last executing test programs: 47.553648078s ago: executing program 0 (id=58): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='+bond0\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/bond0/bonding/mode\x00', 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000400)='+192.168.1.1\n', 0xd) close(r3) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000440)={'dummy0\x00'}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='+dummy0\n', 0x8) close(r5) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000600)={'bond0\x00', 0x1}) nanosleep(&(0x7f0000000700)={0x0, 0x11e1a300}, 0x0) 44.05921784s ago: executing program 1 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/8250_lpss\x00', 0x0, 0x0) 41.456973237s ago: executing program 0 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/nfsd/parameters\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/2048, 0x800) close(r0) 38.207046278s ago: executing program 1 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/100, 0x64) 35.745239853s ago: executing program 0 (id=62): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000680)={'bond0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='-bond_slave_0\n', 0xf) write(r1, &(0x7f0000000100)='-bond_slave_1\n', 0xf) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/bond0/bonding/mode\x00', 0x2, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='100\n', 0x4) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='+192.168.1.1\n', 0xd) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0) write(r5, &(0x7f0000000600)='+bond_slave_0\n', 0xe) close(r5) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000680)={'bond0\x00', 0x1}) nanosleep(&(0x7f0000000700)={0x0, 0x11e1a300}, 0x0) 29.123853505s ago: executing program 1 (id=63): mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dbg\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/ram1/make-it-fail\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='1\n', 0x2) 20.41096974s ago: executing program 0 (id=64): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='+bond0\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/bond0/bonding/mode\x00', 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) write(r3, 0x0, 0x0) close(r3) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000440)={'dummy0\x00'}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='+dummy0\n', 0x8) close(r5) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000600)={'bond0\x00', 0x1}) nanosleep(&(0x7f0000000700)={0x0, 0x11e1a300}, 0x0) 20.286974781s ago: executing program 1 (id=65): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='1\n\x00', 0x2) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/namespaces/1/resv_enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000440)='1\n\x00', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x2, 0x0) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r5, &(0x7f0000000580)='loo', 0x3) close(r5) symlinkat(&(0x7f00000005c0)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write(r6, &(0x7f0000000680)='transport=loop,nqn=testsubsys\x00', 0x1e) close(r6) nanosleep(&(0x7f00000006c0)={0x0, 0xee6b280}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/block/nvme0n1\x00', 0x0, 0x0) close(r7) 10.097952256s ago: executing program 0 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/ieee80211/phy0/netdev:wlan0\x00', 0x0, 0x0) 6.921909456s ago: executing program 1 (id=67): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:02.0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000200)='driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='pch_udc\x00', 0x8) close(r1) close(r0) 170.293649ms ago: executing program 0 (id=68): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000780)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0xc0207518, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @any_cmd={0x0, 0xffff, 0x18, 0x7f00000007b0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=0x0) nanosleep(&(0x7f0000001a00)={0x0, 0x5f5e100}, 0x0) r9 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r9}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) nanosleep(&(0x7f0000001a40)={0x0, 0x5f5e100}, 0x0) r10 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x4002) pwrite64$ublk_bdev(r10, &(0x7f0000800000)='\x00'/4096, 0x1000, 0x0) syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00), 0x0) 0s ago: executing program 1 (id=69): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000680)={'bond0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='-bond_slave_0\n', 0xf) write(r1, &(0x7f0000000100)='-bond_slave_1\n', 0xf) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/bond0/bonding/mode\x00', 0x2, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='100\n', 