last executing test programs: 8m28.309727724s ago: executing program 0 (id=41): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r0 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0x9710, 0x7810, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, [], [{{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}}, {{0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x0, &(0x7f0000000900)={0x40, 0xd, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x0, &(0x7f0000000900)={0x40, 0xd, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x0, &(0x7f0000000900)={0x40, 0xd, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x0, &(0x7f0000000900)={0x40, 0xd, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x0, &(0x7f0000000900)={0x40, 0xd, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x0, &(0x7f0000000900)={0x40, 0xd, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m5.818246092s ago: executing program 0 (id=43): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) 7m49.307735589s ago: executing program 0 (id=45): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000040405e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x101301) ioctl$USBDEVFS_RESET(r1, 0x5514) 7m28.858437098s ago: executing program 0 (id=48): mount(&(0x7f0000000040)=@filename='securityfs\x00', &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/profile\x00', 0x1, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) 7m18.524432992s ago: executing program 0 (id=49): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) 6m55.767443292s ago: executing program 0 (id=51): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/1/nodeid\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)="020000007f00000100"/129, 0x80) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write(r3, &(0x7f0000000500)="0600000000000000010000000401000000000000000000006c733100"/122, 0x78) r4 = socket$inet(0x2, 0x1, 0x6) connect(r4, &(0x7f0000000600)=@in={0x2, 0x5248, @loopback}, 0x10) 6m8.946257651s ago: executing program 32 (id=51): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/1/nodeid\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)="020000007f00000100"/129, 0x80) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write(r3, &(0x7f0000000500)="0600000000000000010000000401000000000000000000006c733100"/122, 0x78) r4 = socket$inet(0x2, 0x1, 0x6) connect(r4, &(0x7f0000000600)=@in={0x2, 0x5248, @loopback}, 0x10) 1m54.689313565s ago: executing program 1 (id=66): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000040)=@filename='securityfs\x00', &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/profile\x00', 0x1, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) 1m34.019055894s ago: executing program 1 (id=67): openat(0xffffffffffffff9c, &(0x7f0000000040)='sys/bus/platform/drivers/dwc2\x00', 0x0, 0x0) 1m14.859180746s ago: executing program 1 (id=68): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='devices', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/disk\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='test_resume', 0xb) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x1, 0x0) close(r2) 45.730321666s ago: executing program 1 (id=69): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bNumInterfaces1\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/16, 0x10) 22.763991211s ago: executing program 1 (id=70): r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000402a1101000001010203010902270001010080320904000003ff000000070581024000000705020240000007058202400000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x8, &(0x7f0000000300)={0x40, 0xbd, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000600)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/lirc0\x00', 0x2, 0x0) write(r1, &(0x7f0000000800)="64000000c800000064000000c800000064000000", 0x14) 0s ago: executing program 1 (id=71): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60000010200010902120001010080320904000000000000000000"], 0x0) nanosleep(&(0x7f0000002000)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./sys\x00', 0x1ff) mount(&(0x7f0000004000)=@filename='none\x00', &(0x7f0000005000)='./sys\x00', &(0x7f0000006000)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000007000)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000008000)='stm32g0-typec 