last executing test programs: 9m36.654801341s ago: executing program 1 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0000:00:02.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='0000:00:01.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='i915\x00', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='i915\x00', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/pci/drivers/i915/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000d00)='0000:00:02.0\x00', 0xd) write(r4, &(0x7f0000000e00)='0000:00:01.0\x00', 0xd) 9m1.053776677s ago: executing program 1 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/tracing/events/x86_fpu/x86_fpu_xstate_check_failed/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) mmap(0x0, 0x200000, 0x7, 0x32, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000000200)={&(0x7f0000100000), 0x0, 0x10000}, 0x0) rt_sigaction(0xa, &(0x7f0000000100)={&(0x7f0000000300)="48b800000100007f00004889842418010000b80f0000000f05", 0x8000000, 0x0}, 0x0, 0x8, 0x0) r1 = gettid() tkill(r1, 0xa) 8m33.301202142s ago: executing program 1 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys_mnt\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000340)='H\x00\b\x00', 0x4, 0x74) 8m13.078691034s ago: executing program 1 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/attrib\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/param\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/res_pr_aptpl_metadata\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/aptpl\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x0, 0x0) 7m47.60534498s ago: executing program 1 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='core\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='mem\n', 0x4) 7m33.289322774s ago: executing program 1 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/c1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/c1/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/c1/comms/1/addr\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)="020000007f00000100"/128, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/c1/comms/1/local\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r2, &(0x7f0000000300)="0600000000000000020000000401000000000000000000006c733100"/136, 0x80) 6m43.131384555s ago: executing program 32 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/c1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/c1/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/c1/comms/1/addr\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)="020000007f00000100"/128, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/c1/comms/1/local\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r2, &(0x7f0000000300)="0600000000000000020000000401000000000000000000006c733100"/136, 0x80) 1m35.633094086s ago: executing program 0 (id=44): r0 = syz_usb_connect(0x3, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407e04011000010000000109023f0001010080320904000000ff0000000904000100ff0000000904000203ff000000090501020002000000090582020002000000090583034000010000"], 0x0) syz_usb_disconnect(r0) nanosleep(&(0x7f0000000300)={0x0, 0x8f0d180}, 0x0) r1 = syz_usb_connect(0x3, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407e04011000010000000109023f0001010080320904000000ff0000000904000100ff0000000904000203ff000000090501020002000000090582020002000000090583034000010000"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000000c0)) nanosleep(&(0x7f0000000300)={0x0, 0x8f0d180}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/drivers/uss720/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1-1:1.0\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/drivers/uss720/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='2-1:1.0\x00', 0x7) 1m17.956682195s ago: executing program 0 (id=45): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x4, 0x8, 0xa}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000200)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @alu={0x7, 0x0, 0xb, 0x3}, @call={0x85, 0x0, 0x0, 