last executing test programs: 51.902401963s ago: executing program 1 (id=64): syz_usb_connect(0x0, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201402505a1a400010102030109028a0002010080fa080b00020e03000209040000000e0100000d240100012800808d5b000101122402010102000000000000000002000009240302010100010009040100000e0200000e240101370081000200000001010b240601010101000000001e240701008002e0010000ca080000ca080060090015160500011516050009040101010e02000007058105000201"], 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000200)={0x1, @pix={0x280, 0x1e0, 0x474a504d}}) 51.336938267s ago: executing program 3 (id=67): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000600)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000f00)={0x34, &(0x7f0000000cc0)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001240)={0x34, &(0x7f0000001080)={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001700)={0x34, &(0x7f0000001500)={0x20, 0x18, 0x1, ')'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000002180)={0x34, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000500)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000002540)={0x34, &(0x7f0000002340)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'syzkaller0\x00', &(0x7f0000000200)=@ethtool_eeprom={0xc, 0x78a5, 0x0, 0x4, "00112233"}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000300)={'syzkaller1\x00', &(0x7f0000000200)=@ethtool_eeprom={0xc, 0x78a5, 0x0, 0x4, "00112233"}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000400)={'veth0\x00', &(0x7f0000000200)=@ethtool_eeprom={0xc, 0x78a5, 0x0, 0x4, "00112233"}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'lo\x00', &(0x7f0000000200)=@ethtool_eeprom={0xc, 0x78a5, 0x0, 0x4, "00112233"}}) 50.069257948s ago: executing program 1 (id=71): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/sub\x00', 0x200) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/sub\x00', 0x0) 49.941608032s ago: executing program 1 (id=72): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000100)=@usbdevfs_connect) 48.633228325s ago: executing program 1 (id=77): syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402505a5a40001000000010902200001010080320904000002080650000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000100)={0x2}, 0x0) mkdir(&(0x7f0000000200)='./proc_dir\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='proc\x00', &(0x7f0000000400)='./proc_dir\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc_dir/scsi/usb-storage/0\x00', 0x0, 0x0) read(r0, &(0x7f0000000700)=""/100, 0x64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc_dir/scsi/usb-storage/1\x00', 0x0, 0x0) read(r1, &(0x7f0000000900)=""/100, 0x64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc_dir/scsi/usb-storage/2\x00', 0x0, 0x0) read(r2, &(0x7f0000000b00)=""/100, 0x64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./proc_dir/scsi/usb-storage/3\x00', 0x0, 0x0) read(r3, &(0x7f0000000d00)=""/100, 0x64) 48.171004956s ago: executing program 3 (id=81): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x81, 0x2, 0x40}, {0x9, 0x5, 0x2, 0x2, 0x40}, {0x9, 0x5, 0x83, 0x3, 0x20, 0x1}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x8, {0x8, 0x11, "0100"}}, 0x0}, 0x0) (async) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x8, {0x8, 0x11, "0100"}}, 0x0}, 0x0) (async) nanosleep(&(0x7f0000000300)={0x2}, 0x0) 45.182854562s ago: executing program 1 (id=93): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/file_1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/file_2\x00', 0x42, 0x1ff) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/file_3\x00', 0x42, 0x1ff) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt/file_4\x00', 0x42, 0x1ff) close(r3) unlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt/file_1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt/file_2\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/file_3\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file_4\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/filler_1\x00', 0x42, 0x1ff) write(r4, &(0x7f0000000380)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r4, &(0x7f00000003c0)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r4, &(0x7f0000000400)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r4, &(0x7f0000000440)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/filler_2\x00', 0x42, 0x1ff) write(r5, &(0x7f00000004c0)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r5, &(0x7f0000000500)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r5, &(0x7f0000000540)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r5, &(0x7f0000000580)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/filler_3\x00', 0x42, 0x1ff) write(r6, &(0x7f0000000600)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r6, &(0x7f0000000640)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r6, &(0x7f0000000680)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r6, &(0x7f00000006c0)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./mnt/filler_4\x00', 0x42, 0x1ff) write(r7, &(0x7f0000000740)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r7, &(0x7f0000000780)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r7, &(0x7f00000007c0)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r7, &(0x7f0000000800)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) close(r7) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) 45.052814395s ago: executing program 3 (id=95): syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02000200"], 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x10) syz_open_dev$char_usb(0xc, 0xb4, 0x30) syz_open_dev$char_usb(0xc, 0xb4, 0x40) syz_open_dev$char_usb(0xc, 0xb4, 0x60) syz_open_dev$char_usb(0xc, 0xb4, 0x70) syz_open_dev$char_usb(0xc, 0xb4, 0x80) syz_open_dev$char_usb(0xc, 0xb4, 0xa0) syz_open_dev$char_usb(0xc, 0xb4, 0xb0) syz_open_dev$char_usb(0xc, 0xb4, 0xc0) syz_open_dev$char_usb(0xc, 0xb4, 0xd0) syz_open_dev$char_usb(0xc, 0xb4, 0xf0) 44.803585131s ago: executing program 1 (id=97): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/c1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/c1/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/c1/comms/1/local\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/c1/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000250)="020000007f00000100"/128, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/c1/comms/1/nodeid\x00', 0x1, 0x0) write(r2, &(0x7f0000000260)='1', 0x1) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r3, &(0x7f0000000300)="0600000000000000020000000401000000000000000000006c733100"/128, 0x78) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./dlm_node\x00', 0x81b6, 0xb00) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dlm_node\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)="0600000000000000020000000101000005040000000000000000000000000000000000000000000000000000010000000000000000010000007f00000000000000000000000000000000000000020000007f000000000000000000000000000000000000000000000000000000000000000000007265733100", 0x7d) write(r4, &(0x7f0000000500)="060000000000000002000000020100000000000000000000010000000000000000000000000000000000000000000000010000000000000000010000007f00000000000000000000000000000000000000020000007f00"/120, 