last executing test programs:

2m41.334437141s ago: executing program 3 (id=4):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='freeze', 0x6)

2m41.319021942s ago: executing program 2 (id=5):
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='disk\n', 0x5)

2m41.310397171s ago: executing program 0 (id=1):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pnp/drivers/serial/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='00:04\n', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:04/resources\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='activate\n', 0x9)

2m41.283304282s ago: executing program 1 (id=2):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/ipv6/conf/lo/keep_addr_on_down\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x1})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={@private0, 0x40, 0x1})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00'})

2m41.249444103s ago: executing program 2 (id=6):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cg\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./cg\x00', &(0x7f0000000080)='cgroup\x00', 0x0, &(0x7f00000000c0)='memory\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cg/test\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cg/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='4096', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cg/test/tasks\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0', 0x1)
mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000000000/0x10000)=nil, 0x10000)

2m41.248926743s ago: executing program 0 (id=7):
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402000240000000000010902270001010080fa0904000003ffffff00070501020002000705810200020007058402000200"], 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\x00')
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)

2m41.217901754s ago: executing program 1 (id=8):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0x0, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x100000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000100000)={0x0, &(0x7f0000100100)=[@wrmsr={0x65, 0x20, {0x1b, 0xfee00d00}}, @wrmsr={0x65, 0x20, {0x80b}}], 0x40})
ioctl$KVM_RUN(r3, 0x0, 0x0)

2m41.169920395s ago: executing program 2 (id=9):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='8086 100e\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)

2m41.169818415s ago: executing program 1 (id=10):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem', 0x3)

2m41.169742035s ago: executing program 2 (id=11):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./ram1\x00', 0x8000, 0x101)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./ram1\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f0000000000)="fc4e2ba9", 0x4, 0x7ff0000)
pwrite64(r0, &(0x7f0000000000)='Z\x00\x00\x00', 0x4, 0x7ff0008)
pwrite64(r0, &(0x7f0000000000)="01000000", 0x4, 0x7ff0028)
pwrite64(r0, &(0x7f0000000000)="5d4f2ba9", 0x4, 0x7ff0098)
pwrite64(r0, &(0x7f0000000000)="06000000", 0x4, 0x7ff0210)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='md0\x00', 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='0.90', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='1:1', 0x3)

2m41.151975286s ago: executing program 1 (id=12):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./card0\x00', 0x81b6, 0xe200)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./card0\x00', 0x2, 0x0)
ioctl(r0, 0x0, 0x0)

2m41.148925566s ago: executing program 2 (id=13):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='disk\n', 0x5)

2m41.114446207s ago: executing program 1 (id=14):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/printk/parameters/console_suspend\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='N\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='0\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='core\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/sys/kernel/printk\x00', 0x2, 0x0)
write(r3, &(0x7f0000000380)='1\n', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/power/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000400)='disk\n', 0x5)

2m41.114292047s ago: executing program 2 (id=15):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='1\n\x00', 0x2) (async)
nanosleep(&(0x7f0000001000)={0x1, 0x1dcd6500}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='127.0.0.1:/\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='nfs4\x00', 0x0, &(0x7f00000002c0)='addr=127.0.0.1,nolock\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff)
fchmod(r3, 0x1ff)

24.193279916s ago: executing program 32 (id=7):
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402000240000000000010902270001010080fa0904000003ffffff00070501020002000705810200020007058402000200"], 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\x00')
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)

24.148705677s ago: executing program 33 (id=14):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/printk/parameters/console_suspend\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='N\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='0\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='core\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/sys/kernel/printk\x00', 0x2, 0x0)
write(r3, &(0x7f0000000380)='1\n', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/power/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000400)='disk\n', 0x5)

24.097483209s ago: executing program 34 (id=15):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='1\n\x00', 0x2) (async)
nanosleep(&(0x7f0000001000)={0x1, 0x1dcd6500}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='127.0.0.1:/\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='nfs4\x00', 0x0, &(0x7f00000002c0)='addr=127.0.0.1,nolock\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff)
fchmod(r3, 0x1ff)

4.054050211s ago: executing program 35 (id=4):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='freeze', 0x6)