0x35\n', 0x13) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000009000)='./sys/bus/i2c/devices/i2c-3/new_device\x00', 0x1, 0x0) write(r1, &(0x7f000000a000)='stm32g0-typec 0x35\n', 0x13) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f000000b000)='./sys/bus/i2c/devices/i2c-4/new_device\x00', 0x1, 0x0) write(r2, &(0x7f000000c000)='stm32g0-typec 0x35\n', 0x13) close(r2) openat(0xffffffffffffff9c, &(0x7f000000d000)='./sys/power/state\x00', 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:19918' (ED25519) to the list of known hosts. syzkaller login: [ 609.857332][ T3235] cgroup: Unknown subsys name 'net' [ 610.518028][ T3235] cgroup: Unknown subsys name 'cpuset' [ 610.705334][ T3235] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 703.949535][ T3235] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 930.822651][ T3247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.494651][ T3247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.590270][ T3249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 932.809023][ T3249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 956.627704][ T3247] hsr_slave_0: entered promiscuous mode [ 956.675891][ T3247] hsr_slave_1: entered promiscuous mode [ 961.469712][ T3249] hsr_slave_0: entered promiscuous mode [ 961.551749][ T3249] hsr_slave_1: entered promiscuous mode [ 961.593893][ T3249] debugfs: 'hsr0' already exists in 'hsr' [ 961.600438][ T3249] Cannot create hsr debugfs directory [ 975.723046][ T3247] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 975.965269][ T3247] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 976.097555][ T3247] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 976.314402][ T3247] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 976.420341][ T3247] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 976.559095][ T3247] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 977.131013][ T3247] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 977.359102][ T3247] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 981.022330][ T3249] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 981.281685][ T3249] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 981.513889][ T3249] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 981.704570][ T3249] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 982.251968][ T3249] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 982.572101][ T3249] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 982.740888][ T3249] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 983.011443][ T3249] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1017.684771][ T3249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1018.474634][ T3247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1116.227142][ T3249] veth0_vlan: entered promiscuous mode [ 1118.133594][ T3249] veth1_vlan: entered promiscuous mode [ 1118.502193][ T3247] veth0_vlan: entered promiscuous mode [ 1119.912008][ T3247] veth1_vlan: entered promiscuous mode [ 1124.461158][ T3249] veth0_macvtap: entered promiscuous mode [ 1125.889917][ T3249] veth1_macvtap: entered promiscuous mode [ 1126.582682][ T3247] veth0_macvtap: entered promiscuous mode [ 1127.929051][ T3247] veth1_macvtap: entered promiscuous mode [ 1132.035063][ T3512] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.418382][ T3500] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.314480][ T3327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.475689][ T3500] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.104087][ T987] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.274100][ T3512] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.350943][ T3500] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.300881][ T3500] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.272636][ T3249] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1173.802499][ T3862] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1178.274552][ T3865] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1179.646182][ T3865] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 1.00 [ 1179.683099][ T3865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.152178][ T3865] usb 1-1: USB2VGA dongle found at address 2 [ 1183.601709][ T3865] usb 1-1: Allocated 8 output buffers [ 1189.004095][ T3865] usb 1-1: Failed to early initialize device [ 1190.101643][ T3865] usb 1-1: USB disconnect, device number 2 [ 1204.665473][ T3507] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 1204.684616][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1204.997951][ T3507] usb 1-1: device descriptor read/64, error -32 [ 1205.442724][ T3507] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 1206.104547][ T3507] usb 1-1: not running at top speed; connect to a high speed hub [ 1207.300363][ T3507] usb 1-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.00 [ 1207.307987][ T3507] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.095555][ T3507] oti6858 1-1:1.0: oti6858 converter detected [ 1208.550708][ T3507] usb 1-1: oti6858 converter now attached to ttyUSB0 [ 1225.844085][ T3864] usb 1-1: USB disconnect, device number 4 [ 1228.503956][ T3864] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1228.919805][ T3864] oti6858 1-1:1.0: device disconnected [ 1238.422054][ T3883] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1238.444492][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1238.744455][ T3883] usb 2-1: device descriptor read/64, error -32 [ 1239.200764][ T3883] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1239.208069][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1239.472548][ T3883] usb 2-1: device descriptor read/64, error -32 [ 1239.655368][ T3883] usb usb2-port1: attempt power cycle [ 1240.390430][ T3883] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1241.023572][ T3883] usb 2-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 1241.025909][ T3883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.035313][ T3883] i2c-tiny-usb 2-1:1.0: version 1.00 found at bus 002 address 005 [ 1244.162959][ T3883] (null): error -EIO: failure setting delay to 10us [ 1244.190119][ T3883] i2c-tiny-usb 2-1:1.0: probe with driver i2c-tiny-usb failed with error -5 [ 1248.892089][ T3865] usb 2-1: USB disconnect, device number 5 [ 1268.109794][ T3883] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1270.773834][ T3883] usb 2-1: Using ep0 maxpacket: 8 [ 1271.410437][ T3883] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 1271.421995][ T3883] usb 2-1: config 0 has no interface number 0 [ 1271.433360][ T3883] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1271.459588][ T3883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.782139][ T3883] usb 2-1: config 0 descriptor?? [ 1273.533962][ T3883] viperboard 2-1:0.143: version 0.00 found at bus 002 address 006 [ 1275.463663][ T3883] viperboard-i2c viperboard-i2c.1.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1275.473746][ T3883] viperboard-i2c viperboard-i2c.1.auto: probe with driver viperboard-i2c failed with error -5 [ 1276.746054][ T3865] usb 2-1: USB disconnect, device number 6 [ 1282.035314][ T3990] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14'. [ 1313.291290][ T4003] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20'. [ 1333.040719][ T3862] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1333.239769][ T3238] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1333.821910][ T3862] usb 1-1: Dual-Role OTG device on HNP port [ 1333.960951][ T3862] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 7.02 [ 1333.962485][ T3862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.963745][ T3862] usb 1-1: SerialNumber: 12345678 [ 1334.087098][ T3238] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00 [ 1334.103460][ T3238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.444202][ T3238] ljca 2-1:1.0: probe with driver ljca failed with error -110 [ 1350.606114][ T3865] usb 2-1: USB disconnect, device number 7 [ 1363.392644][ T3862] cdc_acm 1-1:1.2: ttyACM0: USB ACM device [ 1386.099464][ T4069] netlink: 20 bytes leftover after parsing attributes in process `syz.1.25'. [ 1400.622526][ T4071] lo speed is unknown, defaulting to 1000 [ 1400.869621][ T4071] lo speed is unknown, defaulting to 1000 [ 1403.682478][ T816] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1403.694806][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1404.027693][ T816] usb 2-1: device descriptor read/64, error -32 [ 1404.382241][ T4071] lo speed is