0x78) write(r4, &(0x7f0000000500)="060000000000000002000000020100000000000000000000010000000000000000000000000000000000000000000000010000000000000000010000007f00000000000000000000000000000000000000020000007f00"/120, 0x78) 41.903027645s ago: executing program 3 (id=108): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f5000705810200020007050202000200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000080)={0x2}, 0x0) 38.825653722s ago: executing program 3 (id=127): mkdir(&(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='abcdee', 0x6) close(r0) 38.615128027s ago: executing program 3 (id=129): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='mem\n\x00'/16, 0x4) 29.020188799s ago: executing program 32 (id=97): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/c1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/c1/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/c1/comms/1/local\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/c1/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000250)="020000007f00000100"/128, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/c1/comms/1/nodeid\x00', 0x1, 0x0) write(r2, &(0x7f0000000260)='1', 0x1) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r3, &(0x7f0000000300)="0600000000000000020000000401000000000000000000006c733100"/128, 0x78) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./dlm_node\x00', 0x81b6, 0xb00) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dlm_node\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)="0600000000000000020000000101000005040000000000000000000000000000000000000000000000000000010000000000000000010000007f00000000000000000000000000000000000000020000007f000000000000000000000000000000000000000000000000000000000000000000007265733100", 0x7d) write(r4, &(0x7f0000000500)="060000000000000002000000020100000000000000000000010000000000000000000000000000000000000000000000010000000000000000010000007f00000000000000000000000000000000000000020000007f00"/120, 0x78) write(r4, &(0x7f0000000500)="060000000000000002000000020100000000000000000000010000000000000000000000000000000000000000000000010000000000000000010000007f00000000000000000000000000000000000000020000007f00"/120, 0x78) 28.275678897s ago: executing program 0 (id=155): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='debugfs\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/kvm\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000300)='vcpu_exit_reason\x00', 0x0, 0x0) close(r2) 28.048640333s ago: executing program 0 (id=156): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='gpio-keys\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/gpio-keys/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='pcspkr\x00', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='leds-gpio\x00', 0xa) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/leds-gpio/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='pcspkr\x00', 0x7) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/alarmtimer/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='gpio-keys\x00', 0xa) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/gpio-keys/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='alarmtimer\x00', 0xb) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='leds-pwm\x00', 0x9) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/leds-pwm/bind\x00', 0x1, 0x0) write(r7, &(0x7f0000000400)='pcspkr\x00', 0x7) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r8, &(0x7f0000000200)='gpio-keys-polled\x00', 0x11) close(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/gpio-keys-polled/bind\x00', 0x1, 0x0) write(r9, &(0x7f0000000400)='pcspkr\x00', 0x7) close(r9) 27.841967008s ago: executing program 0 (id=158): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/dynamic_debug/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='file f_subset.c +p\n', 0x13) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='0x0525', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='0xa4a1', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='dummy_udc.0', 0xb) close(r3) clock_nanosleep(0x0, 0x0, &(0x7f0000000580)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00000005c0)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000640)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000680)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00000006c0)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000740)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000780)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00000007c0)={0x0, 0x5f5e100}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000840)='\n', 0x1) close(r4) 27.303085432s ago: executing program 4 (id=162): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@wrmsr={0x0, 0x0, {0x40000083, 0x1}}]}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000300)={0x1, 0x0, [{0x40000001, 0x0, 0x0, 0x31237648}]}) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000000400)) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae05) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 26.902695562s ago: executing program 0 (id=163): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040a41520900001010203010902270001010080fa0904000003ff000000070581024000000705020240000007058402400000"], 0x0) nanosleep(&(0x7f0000000040)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/usb/drivers/dvb_usb_af9005/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='5-1:1.0', 0x7) 26.727030636s ago: executing program 4 (id=165): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000200)={0x8, 0x0, 0x0}, &(0x7f0000000300)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x1, 0x0) ioctl$USBDEVFS_RESET(r1, 0x5514) 25.162635256s ago: executing program 2 (id=169): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x0, 0x0, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x108) nanosleep(&(0x7f0000002000)={0x0, 0xbebc200}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000003000), 0x1, 0x2) write$hidraw(r1, &(0x7f0000004000)='12345678', 0x8) 24.465534533s ago: executing program 2 (id=170): syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040450c486200010102000109021900010100a0320904000001ff00000007058101100001"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000200)={0x9963793, 0x64}) 23.984702956s ago: executing program 0 (id=171): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='deny', 0x4) 23.79001957s ago: executing program 0 (id=172): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='disk', 0x4) close(r0) 23.569705416s ago: executing program 33 (id=129): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='mem\n\x00'/16, 0x4) 23.533087237s ago: executing program 4 (id=174): r0 = syz_usb_connect(0x2, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0481c20001000000010902200001010080320904000002030000000705810310000a0705020310000a"], &(0x7f0000000080)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x40, 0x7, 0x2, 0x14f}, &(0x7f0000000300)={0x40, 0x9, 0x1, 0x4d}, &(0x7f0000000400)={0x40, 0xb, 0x2, 'P\n'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22.003175716s ago: executing program 2 (id=179): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 20.396547186s ago: executing program 4 (id=180): syz_usb_connect(0x1, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0621010001010100010902200001010080500904000002ff0000000705810240000007050202400000"], 