last executing test programs:

2m57.594996794s ago: executing program 1 (id=29):
r0 = syz_open_dev$usbfs(&(0x7f0000000c00), 0xb, 0x2)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000f00)={0x0, 0x2})
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000d00)={0x21, 0x0, 0x0, 0x0, 0x1c, 0x3e8, &(0x7f0000000e00)="040000001c0000000100000005010200"/28})

2m45.50912437s ago: executing program 1 (id=30):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='./dev\x00', &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/raw-gadget\x00', 0x2, 0x0)
ioctl(r0, 0x41015500, &(0x7f0000000500)="64756d6d795f7564630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000064756d6d795f7564632e3700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003")
ioctl(r0, 0x5501, 0x0)
ioctl(r0, 0x80085502, &(0x7f0000000600)='\x00\x00\x00\x00d\x00\x00\x00')
ioctl(r0, 0x80085502, &(0x7f0000000700)='\x00\x00\x00\x00d\x00\x00\x00')

2m31.651941695s ago: executing program 1 (id=32):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='md0\n\x00', 0x4)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a00000000040000020000000200000000000000010000000000000000000000000000000000000000000000000000000201000000000100")
ioctl(r1, 0x40140921, &(0x7f0000000400)="0000000001000000000000000000000006000000")
ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006000000")
ioctl(r1, 0x400c0930, &(0x7f0000000500)='\x00'/12)
ioctl(r1, 0x40140921, &(0x7f0000000440)="020000000100000002000000ffffffff00000000")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
write(r2, &(0x7f0000000600)='3\n\x00', 0x2)
close(r2)
pwrite64(r1, &(0x7f0000001000), 0x1000, 0x0)

2m19.135019709s ago: executing program 1 (id=34):
r0 = syz_open_dev$usbfs(&(0x7f0000000c00), 0xb, 0x2)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000f00)={0x0, 0x2})
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000d00)={0x21, 0x0, 0x0, 0x0, 0x1c, 0x3e8, &(0x7f0000000e00)="040000001c0000000100000005010200"/28})

2m12.353097208s ago: executing program 1 (id=35):
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='get_crc.py\x00', 0x242, 0x1ff)
write(r0, &(0x7f0000000300)='import struct, binascii\nmagic = 0x646d7a62\nversion = 2\ngen = 1\nsb_block = 0\nnr_meta_blocks = 16\nnr_reserved_seq = 16\nnr_chunks = 1\nnr_map_blocks = 1\nnr_bitmap_blocks = 1\ndmz_label = b\"dmz-test\" + b\"\\x00\" * 24\ndmz_uuid = b\"\\x01\" * 16\ndev_uuid = b\"\\x02\" * 16\nheader = struct.pack(\"<IIQQIIIII\", magic, version, gen, sb_block, nr_meta_blocks, nr_reserved_seq, nr_chunks, nr_map_blocks, nr_bitmap_blocks)\nrest = struct.pack(\"<32s16s16s400s\", dmz_label, dmz_uuid, dev_uuid, b\"\\x00\"*400)\nblock = bytearray(header + struct.pack(\"<I\", 0) + rest + b\"\\x00\" * 3584)\ncomputed_crc = binascii.crc32(block, gen) & 0xffffffff\nraise ValueError(f\"CRC_VALUE_IS_{computed_crc:08x}\")\n', 0x240)
close(r0)
execve(&(0x7f00000005c0)='get_crc.py\x00', &(0x7f0000000600)={[&(0x7f0000000640)='get_crc.py\x00']}, &(0x7f0000000680))

2m2.937094104s ago: executing program 1 (id=37):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1/nodeid\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='1\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)="020000007f00000100"/128, 0x80)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
write(r3, &(0x7f0000000400)="0600000000000000020000000401000000000000000000006c733100"/152, 0x7b)

1m38.531304481s ago: executing program 0 (id=40):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