unknown, defaulting to 1000 [ 1404.501869][ T816] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1405.689455][ T816] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 1.00 [ 1405.699956][ T816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.061762][ T816] usb 2-1: USB2VGA dongle found at address 9 [ 1410.714082][ T816] usb 2-1: Allocated 8 output buffers [ 1412.612223][ T4071] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1421.478955][ T4071] infiniband sz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1425.275587][ T816] usb 2-1: Failed to early initialize device [ 1426.674959][ T816] usb 2-1: USB disconnect, device number 9 [ 1431.953605][ T4071] lo speed is unknown, defaulting to 1000 [ 1432.217595][ T4071] lo speed is unknown, defaulting to 1000 [ 1435.188091][ T816] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1435.210351][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1435.468307][ T816] usb 2-1: device descriptor read/64, error -32 [ 1435.881931][ T816] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1435.959281][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1436.161847][ T816] usb 2-1: device descriptor read/64, error -32 [ 1436.313583][ T816] usb usb2-port1: attempt power cycle [ 1437.006045][ T816] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1437.350491][ T816] usb 2-1: Using ep0 maxpacket: 8 [ 1438.123630][ T816] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 1438.144422][ T816] usb 2-1: config 0 has no interface number 0 [ 1438.184382][ T816] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1438.192570][ T816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.745201][ T816] usb 2-1: config 0 descriptor?? [ 1440.421888][ T816] viperboard 2-1:0.143: version 0.00 found at bus 002 address 012 [ 1442.254615][ T816] viperboard-i2c viperboard-i2c.1.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1442.273769][ T816] viperboard-i2c viperboard-i2c.1.auto: probe with driver viperboard-i2c failed with error -5 [ 1447.834644][ T3865] usb 2-1: USB disconnect, device number 12 [ 1473.450485][ T4140] netlink: 20 bytes leftover after parsing attributes in process `syz.0.31'. [ 1512.210099][ T4152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1513.002362][ T4152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1536.245616][ T4159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 1574.945340][ T4171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1575.102605][ T4171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1576.541555][ T4171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1577.025472][ T4171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1602.420764][ T4181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'. [ 1617.601938][ T4184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1617.972650][ T4184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1646.796998][ T4195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'. [ 1671.333115][ T4200] dlm: Using TCP for communications [ 1672.206174][ T4200] dlm: ls1: joining the lockspace group... [ 1769.854731][ T4221] lo speed is unknown, defaulting to 1000 [ 1818.051311][ T4088] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1820.682390][ T4088] usb 2-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 1820.684460][ T4088] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1821.513728][ T4088] i2c-tiny-usb 2-1:1.0: version 1.00 found at bus 002 address 013 [ 1823.681860][ T4088] (null): error -EIO: failure setting delay to 10us [ 1823.694723][ T4088] i2c-tiny-usb 2-1:1.0: probe with driver i2c-tiny-usb failed with error -5 [ 1838.524109][ T4088] usb 2-1: USB disconnect, device number 13 [ 1857.704973][ T4221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1858.533029][ T4221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1912.610259][ T4221] hsr_slave_0: entered promiscuous mode [ 1912.942381][ T4221] hsr_slave_1: entered promiscuous mode [ 1913.065479][ T4221] debugfs: 'hsr0' already exists in 'hsr' [ 1913.074466][ T4221] Cannot create hsr debugfs directory [ 1929.651632][ T3862] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1931.769009][ T3862] usb 2-1: New USB device found, idVendor=eb1a, idProduct=2820, bcdDevice= 0.00 [ 1931.795101][ T3862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.821989][ T3862] usb 2-1: Product: syz [ 1931.827114][ T3862] usb 2-1: Manufacturer: syz [ 1931.839075][ T3862] usb 2-1: SerialNumber: syz [ 1942.675410][ T4051] usb 2-1: USB disconnect, device number 14 [ 1950.713014][ T4221] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1951.233053][ T4221] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1951.539444][ T4221] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1952.246960][ T4221] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1952.305361][ T4221] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1953.142469][ T4221] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1953.913357][ T4221] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1954.855138][ T4221] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2014.382469][ T4221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2044.710188][ T4216] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 2046.750813][ T4216] usb 2-1: Using ep0 maxpacket: 8 [ 2047.160458][ T4216] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 2047.223721][ T4216] usb 2-1: config 0 has no interface number 0 [ 2047.235755][ T4216] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 2047.274789][ T4216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2050.322947][ T4216] usb 2-1: config 0 descriptor?? [ 2054.075475][ T4216] usb 2-1: can't set config #0, error -71 [ 2054.911818][ T4216] usb 2-1: USB disconnect, device number 15 [ 2067.209857][ T4216] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 2070.560112][ T4216] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00 [ 2070.579431][ T4216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2070.601040][ T4216] usb 2-1: Product: syz [ 2070.639088][ T4216] usb 2-1: Manufacturer: syz [ 2070.647991][ T4216] usb 2-1: SerialNumber: syz [ 2077.228117][ T4216] usb 2-1: can't set config #1, error -71 [ 2078.114153][ T4216] usb 2-1: USB disconnect, device number 16 [ 2092.005380][ T3883] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2092.023745][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 2092.361821][ T3883] usb 2-1: device descriptor read/64, error -32 [ 2092.882895][ T3883] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2098.636224][ T3883] usb 2-1: device descriptor read/64, error -110 [ 2098.837800][ T3883] usb usb2-port1: attempt power cycle [ 2099.471799][ T3883] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2099.642732][ T3883] usb 2-1: device descriptor read/8, error -32 [ 2100.047935][ T3883] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2100.174173][ T3883] usb 2-1: device descriptor read/8, error -32 [ 2100.365487][ T3883] usb usb2-port1: unable to enumerate USB device [ 2103.473446][ T32] INFO: task syz.0.51:4200 blocked for more than 430 seconds. [ 2103.583265][ T32] Not tainted syzkaller #0 [ 2103.629393][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2103.660443][ T32] task:syz.0.51 state:D stack:0 pid:4200 tgid:4197 ppid:3249 task_flags:0x400140 flags:0x00000002 [ 2103.706075][ T32] Call Trace: [ 2103.742132][ T32] [] __schedule+0x1de4/0x4ff4 [ 2103.769938][ T32] [] schedule+0xae/0x260 [ 2103.805039][ T32] [] do_uevent+0x432/0x5d4 [ 2103.850272][ T32] [] __dlm_new_lockspace+0x157c/0x1f9e [ 2103.875590][ T32] [] dlm_new_user_lockspace+0x62/0x8c [ 2103.909694][ T32] [] device_write+0x868/0x1a40 [ 2103.929107][ T32] [] vfs_write+0x308/0x1020 [ 2103.961212][ T32] [] ksys_write+0x126/0x244 [ 2103.980709][ T32] [] __riscv_sys_write+0x6e/0xa0 [ 2104.002272][ T32] [] syscall_handler+0x92/0x114 [ 2104.030048][ T32] [] do_trap_ecall_u+0x3e4/0x636 [ 2104.058914][ T32] [] handle_exception+0x168/0x174 [ 2104.114152][ T32] [ 2104.114152][ T32] Showing all locks held in the system: [ 2104.141769][ T32] 1 lock held by khungtaskd/32: [ 2104.175422][ T32] #0: ffffffff889f4020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3e/0x1a0 [ 2104.266017][ T32] 1 lock held by klogd/3034: [ 2104.295786][ T32] 2 locks held by getty/3204: [ 2104.340426][ T32] #0: ffffaf801c1e90a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3a/0x46 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2104.447595][ T32] #1: ffff8f800008e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x3be/0x12fc [ 2104.501672][ T32] 1 lock held by sshd/3233: [ 2104.521612][ T32] 2 locks held by syz-executor/3235: [ 2104.550127][ T32] 3 locks held by kworker/u8:8/3512: [ 2104.576074][ T32] 2 locks held by kworker/1:7/4051: [ 2104.592730][ T32] 1 lock held by syz.0.51/4200: [ 2104.610230][ T32] #0: ffffffff916f0bc0 (&ls_lock){+.