0x0) nanosleep(&(0x7f0000000300)={0x3}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000400)={0x0, 0x0, 0x1002}) 19.737163012s ago: executing program 2 (id=181): syz_usb_connect(0x2, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040341278560001000000010902200001010080320904000002fe0300000705810240000007050202400000"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xb0) ioctl$int_out(r0, 0xc0045b0f, &(0x7f0000000100)) 19.154380617s ago: executing program 6 (id=173): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) delete_module(&(0x7f0000000000)='snd_dummy\x00', 0x0) 17.712022974s ago: executing program 6 (id=184): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/kvm/parameters/force_emulation_prefix\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\x00', 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@code={0xa, 0x1c, {"0f20c00f0b6b766d0f22c0"}}, @uexit={0x0, 0x18, 0xface}], 0x34}) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r5, 0x3, 0x11, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17.435299381s ago: executing program 6 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./ath9k_htc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./ath9k_htc/htc_9271-1.4.0.fw\x00', 0x41, 0x1ff) write(r0, &(0x7f0000000100)='1234567890\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./htc_9271.fw\x00', 0x41, 0x1ff) write(r1, &(0x7f0000000200)='1234567890\x00', 0xa) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/module/firmware_class/parameters/path\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='./\x00', 0x3) close(r2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) 17.327026243s ago: executing program 2 (id=186): r0 = creat(&(0x7f0000000000)='file0\x00', 0x1ff) read(r0, &(0x7f0000001700)=""/100, 0x64) 17.252722035s ago: executing program 4 (id=187): epoll_wait(0xffffffff, 0x0, 0x0, 0x4b0) 17.178953617s ago: executing program 2 (id=188): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="c704250003e0fe01000000f4", 0xc}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17.05242912s ago: executing program 4 (id=189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@wrmsr={0x65, 0x18, {0x40000082, 0x1}}]}) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000000080)) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16.836529736s ago: executing program 5 (id=191): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='config\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff) r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f00000001c0)='idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='0x1d6b\x00', 0x6) r3 = openat(r1, &(0x7f0000000240)='idProduct\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0x0104\x00', 0x6) mkdirat(r1, &(0x7f00000002c0)='strings/0x409\x00', 0x1ff) openat(r1, &(0x7f0000000300)='strings/0x409\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000004c0)='functions/uac2.usb0\x00', 0x1ff) mkdirat(r1, &(0x7f0000000500)='configs/c.1\x00', 0x1ff) r4 = openat(r1, &(0x7f0000000540)='configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000680)='usb_gadget/g1/functions/uac2.usb0\x00', r4, &(0x7f0000000700)='uac2.usb0\x00') r5 = openat(r1, &(0x7f0000000740)='UDC\x00', 0x2, 0x0) write(r5, &(0x7f0000000780)='dummy_udc.0\x00', 0xc) nanosleep(&(0x7f0000000a00)={0x0, 0x5f5e100}, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000c00)={0x0, [[0x1], [0x1], [0x4]], '\x00', [{0x2, 0x2}, {0x10, 0x10}, {0x10, 0x10}, {0x2, 0x2}, {0xbb80, 0xbb80}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r6, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r6, 0x4142, 0x0) 16.535436983s ago: executing program 5 (id=192): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/xhci_hcd/0000:00:01.0/uevent\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/xhci_hcd/0000:00:02.0/uevent\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/drivers/xhci_hcd/0000:00:03.0/uevent\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/drivers/xhci_hcd/0000:00:1d.0/uevent\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/drivers/xhci_hcd/0000:00:1a.0/uevent\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/xhci_hcd/unbind\x00', 0x1, 0x0) 16.371027737s ago: executing program 5 (id=193): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, &(0x7f0000000100)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/drm/card0/uevent\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='detect\x00', 0x7) close(r0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000100)) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r3, &(0x7f0000000300)=' \x00\x00\x00', 0x4) read(r2, &(0x7f0000000154), 0x4) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)) 16.288325669s ago: executing program 5 (id=194): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, &(0x7f0000000400)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x10000, 0x3, 0x11, r0, 0x0) 16.187888442s ago: executing program 5 (id=195): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x880, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4442, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000100000)='\x00', 0x10000, 0x0) 15.611007976s ago: executing program 5 (id=196): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x1}}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 8.580817793s ago: executing program 34 (id=172): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='disk', 0x4) close(r0) 1.523946631s ago: executing program 35 (id=188): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="c704250003e0fe01000000f4", 0xc}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.473378942s ago: executing program 36 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./ath9k_htc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./ath9k_htc/htc_9271-1.4.0.fw\x00', 0x41, 0x1ff) write(r0, &(0x7f0000000100)='1234567890\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./htc_9271.fw\x00', 0x41, 0x1ff) write(r1, &(0x7f0000000200)='1234567890\x00', 0xa) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/module/firmware_class/parameters/path\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='./\x00', 0x3) close(r2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) 1.413563584s ago: executing program 37 (id=189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@wrmsr={0x65, 0x18, {0x40000082, 0x1}}]}) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000000080)) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 38 (id=196): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x1}}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) kernel console output (not intermixed with test programs): [ 194.236668][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.243074][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.894881][ T4787] Freezing of tasks failed after 20.006 seconds (17 tasks refusing to freeze, wq_busy=0): [ 198.905208][ T4787] task:syz-executor state:S stack:22384 pid:4275 ppid:1 flags:0x00004002 [ 198.915415][ T4787] Call Trace: [ 198.918761][ T4787] [ 198.921802][ T4787] __schedule+0x107f/0x4030 [ 198.926409][ T4787] ? do_wait+0x6cb/0xb80 [ 198.932428][ T4787] ? __sched_text_start+0x8/0x8 [ 198.937432][ T4787] ? __lock_acquire+0x7c40/0x7c40 [ 198.943013][ T4787] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 198.949071][ T4787] ? _raw_spin_unlock+0x40/0x40 [ 198.954066][ T4787] schedule+0xb9/0x180 [ 198.958216][ T4787] do_wait+0x7a5/0xb80 [ 198.962417][ T4787] kernel_wait4+0x22b/0x2b0 [ 198.967008][ T4787] ? __ia32_sys_waitid+0xc0/0xc0 [ 198.972065][ T4787] ? kernel_waitid+0x3d0/0x3d0 [ 198.976902][ T4787] ? zap_pid_ns_processes+0x13a/0x690 [ 198.982363][ T4787] zap_pid_ns_processes+0x3a0/0x690 [ 198.987626][ T4787] ? zap_pid_ns_processes+0x13a/0x690 [ 198.993143][ T4787] ? lock_chain_count+0x20/0x20 [ 198.998142][ T4787] ? put_pid_ns+0x130/0x130 [ 199.002774][ T4787] ? _raw_write_unlock_irq+0x1f/0x40 [ 199.008113][ T4787] ? lockdep_hardirqs_on+0x94/0x140 [ 199.013481][ T4787] do_exit+0x20a2/0x2570 [ 199.017842][ T4787] ? put_task_struct+0x80/0x80 [ 199.022725][ T4787] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 199.028810][ T4787] ? lock_chain_count+0x20/0x20 [ 199.033804][ T4787] ? _raw_spin_lock_irq+0xb7/0xf0 [ 199.038915][ T4787] do_group_exit+0x229/0x2e0 [ 199.043640][ T4787] ? lockdep_hardirqs_on+0x94/0x140 [ 199.048912][ T4787] get_signal+0x1259/0x1340 [ 199.053575][ T4787] arch_do_signal_or_restart+0xc4/0x1310 [ 199.059306][ T4787] ? __ia32_sys_waitid+0xc0/0xc0 [ 199.064357][ T4787] ? kernel_waitid+0x3d0/0x3d0 [ 199.069226][ T4787] ? __might_sleep+0xd0/0xd0 [ 199.073876][ T4787] ? get_sigframe_size+0x10/0x10 [ 199.078874][ T4787] ? __x64_sys_wait4+0x1b4/0x230 [ 199.083934][ T4787] ? exit_to_user_mode_loop+0x3b/0x110 [ 199.089521][ T4787] exit_to_user_mode_loop+0x70/0x110 [ 199.094945][ T4787] exit_to_user_mode_prepare+0xee/0x180 [ 199.100634][ T4787] syscall_exit_to_user_mode+0x16/0x40 [ 199.106162][ T4787] do_syscall_64+0x58/0xa0 [ 199.110785][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 199.115534][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 199.120352][ T4787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.126551][ T4787] RIP: 0033:0x7f36bd95e90e [ 199.131090][ T4787] RSP: 002b:00007fffe0851e88 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 199.139633][ T4787] RAX: fffffffffffffe00 RBX: 00005555569df500 RCX: 00007f36bd95e90e [ 199.147673][ T4787] RDX: 0000000040000000 RSI: 00007fffe0851f2c RDI: ffffffffffffffff [ 199.155767][ T4787] RBP: 00007fffe0851f2c R08: 0000000000000000 R09: 0000000000000000 [ 199.163835][ T4787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 199.171914][ T4787] R13: 00005555569f2a00 R14: 000000000001bc83 R15: 00007fffe0851f80 [ 199.180048][ T4787] [ 199.183226][ T4787] task:syz-executor state:S stack:22160 pid:4279 ppid:1 flags:0x00004002 [ 199.192588][ T4787] Call Trace: [ 199.195919][ T4787] [ 199.198911][ T4787] __schedule+0x107f/0x4030 [ 199.203571][ T4787] ? do_wait+0x6cb/0xb80 [ 199.207905][ T4787] ? __sched_text_start+0x8/0x8 [ 199.213225][ T4787] ? __lock_acquire+0x7c40/0x7c40 [ 199.218338][ T4787] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 199.224340][ T4787] ? _raw_spin_unlock+0x40/0x40 [ 199.229382][ T4787] schedule+0xb9/0x180 [ 199.233522][ T4787] do_wait+0x7a5/0xb80 [ 199.237681][ T4787] kernel_wait4+0x22b/0x2b0 [ 199.242531][ T4787] ? __ia32_sys_waitid+0xc0/0xc0 [ 199.247559][ T4787] ? kernel_waitid+0x3d0/0x3d0 [ 199.252506][ T4787] ? zap_pid_ns_processes+0x13a/0x690 [ 199.257981][ T4787] zap_pid_ns_processes+0x3a0/0x690 [ 199.263313][ T4787] ? zap_pid_ns_processes+0x13a/0x690 [ 199.268740][ T4787] ? lock_chain_count+0x20/0x20 [ 199.273671][ T4787] ? put_pid_ns+0x130/0x130 [ 199.278230][ T4787] ? _raw_write_unlock_irq+0x1f/0x40 [ 199.283620][ T4787] ? lockdep_hardirqs_on+0x94/0x140 [ 199.288876][ T4787] do_exit+0x20a2/0x2570 [ 199.293230][ T4787] ? put_task_struct+0x80/0x80 [ 199.298062][ T4787] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 199.304178][ T4787] ? lock_chain_count+0x20/0x20 [ 199.309101][ T4787] ? _raw_spin_lock_irq+0xb7/0xf0 [ 199.314239][ T4787] do_group_exit+0x229/0x2e0 [ 199.318897][ T4787] ? lockdep_hardirqs_on+0x94/0x140 [ 199.324222][ T4787] get_signal+0x1259/0x1340 [ 199.328824][ T4787] arch_do_signal_or_restart+0xc4/0x1310 [ 199.334570][ T4787] ? __ia32_sys_waitid+0xc0/0xc0 [ 199.339634][ T4787] ? kernel_waitid+0x3d0/0x3d0 [ 199.344472][ T4787] ? __might_sleep+0xd0/0xd0 [ 199.349180][ T4787] ? get_sigframe_size+0x10/0x10 [ 199.354184][ T4787] ? __x64_sys_wait4+0x1b4/0x230 [ 199.359274][ T4787] ? exit_to_user_mode_loop+0x3b/0x110 [ 199.364837][ T4787] exit_to_user_mode_loop+0x70/0x110 [ 199.370255][ T4787] exit_to_user_mode_prepare+0xee/0x180 [ 199.375890][ T4787] syscall_exit_to_user_mode+0x16/0x40 [ 199.381499][ T4787] do_syscall_64+0x58/0xa0 [ 199.386002][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 199.390881][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 199.395637][ T4787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.401644][ T4787] RIP: 0033:0x7ffafd35e90e [ 199.406109][ T4787] RSP: 002b:00007ffe99018a58 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 199.414646][ T4787] RAX: fffffffffffffe00 RBX: 0000555561b81500 RCX: 00007ffafd35e90e [ 199.422857][ T4787] RDX: 0000000040000000 RSI: 00007ffe99018afc RDI: ffffffffffffffff [ 199.431344][ T4787] RBP: 00007ffe99018afc R08: 0000000000000000 R09: 0000000000000000 [ 199.439516][ T4787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011 [ 199.447563][ T4787] R13: 0000555561b94a00 R14: 000000000001d475 R15: 00007ffe99018b50 [ 199.455689][ T4787] [ 199.458767][ T4787] task:syz-executor state:S stack:21248 pid:4283 ppid:1 flags:0x00004002 [ 199.468087][ T4787] Call Trace: [ 199.471479][ T4787] [ 199.474460][ T4787] __schedule+0x107f/0x4030 [ 199.479055][ T4787] ? do_wait+0x6cb/0xb80 [ 199.483402][ T4787] ? __sched_text_start+0x8/0x8 [ 199.488309][ T4787] ? __lock_acquire+0x7c40/0x7c40 [ 199.493441][ T4787] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 199.499430][ T4787] ? _raw_spin_unlock+0x40/0x40 [ 199.504435][ T4787] schedule+0xb9/0x180 [ 199.508575][ T4787] do_wait+0x7a5/0xb80 [ 199.512767][ T4787] kernel_wait4+0x22b/0x2b0 [ 199.517335][ T4787] ? __ia32_sys_waitid+0xc0/0xc0 [ 199.522374][ T4787] ? kernel_waitid+0x3d0/0x3d0 [ 199.527212][ T4787] ? zap_pid_ns_processes+0x13a/0x690 [ 199.532685][ T4787] zap_pid_ns_processes+0x3a0/0x690 [ 199.537947][ T4787] ? zap_pid_ns_processes+0x13a/0x690 [ 199.543414][ T4787] ? lock_chain_count+0x20/0x20 [ 199.548333][ T4787] ? put_pid_ns+0x130/0x130 [ 199.552946][ T4787] ? _raw_write_unlock_irq+0x1f/0x40 [ 199.558294][ T4787] ? lockdep_hardirqs_on+0x94/0x140 [ 199.563605][ T4787] do_exit+0x20a2/0x2570 [ 199.567942][ T4787] ? put_task_struct+0x80/0x80 [ 199.572839][ T4787] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 199.578888][ T4787] ? lock_chain_count+0x20/0x20 [ 199.583859][ T4787] ? _raw_spin_lock_irq+0xb7/0xf0 [ 199.589033][ T4787] do_group_exit+0x229/0x2e0 [ 199.593736][ T4787] ? lockdep_hardirqs_on+0x94/0x140 [ 199.599001][ T4787] get_signal+0x1259/0x1340 [ 199.603636][ T4787] arch_do_signal_or_restart+0xc4/0x1310 [ 199.609381][ T4787] ? __ia32_sys_waitid+0xc0/0xc0 [ 199.614419][ T4787] ? kernel_waitid+0x3d0/0x3d0 [ 199.619293][ T4787] ? __might_sleep+0xd0/0xd0 [ 199.623935][ T4787] ? get_sigframe_size+0x10/0x10 [ 199.628933][ T4787] ? __x64_sys_wait4+0x1b4/0x230 [ 199.634003][ T4787] ? exit_to_user_mode_loop+0x3b/0x110 [ 