3.147729323s ago: executing program 4 (id=16):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0xc, 0x0, 0xfec00000, 0x0, &(0x7f0000000000/0x1000)=nil})
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@code={0xa, 0x1a, {"488b04250000c0fef4"}}], 0x1a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.141123143s ago: executing program 6 (id=18):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/delay_retrans\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0)
write(r1, &(0x7f0000000640)='-2 -3 +4\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/nfsv4recoverydir\x00', 0x2, 0x0)
write(r2, &(0x7f0000000940)='/tmp\n\x00', 0x5)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0)
write(r3, &(0x7f0000000540)='tcp 2049\n\x00', 0x9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0)
write(r4, &(0x7f00000001c0)='8\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfs_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./nfs_mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='addr=127.0.0.1,port=2049,vers=4.2,softerr,clientaddr=127.0.0.1\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/clients/1/info\x00', 0x0, 0x0)
read(r5, &(0x7f0000000400), 0x64)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/clients/2/info\x00', 0x0, 0x0)
read(r6, &(0x7f0000000400), 0x64)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/clients/3/info\x00', 0x0, 0x0)
read(r7, &(0x7f0000000400), 0x64)

3.137119643s ago: executing program 7 (id=19):
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b40401310000000000010902200001010080fa0904000002ff0000000705810200020007058202000200"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
nanosleep(&(0x7f00000000c0)={0x1}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/firmware/dvb-usb-dw3101.fw/loading\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/firmware/dvb-usb-dw3101.fw/data\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='A', 0x1)
write(r0, &(0x7f0000000200)='0', 0x1)
nanosleep(&(0x7f0000000240)={0x1}, 0x0)

3.112204754s ago: executing program 5 (id=17):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/tty/ttyS3/type\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='4\x00', 0x2)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000500)={0x1})
write(r1, &(0x7f0000000600)='hello\x00', 0x5)

3.057842395s ago: executing program 6 (id=20):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
ftruncate(r0, 0x800)
pwrite64(r0, &(0x7f0000001000)="444f5301", 0x4, 0x0)
pwrite64(r0, &(0x7f0000001004)="00000002", 0x4, 0x400)
pwrite64(r0, &(0x7f0000001008)="fffffff9", 0x4, 0x414)
pwrite64(r0, &(0x7f000000100c)="00000001", 0x4, 0x538)
pwrite64(r0, &(0x7f0000001010)="00000003", 0x4, 0x53c)
pwrite64(r0, &(0x7f0000001014)="00000001", 0x4, 0x5fc)
r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./dir0\x00', 0x1ff)
mount(&(0x7f0000004000)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./dir0\x00', &(0x7f0000005000)='affs\x00', 0x0, 0x0)

3.057685635s ago: executing program 6 (id=21):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0)

3.054005175s ago: executing program 5 (id=22):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/drivers/qemu_fw_cfg/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='QEMU0002:00\x00', 0xc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/QEMU0002:00/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='acpi-thermal\x00', 0xd)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/acpi-thermal/bind\x00', 0x1, 0x0)
write(r2, &(0x7f00000001c0)='QEMU0002:00\x00', 0xc)

3.053933485s ago: executing program 6 (id=23):
r0 = memfd_create(&(0x7f0000000100)='memfd\x00', 0x0)
ftruncate(r0, 0x10000000) (async)

3.020099556s ago: executing program 6 (id=24):
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da0b538100030000000109022700010100a0fa0904000003ffff0000070581020002000705020200020007058303080008"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0x40, 0x5, 0x4, "034c105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)={0x84, &(0x7f0000000400)={0x40, 0x5, 0x4, "034c105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000900)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000800)={0x84, &(0x7f0000000700)={0x40, 0x5, 0x4, "034c105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000c00)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000b00)={0x84, &(0x7f0000000a00)={0x40, 0x5, 0x4, "034c105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000f00)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000e00)={0x84, &(0x7f0000000d00)={0x40, 0x5, 0x4, "034c105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001100)={0x84, &(0x7f0000001000)={0x40, 0x5, 0x4, "034c105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000001500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001400)={0x84, &(0x7f0000001300)={0x40, 0x5, 0x4, "034c105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000001800)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001700)={0x84, &(0x7f0000001600)={0x40, 0x5, 0x4, "034c105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000001b00)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001a00)={0x84, &(0x7f0000001900)={0x40, 0x5, 0x4, "034c105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000001e00)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001d00)={0x84, &(0x7f0000001c00)={0x40, 0x5, 0x4, "034c105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000002000)={0x1}, 0x0)

2.977915327s ago: executing program 5 (id=25):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2)
ioctl$USBDEVFS_RESET(r1, 0x5514) (async)
syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000300)={0x0, 0x1, 0x12, {0x12, 0x1, "000200000010582005109bc100000001"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.945396068s ago: executing program 4 (id=26):
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902220001010080fa090400000103000000092111010001224e0007058103400001"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x22, 0x4e, {0x5, 0x1, "0901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
write(r2, &(0x7f0000000700)='auto\x00', 0x4)
write(r3, &(0x7f0000000700)='auto\x00', 0x4)
write(r4, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
write(r2, &(0x7f0000000800)='on\x00', 0x2)
write(r3, &(0x7f0000000800)='on\x00', 0x2)
write(r4, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