0x1b}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m6.391038655s ago: executing program 0 (id=46): syz_usb_connect(0x3, 0x27, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f71d00250000010200010902120001010080320904000000ff000000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/drivers/msi2500/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='5-1:1.0\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/drivers/msi2500/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='5-1:1.0\x00', 0x8) 43.754606213s ago: executing program 0 (id=47): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x15, 0x2) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000080)=@usbdevfs_disconnect={0x8f}) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000040)=0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_disconnect={0x8f}) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000140)=0x1) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x15, 0x2) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000180)=@usbdevfs_disconnect={0x8f}) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000240)=0x1) r3 = syz_open_dev$usbfs(&(0x7f0000000300), 0x15, 0x2) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_disconnect={0x8f}) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000340)=0x1) 17.616609972s ago: executing program 0 (id=48): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) 0s ago: executing program 0 (id=49): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x2040, 0x2900, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x777) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/pvrusb2/pvrusb2_a/debugcmd\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='reset bus\n\x00', 0xa) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:6903' (ED25519) to the list of known hosts. syzkaller login: [ 589.170951][ T3214] cgroup: Unknown subsys name 'net' [ 590.511664][ T3214] cgroup: Unknown subsys name 'cpuset' [ 590.766958][ T3214] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 727.804576][ T3214] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 994.884817][ T3229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.782125][ T3229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.917184][ T3228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.958032][ T3228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1016.277143][ T3229] hsr_slave_0: entered promiscuous mode [ 1016.353967][ T3229] hsr_slave_1: entered promiscuous mode [ 1018.514075][ T3228] hsr_slave_0: entered promiscuous mode [ 1018.684724][ T3228] hsr_slave_1: entered promiscuous mode [ 1018.749728][ T3228] debugfs: 'hsr0' already exists in 'hsr' [ 1018.759750][ T3228] Cannot create hsr debugfs directory [ 1036.527953][ T3229] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1037.017382][ T3229] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1037.121298][ T3229] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1037.878093][ T3229] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1038.172430][ T3229] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1038.521792][ T3229] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1038.646502][ T3229] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1039.007416][ T3229] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1044.985470][ T3228] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1045.466005][ T3228] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1045.954542][ T3228] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1046.203482][ T3228] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1046.666546][ T3228] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1047.183175][ T3228] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1047.483261][ T3228] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1048.393041][ T3228] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1073.448011][ T3229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1079.433682][ T3228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1193.589957][ T3229] veth0_vlan: entered promiscuous mode [ 1195.346378][ T3229] veth1_vlan: entered promiscuous mode [ 1198.147532][ T3228] veth0_vlan: entered promiscuous mode [ 1199.375541][ T3228] veth1_vlan: entered promiscuous mode [ 1200.656243][ T3229] veth0_macvtap: entered promiscuous mode [ 1201.420791][ T3229] veth1_macvtap: entered promiscuous mode [ 1204.081336][ T3228] veth0_macvtap: entered promiscuous mode [ 1205.657668][ T3228] veth1_macvtap: entered promiscuous mode [ 1206.057781][ T3235] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.081419][ T54] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.172679][ T54] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.267262][ T54] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.880660][ T3373] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.893663][ T3373] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.882116][ T54] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.903624][ T54] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.561214][ T3229] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1251.517612][ T3847] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1284.314717][ T3765] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1285.324990][ T3765] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1285.333632][ T3765] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1285.902247][ T3765] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 1285.908973][ T3765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.918035][ T3765] usb 2-1: Product: syz [ 1285.921505][ T3765] usb 2-1: Manufacturer: syz [ 1285.922445][ T3765] usb 2-1: SerialNumber: syz [ 1286.982077][ T3877] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1288.083000][ T3877] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1288.684937][ T3765] usb_debug 2-1:1.0: debug converter detected [ 1289.363228][ T3765] usb 2-1: debug converter now attached to ttyUSB0 [ 1294.473086][ T3848] usb 2-1: USB disconnect, device number 3 [ 1297.511554][ T3848] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 1297.837251][ T3848] usb_debug 2-1:1.0: device disconnected [ 1303.882470][ T816] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1303.893863][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 1304.123112][ T816] usb 2-1: device descriptor read/64, error -32 [ 1304.627664][ T816] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1307.422288][ T816] usb 2-1: New USB device found, idVendor=0b48, idProduct=3011, bcdDevice= 0.00 [ 1307.435275][ T816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.811706][ T816] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1317.400623][ T3849] usb 2-1: USB disconnect, device number 5 [ 1318.235263][ T816] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice= 0.00 [ 1318.254120][ T816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.405778][ T816] peak_usb 1-1:1.0 can0: unable to request usb[type=0 value=1] err=-110 [ 1333.420055][ T816] peak_usb 1-1:1.0: unable to read PCAN-USB Pro firmware info (err -110) [ 1336.876676][ T816] peak_usb 1-1:1.0: probe with driver peak_usb failed with error -110 [ 1338.723668][ T816] usb 1-1: USB disconnect, device number 2 [ 1427.114137][ T3974] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1454.407675][ T3846] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1455.682843][ T3846] usb 1-1: Using ep0 maxpacket: 8 [ 1456.840263][ T3846] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 1456.848063][ T3846] usb 1-1: config 0 has no interface number 0 [ 1456.854488][ T3846] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1456.856721][ T3846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.046821][ T3846] usb 1-1: config 0 descriptor?? [ 1460.174920][ T3846] viperboard 1-1:0.143: version 0.00 found at bus 001 address 003 [ 1464.160152][ T3846] viperboard-i2c viperboard-i2c.1.