last executing test programs: 920.588236ms ago: executing program 2 (id=146): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6) ftruncate(r1, 0x2000000) pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000) r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r3, 0x40480923, &(0x7f0000000400)="000000000000000000000000000000000100000000040000010000000100000000000000010000000000000000000000010000000100"/72) ioctl(r3, 0x40140921, &(0x7f0000000500)="0000000007000000000000000000000006000000") ioctl(r3, 0x400c0930, &(0x7f0000000700)='\x00'/12) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/bitmap/location\x00', 0x2, 0x0) write(r4, &(0x7f0000000640)='8\x00', 0x2) 770.515237ms ago: executing program 0 (id=155): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) 710.677245ms ago: executing program 2 (id=156): r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='dummy_udc.0\n', 0xc) close(r0) 710.38381ms ago: executing program 2 (id=158): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:1f.3\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000140)='driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='0000:00:1f.3\x00', 0xd) close(r1) r2 = openat(r0, &(0x7f00000001c0)='driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='vmxnet3\x00', 0x8) close(r2) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='bind\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='0000:00:1f.3\x00', 0xd) close(r3) close(0xffffffffffffffff) close(r0) 710.302022ms ago: executing program 0 (id=159): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6) ftruncate(r1, 0x2000000) pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000) r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r3, 0x40480923, &(0x7f0000000400)="000000000000000000000000000000000100000000040000010000000100000000000000010000000000000000000000010000000100"/72) ioctl(r3, 0x40140921, &(0x7f0000000500)="0000000007000000000000000000000006000000") ioctl(r3, 0x400c0930, &(0x7f0000000700)='\x00'/12) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/dev-loop0/offset\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x20) 661.03609ms ago: executing program 1 (id=160): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) write(0xffffffffffffffff, &(0x7f0000000280)='1\n', 0x2) 660.903853ms ago: executing program 2 (id=161): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0) write(r0, &(0x7f0000000580)='disable\n\x00', 0x8) 610.590326ms ago: executing program 1 (id=162): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000080), &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='activate\n\x00', 0x9) 610.415472ms ago: executing program 2 (id=163): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:00.0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000140)='driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='vmxnet3\x00', 0x8) close(r1) close(r0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/vmxnet3\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)='0000:00:00.0\x00', 0xd) 610.326369ms ago: executing program 1 (id=164): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) close(r1) write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2) 610.213068ms ago: executing program 2 (id=165): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='8\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)="05010906a101050719e029e71500250175019508810295017508810195057501050819012905910295017503910195067508150025650507190029658100c0", 0x3f) close(r4) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='dummy_udc.0\n', 0xc) close(r5) nanosleep(&(0x7f0000000540)={0x1}, 0x0) syz_open_dev$hidraw(&(0x7f0000000580), 0x0, 0x2) 540.09761ms ago: executing program 0 (id=166): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0/dev0/enable\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='1\n\x00', 0x3) close(r0) 539.913427ms ago: executing program 1 (id=167): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6) ftruncate(r1, 0x2000000) pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000) r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r3, 0x40480923, &(0x7f0000000400)="000000000000000000000000000000000100000000040000010000000100000000000000010000000000000000000000010000000100"/72) ioctl(r3, 0x40140921, &(0x7f0000000500)="0000000007000000000000000000000006000000") ioctl(r3, 0x400c0930, &(0x7f0000000700)='\x00'/12) write(0xffffffffffffffff, &(0x7f0000000640)='8\x00', 0x2) close(0xffffffffffffffff) 538.078216ms ago: executing program 0 (id=174): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0) write(r0, &(0x7f0000000580)='disable\n\x00', 0x8) 455.36677ms ago: executing program 1 (id=168): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='100 1\n\x00', 0x6) 379.990895ms ago: executing program 3 (id=169): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x3c, 0x3, 0x1234, 0x5678, 0x1, 0x0, "05200973a10185010a19031500250775089501b1020a16039501b102850216008026ff7f75100a5304950181020a5404950181020a550495018102c0"}}, 0x154) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000400)={0xa, {0x1}}, 0xa) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000500), 0x4) close(r0) 378.492993ms ago: executing program 0 (id=170): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/cluster/ocfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='127.0.0.1\n', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='7777\n', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/ocfs2/node/node0/num\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='0\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node0/local\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/ocfs2/node/node1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/cluster/ocfs2/node/node1/ipv4_address\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='127.0.0.2\n', 