last executing test programs: 12.036710947s ago: executing program 0 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/drivers/pcspkr/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='pcspkr\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='acpi-thermal\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/acpi-thermal/bind\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='pcspkr\x00', 0x7) 10.53522541s ago: executing program 0 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/portlist\x00', 0x1, 0x0) pwrite64(r0, &(0x7f0000000280)='2049\n\x00', 0x5, 0x0) 10.470281072s ago: executing program 3 (id=27): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010000000904000002030000000921110100012223000905810340000a00000905020340000a0000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000600)={0x40, 0x2}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) (async) r1 = syz_open_dev$hidraw(&(0x7f0000000500), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="020000000000000000") read$hidraw(r1, &(0x7f0000000800), 0x9) (async) 10.413571365s ago: executing program 0 (id=28): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000031401002dbd7000000000000900020073797a30000000000800410073697700070033006c6f0000"], 0x2c}, 0x1, 0x0, 0x0, 0x854}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x1, 0x0) r2 = syz_io_uring_setup(0x4, &(0x7f0000000540), &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000040)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)='id_ext=0,ioc_guid=0,dest=127.0.0.1:3260\x00', 0x27}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000440)={0x0}, 0x106, 0x2}}, 0x20) write(r6, &(0x7f0000000480)="02000000280000fa000000000000000002000cbc7f00000100"/48, 0x30) write(r6, &(0x7f0000000500)="07000000080000fa0000000010000000", 0x10) write(r6, &(0x7f0000000540)="0c000000080000fa800500000000007f", 0x10) 9.515754809s ago: executing program 0 (id=32): syz_usb_connect(0x3, 0xa1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ba23000100010102030109028f00020100803209040000000101000009240100011e0001010c2402010101000203000000092403020103000100090401000001020000090401010101020000072401010101000b2402010202100180bb0009050109000201000007250100000000090401020101020000072401010101000b2402010202100180bb0009050109000201000007250100000000"], 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f0000000400)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_INFO(r1, 0x81204101, &(0x7f0000000600)) 7.38525588s ago: executing program 3 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000300)="00b00000", 0x4, 0x40) pwrite64(r0, &(0x7f0000000300)="00b00000", 0x4, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='0000:00:02.0\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='lpc_ich\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/lpc_ich/new_id\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF 0 0 b\x00', 0x29) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/pci/drivers/lpc_ich/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000b00)='0000:00:02.0\x00', 0xc) 7.048080269s ago: executing program 3 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000740)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000640)='1\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tmp\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./tmp\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 *\n\x00', 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000140)='* / 2147483647 8192 0 0 0 fsloc 1 127.0.0.1 / 1\n\x00', 0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000540)='127.0.0.1:/\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)={[{'clientaddr=127.0.0.1'}, {'addr=127.0.0.1'}]}) 6.253586428s ago: executing program 0 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='-2 -3 -4 +4.1 +4.2\n\x00', 0x13) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n\x00', 0x2) nanosleep(&(0x7f0000000c00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs_mnt\x00', &(0x7f0000000600)='nfs4\x00', 0x0, &(0x7f0000000700)='addr=127.0.0.1,clientaddr=127.0.0.1,vers=4.2\x00') openat(0xffffffffffffff9c, &(0x7f0000000d00)='./nfs_mnt/file\x00', 0x42, 0x1ff) chmod(&(0x7f0000000d00)='./nfs_mnt/file\x00', 0x1ff) 5.77668975s ago: executing program 3 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nullb/nullb1/size\x00', 0x2, 0x0) write(r1, &(0x7f0000000c00)='256\n', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/nullb1\x00', 0x2, 0x0) write(r3, &(0x7f0000001000)="53464f5a214e2187", 0x1000) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./mnt\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='./dev/nullb1\x00', &(0x7f0000000e00)='./mnt\x00', &(0x7f0000000f00)='zonefs\x00', 0x0, 0x0) 5.231468404s ago: executing program 2 (id=45): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x24, r1, 0x5, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a00)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}]]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000d00)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}]}, 0x24}}, 0x0) 5.15456467s ago: executing program 2 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./mnt\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f0000001000)='./nullb1\x00', 0x8000, 0xfa01) r2 = fsopen(&(0x7f0000001100)='zonefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001200)='source\x00', &(0x7f0000001000)='./nullb1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) move_mount(r3, &(0x7f0000001300)='\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./mnt\x00', 0x4) 5.088829906s ago: executing program 2 (id=47): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x1bd, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000200)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='vers=1.0,user=root,pass=root\x00') 4.602213837s ago: executing program 1 (id=48): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x400, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x1000000, 0x0, 0x80c9}, 0x20000040) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e20, @loopback}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000310)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, {0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, r3, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000300)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000340)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, r3}}, 0x120) 4.211584865s ago: executing program 2 (id=49): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/vfio/parameters/enable_unsafe_noiommu_mode\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='0000:00:02.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='vfio-pci\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='0000:00:02.0\x00', 0xd) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/iommu\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/vfio/devices/vfio0\x00', 0x2, 0x0) 4.113714811s ago: executing program 2 (id=50): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={'syzkaller0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', 0x1043}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x3c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x40d}]}}]}, 0x3c}}, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100)='syzkaller0\x00', 0xb) sendto$inet(r3, &(0x7f0000000240)="80", 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r3, &(0x7f0000000240)="80", 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10) 3.374159113s ago: executing program 0 (id=51): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0xf, "0f03000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0xf, "0f03000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0xf, "0f03000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0xf, "0f03000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0xf, "0f03000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 3.084917632s ago: executing program 2 (id=52): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000001040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000001080), 0x2) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000020c0)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000002100), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000002140), 0x2) read(r0, &(0x7f0000002180)=""/4096, 0x1000) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000003180)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000031c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000003200), 0x2) read(r0, &(0x7f0000003240)=""/4096, 0x1000) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000004240)={0x2, 0xfa}, 0x2) read(r0, &(0x7f0000004280)=""/4096, 0x1000) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000005280)={0x2, 0xfa}, 0x2) read(r0, &(0x7f00000052c0)=""/4096, 0x1000) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000062c0)={0x2, 0xfa}, 0x2) read(r0, &(0x7f0000006300)=""/4096, 0x1000) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000007300)={0x2, 