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1464.168446][ T3846] viperboard-i2c viperboard-i2c.1.auto: probe with driver viperboard-i2c failed with error -5 [ 1467.530064][ T3215] usb 1-1: USB disconnect, device number 3 [ 1481.599312][ T31] audit: type=1800 audit(1480.560:2): pid=4012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.19" name="enable" dev="configfs" ino=3537 res=0 errno=0 [ 1495.962633][ T4026] PM: suspend entry (s2idle) [ 1496.085354][ T4026] PM: Unsupported test mode for suspend to idle, please choose none/freezer/devices/platform. [ 1496.155328][ T4026] PM: suspend exit [ 1518.864682][ T4034] dlm: Using TCP for communications [ 1519.125893][ T4034] dlm: ls1: joining the lockspace group... [ 1524.033526][ T3987] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1524.492354][ T3987] usb 1-1: Using ep0 maxpacket: 8 [ 1525.477171][ T3987] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 1525.489843][ T3987] usb 1-1: config 0 has no interface number 0 [ 1525.493650][ T3987] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1525.497075][ T3987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.005724][ T3987] usb 1-1: config 0 descriptor?? [ 1526.709740][ T3987] viperboard 1-1:0.143: version 0.00 found at bus 001 address 004 [ 1528.540645][ T3987] viperboard-i2c viperboard-i2c.1.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1528.563919][ T3987] viperboard-i2c viperboard-i2c.1.auto: probe with driver viperboard-i2c failed with error -5 [ 1531.674105][ T4041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1531.837168][ T4041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1532.094634][ T3215] usb 1-1: USB disconnect, device number 4 [ 1540.212806][ T3847] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1540.651704][ T3847] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1540.847876][ T3847] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1540.861754][ T3847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1540.864846][ T3847] usb 1-1: SerialNumber: syz [ 1543.980936][ T3847] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1546.405359][ T3215] usb 1-1: USB disconnect, device number 5 [ 1546.895612][ T3215] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 1571.102507][ T1878] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 1572.177412][ T1878] usb 1-1: not running at top speed; connect to a high speed hub [ 1572.877401][ T1878] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1572.892833][ T1878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.182514][ T1878] usb 1-1: usb_control_msg returned -110 [ 1579.216786][ T1878] usbtmc 1-1:1.0: can't read capabilities [ 1587.777422][ T3847] usb 1-1: USB disconnect, device number 6 [ 1628.382628][ T3219] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1629.685535][ T3219] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1629.687335][ T3219] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1629.703081][ T3219] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1629.715985][ T3219] usb 1-1: New USB device found, idVendor=1608, idProduct=0201, bcdDevice= 0.00 [ 1629.725794][ T3219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.217614][ T4142] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1630.563467][ T3219] io_ti 1-1:1.0: required endpoints missing [ 1636.767129][ T3219] usb 1-1: USB disconnect, device number 7 [ 1645.754537][ T4162] PM: hibernation: hibernation entry [ 1648.071575][ T3373] Filesystems sync: 0.744 seconds [ 1648.281380][ T4162] Freezing user space processes [ 1668.335914][ T4162] Freezing user space processes failed after 20.041 seconds (2 tasks refusing to freeze, wq_busy=0): [ 1668.341090][ T4162] task:syz-executor state:S stack:0 pid:3229 tgid:3229 ppid:1 task_flags:0x40054c flags:0x00000001 [ 1668.347013][ T4162] Call Trace: [ 1668.351425][ T4162] [] __schedule+0x1de4/0x4ff4 [ 1668.355254][ T4162] [] schedule+0xae/0x260 [ 1668.357084][ T4162] [] do_wait+0x19c/0x766 [ 1668.361049][ T4162] [] kernel_wait4+0x18a/0x5c6 [ 1668.363026][ T4162] [] zap_pid_ns_processes+0x2b0/0x62a [ 1668.365119][ T4162] [] do_exit+0x21a6/0x297a [ 1668.366940][ T4162] [] do_group_exit+0xca/0x258 [ 1668.370154][ T4162] [] get_signal+0x1f58/0x2224 [ 1668.372247][ T4162] [] arch_do_signal_or_restart+0xcb2/0x1e06 [ 1668.374124][ T4162] [] exit_to_user_mode_loop+0x9e/0xcd4 [ 1668.375988][ T4162] [] do_trap_ecall_u+0x4fc/0x636 [ 1668.377658][ T4162] [] handle_exception+0x168/0x174 [ 1668.381074][ T4162] task:syz.1.24 state:D stack:0 pid:4034 tgid:4031 ppid:3229 task_flags:0x400140 flags:0x00000002 [ 1668.383540][ T4162] Call Trace: [ 1668.384709][ T4162] [] __schedule+0x1de4/0x4ff4 [ 1668.386497][ T4162] [] schedule+0xae/0x260 [ 1668.388260][ T4162] [] do_uevent+0x432/0x5d4 [ 1668.392690][ T4162] [] __dlm_new_lockspace+0x157c/0x1f9e [ 1668.394547][ T4162] [] dlm_new_user_lockspace+0x62/0x8c [ 1668.396332][ T4162] [] device_write+0x868/0x1a40 [ 1668.398011][ T4162] [] vfs_write+0x308/0x1020 [ 1668.401982][ T4162] [] ksys_write+0x126/0x244 [ 1668.403921][ T4162] [] __riscv_sys_write+0x6e/0xa0 [ 1668.405849][ T4162] [] syscall_handler+0x92/0x114 [ 1668.407671][ T4162] [] do_trap_ecall_u+0x3e4/0x636 [ 1668.412253][ T4162] [] handle_exception+0x168/0x174 [ 1668.427629][ T4162] OOM killer enabled. [ 1668.436708][ T4162] Restarting tasks: Starting [ 1668.577106][ T4162] Restarting tasks: Done [ 1668.587370][ T4162] PM: hibernation: hibernation exit [ 1676.946276][ T3987] hid (null): report_id 0 is invalid [ 1677.206943][ T3987] logitech-hidpp-device 0003:046D:C082.0001: report_id 0 is invalid [ 1677.226652][ T3987] logitech-hidpp-device 0003:046D:C082.0001: item 0 1 1 8 parsing failed [ 1677.262762][ T3987] logitech-hidpp-device 0003:046D:C082.0001: hidpp_probe:parse failed [ 1677.266183][ T3987] logitech-hidpp-device 0003:046D:C082.0001: probe with driver logitech-hidpp-device failed with error -22 [ 1702.095092][ T4268] loop0: detected capacity change from 0 to 32768 [ 1704.536668][ T4268] bcache: register_bcache() error : Bad checksum [ 1719.775844][ T4127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1720.553269][ T4127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1723.660307][ T3848] lenovo 0005:17EF:6048.0002: unknown main item tag 0x0 [ 1723.671816][ T3848] lenovo 0005:17EF:6048.0002: unknown main item tag 0x0 [ 1723.676738][ T3848] lenovo 0005:17EF:6048.0002: unknown main item tag 0x0 [ 1723.689984][ T3848] lenovo 0005:17EF:6048.0002: unknown main item tag 0x0 [ 1723.693441][ T3848] lenovo 0005:17EF:6048.0002: unknown main item tag 0x0 [ 1723.705287][ T3848] lenovo 0005:17EF:6048.0002: unknown main item tag 0x0 [ 1723.712554][ T3848] lenovo 0005:17EF:6048.0002: unknown main item tag 0x0 [ 1723.720014][ T3848] lenovo 0005:17EF:6048.0002: unknown main item tag 0x0 [ 1723.722739][ T3848] lenovo 0005:17EF:6048.0002: unknown main item tag 0x0 [ 1723.724589][ T3848] lenovo 0005:17EF:6048.0002: unknown main item tag 0x0 [ 1724.295008][ T3848] lenovo 0005:17EF:6048.0002: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 1743.548042][ T3847] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1744.650740][ T3847] usb 1-1: New USB device found, idVendor=0f3d, idProduct=0112, bcdDevice= 0.00 [ 1744.693165][ T3847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.707870][ T3847] usb 1-1: Product: syz [ 1744.722712][ T3847] usb 1-1: Manufacturer: syz [ 1744.737606][ T3847] usb 1-1: SerialNumber: syz [ 1745.938026][ T3847] sierra 1-1:1.0: Sierra USB modem converter detected [ 1751.743240][ T3847] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 1753.053858][ T3847] usb 1-1: USB disconnect, device number 8 [ 1754.936017][ T3847] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1755.191791][ T3847] sierra 1-1:1.0: device disconnected [ 1758.288154][ T4127] hsr_slave_0: entered promiscuous mode [ 1758.458201][ T4127] hsr_slave_1: entered promiscuous mode [ 1758.534726][ T4127] debugfs: 'hsr0' already exists in 'hsr' [ 1758.540591][ T4127] Cannot create hsr debugfs directory [ 1763.722149][ T3848] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1765.823427][ T3848] usb 1-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 