syz_fuse_handle_req(r0, &(0x7f0000000300), 0x2000, &(0x7f0000000400)={&(0x7f0000000500)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x228000, 0x0, 0x9, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x15, 0x0, 0x0, {'hello'}}, &(0x7f0000000600)={0x20, 0x0, 0x0, {0x0, 0x1}}, &(0x7f0000000700)={0x78, 0x0, 0x0, {0x1, 0x0, 0x0, {0x2, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8180, 0x1}}}, &(0x7f0000000800)={0x90, 0x0, 0x0, {0x2, 0x0, 0x1, 0x1, 0x0, 0x0, {0x2, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8180, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000000300), 0x2000, &(0x7f0000000400))
syz_fuse_handle_req(r0, &(0x7f0000000300), 0x2000, &(0x7f0000000400))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/foo\x00', 0x2, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000000300), 0x2000, &(0x7f0000000400))
read(r1, &(0x7f0000000a00)=""/100, 0x64)

1m27.802378052s ago: executing program 0 (id=41):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0)
getdents64(r0, &(0x7f0000001000)=""/4096, 0x1000)

1m23.186573904s ago: executing program 0 (id=42):
r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40000000000000010203010902350001010080fa0904000005ff0000000705810308000107058202000200070502020002000705830200020007050302000200"], 0x0)
nanosleep(&(0x7f0000000300)={0x5}, 0x0)
syz_usb_disconnect(r0)

1m16.204427249s ago: executing program 32 (id=37):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1/nodeid\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='1\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)="020000007f00000100"/128, 0x80)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
write(r3, &(0x7f0000000400)="0600000000000000020000000401000000000000000000006c733100"/152, 0x7b)

1m7.586385403s ago: executing program 0 (id=44):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002e0), 0x2, 0x0)
write(r0, 0x0, 0x0)
write(r0, 0x0, 0x0)

1m3.167369132s ago: executing program 0 (id=45):
syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x200, 0xfff, 0x0, "f441a4440fb2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xfc, 0x3, 0x8, 0x1, "371fc8"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x5, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x15, 0x2)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000300)={0x1, 0x1})
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000340)={0x2, 0x1})
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_iso={0x0, {0x1}, 0x0, 0x2, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, [{0x8}]})
ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000000))
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000001000)=@urb_type_iso={0x0, {0x2, 0x1}, 0x0, 0x2, &(0x7f0000001080)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, [{0x8}]})
ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000001000))
ioctl(r0, 0x4004550c, &(0x7f0000000200)='\x00\x00\x00\x00')
ioctl(r0, 0x4004550c, &(0x7f0000000200)='\x00\x00\x00\x00')

50.15874749s ago: executing program 0 (id=46):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x35, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x35}}, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10)
listen(r3, 0x5)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10)
accept(r3, 0x0, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0xbebc200}, 0x0)

0s ago: executing program 33 (id=46):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x35, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x35}}, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10)
listen(r3, 0x5)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10)
accept(r3, 0x0, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0xbebc200}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:17408' (ED25519) to the list of known hosts.