0xfa}, 0x2) read(r0, &(0x7f0000007340)=""/4096, 0x1000) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000008340)={0x2, 0xfa}, 0x2) read(r0, &(0x7f0000008380)=""/4096, 0x1000) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000009380)={0x2, 0xfa}, 0x2) read(r0, &(0x7f00000093c0)=""/4096, 0x1000) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f000000a3c0)={0x2, 0xfa}, 0x2) read(r0, &(0x7f000000a400)=""/4096, 0x1000) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f000000b400)={0x2, 0xfa}, 0x2) read(r0, &(0x7f000000b440)=""/4096, 0x1000) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f000000c440)={0x2, 0xfa}, 0x2) read(r0, &(0x7f000000c480)=""/4096, 0x1000) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f000000d480)={0x2, 0xfa}, 0x2) read(r0, &(0x7f000000d4c0)=""/4096, 0x1000) 2.889874337s ago: executing program 3 (id=53): syz_usb_connect(0x5, 0xa1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ba23000100010102030109028f00020100803209040000000101000009240100011e0001010c2402010101000203000000092403020103000100090401000001020000090401010101020000072401010101000b2402010202100180bb0009050109000201000007250100000000090401020101020000072401010101000b2402010202100180bb0009050109000201000007250100000000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x2, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0x8], [0x0, 0x100000], [0x1]], '\x00', [{0x20, 0x20, 0x0, 0x0, 0x1}, {0x40, 0x40, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xbb80, 0xbb80, 0x0, 0x0, 0x1}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}], '\x00', 0xffffffff}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 2.05392578s ago: executing program 1 (id=54): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 1.981674742s ago: executing program 1 (id=55): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) nanosleep(&(0x7f0000000540)={0x0, 0xbebc200}, &(0x7f0000000580)) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x40, 0x40}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xa}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}]}, 0x50}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8}]}, 0x50}}, 0x0) 1.135252071s ago: executing program 1 (id=56): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1101}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', 0x1043}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x2}}}]}, 0x38}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000200)="00000000000000000000000008004500001400004000400100007f0000017f0000010800000000000000", 0x2a, 0x0, &(0x7f0000000240)={0x11, 0x800, r2, 0x0, 0x0, 0x0}, 0x14) 151.45982ms ago: executing program 1 (id=57): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000300)="00b00000", 0x4, 0x40) pwrite64(r0, &(0x7f0000000300)="00b00000", 0x4, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='0000:00:02.0\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='lpc_ich\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/lpc_ich/new_id\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF 0 0 b\x00', 0x29) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/pci/drivers/lpc_ich/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000b00)='0000:00:02.0\x00', 0xc) 151.29992ms ago: executing program 3 (id=58): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn/namespaces\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='/dev/nullb0\x00', 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r5, &(0x7f0000000400)='rdma\x00', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) write(r6, &(0x7f0000000480)='ipv4\x00', 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r7, &(0x7f0000000500)='172.20.20.24\x00', 0xd) r8 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r8, &(0x7f0000000580)='4421\x00', 0x4) symlinkat(&(0x7f00000005c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/subsystems/testnqn\x00') r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write(r9, &(0x7f0000000680)='nqn=testnqn,transport=rdma,traddr=172.20.20.24,trsvcid=4421\x00', 0x3c) 0s ago: executing program 1 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='tcp 2049\n\x00', 0x9) nanosleep(&(0x7f0000000c00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs_mnt\x00', &(0x7f0000000600)='nfs4\x00', 0x0, &(0x7f0000000700)='addr=127.0.0.1,clientaddr=127.0.0.1,vers=4.2,timeo=1,retrans=1,retry=0\x00') openat(0xffffffffffffff9c, &(0x7f0000000d00)='./nfs_mnt/file\x00', 0x42, 0x1ff) chmod(&(0x7f0000000d00)='./nfs_mnt/file\x00', 0x1ff) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:6385' (ED25519) to the list of known hosts. [ 42.325806][ T5674] cgroup: Unknown subsys name 'net' [ 42.512532][ T5674] cgroup: Unknown subsys name 'cpuset' [ 42.517067][ T5674] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.515349][ T5674] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.487014][ T5759] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.490604][ T5760] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.491447][ T5759] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.491755][ T5761] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.493600][ T5761] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.495480][ T5761] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.496371][ T5760] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.497620][ T5760] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.499385][ T5761] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.500029][ T5759] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.500514][ T5759] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.500981][ T5759] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.501317][ T5759] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.502281][ T5760] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.503564][ T5757] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.504344][ T5761] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.504449][ T5757] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.505780][ T5757] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.524479][ T5753] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.534571][ T5753] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.020148][ T5755] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.023000][ T5755] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.025238][ T5755] bridge_slave_0: entered allmulticast mode [ 48.027929][ T5755] bridge_slave_0: entered promiscuous mode [ 48.037685][ T5755] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.040039][ T5755] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.042280][ T5755] bridge_slave_1: entered allmulticast mode [ 48.044941][ T5755] bridge_slave_1: entered promiscuous mode [ 48.127129][ T5755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.131774][ T5755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.181343][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.183716][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.186053][ T5747] bridge_slave_0: entered allmulticast mode [ 48.188640][ T5747] bridge_slave_0: entered promiscuous mode [ 48.192978][ T5755] team0: Port device team_slave_0 added [ 48.197284][ T5755] team0: Port device team_slave_1 added [ 48.210199][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.213225][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.215563][ T5747] bridge_slave_1: entered allmulticast mode [ 48.218224][ T5747] bridge_slave_1: entered promiscuous mode [ 48.232277][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.234633][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.236952][ T5746] bridge_slave_0: entered allmulticast mode [ 48.239702][ T5746] bridge_slave_0: entered promiscuous mode [ 48.243755][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.246076][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.248375][ T5746] bridge_slave_1: entered allmulticast mode [ 48.251169][ T5746] bridge_slave_1: entered promiscuous mode [ 48.266916][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.269157][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.277125][ T5755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.282598][ T5748] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.285434][ T5748] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.287870][ T5748] bridge_slave_0: entered allmulticast mode [ 48.290969][ T5748] bridge_slave_0: entered promiscuous mode [ 48.314510][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.317743][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.320133][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.328147][ T5755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.331910][ T5748] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.334929][ T5748] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.337950][ T5748] bridge_slave_1: entered allmulticast mode [ 48.341086][ T5748] bridge_slave_1: entered promiscuous mode [ 