1765.831442][ T3848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.738005][ T3848] i2c-tiny-usb 1-1:1.0: version 1.00 found at bus 001 address 009 [ 1769.802118][ T3848] (null): error -EIO: failure setting delay to 10us [ 1769.815898][ T3848] i2c-tiny-usb 1-1:1.0: probe with driver i2c-tiny-usb failed with error -5 [ 1780.176915][ T4127] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1780.327404][ T3971] usb 1-1: USB disconnect, device number 9 [ 1781.283487][ T4127] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1781.560718][ T4127] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1782.108018][ T4127] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1782.346632][ T4127] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1782.715138][ T4127] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1782.812152][ T4127] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1783.085504][ T4127] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1812.957019][ T4127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1819.394542][ T3219] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1819.427128][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1819.703229][ T3219] usb 1-1: device descriptor read/64, error -32 [ 1820.185112][ T3219] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1820.681910][ T3219] usb 1-1: Using ep0 maxpacket: 8 [ 1821.014723][ T3219] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 1821.034803][ T3219] usb 1-1: config 0 has no interface number 0 [ 1821.051805][ T3219] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1821.056585][ T3219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1821.465118][ T3219] usb 1-1: config 0 descriptor?? [ 1821.817247][ T3219] viperboard 1-1:0.143: version 0.00 found at bus 001 address 011 [ 1822.374495][ T3219] viperboard-i2c viperboard-i2c.1.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1822.376111][ T3219] viperboard-i2c viperboard-i2c.1.auto: probe with driver viperboard-i2c failed with error -5 [ 1832.618129][ T3215] usb 1-1: USB disconnect, device number 11 [ 1847.817214][ T3847] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1849.662366][ T3847] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1849.675103][ T3847] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1851.897282][ T3847] usb 1-1: New USB device found, idVendor=6547, idProduct=0232, bcdDevice= 1.00 [ 1851.920052][ T3847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1851.932698][ T3847] usb 1-1: Product: syz [ 1851.943853][ T3847] usb 1-1: Manufacturer: syz [ 1851.957616][ T3847] usb 1-1: SerialNumber: syz [ 1853.207299][ T4543] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1853.329770][ T4543] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1853.472993][ T3847] ark3116 1-1:1.0: ark3116 converter detected [ 1855.026156][ T3847] ark3116 ttyUSB0: using RS232 mode [ 1855.114284][ T3847] usb 1-1: ark3116 converter now attached to ttyUSB0 [ 1857.753976][ T3848] usb 1-1: USB disconnect, device number 12 [ 1859.276676][ T3848] ark3116 ttyUSB0: ark3116 converter now disconnected from ttyUSB0 [ 1859.437094][ T3848] ark3116 1-1:1.0: device disconnected [ 1866.497884][ T4548] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1868.301524][ T4548] usb 1-1: New USB device found, idVendor=047e, idProduct=1001, bcdDevice= 1.00 [ 1868.309825][ T4548] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1874.637430][ T4548] uss720 1-1:1.0: probe with driver uss720 failed with error -110 [ 1877.250065][ T4548] usb 1-1: USB disconnect, device number 13 [ 1892.730472][ T4548] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1896.893361][ T4548] usb 1-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 1896.897269][ T4548] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1896.913161][ T4548] usb 1-1: Product: syz [ 1896.914319][ T4548] usb 1-1: Manufacturer: syz [ 1903.152170][ T816] usb 1-1: USB disconnect, device number 14 [ 1917.404703][ T4111] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1918.526512][ T4111] usb 1-1: Using ep0 maxpacket: 8 [ 1920.194502][ T4111] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 1920.205797][ T4111] usb 1-1: config 0 has no interface number 0 [ 1920.212832][ T4111] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1920.220864][ T4111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1920.666443][ T4111] usb 1-1: config 0 descriptor?? [ 1921.313242][ T4111] viperboard 1-1:0.143: version 0.00 found at bus 001 address 015 [ 1922.513724][ T4111] viperboard-i2c viperboard-i2c.1.