0xa) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/cluster/ocfs2/node/node1/ipv4_port\x00', 0x2, 0x0) write(r5, &(0x7f0000000480)='7777\n', 0x5) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/cluster/ocfs2/node/node1/num\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./hb_file\x00', 0x42, 0x1b6) ftruncate(r6, 0x1000000) r7 = syz_open_dev$loop(&(0x7f00000005e0), 0x0, 0x2) ioctl$LOOP_SET_FD(r7, 0x4c00, r6) dup2(r7, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/cluster/ocfs2/heartbeat/hb0\x00', 0x1ff) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/cluster/ocfs2/heartbeat/hb0/block_bytes\x00', 0x2, 0x0) write(r8, &(0x7f00000006c0)='512\n', 0x4) r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/cluster/ocfs2/heartbeat/hb0/start_block\x00', 0x2, 0x0) write(r9, &(0x7f0000000740)='1\n', 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/cluster/ocfs2/heartbeat/hb0/blocks\x00', 0x2, 0x0) write(r10, &(0x7f00000007c0)='100\n', 0x4) r11 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/cluster/ocfs2/heartbeat/hb0/dev\x00', 0x2, 0x0) write(r11, &(0x7f0000000840)='10\n', 0x3) 337.864151ms ago: executing program 0 (id=171): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='8\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)="05010906a101050719e029e71500250175019508810295017508810195057501050819012905910295017503910195067508150025650507190029658100c0", 0x3f) close(r4) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='dummy_udc.0\n', 0xc) close(r5) nanosleep(&(0x7f0000000540)={0x1}, 0x0) syz_open_dev$hidraw(&(0x7f0000000580), 0x0, 0x2) 329.435229ms ago: executing program 1 (id=172): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='8\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)="05010906a101050719e029e71500250175019508810295017508810195057501050819012905910295017503910195067508150025650507190029658100c0", 0x3f) close(r4) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='dummy_udc.0\n', 0xc) close(r5) nanosleep(&(0x7f0000000540)={0x1}, 0x0) syz_open_dev$hidraw(&(0x7f0000000580), 0x0, 0x2) 236.238273ms ago: executing program 3 (id=173): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) write(0xffffffffffffffff, &(0x7f0000000280)='1\n', 0x2) 150.301317ms ago: executing program 3 (id=175): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='activate\n\x00', 0x9) 150.013612ms ago: executing program 3 (id=176): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgrp2\x00', 0x1ff) mount$cgroup2(0x0, &(0x7f0000000000)='./cgrp2\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={[{@favordynmods}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgrp2/cgroup.subtree_control\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='+rdma', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./cgrp2/child\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./cgrp2/child/rdma.events.local\x00', 0x0, 0x0) read(r1, &(0x7f0000000700)=""/100, 0x64) 93.318856ms ago: executing program 3 (id=177): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1', 0x1) 0s ago: executing program 3 (id=178): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/driver\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000100)='./unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='0000:00:01.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ccp\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f0000000280)='./new_id\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1234 1111 ffffffff ffffffff 0 0 ffffffff8d16d420\x00', 0x33) r4 = openat(r2, &(0x7f0000000380)='./bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='0000:00:01.0\x00', 0xd) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:44347' (ED25519) to the list of known hosts. [ 33.021223][ T5695] cgroup: Unknown subsys name 'net' [ 33.139036][ T5695] cgroup: Unknown subsys name 'cpuset' [ 33.141206][ T5695] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.061562][ T5695] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.028073][ T5743] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.032593][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.033474][ T5748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.033674][ T5750] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.034435][ T5748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.042357][ T5752] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.042957][ T5753] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.043687][ T5750] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.044136][ T5752] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.044205][ T5753] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.045496][ T5751] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.045511][ T5750] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.046339][ T5752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.046548][ T5750] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.047258][ T5753] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.047306][ T5752] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.047458][ T5753] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.047813][ T5752] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.048599][ T5753] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.050400][ T5743] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.629683][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.630671][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.630735][ T5738] bridge_slave_0: entered allmulticast mode [ 38.631536][ T5738] bridge_slave_0: entered promiscuous mode [ 38.633230][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.633270][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.633322][ T5737] bridge_slave_0: entered allmulticast mode [ 38.634033][ T5737] bridge_slave_0: entered promiscuous mode [ 38.634902][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.634942][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.635004][ T5738] bridge_slave_1: entered allmulticast mode [ 38.636115][ T5738] bridge_slave_1: entered promiscuous mode [ 38.657326][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.657372][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.657428][ T5737] bridge_slave_1: entered allmulticast mode [ 38.658436][ T5737] bridge_slave_1: entered promiscuous mode [ 38.710345][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.716603][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.716761][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.716820][ T5746] bridge_slave_0: entered allmulticast mode [ 38.717518][ T5746] bridge_slave_0: entered promiscuous mode [ 38.729844][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.731361][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.732633][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.740310][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.740387][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.740476][ T5746] bridge_slave_1: entered allmulticast mode [ 38.741784][ T5746] bridge_slave_1: entered promiscuous mode [ 38.748968][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.749058][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.749121][ T5736] bridge_slave_0: entered allmulticast mode [ 38.749884][ T5736] bridge_slave_0: entered promiscuous mode [ 38.777626][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.777704][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.777785][ T5736] bridge_slave_1: entered allmulticast mode [ 38.778618][ T5736] bridge_slave_1: entered promiscuous mode [ 38.787252][ T5737] team0: Port device team_slave_0 added [ 38.788507][ T5738] team0: Port device team_slave_0 added [ 38.790445][ T5738] team0: Port device team_slave_1 added [ 38.792392][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.794303][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.802600][ T5737] team0: Port device team_slave_1 added [ 38.833111][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.835295][ T5746] team0: Port device team_slave_0 added [ 38.842743][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.842753][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.842766][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.850078][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.850089][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.850101][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.851417][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.858581][ T5746] team0: Port device team_slave_1 added [ 38.858931][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.858940][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.858952][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.864737][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.864746][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.864758][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.882320][ T5736] team0: Port device team_slave_0 added [ 38.888521][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.888531][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.888543][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.890776][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.890785][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.890797][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.893864][ T5736] team0: Port device team_slave_1 added [ 38.935764][ T5737] hsr_slave_0: entered promiscuous mode [ 38.936286][ T5737] hsr_slave_1: entered promiscuous mode [ 38.937057][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.937067][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.937079][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.940914][ T5738] hsr_slave_0: entered promiscuous mode [ 38.941322][ T5738] hsr_slave_1: entered promiscuous mode [ 38.941638][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 38.941687][ T5738] Cannot create hsr debugfs directory [ 38.942324][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.942331][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.942344][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.983175][ T5746] hsr_slave_0: entered promiscuous mode [ 38.983642][ T5746] hsr_slave_1: entered promiscuous mode [ 38.984000][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 38.984014][ T5746] Cannot create hsr debugfs directory [ 39.028134][ T5736] hsr_slave_0: entered promiscuous mode [ 39.028595][ T5736] hsr_slave_1: entered promiscuous mode [ 39.028900][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 39.028911][ T5736] Cannot create hsr debugfs directory [ 39.225308][ T5737] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.231452][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.231975][ T5737] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.234367][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.235484][ T5737] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.238595][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.238987][ T5737] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.243226][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.276361][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.276416][ T5737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.276881][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.277045][ T5737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.291727][ T5738] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.296999][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.298007][ T5738] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.301833][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.302563][ T5738] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.308499][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.309023][ T5738] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.311889][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.359951][ T5746] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.368358][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.374590][ T5746] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.380441][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.381695][ T5746] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.384223][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.386222][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.386266][ T5738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.386371][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.386412][ T5738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.390320][ T5746] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.395211][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.412499][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.413440][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.413833][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.414709][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.471462][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.471621][ T5736] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.473735][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.478980][ T5736] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.482920][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.483332][ T5736] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.487909][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.495086][ T5736] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.497662][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.536767][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.549746][ T1678] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.549791][ T1678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.550752][ T1678] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.550793][ T1678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.579304][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.607238][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.623976][ T1678] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.624043][ T1678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.640996][ T1678] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.641042][ T1678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.654728][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.672318][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.682754][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.688707][ T1678] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.688750][ T1678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.706743][ T1678] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.706787][ T1678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.708414][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.717239][ T1678] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.717282][ T1678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.719931][ T1678] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.720008][ T1678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.931378][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.969385][ T5737] veth0_vlan: entered promiscuous mode [ 39.973452][ T5737] veth1_vlan: entered promiscuous mode [ 39.990917][ T5737] veth0_macvtap: entered promiscuous mode [ 39.993268][ T5737] veth1_macvtap: entered promiscuous mode [ 40.003294][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.008906][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.028345][ T5816] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.028960][ T5816] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.028981][ T5816] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.028998][ T5816] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.050480][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.051855][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.088255][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.088269][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.112237][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.124270][ T5746] veth0_vlan: entered promiscuous mode [ 40.125062][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.125072][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.125446][ T66] Bluetooth: hci3: command tx timeout [ 40.125450][ T5743] Bluetooth: hci0: command tx timeout [ 40.125715][ T66] Bluetooth: hci2: command tx timeout [ 40.125724][ T5743] Bluetooth: hci1: command tx timeout [ 40.130416][ T5746] veth1_vlan: entered promiscuous mode [ 40.153034][ T5738] veth0_vlan: entered promiscuous mode [ 40.167072][ T5736] veth0_vlan: entered promiscuous mode [ 40.172195][ T5737] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.173137][ T5738] veth1_vlan: entered promiscuous mode [ 40.176428][ T5737] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.180477][ T5746] veth0_macvtap: entered promiscuous mode [ 40.182198][ T5736] veth1_vlan: entered promiscuous mode [ 40.185754][ T5737] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.186387][ T5746] veth1_macvtap: entered promiscuous mode [ 40.187069][ T5737] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.203700][ T5737] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.209237][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.217353][ T5738] veth0_macvtap: entered promiscuous mode [ 40.218801][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.221386][ T5736] veth0_macvtap: entered promiscuous mode [ 40.225799][ T5738] veth1_macvtap: entered promiscuous mode [ 40.227099][ T5736] veth1_macvtap: entered promiscuous mode [ 40.248078][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.261288][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.261996][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.274982][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.275107][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.275127][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.275144][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.275162][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.275179][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.275197][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.275214][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.278407][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.319741][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.319755][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.372639][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.372652][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.385902][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.385922][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.416843][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.416861][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.419197][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.419207][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.436610][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.436623][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.447618][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.447813][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.448353][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.448534][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.555612][ T64] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 40.599933][ T5897] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 40.611122][ T5897] loop0: detected capacity change from 0 to 65536 [ 40.725020][ T64] usb 6-1: Using ep0 maxpacket: 16 [ 40.725631][ T64] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 40.727013][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.727029][ T64] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 40.727048][ T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.731249][ T64] usb 6-1: config 0 descriptor?? [ 40.778285][ T5908] vmxnet3 0000:00:00.0: Failed to map bar0 [ 40.781830][ T5908] vmxnet3 0000:00:00.0: probe with driver vmxnet3 failed with error -5 [ 40.798727][ T5910] Console: switching to colour dummy device 80x25 [ 40.824878][ T62] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 40.858643][ T5913] alloc_netdev: Unable to allocate device with zero queues [ 40.858657][ T5913] gve 0000:00:01.0: could not allocate netdev [ 40.862939][ T5913] gve 0000:00:01.0: probe with driver gve failed with error -12 [ 40.948743][ T5915] acpi-nfit pcspkr: error -ENODEV: No ACPI companion [ 40.996365][ T62] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 40.998993][ T62] usb 5-1: Dual-Role OTG device on HNP port [ 40.999255][ T62] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.025425][ T62] gspca_main: spca501-2.14.0 probing 0000:0000 [ 41.026055][ T62] gspca_spca501: reg write: error -32 [ 41.026063][ T62] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 41.026136][ T62] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 41.028046][ T5917] cdns2-pci 0000:00:1f.3: probe with driver cdns2-pci failed with error -22 [ 41.061476][ T62] input: HID 0000:0000 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/0003:0000:0000.0002/input/input5 [ 41.252718][ T62] hid-generic 0003:0000:0000.0002: input,hidraw1: USB HID v1.01 Keyboard [HID 0000:0000] on usb-dummy_hcd.0-1/input0 [ 41.451502][ T64] usbhid 6-1:0.0: can't add hid device: -71 [ 41.451607][ T64] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 41.462378][ T64] usb 6-1: USB disconnect, device number 2 [ 41.538269][ T5929] svc: failed to register lockdv1 RPC service (errno 111). [ 41.542748][ T5929] lockd_up: makesock failed, error=-111 [ 41.723933][ T5929] svc: failed to register nfsdv3 RPC service (errno 111). [ 41.724533][ T5929] svc: failed to register nfsaclv3 RPC service (errno 111). [ 41.724544][ T5929] failed to unregister tcp with rpcbind [ 41.727728][ T5929] svc: failed to register nfsdv3 RPC service (errno 97). [ 41.727747][ T5929] svc: failed to register nfsaclv3 RPC service (errno 97). [ 41.727758][ T5929] failed to unregister tcp with rpcbind [ 41.807588][ T5933] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 41.825357][ T5933] md: array md0 already has disks! [ 41.875172][ T5933] md: could not open device unknown-block(7,0). [ 41.875213][ T5933] md: error, md_import_device() returned -16 [ 41.889682][ T5936] nvmet: adding nsid 1 to subsystem testsubsys [ 41.918498][ T5933] md/raid1:md0: active with 1 out of 1 mirrors [ 41.919127][ T5933] md0: detected capacity change from 0 to 2048 [ 41.933624][ T56] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:d44bc6cf-06de-4baf-975d-5d52ed3ca021. [ 41.940892][ T5936] nvme nvme0: creating 4 I/O queues. [ 41.949239][ T5936] nvme nvme0: new ctrl: "testsubsys" [ 42.016813][ T5817] hid-sensor-hub 0003:1234:5678.0003: hidraw2: USB HID v0.01 Device [syz0] on syz0 [ 42.205014][ T5740] Bluetooth: hci1: command tx timeout [ 42.205043][ T5740] Bluetooth: hci0: command tx timeout [ 