962.840806ms ago: executing program 7 (id=27):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:04/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='00:04\x00', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pnp/devices/00:04/resources\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='disable', 0x7)
write(r1, &(0x7f00000001c0)='set io 0-0', 0xa)
write(r1, &(0x7f0000000200)='activate', 0x8)

946.128647ms ago: executing program 7 (id=28):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x27, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a1018510150026ff00750895068100910085119513810091008512953f81009100c0"}}, 0x13f)
nanosleep(&(0x7f0000000100)={0x0, 0x30000000}, 0x0)
write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x7, "10ff001102005a"}}, 0xd)
nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0)
write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x14, "11ff00000100"/20}}, 0x1a)
nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0)
write$UHID_INPUT2(r0, &(0x7f0000000400)={0xc, {0x14, "11ff012000"/20}}, 0x1a)
nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0)
write$UHID_INPUT2(r0, &(0x7f0000000500)={0xc, {0x14, "11ff01100800"/20}}, 0x1a)

479.777258ms ago: executing program 6 (id=29):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0)
write(r3, &(0x7f0000001900)='Y\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000900)='127.0.0.1 / 2147483647 74754 0 0 0\n', 0x23)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000b00)='127.0.0.1 1 00000000 2147483647 /\n', 0x23)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0)
write(r7, &(0x7f0000000f00)='1\n', 0x2)
nanosleep(&(0x7f0000001c00)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1,port=2049,sec=sys\x00')
r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x1ff)
write(r8, &(0x7f0000001500)='test\x00', 0x4)

335.717061ms ago: executing program 4 (id=30):
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402000240000000000010902270001010080fa0904000003ffffff00070501020002000705810200020007058402000200"], 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\x00') (async)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) (async)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

116.944927ms ago: executing program 7 (id=31):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='dwc3-pci\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/virtio-pci/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='0000:00:03.0\x00', 0xd)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/dwc3-pci/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='0000:00:03.0\x00', 0xd)