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1922.525816][ T4111] viperboard-i2c viperboard-i2c.1.auto: probe with driver viperboard-i2c failed with error -5 [ 1929.871774][ T816] usb 1-1: USB disconnect, device number 15 [ 1940.799914][ T3971] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1941.154121][ T3971] usb 1-1: Using ep0 maxpacket: 8 [ 1943.204262][ T3971] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 1943.229529][ T3971] usb 1-1: config 0 has no interface number 0 [ 1943.243528][ T3971] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1943.261979][ T3971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1944.221514][ T3971] usb 1-1: config 0 descriptor?? [ 1944.967485][ T3971] viperboard 1-1:0.143: version 0.00 found at bus 001 address 016 [ 1946.706347][ T3971] viperboard-i2c viperboard-i2c.1.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1946.746135][ T3971] viperboard-i2c viperboard-i2c.1.auto: probe with driver viperboard-i2c failed with error -5 [ 1947.035515][ T4127] veth0_vlan: entered promiscuous mode [ 1950.781008][ T4127] veth1_vlan: entered promiscuous mode [ 1954.091512][ T3987] usb 1-1: USB disconnect, device number 16 [ 1956.457292][ T4127] veth0_macvtap: entered promiscuous mode [ 1957.802852][ T4127] veth1_macvtap: entered promiscuous mode [ 1959.872506][ T32] INFO: task syz.1.24:4034 blocked for more than 430 seconds. [ 1959.900803][ T32] Not tainted syzkaller #0 [ 1959.925410][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1959.954852][ T32] task:syz.1.24 state:D stack:0 pid:4034 tgid:4031 ppid:3229 task_flags:0x400140 flags:0x00000002 [ 1959.975581][ T32] Call Trace: [ 1959.990944][ T32] [] __schedule+0x1de4/0x4ff4 [ 1960.017116][ T32] [] schedule+0xae/0x260 [ 1960.064613][ T32] [] do_uevent+0x432/0x5d4 [ 1960.087290][ T32] [] __dlm_new_lockspace+0x157c/0x1f9e [ 1960.116224][ T32] [] dlm_new_user_lockspace+0x62/0x8c SYZFAIL: failed to recv rpc [ 1960.130060][ T32] [] device_write+0x868/0x1a40 [ 1960.138134][ T32] [] vfs_write+0x308/0x1020 [ 1960.160280][ T32] [] ksys_write+0x126/0x244 [ 1960.169872][ T32] [] __riscv_sys_write+0x6e/0xa0 [ 1960.181507][ T32] [] syscall_handler+0x92/0x114 [ 1960.194811][ T32] [] do_trap_ecall_u+0x3e4/0x636 [ 1960.208070][ T32] [] handle_exception+0x168/0x174 [ 1960.222452][ T32] [ 1960.222452][ T32] Showing all locks held in the system: fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1960.239179][ T32] 1 lock held by khungtaskd/32: [ 1960.251175][ T32] #0: ffffffff889f4020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3e/0x1a0 [ 1960.298036][ T32] 2 locks held by kworker/u8:4/53: [ 1960.329653][ T32] 2 locks held by kworker/1:2/816: [ 1960.339633][ T32] 1 lock held by syslogd/3032: [ 1960.347137][ T32] 2 locks held by getty/3182: [ 1960.360909][ T32] #0: ffffaf801c1e90a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3a/0x46 [ 1960.391638][ T32] #1: ffff8f800008e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x3be/0x12fc [ 1960.416438][ T32] 2 locks held by syz-executor/3214: [ 1960.423195][ T32] 4 locks held by syz-executor/3228: [ 1960.430264][ T32] 3 locks held by kworker/0:6/3971: [ 1960.452236][ T32] 1 lock held by syz.1.24/4034: [ 1960.453397][ T32] #0: ffffffff916f0bc0 (&ls_lock){+.+.}-{4:4}, at: __dlm_new_lockspace+0xbe/0x1f9e [ 1960.505403][ T32] 1 lock held by dlm_recoverd/4037: [ 1960.516850][ T32] #0: ffffaf803214aa18 (&ls->ls_in_recovery){+.+.