42.215006][ T5743] Bluetooth: hci2: command tx timeout [ 42.215030][ T5743] Bluetooth: hci3: command tx timeout [ 42.252537][ T5958] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 42.252563][ T5958] Error validating options; rc = [-22] [ 42.301552][ T5963] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 42.344916][ T5963] md: couldn't update array info. -22 [ 42.384950][ T5963] md: could not open device unknown-block(7,0). [ 42.385030][ T5963] md: md_import_device returned -16 [ 42.413185][ T5966] o2cb: Local heartbeat has not been started. [ 42.413199][ T5966] o2cb: Cluster check failed. Fix errors before retrying. [ 42.413220][ T5966] (syz.2.23,5966,3):user_dlm_register:674 ERROR: status = -22 [ 42.413238][ T5966] (syz.2.23,5966,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 42.425744][ T5963] syz.0.24: attempt to access beyond end of device [ 42.425744][ T5963] loop0: rw=2048, sector=65544, nr_sectors = 1 limit=65536 [ 42.425839][ T5963] syz.0.24: attempt to access beyond end of device [ 42.425839][ T5963] loop0: rw=2048, sector=65544, nr_sectors = 1 limit=65536 [ 42.425864][ T5963] md: md0: failed to read bitmap from any device [ 42.810730][ T5970] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 42.811995][ T5970] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 42.812874][ T5970] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 42.813607][ T5970] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 42.998561][ T5974] svc: failed to register lockdv1 RPC service (errno 111). [ 43.041932][ T5977] alloc_netdev: Unable to allocate device with zero queues [ 43.041947][ T5977] gve 0000:00:01.0: could not allocate netdev [ 43.046349][ T5977] gve 0000:00:01.0: probe with driver gve failed with error -12 [ 43.209232][ T5974] svc: failed to register nfsdv3 RPC service (errno 111). [ 43.213180][ T5974] svc: failed to register nfsaclv3 RPC service (errno 111). [ 43.213195][ T5974] failed to unregister tcp with rpcbind [ 43.213286][ T5974] svc: failed to register nfsdv3 RPC service (errno 97). [ 43.213294][ T5974] svc: failed to register nfsaclv3 RPC service (errno 97). [ 43.213301][ T5974] failed to unregister tcp with rpcbind [ 43.216177][ T1477] hid-sensor-hub 0003:1234:5678.0004: hidraw2: USB HID v0.01 Device [syz0] on syz0 [ 43.299932][ T5988] vmxnet3 0000:00:1f.3: Failed to map bar0 [ 43.300674][ T5988] vmxnet3 0000:00:1f.3: probe with driver vmxnet3 failed with error -5 [ 43.356067][ T5990] nvmet: disable ns before setting buffered_io value. [ 43.356925][ T5990] nvmet: the ns:1 is already enabled. [ 43.371636][ T5990] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 43.409709][ T37] nvmet: Created nvm controller 2 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:d44bc6cf-06de-4baf-975d-5d52ed3ca021. [ 43.410704][ T5990] nvme nvme1: creating 4 I/O queues. [ 43.429279][ T5990] nvme nvme1: new ctrl: "testsubsys" [ 43.460119][ T5994] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 43.475102][ T5994] md: couldn't update array info. -22 [ 43.496084][ T5994] md: could not open device unknown-block(7,0). [ 43.496129][ T5994] md: md_import_device returned -16 [ 43.515502][ T5994] syz.2.34: attempt to access beyond end of device [ 43.515502][ T5994] loop0: rw=2048, sector=65544, nr_sectors = 1 limit=65536 [ 43.515565][ T5994] syz.2.34: attempt to access beyond end of device [ 43.515565][ T5994] loop0: rw=2048, sector=65544, nr_sectors = 1 limit=65536 [ 43.515586][ T5994] md: md0: failed to read bitmap from any device [ 43.717246][ T6005] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 43.718249][ T6005] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 43.719164][ T6005] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 43.720088][ T6005] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 43.899674][ T6010] alloc_netdev: Unable to allocate device with zero queues [ 43.899688][ T6010] gve 0000:00:01.0: could not allocate netdev [ 43.903707][ T6010] gve 0000:00:01.0: probe with driver gve failed with error -12 [ 43.974019][ T6016] vmxnet3 0000:00:1f.3: Failed to map bar0 [ 43.974311][ T6016] vmxnet3 0000:00:1f.3: probe with driver vmxnet3 failed with error -5 [ 44.023518][ T64] hid-sensor-hub 0003:1234:5678.0005: hidraw2: USB HID v0.01 Device [syz0] on syz0 [ 44.063677][ T6021] o2cb: Local heartbeat has not been started. [ 44.063686][ T6021] o2cb: Cluster check failed. Fix errors before retrying. [ 44.063698][ T6021] (syz.1.40,6021,0):user_dlm_register:674 ERROR: status = -22 [ 44.063712][ T6021] (syz.1.40,6021,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 44.205295][ T6024] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 44.274953][ T6024] md: couldn't update array info. -22 [ 44.295036][ T5743] Bluetooth: hci2: command tx timeout [ 44.295060][ T5743] Bluetooth: hci0: command tx timeout [ 44.295117][ T66] Bluetooth: hci1: command tx timeout [ 44.295148][ T5740] Bluetooth: hci3: command tx timeout [ 44.315068][ T6025] md: could not open device unknown-block(7,0). [ 44.315139][ T6025] md: md_import_device returned -16 [ 44.360062][ T6027] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 44.405456][ T6027] md: couldn't update array info. -22 [ 44.466178][ T6027] md: could not open device unknown-block(7,0). [ 44.466209][ T6027] md: md_import_device returned -16 [ 44.505381][ T6030] syz.3.44: attempt to access beyond end of device [ 44.505381][ T6030] loop0: rw=2048, sector=65544, nr_sectors = 1 limit=65536 [ 44.505453][ T6030] syz.3.44: attempt to access beyond end of device [ 44.505453][ T6030] loop0: rw=2048, sector=65544, nr_sectors = 1 limit=65536 [ 44.505474][ T6030] md: md0: failed to read bitmap from any device [ 44.646389][ T6047] vmxnet3 0000:00:00.0: Failed to map bar0 [ 44.653919][ T6047] vmxnet3 