syzkaller login: [  532.098189][ T3210] cgroup: Unknown subsys name 'net'
[  532.774978][ T3210] cgroup: Unknown subsys name 'cpuset'
[  532.928298][ T3210] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  612.048600][ T3210] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  750.653274][ T3224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  751.099972][ T3224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  757.236700][ T3222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  757.687921][ T3222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  771.589586][ T3224] hsr_slave_0: entered promiscuous mode
[  771.629267][ T3224] hsr_slave_1: entered promiscuous mode
[  775.235999][ T3222] hsr_slave_0: entered promiscuous mode
[  775.251158][ T3222] hsr_slave_1: entered promiscuous mode
[  775.316294][ T3222] debugfs: 'hsr0' already exists in 'hsr'
[  775.330423][ T3222] Cannot create hsr debugfs directory
[  786.078809][ T3224] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  786.287044][ T3224] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  786.348161][ T3224] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  786.440529][ T3224] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  786.830581][ T3224] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  787.094788][ T3224] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  787.238015][ T3224] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  787.437855][ T3224] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  789.930471][ T3222] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  790.205499][ T3222] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  790.371067][ T3222] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  790.510673][ T3222] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  790.607784][ T3222] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  791.324266][ T3222] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  791.405783][ T3222] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  791.541174][ T3222] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  816.798470][ T3224] 8021q: adding VLAN 0 to HW filter on device bond0
[  820.217946][ T3222] 8021q: adding VLAN 0 to HW filter on device bond0
[  880.033945][ T3224] veth0_vlan: entered promiscuous mode
[  881.269460][ T3224] veth1_vlan: entered promiscuous mode
[  885.604074][ T3224] veth0_macvtap: entered promiscuous mode
[  886.311467][ T3224] veth1_macvtap: entered promiscuous mode
[  891.040860][ T3570] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  891.174443][ T3294] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  891.394239][ T3294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  892.224961][ T3570] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  893.930400][ T3222] veth0_vlan: entered promiscuous mode
[  896.608520][ T3222] veth1_vlan: entered promiscuous mode
[  901.179854][ T3222] veth0_macvtap: entered promiscuous mode
[  902.246783][ T3222] veth1_macvtap: entered promiscuous mode
[  903.244998][ T3224] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  908.529547][  T970] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  908.576738][ T3294] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  908.590634][ T3294] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  908.603364][ T3294] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  933.628028][   T31] audit: type=1800 audit(932.560:2): pid=3848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3" name="idProduct" dev="configfs" ino=3351 res=0 errno=0
[  934.917905][   T31] audit: type=1800 audit(933.800:3): pid=3849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3" name="qw_sign" dev="configfs" ino=2996 res=0 errno=0
[  945.415505][ T3852] UDC core: g1: couldn't find an available UDC or it's busy
[  946.786933][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  947.237020][    T9] usb 1-1: Using ep0 maxpacket: 32
[  947.566855][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  947.583700][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  947.587220][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  947.589237][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  947.591289][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  947.606318][    T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  947.608542][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  948.278656][    T9] usb 1-1: config 0 descriptor??
[  955.749642][    T9] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  956.303272][    T9] usb 1-1: USB disconnect, device number 2
[  957.195552][    T9] usblp0: removed
[  961.945974][ T3792] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  965.016248][ T3792] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  965.018474][ T3792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  967.771069][ T3884] netlink: 'syz.1.7': attribute type 5 has an invalid length.
[  970.866838][  T970] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  970.907564][  T970] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  970.950883][  T970] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  970.970737][  T970] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  979.050938][ T3840] usb 1-1: USB disconnect, device number 3
