last executing test programs: 9.390620687s ago: executing program 1 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/firmware_class/parameters/path\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='.\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./usbduxfast_firmware.bin\x00', 0x42, 0x1b6) close(r1) r2 = syz_usb_connect(0x3, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81310000000000000010902290001010080320904000000ff0000000904000102ff0000000705860200020007050402000200"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) nanosleep(&(0x7f0000000280)={0x0, 0x1dcd6500}, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi0\x00', 0x2, 0x0) ioctl$COMEDI_CMDTEST(r3, 0x8050640a, &(0x7f0000000400)={0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x4, 0x7530, 0x20, 0x1, 0x40, 0x0, 0x0, 0x1, 0x0}) 7.549275947s ago: executing program 1 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='2049\n', 0x5) read(r0, &(0x7f0000000200), 0x100) 7.468914832s ago: executing program 1 (id=17): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000700)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @loopback}, r2, 0x3e8}}, 0x48) 6.779963659s ago: executing program 1 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000407d1ed43000010000000109022200010100e0320904000001030002000921100100012222000705810308000a0000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/hid/devices/0003:1E7D:30D4.0001/driver\x00', 0x0, 0x0) 4.148838968s ago: executing program 0 (id=29): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="040000000000", 0x6) write(r0, &(0x7f0000000080)="09000000010001", 0x7) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="041817aaaaaaaaaa10112233445566778899aabbccddeeff0005"], 0x1a) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04080400c80002"], 0x7) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e0701081400c80010"], 0xa) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c8000b000700070001030029100101"], 0x10) 4.077583028s ago: executing program 0 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2\n\x00', 0x3) write(r0, &(0x7f0000000180)='-3\n\x00', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='1\n\x00', 0x2) 3.707496821s ago: executing program 1 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='tcp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000900)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000b00)='localhost 1 \\x00000000 2147483647 /\n', 0x24) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000d00)='localhost / 2147483647 8195 0 0 0\n', 0x22) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000f00)='127.0.0.1:/\x00', &(0x7f0000000e00)='./mnt\x00', &(0x7f0000001000), 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.0,noresvport']) openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/vmlinuz\x00', 0x0, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000001300)='./mnt/etc/passwd\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/etc/passwd\x00', 0x0, 0x0) 3.64892955s ago: executing program 0 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='+4.1 +4.2\n', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='4\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 test\n', 0x1f) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='test 1 \\x00000000 2147483647 /tmp\n', 0x23) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r5, &(0x7f00000003c0)='test /tmp 2147483647 9218 65534 65534 0\n', 0x29) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.2,clientaddr=127.0.0.1\x00']) 3.117657788s ago: executing program 3 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/1024, 0x400) 3.056466849s ago: executing program 3 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='md0\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/bad_blocks\x00', 0x0, 0x0) 3.055986533s ago: executing program 3 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/max_block_size\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/max_blksize\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/nfsv4leasetime\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/nfsv4gracetime\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/nfsv4recoverydir\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/v4_end_grace\x00', 0x0, 0x0) 3.032472131s ago: executing program 3 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/irq/irq_handler_entry/filter\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='name ~ \"*\"\x00', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/irq/irq_handler_entry/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/sched/sched_switch/filter\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='prev_comm ~ \"*\"\x00', 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./trace/events/sched/sched_switch/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\x00', 0x1) nanosleep(&(0x7f0000000340)={0x0, 0x5000000}, 0x0) 2.225231532s ago: executing program 2 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/pci0000:00/0000:00:02.0/driver\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000140)='unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='0000:00:02.0\x00', 0xd) close(r1) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:02.0\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f0000000200)='driver_override\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='pch_udc\x00', 0x8) close(r3) close(r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/pch_udc\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f00000002c0)='bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='0000:00:02.0\x00', 0xd) close(r5) close(r4) openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/udc/pch_udc\x00', 0x0, 0x0) 735.268788ms ago: executing program 1 (id=42): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./backing_file\x00', 0x42, 0x1ff) ftruncate(r0, 0x200000) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) dup2(r1, 0x3) mkdir(&(0x7f0000000100)='./config/cluster/ocfs2\x00', 0x1ff) mkdir(&(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='127.0.0.1\n', 0xa) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='7777\n', 