0x4) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='+192.168.1.1\n', 0xd) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0) write(r5, &(0x7f0000000600)='+bond_slave_0\n', 0xe) close(r5) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000680)={'bond0\x00', 0x1}) nanosleep(&(0x7f0000000700)={0x0, 0x11e1a300}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:45670' (ED25519) to the list of known hosts. syzkaller login: [ 590.674764][ T3251] cgroup: Unknown subsys name 'net' [ 591.650363][ T3251] cgroup: Unknown subsys name 'cpuset' [ 591.841981][ T3251] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 682.140334][ T3251] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 815.955282][ T3259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.134094][ T3259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.281807][ T3258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.584050][ T3258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.153604][ T3259] hsr_slave_0: entered promiscuous mode [ 828.209918][ T3259] hsr_slave_1: entered promiscuous mode [ 830.835339][ T3258] hsr_slave_0: entered promiscuous mode [ 830.928408][ T3258] hsr_slave_1: entered promiscuous mode [ 830.961001][ T3258] debugfs: 'hsr0' already exists in 'hsr' [ 830.964737][ T3258] Cannot create hsr debugfs directory [ 842.666154][ T3258] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 842.889102][ T3258] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 842.933536][ T3258] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 843.075478][ T3258] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 843.122907][ T3258] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 843.283170][ T3258] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 843.333300][ T3258] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 843.444454][ T3258] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 846.485088][ T3259] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 846.711365][ T3259] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 846.780290][ T3259] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 847.592165][ T3259] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 847.672106][ T3259] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 847.948174][ T3259] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 848.575920][ T3259] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 848.723701][ T3259] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 858.525369][ T3258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.925431][ T3259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.552518][ T3258] veth0_vlan: entered promiscuous mode [ 919.095502][ T3258] veth1_vlan: entered promiscuous mode [ 922.797538][ T3258] veth0_macvtap: entered promiscuous mode [ 923.193014][ T3258] veth1_macvtap: entered promiscuous mode [ 926.646321][ T3262] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.286206][ T3259] veth0_vlan: entered promiscuous mode [ 927.917981][ T3262] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.921494][ T3262] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.051293][ T47] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.705304][ T3259] veth1_vlan: entered promiscuous mode [ 933.362135][ T3259] veth0_macvtap: entered promiscuous mode [ 933.635454][ T3258] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 933.724224][ T3259] veth1_macvtap: entered promiscuous mode [ 936.821257][ T3262] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.824812][ T3262] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.021732][ T3543] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.022538][ T3543] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.782143][ T54] nvmet: connect request for invalid subsystem testsubsys! [ 957.865092][ T3880] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 992.050636][ T3255] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 992.542636][ T3255] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 993.652816][ T3255] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.653634][ T3255] usb 1-1: Product: syz [ 993.654133][ T3255] usb 1-1: Manufacturer: syz [ 993.654625][ T3255] usb 1-1: SerialNumber: syz [ 998.261619][ T3255] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 998.262862][ T3255] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 999.234030][ T3255] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 999.253532][ T3255] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 999.936110][ T3255] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1000.721069][ T3255] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1001.607920][ T3255] usb 