[  993.927468][ T3899] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  999.939498][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  999.968420][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[ 1000.308610][    T9] usb 2-1: device descriptor read/64, error -32
[ 1000.816631][    T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 1001.909702][    T9] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[ 1001.925891][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1008.844078][ T3913] kernel profiling enabled (shift: 63)
[ 1008.846988][ T3913] profiling shift: 63 too large
[ 1017.317913][ T3794] usb 2-1: USB disconnect, device number 3
[ 1028.640857][ T3909] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 1028.687395][ T3923] configfs-gadget.g1 gadget.0: HOST MAC 92:cb:cc:35:9a:31
[ 1028.766057][ T3923] configfs-gadget.g1 gadget.0: MAC 12:74:d1:51:53:a7
[ 1029.410176][ T3909] usb 2-1: New USB device found, idVendor=9710, idProduct=7830, bcdDevice= 1.00
[ 1029.450650][ T3909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1037.184576][ T3909] usb 2-1: Cannot read MAC address
[ 1037.197992][ T3909] MOSCHIP usb-ethernet driver 2-1:1.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32
[ 1043.303828][ T3792] usb 2-1: USB disconnect, device number 4
[ 1053.126174][ T3952] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1056.339401][ T3840] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 1058.351188][ T3840] usb 2-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice= 0.00
[ 1058.374574][ T3840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1058.376734][ T3840] usb 2-1: Product: syz
[ 1058.377795][ T3840] usb 2-1: Manufacturer: syz
[ 1058.378842][ T3840] usb 2-1: SerialNumber: syz
[ 1067.004619][ T3909] usb 2-1: USB disconnect, device number 5
[ 1074.796606][ T3973] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1075.294269][ T3941] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[ 1078.251340][ T3941] usb 2-1: New USB device found, idVendor=0710, idProduct=0001, bcdDevice= 0.01
[ 1078.266069][ T3941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1078.270690][ T3941] usb 2-1: Product: syz
[ 1078.281420][ T3941] usb 2-1: Manufacturer: syz
[ 1078.293930][ T3941] usb 2-1: SerialNumber: syz
[ 1081.529903][ T3941] usb 2-1: Direct firmware load for whiteheat_loader.fw failed with error -2
[ 1081.545888][ T3941] usb 2-1: Falling back to sysfs fallback for: whiteheat_loader.fw
[ 1098.969662][ T3993] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1107.996368][ T4000] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1117.210663][ T4005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1117.617043][ T4005] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1119.171436][ T4005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1119.285260][ T4005] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1146.255123][ T3941] usb 2-1: ezusb_ihex_firmware_download - request "whiteheat_loader.fw" failed
[ 1146.355781][ T3941] whiteheat 2-1:1.0: probe with driver whiteheat failed with error -2
[ 1148.430454][ T3941] usb 2-1: USB disconnect, device number 6
[ 1151.139953][ T4023] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1167.689944][ T3794] input: syz0 as /devices/virtual/misc/uhid/0003:04D8:C002.0001/input/input0
[ 1168.412923][ T3794] hid-picolcd 0003:04D8:C002.0001: No report with id 0x21 found
[ 1172.255297][ T3794] rc_core: IR keymap rc-rc6-mce not found
[ 1172.256908][ T3794] Registered IR keymap rc-empty
[ 1172.394023][ T3794] rc rc0: syz0 as /devices/virtual/misc/uhid/0003:04D8:C002.0001/rc/rc0
[ 1172.752941][ T3794] input: syz0 as /devices/virtual/misc/uhid/0003:04D8:C002.0001/rc/rc0/input1
[ 1173.324805][ T3794] hid-picolcd 0003:04D8:C002.0001: unsupported CONTRAST report
[ 1175.616226][ T3794] hid-picolcd 0003:04D8:C002.0001: probe with driver hid-picolcd failed with error -22
[ 1186.717597][ T4059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1187.996121][ T4059] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1199.300233][ T4065] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1201.396066][ T4067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1201.708130][ T4067] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1207.024064][ T4067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1207.416715][ T4067] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1222.815636][ T4078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1223.146849][ T4078] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1226.368760][ T4082] dlm: Using TCP for communications
[ 1226.687319][ T4082] dlm: ls1: joining the lockspace group...
[ 1235.879891][ T4088] md: array md0 already initialised!
[ 1236.475734][ T4088] md: personality for level  is not loaded!
[ 1262.975539][ T4102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1263.066601][ T4102] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1284.237517][ T4116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1284.429785][ T4116] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1300.374982][ T4148] netlink: 21 bytes leftover after parsing attributes in process `syz.0.46'.
