ T50] Bluetooth: hci0: command tx timeout [ 91.971921][ T50] Bluetooth: hci2: command tx timeout [ 92.117551][ T5629] veth0_macvtap: entered promiscuous mode [ 92.170014][ T5629] veth1_macvtap: entered promiscuous mode [ 92.228977][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.341355][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.401316][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.537627][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.559957][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.711001][ T5627] veth0_vlan: entered promiscuous mode [ 92.764684][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.849109][ T5627] veth1_vlan: entered promiscuous mode [ 92.881722][ T1025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.906895][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.916978][ T1025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.979018][ T1025] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.012512][ T5621] veth0_vlan: entered promiscuous mode [ 93.031893][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.089754][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.113390][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.125071][ T5621] veth1_vlan: entered promiscuous mode [ 93.138169][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.154477][ T76] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.192068][ T5627] veth0_macvtap: entered promiscuous mode [ 93.233560][ T5627] veth1_macvtap: entered promiscuous mode [ 93.264053][ T5629] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.370399][ T5624] veth0_vlan: entered promiscuous mode [ 93.411610][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.423836][ T5621] veth0_macvtap: entered promiscuous mode [ 93.473595][ T5624] veth1_vlan: entered promiscuous mode [ 93.500755][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.508928][ T5621] veth1_macvtap: entered promiscuous mode [ 93.536277][ T5620] veth0_vlan: entered promiscuous mode [ 93.569377][ T437] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.583059][ T437] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.607031][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.616905][ T5620] veth1_vlan: entered promiscuous mode [ 93.637711][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.715972][ T5352] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.730562][ T5624] veth0_macvtap: entered promiscuous mode [ 93.750418][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.758764][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.791827][ T5624] veth1_macvtap: entered promiscuous mode [ 93.805670][ T3326] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.846321][ T5622] veth0_vlan: entered promiscuous mode [ 93.858623][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.868078][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.895653][ T3326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.906696][ T5352] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 93.907031][ T5620] veth0_macvtap: entered promiscuous mode [ 93.918384][ T5352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.936517][ T5352] usb 1-1: Product: syz [ 93.955073][ T5352] usb 1-1: Manufacturer: syz [ 93.961755][ T5352] usb 1-1: SerialNumber: syz [ 93.968809][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.996856][ T5620] veth1_macvtap: entered promiscuous mode [ 94.022395][ T5622] veth1_vlan: entered promiscuous mode [ 94.049976][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.130762][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.150591][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.181309][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.234965][ T1025] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.247075][ T5864] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 94.284193][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.315991][ T437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.325390][ T437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.385508][ T5622] veth0_macvtap: entered promiscuous mode [ 94.425628][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.452501][ T5622] veth1_macvtap: entered promiscuous mode [ 94.471740][ T30] audit: type=1800 audit(1785860484.404:2): pid=5869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7" name="UDC" dev="configfs" ino=8006 res=0 errno=0 [ 94.491885][ T1025] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.509512][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.522098][ T5869] UDC core: g1: couldn't find an available UDC or it's busy [ 94.554737][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.589165][ T437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.617878][ T437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.673029][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.695881][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.735023][ T76] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.771768][ T76] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.819625][ T5352] usb 1-1: BAAD SPEAKER p_chmask mismatch [ 94.851206][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.891664][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.961574][ T5352] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 94.997629][ T5352] usb 1-1: USB disconnect, device number 2 [ 95.013063][ T1025] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.032647][ T1025] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.065342][ T5765] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.075220][ T5742] udevd[5742]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.159419][ T1025] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.185992][ T1025] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.188620][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.251232][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.265994][ T5765] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.297047][ T5765] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 95.341082][ T5765] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 95.354725][ T5882] file system registered [ 95.360131][ T5765] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.373429][ T30] audit: type=1800 audit(1785860485.304:3): pid=5882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9" name="idVendor" dev="configfs" ino=8933 res=0 errno=0 [ 95.401299][ T5882] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 95.410113][ T30] audit: type=1800 audit(1785860485.304:4): pid=5882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9" name="idProduct" dev="configfs" ino=8934 res=0 errno=0 [ 95.420541][ T5765] usb 3-1: config 0 descriptor?? [ 95.439758][ T5882] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 95.443546][ T30] audit: type=1800 audit(1785860485.334:5): pid=5882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9" name="UDC" dev="configfs" ino=8935 res=0 errno=0 [ 95.477390][ T1025] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.502747][ T1025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.511844][ T5882] udc dummy_udc.0: failed to start g1: -22 [ 95.522843][ T1025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.553821][ T5882] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 95.570447][ T3326] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.595628][ T5882] UDC core: g1: couldn't find an available UDC or it's busy [ 95.625711][ T5635] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.671636][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.680249][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.688307][ T437] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.787698][ T5635] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 95.803612][ T5635] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.835571][ T76] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.880728][ T5635] usb 2-1: probing VID:PID(0424:012C) [ 95.921600][ T5765] usbhid 3-1:0.0: can't add hid device: -71 [ 95.926675][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.934505][ T5765] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 95.938073][ T5635] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 95.958080][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.976505][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.979322][ T5635] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 95.996729][ T5635] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 95.998333][ T5765] usb 3-1: USB disconnect, device number 2 [ 96.003099][ T5635] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 96.003125][ T5635] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 96.016796][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.155199][ T5352] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 96.275610][ T5635] usb 2-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 96.341615][ T5352] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 96.360032][ T5352] usb 6-1: can't read configurations, error -71 [ 96.400764][ T5897] loop3: detected capacity change from 0 to 1024 [ 96.446915][ T5897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.477428][ T5635] usb 2-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 96.561140][ T5897] EXT4-fs warning (device loop3): ext4_resize_fs:2018: can't read last block, resize aborted [ 96.660653][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.785839][ T5907] lo speed is unknown, defaulting to 1000 [ 96.799030][ T5907] lo speed is unknown, defaulting to 1000 [ 96.807878][ T5907] lo speed is unknown, defaulting to 1000 [ 96.864566][ T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 96.950370][ T30] audit: type=1800 audit(1785860486.884:6): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.15" name="idVendor" dev="configfs" ino=9565 res=0 errno=0 [ 96.973285][ T30] audit: type=1800 audit(1785860486.904:7): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.15" name="idProduct" dev="configfs" ino=9566 res=0 errno=0 [ 97.012669][ T30] audit: type=1800 audit(1785860486.944:8): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.15" name="process_ump" dev="configfs" ino=9570 res=0 errno=0 [ 97.042197][ T30] audit: type=1800 audit(1785860486.974:9): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.15" name="direction" dev="configfs" ino=9571 res=0 errno=0 [ 97.063791][ T30] audit: type=1800 audit(1785860486.974:10): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.15" name="num_groups" dev="configfs" ino=9572 res=0 errno=0 [ 97.107015][ T5911] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 97.115787][ T5911] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 97.124257][ T30] audit: type=1800 audit(1785860487.024:11): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.15" name="active" dev="configfs" ino=9094 res=0 errno=0 [ 97.145973][ T5911] udc dummy_udc.0: failed to start g1: -22 [ 97.152553][ T5911] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 97.165976][ T5889] NFSD: Unable to initialize client recovery tracking! (-110) [ 97.174047][ T5889] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 97.189567][ T5889] NFSD: starting 90-second grace period (net f00003cb) [ 97.206993][ T5911] UDC core: g1: couldn't find an available UDC or it's busy [ 97.272382][ T185] lo speed is unknown, defaulting to 1000 [ 97.280814][ T5907] infiniband syz0: set active [ 97.286658][ T5907] infiniband syz0: added lo [ 97.339080][ T5907] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 97.385553][ T5907] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 97.424553][ T5907] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 97.478845][ T5907] RDS/IB: syz0: added [ 97.488449][ T5907] smc: adding ib device syz0 with port count 1 [ 97.504596][ T5907] smc: ib device syz0 port 1 has no pnetid [ 97.517727][ T185] lo speed is unknown, defaulting to 1000 [ 97.529794][ T5907] lo speed is unknown, defaulting to 1000 [ 97.882634][ T5917] loop0: detected capacity change from 0 to 8192 [ 98.029595][ T5920] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 98.036862][ T5920] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 98.050161][ T5920] udc dummy_udc.0: failed to start g1: -22 [ 98.057159][ T5920] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 98.072064][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 98.073291][ T5920] UDC core: g1: couldn't find an available UDC or it's busy [ 98.086855][ T10] usb 3-1: can't read configurations, error -71 [ 98.091837][ T5907] lo speed is unknown, defaulting to 1000 [ 98.188015][ T5635] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 98.246352][ T5764] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 98.259492][ T5635] usb 2-1: USB disconnect, device number 2 [ 98.273398][ T5764] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 98.293452][ T5764] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 98.425235][ T5925] PM: suspend entry (s2idle) [ 98.467885][ T5907] lo speed is unknown, defaulting to 1000 [ 98.803199][ T5907] lo speed is unknown, defaulting to 1000 [ 98.810302][ T5901] NFSD: Unable to initialize client recovery tracking! (-110) [ 98.819450][ T5901] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 98.828906][ T5901] NFSD: starting 90-second grace period (net f0000450) [ 98.971375][ T5635] USB vub300 remote SDIO host controller[0] now disconnected [ 99.198224][ T1025] Filesystems sync: 0.764 seconds [ 99.244578][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:4487 [ 99.254761][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5924, name: syz.1.20 [ 99.263767][ C1] preempt_count: 101, expected: 0 [ 99.268852][ C1] RCU nest depth: 0, expected: 0 [ 99.273801][ C1] 4 locks held by syz.1.20/5924: [ 99.278787][ C1] #0: ffff8880563e0a88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 99.288121][ C1] #1: ffff8880353ce548 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x202/0x1140 [ 99.298085][ C1] #2: ffff888078328e78 (mapping.invalidate_lock#2){++++}-{4:4}, at: ext4_page_mkwrite+0x237/0x1140 [ 99.309037][ C1] #3: ffffc90000a08cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5e0 [ 99.319571][ C1] Preemption disabled at: [ 99.319588][ C1] [<0000000000000000>] 0x0 [ 99.328428][ C1] CPU: 1 UID: 0 PID: 5924 Comm: syz.1.20 Not tainted syzkaller #0 PREEMPT(full) [ 99.328456][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 99.328469][ C1] Call Trace: [ 99.328478][ C1] [ 99.328487][ C1] dump_stack_lvl+0xe8/0x150 [ 99.328529][ C1] __might_resched+0x378/0x4d0 [ 99.328567][ C1] __cancel_work_sync+0x6d/0x110 [ 99.328602][ C1] mmc_free_host+0x19/0x30 [ 99.328639][ C1] call_timer_fn+0x192/0x5e0 [ 99.328660][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 99.328688][ C1] ? call_timer_fn+0xd4/0x5e0 [ 99.328707][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 99.328739][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.328767][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 99.328802][ C1] __run_timer_base+0x652/0x8b0 [ 99.328838][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.328880][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 99.328930][ C1] run_timer_softirq+0xb7/0x170 [ 99.328965][ C1] handle_softirqs+0x225/0x840 [ 99.328997][ C1] ? __irq_exit_rcu+0xca/0x220 [ 99.329050][ C1] __irq_exit_rcu+0xca/0x220 [ 99.329079][ C1] irq_exit_rcu+0x9/0x30 [ 99.329106][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 99.329138][ C1] [ 99.329145][ C1] [ 99.329153][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.329182][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 99.329210][ C1] Code: f7 e8 8d 7d cf f5 f7 c3 00 02 00 00 74 05 e8 40 5e fb f5 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 24 91 c0 f5 65 8b 05 1d 61 99 07 85 c0 74 18 5b 41 5e e9 ec 51 [ 99.329227][ C1] RSP: 0000:ffffc90004d47820 EFLAGS: 00000206 [ 99.329246][ C1] RAX: 0000000000000002 RBX: 0000000000000293 RCX: 0000000080000001 [ 99.329260][ C1] RDX: 0000000000000007 RSI: ffffffff8e22f174 RDI: 0000000000000001 [ 99.329275][ C1] RBP: 0000000000000001 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 99.329291][ C1] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: 0000000000000000 [ 99.329307][ C1] R13: ffff8880766187e0 R14: ffff888078328dc0 R15: dffffc0000000000 [ 99.329343][ C1] mark_buffer_dirty+0x261/0x410 [ 99.329372][ C1] block_commit_write+0x15d/0x270 [ 99.329407][ C1] block_page_mkwrite+0x32a/0x3a0 [ 99.329439][ C1] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 99.329470][ C1] ext4_page_mkwrite+0xcf4/0x1140 [ 99.329512][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.329545][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.329579][ C1] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 99.329606][ C1] ? __lock_acquire+0x683/0x2cf0 [ 99.329651][ C1] do_page_mkwrite+0x147/0x310 [ 99.329692][ C1] do_wp_page+0x1973/0x4c70 [ 99.329740][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 99.329765][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 99.329793][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.329824][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 