199.639756][ T4787] exit_to_user_mode_loop+0x70/0x110 [ 199.645119][ T4787] exit_to_user_mode_prepare+0xee/0x180 [ 199.650897][ T4787] syscall_exit_to_user_mode+0x16/0x40 [ 199.656412][ T4787] do_syscall_64+0x58/0xa0 [ 199.660932][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 199.665664][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 199.670554][ T4787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.676537][ T4787] RIP: 0033:0x7f2c7495e90e [ 199.681161][ T4787] RSP: 002b:00007ffd4205b738 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 199.689768][ T4787] RAX: fffffffffffffe00 RBX: 00005555691df500 RCX: 00007f2c7495e90e [ 199.698238][ T4787] RDX: 0000000040000000 RSI: 00007ffd4205b7dc RDI: ffffffffffffffff [ 199.706320][ T4787] RBP: 00007ffd4205b7dc R08: 0000000000000000 R09: 0000000000000000 [ 199.714436][ T4787] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003f [ 199.722699][ T4787] R13: 00005555691f2a00 R14: 0000000000020ec3 R15: 00007ffd4205b830 [ 199.730791][ T4787] [ 199.733884][ T4787] task:syz-executor state:S stack:22384 pid:4286 ppid:1 flags:0x00004002 [ 199.743289][ T4787] Call Trace: [ 199.746695][ T4787] [ 199.749739][ T4787] __schedule+0x107f/0x4030 [ 199.754359][ T4787] ? do_wait+0x6cb/0xb80 [ 199.758684][ T4787] ? __sched_text_start+0x8/0x8 [ 199.763677][ T4787] ? __lock_acquire+0x7c40/0x7c40 [ 199.768791][ T4787] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 199.774817][ T4787] ? _raw_spin_unlock+0x40/0x40 [ 199.779772][ T4787] schedule+0xb9/0x180 [ 199.783911][ T4787] do_wait+0x7a5/0xb80 [ 199.788060][ T4787] kernel_wait4+0x22b/0x2b0 [ 199.792696][ T4787] ? __ia32_sys_waitid+0xc0/0xc0 [ 199.797793][ T4787] ? kernel_waitid+0x3d0/0x3d0 [ 199.802675][ T4787] ? zap_pid_ns_processes+0x13a/0x690 [ 199.808109][ T4787] zap_pid_ns_processes+0x3a0/0x690 [ 199.813423][ T4787] ? zap_pid_ns_processes+0x13a/0x690 [ 199.818892][ T4787] ? lock_chain_count+0x20/0x20 [ 199.823851][ T4787] ? put_pid_ns+0x130/0x130 [ 199.828431][ T4787] ? _raw_write_unlock_irq+0x1f/0x40 [ 199.833842][ T4787] ? lockdep_hardirqs_on+0x94/0x140 [ 199.839109][ T4787] do_exit+0x20a2/0x2570 [ 199.843461][ T4787] ? put_task_struct+0x80/0x80 [ 199.848284][ T4787] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 199.854501][ T4787] ? lock_chain_count+0x20/0x20 [ 199.859479][ T4787] ? _raw_spin_lock_irq+0xb7/0xf0 [ 199.864568][ T4787] do_group_exit+0x229/0x2e0 [ 199.869252][ T4787] ? lockdep_hardirqs_on+0x94/0x140 [ 199.874533][ T4787] get_signal+0x1259/0x1340 [ 199.879246][ T4787] arch_do_signal_or_restart+0xc4/0x1310 [ 199.884935][ T4787] ? __ia32_sys_waitid+0xc0/0xc0 [ 199.890346][ T4787] ? kernel_waitid+0x3d0/0x3d0 [ 199.895268][ T4787] ? __might_sleep+0xd0/0xd0 [ 199.899981][ T4787] ? get_sigframe_size+0x10/0x10 [ 199.904977][ T4787] ? __x64_sys_wait4+0x1b4/0x230 [ 199.910030][ T4787] ? exit_to_user_mode_loop+0x3b/0x110 [ 199.915570][ T4787] exit_to_user_mode_loop+0x70/0x110 [ 199.920995][ T4787] exit_to_user_mode_prepare+0xee/0x180 [ 199.926625][ T4787] syscall_exit_to_user_mode+0x16/0x40 [ 199.932172][ T4787] do_syscall_64+0x58/0xa0 [ 199.936648][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 199.941947][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 199.946685][ T4787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.952784][ T4787] RIP: 0033:0x7f474b55e90e [ 199.957266][ T4787] RSP: 002b:00007fff3339bf38 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 199.965899][ T4787] RAX: fffffffffffffe00 RBX: 0000555584be5500 RCX: 00007f474b55e90e [ 199.973987][ T4787] RDX: 0000000040000000 RSI: 00007fff3339bfdc RDI: ffffffffffffffff [ 199.982046][ T4787] RBP: 00007fff3339bfdc R08: 0000000000000000 R09: 0000000000000000 [ 199.990095][ T4787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000025 [ 199.998120][ T4787] R13: 0000555584bf8a00 R14: 00000000000228c2 R15: 00007fff3339c030 [ 200.006212][ T4787] [ 200.009311][ T4787] task:syz-executor state:S stack:20560 pid:4287 ppid:1 flags:0x00004002 [ 200.018592][ T4787] Call Trace: [ 200.021952][ T4787] [ 200.024927][ T4787] __schedule+0x107f/0x4030 [ 200.029554][ T4787] ? do_wait+0x6cb/0xb80 [ 200.033866][ T4787] ? __sched_text_start+0x8/0x8 [ 200.038781][ T4787] ? __lock_acquire+0x7c40/0x7c40 [ 200.044002][ T4787] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 200.049993][ T4787] ? _raw_spin_unlock+0x40/0x40 [ 200.054904][ T4787] schedule+0xb9/0x180 [ 200.059063][ T4787] do_wait+0x7a5/0xb80 [ 200.063283][ T4787] kernel_wait4+0x22b/0x2b0 [ 200.067856][ T4787] ? __ia32_sys_waitid+0xc0/0xc0 [ 200.072985][ T4787] ? kernel_waitid+0x3d0/0x3d0 [ 200.077906][ T4787] ? zap_pid_ns_processes+0x13a/0x690 [ 200.083395][ T4787] zap_pid_ns_processes+0x3a0/0x690 [ 200.088653][ T4787] ? zap_pid_ns_processes+0x13a/0x690 [ 200.094296][ T4787] ? lock_chain_count+0x20/0x20 [ 200.099321][ T4787] ? put_pid_ns+0x130/0x130 [ 200.103896][ T4787] ? _raw_write_unlock_irq+0x1f/0x40 [ 200.109269][ T4787] ? lockdep_hardirqs_on+0x94/0x140 [ 200.114529][ T4787] do_exit+0x20a2/0x2570 [ 200.118895][ T4787] ? put_task_struct+0x80/0x80 [ 200.123765][ T4787] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 200.129855][ T4787] ? lock_chain_count+0x20/0x20 [ 200.134868][ T4787] ? _raw_spin_lock_irq+0xb7/0xf0 [ 200.140026][ T4787] do_group_exit+0x229/0x2e0 [ 200.144674][ T4787] ? lockdep_hardirqs_on+0x94/0x140 [ 200.150133][ T4787] get_signal+0x1259/0x1340 [ 200.154732][ T4787] arch_do_signal_or_restart+0xc4/0x1310 [ 200.160476][ T4787] ? __ia32_sys_waitid+0xc0/0xc0 [ 200.165482][ T4787] ? kernel_waitid+0x3d0/0x3d0 [ 200.170351][ T4787] ? __might_sleep+0xd0/0xd0 [ 200.175020][ T4787] ? get_sigframe_size+0x10/0x10 [ 200.180143][ T4787] ? __x64_sys_wait4+0x1b4/0x230 [ 200.185166][ T4787] ? exit_to_user_mode_loop+0x3b/0x110 [ 200.190737][ T4787] exit_to_user_mode_loop+0x70/0x110 [ 200.196093][ T4787] exit_to_user_mode_prepare+0xee/0x180 [ 200.201738][ T4787] syscall_exit_to_user_mode+0x16/0x40 [ 200.207248][ T4787] do_syscall_64+0x58/0xa0 [ 200.211807][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 200.216584][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 200.221387][ T4787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.227354][ T4787] RIP: 0033:0x7f3d1f55e90e [ 200.231869][ T4787] RSP: 002b:00007fff85fa2358 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 200.240880][ T4787] RAX: fffffffffffffe00 RBX: 00005555569bb500 RCX: 00007f3d1f55e90e [ 200.248924][ T4787] RDX: 0000000040000000 RSI: 00007fff85fa23fc RDI: ffffffffffffffff [ 200.257098][ T4787] RBP: 00007fff85fa23fc R08: 0000000000000000 R09: 0000000000000000 [ 200.265188][ T4787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 200.273280][ T4787] R13: 00005555569cea00 R14: 000000000002287a R15: 00007fff85fa2450 [ 200.281373][ T4787] [ 200.284485][ T4787] task:udevd state:D stack:25040 pid:4408 ppid:3639 flags:0x00004006 [ 200.293926][ T4787] Call Trace: [ 200.297262][ T4787] [ 200.300291][ T4787] __schedule+0x107f/0x4030 [ 200.304999][ T4787] ? __sched_text_start+0x8/0x8 [ 200.309971][ T4787] ? __mutex_trylock_common+0x86/0x260 [ 200.315507][ T4787] ? trace_raw_output_contention_end+0xd0/0xd0 [ 200.321791][ T4787] schedule+0xb9/0x180 [ 200.325943][ T4787] schedule_preempt_disabled+0xf/0x20 [ 200.331461][ T4787] __mutex_lock+0x548/0xae0 [ 200.336054][ T4787] ? __mutex_lock+0x3ba/0xae0 [ 200.340988][ T4787] ? uevent_show+0x16e/0x320 [ 200.345675][ T4787] ? mutex_lock_nested+0x10/0x10 [ 200.350939][ T4787] uevent_show+0x16e/0x320 [ 200.355444][ T4787] dev_attr_show+0x50/0xb0 [ 200.360164][ T4787] sysfs_kf_seq_show+0x349/0x4b0 [ 200.365195][ T4787] ? device_get_ownership+0xa0/0xa0 [ 200.370529][ T4787] seq_read_iter+0x460/0xc50 [ 200.375212][ T4787] vfs_read+0x471/0x960 [ 200.379476][ T4787] ? kernel_read+0x1e0/0x1e0 [ 200.384146][ T4787] ? __x64_sys_newfstat+0x19a/0x220 [ 200.389459][ T4787] ? do_sys_openat2+0x20a/0x4f0 [ 200.394386][ T4787] ? __fdget_pos+0x2b5/0x360 [ 200.399052][ T4787] ksys_read+0x14d/0x260 [ 200.403427][ T4787] ? vfs_write+0x9a0/0x9a0 [ 200.407915][ T4787] ? lockdep_hardirqs_on+0x94/0x140 [ 200.413227][ T4787] do_syscall_64+0x4c/0xa0 [ 200.417706][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 200.422472][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 200.427220][ T4787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.433235][ T4787] RIP: 0033:0x7f30970a7407 [ 200.437704][ T4787] RSP: 002b:00007ffe84cd7ec0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 200.446309][ T4787] RAX: ffffffffffffffda RBX: 00007f3097841880 RCX: 00007f30970a7407 [ 200.454401][ T4787] RDX: 0000000000001000 RSI: 000055a5876c2550 RDI: 0000000000000008 [ 200.462545][ T4787] RBP: 00007f30971efff0 R08: 0000000000000000 R09: 0000000000000000 [ 200.470600][ T4787] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 200.478621][ T4787] R13: 00007f30971efea0 R14: 0000000000000000 R15: 000055a5876cbb50 [ 200.486706][ T4787] [ 200.489831][ T4787] task:syz.1.97 state:D stack:26832 pid:4688 ppid:4275 flags:0x00004004 [ 200.499162][ T4787] Call Trace: [ 200.502486][ T4787] [ 200.505465][ T4787] __schedule+0x107f/0x4030 [ 200.510072][ T4787] ? preempt_schedule_thunk+0x16/0x18 [ 200.515506][ T4787] ? _raw_spin_unlock+0x40/0x40 [ 200.520421][ T4787] ? __sched_text_start+0x8/0x8 [ 200.525333][ T4787] ? load_image+0x410/0x410 [ 200.529933][ T4787] ? prepare_to_wait_event+0x430/0x470 [ 200.535460][ T4787] schedule+0xb9/0x180 [ 200.539630][ T4787] do_uevent+0x1e9/0x490 [ 200.543936][ T4787] ? dlm_scand+0x220/0x220 [ 200.548404][ T4787] ? __kmem_cache_free+0xb6/0x200 [ 200.553530][ T4787] ? wake_bit_function+0x200/0x200 [ 200.558722][ T4787] ? kobject_uevent_env+0x364/0x890 [ 200.564018][ T4787] __dlm_new_lockspace+0x1d6a/0x22b0 [ 200.569442][ T4787] ? dlm_new_lockspace+0x50/0x50 [ 200.574448][ T4787] ? wake_bit_function+0x200/0x200 [ 200.580030][ T4787] ? apparmor_capable+0x12c/0x190 [ 200.585108][ T4787] ? bpf_lsm_capable+0x5/0x10 [ 200.589875][ T4787] ? security_capable+0x85/0xb0 [ 200.594790][ T4787] ? dlm_new_user_lockspace+0x20/0x40 [ 200.600343][ T4787] device_create_lockspace+0xc4/0x350 [ 200.605778][ T4787] ? device_user_deadlock+0xd0/0xd0 [ 200.611063][ T4787] ? __might_fault+0xc2/0x120 [ 200.615797][ T4787] ? _copy_from_user+0x10b/0x170 [ 200.620843][ T4787] device_write+0x893/0xea0 [ 200.625399][ T4787] ? security_file_permission+0x75/0xa0 [ 200.631031][ T4787] ? device_read+0x1480/0x1480 [ 200.635859][ T4787] vfs_write+0x2dc/0x9a0 [ 200.640206][ T4787] ? file_end_write+0x250/0x250 [ 200.645117][ T4787] ? __fget_files+0x28/0x460 [ 200.649803][ T4787] ? __fget_files+0x3fc/0x460 [ 200.654547][ T4787] ? __fdget_pos+0x1d4/0x360 [ 200.659229][ T4787] ? ksys_write+0x70/0x260 [ 200.663711][ T4787] ksys_write+0x14d/0x260 [ 200.668101][ T4787] ? __ia32_sys_read+0x80/0x80 [ 200.672972][ T4787] ? lockdep_hardirqs_on+0x94/0x140 [ 200.678356][ T4787] do_syscall_64+0x4c/0xa0 [ 200.682866][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 200.687603][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 200.692370][ T4787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.698335][ T4787] RIP: 0033:0x7f36bd99e0d9 [ 200.702855][ T4787] RSP: 002b:00007f36be927028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 200.711356][ T4787] RAX: ffffffffffffffda RBX: 00007f36bdc25fa0 RCX: 00007f36bd99e0d9 [ 200.719411][ T4787] RDX: 0000000000000078 RSI: 0000200000000300 RDI: 0000000000000006 [ 200.727439][ T4787] RBP: 00007f36bda35024 R08: 0000000000000000 R09: 0000000000000000 [ 200.735503][ T4787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.743570][ T4787] R13: 00007f36bdc26038 R14: 00007f36bdc25fa0 R15: 00007fffe0851b88 [ 200.751654][ T4787] [ 200.754730][ T4787] task:syz-executor state:S stack:22384 pid:4882 ppid:1 flags:0x00004002 [ 200.764132][ T4787] Call Trace: [ 200.767453][ T4787] [ 200.770456][ T4787] __schedule+0x107f/0x4030 [ 200.775239][ T4787] ? do_wait+0x6cb/0xb80 [ 200.779583][ T4787] ? __sched_text_start+0x8/0x8 [ 200.784533][ T4787] ? __lock_acquire+0x7c40/0x7c40 [ 200.789657][ T4787] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 200.795646][ T4787] ? _raw_spin_unlock+0x40/0x40 [ 200.800594][ T4787] schedule+0xb9/0x180 [ 200.804719][ T4787] do_wait+0x7a5/0xb80 [ 200.808862][ T4787] kernel_wait4+0x22b/0x2b0 [ 200.813466][ T4787] ? __ia32_sys_waitid+0xc0/0xc0 [ 200.818451][ T4787] ? kernel_waitid+0x3d0/0x3d0 [ 200.823315][ T4787] ? zap_pid_ns_processes+0x13a/0x690 [ 200.828916][ T4787] zap_pid_ns_processes+0x3a0/0x690 [ 200.834214][ T4787] ? zap_pid_ns_processes+0x13a/0x690 [ 200.839706][ T4787] ? lock_chain_count+0x20/0x20 [ 200.844613][ T4787] ? put_pid_ns+0x130/0x130 [ 200.849222][ T4787] ? _raw_write_unlock_irq+0x1f/0x40 [ 200.854573][ T4787] ? lockdep_hardirqs_on+0x94/0x140 [ 200.859868][ T4787] do_exit+0x20a2/0x2570 [ 200.864185][ T4787] ? put_task_struct+0x80/0x80 [ 200.869006][ T4787] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 200.875089][ T4787] ? lock_chain_count+0x20/0x20 [ 200.880057][ T4787] ? _raw_spin_lock_irq+0xb7/0xf0 [ 200.885150][ T4787] do_group_exit+0x229/0x2e0 [ 200.889829][ T4787] ? lockdep_hardirqs_on+0x94/0x140 [ 200.895086][ T4787] get_signal+0x1259/0x1340 [ 200.899724][ T4787] arch_do_signal_or_restart+0xc4/0x1310 [ 200.905507][ T4787] ? __ia32_sys_waitid+0xc0/0xc0 [ 200.910546][ T4787] ? kernel_waitid+0x3d0/0x3d0 [ 200.915464][ T4787] ? __might_sleep+0xd0/0xd0 [ 200.920147][ T4787] ? get_sigframe_size+0x10/0x10 [ 200.925148][ T4787] ? __x64_sys_wait4+0x1b4/0x230 [ 200.930221][ T4787] ? exit_to_user_mode_loop+0x3b/0x110 [ 200.935750][ T4787] exit_to_user_mode_loop+0x70/0x110 [ 200.941180][ T4787] exit_to_user_mode_prepare+0xee/0x180 [ 200.946788][ T4787] syscall_exit_to_user_mode+0x16/0x40 [ 200.952329][ T4787] do_syscall_64+0x58/0xa0 [ 200.956787][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 200.961530][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 200.966265][ T4787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.972255][ T4787] RIP: 0033:0x7f8fea55e90e [ 200.976746][ T4787] RSP: 002b:00007fff42028128 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 200.985257][ T4787] RAX: fffffffffffffe00 RBX: 00005555695e6500 RCX: 00007f8fea55e90e [ 200.993314][ T4787] RDX: 0000000040000000 RSI: 00007fff420281cc RDI: ffffffffffffffff [ 201.001364][ T4787] RBP: 00007fff420281cc R08: 0000000000000000 R09: 0000000000000000 [ 201.009424][ T4787] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 201.017456][ T4787] R13: 00005555695f9a00 R14: 0000000000022b16 R15: 00007fff42028220 [ 201.025527][ T4787] [ 201.028607][ T4787] task:syz-executor state:S stack:22384 pid:4987 