last executing test programs: 47.344706901s ago: executing program 0 (id=73): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r0, &(0x7f0000000200), 0x5) read(r0, &(0x7f0000000200), 0x5) 37.854909034s ago: executing program 0 (id=75): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/drivers/intel_xhci_usb_sw/uevent\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usb-conn-gpio/uevent\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='add\x00', 0x4) 35.205264972s ago: executing program 1 (id=76): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/dynamic_debug/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='module n_gsm +p\n\x00', 0x11) 31.394730094s ago: executing program 0 (id=77): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0x1234\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='0x5678\n\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='dummy_udc.0\n\x00', 0xc) close(r2) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 29.248735761s ago: executing program 1 (id=78): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x601, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}]}]}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf4}}, 0x0) 22.320343805s ago: executing program 1 (id=79): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 18.955822181s ago: executing program 0 (id=80): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r0, &(0x7f0000000200), 0x5) read(r0, &(0x7f0000000200), 0x5) 15.696824446s ago: executing program 1 (id=81): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/drivers/intel_xhci_usb_sw/uevent\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usb-conn-gpio/uevent\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='add\x00', 0x4) 12.294705704s ago: executing program 0 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0x1234\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='0x5678\n\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='dummy_udc.0\n\x00', 0xc) close(r2) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 9.320759165s ago: executing program 1 (id=83): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x601, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}]}]}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf4}}, 0x0) 1.592420724s ago: executing program 0 (id=84): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0x1234\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='0x5678\n\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='dummy_udc.0\n\x00', 0xc) close(r2) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 0s ago: executing program 1 (id=85): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)="020000000100007f0000000000000000", 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='1\x00', 0x2) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write(r2, &(0x7f0000000500)="00000000010000000100000010000000746573745f6c7300", 0x18) write(r2, &(0x7f0000000600)="00000000010000000200000010000000746573745f6c7300", 0x18) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1\x00', 0x200) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:43439' (ED25519) to the list of known hosts. syzkaller login: [ 611.242894][ T3215] cgroup: Unknown subsys name 'net' [ 612.103975][ T3215] cgroup: Unknown subsys name 'cpuset' [ 612.567987][ T3215] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 706.941970][ T3215] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 844.831052][ T3223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.890957][ T3223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.623658][ T3222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.772934][ T3222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.681083][ T3223] hsr_slave_0: entered promiscuous mode [ 863.818536][ T3223] hsr_slave_1: entered promiscuous mode [ 868.016251][ T3222] hsr_slave_0: entered promiscuous mode [ 868.075961][ T3222] hsr_slave_1: entered promiscuous mode [ 868.126696][ T3222] debugfs: 'hsr0' already exists in 'hsr' [ 868.156881][ T3222] Cannot create hsr debugfs directory [ 884.066918][ T3223] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 884.339123][ T3223] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 884.512515][ T3223] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 884.692975][ T3223] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 884.791678][ T3223] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 884.963288][ T3223] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 885.103789][ T3223] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 885.780342][ T3223] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 889.189104][ T3222] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 889.322279][ T3222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 889.522772][ T3222] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 889.731316][ T3222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 889.979984][ T3222] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 890.380329][ T3222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 890.588769][ T3222] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 891.082346][ T3222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 908.882178][ T3223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 917.880287][ T3222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1006.614028][ T3223] veth0_vlan: entered promiscuous mode [ 1009.088849][ T3223] veth1_vlan: entered promiscuous mode [ 1013.293391][ T3223] veth0_macvtap: entered promiscuous mode [ 1015.062135][ T3223] veth1_macvtap: entered promiscuous mode [ 1019.652483][ T3222] veth0_vlan: entered promiscuous mode [ 1021.547932][ T2421] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.659601][ T3292] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.722766][ T3646] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.028397][ T3646] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.112901][ T3222] veth1_vlan: entered promiscuous mode [ 1031.189591][ T3222] veth0_macvtap: entered promiscuous mode [ 1032.711901][ T3222] veth1_macvtap: entered promiscuous mode [ 1034.442251][ T3223] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1040.151096][ T3784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.191647][ T3784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.290131][ T2421] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.551097][ T3784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.944174][ T3838] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1099.091614][ T3865] rdma_op ffffaf801a6ca9f0 conn xmit_rdma 0000000000000000 [ 1117.373875][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1120.304176][ T24] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 2.00 [ 1120.320200][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1120.340962][ T24] usb 2-1: Product: syz [ 1120.351932][ T24] usb 2-1: Manufacturer: syz [ 1122.685863][ T24] ldusb 2-1:1.0: Interrupt out endpoint not found (using control endpoint instead) [ 1123.582777][ T24] ldusb 2-1:1.0: LD USB Device #0 now attached to major 180 minor 0 [ 1127.753960][ T3837] usb 2-1: USB disconnect, device number 2 [ 1129.341544][ T3837] ldusb 2-1:1.0: LD USB Device #0 now disconnected [ 1135.547670][ T3791] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1136.984072][ T3890] loop0: detected capacity change from 0 to 2048 [ 1137.593646][ T3791] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1137.616772][ T3791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1137.618013][ T3791] usb 2-1: Product: syz [ 1137.618902][ T3791] usb 2-1: Manufacturer: syz [ 1139.238915][ T3791] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1139.851895][ T3791] scsi host0: usb-storage 2-1:1.0 [ 1146.671204][ T3782] usb 2-1: USB disconnect, device number 3 [ 1181.429279][ T3899] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1182.101427][ T3899] usb 1-1: Dual-Role OTG device on HNP port [ 1182.141103][ T3899] usb 1-1: New USB device found, idVendor=1234, idProduct=0004, bcdDevice= 7.02 [ 1182.166225][ T3899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.171930][ T3899] usb 1-1: Product: ACMESynth [ 1182.178059][ T3899] usb 1-1: Manufacturer: ACME [ 1184.778210][ T3899] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1210.641885][ T3965] dlm: no local IP address has been set [ 1210.675282][ T3965] dlm: cannot start dlm midcomms -107 [ 1215.673387][ T3967] Zero length message leads to an empty skb [ 1268.181473][ T3895] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1269.096765][ T3895] usb 2-1: Using ep0 maxpacket: 8 [ 1270.320109][ T3895] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 1270.322460][ T3895] usb 2-1: config 0 has no interface number 0 [ 1270.347758][ T3895] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1270.352439][ T3895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.186271][ T3895] usb 2-1: config 0 descriptor?? [ 1271.732476][ T3895] viperboard 2-1:0.143: version 0.00 found at bus 002 address 004 [ 1273.850609][ T3895] viperboard-i2c viperboard-i2c.1.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1273.853731][ T3895] viperboard-i2c viperboard-i2c.1.auto: probe with driver viperboard-i2c failed with error -5 [ 1277.638549][ T3895] usb 2-1: USB disconnect, device number 4 [ 1281.659005][ T4019] loop0: detected capacity change from 0 to 4095 [ 1282.792704][ T4022] loop0: [ 1284.229550][ T4019] loop0: [ 1308.738718][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1309.461997][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1309.880976][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1309.902295][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1309.926924][ T24] usb 2-1: SerialNumber: syz [ 1317.612901][ T24] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -110 [ 1328.297114][ T3782] usb 2-1: USB disconnect, device number 5 [ 1334.579400][ T4066] loop0: detected capacity change from 0 to 4095 [ 1334.838317][ T4066] loop0: [ 1335.277675][ T4066] loop0: [ 1380.226262][ T4090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1381.277640][ T4090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.518536][ T4096] loop0: detected