99.329853][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.329889][ C1] handle_mm_fault+0x1490/0x3080 [ 99.329928][ C1] ? handle_mm_fault+0xec/0x3080 [ 99.329962][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 99.329985][ C1] ? lock_vma_under_rcu+0x45a/0x500 [ 99.330039][ C1] do_user_addr_fault+0xa4d/0x1340 [ 99.330080][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.330107][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.330132][ C1] ? trace_page_fault_user+0x84/0x1e0 [ 99.330178][ C1] exc_page_fault+0x6a/0xc0 [ 99.330209][ C1] asm_exc_page_fault+0x26/0x30 [ 99.330229][ C1] RIP: 0033:0x7fe4a18667e8 [ 99.330247][ C1] Code: be 08 00 00 00 48 89 ef 48 8d 50 ff 48 89 15 8f ef ee 00 44 88 78 ff 44 8b 3d 74 ef ee 00 e8 2f 52 ff ff 48 8b 05 80 ef ee 00 <44> 89 38 41 bf 04 00 00 00 48 83 c0 08 66 44 89 78 fc 83 05 6f ef [ 99.330264][ C1] RSP: 002b:00007ffc8835e9f0 EFLAGS: 00010206 [ 99.330282][ C1] RAX: 0000001b33b2421c RBX: 0000000000000026 RCX: ffffffff816c1e20 [ 99.330296][ C1] RDX: 0000001b33b2421c RSI: 0000000000000008 RDI: 00007fe4a2755720 [ 99.330312][ C1] RBP: 00007fe4a2755720 R08: 00007fe4a1c10000 R09: 00007fe4a1c26038 [ 99.330329][ C1] R10: 0000000000000001 R11: 0000000000000009 R12: 0000000000000000 [ 99.330342][ C1] R13: 00000000000000a0 R14: 0000000000000000 R15: 00000000000000a1 [ 99.330364][ C1] ? native_calibrate_tsc+0x440/0x4d0 [ 99.330405][ C1] [ 99.330946][ C1] ODEBUG: object ffffc90000a08a80 is NOT on stack ffffc90004d40000, but annotated. [ 99.331499][ C1] [ 99.331505][ C1] ====================================================== [ 99.331512][ C1] WARNING: possible circular locking dependency detected [ 99.331524][ C1] syzkaller #0 Tainted: G W [ 99.331535][ C1] ------------------------------------------------------ [ 99.331542][ C1] syz.1.20/5924 is trying to acquire lock: [ 99.331553][ C1] ffffffff8eb4bf40 (console_owner){..-.}-{0:0}, at: console_flush_all+0x123/0xaf0 [ 99.331605][ C1] [ 99.331605][ C1] but task is already holding lock: [ 99.331612][ C1] ffffffff9aa529e0 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x81/0x3c0 [ 99.331672][ C1] [ 99.331672][ C1] which lock already depends on the new lock. [ 99.331672][ C1] [ 99.331679][ C1] [ 99.331679][ C1] the existing dependency chain (in reverse order) is: [ 99.331686][ C1] [ 99.331686][ C1] -> #3 (&obj_hash[i].lock){-.-.}-{2:2}: [ 99.331715][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 99.331738][ C1] debug_object_assert_init+0xb0/0x380 [ 99.331769][ C1] hrtimer_start_range_ns+0x3d/0x3e0 [ 99.331788][ C1] rpm_suspend+0x1333/0x17b0 [ 99.331813][ C1] __pm_runtime_idle+0x12f/0x1a0 [ 99.331837][ C1] __device_attach+0x355/0x450 [ 99.331863][ C1] device_initial_probe+0xa1/0xd0 [ 99.331888][ C1] bus_probe_device+0x12a/0x220 [ 99.331906][ C1] device_add+0x7d7/0xb80 [ 99.331928][ C1] serdev_controller_add+0x85/0x6d0 [ 99.331960][ C1] serdev_tty_port_register+0x159/0x260 [ 99.331979][ C1] tty_port_register_device_attr_serdev+0x169/0x1f0 [ 99.332006][ C1] serial_core_register_port+0xffa/0x2840 [ 99.332027][ C1] serial8250_register_8250_port+0x16b4/0x2090 [ 99.332060][ C1] serial_pnp_probe+0x56a/0x7f0 [ 99.332078][ C1] pnp_device_probe+0x30b/0x4c0 [ 99.332096][ C1] really_probe+0x254/0xae0 [ 99.332123][ C1] __driver_probe_device+0x1e8/0x360 [ 99.332151][ C1] driver_probe_device+0x4f/0x240 [ 99.332183][ C1] __driver_attach+0x339/0x600 [ 99.332208][ C1] bus_for_each_dev+0x23b/0x2c0 [ 99.332226][ C1] bus_add_driver+0x345/0x670 [ 99.332244][ C1] driver_register+0x23a/0x320 [ 99.332273][ C1] serial8250_init+0x8f/0x160 [ 99.332293][ C1] do_one_initcall+0x250/0x870 [ 99.332324][ C1] do_initcall_level+0x10a/0x1a0 [ 99.332346][ C1] do_initcalls+0x59/0xa0 [ 99.332365][ C1] kernel_init_freeable+0x29d/0x3e0 [ 99.332386][ C1] kernel_init+0x1d/0x1d0 [ 99.332418][ C1] ret_from_fork+0x514/0xb70 [ 99.332448][ C1] ret_from_fork_asm+0x1a/0x30 [ 99.332466][ C1] [ 99.332466][ C1] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 99.332495][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 99.332517][ C1] __pm_runtime_resume+0x10f/0x180 [ 99.332542][ C1] __uart_start+0x171/0x460 [ 99.332561][ C1] uart_write+0x251/0x9f0 [ 99.332581][ C1] n_tty_write+0xd49/0x11e0 [ 99.332608][ C1] file_tty_write+0x509/0x9c0 [ 99.332626][ C1] vfs_write+0x612/0xba0 [ 99.332644][ C1] ksys_write+0x150/0x270 [ 99.332662][ C1] do_syscall_64+0x174/0x580 [ 99.332690][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.332710][ C1] [ 99.332710][ C1] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 99.332738][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 99.332760][ C1] serial8250_console_write+0x153/0x1ba0 [ 99.332785][ C1] console_flush_all+0x6ea/0xaf0 [ 99.332808][ C1] console_unlock+0xd1/0x1c0 [ 99.332826][ C1] vprintk_emit+0x485/0x560 [ 99.332845][ C1] _printk+0xdd/0x130 [ 99.332866][ C1] register_console+0xbc3/0xfc0 [ 99.332889][ C1] univ8250_console_init+0x3a/0x70 [ 99.332908][ C1] console_init+0x10b/0x4a0 [ 99.332936][ C1] start_kernel+0x238/0x3e0 [ 99.332956][ C1] x86_64_start_reservations+0x24/0x30 [ 99.332984][ C1] x86_64_start_kernel+0x137/0x1b0 [ 99.333011][ C1] common_startup_64+0x13e/0x157 [ 99.333034][ C1] [ 99.333034][ C1] -> #0 (console_owner){..-.