1-1: USB disconnect, device number 2 [ 1005.740317][ T3922] loop0: detected capacity change from 0 to 32768 [ 1012.043302][ T3922] workqueue: Failed to create a rescuer kthread for wq "kcopyd": -EINTR [ 1019.815325][ T3922] device-mapper: table: 248:0: thin-pool: Error creating pool's kcopyd client (-ENOMEM) [ 1019.816413][ T3922] device-mapper: ioctl: error adding target to table [ 1027.906416][ T3938] bonding: bond0 is being created... [ 1027.980888][ T3938] bonding: bond0 already exists [ 1029.966249][ T3938] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1038.984599][ T3872] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1039.349142][ T3872] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1039.952490][ T3872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.953297][ T3872] usb 1-1: Product: syz [ 1039.953770][ T3872] usb 1-1: Manufacturer: syz [ 1039.954223][ T3872] usb 1-1: SerialNumber: syz [ 1042.812901][ T3872] usb 1-1: Cannot retrieve CPort count: -110 [ 1042.814208][ T3872] usb 1-1: Cannot retrieve CPort count: -110 [ 1042.815400][ T3872] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 1046.696299][ T3953] loop0: detected capacity change from 0 to 32768 [ 1050.383697][ T3953] workqueue: Failed to create a rescuer kthread for wq "kcopyd": -EINTR [ 1056.805401][ T3953] device-mapper: table: 248:0: thin-pool: Error creating pool's kcopyd client (-ENOMEM) [ 1056.805883][ T3953] device-mapper: ioctl: error adding target to table [ 1056.848298][ T3877] usb 1-1: USB disconnect, device number 3 [ 1080.448611][ T3977] bonding: bond0 is being created... [ 1080.532247][ T3977] bonding: bond0 already exists [ 1082.241629][ T3977] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1087.851099][ T3983] loop0: detected capacity change from 0 to 32768 [ 1090.283520][ T3983] workqueue: Failed to create a rescuer kthread for wq "kcopyd": -EINTR [ 1093.489761][ T3983] device-mapper: table: 248:0: thin-pool: Error creating pool's kcopyd client (-ENOMEM) [ 1093.490221][ T3983] device-mapper: ioctl: error adding target to table [ 1102.016210][ T3999] comedi: valid board names for 8255 driver are: [ 1102.016634][ T3999] 8255 [ 1102.032831][ T3999] comedi: valid board names for vmk80xx driver are: [ 1102.033149][ T3999] vmk80xx [ 1102.033383][ T3999] comedi: valid board names for usbduxsigma driver are: [ 1102.033613][ T3999] usbduxsigma [ 1102.033786][ T3999] comedi: valid board names for usbduxfast driver are: [ 1102.033976][ T3999] usbduxfast [ 1102.034148][ T3999] comedi: valid board names for usbdux driver are: [ 1102.034367][ T3999] usbdux [ 1102.034589][ T3999] comedi: valid board names for ni6501 driver are: [ 1102.034837][ T3999] ni6501 [ 1102.035151][ T3999] comedi: valid board names for dt9812 driver are: [ 1102.035348][ T3999] dt9812 [ 1102.035574][ T3999] comedi: valid board names for ni_labpc_cs driver are: [ 1102.035814][ T3999] ni_labpc_cs [ 1102.083427][ T3999] comedi: valid board names for ni_daq_700 driver are: [ 1102.083726][ T3999] ni_daq_700 [ 1102.083892][ T3999] comedi: valid board names for labpc_pci driver are: [ 1102.084087][ T3999] labpc_pci [ 1102.084249][ T3999] comedi: valid board names for adl_pci9118 driver are: [ 1102.084497][ T3999] pci9118dg [ 1102.101044][ T3999] pci9118hg [ 1102.101320][ T3999] pci9118hr [ 1102.101491][ T3999] comedi: valid board names for 8255_pci driver are: [ 1102.101680][ T3999] 8255_pci [ 1102.101843][ T3999] comedi: valid board names for comedi_parport driver are: [ 1102.116485][ T3999] comedi_parport [ 1102.133948][ T3999] comedi: valid board names for comedi_test driver are: [ 1102.144052][ T3999] comedi_test [ 1102.144365][ T3999] comedi: valid board names for comedi_bond driver are: [ 1102.144563][ T3999] comedi_bond [ 1110.509900][ T4002] bonding: bond0 is being created... [ 1110.580267][ T4002] bonding: bond0 already exists [ 1111.262894][ T4002] bond0: ARP target 192.168.1.1 is already present [ 1111.279424][ T4002] bond0: option arp_ip_target: invalid value (+192.168.1.1) [ 1112.598289][ T4004] Could not find key with description: [syz0] [ 1112.598843][ T4004] process_request_key_err: No key [ 1112.599290][ T4004] Could not find valid key in user session keyring for sig specified in mount option: [syz0] [ 1112.599642][ T4004] One or more global auth toks could not properly register; rc = [-2] [ 1112.601120][ T4004] Error validating options; rc = [-2] [ 1127.924712][ T156] nvmet: connect request for invalid subsystem testsubsys! [ 1127.952469][ T4010] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1130.202355][ T4021] 0x000000000000-0x000000020000 : "" [ 1131.086590][ T4021] ftl_cs: FTL header not found. [ 1146.686003][ T4032] Could not find key with description: [syz0] [ 