+.}-{4:4}, at: __dlm_new_lockspace+0xbe/0x1f9e [ 2104.765960][ T32] 1 lock held by dlm_recoverd/4204: [ 2104.804950][ T32] #0: ffffaf8031790a18 (&ls->ls_in_recovery){+.+.}-{4:4}, at: dlm_recoverd+0xc6/0x24a8 [ 2104.859422][ T32] 2 locks held by kworker/u8:1/4232: [ 2104.879011][ T32] #0: ffffaf801211c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1068/0x20a0 [ 2104.950340][ T32] #1: ffff8f800e1a7b50 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x826/0x20a0 [ 2105.013554][ T32] 2 locks held by syz.1.71/4595: [ 2105.019863][ T32] 2 locks held by modprobe/4601: [ 2105.032626][ T32] [ 2105.046184][ T32] ============================================= [ 2105.046184][ T32] [ 2105.098685][ T32] NMI backtrace for cpu 0 [ 2105.099665][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 2105.100334][ T32] Hardware name: riscv-virtio,qemu (DT) [ 2105.100611][ T32] Call Trace: [ 2105.100791][ T32] [] dump_backtrace+0x2e/0x3c [ 2105.101517][ T32] [] show_stack+0x30/0x3c [ 2105.102025][ T32] [] dump_stack_lvl+0x114/0x1aa [ 2105.102801][ T32] [] dump_stack+0x1c/0x24 [ 2105.103574][ T32] [] nmi_cpu_backtrace+0x25e/0x3ae [ 2105.104082][ T32] [] nmi_trigger_cpumask_backtrace+0x2ac/0x4ee [ 2105.104629][ T32] [] arch_trigger_cpumask_backtrace+0x2c/0x3e [ 2105.105196][ T32] [] sys_info+0x20c/0x252 [ 2105.105816][ T32] [] watchdog+0xa26/0x1282 [ 2105.106552][ T32] [] kthread+0x312/0x438 [ 2105.107197][ T32] [] ret_from_fork_kernel+0x94/0xef6 [ 2105.107809][ T32] [] ret_from_fork_kernel_asm+0x16/0x18 [ 2105.125971][ T32] Sending NMI from CPU 0 to CPUs 1: [ 2105.129034][ C1] NMI backtrace for cpu 1 [ 2105.129465][ C1] CPU: 1 UID: 0 PID: 35 Comm: kcompactd0 Not tainted syzkaller #0 PREEMPT [ 2105.130067][ C1] Hardware name: riscv-virtio,qemu (DT) [ 2105.130354][ C1] epc : handle_softirqs+0x2f2/0x13ba [ 2105.131258][ C1] ra : handle_softirqs+0x2ee/0x13ba [ 2105.132126][ C1] epc : ffffffff8016f26c ra : ffffffff8016f268 sp : ffff8f8000017e40 [ 2105.132522][ C1] gp : ffffffff8a4a7c60 tp : ffffaf80146a8000 t0 : ffffaf8072c403d0 [ 2105.132909][ C1] t1 : ffffffff8007bc8e t2 : ffffaf8072c407a8 s0 : ffff8f8000017f70 [ 2105.133281][ C1] s1 : ffffaf8072c51a00 a0 : 0000000000000001 a1 : ffffffff88216318 [ 2105.133635][ C1] a2 : 0000000000000000 a3 : 0000000000000001 a4 : 0000000000001000 [ 2105.133966][ C1] a5 : 000000000001fc1e a6 : 0000000000000000 a7 : 0000000041b58ab3 [ 2105.134297][ C1] s2 : 0000000000000100 s3 : ffffffff9187f620 s4 : 000000000000000a [ 2105.134636][ C1] s5 : dfffffff00000000 s6 : 0000000000210040 s7 : ffffffff9187f628 [ 2105.135056][ C1] s8 : 0000000000000000 s9 : 1ffff1f000002fd8 s10: 0000000000000001 [ 2105.135452][ C1] s11: ffffaf8013add040 t3 : ffffffff8809bec8 t4 : fffff5ef0e588070 [ 2105.135831][ C1] t5 : fffff5ef0e588071 t6 : 0000000000000002 ssp : 0000000000000000 [ 2105.136186][ C1] status: 0000000200000120 badaddr: 0000000000000000 cause: 8000000000000001 [ 2105.136609][ C1] [] handle_softirqs+0x2f2/0x13ba [ 2105.137496][ C1] [] __irq_exit_rcu+0x4ac/0x86a [ 2105.137958][ C1] [] irq_exit_rcu+0x10/0xf2 [ 2105.138494][ C1] [] handle_riscv_irq+0x40/0x4a [ 2105.139078][ C1] [] call_on_irq_stack+0x32/0x40 [ 2105.281408][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 2105.283727][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 2105.285224][ T32] Hardware name: riscv-virtio,qemu (DT) [ 2105.286101][ T32] Call Trace: [ 2105.286846][ T32] [] dump_backtrace+0x2e/0x3c [ 2105.288364][ T32] [] show_stack+0x30/0x3c [ 2105.289604][ T32] [] dump_stack_lvl+0x114/0x1aa [ 2105.291153][ T32] [] dump_stack+0x1c/0x24 [ 2105.292611][ T32] [] vpanic+0x32e/0x75a [ 2105.293836][ T32] [] panic+0xa0/0xa2 [ 2105.294992][ T32] [] watchdog+0xa56/0x1282 [ 2105.296497][ T32] [] kthread+0x312/0x438 [ 2105.297854][ T32] [] ret_from_fork_kernel+0x94/0xef6 [ 2105.299162][ T32] [] ret_from_fork_kernel_asm+0x16/0x18 [ 2105.300992][ T32] SMP: stopping secondary CPUs [ 2105.304469][ T32] Rebooting in 86400 seconds..