0x5) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/ocfs2/node/node0/num\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='0\n', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node0/local\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='1\n', 0x2) close(r5) mkdir(&(0x7f0000000380)='./config/cluster/ocfs2/heartbeat/hb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/cluster/ocfs2/heartbeat/hb0/block_bytes\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='512\n', 0x4) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/cluster/ocfs2/heartbeat/hb0/start_block\x00', 0x1, 0x0) write(r7, &(0x7f0000000480)='1\n', 0x2) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/cluster/ocfs2/heartbeat/hb0/blocks\x00', 0x1, 0x0) write(r8, &(0x7f0000000500)='2\n', 0x2) close(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/cluster/ocfs2/heartbeat/hb0/dev\x00', 0x1, 0x0) write(r9, &(0x7f0000000580)='3\n', 0x2) close(r9) mkdir(&(0x7f00000005c0)='./dlmfs\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./dlmfs\x00', &(0x7f0000000600)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000640)='./dlmfs/domain0\x00', 0x1ff) nanosleep(&(0x7f0000000680)={0x1}, 0x0) 582.083268ms ago: executing program 3 (id=43): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='bridge0\x00') ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0x0, {@in6_addr=@mcast1, 0x86dd}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0x0, {@in6_addr=@mcast1, 0x86dd}}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x20000000}, 0x0) 299.205282ms ago: executing program 2 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)='1\n', 0x2) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r0, &(0x7f0000000740)='loop\n', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/nvme0n1\x00', 0x2, 0x0) ioctl(r1, 0xc0101282, &(0x7f0000000a00)="00000000000000000100"/80) 262.992187ms ago: executing program 2 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='udp 20000\n\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000440)='0\n\x00', 0x2) 233.324995ms ago: executing program 0 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/platform/drivers/oxu210hp-hcd\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000280)='bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000480)='serial8250\x00', 0xb) 229.167585ms ago: executing program 2 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/devices/PNP0B00:00\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000100)='driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='oxu210hp-hcd\x00', 0xd) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/rtc_cmos\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f00000001c0)='unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='PNP0B00:00\x00', 0xb) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/platform/drivers/oxu210hp-hcd\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f0000000280)='bind\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='PNP0B00:00\x00', 0xb) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/serial8250\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)='serial8250\x00', 0xb) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/platform/devices/serial8250\x00', 0x0, 0x0) r7 = openat(r6, &(0x7f0000000400)='driver_override\x00', 0x1, 0x0) write(r7, &(0x7f0000000440)='oxu210hp-hcd\x00', 0xd) write(r5, &(0x7f0000000480)='serial8250\x00', 0xb) 125.156963ms ago: executing program 2 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/1024, 0x400) 124.981009ms ago: executing program 0 (id=49): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/max_block_size\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/max_blksize\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/nfsv4leasetime\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/nfsv4gracetime\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/nfsv4recoverydir\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/v4_end_grace\x00', 0x0, 0x0) 124.833688ms ago: executing program 2 (id=50): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='devices\n', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/power/state\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='freeze\n', 0x7) close(r1) 105.070725ms ago: executing program 0 (id=51): syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040ca0801000001000000010902190001010080320904000001000000000705810308000a"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(&(0x7f0000000240), &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/drivers/aiptek/1-1:1.0/model_code\x00', 0x0, 0x0) read(r0, &(0x7f0000000400)=""/128, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/drivers/aiptek/2-1:1.0/model_code\x00', 0x0, 0x0) read(r1, &(0x7f0000000600)=""/128, 0x80) 0s ago: executing program 3 (id=52): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x11) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl(r2, 0x8914, &(0x7f0000000200)="63616e300000000000000000000000000100"/40) write(r0, &(0x7f0000000300)='e1a\r', 0x4) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:31232' (ED25519) to the list of known hosts. [ 32.531284][ T5690] cgroup: Unknown subsys name 'net' [ 32.641755][ T5690] cgroup: Unknown subsys name 'cpuset' [ 32.643926][ T5690] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.505400][ T5690] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.215146][ T5743] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.221265][ T5739] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.223527][ T5750] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.224912][ T5748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.227367][ T5748] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.227758][ T5748] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.228393][ T5748] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.228844][ T5748] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.230838][ T5751] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.231910][ T5752] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.233650][ T5751] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.233768][ T5739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.234264][ T5752] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.235449][ T5752] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.235732][ T5752] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.236305][ T5752] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.236636][ T5752] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.237779][ T5743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.237880][ T5743] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.239114][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.745379][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.745463][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.745528][ T5738] bridge_slave_0: entered allmulticast mode [ 37.746307][ T5738] bridge_slave_0: entered promiscuous mode [ 37.768847][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.768893][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.769047][ T5738] bridge_slave_1: entered allmulticast mode [ 37.769808][ T5738] bridge_slave_1: entered promiscuous mode [ 37.838675][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.838741][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.838796][ T5747] bridge_slave_0: entered allmulticast mode [ 37.839497][ T5747] bridge_slave_0: entered promiscuous mode [ 37.855175][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.860846][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.860924][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.860975][ T5747] bridge_slave_1: entered allmulticast mode [ 37.861659][ T5747] bridge_slave_1: entered promiscuous mode [ 37.884569][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.884774][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.884814][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.885001][ T5737] bridge_slave_0: entered allmulticast mode [ 37.886211][ T5737] bridge_slave_0: entered promiscuous mode [ 37.892585][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.892626][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.892677][ T5745] bridge_slave_0: entered allmulticast mode [ 37.893407][ T5745] bridge_slave_0: entered promiscuous mode [ 37.899695][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.899737][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.899791][ T5737] bridge_slave_1: entered allmulticast mode [ 37.900493][ T5737] bridge_slave_1: entered promiscuous mode [ 37.912838][ T5738] team0: Port device team_slave_0 added [ 37.912906][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.912947][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.913000][ T5745] bridge_slave_1: entered allmulticast mode [ 37.916636][ T5745] bridge_slave_1: entered promiscuous mode [ 37.935162][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.936510][ T5738] team0: Port device team_slave_1 added [ 37.937691][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.955943][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.957317][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.959103][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.960744][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.972369][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.972379][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.972391][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.989694][ T5745] team0: Port device team_slave_0 added [ 37.995118][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.995127][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.995140][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.007712][ T5747] team0: Port device team_slave_0 added [ 38.008571][ T5745] team0: Port device team_slave_1 added [ 38.015092][ T5737] team0: Port device team_slave_0 added [ 38.023434][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.023443][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.023455][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.025076][ T5747] team0: Port device team_slave_1 added [ 38.026007][ T5737] team0: Port device team_slave_1 added [ 38.036906][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.036915][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.036928][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.052683][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.052699][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.052719][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.067875][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.067885][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.067897][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.075263][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.075272][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.075284][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.085522][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.085532][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.085544][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.090854][ T5738] hsr_slave_0: entered promiscuous mode [ 38.091818][ T5738] hsr_slave_1: entered promiscuous mode [ 38.112724][ T5745] hsr_slave_0: entered promiscuous mode [ 38.113150][ T5745] hsr_slave_1: entered promiscuous mode [ 38.113502][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 38.113551][ T5745] Cannot create hsr debugfs directory [ 38.159657][ T5747] hsr_slave_0: entered promiscuous mode [ 38.160087][ T5747] hsr_slave_1: entered promiscuous mode [ 38.160394][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 38.160406][ T5747] Cannot create hsr debugfs directory [ 38.163097][ T5737] hsr_slave_0: entered promiscuous mode [ 38.163534][ T5737] hsr_slave_1: entered promiscuous mode [ 38.163860][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 38.163872][ T5737] Cannot create hsr debugfs directory [ 38.383928][ T5738] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.391530][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.391991][ T5738] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.394018][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.394415][ T5738] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.399397][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.401142][ T5738] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.403383][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.437850][ T5745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.444338][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.447187][ T5745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.451232][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.454053][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.454140][ T5738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.454346][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.454423][ T5738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.457137][ T5745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.462850][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.463282][ T5745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.467213][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.522113][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.522275][ T5745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.522384][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.522427][ T5745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.523863][ T5747] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.526394][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.526771][ T5747] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.530661][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.538562][ T5747] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.543627][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.544032][ T5747] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.547291][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.584681][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.609485][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.610000][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.612939][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.613178][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.632791][ T5737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.635797][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.639188][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.639472][ T5737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.642261][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.649762][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.649811][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.650156][ T5737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.651941][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.661096][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.661140][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.662230][ T5737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.664274][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.702929][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.711063][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.736214][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.738333][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.742865][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.742909][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.751656][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.751700][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.752554][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.752786][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.760824][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.760867][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.793628][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.820678][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.835791][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.835836][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.839398][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.839447][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.010285][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.035327][ T5738] veth0_vlan: entered promiscuous mode [ 39.038982][ T5738] veth1_vlan: entered promiscuous mode [ 39.061104][ T5738] veth0_macvtap: entered promiscuous mode [ 39.063583][ T5738] veth1_macvtap: entered promiscuous mode [ 39.073963][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.076709][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.082212][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.088415][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.097302][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.135756][ T5745] veth0_vlan: entered promiscuous mode [ 39.160572][ T5745] veth1_vlan: entered promiscuous mode [ 39.176285][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.176895][ T5737] veth0_vlan: entered promiscuous mode [ 39.179112][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.179123][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.179850][ T5747] veth0_vlan: entered promiscuous mode [ 39.202963][ T5747] veth1_vlan: entered promiscuous mode [ 39.203996][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.204008][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.211812][ T5737] veth1_vlan: entered promiscuous mode [ 39.217958][ T5745] veth0_macvtap: entered promiscuous mode [ 39.225322][ T5817] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.225482][ T5817] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.227899][ T5745] veth1_macvtap: entered promiscuous mode [ 39.245783][ T5751] Bluetooth: hci2: command tx timeout [ 39.245806][ T5743] Bluetooth: hci3: command tx timeout [ 39.264916][ T5737] veth0_macvtap: entered promiscuous mode [ 39.266038][ T5738] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.267364][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.271547][ T5738] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.272027][ T5747] veth0_macvtap: entered promiscuous mode [ 39.273620][ T5738] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.275015][ T5738] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.276317][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.279321][ T5747] veth1_macvtap: entered promiscuous mode [ 39.289289][ T5737] veth1_macvtap: entered promiscuous mode [ 39.292032][ T5738] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.306738][ T5817] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.325481][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.325568][ T5743] Bluetooth: hci1: command tx timeout [ 39.325675][ T5743] Bluetooth: hci0: command tx timeout [ 39.344854][ T5817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.344966][ T5817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.345061][ T5817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.345158][ T5817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.350529][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.354525][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.392533][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.396858][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.396870][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.441289][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.441301][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.476361][ T5817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.476839][ T5817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.477021][ T5817] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.477188][ T5817] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.484099][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.484112][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.491336][ T5791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.491539][ T5791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.491692][ T5791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.491834][ T5791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.515253][ T5891] svc: failed to register lockdv1 RPC service (errno 111). [ 39.515356][ T5891] lockd_up: makesock failed, error=-111 [ 39.529854][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.529867][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.542367][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.542377][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.557607][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.557620][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.749313][ T5902] nvme nvme0: failed to connect socket: -111 [ 39.809039][ T5906] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 39.890991][ T5891] svc: failed to register nfsdv3 RPC service (errno 111). [ 39.891638][ T5891] svc: failed to register nfsaclv3 RPC service (errno 111). [ 39.891648][ T5891] failed to unregister tcp with rpcbind [ 39.891862][ T5891] svc: failed to register nfsdv3 RPC service (errno 97). [ 39.891871][ T5891] svc: failed to register nfsaclv3 RPC service (errno 97). [ 39.891878][ T5891] failed to unregister tcp with rpcbind [ 39.914824][ T5818] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 40.065860][ T5818] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 40.069403][ T5818] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.069418][ T5818] usb 8-1: Product: syz [ 40.069425][ T5818] usb 8-1: Manufacturer: syz [ 40.069432][ T5818] usb 8-1: SerialNumber: syz [ 40.099850][ T30] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 40.206861][ T5825] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 40.224749][ T853] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 40.375568][ T5825] usb 6-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice= 0.00 [ 40.376633][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.386338][ T853] usb 7-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 40.387116][ T853] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 40.387132][ T853] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 40.387145][ T853] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 40.387165][ T853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.388697][ T853] usb 7-1: config 0 descriptor?? [ 40.389522][ T5915] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 40.389595][ T5915] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 40.590967][ T5825] usb 6-1: Direct firmware load for usbduxfast_firmware.bin failed with error -2 [ 40.590983][ T5825] usb 6-1: Falling back to sysfs fallback for: usbduxfast_firmware.bin [ 40.734896][ T5854] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 40.806135][ T853] gt683r_led 0003:1770:FF00.0002: hidraw1: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.2-1/input0 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x198000) [ 40.885338][ T1127] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 40.885352][ T1127] ata1: failed to read log page 10h (errno=-5) [ 40.885362][ T1127] ata1.00: exception Emask 0x1 SAct 0x8000000 SErr 0x0 action 0x0 [ 40.885372][ T1127] ata1.00: irq_stat 0x41000000 [ 40.885382][ T1127] ata1.00: failed command: READ FPDMA QUEUED [ 40.885388][ T1127] ata1.00: cmd 60/c0:d8:76:89:03/0c:00:00:00:00/40 tag 27 ncq dma 1671168 in [ 40.885388][ T1127] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 40.885417][ T1127] ata1.00: status: { DRDY } [ 40.885424][ T1127] ata1.00: error: { ABRT } [ 40.886288][ T5854] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 40.887002][ T1127] ata1.00: configured for UDMA/100 [ 40.887184][ T5854] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 40.887199][ T5854] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 40.887324][ T1127] sd 0:0:0:0: [sda] tag#27 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 40.887348][ T1127] sd 0:0:0:0: [sda] tag#27 Sense Key : Aborted Command [current] [ 40.887366][ T1127] sd 0:0:0:0: [sda] tag#27 Add. Sense: No additional sense information [ 40.887975][ T1127] sd 0:0:0:0: [sda] tag#27 CDB: Read(10) 28 00 00 03 89 76 00 0c c0 00 [ 40.888171][ T1127] I/O error, dev sda, sector 231798 op 0x0:(READ) flags 0x80700 phys_seg 26 prio class 2 [ 40.888431][ T1127] ata1: EH complete [ 40.890659][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 40.890673][ T5854] usb 5-1: Product: syz [ 40.890680][ T5854] usb 5-1: Manufacturer: syz [ 41.053197][ T25] usb 7-1: USB disconnect, device number 2 [ 41.056931][ T5832] gt683r_led 0003:1770:FF00.0002: failed to send set report request: -19 [ 41.059818][ T5832] gt683r_led 0003:1770:FF00.0002: failed to send set report request: -19 [ 41.062272][ T5832] gt683r_led 0003:1770:FF00.0002: failed to send set report request: -19 [ 41.100480][ T5917] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 41.100620][ T5917] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 41.109585][ T5854] dvb_ttusb_budget: ttusb_init_controller: error [ 41.109649][ T5854] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 41.142762][ T5854] DVB: Unable to find symbol cx22700_attach() [ 41.162479][ T5854] DVB: Unable to find symbol tda10046_attach() [ 41.162491][ T5854] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 41.165735][ T30] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 41.165964][ T30] ath9k_htc: Failed to initialize the device [ 41.188928][ T30] usb 8-1: ath9k_htc: USB layer deinitialized [ 41.315654][ T5818] usb 8-1: USB disconnect, device number 2 [ 41.325576][ T5751] Bluetooth: hci2: command tx timeout [ 41.325597][ T5751] Bluetooth: hci3: command tx timeout [ 41.356926][ T5925] dvb_ttusb_budget: failed urb submission (0: err = -90)! [ 41.357952][ T5925] dvb_ttusb_budget: failed urb submission (0: err = -90)! [ 41.405380][ T5751] Bluetooth: hci1: command tx timeout [ 41.405531][ T5743] Bluetooth: hci0: command tx timeout [ 41.406995][ T30] usb 5-1: USB disconnect, device number 2 [ 41.790124][ T5927] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 41.790147][ T5927] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 41.790170][ T5927] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 41.791442][ T5927] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 41.795882][ T5927] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 41.842366][ T5927] nvmet_rdma: binding CM ID to 172.20.20.23:4420 failed (-99) [ 41.898390][ T5935] lo speed is unknown, defaulting to 1000 [ 41.899230][ T5935] lo speed is unknown, defaulting to 1000 [ 41.899642][ T5935] lo speed is unknown, defaulting to 1000 [ 41.933287][ T5933] i8042 kbd 00:00: in use; can't configure [ 41.935128][ T5933] i8042 aux 00:01: in use; can't configure [ 41.943175][ T5933] c6xdigio 00:03: in use; can't configure [ 41.977014][ T5938] can0: slcan on pts0. [ 41.979979][ T5940] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x22 [ 41.985423][ T5942] device-mapper: ioctl: populate_table: target parameters not NUL-terminated [ 41.986604][ T37] maxtcpc 0-0022: error -ENXIO: Failed to read TCPC_POWER_STATUS [ 42.047904][ T5936] can0 (unregistered): slcan off pts0. [ 42.107140][ T5935] infiniband syz0: set active [ 42.109361][ T2399] lo speed is unknown, defaulting to 1000 [ 42.110273][ T5935] infiniband syz0: added lo [ 42.119638][ T5935] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 42.119658][ T5935] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 42.119679][ T5935] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 42.132971][ T5935] RDS/IB: syz0: added [ 42.133152][ T5935] smc: adding ib device syz0 with port count 1 [ 42.133189][ T5935] smc: ib device syz0 port 1 has no pnetid [ 42.134255][ T1937] lo speed is unknown, defaulting to 1000 [ 42.136326][ T5935] lo speed is unknown, defaulting to 1000 [ 42.230717][ T5935] lo speed is unknown, defaulting to 1000 [ 42.351942][ T5935] lo speed is unknown, defaulting to 1000 [ 42.354808][ T853] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 42.441408][ T5935] lo speed is unknown, defaulting to 1000 [ 42.516282][ T853] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice= 0.00 [ 42.517231][ T853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.526557][ T853] usbtest 5-1:1.0: Linux user mode test driver [ 42.526573][ T853] usbtest 5-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 42.735338][ T5854] usb 5-1: USB disconnect, device number 3 [ 42.849922][ T5957] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 43.194850][ T5949] NFSD: Unable to initialize client recovery tracking! (-110) [ 43.194863][ T5949] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 43.194868][ T5949] NFSD: starting 90-second grace period (net f00003fd) [ 43.414850][ T5743] Bluetooth: hci3: command tx timeout [ 43.414880][ T5743] Bluetooth: hci2: command tx timeout [ 43.494823][ T5743] Bluetooth: hci1: command tx timeout [ 43.495283][ T5751] Bluetooth: hci0: command tx timeout [ 44.714762][ T5961] NFSD: Unable to initialize client recovery tracking! (-110) [ 44.714778][ T5961] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 44.714785][ T5961] NFSD: starting 90-second grace period (net f00003f8) [ 45.221460][ T5971] block2mtd: error: cannot open device /dev/ram0 [ 45.222193][ T5972] Bluetooth: MGMT ver 1.23 [ 45.308486][ T5976] svc: failed to register lockdv1 RPC service (errno 111). [ 45.416999][ T5854] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 45.484740][ T5751] Bluetooth: hci3: command tx timeout [ 45.565639][ T5751] Bluetooth: hci0: command tx timeout [ 45.565671][ T5751] Bluetooth: hci1: command tx timeout [ 45.657540][ T5976] svc: failed to register nfsdv3 RPC service (errno 111). [ 45.658788][ T5976] svc: failed to register nfsaclv3 RPC service (errno 111). [ 45.658804][ T5976] failed to unregister tcp with rpcbind [ 45.658929][ T5976] svc: failed to register nfsdv3 RPC service (errno 97). [ 45.658942][ T5976] svc: failed to register nfsaclv3 RPC service (errno 97). [ 45.658951][ T5976] failed to unregister tcp with rpcbind [ 45.686214][ T10] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 46.120179][ T5978] ceph: No mds server is up or the cluster is laggy [ 46.276826][ T5998] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 46.794807][ T5986] NFSD: Unable to initialize client recovery tracking! (-110) [ 46.794821][ T5986] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 46.794826][ T5986] NFSD: starting 90-second grace period (net f00003f8) [ 48.234805][ T5990] NFSD: Unable to initialize client recovery tracking! (-110) [ 48.234819][ T5990] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 48.234826][ T5990] NFSD: starting 90-second grace period (net f0000511) [ 48.630343][ T6011] e1000e 0000:00:02.0 eth1: removed PHC [ 48.655986][ T6009] svc: failed to register lockdv1 RPC service (errno 111). [ 48.665889][ T6017] loop0: detected capacity change from 0 to 4096 [ 48.737777][ T6026] o2cb: Local heartbeat has not been started. [ 48.737787][ T6026] o2cb: Cluster check failed. Fix errors before retrying. [ 48.737802][ T6026] (syz.1.42,6026,3):user_dlm_register:674 ERROR: status = -22 [ 48.737815][ T6026] (syz.1.42,6026,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain0" [ 48.751841][ T6011] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 49.044498][ T6009] svc: failed to register nfsdv3 RPC service (errno 111). [ 49.055418][ T6009] svc: failed to register nfsaclv3 RPC service (errno 111). [ 49.055437][ T6009] failed to unregister tcp with rpcbind [ 49.056685][ T6009] svc: failed to register nfsdv3 RPC service (errno 97). [ 49.056698][ T6009] svc: failed to register nfsaclv3 RPC service (errno 97). [ 49.056705][ T6009] failed to unregister tcp with rpcbind [ 49.276411][ T6061] PM: suspend entry (s2idle) [ 49.316736][ T5817] Filesystems sync: 0.039 seconds [ 49.396448][ T6071] can0: slcan on pts0. [ 49.401834][ C0] ------------[ cut here ]------------ [ 49.401844][ C0] 1 [ 49.401847][ C0] WARNING: ./include/linux/skbuff.h:3003 at __netif_receive_skb_core.constprop.0+0x1706/0x3530, CPU#0: kworker/u33:2/55 [ 49.409869][ C0] Modules linked in: [ 49.411171][ C0] CPU: 0 UID: 0 PID: 55 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 49.414125][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.417900][ C0] Workqueue: events_unbound flush_to_ldisc [ 49.420345][ C0] RIP: 0010:__netif_receive_skb_core.constprop.0+0x1706/0x3530 [ 49.423344][ C0] Code: de 4c 8b bc 24 e8 00 00 00 e8 76 a0 6d f8 85 db 0f 88 11 f2 ff ff 31 db 4d 8d af 81 00 00 00 e9 01 ed ff ff e8 eb a5 6d f8 90 <0f> 0b 90 31 db e9 43 eb ff ff e8 db a5 6d f8 e8 66 74 51 f8 31 ff [ 49.431014][ C0] RSP: 0000:ffffc90000007990 EFLAGS: 00010246 [ 49.433454][ C0] RAX: 0000000000000000 RBX: 0000000000000040 RCX: 0000000000000101 [ 49.436657][ C0] RDX: ffff88801dfa0000 RSI: ffffffff899dbbe5 RDI: ffff88801dfa0000 [ 49.439822][ C0] RBP: 000000000000ffff R08: 0000000000000003 R09: 000000000000ffff [ 49.442961][ C0] R10: 000000000000ffff R11: 0000000000000001 R12: ffff888029cbcc80 [ 49.446139][ C0] R13: ffffc90000007c10 R14: ffff888029cbcc80 R15: ffff888029cbcc80 [ 49.449305][ C0] FS: 0000000000000000(0000) GS:ffff888096960000(0000) knlGS:0000000000000000 [ 49.452110][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.454078][ C0] CR2: 00000000f74b6288 CR3: 000000004d712000 CR4: 0000000000352ef0 [ 49.456814][ C0] Call Trace: [ 49.458166][ C0] [ 49.459360][ C0] ? stack_depot_save_flags+0x27/0x9f0 [ 49.461579][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 49.463651][ C0] ? kasan_save_stack+0x3f/0x50 [ 49.465760][ C0] ? kasan_save_stack+0x30/0x50 [ 49.467663][ C0] ? kasan_save_track+0x14/0x30 [ 49.469563][ C0] ? kasan_save_free_info+0x3b/0x70 [ 49.471595][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 49.474319][ C0] ? napi_consume_skb+0x2cd/0x320 [ 49.476383][ C0] ? skb_defer_free_flush+0x1f1/0x290 [ 49.478522][ C0] ? net_rx_action+0x3ca/0xf20 [ 49.480467][ C0] ? handle_softirqs+0x1e6/0x9d0 [ 49.482242][ C0] ? do_softirq+0xaf/0xf0 [ 49.483647][ C0] ? netif_rx+0x93/0xb0 [ 49.484961][ C0] ? slcan_receive_buf+0x1a66/0x1f30 [ 49.486611][ C0] ? tty_ldisc_receive_buf+0x15a/0x1a0 [ 49.488276][ C0] ? tty_port_default_receive_buf+0x70/0xb0 [ 49.490099][ C0] ? flush_to_ldisc+0x26b/0x730 [ 49.491900][ C0] ? process_one_work+0xac7/0x1b10 [ 49.493942][ C0] ? worker_thread+0x5ef/0xe50 [ 49.495985][ C0] ? kthread+0x373/0x450 [ 49.497726][ C0] ? ret_from_fork+0x730/0xd60 [ 49.499674][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 49.501690][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 49.503705][ C0] ? process_backlog+0x437/0x1600 [ 49.505856][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 49.508220][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 49.510797][ C0] ? lock_acquire+0x1d1/0x380 [ 49.512237][ C0] ? process_backlog+0x437/0x1600 [ 49.513763][ C0] ? process_backlog+0x437/0x1600 [ 49.515318][ C0] __netif_receive_skb+0x1f/0x120 [ 49.517050][ C0] process_backlog+0x487/0x1600 [ 49.518568][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 49.520160][ C0] net_rx_action+0xa40/0xf20 [ 49.521576][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 49.523110][ C0] ? hrtimer_bases_first+0x1a0/0x210 [ 49.524808][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 49.526681][ C0] ? sched_clock+0x3a/0x60 [ 49.528020][ C0] ? sched_clock_cpu+0x6c/0x570 [ 49.529512][ C0] ? mark_held_locks+0x40/0x70 [ 49.530943][ C0] handle_softirqs+0x1e6/0x9d0 [ 49.532675][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 49.534759][ C0] ? irqtime_account_delta+0x9a/0x110 [ 49.534803][ T5832] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 49.539824][ C0] ? netif_rx+0x65/0xb0 [ 49.541508][ C0] do_softirq+0xaf/0xf0 [ 49.543177][ C0] [ 49.544422][ C0] [ 49.545715][ C0] __local_bh_enable_ip+0xff/0x120 [ 49.547895][ C0] ? netif_rx+0x65/0xb0 [ 49.549638][ C0] netif_rx+0x93/0xb0 [ 49.551283][ C0] slcan_receive_buf+0x1a66/0x1f30 [ 49.553358][ C0] ? __pfx_slcan_receive_buf+0x10/0x10 [ 49.555630][ C0] ? ldsem_down_read_trylock+0x115/0x190 [ 49.557416][ C0] ? ldsem_down_read_trylock+0x11b/0x190 [ 49.559117][ C0] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 49.560970][ C0] ? __pfx_slcan_receive_buf+0x10/0x10 [ 49.562936][ C0] tty_ldisc_receive_buf+0x15a/0x1a0 [ 49.564957][ C0] tty_port_default_receive_buf+0x70/0xb0 [ 49.567210][ C0] flush_to_ldisc+0x26b/0x730 [ 49.568993][ C0] ? process_one_work+0x906/0x1b10 [ 49.571153][ C0] process_one_work+0xac7/0x1b10 [ 49.573121][ C0] ? __pfx_process_one_work+0x10/0x10 [ 49.575279][ C0] ? lock_acquire+0x1d1/0x380 [ 49.577166][ C0] ? __pfx_flush_to_ldisc+0x10/0x10 [ 49.578971][ C0] worker_thread+0x5ef/0xe50 [ 49.580397][ C0] ? kthread+0x13a/0x450 [ 49.581900][ C0] ? __pfx_worker_thread+0x10/0x10 [ 49.583531][ C0] kthread+0x373/0x450 [ 49.584861][ C0] ? __pfx_kthread+0x10/0x10 [ 49.586348][ C0] ret_from_fork+0x730/0xd60 [ 