48.345295][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.349815][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.354005][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.393246][ T5746] team0: Port device team_slave_0 added [ 48.409187][ T5748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.414422][ T5746] team0: Port device team_slave_1 added [ 48.417140][ T5747] team0: Port device team_slave_0 added [ 48.425720][ T5747] team0: Port device team_slave_1 added [ 48.429154][ T5748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.441241][ T5755] hsr_slave_0: entered promiscuous mode [ 48.443656][ T5755] hsr_slave_1: entered promiscuous mode [ 48.476995][ T5748] team0: Port device team_slave_0 added [ 48.479125][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.482549][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.491150][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.501454][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.503663][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.511734][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.516240][ T5748] team0: Port device team_slave_1 added [ 48.518327][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.521044][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.529013][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.541575][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.543856][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.551691][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.599863][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.602159][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.610188][ T5748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.615279][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.617411][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.625348][ T5748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.664731][ T5746] hsr_slave_0: entered promiscuous mode [ 48.666997][ T5746] hsr_slave_1: entered promiscuous mode [ 48.668989][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 48.671328][ T5746] Cannot create hsr debugfs directory [ 48.692788][ T5747] hsr_slave_0: entered promiscuous mode [ 48.695117][ T5747] hsr_slave_1: entered promiscuous mode [ 48.697217][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 48.698944][ T5747] Cannot create hsr debugfs directory [ 48.741314][ T5748] hsr_slave_0: entered promiscuous mode [ 48.744155][ T5748] hsr_slave_1: entered promiscuous mode [ 48.746816][ T5748] debugfs: 'hsr0' already exists in 'hsr' [ 48.749006][ T5748] Cannot create hsr debugfs directory [ 48.949850][ T5755] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.956370][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.959275][ T5755] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.964781][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.972599][ T5755] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.977033][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.986812][ T5755] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.992311][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.017105][ T5746] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.023314][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.026214][ T5746] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.029901][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.032665][ T5746] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.036570][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.047891][ T5746] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.055275][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.095797][ T5747] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.100917][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.108522][ T5747] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.114028][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.116827][ T5747] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.120754][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.123556][ T5747] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.127272][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.184552][ T5748] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.188447][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.198149][ T5748] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.203799][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.206487][ T5748] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.211403][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.217667][ T5748] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.222292][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.237841][ T5755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.283765][ T5755] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.295532][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.298129][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.327444][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.331714][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.334001][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.351166][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.363603][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.370766][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.373075][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.388843][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.391271][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.404963][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.423211][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.425398][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.438652][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.441040][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.474331][ T5748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.497850][ T5748] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.506456][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.508799][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.520301][ T5753] Bluetooth: hci2: command tx timeout [ 49.531811][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.534343][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.600313][ T5753] Bluetooth: hci1: command tx timeout [ 49.600975][ T64] Bluetooth: hci0: command tx timeout [ 49.601253][ T5761] Bluetooth: hci3: command tx timeout [ 49.708655][ T5755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.739401][ T5755] veth0_vlan: entered promiscuous mode [ 49.749232][ T5755] veth1_vlan: entered promiscuous mode [ 49.761597][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.785738][ T5755] veth0_macvtap: entered promiscuous mode [ 49.793564][ T5755] veth1_macvtap: entered promiscuous mode [ 49.807091][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.817057][ T5746] veth0_vlan: entered promiscuous mode [ 49.822988][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.831235][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.842435][ T5748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.853891][ T5746] veth1_vlan: entered promiscuous mode [ 49.890672][ T5798] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.926029][ T5747] veth0_vlan: entered promiscuous mode [ 49.934603][ T5748] veth0_vlan: entered promiscuous mode [ 49.953352][ T5746] veth0_macvtap: entered promiscuous mode [ 49.957423][ T5747] veth1_vlan: entered promiscuous mode [ 49.962754][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.962826][ T5746] veth1_macvtap: entered promiscuous mode [ 49.966316][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.982158][ T5748] veth1_vlan: entered promiscuous mode [ 50.015633][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.018135][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.018879][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.023790][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.031607][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.055313][ T5748] veth0_macvtap: entered promiscuous mode [ 50.059886][ T5747] veth0_macvtap: entered promiscuous mode [ 50.070804][ T5748] veth1_macvtap: entered promiscuous mode [ 50.078369][ T5747] veth1_macvtap: entered promiscuous mode [ 50.085659][ T5755] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.096627][ T5755] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.103731][ T5755] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.108601][ T5755] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.112185][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.114945][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.124647][ T5755] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.125890][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.127170][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.127183][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.140044][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.193217][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.196240][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.241145][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.248487][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.276984][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.297237][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.308754][ T5798] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.311665][ T5798] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.312372][ T5753] Bluetooth: Wrong link type (-71) [ 50.314306][ T5798] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.314585][ T5798] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.314605][ T5798] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.314624][ T5798] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.343760][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.346147][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.349779][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.360125][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.362558][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.372018][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.374390][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.391129][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.395610][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.398584][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.404131][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.419757][ T5826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.769639][ T5897] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 50.937405][ T5897] usb 7-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 50.941130][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.943692][ T5913] ath: phy11: Hardware device ID 0xffff not supported [ 50.944902][ T5897] usb 7-1: Product: syz [ 50.944917][ T5897] usb 7-1: Manufacturer: syz [ 50.947105][ T5913] ath9k 0000:00:03.0: Failed to initialize device [ 50.948781][ T5897] usb 7-1: SerialNumber: syz [ 50.954645][ T5913] ath9k 0000:00:03.0: probe with driver ath9k failed with error -95 [ 51.076933][ T5915] input: syz0 as /devices/virtual/input/input5 [ 51.266808][ T5746] svc: failed to register nfsdv3 RPC service (errno 111). [ 51.272733][ T5746] svc: failed to register nfsaclv3 RPC service (errno 111). [ 51.276230][ T5746] failed to unregister tcp with rpcbind [ 51.285452][ T5746] svc: failed to register nfsdv3 RPC service (errno 97). [ 51.293447][ T5746] svc: failed to register nfsaclv3 RPC service (errno 97). [ 51.301610][ T5746] failed to unregister tcp with rpcbind [ 51.403595][ T5927] jffs2: notice: (5927) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 51.600185][ T5753] Bluetooth: hci2: command tx timeout [ 51.679724][ T5753] Bluetooth: hci0: command tx timeout [ 51.680540][ T64] Bluetooth: hci1: command tx timeout [ 51.680547][ T5761] Bluetooth: hci3: command tx timeout [ 51.699658][ T5842] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.852061][ T5842] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 51.855173][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.243847][ T5816] usb 7-1: USB disconnect, device number 2 [ 52.739620][ T5932] NFSD: Unable to initialize client recovery tracking! (-110) [ 52.742829][ T5932] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 52.746511][ T5932] NFSD: starting 90-second grace period (net f00003f7) [ 53.080637][ T5842] usbhid 5-1:1.0: can't add hid device: -71 [ 53.083051][ T5842] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 53.092088][ T5842] usb 5-1: USB disconnect, device number 2 [ 53.540117][ T5952] loop0: detected capacity change from 0 to 128 [ 53.680110][ T5761] Bluetooth: hci2: command tx timeout [ 53.769692][ T5761] Bluetooth: hci1: command tx timeout [ 53.769819][ T5753] Bluetooth: hci3: command tx timeout [ 53.769841][ T64] Bluetooth: hci0: command tx timeout [ 54.319947][ T5939] NFSD: Unable to initialize client recovery tracking! (-110) [ 54.324254][ T5939] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 54.327942][ T5939] NFSD: starting 90-second grace period (net f00003f8) [ 54.627848][ T5964] ubi0: attaching mtd0 [ 54.632495][ T5964] ubi0: scanning is finished [ 54.634888][ T5964] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 54.886870][ T5968] UBIFS error (pid: 5968): cannot open "ubi0_0", error -19 [ 54.901023][ T5964] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 54.957622][ T5897] hid-generic 0005:0C45:1010.0002: unknown main item tag 0x0 [ 54.965463][ T5897] hid-generic 0005:0C45:1010.0002: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 55.122750][ T5959] svc: failed to register nfsdv3 RPC service (errno 512). [ 55.126900][ T5959] svc: failed to register nfsaclv3 RPC service (errno 512). [ 55.129977][ T5959] failed to unregister tcp with rpcbind [ 55.132388][ T5959] svc: failed to register nfsdv3 RPC service (errno 97). [ 55.135261][ T5959] svc: failed to register nfsaclv3 RPC service (errno 97). [ 55.138222][ T5959] failed to unregister tcp with rpcbind [ 55.229570][ T56] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 55.380356][ T56] usb 8-1: not running at top speed; connect to a high speed hub [ 55.384075][ T56] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 1023 [ 55.387659][ T56] usb 8-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 55.390604][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.397728][ T56] gspca_main: spca501-2.14.0 probing 0000:0000 [ 55.481786][ T5960] svc: failed to register nfsdv3 RPC service (errno 512). [ 55.484413][ T5960] svc: failed to register nfsaclv3 RPC service (errno 512). [ 55.486829][ T5960] failed to unregister tcp with rpcbind [ 55.488777][ T5960] svc: failed to register nfsdv3 RPC service (errno 97). [ 55.492203][ T5960] svc: failed to register nfsaclv3 RPC service (errno 97). [ 55.495132][ T5960] failed to unregister tcp with rpcbind [ 55.654985][ T56] gspca_spca501: reg write: error -71 [ 55.656642][ T56] spca501 8-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 55.659066][ T56] spca501 8-1:1.0: probe with driver spca501 failed with error -22 [ 55.662890][ T56] uvcvideo 8-1:1.0: Found UVC 1.00 device (0000:0000) [ 55.666926][ T56] uvcvideo 8-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 55.670295][ T56] uvcvideo 8-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 55.673193][ T56] uvcvideo 8-1:1.1: Failed to initialize the device (-71). [ 55.678047][ T56] uvcvideo 8-1:1.0: probe with driver uvcvideo failed with error -71 [ 55.690310][ T56] usb 8-1: USB disconnect, device number 2 [ 55.769592][ T5753] Bluetooth: hci2: command tx timeout [ 55.840114][ T5753] Bluetooth: hci0: command tx timeout [ 55.840139][ T5761] Bluetooth: hci3: command tx timeout [ 55.849616][ T5761] Bluetooth: hci1: command tx timeout [ 56.651020][ T5970] NFSD: Unable to initialize client recovery tracking! (-110) [ 56.654253][ T5970] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 56.657936][ T5970] NFSD: starting 90-second grace period (net f00003f8) [ 57.057105][ T5988] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 57.063397][ T5988] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 57.070143][ T5988] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 57.075142][ T5988] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 57.084432][ T5988] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 57.111538][ T42] audit: type=1800 audit(1785858918.476:2): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.25" name="attr_allow_any_host" dev="configfs" ino=7568 res=0 errno=0 [ 57.114349][ T5991] nvmet: adding nsid 1 to subsystem testnqn [ 57.145816][ T42] audit: type=1800 audit(1785858918.506:3): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.25" name="device_path" dev="configfs" ino=7570 res=0 errno=0 [ 57.155430][ T42] audit: type=1800 audit(1785858918.506:4): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.25" name="enable" dev="configfs" ino=7571 res=0 errno=0 [ 57.156848][ T5988] nvmet_rdma: binding CM ID to 172.20.20.24:4421 failed (-99) [ 57.163769][ T42] audit: type=1800 audit(1785858918.516:5): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.25" name="addr_trtype" dev="configfs" ino=7577 res=0 errno=0 [ 57.175137][ T42] audit: type=1800 audit(1785858918.516:6): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.25" name="addr_adrfam" dev="configfs" ino=7578 res=0 errno=0 [ 57.184399][ T42] audit: type=1800 audit(1785858918.516:7): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.25" name="addr_traddr" dev="configfs" ino=7579 res=0 errno=0 [ 57.192937][ T42] audit: type=1800 audit(1785858918.516:8): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.25" name="addr_trsvcid" dev="configfs" ino=7580 res=0 errno=0 [ 57.202116][ T5996] lo speed is unknown, defaulting to 1000 [ 57.205820][ T5996] lo speed is unknown, defaulting to 1000 [ 57.208733][ T5996] lo speed is unknown, defaulting