0000:00:00.0: probe with driver vmxnet3 failed with error -5 [ 45.000432][ T6083] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 45.055673][ T6083] md: couldn't update array info. -22 [ 45.095232][ T6083] md: could not open device unknown-block(7,0). [ 45.095281][ T6083] md: md_import_device returned -16 [ 45.135639][ T6083] syz.1.70: attempt to access beyond end of device [ 45.135639][ T6083] loop0: rw=2048, sector=65544, nr_sectors = 1 limit=65536 [ 45.135708][ T6083] syz.1.70: attempt to access beyond end of device [ 45.135708][ T6083] loop0: rw=2048, sector=65544, nr_sectors = 1 limit=65536 [ 45.135730][ T6083] md: md0: failed to read bitmap from any device [ 45.236846][ T6098] o2cb: Local heartbeat has not been started. [ 45.236860][ T6098] o2cb: Cluster check failed. Fix errors before retrying. [ 45.236879][ T6098] (syz.0.74,6098,3):user_dlm_register:674 ERROR: status = -22 [ 45.236899][ T6098] (syz.0.74,6098,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 45.470074][ T6114] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 45.505308][ T6114] md: couldn't update array info. -22 [ 45.544997][ T6114] md: could not open device unknown-block(7,0). [ 45.545038][ T6114] md: md_import_device returned -16 [ 45.717676][ T6134] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 45.745225][ T6134] md: couldn't update array info. -22 [ 45.785824][ T6134] md: could not open device unknown-block(7,0). [ 45.785855][ T6134] md: md_import_device returned -16 [ 45.835467][ T6134] syz.2.92: attempt to access beyond end of device [ 45.835467][ T6134] loop0: rw=2048, sector=65544, nr_sectors = 1 limit=65536 [ 45.835521][ T6134] syz.2.92: attempt to access beyond end of device [ 45.835521][ T6134] loop0: rw=2048, sector=65544, nr_sectors = 1 limit=65536 [ 45.835534][ T6134] md: md0: failed to read bitmap from any device [ 45.949870][ T6155] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 45.997908][ T6155] md: couldn't update array info. -22 [ 46.045743][ T6155] md: could not open device unknown-block(7,0). [ 46.045774][ T6155] md: md_import_device returned -16 [ 46.075767][ T6155] md: md0: failed to read bitmap from any device [ 46.281757][ T6197] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 46.335872][ T6197] md: couldn't update array info. -22 [ 46.365665][ T5740] Bluetooth: hci3: command tx timeout [ 46.365693][ T5740] Bluetooth: hci0: command tx timeout [ 46.365711][ T5740] Bluetooth: hci2: command tx timeout [ 46.366350][ T6202] md: could not open device unknown-block(7,0). [ 46.366379][ T6202] md: md_import_device returned -16 [ 46.374871][ T66] Bluetooth: hci1: command tx timeout [ 46.414989][ T6197] md: md0: failed to read bitmap from any device [ 46.517865][ T6225] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 46.565800][ T6225] md: couldn't update array info. -22 [ 46.595544][ T6225] md: could not open device unknown-block(7,0). [ 46.595572][ T6225] md: md_import_device returned -16 [ 46.636806][ T6240] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 46.665504][ T6240] md: couldn't update array info. -22 [ 46.685299][ T6240] md: could not open device unknown-block(7,0). [ 46.685347][ T6240] md: md_import_device returned -16 [ 46.756326][ T6240] md: md0: failed to read bitmap from any device [ 46.854141][ T6264] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 46.896056][ T6264] md: couldn't update array info. -22 [ 46.936185][ T6264] md: could not open device unknown-block(7,0). [ 46.936215][ T6264] md: md_import_device returned -16 [ 46.987659][ T6282] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 47.024999][ T6282] md: couldn't update array info. -22 [ 47.075155][ T6282] md: could not open device unknown-block(7,0). [ 47.075185][ T6282] md: md_import_device returned -16 [ 47.147689][ T1477] hid-sensor-hub 0003:1234:5678.0006: hidraw2: USB HID v0.01 Device [syz0] on syz0 [ 47.165030][ T12] netdevsim netdevsim100 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.519961][ T12] smpboot: CPU 1 is now offline [ 47.544708][ T12] [ 47.545509][ T12] ====================================================== [ 47.547968][ T12] WARNING: possible circular locking dependency detected [ 47.550559][ T12] syzkaller #0 Not tainted [ 47.552156][ T12] ------------------------------------------------------ [ 47.554454][ T12] kworker/u32:0/12 is trying to acquire lock: [ 47.556366][ T12] ffff88801d775f08 (kn->active#5){++++}-{0:0}, at: __kernfs_remove+0x34c/0xb80 [ 47.559150][ T12] [ 47.559150][ T12] but task is already holding lock: [ 47.561389][ T12] ffffffff8ec7c950 (cpu_hotplug_lock){++++}-{0:0}, at: acpi_processor_post_eject+0x146/0x390 [ 47.564427][ T12] [ 47.564427][ T12] which lock already depends on the new lock. [ 47.564427][ T12] [ 47.567557][ T12] [ 47.567557][ T12] the existing dependency chain (in reverse order) is: [ 47.570426][ T12] [ 47.570426][ T12] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 47.573008][ T12] lock_acquire+0x1d1/0x380 [ 47.574730][ T12] percpu_down_write+0x53/0x3e0 [ 47.576446][ T12] _cpu_up+0x68/0x960 [ 47.577892][ T12] cpu_up+0x1ba/0x230 [ 47.579363][ T12] cpuhp_bringup_mask+0xf8/0x180 [ 47.581055][ T12] bringup_nonboot_cpus+0xd9/0x1b0 [ 47.583156][ T12] smp_init+0x32/0x150 [ 47.584649][ T12] kernel_init_freeable+0x44b/0x7b0 [ 47.586433][ T12] kernel_init+0x21/0x1e0 [ 47.587975][ T12] ret_from_fork+0x730/0xd60 [ 47.589601][ T12] ret_from_fork_asm+0x1a/0x30 [ 47.591171][ T12] [ 47.591171][ T12] -> #2 (cpu_add_remove_lock){+.+.