1146.686339][ T4032] process_request_key_err: No key [ 1146.686580][ T4032] Could not find valid key in user session keyring for sig specified in mount option: [syz0] [ 1146.704474][ T4032] One or more global auth toks could not properly register; rc = [-2] [ 1146.705792][ T4032] Error validating options; rc = [-2] [ 1147.866611][ T4034] bonding: bond0 is being created... [ 1147.901009][ T4034] bonding: bond0 already exists [ 1148.302182][ T4034] bond0: ARP target 192.168.1.1 is already present [ 1148.323210][ T4034] bond0: option arp_ip_target: invalid value (+192.168.1.1) [ 1148.682897][ T4034] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 1148.690053][ T4034] bond0: option slaves: unable to set because the bond device is up [ 1149.748733][ T4036] loop0: detected capacity change from 0 to 32768 [ 1154.068492][ T4036] workqueue: Failed to create a rescuer kthread for wq "kcopyd": -EINTR [ 1158.912966][ T4036] device-mapper: table: 248:0: thin-pool: Error creating pool's kcopyd client (-ENOMEM) [ 1158.913833][ T4036] device-mapper: ioctl: error adding target to table [ 1158.990506][ T3262] nvmet: connect request for invalid subsystem testsubsys! [ 1159.044027][ T4041] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1170.753637][ T4058] Could not find key with description: [syz0] [ 1170.753980][ T4058] process_request_key_err: No key [ 1170.754170][ T4058] Could not find valid key in user session keyring for sig specified in mount option: [syz0] [ 1170.754374][ T4058] One or more global auth toks could not properly register; rc = [-2] [ 1170.754981][ T4058] Error validating options; rc = [-2] [ 1173.913730][ T4060] bonding: bond0 is being created... [ 1173.949674][ T4060] bonding: bond0 already exists [ 1174.884970][ T4060] bond0: ARP target 192.168.1.1 is already present [ 1174.899331][ T4060] bond0: option arp_ip_target: invalid value (+192.168.1.1) [ 1175.242914][ T4062] loop0: detected capacity change from 0 to 32768 [ 1176.061694][ T4060] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 1176.065535][ T4060] bond0: option slaves: unable to set because the bond device is up [ 1178.245590][ T4062] workqueue: Failed to create a rescuer kthread for wq "kcopyd": -EINTR [ 1181.956471][ T4062] device-mapper: table: 248:0: thin-pool: Error creating pool's kcopyd client (-ENOMEM) [ 1181.971594][ T4062] device-mapper: ioctl: error adding target to table [ 1192.032851][ T4079] Could not find key with description: [syz0] [ 1192.033420][ T4079] process_request_key_err: No key [ 1192.056721][ T4079] Could not find valid key in user session keyring for sig specified in mount option: [syz0] [ 1192.101649][ T4079] One or more global auth toks could not properly register; rc = [-2] [ 1192.180455][ T4079] Error validating options; rc = [-2] [ 1192.480309][ T4080] bonding: bond0 is being created... [ 1192.510196][ T4080] bonding: bond0 already exists [ 1192.736266][ T4080] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 1192.737489][ T4080] bond0: option slaves: unable to set because the bond device is up [ 1197.808392][ T4085] loop0: detected capacity change from 0 to 32768 [ 1201.761396][ T4085] workqueue: Failed to create a rescuer kthread for wq "kcopyd": -EINTR [ 1205.122535][ T4085] device-mapper: table: 248:0: thin-pool: Error creating pool's kcopyd client (-ENOMEM) [ 1205.134977][ T4085] device-mapper: ioctl: error adding target to table [ 1213.008686][ T4115] bonding: bond0 is being created... [ 1213.175912][ T4115] bonding: bond0 already exists [ 1213.941835][ T4115] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 1213.942302][ T4115] bond0: option slaves: unable to set because the bond device is up [ 1214.425245][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1214.770982][ T9] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 7.03 [ 1214.889041][ T9] usb 1-1: Dual-Role OTG device on HNP port [ 1214.904400][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.625508][ T9] usb 1-1: can't set config #1, error -71 [ 1216.120991][ T9] usb 1-1: USB disconnect, device number 4 [ 1236.846106][ T4146] bonding: bond0 is being created... [ 1236.878325][ T4146] bonding: bond0 already exists [ 1237.286425][ T4146] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 1237.288691][ T4146] bond0: option slaves: unable to set because the bond device is up [ 1253.513627][ T4156] bond0: (slave bond_slave_0): Releasing backup interface [ 1254.682309][ T4157] bond0: (slave bond_slave_1): Releasing backup interface [ 1256.219467][ T4156] bond0: ARP target 192.168.1.1 is already present [ 1256.221528][ T4156] bond0: option arp_ip_target: invalid value (+192.168.1.1) [ 1256.366119][ T4156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1256.552019][ T156] bond0: (slave dummy0): interface is now down [ 1256.552507][ T156] bond0: (slave bond_slave_0): interface is now down [ 1256.684555][ T4156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1256.827267][ T54] bond0: (slave dummy0): interface is now down [ 1256.827888][ T54] bond0: (slave bond_slave_0): interface is now down [ 1256.993710][ T54] bond0: now running without any active interface! [ 1266.635031][ T4163] bonding: bond0 is being created... [ 1266.965189][ T4163] bonding: bond0 already exists [ 1268.193341][ T4163] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 1268.220512][ T4163] bond0: option slaves: unable to set because the bond device is up [ 1270.913610][ T156] nvmet: connect request for invalid subsystem testsubsys! [ 1270.960648][ T4162] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1289.384531][ T4175] bond0: ARP target 192.168.1.1 is already present [ 1289.392629][ T4175] bond0: option arp_ip_target: invalid value (+192.168.1.1) [ 1289.612295][ T4175] bond0: (slave bond_slave_0): Error: Device is in use and cannot be enslaved [ 1289.612755][ T4175] bond0: option slaves: unable to set because the bond device is up [ 1289.785983][ T3268] bond0: (slave bond_slave_0): interface is now down [ 1289.814387][ T3268] bond0: (slave bond_slave_1): interface is now down [ 1289.825053][ T3268] bond0: (slave dummy0): interface is now down [ 1289.929702][ T47] bond0: (slave bond_slave_0): interface is now down [ 1289.951796][ T47] bond0: (slave bond_slave_1): interface is now down [ 1289.954828][ T47] bond0: (slave dummy0): interface is now down [ 1290.076310][ T3262] bond0: (slave bond_slave_0): interface is now down [ 1290.142985][ T3262] bond0: (slave bond_slave_1): interface is now down [ 1290.158414][ T3262] bond0: (slave dummy0): interface is now down [ 1290.172705][ T4175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.271094][ T3543] bond0: (slave bond_slave_0): interface is now down [ 1290.303822][ T3543] bond0: (slave bond_slave_1): interface is now down [ 1290.328683][ T3543] bond0: (slave dummy0): interface is now down [ 1290.415578][ T3543] bond0: now running without any active interface! [ 1293.318303][ T54] [ 1293.323770][ T54] ============================= [ 1293.325685][ T54] WARNING: suspicious RCU usage [ 1293.328751][ T54] syzkaller #0 Not tainted [ 1293.329942][ T54] ----------------------------- [ 1293.331033][ T54] lib/maple_tree.c:720 suspicious rcu_dereference_check() usage! [ 1293.332724][ T54] [ 1293.332724][ T54] other info that might help us debug this: [ 1293.332724][ T54] [ 1293.334612][ T54] [ 1293.334612][ T54] rcu_scheduler_active = 2, debug_locks = 1 [ 1293.336465][ T54] locks held by kworker/u8:4/54: 3, last CPU#1: [ 1293.338479][ T54] #0: ffffaf801211c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x132a/0x22b2 [ 1293.343865][ T54] #1: ffff8f8000417b50 ((work_completion)(&tctx->fallback_work)){+.+.}-{0:0}, at: process_one_work+0x8e8/0x22b2 [ 1293.348125][ T54] #2: ffffaf80327b80a0 (&ctx->uring_lock){+.+.}-{4:4}, at: tctx_task_work_run+0x1a8/0xe76 [ 1293.353236][ T54] [ 1293.353236][ T54] stack backtrace: [ 1293.356093][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT [ 1293.358566][ T54] Hardware name: riscv-virtio,qemu (DT) [ 1293.360031][ T54] Workqueue: events_unbound io_tctx_fallback_work [ 1293.361909][ T54] Call Trace: [ 1293.362910][ T54] [] dump_backtrace+0x2e/0x3c [ 1293.364469][ T54] [] show_stack+0x30/0x3c [ 1293.365783][ T54] [] dump_stack_lvl+0x114/0x1aa [ 1293.368169][ T54] [] dump_stack+0x1c/0x24 [ 1293.370594][ T54] [] lockdep_rcu_suspicious+0x19e/0x266 [ 1293.372498][ T54] [] mas_start+0x568/0x6da [ 1293.373993][ T54] [] mas_walk+0x88/0x2ea [ 1293.375405][ T54] [] ublk_try_buf_match+0x228/0x808 [ 1293.377768][ T54] [] ublk_init_iod+0x478/0x57c [ 1293.380728][ T54] [] ublk_setup_iod+0x10a/0x25c [ 1293.383661][ T54] [] ublk_dispatch_req+0x4e/0x97c [ 1293.385754][ T54] [] ublk_cmd_tw_cb+0xc8/0x11c [ 1293.388043][ T54] [] tctx_task_work_run+0x3a2/0xe76 [ 1293.389617][ T54] [] io_tctx_fallback_work+0x8a/0x164 [ 1293.391213][ T54] [] process_one_work+0x9c6/0x22b2 [ 1293.392560][ T54] [] worker_thread+0x532/0xcaa [ 1293.393837][ T54] [] kthread+0x312/0x438 [ 1293.395190][ T54] [] ret_from_fork_kernel+0x94/0xe76 [ 1293.396533][ T54] [] ret_from_fork_kernel_asm+0x16/0x18 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1293.752109][ T54] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1293.753317][ T54] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 1293.809807][ T3543] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1293.810475][ T3543] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 1293.814904][ T9] ublkb0: unable to read partition table