to 1000 [ 57.211451][ T5996] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 57.215909][ T5996] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 57.221180][ T5996] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 57.224850][ T5988] nvme nvme0: rdma connection establishment failed (-104) [ 57.228101][ T5996] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 57.242476][ T5996] lo speed is unknown, defaulting to 1000 [ 57.247204][ T5996] lo speed is unknown, defaulting to 1000 [ 57.251421][ T5996] lo speed is unknown, defaulting to 1000 [ 57.254837][ T5996] lo speed is unknown, defaulting to 1000 [ 57.270293][ T5897] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 57.315382][ T6005] loop0: detected capacity change from 0 to 8 [ 57.331552][ T6005] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 57.379543][ T5842] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 57.411343][ T6005] syz.1.30: attempt to access beyond end of device [ 57.411343][ T6005] loop0: rw=2048, sector=8, nr_sectors = 8 limit=8 [ 57.416816][ T6005] md: disabled device loop0, could not read superblock. [ 57.419790][ T6005] md: loop0 does not have a valid v1.2 superblock, not importing! [ 57.430801][ T5897] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00 [ 57.434498][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.444545][ T5897] usbtest 7-1:1.0: Linux gadget zero [ 57.446775][ T5897] usbtest 7-1:1.0: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 57.532820][ T5842] usb 8-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 57.535794][ T5842] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.369748][ T56] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 58.466583][ T42] audit: type=1800 audit(1785858919.826:9): pid=6020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.33" name="attr_allow_any_host" dev="configfs" ino=11320 res=0 errno=0 [ 58.473690][ T42] audit: type=1800 audit(1785858919.826:10): pid=6020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.33" name="device_path" dev="configfs" ino=11321 res=0 errno=0 [ 58.481084][ T42] audit: type=1800 audit(1785858919.836:11): pid=6020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.33" name="enable" dev="configfs" ino=11322 res=0 errno=0 [ 58.484305][ T6020] nvmet_tcp: enabling port 1 (127.0.0.1:4420) [ 58.532932][ T56] usb 5-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 58.536683][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.541264][ T56] usb 5-1: Product: syz [ 58.543062][ T56] usb 5-1: Manufacturer: syz [ 58.544974][ T56] usb 5-1: SerialNumber: syz [ 59.575184][ T6028] rdma_rxe: rxe_newlink: failed to add veth0 [ 59.624733][ T6030] ubi0: attaching mtd0 [ 59.628286][ T6030] ubi0: scanning is finished [ 59.630039][ T6030] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 59.752356][ T6030] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 60.038022][ T5816] usb 7-1: USB disconnect, device number 3 [ 60.080083][ T6035] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 60.167775][ T5842] usbhid 8-1:1.0: can't add hid device: -71 [ 60.172770][ T5842] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 60.181881][ T5842] usb 8-1: USB disconnect, device number 3 [ 60.205545][ T6038] e1000e 0000:00:02.0 eth1: removed PHC [ 60.221016][ T6036] md: serialize_policy is only effective for raid1 [ 60.266356][ T6041] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 60.268808][ T6041] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 60.271238][ T6041] lpc_ich 0000:00:00.0: I/O space for GPIO uninitialized [ 60.273385][ T6041] lpc_ich 0000:00:00.0: No MFD cells added [ 60.312304][ T6038] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 60.445795][ T6041] lpc_ich 0000:00:02.0: RCBA is disabled by hardware/BIOS, device disabled [ 60.922782][ T56] usb 5-1: USB disconnect, device number 3 [ 60.973577][ T6074] udevd[6074]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 61.520923][ T6086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.579058][ T6086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.636544][ T6086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.769621][ T6063] NFSD: Unable to initialize client recovery tracking! (-110) [ 61.772055][ T6063] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 61.775388][ T6063] NFSD: starting 90-second grace period (net f00003f7) [ 62.422225][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 62.422237][ T42] audit: type=1800 audit(1785858923.786:16): pid=6109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.46" name="zoned" dev="configfs" ino=7642 res=0 errno=0 [ 62.430014][ T42] audit: type=1800 audit(1785858923.786:17): pid=6109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.46" name="power" dev="configfs" ino=7643 res=0 errno=0 [ 62.433053][ T6109] null_blk: nullb1: using native zone append [ 62.459676][ T6109] null_blk: disk nullb1 created [ 62.522499][ T6113] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 62.522499][ T6113] [ 62.528166][ T6113] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 62.533771][ T6113] CIFS: Attempting to mount //127.0.0.1/share [ 62.879588][ T6067] NFSD: Unable to initialize client recovery tracking! (-110) [ 62.882850][ T6067] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 62.886484][ T6067] NFSD: starting 90-second grace period (net f00003f8) [ 63.355310][ T6113] CIFS: VFS: cifs_mount failed w/return code = -512 [ 64.109610][ T6079] NFSD: Unable to initialize client recovery tracking! (-110) [ 64.112246][ T6079] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 64.115696][ T6079] NFSD: starting 90-second grace period (net f0000586) [ 64.648213][ T6128] siw: device registration error -23 [ 64.651482][ T42] audit: type=1800 audit(1785858926.016:18): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.44" name="zoned" dev="configfs" ino=11411 res=0 errno=0 [ 64.659061][ T42] audit: type=1800 audit(1785858926.016:19): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.44" name="size" dev="configfs" ino=11412 res=0 errno=0 [ 64.667766][ T42] audit: type=1800 audit(1785858926.016:20): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.44" name="power" dev="configfs" ino=11413 res=0 errno=0 [ 64.889595][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 64.969551][ T5856] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 65.051829][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 65.055482][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.071076][ T9] usb 5-1: probing VID:PID(0424:012C) [ 65.076602][ T9] usb 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 65.079633][ T9] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 65.082215][ T9] usb 5-1: vub300 testing BULK IN EndPoint(2) 83 [ 65.084706][ T9] usb 5-1: vub300 testing BULK OUT EndPoint(3) 04 [ 65.087279][ T9] usb 5-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 65.125606][ T5856] usb 8-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 65.129559][ T5856] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.132780][ T5856] usb 8-1: Product: syz [ 65.135088][ T5856] usb 8-1: Manufacturer: syz [ 65.137006][ T5856] usb 8-1: SerialNumber: syz [ 65.471825][ T9] usb 5-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 65.523484][ T42] audit: type=1800 audit(1785858926.886:21): pid=6135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.54" name="attr_qid_max" dev="configfs" ino=11415 res=0 errno=0 [ 65.608414][ T6137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.669691][ T6137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.674472][ T9] usb 5-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 65.730144][ T6138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.378541][ T5856] usb 8-1: USB disconnect, device number 4 [ 66.399263][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 67.428971][ T5856] usb 5-1: USB disconnect, device number 4 [ 67.432328][ T10] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 67.452186][ T6145] siw: device registration error -23 [ 67.457288][ T42] audit: type=1800 audit(1785858928.816:22): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.58" name="attr_allow_any_host" dev="configfs" ino=8591 res=0 errno=0 [ 67.462061][ T6145] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 67.469677][ T42] audit: type=1800 audit(1785858928.816:23): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.58" name="device_path" dev="configfs" ino=10921 res=0 errno=0 [ 67.476649][ T6145] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 67.479421][ T42] audit: type=1800 audit(1785858928.826:24): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.58" name="enable" dev="configfs" ino=10922 res=0 errno=0 [ 67.489619][ T6145] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 67.492147][ T42] audit: type=1800 audit(1785858928.826:25): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.58" name="addr_trtype" dev="configfs" ino=10923 res=0 errno=0 [ 67.497092][ T6145] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 67.501257][ T42] audit: type=1800 audit(1785858928.836:26): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.58" name="addr_adrfam" dev="configfs" ino=10924 res=0 errno=0 [ 67.513647][ T42] audit: type=1800 audit(1785858928.846:27): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.58" name="addr_traddr" dev="configfs" ino=10925 res=0 errno=0 [ 67.519775][ T5856] USB vub300 remote SDIO host controller[0] now disconnected [ 67.523278][ T42] audit: type=1800 audit(1785858928.856:28): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.58" name="addr_trsvcid" dev="configfs" ino=10926 res=0 errno=0 [ 67.525159][ T6147] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 67.539591][ T6147] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 67.541901][ T6147] lpc_ich 0000:00:00.0: I/O space for GPIO uninitialized [ 67.544372][ T6147] lpc_ich 0000:00:00.0: No MFD cells added [ 67.546672][ T6147] lpc_ich 0000:00:02.0: RCBA is disabled by hardware/BIOS, device disabled [ 67.561777][ T6145] nvme nvme0: rdma connection establishment failed (-104) [ 67.610499][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:4487 [ 67.614493][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/0 [ 67.618286][ C0] preempt_count: 101, expected: 0 [ 67.619932][ C0] RCU nest depth: 0, expected: 0 [ 67.621459][ C0] 1 lock held by swapper/0/0: [ 67.622888][ C0] #0: ffffc90000007ca0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11f/0x610 [ 67.626751][ C0] Preemption disabled at: [ 67.626757][ C0] [] schedule_preempt_disabled+0x1d/0x30 [ 67.631389][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 67.631412][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.631422][ C0] Call Trace: [ 67.631443][ C0] [ 67.631450][ C0] dump_stack_lvl+0x100/0x190 [ 67.631472][ C0] __might_resched.cold+0x1ec/0x232 [ 67.631495][ C0] ? __pfx___might_resched+0x10/0x10 [ 67.631537][ C0] ? kfree_const+0x5f/0x70 [ 67.631558][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 67.631578][ C0] cancel_delayed_work_sync+0xb8/0xf0 [ 67.631598][ C0] mmc_free_host+0x19/0x30 [ 67.631614][ C0] vub300_inactivity_timer_expired+0x42f/0x550 [ 67.631634][ C0] call_timer_fn+0x19a/0x610 [ 67.631660][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 67.631682][ C0] ? __run_timers+0x747/0xb00 [ 67.631699][ C0] ? rcu_is_watching+0x12/0xc0 [ 67.631720][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 67.631738][ C0] __run_timers+0x757/0xb00 [ 67.631769][ C0] ? __pfx___run_timers+0x10/0x10 [ 67.631792][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 67.631812][ C0] run_timer_base+0x114/0x190 [ 67.631836][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 67.631864][ C0] run_timer_softirq+0x1a/0x50 [ 67.631885][ C0] handle_softirqs+0x1ea/0x9b0 [ 67.631907][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 67.631926][ C0] ? _raw_spin_unlock+0x28/0x50 [ 67.631943][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 67.631963][ C0] __irq_exit_rcu+0x162/0x210 [ 67.631977][ C0] irq_exit_rcu+0x9/0x30 [ 67.631994][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 67.632015][ C0] [ 67.632025][ C0] [ 67.632032][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 67.632050][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 67.632067][ C0] Code: 66 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 03 0e 13 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 67.632083][ C0] RSP: 0000:ffffffff8e807e10 EFLAGS: 00000202 [ 67.632097][ C0] RAX: 00000000000e51c7 RBX: ffffffff8e891480 RCX: ffffffff8bb892d5 [ 67.632108][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a9a27 RDI: ffffffff8c400a80 [ 67.632119][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed100564678d [ 67.632129][ C0] R10: ffff88802b233c6b R11: 0000000000000000 R12: 0000000000000000 [ 67.632137][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 67.632149][ C0] ? ct_kernel_exit+0x125/0x180 [ 67.632174][ C0] default_idle+0x9/0x10 [ 67.632195][ C0] default_idle_call+0x6c/0xb0 [ 67.632217][ C0] do_idle+0x3a7/0x5b0 [ 67.632231][ C0] ? __pfx_do_idle+0x10/0x10 [ 67.632248][ C0] ? rest_init+0x23d/0x260 [ 67.632268][ C0] cpu_startup_entry+0x4f/0x60 [ 67.632287][ C0] rest_init+0x251/0x260 [ 67.632301][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 67.632323][ C0] start_kernel+0x48e/0x490 [ 67.632347][ C0] x86_64_start_reservations+0x24/0x30 [ 67.632371][ C0] x86_64_start_kernel+0x12b/0x130 [ 67.632395][ C0] common_startup_64+0x13e/0x158 [ 67.632425][ C0] [ 67.633337][ C0] ODEBUG: object ffffc90000007a70 is NOT on stack ffffffff8e800000, but annotated. [ 67.634186][ C0] [ 67.634191][ C0] ====================================================== [ 67.634195][ C0] WARNING: possible circular locking dependency detected [ 67.634201][ C0] syzkaller #0 Tainted: G W [ 67.634210][ C0] ------------------------------------------------------ [ 67.634215][ C0] swapper/0/0 is trying to acquire lock: [ 67.634222][ C0] ffffffff8eaf3f60 (console_owner){..-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 67.634262][ C0] [ 67.634262][ C0] but task is already holding lock: [ 67.634267][ C0] ffffffff9b9683b0 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0xec/0x3d0 [ 67.634303][ C0] [ 67.634303][ C0] which lock already depends on the new lock. [ 67.634303][ C0] [ 67.634308][ C0] [ 67.634308][ C0] the existing dependency chain (in reverse order) is: [ 67.634313][ C0] [ 67.634313][ C0] -> #3 (&obj_hash[i].lock){-.-.}-{2:2}: [ 67.634333][ C0] lock_acquire+0x1b9/0x370 [ 67.634356][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 67.634369][ C0] debug_object_assert_init+0x142/0x310 [ 67.634391][ C0] hrtimer_start_range_ns+0x4e/0x240 [ 67.634409][ C0] rpm_suspend+0x788/0x11a0 [ 67.634431][ C0] rpm_idle+0x60c/0x790 [ 67.634449][ C0] __pm_runtime_idle+0xba/0x1a0 [ 67.634469][ C0] __device_attach+0x37e/0x4d0 [ 67.634490][ C0] device_initial_probe+0xaf/0xd0 [ 67.634511][ C0] bus_probe_device+0x64/0x160 [ 67.634527][ C0] device_add+0x121d/0x1970 [ 67.634539][ C0] serdev_controller_add+0x93/0x650 [ 67.634557][ C0] serdev_tty_port_register+0x195/0x290 [ 67.634576][ C0] tty_port_register_device_attr_serdev+0x107/0x1d0 [ 67.634601][ C0] serial_core_register_port+0xcdf/0x16f0 [ 67.634650][ C0] serial8250_register_8250_port+0x15af/0x2330 [ 67.634669][ C0] serial_pnp_probe+0x436/0x930 [ 67.634685][ C0] pnp_device_probe+0x2b3/0x4a0 [ 67.634702][ C0] really_probe+0x241/0xa60 [ 67.634716][ C0] __driver_probe_device+0x20e/0x450 [ 67.634734][ C0] driver_probe_device+0x4a/0x140 [ 67.634754][ C0] __driver_attach+0x21f/0x5b0 [ 67.634774][ C0] bus_for_each_dev+0x13e/0x1d0 [ 67.634790][ C0] bus_add_driver+0x305/0x5b0 [ 67.634803][ C0] driver_register+0x1e2/0x360 [ 67.634824][ C0] serial8250_init+0xcc/0x1c0 [ 67.634843][ C0] do_one_initcall+0x11d/0x700 [ 67.634863][ C0] kernel_init_freeable+0x6ea/0x7b0 [ 67.634883][ C0] kernel_init+0x1f/0x1e0 [ 67.634891][ C0] ret_from_fork+0x72b/0xd50 [ 67.634906][ C0] ret_from_fork_asm+0x1a/0x30 [ 67.634925][ C0] [ 67.634925][ C0] -> #2 (&dev->power.lock){-...}-{3:3}: [ 67.634947][ C0] lock_acquire+0x1b9/0x370 [ 67.634968][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 67.634980][ C0] __pm_runtime_resume+0xa9/0x170 [ 67.634997][ C0] __uart_start+0x1b0/0x510 [ 67.635013][ C0] uart_write+0x211/0xb20 [ 67.635038][ C0] n_tty_write+0x431/0x1160 [ 67.635052][ C0] file_tty_write.isra.0+0x4d2/0x890 [ 67.635070][ C0] redirected_tty_write+0xd4/0x120 [ 67.635087][ C0] vfs_write+0x6ac/0x1050 [ 67.635101][ C0] ksys_write+0x12a/0x250 [ 67.635113][ C0] do_syscall_64+0x115/0x840 [ 67.635133][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.635148][ C0] [ 67.635148][ C0] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 67.635164][ C0] lock_acquire+0x1b9/0x370 [ 67.635185][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 67.635200][ C0] serial8250_console_write+0x177/0x1a50 [ 67.635215][ C0] console_flush_one_record+0x790/0xe50 [ 67.635233][ C0] console_unlock+0x103/0x260 [ 67.635245][ C0] vprintk_emit+0x407/0x6b0 [ 67.635262][ C0] _printk+0xcf/0x110 [ 67.635275][ C0] register_console.cold+0xc0/0x248 [ 67.635290][ C0] univ8250_console_init+0x6f/0x80 [ 67.635308][ C0] console_init+0x3d5/0x5b0 [ 67.635322][ C0] start_kernel+0x314/0x490 [ 67.635339][ C0] x86_64_start_reservations+0x24/0x30 [ 67.635361][ C0] x86_64_start_kernel+0x12b/0x130 [ 67.635382][ C0] common_startup_64+0x13e/0x158 [ 67.635403][ C0] [ 67.635403][ C0] -> #0 (console_owner){..-.