}-{4:4}: [ 47.593548][ T12] lock_acquire+0x1d1/0x380 [ 47.595074][ T12] __mutex_lock+0x1a4/0x1bd0 [ 47.596672][ T12] cpu_device_down+0x46/0xc0 [ 47.598308][ T12] device_offline+0x2f4/0x400 [ 47.600040][ T12] acpi_bus_offline+0x28b/0x490 [ 47.601697][ T12] acpi_device_hotplug+0x657/0xc40 [ 47.603397][ T12] acpi_hotplug_work_fn+0x5e/0x90 [ 47.605098][ T12] process_one_work+0xac7/0x1b10 [ 47.606800][ T12] worker_thread+0x5ef/0xe50 [ 47.608438][ T12] kthread+0x373/0x450 [ 47.609894][ T12] ret_from_fork+0x730/0xd60 [ 47.611499][ T12] ret_from_fork_asm+0x1a/0x30 [ 47.613270][ T12] [ 47.613270][ T12] -> #1 (&device->physical_node_lock){+.+.}-{4:4}: [ 47.615966][ T12] lock_acquire+0x1d1/0x380 [ 47.618005][ T12] __mutex_lock+0x1a4/0x1bd0 [ 47.619634][ T12] acpi_companion_match+0xc0/0x180 [ 47.621328][ T12] acpi_device_uevent_modalias+0x19/0x30 [ 47.623373][ T12] platform_uevent+0x51/0xc0 [ 47.625023][ T12] dev_uevent+0x1de/0x870 [ 47.626551][ T12] kobject_uevent_env+0x6eb/0x18b0 [ 47.628279][ T12] kobject_synth_uevent+0x6f0/0x7d0 [ 47.630047][ T12] uevent_store+0x24/0x50 [ 47.631593][ T12] dev_attr_store+0x58/0x80 [ 47.633203][ T12] sysfs_kf_write+0xf2/0x150 [ 47.634827][ T12] kernfs_fop_write_iter+0x3e0/0x5f0 [ 47.636662][ T12] vfs_write+0x6af/0x1050 [ 47.638206][ T12] ksys_write+0x12a/0x250 [ 47.639744][ T12] do_syscall_64+0x121/0x770 [ 47.641329][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.643236][ T12] [ 47.643236][ T12] -> #0 (kn->active#5){++++}-{0:0}: [ 47.645489][ T12] check_prev_add+0xeb/0xe60 [ 47.647018][ T12] __lock_acquire+0x1528/0x1f40 [ 47.648635][ T12] lock_acquire+0x1d1/0x380 [ 47.650178][ T12] kernfs_drain+0x4f0/0x600 [ 47.651708][ T12] __kernfs_remove+0x34c/0xb80 [ 47.653699][ T12] kernfs_remove_by_name_ns+0x7c/0x120 [ 47.655536][ T12] device_del+0x361/0x9b0 [ 47.657031][ T12] device_unregister+0x1d/0xe0 [ 47.658689][ T12] unregister_cpu+0xa0/0x140 [ 47.660329][ T12] acpi_processor_post_eject+0x16f/0x390 [ 47.662255][ T12] acpi_device_hotplug+0xa33/0xc40 [ 47.664014][ T12] acpi_hotplug_work_fn+0x5e/0x90 [ 47.665747][ T12] process_one_work+0xac7/0x1b10 [ 47.667444][ T12] worker_thread+0x5ef/0xe50 [ 47.669075][ T12] kthread+0x373/0x450 [ 47.670625][ T12] ret_from_fork+0x730/0xd60 [ 47.672171][ T12] ret_from_fork_asm+0x1a/0x30 [ 47.673889][ T12] [ 47.673889][ T12] other info that might help us debug this: [ 47.673889][ T12] [ 47.677049][ T12] Chain exists of: [ 47.677049][ T12] kn->active#5 --> cpu_add_remove_lock --> cpu_hotplug_lock [ 47.677049][ T12] [ 47.681056][ T12] Possible unsafe locking scenario: [ 47.681056][ T12] [ 47.683204][ T12] CPU0 CPU1 [ 47.684803][ T12] ---- ---- [ 47.686450][ T12] lock(cpu_hotplug_lock); [ 47.688217][ T12] lock(cpu_add_remove_lock); [ 47.690509][ T12] lock(cpu_hotplug_lock); [ 47.692625][ T12] lock(kn->active#5); [ 47.693877][ T12] [ 47.693877][ T12] *** DEADLOCK *** [ 47.693877][ T12] [ 47.696282][ T12] locks held by kworker/u32:0/12: 6, last CPU#3: [ 47.698291][ T12] #0: ffff888020e50940 ((wq_completion)kacpi_hotplug){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 47.701780][ T12] #1: ffffc900001e7d08 ((work_completion)(&hpw->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 47.705020][ T12] #2: ffffffff8fe1de20 (device_hotplug_lock){+.+.}-{4:4}, at: acpi_device_hotplug+0x82/0xc40 [ 47.708063][ T12] #3: ffffffff8faf21e0 (acpi_scan_lock){+.+.}-{4:4}, at: acpi_device_hotplug+0x90/0xc40 [ 47.711229][ T12] #4: ffffffff8ec7ca00 (cpu_add_remove_lock){+.+.}-{4:4}, at: acpi_processor_post_eject+0x141/0x390 [ 47.714469][ T12] #5: ffffffff8ec7c950 (cpu_hotplug_lock){++++}-{0:0}, at: acpi_processor_post_eject+0x146/0x390 [ 47.717624][ T12] [ 47.717624][ T12] stack backtrace: [ 47.719498][ T12] CPU: 3 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted syzkaller #0 PREEMPT(full) [ 47.722258][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 47.725498][ T12] Workqueue: kacpi_hotplug acpi_hotplug_work_fn [ 47.727423][ T12] Call Trace: [ 47.728505][ T12] [ 47.729443][ T12] dump_stack_lvl+0x100/0x190 [ 47.730912][ T12] print_circular_bug.cold+0x178/0x1be [ 47.732625][ T12] check_noncircular+0x146/0x160 [ 47.734176][ T12] check_prev_add+0xeb/0xe60 [ 47.735635][ T12] ? __lock_acquire+0x5c0/0x1f40 [ 47.737236][ T12] __lock_acquire+0x1528/0x1f40 [ 47.738781][ T12] lock_acquire+0x1d1/0x380 [ 47.740212][ T12] ? __kernfs_remove+0x34c/0xb80 [ 47.741699][ T12] ? kernfs_drain+0x4c7/0x600 [ 47.743123][ T12] kernfs_drain+0x4f0/0x600 [ 47.744494][ T12] ? __kernfs_remove+0x34c/0xb80 [ 47.745961][ T12] ? __pfx_kernfs_drain+0x10/0x10 [ 47.747475][ T12] ? find_held_lock+0x2b/0x80 [ 47.748901][ T12] ? __kernfs_remove+0x224/0xb80 [ 47.750410][ T12] ? __kernfs_remove+0x224/0xb80 [ 47.751968][ T12] ? up_write+0x2dc/0x5b0 [ 47.753254][ T12] __kernfs_remove+0x34c/0xb80 [ 47.754690][ T12] kernfs_remove_by_name_ns+0x7c/0x120 [ 47.756348][ T12] device_del+0x361/0x9b0 [ 47.757705][ T12] ? __pfx_device_del+0x10/0x10 [ 47.759223][ T12] ? kernfs_remove_by_name_ns+0xbb/0x120 [ 47.760943][ T12] device_unregister+0x1d/0xe0 [ 47.762382][ T12] unregister_cpu+0xa0/0x140 [ 47.764254][ T12] acpi_processor_post_eject+0x16f/0x390 [ 47.766013][ T12] ? __pfx_acpi_processor_post_eject+0x10/0x10 [ 47.767932][ T12] acpi_device_hotplug+0xa33/0xc40 [ 47.769526][ T12] ? __pfx_acpi_device_hotplug+0x10/0x10 [ 47.771265][ T12] acpi_hotplug_work_fn+0x5e/0x90 [ 47.772846][ T12] process_one_work+0xac7/0x1b10 [ 47.774400][ T12] ? __pfx_process_one_work+0x10/0x10 [ 47.776087][ T12] ? lock_acquire+0x1d1/0x380 [ 47.777564][ T12] ? __pfx_acpi_hotplug_work_fn+0x10/0x10 [ 47.779348][ T12] worker_thread+0x5ef/0xe50 [ 47.780914][ T12] ? kthread+0x13a/0x450 [ 47.782240][ T12] ? __pfx_worker_thread+0x10/0x10 [ 47.783816][ T12] kthread+0x373/0x450 [ 47.785058][ T12] ? __pfx_kthread+0x10/0x10 [ 47.786468][ T12] ret_from_fork+0x730/0xd60 [ 47.787890][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 47.789538][ T12] ? __switch_to+0x800/0x10f0 [ 47.791035][ T12] ? __pfx_kthread+0x10/0x10 [ 47.792520][ T12] ret_from_fork_asm+0x1a/0x30 [ 47.794039][ T12]