[ 1301.385828][ T4148] lo speed is unknown, defaulting to 1000
[ 1303.185692][ T4148] lo speed is unknown, defaulting to 1000
[ 1304.405901][ T4148] lo speed is unknown, defaulting to 1000
[ 1329.324897][ T3794] lo speed is unknown, defaulting to 1000
[ 1329.330654][ T4148] infiniband syz0: set active
[ 1329.337751][ T4148] infiniband syz0: added lo
[ 1329.820348][ T4148] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[ 1330.130551][ T4148] infiniband syz0: Couldn't open port 1
[ 1332.546895][ T4148] RDS/IB: syz0: added
[ 1332.616118][ T4148] smc: adding ib device syz0 with port count 1
[ 1332.619239][ T4148] smc:    ib device syz0 port 1 has no pnetid
[ 1332.681546][ T3840] lo speed is unknown, defaulting to 1000
[ 1332.894943][ T4148] lo speed is unknown, defaulting to 1000
[ 1338.520824][ T4107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1339.320223][ T4107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1361.829946][ T4148] lo speed is unknown, defaulting to 1000
[ 1389.334917][ T4107] hsr_slave_0: entered promiscuous mode
[ 1389.744992][ T4107] hsr_slave_1: entered promiscuous mode
[ 1390.068328][ T4107] debugfs: 'hsr0' already exists in 'hsr'
[ 1390.085563][ T4107] Cannot create hsr debugfs directory
[ 1392.441488][ T4148] lo speed is unknown, defaulting to 1000
[ 1416.845776][ T4148] lo speed is unknown, defaulting to 1000
[ 1418.240879][ T4107] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1418.760402][ T4107] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1418.928935][ T4107] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1419.739210][ T4107] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1419.890249][ T4107] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1420.149234][ T4107] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1420.331422][ T4107] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1420.586928][ T4107] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1457.985699][ T4107] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1489.449477][ T3294] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1494.436040][ T3294] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1496.455578][ T3294] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1499.368769][ T3294] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1511.766597][ T4287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1524.030000][ T3294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1524.485989][ T3294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1524.716440][ T3294] bond0 (unregistering): Released all slaves
[ 1525.639284][ T4287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1564.639811][ T3294] hsr_slave_0: left promiscuous mode
[ 1564.855146][ T3294] hsr_slave_1: left promiscuous mode
[ 1565.821059][ T3294] veth1_macvtap: left promiscuous mode
[ 1565.830136][ T3294] veth0_macvtap: left promiscuous mode
[ 1565.900425][ T3294] veth1_vlan: left promiscuous mode
[ 1565.931478][ T3294] veth0_vlan: left promiscuous mode
[ 1600.587810][ T3826] smc: removing ib device syz0
[ 1604.489019][ T3792] lo speed is unknown, defaulting to 1000