}-{0:0}: [ 99.333062][ C1] __lock_acquire+0x1520/0x2cf0 [ 99.333092][ C1] lock_acquire+0x106/0x350 [ 99.333120][ C1] console_flush_all+0x693/0xaf0 [ 99.333142][ C1] console_unlock+0xd1/0x1c0 [ 99.333165][ C1] vprintk_emit+0x485/0x560 [ 99.333185][ C1] _printk+0xdd/0x130 [ 99.333205][ C1] __debug_object_init+0x2c3/0x3c0 [ 99.333235][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 99.333264][ C1] wakeup_source_unregister+0x129/0x3f0 [ 99.333288][ C1] mmc_host_classdev_release+0x47/0x100 [ 99.333319][ C1] device_release+0xc4/0x1f0 [ 99.333348][ C1] kobject_put+0x222/0x550 [ 99.333380][ C1] call_timer_fn+0x192/0x5e0 [ 99.333397][ C1] __run_timer_base+0x652/0x8b0 [ 99.333426][ C1] run_timer_softirq+0xb7/0x170 [ 99.333456][ C1] handle_softirqs+0x225/0x840 [ 99.333480][ C1] __irq_exit_rcu+0xca/0x220 [ 99.333504][ C1] irq_exit_rcu+0x9/0x30 [ 99.333527][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 99.333551][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.333573][ C1] _raw_spin_unlock_irqrestore+0x47/0x80 [ 99.333596][ C1] mark_buffer_dirty+0x261/0x410 [ 99.333618][ C1] block_commit_write+0x15d/0x270 [ 99.333643][ C1] block_page_mkwrite+0x32a/0x3a0 [ 99.333670][ C1] ext4_page_mkwrite+0xcf4/0x1140 [ 99.333697][ C1] do_page_mkwrite+0x147/0x310 [ 99.333725][ C1] do_wp_page+0x1973/0x4c70 [ 99.333746][ C1] handle_mm_fault+0x1490/0x3080 [ 99.333768][ C1] do_user_addr_fault+0xa4d/0x1340 [ 99.333800][ C1] exc_page_fault+0x6a/0xc0 [ 99.333824][ C1] asm_exc_page_fault+0x26/0x30 [ 99.333844][ C1] [ 99.333844][ C1] other info that might help us debug this: [ 99.333844][ C1] [ 99.333850][ C1] Chain exists of: [ 99.333850][ C1] console_owner --> &dev->power.lock --> &obj_hash[i].lock [ 99.333850][ C1] [ 99.333884][ C1] Possible unsafe locking scenario: [ 99.333884][ C1] [ 99.333890][ C1] CPU0 CPU1 [ 99.333897][ C1] ---- ---- [ 99.333903][ C1] lock(&obj_hash[i].lock); [ 99.333917][ C1] lock(&dev->power.lock); [ 99.333933][ C1] lock(&obj_hash[i].lock); [ 99.333949][ C1] lock(console_owner); [ 99.333963][ C1] [ 99.333963][ C1] *** DEADLOCK *** [ 99.333963][ C1] [ 99.333968][ C1] 7 locks held by syz.1.20/5924: [ 99.333980][ C1] #0: ffff8880563e0a88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 99.334037][ C1] #1: ffff8880353ce548 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x202/0x1140 [ 99.334093][ C1] #2: ffff888078328e78 (mapping.invalidate_lock#2){++++}-{4:4}, at: ext4_page_mkwrite+0x237/0x1140 [ 99.334155][ C1] #3: ffffc90000a08cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5e0 [ 99.334209][ C1] #4: ffffffff9aa529e0 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x81/0x3c0 [ 99.334269][ C1] #5: ffffffff8eb4bfa0 (console_lock){+.+.}-{0:0}, at: _printk+0xdd/0x130 [ 99.334328][ C1] #6: ffffffff8ea33838 (console_srcu){....}-{0:0}, at: console_flush_all+0x123/0xaf0 [ 99.334390][ C1] [ 99.334390][ C1] stack backtrace: [ 99.334404][ C1] CPU: 1 UID: 0 PID: 5924 Comm: syz.1.20 Tainted: G W syzkaller #0 PREEMPT(full) [ 99.334433][ C1] Tainted: [W]=WARN [ 99.334441][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 99.334455][ C1] Call Trace: [ 99.334462][ C1] [ 99.334470][ C1] dump_stack_lvl+0xe8/0x150 [ 99.334503][ C1] print_circular_bug+0x2e1/0x300 [ 99.334527][ C1] check_noncircular+0x12e/0x150 [ 99.334552][ C1] __lock_acquire+0x1520/0x2cf0 [ 99.334595][ C1] ? console_flush_all+0x123/0xaf0 [ 99.334619][ C1] lock_acquire+0x106/0x350 [ 99.334649][ C1] ? console_flush_all+0x123/0xaf0 [ 99.334675][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.334702][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.334727][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 99.334753][ C1] ? console_flush_all+0x123/0xaf0 [ 99.334777][ C1] console_flush_all+0x693/0xaf0 [ 99.334801][ C1] ? console_flush_all+0x123/0xaf0 [ 99.334827][ C1] ? console_flush_all+0x123/0xaf0 [ 99.334854][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 99.334880][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.334905][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 99.334935][ C1] console_unlock+0xd1/0x1c0 [ 99.334958][ C1] ? __pfx_console_unlock+0x10/0x10 [ 99.334978][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.335003][ C1] ? _raw_spin_unlock_irqrestore+0x40/0x80 [ 99.335027][ C1] ? _printk+0xdd/0x130 [ 99.335050][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.335077][ C1] vprintk_emit+0x485/0x560 [ 99.335100][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 99.335126][ C1] _printk+0xdd/0x130 [ 99.335148][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.335181][ C1] ? __pfx__printk+0x10/0x10 [ 99.335203][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.335230][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.335259][ C1] __debug_object_init+0x2c3/0x3c0 [ 99.335292][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.335317][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 99.335341][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 99.335374][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 99.335404][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 99.335435][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.335459][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 99.335490][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.335514][ C1] ? synchronize_srcu+0x20a/0x260 [ 99.335546][ C1] wakeup_source_unregister+0x129/0x3f0 [ 99.335575][ C1] mmc_host_classdev_release+0x47/0x100 [ 99.335608][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 99.335641][ C1] device_release+0xc4/0x1f0 [ 99.335674][ C1] kobject_put+0x222/0x550 [ 99.335708][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 99.335730][ C1] call_timer_fn+0x192/0x5e0 [ 99.335749][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 99.335776][ C1] ? call_timer_fn+0xd4/0x5e0 [ 99.335799][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 99.335823][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.335847][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 99.335875][ C1] __run_timer_base+0x652/0x8b0 [ 99.335906][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.335938][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 