}-{4:4}, at: dlm_recoverd+0xc6/0x24a8 [ 1960.550880][ T32] 3 locks held by kworker/u8:8/4400: [ 1960.559223][ T32] 1 lock held by syz-executor/4691: [ 1960.577285][ T32] [ 1960.594062][ T32] ============================================= [ 1960.594062][ T32] [ 1960.610529][ T32] NMI backtrace for cpu 1 [ 1960.611148][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 1960.611524][ T32] Hardware name: riscv-virtio,qemu (DT) [ 1960.611683][ T32] Call Trace: [ 1960.611856][ T32] [] dump_backtrace+0x2e/0x3c [ 1960.612366][ T32] [] show_stack+0x30/0x3c [ 1960.612671][ T32] [] dump_stack_lvl+0x114/0x1aa [ 1960.613090][ T32] [] dump_stack+0x1c/0x24 [ 1960.613510][ T32] [] nmi_cpu_backtrace+0x25e/0x3ae [ 1960.613890][ T32] [] nmi_trigger_cpumask_backtrace+0x2ac/0x4ee [ 1960.614358][ T32] [] arch_trigger_cpumask_backtrace+0x2c/0x3e [ 1960.614796][ T32] [] sys_info+0x20c/0x252 [ 1960.615213][ T32] [] watchdog+0xa26/0x1282 [ 1960.615766][ T32] [] kthread+0x312/0x438 [ 1960.616186][ T32] [] ret_from_fork_kernel+0x94/0xef6 [ 1960.616515][ T32] [] ret_from_fork_kernel_asm+0x16/0x18 [ 1960.617575][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1960.628327][ C0] NMI backtrace for cpu 0 [ 1960.628611][ C0] CPU: 0 UID: 0 PID: 3036 Comm: klogd Not tainted syzkaller #0 PREEMPT [ 1960.628924][ C0] Hardware name: riscv-virtio,qemu (DT) [ 1960.629154][ C0] epc : __slab_free+0xbc/0x2f8 [ 1960.629590][ C0] ra : __slab_free+0x160/0x2f8 [ 1960.629939][ C0] epc : ffffffff80b2642c ra : ffffffff80b264d0 sp : ffff8f8003d57480 [ 1960.630205][ C0] gp : ffffffff8a4a7c60 tp : ffffaf801c478000 t0 : 0000000000000000 [ 1960.630429][ C0] t1 : ffffffff8007bc8e t2 : ffffaf8072c1d7a8 s0 : ffff8f8003d57540 [ 1960.630646][ C0] s1 : 0000000000000002 a0 : 0000000000000001 a1 : 0000000000000000 [ 1960.630856][ C0] a2 : 0000000000000000 a3 : 0000000000000001 a4 : 0000000000001000 [ 1960.631061][ C0] a5 : 0000000000000000 a6 : 0000000000000003 a7 : 0000000041b58ab3 [ 1960.631262][ C0] s2 : 0000000000000013 s3 : ffffaf801468e8c0 s4 : ffffaf801a2fc300 [ 1960.631476][ C0] s5 : ffffaf801a2fc000 s6 : ffffaf801a2fc000 s7 : ffff8f8003d574a8 [ 1960.631700][ C0] s8 : ffff8f8003d574b8 s9 : ffff8d800268bf00 s10: 0000000000000000 [ 1960.631967][ C0] s11: 0000000000000000 t3 : ffffffff8809bec8 t4 : fffff5ef025561b0 [ 1960.632191][ C0] t5 : fffff5ef025561b1 t6 : 0000000000000002 ssp : 0000000000000000 [ 1960.632398][ C0] status: 0000000200000120 badaddr: 0000000000000000 cause: 8000000000000001 [ 1960.632654][ C0] [] __slab_free+0xbc/0x2f8 [ 1960.633047][ C0] [] ___cache_free+0x94/0xac [ 1960.633379][ C0] [] qlist_free_all+0x64/0x134 [ 1960.633758][ C0] [] kasan_quarantine_reduce+0x152/0x1b4 [ 1960.634124][ C0] [] __kasan_slab_alloc+0x5c/0x82 [ 1960.634583][ C0] [] kmem_cache_alloc_node_noprof+0x20e/0x686 [ 1960.634979][ C0] [] __alloc_skb+0x17c/0x768 [ 1960.635375][ C0] [] alloc_skb_with_frags+0xc0/0x73a [ 1960.636037][ C0] [] sock_alloc_send_pskb+0x6a2/0x7da [ 1960.636796][ C0] [] unix_dgram_sendmsg+0x332/0x14cc [ 1960.637427][ C0] [] __sock_sendmsg+0xce/0x1ce [ 1960.638002][ C0] [] __sys_sendto+0x25c/0x326 [ 1960.638649][ C0] [] __riscv_sys_sendto+0xc0/0x158 [ 1960.639041][ C0] [] syscall_handler+0x92/0x114 [ 1960.639387][ C0] [] do_trap_ecall_u+0x3e4/0x636 [ 1960.639690][ C0] [] handle_exception+0x168/0x174 [ 1960.787800][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1960.789483][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 1960.790371][ T32] Hardware name: riscv-virtio,qemu (DT) [ 1960.791042][ T32] Call Trace: [ 1960.791497][ T32] [] dump_backtrace+0x2e/0x3c [ 1960.792441][ T32] [] show_stack+0x30/0x3c [ 1960.793174][ T32] [] dump_stack_lvl+0x114/0x1aa [ 1960.794218][ T32] [] dump_stack+0x1c/0x24 [ 1960.795147][ T32] [] vpanic+0x32e/0x75a [ 1960.795959][ T32] [] panic+0xa0/0xa2 [ 1960.796643][ T32] [] watchdog+0xa56/0x1282 [ 1960.797443][ T32] [] kthread+0x312/0x438 [ 1960.798370][ T32] [] ret_from_fork_kernel+0x94/0xef6 [ 1960.799347][ T32] [] ret_from_fork_kernel_asm+0x16/0x18 [ 1960.800483][ T32] SMP: stopping secondary CPUs [ 1960.802740][ T32] Rebooting in 86400 seconds..