0s ago: executing program 5 (id=32):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @loopback}, 0x10)
listen(r0, 0x1)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source\x00', &(0x7f0000000780)='127.0.0.1:8080:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='ms_mode\x00', &(0x7f0000000880)='legacy\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
r2 = accept(r0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000001000)='ceph v027', 0x9, 0x0, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000002000), 0x13a, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000003000)="07ffffffffffffffff00"/26, 0x1a, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000004000)="010100000000000000000000000000000012000000000022000000000000000000000000000100000000000000000000000000000000001e000000010118000000000000000000000000000000000000000100"/110, 0x6d, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.117' (ED25519) to the list of known hosts.
[   30.757195][   T36] audit: type=1400 audit(1785848634.930:64): avc:  denied  { mounton } for  pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   30.760476][  T286] cgroup: Unknown subsys name 'net'
[   30.779904][   T36] audit: type=1400 audit(1785848634.930:65): avc:  denied  { mount } for  pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   30.807253][   T36] audit: type=1400 audit(1785848634.960:66): avc:  denied  { unmount } for  pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   30.807686][  T286] cgroup: Unknown subsys name 'devices'
[   30.938367][  T286] cgroup: Unknown subsys name 'hugetlb'
[   30.944081][  T286] cgroup: Unknown subsys name 'rlimit'
[   31.039142][   T36] audit: type=1400 audit(1785848635.210:67): avc:  denied  { setattr } for  pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   31.063902][   T36] audit: type=1400 audit(1785848635.210:68): avc:  denied  { mounton } for  pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   31.088876][   T36] audit: type=1400 audit(1785848635.210:69): avc:  denied  { mount } for  pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   31.109572][  T288] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   31.120807][   T36] audit: type=1400 audit(1785848635.290:70): avc:  denied  { relabelto } for  pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   31.145160][  T286] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   31.146241][   T36] audit: type=1400 audit(1785848635.290:71): avc:  denied  { write } for  pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   31.180526][   T36] audit: type=1400 audit(1785848635.310:72): avc:  denied  { read } for  pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   31.206142][   T36] audit: type=1400 audit(1785848635.310:73): avc:  denied  { open } for  pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   32.053729][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.061140][  T295] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.068364][  T295] bridge_slave_0: entered allmulticast mode
[   32.074754][  T295] bridge_slave_0: entered promiscuous mode
[   32.082452][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.089588][  T295] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.096716][  T295] bridge_slave_1: entered allmulticast mode
[   32.102978][  T295] bridge_slave_1: entered promiscuous mode
[   32.125930][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.133241][  T294] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.140405][  T294] bridge_slave_0: entered allmulticast mode
[   32.146723][  T294] bridge_slave_0: entered promiscuous mode
[   32.156011][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.163068][  T294] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.170169][  T294] bridge_slave_1: entered allmulticast mode
[   32.176537][  T294] bridge_slave_1: entered promiscuous mode
[   32.204969][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.212095][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.219305][  T293] bridge_slave_0: entered allmulticast mode
[   32.225667][  T293] bridge_slave_0: entered promiscuous mode
[   32.235153][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.242254][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.249422][  T293] bridge_slave_1: entered allmulticast mode
[   32.255708][  T293] bridge_slave_1: entered promiscuous mode
[   32.334007][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.341122][  T296] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.348266][  T296] bridge_slave_0: entered allmulticast mode
[   32.354604][  T296] bridge_slave_0: entered promiscuous mode
[   32.361314][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.368399][  T296] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.375486][  T296] bridge_slave_1: entered allmulticast mode
[   32.381928][  T296] bridge_slave_1: entered promiscuous mode
[   32.496691][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.503770][  T294] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.511089][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.518142][  T294] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.536950][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.544028][  T295] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.551384][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.558476][  T295] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.569792][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.576870][  T293] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.584242][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.591313][  T293] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.602230][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.609314][  T296] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.616650][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.623686][  T296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.670008][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.678078][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.685284][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.692740][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.701060][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.708393][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.716593][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.723788][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.748014][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.755068][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.762895][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.769995][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.777692][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.784729][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.792479][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.799539][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.818166][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.825289][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.832998][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.840076][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.856153][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.863212][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.870866][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.877965][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.903121][  T293] veth0_vlan: entered promiscuous mode