99.335977][ C1] run_timer_softirq+0xb7/0x170 [ 99.336010][ C1] handle_softirqs+0x225/0x840 [ 99.336037][ C1] ? __irq_exit_rcu+0xca/0x220 [ 99.336067][ C1] __irq_exit_rcu+0xca/0x220 [ 99.336093][ C1] irq_exit_rcu+0x9/0x30 [ 99.336117][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 99.336143][ C1] [ 99.336150][ C1] [ 99.336158][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.336186][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 99.336212][ C1] Code: f7 e8 8d 7d cf f5 f7 c3 00 02 00 00 74 05 e8 40 5e fb f5 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 24 91 c0 f5 65 8b 05 1d 61 99 07 85 c0 74 18 5b 41 5e e9 ec 51 [ 99.336229][ C1] RSP: 0000:ffffc90004d47820 EFLAGS: 00000206 [ 99.336247][ C1] RAX: 0000000000000002 RBX: 0000000000000293 RCX: 0000000080000001 [ 99.336261][ C1] RDX: 0000000000000007 RSI: ffffffff8e22f174 RDI: 0000000000000001 [ 99.336274][ C1] RBP: 0000000000000001 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 99.336289][ C1] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: 0000000000000000 [ 99.336303][ C1] R13: ffff8880766187e0 R14: ffff888078328dc0 R15: dffffc0000000000 [ 99.336329][ C1] mark_buffer_dirty+0x261/0x410 [ 99.336354][ C1] block_commit_write+0x15d/0x270 [ 99.336385][ C1] block_page_mkwrite+0x32a/0x3a0 [ 99.336412][ C1] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 99.336438][ C1] ext4_page_mkwrite+0xcf4/0x1140 [ 99.336470][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.336496][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.336523][ C1] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 99.336550][ C1] ? __lock_acquire+0x683/0x2cf0 [ 99.336586][ C1] do_page_mkwrite+0x147/0x310 [ 99.336619][ C1] do_wp_page+0x1973/0x4c70 [ 99.336651][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 99.336673][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 99.336697][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.336724][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 99.336748][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.336778][ C1] handle_mm_fault+0x1490/0x3080 [ 99.336809][ C1] ? handle_mm_fault+0xec/0x3080 [ 99.336838][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 99.336861][ C1] ? lock_vma_under_rcu+0x45a/0x500 [ 99.336902][ C1] do_user_addr_fault+0xa4d/0x1340 [ 99.336939][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.336965][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.336990][ C1] ? trace_page_fault_user+0x84/0x1e0 [ 99.337025][ C1] exc_page_fault+0x6a/0xc0 [ 99.337052][ C1] asm_exc_page_fault+0x26/0x30 [ 99.337073][ C1] RIP: 0033:0x7fe4a18667e8 [ 99.337089][ C1] Code: be 08 00 00 00 48 89 ef 48 8d 50 ff 48 89 15 8f ef ee 00 44 88 78 ff 44 8b 3d 74 ef ee 00 e8 2f 52 ff ff 48 8b 05 80 ef ee 00 <44> 89 38 41 bf 04 00 00 00 48 83 c0 08 66 44 89 78 fc 83 05 6f ef [ 99.337106][ C1] RSP: 002b:00007ffc8835e9f0 EFLAGS: 00010206 [ 99.337123][ C1] RAX: 0000001b33b2421c RBX: 0000000000000026 RCX: ffffffff816c1e20 [ 99.337137][ C1] RDX: 0000001b33b2421c RSI: 0000000000000008 RDI: 00007fe4a2755720 [ 99.337151][ C1] RBP: 00007fe4a2755720 R08: 00007fe4a1c10000 R09: 00007fe4a1c26038 [ 99.337173][ C1] R10: 0000000000000001 R11: 0000000000000009 R12: 0000000000000000 [ 99.337185][ C1] R13: 00000000000000a0 R14: 0000000000000000 R15: 00000000000000a1 [ 99.337202][ C1] ? native_calibrate_tsc+0x440/0x4d0 [ 99.337236][ C1] [ 101.132623][ C1] ------------[ cut here ]------------ [ 101.138070][ C1] 1 [ 101.138082][ C1] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#1: syz.1.20/5924 [ 101.150463][ C1] Modules linked in: [ 101.154359][ C1] CPU: 1 UID: 0 PID: 5924 Comm: syz.1.20 Tainted: G W syzkaller #0 PREEMPT(full) [ 101.165031][ C1] Tainted: [W]=WARN [ 101.168822][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 101.178867][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 101.184861][ C1] Code: 31 fc cc 41 ff c7 44 89 3d 79 92 ce 15 48 c7 c1 80 e6 4b 8c 48 c7 c7 e0 e6 4b 8c 84 c0 48 0f 45 f9 48 89 de e8 ad 32 49 fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 71 2a 58 0a 3b 05 6f [ 101.204553][ C1] RSP: 0000:ffffc90000a089b8 EFLAGS: 00010046 [ 101.210642][ C1] RAX: 0000000000000050 RBX: ffffc90000a08a80 RCX: 4c2fd82ed74d8d00 [ 101.218610][ C1] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 101.226660][ C1] RBP: ffff888031b5be20 R08: 0000000000000003 R09: 0000000000000004 [ 101.234625][ C1] R10: dffffc0000000000 R11: fffffbfff1d3ca24 R12: 1ffff9200014114c [ 101.242590][ C1] R13: ffff8880773432a0 R14: dffffc0000000000 R15: 0000000000000001 [ 101.250557][ C1] FS: 0000555566d6e500(0000) GS:ffff88812504b000(0000) knlGS:0000000000000000 [ 101.259481][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.266053][ C1] CR2: 0000001b33b2421c CR3: 000000007507e000 CR4: 0000000000350ef0 [ 101.274017][ C1] Call Trace: [ 101.277372][ C1] [ 101.280205][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.285836][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 101.291380][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 101.296411][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 101.301960][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 101.306986][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.312615][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 101.318168][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.323794][ C1] ? synchronize_srcu+0x20a/0x260 [ 101.328815][ C1] wakeup_source_unregister+0x129/0x3f0 [ 101.334358][ C1] mmc_host_classdev_release+0x47/0x100 [ 101.339913][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 101.346074][ C1] device_release+0xc4/0x1f0 [ 101.350669][ C1] kobject_put+0x222/0x550 [ 101.355095][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 