}-{0:0}: [ 67.635417][ C0] check_prev_add+0xeb/0xe60 [ 67.635437][ C0] __lock_acquire+0x136c/0x1a40 [ 67.635459][ C0] lock_acquire+0x1b9/0x370 [ 67.635481][ C0] console_lock_spinning_enable+0x72/0x80 [ 67.635495][ C0] console_flush_one_record+0x739/0xe50 [ 67.635511][ C0] console_unlock+0x103/0x260 [ 67.635526][ C0] vprintk_emit+0x407/0x6b0 [ 67.635543][ C0] _printk+0xcf/0x110 [ 67.635556][ C0] lookup_object_or_alloc.part.0.cold+0x18/0x40 [ 67.635573][ C0] __debug_object_init+0x2a9/0x3d0 [ 67.635592][ C0] __synchronize_srcu+0x1c3/0x300 [ 67.635607][ C0] wakeup_source_unregister.part.0+0x12c/0x540 [ 67.635629][ C0] wakeup_source_unregister+0x1f/0x30 [ 67.635650][ C0] mmc_host_classdev_release+0x42/0x120 [ 67.635665][ C0] device_release+0xd2/0x270 [ 67.635680][ C0] kobject_put+0x1f7/0x640 [ 67.635702][ C0] put_device+0x1f/0x30 [ 67.635717][ C0] vub300_inactivity_timer_expired+0x42f/0x550 [ 67.635733][ C0] call_timer_fn+0x19a/0x610 [ 67.635749][ C0] __run_timers+0x757/0xb00 [ 67.635770][ C0] run_timer_base+0x114/0x190 [ 67.635791][ C0] run_timer_softirq+0x1a/0x50 [ 67.635812][ C0] handle_softirqs+0x1ea/0x9b0 [ 67.635824][ C0] __irq_exit_rcu+0x162/0x210 [ 67.635839][ C0] irq_exit_rcu+0x9/0x30 [ 67.635854][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 67.635873][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 67.635889][ C0] pv_native_safe_halt+0xf/0x20 [ 67.635905][ C0] default_idle+0x9/0x10 [ 67.635923][ C0] default_idle_call+0x6c/0xb0 [ 67.635943][ C0] do_idle+0x3a7/0x5b0 [ 67.635959][ C0] cpu_startup_entry+0x4f/0x60 [ 67.635975][ C0] rest_init+0x251/0x260 [ 67.635987][ C0] start_kernel+0x48e/0x490 [ 67.636006][ C0] x86_64_start_reservations+0x24/0x30 [ 67.636032][ C0] x86_64_start_kernel+0x12b/0x130 [ 67.636052][ C0] common_startup_64+0x13e/0x158 [ 67.636070][ C0] [ 67.636070][ C0] other info that might help us debug this: [ 67.636070][ C0] [ 67.636074][ C0] Chain exists of: [ 67.636074][ C0] console_owner --> &dev->power.lock --> &obj_hash[i].lock [ 67.636074][ C0] [ 67.636097][ C0] Possible unsafe locking scenario: [ 67.636097][ C0] [ 67.636101][ C0] CPU0 CPU1 [ 67.636105][ C0] ---- ---- [ 67.636109][ C0] lock(&obj_hash[i].lock); [ 67.636119][ C0] lock(&dev->power.lock); [ 67.636130][ C0] lock(&obj_hash[i].lock); [ 67.636141][ C0] lock(console_owner); [ 67.636148][ C0] [ 67.636148][ C0] *** DEADLOCK *** [ 67.636148][ C0] [ 67.636151][ C0] 4 locks held by swapper/0/0: [ 67.636159][ C0] #0: ffffc90000007ca0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11f/0x610 [ 67.636202][ C0] #1: ffffffff9b9683b0 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0xec/0x3d0 [ 67.636240][ C0] #2: ffffffff8ebd43a0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 67.636274][ C0] #3: ffffffff8ebd4418 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 67.636312][ C0] [ 67.636312][ C0] stack backtrace: [ 67.636321][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 PREEMPT(full) [ 67.636344][ C0] Tainted: [W]=WARN [ 67.636349][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.636358][ C0] Call Trace: [ 67.636364][ C0] [ 67.636370][ C0] dump_stack_lvl+0x100/0x190 [ 67.636387][ C0] print_circular_bug.cold+0x178/0x1c7 [ 67.636406][ C0] check_noncircular+0x146/0x160 [ 67.636430][ C0] check_prev_add+0xeb/0xe60 [ 67.636454][ C0] __lock_acquire+0x136c/0x1a40 [ 67.636480][ C0] lock_acquire+0x1b9/0x370 [ 67.636502][ C0] ? console_lock_spinning_enable+0x61/0x80 [ 67.636521][ C0] ? console_lock_spinning_enable+0x4a/0x80 [ 67.636541][ C0] console_lock_spinning_enable+0x72/0x80 [ 67.636556][ C0] ? console_lock_spinning_enable+0x61/0x80 [ 67.636571][ C0] console_flush_one_record+0x739/0xe50 [ 67.636591][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 67.636610][ C0] ? __lock_acquire+0xd5b/0x1a40 [ 67.636635][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 67.636653][ C0] console_unlock+0x103/0x260 [ 67.636671][ C0] ? __pfx_console_unlock+0x10/0x10 [ 67.636691][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 67.636709][ C0] ? _printk+0xcf/0x110 [ 67.636723][ C0] vprintk_emit+0x407/0x6b0 [ 67.636736][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 67.636752][ C0] ? common_startup_64+0x13e/0x158 [ 67.636777][ C0] _printk+0xcf/0x110 [ 67.636791][ C0] ? __pfx__printk+0x10/0x10 [ 67.636807][ C0] ? do_raw_spin_lock+0x128/0x260 [ 67.636822][ C0] lookup_object_or_alloc.part.0.cold+0x18/0x40 [ 67.636842][ C0] __debug_object_init+0x2a9/0x3d0 [ 67.636865][ C0] ? __pfx___debug_object_init+0x10/0x10 [ 67.636889][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 67.636902][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 67.636913][ C0] ? __init_swait_queue_head+0xca/0x150 [ 67.636931][ C0] __synchronize_srcu+0x1c3/0x300 [ 67.636947][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 67.636965][ C0] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 67.636988][ C0] ? synchronize_srcu+0xa8/0x380 [ 67.637003][ C0] wakeup_source_unregister.part.0+0x12c/0x540 [ 67.637031][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 67.637049][ C0] wakeup_source_unregister+0x1f/0x30 [ 67.637069][ C0] mmc_host_classdev_release+0x42/0x120 [ 67.637081][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 67.637092][ C0] device_release+0xd2/0x270 [ 67.637103][ C0] kobject_put+0x1f7/0x640 [ 67.637120][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 67.637132][ C0] put_device+0x1f/0x30 [ 67.637143][ C0] vub300_inactivity_timer_expired+0x42f/0x550 [ 67.637154][ C0] call_timer_fn+0x19a/0x610 [ 67.637169][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 67.637185][ C0] ? __run_timers+0x747/0xb00 [ 67.637200][ C0] ? rcu_is_watching+0x12/0xc0 [ 67.637213][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 67.637225][ C0] __run_timers+0x757/0xb00 [ 67.637242][ C0] ? __pfx___run_timers+0x10/0x10 [ 67.637259][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 67.637272][ C0] run_timer_base+0x114/0x190 [ 67.637287][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 67.637307][ C0] run_timer_softirq+0x1a/0x50 [ 67.637327][ C0] handle_softirqs+0x1ea/0x9b0 [ 67.637342][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 67.637356][ C0] ? _raw_spin_unlock+0x28/0x50 [ 67.637370][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 67.637387][ C0] __irq_exit_rcu+0x162/0x210 [ 67.637401][ C0] irq_exit_rcu+0x9/0x30 [ 67.637415][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 67.637432][ C0] [ 67.637436][ C0] [ 67.637441][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 67.637457][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 67.637476][ C0] Code: 66 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 03 0e 13 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 67.637490][ C0] RSP: 0000:ffffffff8e807e10 EFLAGS: 00000202 [ 67.637502][ C0] RAX: 00000000000e51c7 RBX: ffffffff8e891480 RCX: ffffffff8bb892d5 [ 67.637513][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a9a27 RDI: ffffffff8c400a80 [ 67.637522][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed100564678d [ 67.637532][ C0] R10: ffff88802b233c6b R11: 0000000000000000 R12: 0000000000000000 [ 67.637542][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 67.637552][ C0] ? ct_kernel_exit+0x125/0x180 [ 67.637573][ C0] default_idle+0x9/0x10 [ 67.637592][ C0] default_idle_call+0x6c/0xb0 [ 67.637612][ C0] do_idle+0x3a7/0x5b0 [ 67.637628][ C0] ? __pfx_do_idle+0x10/0x10 [ 67.637643][ C0] ? rest_init+0x23d/0x260 [ 67.637658][ C0] cpu_startup_entry+0x4f/0x60 [ 67.637675][ C0] rest_init+0x251/0x260 [ 67.637687][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 67.637711][ C0] start_kernel+0x48e/0x490 [ 67.637731][ C0] x86_64_start_reservations+0x24/0x30 [ 67.637751][ C0] x86_64_start_kernel+0x12b/0x130 [ 67.637774][ C0] common_startup_64+0x13e/0x158 [ 67.637799][ C0] [ 67.899520][ T50] misc userio: Buffer overflowed, userio client isn't keeping up [ 67.900377][ C0] ------------[ cut here ]------------ [ 68.138531][ C0] 1 [ 68.138539][ C0] WARNING: lib/debugobjects.c:672 at lookup_object_or_alloc.part.0.cold+0x19/0x40, CPU#0: swapper/0/0 [ 68.142878][ C0] Modules linked in: [ 68.144226][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 PREEMPT(full) [ 68.147517][ C0] Tainted: [W]=WARN [ 68.148717][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.152191][ C0] RIP: 0010:lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 68.154458][ C0] Code: c4 60 5b 5d 41 5c 41 5d 41 5e 41 5f e9 19 85 85 0a 83 c5 01 89 2d 50 16 56 1a 4c 89 e6 48 c7 c7 c0 15 40 8c e8 c1 0c ec ff 90 <0f> 0b 90 e9 42 bf ee 03 83 c5 01 89 2d 2f 16 56 1a 49 39 c4 73 da [ 68.160801][ C0] RSP: 0000:ffffc90000007900 EFLAGS: 00010086 [ 68.162780][ C0] RAX: 0000000000000050 RBX: ffff88806c7bf268 RCX: 0000000000000000 [ 68.165343][ C0] RDX: 0000000000000050 RSI: ffffffff81e81829 RDI: fffff52000000f11 [ 68.167921][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 68.170499][ C0] R10: 0000000000000102 R11: 6d20202020202020 R12: ffffc90000007a70 [ 68.173011][ C0] R13: ffffffff8e891480 R14: 0000000000000001 R15: 0000000000000000 [ 68.175521][ C0] FS: 0000000000000000(0000) GS:ffff888096bdf000(0000) knlGS:0000000000000000 [ 68.178306][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.180387][ C0] CR2: 0000000034119ff8 CR3: 000000005512a000 CR4: 0000000000352ef0 [ 68.182853][ C0] Call Trace: [ 68.183948][ C0] [ 68.184875][ C0] __debug_object_init+0x2a9/0x3d0 [ 68.186484][ C0] ? __pfx___debug_object_init+0x10/0x10 [ 68.188350][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 