[ 1604.506674][ T3792] syz0: Port: 1 Link DOWN
[ 1604.760570][ T3078] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1649.109397][ T4287] hsr_slave_0: entered promiscuous mode
[ 1649.350351][ T4287] hsr_slave_1: entered promiscuous mode
[ 1657.853566][   T32] INFO: task syz.1.37:4082 blocked for more than 430 seconds.
[ 1657.945589][   T32]       Not tainted syzkaller #0
[ 1657.963465][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1657.991530][   T32] task:syz.1.37        state:D stack:0     pid:4082  tgid:4081  ppid:3222   task_flags:0x400140 flags:0x00000002
[ 1658.086313][   T32] Call Trace:
[ 1658.109334][   T32] [<ffffffff8652c3f0>] __schedule+0x1de4/0x4ff4
[ 1658.166877][   T32] [<ffffffff8652f6ae>] schedule+0xae/0x260
[ 1658.168235][   T32] [<ffffffff80ff6f26>] do_uevent+0x432/0x5d4
[ 1658.184290][   T32] [<ffffffff80ff86d8>] __dlm_new_lockspace+0x157c/0x1f9e
[ 1658.193591][   T32] [<ffffffff80ff9830>] dlm_new_user_lockspace+0x62/0x8c
[ 1658.238338][   T32] [<ffffffff810336f2>] device_write+0x868/0x1a40
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1658.252959][   T32] [<ffffffff80ce7d36>] vfs_write+0x308/0x1020
[ 1658.299064][   T32] [<ffffffff80ce8e58>] ksys_write+0x126/0x244
[ 1658.333442][   T32] [<ffffffff80ce8fe4>] __riscv_sys_write+0x6e/0xa0
[ 1658.366827][   T32] [<ffffffff80078f30>] syscall_handler+0x92/0x114
[ 1658.387011][   T32] [<ffffffff8651fb84>] do_trap_ecall_u+0x3e4/0x636
[ 1658.397082][   T32] [<ffffffff8654beb0>] handle_exception+0x168/0x174
[ 1658.415235][   T32] 
[ 1658.415235][   T32] Showing all locks held in the system:
[ 1658.447733][   T32] 1 lock held by khungtaskd/32:
[ 1658.510595][   T32]  #0: ffffffff889f4020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3e/0x1a0
[ 1658.586843][   T32] 3 locks held by kworker/u8:7/970:
[ 1658.603367][   T32]  #0: ffffaf8072c2fb60 (&rq->__lock){-.-.}-{2:2}, at: process_one_work+0x1068/0x20a0
[ 1658.696616][   T32]  #1: ffff8f8001ee7b50 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x826/0x20a0
[ 1658.777531][   T32]  #2: ffffaf801cb81258 (&devlink->lock_key#3){+.+.}-{4:4}, at: devl_trylock+0x22/0x2c
[ 1658.861224][   T32] 2 locks held by syslogd/3030:
[ 1658.900423][   T32] 1 lock held by klogd/3034:
[ 1658.908053][   T32] 2 locks held by getty/3184:
[ 1658.916017][   T32]  #0: ffffaf801a1e90a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3a/0x46
[ 1658.938666][   T32]  #1: ffff8f800008e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x3be/0x12fc
[ 1658.971136][   T32] 2 locks held by syz-executor/3210:
[ 1658.991223][   T32] 4 locks held by kworker/u8:1/3294:
[ 1659.020556][   T32]  #0: ffffaf801211e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1068/0x20a0
[ 1659.057898][   T32]  #1: ffff8f8009487b50 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x826/0x20a0
[ 1659.083530][   T32]  #2: ffffffff8a027048 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xd2/0x7e6
[ 1659.100353][   T32]  #3: ffffffff88a067b8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x702
[ 1659.128221][   T32] 7 locks held by kworker/u8:6/3826:
[ 1659.139223][   T32] 2 locks held by kworker/0:7/3909:
[ 1659.144465][   T32] 1 lock held by syz.1.37/4082:
[ 1659.149368][   T32]  #0: ffffffff916f0bc0 (&ls_lock){+.+.}-{4:4}, at: __dlm_new_lockspace+0xbe/0x1f9e
[ 1659.180195][   T32] 1 lock held by dlm_recoverd/4084:
[ 1659.189285][   T32]  #0: ffffaf8019f58a18 (&ls->ls_in_recovery){+.+.}-{4:4}, at: dlm_recoverd+0xc6/0x24a8
[ 1659.232365][   T32] 2 locks held by kworker/u8:3/4309:
[ 1659.248353][   T32]  #0: ffffaf801211c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1068/0x20a0
[ 1659.288903][   T32]  #1: ffff8f800ff37b50 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x826/0x20a0
[ 1659.323292][   T32] 2 locks held by modprobe/4653:
[ 1659.332423][   T32] 3 locks held by dhcpcd-run-hook/4654:
[ 1659.336566][   T32] 
[ 1659.341105][   T32] =============================================
[ 1659.341105][   T32] 
[ 1659.358386][   T32] NMI backtrace for cpu 0
[ 1659.358980][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT 
[ 1659.359449][   T32] Hardware name: riscv-virtio,qemu (DT)
[ 1659.359755][   T32] Call Trace:
[ 1659.359953][   T32] [<ffffffff8007c6e4>] dump_backtrace+0x2e/0x3c
[ 1659.360453][   T32] [<ffffffff80003112>] show_stack+0x30/0x3c
[ 1659.360839][   T32] [<ffffffff80060ea4>] dump_stack_lvl+0x114/0x1aa
[ 1659.361368][   T32] [<ffffffff80060f56>] dump_stack+0x1c/0x24
[ 1659.361798][   T32] [<ffffffff864dff34>] nmi_cpu_backtrace+0x25e/0x3ae
[ 1659.362095][   T32] [<ffffffff864e0330>] nmi_trigger_cpumask_backtrace+0x2ac/0x4ee
[ 1659.362417][   T32] [<ffffffff8008a6e6>] arch_trigger_cpumask_backtrace+0x2c/0x3e
[ 1659.362729][   T32] [<ffffffff864f489e>] sys_info+0x20c/0x252
[ 1659.363084][   T32] [<ffffffff8052fe98>] watchdog+0xa26/0x1282
[ 1659.363562][   T32] [<ffffffff801f3914>] kthread+0x312/0x438
[ 1659.364044][   T32] [<ffffffff8006a1ee>] ret_from_fork_kernel+0x94/0xef6
[ 1659.364406][   T32] [<ffffffff8654bfea>] ret_from_fork_kernel_asm+0x16/0x18
[ 1659.376386][   T32] Sending NMI from CPU 0 to CPUs 1:
[ 1659.378285][    C1] NMI backtrace for cpu 1
[ 1659.378698][    C1] CPU: 1 UID: 0 PID: 3034 Comm: klogd Not tainted syzkaller #0 PREEMPT 
[ 1659.379207][    C1] Hardware name: riscv-virtio,qemu (DT)
[ 1659.379484][    C1] epc : _raw_spin_unlock_irqrestore+0x36/0xc0
[ 1659.380093][    C1]  ra : _raw_spin_unlock_irqrestore+0x7c/0xc0
[ 1659.380637][    C1] epc : ffffffff86547c4e ra : ffffffff86547c94 sp : ffff8f8003c27010
[ 1659.381014][    C1]  gp : ffffffff8a4a7c60 tp : ffffaf801c161ac0 t0 : ffff8f8003c27580
[ 1659.381385][    C1]  t1 : ffffffff8007bc8e t2 : ffffffff86a06bd0 s0 : ffff8f8003c27030
[ 1659.381801][    C1]  s1 : 0000000000000002 a0 : 0000000000000001 a1 : ffffffff88216318
[ 1659.382192][    C1]  a2 : 0000000000000002 a3 : 0000000000000001 a4 : 0000000000001000
[ 1659.382579][    C1]  a5 : 0000000000000000 a6 : 0000000000000003 a7 : 0000000041b58ab3
[ 1659.382938][    C1]  s2 : ffffffff88a06180 s3 : 0000000000000001 s4 : 0000000000000000
[ 1659.383303][    C1]  s5 : 0000000000000008 s6 : 1ffffffff1140c3a s7 : 1ffffffff1140c38
[ 1659.383706][    C1]  s8 : 1ffff5f00382c3f2 s9 : ffffffff8a4ed520 s10: ffffffff88a06180