101.360236][ C1] call_timer_fn+0x192/0x5e0 [ 101.364992][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 101.371664][ C1] ? call_timer_fn+0xd4/0x5e0 [ 101.376330][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 101.381463][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 101.386655][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 101.393330][ C1] __run_timer_base+0x652/0x8b0 [ 101.398185][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.403822][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 101.409217][ C1] run_timer_softirq+0xb7/0x170 [ 101.414090][ C1] handle_softirqs+0x225/0x840 [ 101.418856][ C1] ? __irq_exit_rcu+0xca/0x220 [ 101.423646][ C1] __irq_exit_rcu+0xca/0x220 [ 101.428235][ C1] irq_exit_rcu+0x9/0x30 [ 101.432474][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 101.438111][ C1] [ 101.441037][ C1] [ 101.443978][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 101.449982][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 101.456401][ C1] Code: f7 e8 8d 7d cf f5 f7 c3 00 02 00 00 74 05 e8 40 5e fb f5 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 24 91 c0 f5 65 8b 05 1d 61 99 07 85 c0 74 18 5b 41 5e e9 ec 51 [ 101.476176][ C1] RSP: 0000:ffffc90004d47820 EFLAGS: 00000206 [ 101.482245][ C1] RAX: 0000000000000002 RBX: 0000000000000293 RCX: 0000000080000001 [ 101.490223][ C1] RDX: 0000000000000007 RSI: ffffffff8e22f174 RDI: 0000000000000001 [ 101.498189][ C1] RBP: 0000000000000001 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 101.506161][ C1] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: 0000000000000000 [ 101.514128][ C1] R13: ffff8880766187e0 R14: ffff888078328dc0 R15: dffffc0000000000 [ 101.522149][ C1] mark_buffer_dirty+0x261/0x410 [ 101.527131][ C1] block_commit_write+0x15d/0x270 [ 101.532171][ C1] block_page_mkwrite+0x32a/0x3a0 [ 101.537194][ C1] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 101.543083][ C1] ext4_page_mkwrite+0xcf4/0x1140 [ 101.548120][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.553841][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.559475][ C1] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 101.564936][ C1] ? __lock_acquire+0x683/0x2cf0 [ 101.569882][ C1] do_page_mkwrite+0x147/0x310 [ 101.574650][ C1] do_wp_page+0x1973/0x4c70 [ 101.579163][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 101.584092][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 101.589371][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.595007][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 101.600461][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.606097][ C1] handle_mm_fault+0x1490/0x3080 [ 101.611039][ C1] ? handle_mm_fault+0xec/0x3080 [ 101.615985][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 101.621349][ C1] ? lock_vma_under_rcu+0x45a/0x500 [ 101.626555][ C1] do_user_addr_fault+0xa4d/0x1340 [ 101.631674][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.638432][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.644058][ C1] ? trace_page_fault_user+0x84/0x1e0 [ 101.649444][ C1] exc_page_fault+0x6a/0xc0 [ 101.653946][ C1] asm_exc_page_fault+0x26/0x30 [ 101.658812][ C1] RIP: 0033:0x7fe4a18667e8 [ 101.663217][ C1] Code: be 08 00 00 00 48 89 ef 48 8d 50 ff 48 89 15 8f ef ee 00 44 88 78 ff 44 8b 3d 74 ef ee 00 e8 2f 52 ff ff 48 8b 05 80 ef ee 00 <44> 89 38 41 bf 04 00 00 00 48 83 c0 08 66 44 89 78 fc 83 05 6f ef [ 101.682856][ C1] RSP: 002b:00007ffc8835e9f0 EFLAGS: 00010206 [ 101.688934][ C1] RAX: 0000001b33b2421c RBX: 0000000000000026 RCX: ffffffff816c1e20 [ 101.696942][ C1] RDX: 0000001b33b2421c RSI: 0000000000000008 RDI: 00007fe4a2755720 [ 101.704914][ C1] RBP: 00007fe4a2755720 R08: 00007fe4a1c10000 R09: 00007fe4a1c26038 [ 101.712916][ C1] R10: 0000000000000001 R11: 0000000000000009 R12: 0000000000000000 [ 101.720976][ C1] R13: 00000000000000a0 R14: 0000000000000000 R15: 00000000000000a1 [ 101.728957][ C1] ? native_calibrate_tsc+0x440/0x4d0 [ 101.734369][ C1] [ 101.737382][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 101.744656][ C1] CPU: 1 UID: 0 PID: 5924 Comm: syz.1.20 Tainted: G W syzkaller #0 PREEMPT(full) [ 101.755481][ C1] Tainted: [W]=WARN [ 101.759395][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 101.769450][ C1] Call Trace: [ 101.772728][ C1] [ 101.775561][ C1] vpanic+0x56c/0xa60 [ 101.779592][ C1] ? __pfx__printk+0x10/0x10 [ 101.784232][ C1] ? __pfx_vpanic+0x10/0x10 [ 101.788767][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 101.794156][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 101.799367][ C1] panic+0xc5/0xd0 [ 101.803096][ C1] ? __pfx_panic+0x10/0x10 [ 101.807536][ C1] __warn+0x315/0x4c0 [ 101.811533][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 101.816823][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 101.822246][ C1] __report_bug+0x276/0x570 [ 101.826753][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 101.832045][ C1] ? __pfx___report_bug+0x10/0x10 [ 101.837077][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.842816][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.848544][ C1] ? __wake_up_klogd+0xe6/0x120 [ 101.853404][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.859041][ C1] ? vprintk_emit+0x4eb/0x560 [ 101.863816][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 101.868844][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 101.874141][ C1] report_bug+0x16a/0x220 [ 101.878487][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 101.883782][ C1] ? __debug_object_init+0x2c6/0x3c0 [ 101.889337][ C1] handle_bug+0x9c/0x200 [ 101.893603][ C1] exc_invalid_op+0x1a/0x50 [ 101.898118][ C1] asm_exc_invalid_op+0x1a/0x20 [ 101.902973][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 