[   32.931838][  T293] veth1_macvtap: entered promiscuous mode
[   32.946906][  T296] veth0_vlan: entered promiscuous mode
[   32.960853][  T294] veth0_vlan: entered promiscuous mode
[   32.977990][  T296] veth1_macvtap: entered promiscuous mode
[   32.991785][  T294] veth1_macvtap: entered promiscuous mode
[   33.004655][  T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   33.027009][  T295] veth0_vlan: entered promiscuous mode
[   33.063131][  T295] veth1_macvtap: entered promiscuous mode
[   33.115667][  T316] PM: suspend entry (s2idle)
[   33.240303][  T336] PM: suspend entry (deep)
[   33.251379][  T336] PM: suspend exit
[  194.309241][  T355] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2028, error -5)
[  194.324888][  T355] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2022, error -5)
[  194.340988][  T355] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2022, error -5)
[  194.354314][  T355] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2032, error -5)
[  194.367287][  T355] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2035, error -5)
[  194.552873][  T457] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI
[  194.565484][  T457] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[  194.573923][  T457] CPU: 1 UID: 0 PID: 457 Comm: syz.7.31 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21
[  194.585242][  T457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  194.595311][  T457] RIP: 0010:software_node_register+0x3a/0x200
[  194.601402][  T457] Code: 53 48 83 ec 18 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 59 45 41 fe 4c 89 75 c8 4d 8d 66 08 4c 89 e0 48 c1 e8 03 48 89 45 c0 <80> 3c 18 00 74 08 4c 89 e7 e8 28 08 9a fe 4d 8b 34 24 4d 85 f6 4c
[  194.620998][  T457] RSP: 0018:ffffc90000f0f810 EFLAGS: 00010202
[  194.627060][  T457] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000080000
[  194.635026][  T457] RDX: ffffc90005230000 RSI: 0000000000008c9d RDI: 0000000000008c9e
[  194.643004][  T457] RBP: ffffc90000f0f850 R08: 0000000000000000 R09: 0000000000000000
[  194.650993][  T457] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000008
[  194.658956][  T457] R13: ffff88811babd010 R14: 0000000000000000 R15: 0000000000000000
[  194.666968][  T457] FS:  00007f21cffd66c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  194.675901][  T457] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  194.682501][  T457] CR2: 00007faf2cce479e CR3: 0000000119884000 CR4: 00000000003526b0
[  194.690474][  T457] Call Trace:
[  194.693770][  T457]  <TASK>
[  194.696701][  T457]  device_add_software_node+0x1a7/0x310
[  194.702255][  T457]  ? dwc3_pci_probe+0x456/0xab0
[  194.707121][  T457]  dwc3_pci_probe+0x5a4/0xab0
[  194.711816][  T457]  ? __cfi_dwc3_pci_probe+0x10/0x10
[  194.717045][  T457]  ? __cfi_mutex_unlock+0x10/0x10
[  194.722093][  T457]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  194.727974][  T457]  pci_device_probe+0x282/0x440
[  194.732824][  T457]  ? __cfi_pci_device_probe+0x10/0x10
[  194.738213][  T457]  really_probe+0x2e1/0x8b0
[  194.742743][  T457]  __driver_probe_device+0x193/0x280
[  194.748037][  T457]  device_driver_attach+0xdb/0x1f0
[  194.753158][  T457]  bind_store+0x1dc/0x230
[  194.757495][  T457]  ? __cfi_bind_store+0x10/0x10
[  194.762365][  T457]  drv_attr_store+0x91/0xb0
[  194.766876][  T457]  ? __cfi_drv_attr_store+0x10/0x10
[  194.772103][  T457]  sysfs_kf_write+0x141/0x160
[  194.776803][  T457]  ? __cfi_sysfs_kf_write+0x10/0x10
[  194.782025][  T457]  kernfs_fop_write_iter+0x319/0x510
[  194.787347][  T457]  vfs_write+0x762/0xfd0
[  194.791618][  T457]  ? __cfi_vfs_write+0x10/0x10
[  194.796405][  T457]  ? __cfi_mutex_lock+0x10/0x10
[  194.801293][  T457]  ksys_write+0x145/0x260
[  194.805710][  T457]  ? xfd_validate_state+0x68/0x140
[  194.810867][  T457]  ? __cfi_ksys_write+0x10/0x10
[  194.815733][  T457]  ? __kasan_check_write+0x18/0x20
[  194.820869][  T457]  ? fpregs_restore_userregs+0x11c/0x260
[  194.826538][  T457]  __x64_sys_write+0x7f/0x90
[  194.831145][  T457]  x64_sys_call+0x271c/0x2ee0
[  194.835818][  T457]  do_syscall_64+0x57/0xf0
[  194.840258][  T457]  ? clear_bhb_loop+0x50/0xa0
[  194.844950][  T457]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  194.850839][  T457] RIP: 0033:0x7f21d159e019
[  194.855246][  T457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  194.874848][  T457] RSP: 002b:00007f21cffd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  194.883269][  T457] RAX: ffffffffffffffda RBX: 00007f21d1826090 RCX: 00007f21d159e019
[  194.891234][  T457] RDX: 000000000000000d RSI: 0000200000000240 RDI: 0000000000000005
[  194.899201][  T457] RBP: 00007f21d163500c R08: 0000000000000000 R09: 0000000000000000
[  194.907176][  T457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  194.915163][  T457] R13: 00007f21d1826128 R14: 00007f21d1826090 R15: 00007ffd184b7508
[  194.923149][  T457]  </TASK>
[  194.926161][  T457] Modules linked in:
[  194.930366][  T457] ---[ end trace 0000000000000000 ]---
Aug  4 13:06:39 syzkaller kern.a[  194.938716][  T457] RIP: 0010:software_node_register+0x3a/0x200
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
lert kernel: [  [  194.945332][  T457] Code: 53 48 83 ec 18 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 59 45 41 fe 4c 89 75 c8 4d 8d 66 08 4c 89 e0 48 c1 e8 03 48 89 45 c0 <80> 3c 18 00 74 08 4c 89 e7 e8 28 08 9a fe 4d 8b 34 24 4d 85 f6 4c
194.565484][  T4[  194.967162][  T457] RSP: 0018:ffffc90000f0f810 EFLAGS: 00010202
57] KASAN: null-[  194.973872][  T457] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000080000
ptr-deref in ran[  194.983231][  T457] RDX: ffffc90005230000 RSI: 0000000000008c9d RDI: 0000000000008c9e
ge [0x0000000000000008-0x000000000000000f]
[  195.010365][  T457] RBP: ffffc90000f0f850 R08: 0000000000000000 R09: 0000000000000000
[  195.022441][  T457] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000008
[  195.030464][  T457] R13: ffff88811babd010 R14: 0000000000000000 R15: 0000000000000000
[  195.038484][  T457] FS:  00007f21cffd66c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  195.047545][  T457] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  195.054155][  T457] CR2: 00007f37ed03bff8 CR3: 0000000119884000 CR4: 00000000003526b0
[  195.066027][  T457] Kernel panic - not syncing: Fatal exception
[  195.072695][  T457] Kernel Offset: disabled
[  195.077033][  T457] Rebooting in 86400 seconds..
serialport: VM disconnected.