49.587780][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 49.589361][ C0] ? __switch_to+0x800/0x10f0 [ 49.590779][ C0] ? __pfx_kthread+0x10/0x10 [ 49.592251][ C0] ret_from_fork_asm+0x1a/0x30 [ 49.593758][ C0] [ 49.594810][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 49.597236][ C0] CPU: 0 UID: 0 PID: 55 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 49.599993][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.602957][ C0] Workqueue: events_unbound flush_to_ldisc [ 49.604752][ C0] Call Trace: [ 49.605810][ C0] [ 49.606695][ C0] dump_stack_lvl+0x100/0x190 [ 49.608101][ C0] vpanic+0x553/0x970 [ 49.609343][ C0] ? __pfx_vpanic+0x10/0x10 [ 49.610709][ C0] panic+0xd1/0xe0 [ 49.611856][ C0] ? __pfx_panic+0x10/0x10 [ 49.613239][ C0] check_panic_on_warn.cold+0x19/0x34 [ 49.614855][ C0] ? __netif_receive_skb_core.constprop.0+0x1706/0x3530 [ 49.616998][ C0] __warn.cold+0x191/0x318 [ 49.618372][ C0] __report_bug+0x30f/0x440 [ 49.619804][ C0] ? __netif_receive_skb_core.constprop.0+0x1706/0x3530 [ 49.621958][ C0] ? __pfx___report_bug+0x10/0x10 [ 49.623572][ C0] ? lock_acquire+0x1d1/0x380 [ 49.625080][ C0] ? unwind_next_frame+0xbd/0x2090 [ 49.626842][ C0] ? find_held_lock+0x2b/0x80 [ 49.628342][ C0] ? unwind_next_frame+0x3be/0x2090 [ 49.630008][ C0] ? unwind_next_frame+0x3be/0x2090 [ 49.631654][ C0] ? __netif_receive_skb_core.constprop.0+0x1706/0x3530 [ 49.634135][ C0] report_bug+0xb3/0x220 [ 49.635652][ C0] ? __netif_receive_skb_core.constprop.0+0x1706/0x3530 [ 49.637878][ C0] handle_bug+0x16a/0x2a0 [ 49.639429][ C0] exc_invalid_op+0x17/0x50 [ 49.641019][ C0] asm_exc_invalid_op+0x1a/0x20 [ 49.642762][ C0] RIP: 0010:__netif_receive_skb_core.constprop.0+0x1706/0x3530 [ 49.645234][ C0] Code: de 4c 8b bc 24 e8 00 00 00 e8 76 a0 6d f8 85 db 0f 88 11 f2 ff ff 31 db 4d 8d af 81 00 00 00 e9 01 ed ff ff e8 eb a5 6d f8 90 <0f> 0b 90 31 db e9 43 eb ff ff e8 db a5 6d f8 e8 66 74 51 f8 31 ff [ 49.651816][ C0] RSP: 0000:ffffc90000007990 EFLAGS: 00010246 [ 49.653895][ C0] RAX: 0000000000000000 RBX: 0000000000000040 RCX: 0000000000000101 [ 49.656660][ C0] RDX: ffff88801dfa0000 RSI: ffffffff899dbbe5 RDI: ffff88801dfa0000 [ 49.659184][ C0] RBP: 000000000000ffff R08: 0000000000000003 R09: 000000000000ffff [ 49.661807][ C0] R10: 000000000000ffff R11: 0000000000000001 R12: ffff888029cbcc80 [ 49.664308][ C0] R13: ffffc90000007c10 R14: ffff888029cbcc80 R15: ffff888029cbcc80 [ 49.666779][ C0] ? __netif_receive_skb_core.constprop.0+0x1705/0x3530 [ 49.669123][ C0] ? stack_depot_save_flags+0x27/0x9f0 [ 49.670795][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 49.672312][ C0] ? kasan_save_stack+0x3f/0x50 [ 49.673958][ C0] ? kasan_save_stack+0x30/0x50 [ 49.675504][ C0] ? kasan_save_track+0x14/0x30 [ 49.677042][ C0] ? kasan_save_free_info+0x3b/0x70 [ 49.678779][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 49.681009][ C0] ? napi_consume_skb+0x2cd/0x320 [ 49.682643][ C0] ? skb_defer_free_flush+0x1f1/0x290 [ 49.684425][ C0] ? net_rx_action+0x3ca/0xf20 [ 49.685899][ C0] ? handle_softirqs+0x1e6/0x9d0 [ 49.687415][ C0] ? do_softirq+0xaf/0xf0 [ 49.688748][ C0] ? netif_rx+0x93/0xb0 [ 49.690193][ C0] ? slcan_receive_buf+0x1a66/0x1f30 [ 49.691808][ C0] ? tty_ldisc_receive_buf+0x15a/0x1a0 [ 49.693477][ C0] ? tty_port_default_receive_buf+0x70/0xb0 [ 49.695428][ C0] ? flush_to_ldisc+0x26b/0x730 [ 49.696965][ C0] ? process_one_work+0xac7/0x1b10 [ 49.698653][ C0] ? worker_thread+0x5ef/0xe50 [ 49.700167][ C0] ? kthread+0x373/0x450 [ 49.701568][ C0] ? ret_from_fork+0x730/0xd60 [ 49.703238][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 49.704834][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 49.706523][ C0] ? process_backlog+0x437/0x1600 [ 49.708242][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 49.710154][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 49.712116][ C0] ? lock_acquire+0x1d1/0x380 [ 49.713708][ C0] ? process_backlog+0x437/0x1600 [ 49.715310][ C0] ? process_backlog+0x437/0x1600 [ 49.716872][ C0] __netif_receive_skb+0x1f/0x120 [ 49.718405][ C0] process_backlog+0x487/0x1600 [ 49.720034][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 49.721685][ C0] net_rx_action+0xa40/0xf20 [ 49.723110][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 49.724718][ C0] ? hrtimer_bases_first+0x1a0/0x210 [ 49.726344][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 49.727930][ C0] ? sched_clock+0x3a/0x60 [ 49.729440][ C0] ? sched_clock_cpu+0x6c/0x570 [ 49.731082][ C0] ? mark_held_locks+0x40/0x70 [ 49.732664][ C0] handle_softirqs+0x1e6/0x9d0 [ 49.734384][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 49.736174][ C0] ? irqtime_account_delta+0x9a/0x110 [ 49.737921][ C0] ? netif_rx+0x65/0xb0 [ 49.739183][ C0] do_softirq+0xaf/0xf0 [ 49.740462][ C0] [ 49.741458][ C0] [ 49.742386][ C0] __local_bh_enable_ip+0xff/0x120 [ 49.743950][ C0] ? netif_rx+0x65/0xb0 [ 49.745251][ C0] netif_rx+0x93/0xb0 [ 49.746478][ C0] slcan_receive_buf+0x1a66/0x1f30 [ 49.748018][ C0] ? __pfx_slcan_receive_buf+0x10/0x10 [ 49.749666][ C0] ? ldsem_down_read_trylock+0x115/0x190 [ 49.751473][ C0] ? ldsem_down_read_trylock+0x11b/0x190 [ 49.753209][ C0] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 49.755163][ C0] ? __pfx_slcan_receive_buf+0x10/0x10 [ 49.757003][ C0] tty_ldisc_receive_buf+0x15a/0x1a0 [ 49.758660][ C0] tty_port_default_receive_buf+0x70/0xb0 [ 49.760500][ C0] flush_to_ldisc+0x26b/0x730 [ 49.762015][ C0] ? process_one_work+0x906/0x1b10 [ 49.763571][ C0] process_one_work+0xac7/0x1b10 [ 49.765219][ C0] ? __pfx_process_one_work+0x10/0x10 [ 49.766978][ C0] ? lock_acquire+0x1d1/0x380 [ 49.768461][ C0] ? __pfx_flush_to_ldisc+0x10/0x10 [ 49.770079][ C0] worker_thread+0x5ef/0xe50 [ 49.771532][ C0] ? kthread+0x13a/0x450 [ 49.772987][ C0] ? __pfx_worker_thread+0x10/0x10 [ 49.774578][ C0] kthread+0x373/0x450 [ 49.775850][ C0] ? __pfx_kthread+0x10/0x10 [ 49.777304][ C0] ret_from_fork+0x730/0xd60 [ 49.778724][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 49.780288][ C0] ? __switch_to+0x800/0x10f0 [ 49.781772][ C0] ? __pfx_kthread+0x10/0x10 [ 49.783240][ C0] ret_from_fork_asm+0x1a/0x30 [ 49.784789][ C0] [ 49.786389][ C0] Kernel Offset: disabled [ 49.787756][ C0] Rebooting in 86400 seconds..