101.908871][ C1] Code: 31 fc cc 41 ff c7 44 89 3d 79 92 ce 15 48 c7 c1 80 e6 4b 8c 48 c7 c7 e0 e6 4b 8c 84 c0 48 0f 45 f9 48 89 de e8 ad 32 49 fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 71 2a 58 0a 3b 05 6f [ 101.928594][ C1] RSP: 0000:ffffc90000a089b8 EFLAGS: 00010046 [ 101.934669][ C1] RAX: 0000000000000050 RBX: ffffc90000a08a80 RCX: 4c2fd82ed74d8d00 [ 101.942637][ C1] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 101.950605][ C1] RBP: ffff888031b5be20 R08: 0000000000000003 R09: 0000000000000004 [ 101.958667][ C1] R10: dffffc0000000000 R11: fffffbfff1d3ca24 R12: 1ffff9200014114c [ 101.966675][ C1] R13: ffff8880773432a0 R14: dffffc0000000000 R15: 0000000000000001 [ 101.974717][ C1] ? __debug_object_init+0x2c3/0x3c0 [ 101.980022][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.985659][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 101.991227][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 101.996334][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 102.002374][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.007451][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.013127][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 102.018696][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.024419][ C1] ? synchronize_srcu+0x20a/0x260 [ 102.029461][ C1] wakeup_source_unregister+0x129/0x3f0 [ 102.035368][ C1] mmc_host_classdev_release+0x47/0x100 [ 102.040925][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 102.047098][ C1] device_release+0xc4/0x1f0 [ 102.051700][ C1] kobject_put+0x222/0x550 [ 102.056133][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 102.061032][ C1] call_timer_fn+0x192/0x5e0 [ 102.065616][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 102.072305][ C1] ? call_timer_fn+0xd4/0x5e0 [ 102.077096][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 102.082213][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 102.087413][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 102.094107][ C1] __run_timer_base+0x652/0x8b0 [ 102.098973][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.104728][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 102.110113][ C1] run_timer_softirq+0xb7/0x170 [ 102.115119][ C1] handle_softirqs+0x225/0x840 [ 102.119903][ C1] ? __irq_exit_rcu+0xca/0x220 [ 102.124677][ C1] __irq_exit_rcu+0xca/0x220 [ 102.129285][ C1] irq_exit_rcu+0x9/0x30 [ 102.133524][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 102.139160][ C1] [ 102.142085][ C1] [ 102.145002][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 102.150975][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 102.157385][ C1] Code: f7 e8 8d 7d cf f5 f7 c3 00 02 00 00 74 05 e8 40 5e fb f5 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 24 91 c0 f5 65 8b 05 1d 61 99 07 85 c0 74 18 5b 41 5e e9 ec 51 [ 102.176982][ C1] RSP: 0000:ffffc90004d47820 EFLAGS: 00000206 [ 102.183044][ C1] RAX: 0000000000000002 RBX: 0000000000000293 RCX: 0000000080000001 [ 102.191003][ C1] RDX: 0000000000000007 RSI: ffffffff8e22f174 RDI: 0000000000000001 [ 102.198966][ C1] RBP: 0000000000000001 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 102.206929][ C1] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: 0000000000000000 [ 102.214888][ C1] R13: ffff8880766187e0 R14: ffff888078328dc0 R15: dffffc0000000000 [ 102.222858][ C1] mark_buffer_dirty+0x261/0x410 [ 102.227798][ C1] block_commit_write+0x15d/0x270 [ 102.232829][ C1] block_page_mkwrite+0x32a/0x3a0 [ 102.237857][ C1] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 102.243751][ C1] ext4_page_mkwrite+0xcf4/0x1140 [ 102.248779][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.254411][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.260050][ C1] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 102.265506][ C1] ? __lock_acquire+0x683/0x2cf0 [ 102.270489][ C1] do_page_mkwrite+0x147/0x310 [ 102.275283][ C1] do_wp_page+0x1973/0x4c70 [ 102.279834][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 102.284683][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.289708][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.295337][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 102.300701][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.306354][ C1] handle_mm_fault+0x1490/0x3080 [ 102.311296][ C1] ? handle_mm_fault+0xec/0x3080 [ 102.316240][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 102.321518][ C1] ? lock_vma_under_rcu+0x45a/0x500 [ 102.326732][ C1] do_user_addr_fault+0xa4d/0x1340 [ 102.331938][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.337563][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.343186][ C1] ? trace_page_fault_user+0x84/0x1e0 [ 102.348562][ C1] exc_page_fault+0x6a/0xc0 [ 102.353062][ C1] asm_exc_page_fault+0x26/0x30 [ 102.357902][ C1] RIP: 0033:0x7fe4a18667e8 [ 102.362304][ C1] Code: be 08 00 00 00 48 89 ef 48 8d 50 ff 48 89 15 8f ef ee 00 44 88 78 ff 44 8b 3d 74 ef ee 00 e8 2f 52 ff ff 48 8b 05 80 ef ee 00 <44> 89 38 41 bf 04 00 00 00 48 83 c0 08 66 44 89 78 fc 83 05 6f ef [ 102.381900][ C1] RSP: 002b:00007ffc8835e9f0 EFLAGS: 00010206 [ 102.387968][ C1] RAX: 0000001b33b2421c RBX: 0000000000000026 RCX: ffffffff816c1e20 [ 102.395935][ C1] RDX: 0000001b33b2421c RSI: 0000000000000008 RDI: 00007fe4a2755720 [ 102.403903][ C1] RBP: 00007fe4a2755720 R08: 00007fe4a1c10000 R09: 00007fe4a1c26038 [ 102.411862][ C1] R10: 0000000000000001 R11: 0000000000000009 R12: 0000000000000000 [ 102.419906][ C1] R13: 00000000000000a0 R14: 0000000000000000 R15: 00000000000000a1 [ 102.427869][ C1] ? native_calibrate_tsc+0x440/0x4d0 [ 102.433249][ C1] [ 102.436488][ C1] Kernel Offset: disabled [ 102.440796][ C1] Rebooting in 86400 seconds..