capacity change from 0 to 4095 [ 1385.342118][ T4096] loop0: [ 1387.620879][ T4096] loop0: [ 1402.662921][ T3949] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1403.376976][ T3949] usb 2-1: config index 0 descriptor too short (expected 54, got 36) [ 1403.385577][ T3949] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1403.395509][ T3949] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 1403.405707][ T3949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.642461][ T3895] usb 2-1: USB disconnect, device number 6 [ 1432.393002][ T3949] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1433.644018][ T3949] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1433.810129][ T3949] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1433.820526][ T3949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1433.837749][ T3949] usb 2-1: SerialNumber: 424242424242 [ 1435.480148][ T4137] loop0: detected capacity change from 0 to 4095 [ 1436.492263][ T4137] loop0: [ 1438.678678][ T4142] loop0: [ 1440.695661][ T3949] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -110 [ 1450.094764][ T3895] usb 2-1: USB disconnect, device number 7 [ 1473.492124][ T4168] loop0: detected capacity change from 0 to 4095 [ 1473.983726][ T4168] loop0: [ 1475.031135][ T4168] loop0: [ 1497.026686][ T4185] loop0: detected capacity change from 0 to 4095 [ 1497.336176][ T4185] loop0: [ 1498.380392][ T4185] loop0: [ 1529.815426][ T4206] loop0: detected capacity change from 0 to 4095 [ 1530.573160][ T4206] loop0: [ 1531.738268][ T4209] loop0: [ 1602.118059][ T4244] dlm: closing connection to node 1 [ 1602.183714][ C1] ------------[ cut here ]------------ [ 1602.184408][ C1] WARNING: [!con] fs/dlm/lowcomms.c:1455 at dlm_lowcomms_close+0x48/0x22e, CPU#1: syz.1.85/4244 [ 1602.187581][ C1] Modules linked in: [ 1602.188748][ C1] CPU: 1 UID: 0 PID: 4244 Comm: syz.1.85 Not tainted syzkaller #0 PREEMPT [ 1602.189395][ C1] Hardware name: riscv-virtio,qemu (DT) [ 1602.190018][ C1] epc : dlm_lowcomms_close+0x48/0x22e [ 1602.190902][ C1] ra : dlm_lowcomms_close+0x48/0x22e [ 1602.191663][ C1] epc : ffffffff80011f60 ra : ffffffff80011f60 sp : ffff8f800b0a7a00 [ 1602.192073][ C1] gp : ffffffff8a4a7c60 tp : ffffaf801bf3b580 t0 : 0000000000000000 [ 1602.192458][ C1] t1 : fffffffff8be1770 t2 : ffffffff9187f628 s0 : ffff8f800b0a7a40 [ 1602.192845][ C1] s1 : 0000000000000000 a0 : 0000000000000000 a1 : 0000000000000000 [ 1602.193207][ C1] a2 : 0000000000080000 a3 : ffffffff80011f60 a4 : ffff8f80045aed90 [ 1602.193593][ C1] a5 : 0000000000075d90 a6 : 0000000000000003 a7 : ffffffff86a5a540 [ 1602.193983][ C1] s2 : 0000000000000001 s3 : 0000000000000000 s4 : ffffffff916f13c8 [ 1602.194379][ C1] s5 : 0000000000000000 s6 : ffffffff916f13c0 s7 : 1ffffffff22de279 [ 1602.194795][ C1] s8 : ffffffff916f13c8 s9 : ffffaf8021324eb0 s10: ffffaf80137f6398 [ 1602.195171][ C1] s11: ffffffff88ce4cc8 t3 : ffffffff9a900000 t4 : 000000002c650500 [ 1602.195533][ C1] t5 : ffffffff868694b8 t6 : 0000000000000002 ssp : 0000000000000000 [ 1602.195896][ C1] status: 0000000200000120 badaddr: ffffffff80011f60 cause: 0000000000000003 [ 1602.196404][ C1] [] dlm_lowcomms_close+0x48/0x22e [ 1602.197420][ C1] [] dlm_midcomms_close+0x300/0x58a [ 1602.198142][ C1] [] drop_comm+0x66/0x17e [ 1602.198787][ C1] [] client_drop_item+0x98/0xe6 [ 1602.199340][ C1] [] configfs_rmdir+0x542/0x888 [ 1602.199931][ C1] [] vfs_rmdir+0x2f8/0x7e0 [ 1602.200398][ C1] [] filename_rmdir+0x2e6/0x562 [ 1602.200968][ C1] [] __riscv_sys_unlinkat+0xf0/0x116 [ 1602.201546][ C1] [] syscall_handler+0x92/0x114 [ 1602.202183][ C1] [] do_trap_ecall_u+0x3e4/0x636 [ 1602.202789][ C1] [] handle_exception+0x168/0x174 [ 1602.204462][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1602.205324][ C1] CPU: 1 UID: 0 PID: 4244 Comm: syz.1.85 Not tainted syzkaller #0 PREEMPT [ 1602.205894][ C1] Hardware name: riscv-virtio,qemu (DT) [ 1602.206142][ C1] Call Trace: [ 1602.206343][ C1] [] dump_backtrace+0x2e/0x3c [ 1602.207041][ C1] [] show_stack+0x30/0x3c [ 1602.207548][ C1] [] dump_stack_lvl+0x114/0x1aa [ 1602.208297][ C1] [] dump_stack+0x1c/0x24 [ 1602.209007][ C1] [] vpanic+0x32e/0x75a [ 1602.209541][ C1] [] panic+0xa0/0xa2 [ 1602.210063][ C1] [] check_panic_on_warn+0xc0/0xe4 [ 1602.210665][ C1] [] __warn+0x218/0x61a [ 1602.211201][ C1] [] __report_bug+0x166/0x302 [ 1602.211913][ C1] [] report_bug+0xd8/0x28c [ 1602.212646][ C1] [] handle_break+0x13a/0x30c [ 1602.213275][ C1] [] do_trap_break+0x22e/0x458 [ 1602.213808][ C1] [] handle_exception+0x168/0x174 [ 1602.214340][ C1] [] dlm_lowcomms_close+0x48/0x22e [ 1602.215062][ C1] [] dlm_midcomms_close+0x300/0x58a [ 1602.215798][ C1] [] drop_comm+0x66/0x17e [ 1602.216427][ C1] [] client_drop_item+0x98/0xe6 [ 1602.216977][ C1] [] configfs_rmdir+0x542/0x888 [ 1602.217548][ C1] [] vfs_rmdir+0x2f8/0x7e0 [ 1602.218032][ C1] [] filename_rmdir+0x2e6/0x562 [ 1602.218577][ C1] [] __riscv_sys_unlinkat+0xf0/0x116 [ 1602.219190][ C1] [] syscall_handler+0x92/0x114 [ 1602.219821][ C1] [] do_trap_ecall_u+0x3e4/0x636 [ 1602.220367][ C1] [] handle_exception+0x168/0x174 [ 1602.221410][ C1] SMP: stopping secondary CPUs