68.190067][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 68.191841][ C0] ? __init_swait_queue_head+0xca/0x150 [ 68.193633][ C0] __synchronize_srcu+0x1c3/0x300 [ 68.195287][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 68.197119][ C0] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 68.198894][ C0] ? synchronize_srcu+0xa8/0x380 [ 68.200532][ C0] wakeup_source_unregister.part.0+0x12c/0x540 [ 68.202494][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 68.204516][ C0] wakeup_source_unregister+0x1f/0x30 [ 68.206272][ C0] mmc_host_classdev_release+0x42/0x120 [ 68.208103][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 68.210125][ C0] device_release+0xd2/0x270 [ 68.211681][ C0] kobject_put+0x1f7/0x640 [ 68.213123][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 68.215278][ C0] put_device+0x1f/0x30 [ 68.216616][ C0] vub300_inactivity_timer_expired+0x42f/0x550 [ 68.218637][ C0] call_timer_fn+0x19a/0x610 [ 68.220134][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 68.221827][ C0] ? __run_timers+0x747/0xb00 [ 68.223359][ C0] ? rcu_is_watching+0x12/0xc0 [ 68.224941][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 68.227107][ C0] __run_timers+0x757/0xb00 [ 68.228604][ C0] ? __pfx___run_timers+0x10/0x10 [ 68.230222][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 68.231868][ C0] run_timer_base+0x114/0x190 [ 68.233397][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 68.235094][ C0] run_timer_softirq+0x1a/0x50 [ 68.236679][ C0] handle_softirqs+0x1ea/0x9b0 [ 68.238294][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 68.240031][ C0] ? _raw_spin_unlock+0x28/0x50 [ 68.241598][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 68.243418][ C0] __irq_exit_rcu+0x162/0x210 [ 68.245029][ C0] irq_exit_rcu+0x9/0x30 [ 68.246538][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 68.248372][ C0] [ 68.249338][ C0] [ 68.250332][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 68.252271][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 68.254060][ C0] Code: 66 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 03 0e 13 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 68.260238][ C0] RSP: 0000:ffffffff8e807e10 EFLAGS: 00000202 [ 68.262174][ C0] RAX: 00000000000e51c7 RBX: ffffffff8e891480 RCX: ffffffff8bb892d5 [ 68.264738][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a9a27 RDI: ffffffff8c400a80 [ 68.267315][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed100564678d [ 68.269818][ C0] R10: ffff88802b233c6b R11: 0000000000000000 R12: 0000000000000000 [ 68.272389][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 68.274926][ C0] ? ct_kernel_exit+0x125/0x180 [ 68.276525][ C0] default_idle+0x9/0x10 [ 68.277952][ C0] default_idle_call+0x6c/0xb0 [ 68.279509][ C0] do_idle+0x3a7/0x5b0 [ 68.280842][ C0] ? __pfx_do_idle+0x10/0x10 [ 68.282327][ C0] ? rest_init+0x23d/0x260 [ 68.283802][ C0] cpu_startup_entry+0x4f/0x60 [ 68.285346][ C0] rest_init+0x251/0x260 [ 68.286747][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 68.288622][ C0] start_kernel+0x48e/0x490 [ 68.290060][ C0] x86_64_start_reservations+0x24/0x30 [ 68.291804][ C0] x86_64_start_kernel+0x12b/0x130 [ 68.293412][ C0] common_startup_64+0x13e/0x158 [ 68.294972][ C0] [ 68.295988][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 68.298290][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 PREEMPT(full) [ 68.301524][ C0] Tainted: [W]=WARN [ 68.302742][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.305852][ C0] Call Trace: [ 68.306998][ C0] [ 68.307916][ C0] dump_stack_lvl+0x100/0x190 [ 68.309389][ C0] vpanic+0x552/0x970 [ 68.310695][ C0] ? __pfx_vpanic+0x10/0x10 [ 68.312118][ C0] ? lock_release+0x24d/0x310 [ 68.313591][ C0] panic+0xd1/0xe0 [ 68.314779][ C0] ? __pfx_panic+0x10/0x10 [ 68.316179][ C0] ? check_panic_on_warn+0x1f/0x90 [ 68.317853][ C0] check_panic_on_warn.cold+0x19/0x34 [ 68.319526][ C0] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 68.321532][ C0] __warn.cold+0x191/0x318 [ 68.322936][ C0] __report_bug+0x30f/0x440 [ 68.324364][ C0] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 68.326365][ C0] ? __pfx___report_bug+0x10/0x10 [ 68.328014][ C0] ? irq_work_queue+0xce/0x100 [ 68.329515][ C0] ? __wake_up_klogd+0xe2/0x140 [ 68.331067][ C0] ? vprintk_emit+0x1c9/0x6b0 [ 68.332538][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 68.334111][ C0] ? common_startup_64+0x13e/0x158 [ 68.335711][ C0] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 68.337761][ C0] report_bug+0xb2/0x220 [ 68.339172][ C0] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 68.341215][ C0] handle_bug+0x16a/0x2a0 [ 68.342677][ C0] exc_invalid_op+0x17/0x50 [ 68.344148][ C0] asm_exc_invalid_op+0x1a/0x20 [ 68.345717][ C0] RIP: 0010:lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 68.348327][ C0] Code: c4 60 5b 5d 41 5c 41 5d 41 5e 41 5f e9 19 85 85 0a 83 c5 01 89 2d 50 16 56 1a 4c 89 e6 48 c7 c7 c0 15 40 8c e8 c1 0c ec ff 90 <0f> 0b 90 e9 42 bf ee 03 83 c5 01 89 2d 2f 16 56 1a 49 39 c4 73 da [ 68.354576][ C0] RSP: 0000:ffffc90000007900 EFLAGS: 00010086 [ 68.356586][ C0] RAX: 0000000000000050 RBX: ffff88806c7bf268 RCX: 0000000000000000 [ 68.359193][ C0] RDX: 0000000000000050 RSI: ffffffff81e81829 RDI: fffff52000000f11 [ 68.361730][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 68.364286][ C0] R10: 0000000000000102 R11: 6d20202020202020 R12: ffffc90000007a70 [ 68.366883][ C0] R13: ffffffff8e891480 R14: 0000000000000001 R15: 0000000000000000 [ 68.369498][ C0] ? vprintk_emit+0x1c9/0x6b0 [ 68.371093][ C0] __debug_object_init+0x2a9/0x3d0 [ 68.372748][ C0] ? __pfx___debug_object_init+0x10/0x10 [ 68.374578][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 68.376309][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 68.378126][ C0] ? __init_swait_queue_head+0xca/0x150 [ 68.379917][ C0] __synchronize_srcu+0x1c3/0x300 [ 68.381576][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 68.383419][ C0] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 68.385205][ C0] ? synchronize_srcu+0xa8/0x380 [ 68.386836][ C0] wakeup_source_unregister.part.0+0x12c/0x540 [ 68.388838][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 68.390861][ C0] wakeup_source_unregister+0x1f/0x30 [ 68.392625][ C0] mmc_host_classdev_release+0x42/0x120 [ 68.394393][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 68.396396][ C0] device_release+0xd2/0x270 [ 68.397927][ C0] kobject_put+0x1f7/0x640 [ 68.399458][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 68.401603][ C0] put_device+0x1f/0x30 [ 68.402967][ C0] vub300_inactivity_timer_expired+0x42f/0x550 [ 68.404979][ C0] call_timer_fn+0x19a/0x610 [ 68.406474][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 68.408473][ C0] ? __run_timers+0x747/0xb00 [ 68.409953][ C0] ? rcu_is_watching+0x12/0xc0 [ 68.411539][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 68.413683][ C0] __run_timers+0x757/0xb00 [ 68.415191][ C0] ? __pfx___run_timers+0x10/0x10 [ 68.416858][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 68.418510][ C0] run_timer_base+0x114/0x190 [ 68.420046][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 68.421740][ C0] run_timer_softirq+0x1a/0x50 [ 68.423338][ C0] handle_softirqs+0x1ea/0x9b0 [ 68.424898][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 68.426638][ C0] ? _raw_spin_unlock+0x28/0x50 [ 68.428237][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 68.430072][ C0] __irq_exit_rcu+0x162/0x210 [ 68.431620][ C0] irq_exit_rcu+0x9/0x30 [ 68.432989][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 68.434825][ C0] [ 68.435797][ C0] [ 68.436793][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 68.438733][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 68.440572][ C0] Code: 66 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 03 0e 13 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 68.446738][ C0] RSP: 0000:ffffffff8e807e10 EFLAGS: 00000202 [ 68.448669][ C0] RAX: 00000000000e51c7 RBX: ffffffff8e891480 RCX: ffffffff8bb892d5 [ 68.451527][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a9a27 RDI: ffffffff8c400a80 [ 68.454047][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed100564678d [ 68.456570][ C0] R10: ffff88802b233c6b R11: 0000000000000000 R12: 0000000000000000 [ 68.459383][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 68.462460][ C0] ? ct_kernel_exit+0x125/0x180 [ 68.464143][ C0] default_idle+0x9/0x10 [ 68.465489][ C0] default_idle_call+0x6c/0xb0 [ 68.467070][ C0] do_idle+0x3a7/0x5b0 [ 68.468325][ C0] ? __pfx_do_idle+0x10/0x10 [ 68.469736][ C0] ? rest_init+0x23d/0x260 [ 68.471165][ C0] cpu_startup_entry+0x4f/0x60 [ 68.472678][ C0] rest_init+0x251/0x260 [ 68.474213][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 68.475993][ C0] start_kernel+0x48e/0x490 [ 68.477603][ C0] x86_64_start_reservations+0x24/0x30 [ 68.479365][ C0] x86_64_start_kernel+0x12b/0x130 [ 68.481061][ C0] common_startup_64+0x13e/0x158 [ 68.482675][ C0] [ 68.484448][ C0] Kernel Offset: disabled [ 68.485860][ C0] Rebooting in 86400 seconds..