[ 1659.384090][    C1]  s11: ffffaf801c161ac0 t3 : ffffffff8809bec8 t4 : fffffffef1140c30
[ 1659.384471][    C1]  t5 : fffffffef1140c31 t6 : ffffffff88261800 ssp : 0000000000000000
[ 1659.384857][    C1] status: 0000000200000120 badaddr: 0000000000000000 cause: 8000000000000001
[ 1659.385341][    C1] [<ffffffff86547c4e>] _raw_spin_unlock_irqrestore+0x36/0xc0
[ 1659.386124][    C1] [<ffffffff8039e264>] rcu_preempt_deferred_qs_irqrestore+0x622/0x1172
[ 1659.386861][    C1] [<ffffffff8039f058>] __rcu_read_unlock+0x2a4/0x506
[ 1659.387533][    C1] [<ffffffff803e9b46>] is_module_text_address+0x102/0x1d0
[ 1659.388094][    C1] [<ffffffff801ebde4>] kernel_text_address+0x78/0xf2
[ 1659.388721][    C1] [<ffffffff801ebe6e>] __kernel_text_address+0x10/0x34
[ 1659.389372][    C1] [<ffffffff8007bd8c>] walk_stackframe+0xfe/0x56a
[ 1659.390130][    C1] [<ffffffff865202a6>] arch_stack_walk+0x1c/0x26
[ 1659.390776][    C1] [<ffffffff803f56bc>] stack_trace_save+0xa0/0xd2
[ 1659.391334][    C1] [<ffffffff80bd7842>] kasan_save_stack+0x3e/0x66
[ 1659.392102][    C1] [<ffffffff80bd7898>] kasan_save_track+0x16/0x28
[ 1659.392821][    C1] [<ffffffff80bda756>] kasan_save_alloc_info+0x30/0x3e
[ 1659.393411][    C1] [<ffffffff80bd7366>] __kasan_kmalloc+0xa0/0xa6
[ 1659.394146][    C1] [<ffffffff80b2df4e>] __kmalloc_node_track_caller_noprof+0x2be/0x8c0
[ 1659.394789][    C1] [<ffffffff8520ec0a>] kmalloc_reserve+0xea/0x344
[ 1659.395290][    C1] [<ffffffff8521b1fe>] __alloc_skb+0x1ba/0x768
[ 1659.395850][    C1] [<ffffffff85230dd8>] alloc_skb_with_frags+0xc0/0x73a
[ 1659.396441][    C1] [<ffffffff851f1672>] sock_alloc_send_pskb+0x6a2/0x7da
[ 1659.397105][    C1] [<ffffffff85d2d664>] unix_dgram_sendmsg+0x332/0x14cc
[ 1659.397645][    C1] [<ffffffff851db2f4>] __sock_sendmsg+0xce/0x1ce
[ 1659.398134][    C1] [<ffffffff851e651c>] __sys_sendto+0x25c/0x326
[ 1659.398676][    C1] [<ffffffff851e66a6>] __riscv_sys_sendto+0xc0/0x158
[ 1659.399224][    C1] [<ffffffff80078f30>] syscall_handler+0x92/0x114
[ 1659.399820][    C1] [<ffffffff8651fb84>] do_trap_ecall_u+0x3e4/0x636
[ 1659.400320][    C1] [<ffffffff8654beb0>] handle_exception+0x168/0x174
[ 1659.636719][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[ 1659.638252][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT 
[ 1659.639165][   T32] Hardware name: riscv-virtio,qemu (DT)
[ 1659.639966][   T32] Call Trace:
[ 1659.640485][   T32] [<ffffffff8007c6e4>] dump_backtrace+0x2e/0x3c
[ 1659.641564][   T32] [<ffffffff80003112>] show_stack+0x30/0x3c
[ 1659.642484][   T32] [<ffffffff80060ea4>] dump_stack_lvl+0x114/0x1aa
[ 1659.643531][   T32] [<ffffffff80060f56>] dump_stack+0x1c/0x24
[ 1659.644527][   T32] [<ffffffff800039ba>] vpanic+0x32e/0x75a
[ 1659.645338][   T32] [<ffffffff80003e86>] panic+0xa0/0xa2
[ 1659.646096][   T32] [<ffffffff8052fec8>] watchdog+0xa56/0x1282
[ 1659.646990][   T32] [<ffffffff801f3914>] kthread+0x312/0x438
[ 1659.648183][   T32] [<ffffffff8006a1ee>] ret_from_fork_kernel+0x94/0xef6
[ 1659.649065][   T32] [<ffffffff8654bfea>] ret_from_fork_kernel_asm+0x16/0x18
[ 1659.650378][   T32] SMP: stopping secondary CPUs
[ 1659.653116][   T32] Rebooting in 86400 seconds..