ppid:1 flags:0x00004002 [ 201.037915][ T4787] Call Trace: [ 201.041285][ T4787] [ 201.044298][ T4787] __schedule+0x107f/0x4030 [ 201.048931][ T4787] ? do_wait+0x6cb/0xb80 [ 201.053309][ T4787] ? __sched_text_start+0x8/0x8 [ 201.058245][ T4787] ? __lock_acquire+0x7c40/0x7c40 [ 201.063382][ T4787] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 201.069359][ T4787] ? _raw_spin_unlock+0x40/0x40 [ 201.074465][ T4787] schedule+0xb9/0x180 [ 201.078624][ T4787] do_wait+0x7a5/0xb80 [ 201.082801][ T4787] kernel_wait4+0x22b/0x2b0 [ 201.087364][ T4787] ? __ia32_sys_waitid+0xc0/0xc0 [ 201.092521][ T4787] ? kernel_waitid+0x3d0/0x3d0 [ 201.097367][ T4787] ? zap_pid_ns_processes+0x13a/0x690 [ 201.102836][ T4787] zap_pid_ns_processes+0x3a0/0x690 [ 201.108097][ T4787] ? zap_pid_ns_processes+0x13a/0x690 [ 201.113571][ T4787] ? lock_chain_count+0x20/0x20 [ 201.118474][ T4787] ? put_pid_ns+0x130/0x130 [ 201.123066][ T4787] ? _raw_write_unlock_irq+0x1f/0x40 [ 201.128445][ T4787] ? lockdep_hardirqs_on+0x94/0x140 [ 201.133744][ T4787] do_exit+0x20a2/0x2570 [ 201.138047][ T4787] ? put_task_struct+0x80/0x80 [ 201.142925][ T4787] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 201.148970][ T4787] ? lock_chain_count+0x20/0x20 [ 201.154093][ T4787] ? _raw_spin_lock_irq+0xb7/0xf0 [ 201.159383][ T4787] do_group_exit+0x229/0x2e0 [ 201.164034][ T4787] ? lockdep_hardirqs_on+0x94/0x140 [ 201.169449][ T4787] get_signal+0x1259/0x1340 [ 201.174074][ T4787] arch_do_signal_or_restart+0xc4/0x1310 [ 201.179810][ T4787] ? __ia32_sys_waitid+0xc0/0xc0 [ 201.184827][ T4787] ? kernel_waitid+0x3d0/0x3d0 [ 201.189701][ T4787] ? __might_sleep+0xd0/0xd0 [ 201.194351][ T4787] ? get_sigframe_size+0x10/0x10 [ 201.199388][ T4787] ? __x64_sys_wait4+0x1b4/0x230 [ 201.204412][ T4787] ? exit_to_user_mode_loop+0x3b/0x110 [ 201.210073][ T4787] exit_to_user_mode_loop+0x70/0x110 [ 201.215434][ T4787] exit_to_user_mode_prepare+0xee/0x180 [ 201.221076][ T4787] syscall_exit_to_user_mode+0x16/0x40 [ 201.226585][ T4787] do_syscall_64+0x58/0xa0 [ 201.231086][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 201.235824][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 201.240591][ T4787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.246541][ T4787] RIP: 0033:0x7f970475e90e [ 201.251042][ T4787] RSP: 002b:00007fff3d6f2bf8 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 201.259557][ T4787] RAX: fffffffffffffe00 RBX: 0000555557958500 RCX: 00007f970475e90e [ 201.267593][ T4787] RDX: 0000000040000000 RSI: 00007fff3d6f2c9c RDI: ffffffffffffffff [ 201.275703][ T4787] RBP: 00007fff3d6f2c9c R08: 0000000000000000 R09: 0000000000000000 [ 201.283851][ T4787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 201.291917][ T4787] R13: 000055555796ba00 R14: 00000000000227ab R15: 00007fff3d6f2cf0 [ 201.301134][ T4787] [ 201.304211][ T4787] task:syz.2.188 state:D stack:27920 pid:5070 ppid:4287 flags:0x00004004 [ 201.313519][ T4787] Call Trace: [ 201.316837][ T4787] [ 201.319847][ T4787] __schedule+0x107f/0x4030 [ 201.324476][ T4787] ? __sched_text_start+0x8/0x8 [ 201.329445][ T4787] ? __mutex_trylock_common+0x86/0x260 [ 201.334976][ T4787] ? trace_raw_output_contention_end+0xd0/0xd0 [ 201.341348][ T4787] schedule+0xb9/0x180 [ 201.345495][ T4787] schedule_preempt_disabled+0xf/0x20 [ 201.350974][ T4787] __mutex_lock+0x548/0xae0 [ 201.355567][ T4787] ? __mutex_lock+0x3ba/0xae0 [ 201.360597][ T4787] ? misc_open+0x55/0x390 [ 201.364986][ T4787] ? mutex_lock_nested+0x10/0x10 [ 201.370128][ T4787] ? __lock_acquire+0x7c40/0x7c40 [ 201.375237][ T4787] ? kobject_get_unless_zero+0x15f/0x1e0 [ 201.380972][ T4787] ? __kobject_del+0x2e0/0x2e0 [ 201.385795][ T4787] ? memset+0x1e/0x40 [ 201.389910][ T4787] misc_open+0x55/0x390 [ 201.394223][ T4787] chrdev_open+0x585/0x5f0 [ 201.398700][ T4787] ? cd_forget+0x160/0x160 [ 201.403309][ T4787] ? fsnotify_perm+0x39b/0x550 [ 201.408131][ T4787] ? cd_forget+0x160/0x160 [ 201.412662][ T4787] do_dentry_open+0x7dd/0x10b0 [ 201.417504][ T4787] path_openat+0x2674/0x2f10 [ 201.422303][ T4787] ? verify_lock_unused+0x140/0x140 [ 201.427581][ T4787] ? do_sys_openat2+0xdd/0x4f0 [ 201.432465][ T4787] ? do_filp_open+0x420/0x420 [ 201.437270][ T4787] do_filp_open+0x1ee/0x420 [ 201.441889][ T4787] ? vfs_tmpfile+0x470/0x470 [ 201.446656][ T4787] ? _raw_spin_unlock+0x24/0x40 [ 201.451628][ T4787] ? alloc_fd+0x590/0x640 [ 201.456075][ T4787] do_sys_openat2+0x14b/0x4f0 [ 201.460867][ T4787] ? do_sys_open+0xe0/0xe0 [ 201.465342][ T4787] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 201.471422][ T4787] ? rcu_is_watching+0x11/0xa0 [ 201.476271][ T4787] ? lock_chain_count+0x20/0x20 [ 201.481227][ T4787] __x64_sys_openat+0x135/0x160 [ 201.486152][ T4787] do_syscall_64+0x4c/0xa0 [ 201.490673][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 201.495407][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 201.500182][ T4787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.506119][ T4787] RIP: 0033:0x7f3d1f59e0d9 [ 201.510606][ T4787] RSP: 002b:00007f3d2046f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 201.519076][ T4787] RAX: ffffffffffffffda RBX: 00007f3d1f825fa0 RCX: 00007f3d1f59e0d9 [ 201.527141][ T4787] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 201.535317][ T4787] RBP: 00007f3d1f635024 R08: 0000000000000000 R09: 0000000000000000 [ 201.543390][ T4787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.551554][ T4787] R13: 00007f3d1f826038 R14: 00007f3d1f825fa0 R15: 00007fff85fa2058 [ 201.559662][ T4787] [ 201.562731][ T4787] task:syz.4.189 state:D stack:27664 pid:5073 ppid:4286 flags:0x00004004 [ 201.572123][ T4787] Call Trace: [ 201.575445][ T4787] [ 201.578410][ T4787] __schedule+0x107f/0x4030 [ 201.583016][ T4787] ? __sched_text_start+0x8/0x8 [ 201.587925][ T4787] ? __mutex_trylock_common+0x86/0x260 [ 201.593893][ T4787] ? trace_raw_output_contention_end+0xd0/0xd0 [ 201.600184][ T4787] schedule+0xb9/0x180 [ 201.604339][ T4787] schedule_preempt_disabled+0xf/0x20 [ 201.609799][ T4787] __mutex_lock+0x548/0xae0 [ 201.614455][ T4787] ? __mutex_lock+0x3ba/0xae0 [ 201.619226][ T4787] ? misc_open+0x55/0x390 [ 201.623615][ T4787] ? mutex_lock_nested+0x10/0x10 [ 201.628621][ T4787] ? __lock_acquire+0x7c40/0x7c40 [ 201.633748][ T4787] ? kobject_get_unless_zero+0x15f/0x1e0 [ 201.639457][ T4787] ? __kobject_del+0x2e0/0x2e0 [ 201.644703][ T4787] ? memset+0x1e/0x40 [ 201.648721][ T4787] misc_open+0x55/0x390 [ 201.652965][ T4787] chrdev_open+0x585/0x5f0 [ 201.657448][ T4787] ? cd_forget+0x160/0x160 [ 201.661967][ T4787] ? fsnotify_perm+0x39b/0x550 [ 201.666787][ T4787] ? cd_forget+0x160/0x160 [ 201.671318][ T4787] do_dentry_open+0x7dd/0x10b0 [ 201.676157][ T4787] path_openat+0x2674/0x2f10 [ 201.680887][ T4787] ? verify_lock_unused+0x140/0x140 [ 201.686146][ T4787] ? do_sys_openat2+0xdd/0x4f0 [ 201.691101][ T4787] ? do_filp_open+0x420/0x420 [ 201.695860][ T4787] do_filp_open+0x1ee/0x420 [ 201.700460][ T4787] ? vfs_tmpfile+0x470/0x470 [ 201.705130][ T4787] ? _raw_spin_unlock+0x24/0x40 [ 201.710067][ T4787] ? alloc_fd+0x590/0x640 [ 201.714460][ T4787] do_sys_openat2+0x14b/0x4f0 [ 201.719233][ T4787] ? do_sys_open+0xe0/0xe0 [ 201.723787][ T4787] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 201.729855][ T4787] ? rcu_is_watching+0x11/0xa0 [ 201.734714][ T4787] ? lock_chain_count+0x20/0x20 [ 201.739668][ T4787] __x64_sys_openat+0x135/0x160 [ 201.744593][ T4787] do_syscall_64+0x4c/0xa0 [ 201.749059][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 201.753834][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 201.758608][ T4787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.764580][ T4787] RIP: 0033:0x7f474b59e0d9 [ 201.769042][ T4787] RSP: 002b:00007f47497f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 201.777557][ T4787] RAX: ffffffffffffffda RBX: 00007f474b825fa0 RCX: 00007f474b59e0d9 [ 201.785627][ T4787] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 201.793693][ T4787] RBP: 00007f474b635024 R08: 0000000000000000 R09: 0000000000000000 [ 201.801746][ T4787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.809800][ T4787] R13: 00007f474b826038 R14: 00007f474b825fa0 R15: 00007fff3339bc38 [ 201.817841][ T4787] [ 201.820948][ T4787] task:syz.5.196 state:D stack:26896 pid:5091 ppid:4882 flags:0x00004004 [ 201.830246][ T4787] Call Trace: [ 201.833575][ T4787] [ 201.836566][ T4787] __schedule+0x107f/0x4030 [ 201.841191][ T4787] ? __sched_text_start+0x8/0x8 [ 201.846139][ T4787] ? __mutex_trylock_common+0x86/0x260 [ 201.851689][ T4787] ? trace_raw_output_contention_end+0xd0/0xd0 [ 201.857925][ T4787] schedule+0xb9/0x180 [ 201.862111][ T4787] schedule_preempt_disabled+0xf/0x20 [ 201.867540][ T4787] __mutex_lock+0x548/0xae0 [ 201.872397][ T4787] ? __mutex_lock+0x3ba/0xae0 [ 201.877240][ T4787] ? misc_open+0x55/0x390 [ 201.881702][ T4787] ? mutex_lock_nested+0x10/0x10 [ 201.886705][ T4787] ? __lock_acquire+0x7c40/0x7c40 [ 201.891922][ T4787] ? kobject_get_unless_zero+0x15f/0x1e0 [ 201.897613][ T4787] ? __kobject_del+0x2e0/0x2e0 [ 201.902474][ T4787] ? memset+0x1e/0x40 [ 201.906509][ T4787] misc_open+0x55/0x390 [ 201.910756][ T4787] chrdev_open+0x585/0x5f0 [ 201.915238][ T4787] ? cd_forget+0x160/0x160 [ 201.919747][ T4787] ? fsnotify_perm+0x39b/0x550 [ 201.924566][ T4787] ? cd_forget+0x160/0x160 [ 201.929035][ T4787] do_dentry_open+0x7dd/0x10b0 [ 201.934010][ T4787] path_openat+0x2674/0x2f10 [ 201.938723][ T4787] ? verify_lock_unused+0x140/0x140 [ 201.944143][ T4787] ? do_sys_openat2+0xdd/0x4f0 [ 201.948981][ T4787] ? do_filp_open+0x420/0x420 [ 201.953875][ T4787] do_filp_open+0x1ee/0x420 [ 201.958440][ T4787] ? vfs_tmpfile+0x470/0x470 [ 201.963250][ T4787] ? _raw_spin_unlock+0x24/0x40 [ 201.968180][ T4787] ? alloc_fd+0x590/0x640 [ 201.972829][ T4787] do_sys_openat2+0x14b/0x4f0 [ 201.977587][ T4787] ? do_sys_open+0xe0/0xe0 [ 201.982103][ T4787] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 201.988149][ T4787] ? lock_chain_count+0x20/0x20 [ 201.993127][ T4787] __x64_sys_openat+0x135/0x160 [ 201.998133][ T4787] do_syscall_64+0x4c/0xa0 [ 202.002655][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 202.007384][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 202.012181][ T4787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.018133][ T4787] RIP: 0033:0x7f8fea55e90e [ 202.022658][ T4787] RSP: 002b:00007f8feb442ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 202.031162][ T4787] RAX: ffffffffffffffda RBX: 00007f8feb4456c0 RCX: 00007f8fea55e90e [ 202.039230][ T4787] RDX: 0000000000000002 RSI: 00007f8fea6343aa RDI: ffffffffffffff9c [ 202.047247][ T4787] RBP: 00007f8fea635024 R08: 0000000000000000 R09: 0000000000000000 [ 202.055311][ T4787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000036 [ 202.063372][ T4787] R13: 0000200000000000 R14: 0000000000000000 R15: 00007fff42027e28 [ 202.071449][ T4787] [ 202.074525][ T4787] task:syz-executor state:D stack:27760 pid:5108 ppid:5107 flags:0x00004004 [ 202.083852][ T4787] Call Trace: [ 202.087182][ T4787] [ 202.090203][ T4787] __schedule+0x107f/0x4030 [ 202.094804][ T4787] ? __sched_text_start+0x8/0x8 [ 202.099748][ T4787] ? __mutex_trylock_common+0x86/0x260 [ 202.105270][ T4787] ? trace_raw_output_contention_end+0xd0/0xd0 [ 202.111536][ T4787] schedule+0xb9/0x180 [ 202.115667][ T4787] schedule_preempt_disabled+0xf/0x20 [ 202.121127][ T4787] __mutex_lock+0x548/0xae0 [ 202.125694][ T4787] ? __mutex_lock+0x3ba/0xae0 [ 202.130465][ T4787] ? misc_open+0x55/0x390 [ 202.134853][ T4787] ? mutex_lock_nested+0x10/0x10 [ 202.139892][ T4787] ? __lock_acquire+0x7c40/0x7c40 [ 202.144985][ T4787] ? kobject_get_unless_zero+0x15f/0x1e0 [ 202.150711][ T4787] ? __kobject_del+0x2e0/0x2e0 [ 202.155521][ T4787] ? memset+0x1e/0x40 [ 202.159596][ T4787] misc_open+0x55/0x390 [ 202.163810][ T4787] chrdev_open+0x585/0x5f0 [ 202.168294][ T4787] ? cd_forget+0x160/0x160 [ 202.172832][ T4787] ? fsnotify_perm+0x39b/0x550 [ 202.177651][ T4787] ? cd_forget+0x160/0x160 [ 202.182155][ T4787] do_dentry_open+0x7dd/0x10b0 [ 202.186991][ T4787] path_openat+0x2674/0x2f10 [ 202.191691][ T4787] ? do_user_addr_fault+0x8a6/0xb20 [ 202.196982][ T4787] ? do_filp_open+0x420/0x420 [ 202.202154][ T4787] ? up_read+0x20/0x20 [ 202.206324][ T4787] do_filp_open+0x1ee/0x420 [ 202.210954][ T4787] ? vfs_tmpfile+0x470/0x470 [ 202.215661][ T4787] ? _raw_spin_unlock+0x24/0x40 [ 202.220617][ T4787] ? alloc_fd+0x590/0x640 [ 202.225032][ T4787] do_sys_openat2+0x14b/0x4f0 [ 202.229863][ T4787] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 202.235918][ T4787] ? do_sys_open+0xe0/0xe0 [ 202.240445][ T4787] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 202.246504][ T4787] ? fd_install+0x5c/0x4e0 [ 202.251032][ T4787] ? lock_chain_count+0x20/0x20 [ 202.255980][ T4787] __x64_sys_openat+0x135/0x160 [ 202.260959][ T4787] do_syscall_64+0x4c/0xa0 [ 202.265443][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 202.270226][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 202.274974][ T4787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.280982][ T4787] RIP: 0033:0x7f1143159257 [ 202.285467][ T4787] RSP: 002b:00007ffceb5a30f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 202.293994][ T4787] RAX: ffffffffffffffda RBX: 0000555565a4d500 RCX: 00007f1143159257 [ 202.302080][ T4787] RDX: 0000000000000002 RSI: 00007f1143235067 RDI: ffffffffffffff9c [ 202.310250][ T4787] RBP: 00007f11434267b8 R08: 0000000000000000 R09: 0000000000000000 [ 202.318325][ T4787] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 202.326414][ T4787] R13: 0000000000000003 R14: 00007ffceb5a3458 R15: 0000000000000000 [ 202.334529][ T4787] [ 202.337620][ T4787] task:syz-executor state:D stack:27920 pid:5112 ppid:5109 flags:0x00004004 [ 202.346949][ T4787] Call Trace: [ 202.350354][ T4787] [ 202.353344][ T4787] __schedule+0x107f/0x4030 [ 202.357940][ T4787] ? __sched_text_start+0x8/0x8 [ 202.362930][ T4787] ? __mutex_trylock_common+0x86/0x260 [ 202.368468][ T4787] ? trace_raw_output_contention_end+0xd0/0xd0 [ 202.374740][ T4787] schedule+0xb9/0x180 [ 202.378877][ T4787] schedule_preempt_disabled+0xf/0x20 [ 202.384359][ T4787] __mutex_lock+0x548/0xae0 [ 202.388946][ T4787] ? __mutex_lock+0x3ba/0xae0 [ 202.393766][ T4787] ? misc_open+0x55/0x390 [ 202.398179][ T4787] ? mutex_lock_nested+0x10/0x10 [ 202.403239][ T4787] ? __lock_acquire+0x7c40/0x7c40 [ 202.408343][ T4787] ? kobject_get_unless_zero+0x15f/0x1e0 [ 202.414103][ T4787] ? __kobject_del+0x2e0/0x2e0 [ 202.418935][ T4787] ? memset+0x1e/0x40 [ 202.423033][ T4787] misc_open+0x55/0x390 [ 202.427270][ T4787] chrdev_open+0x585/0x5f0 [ 202.431794][ T4787] ? cd_forget+0x160/0x160 [ 202.436286][ T4787] ? fsnotify_perm+0x39b/0x550 [ 202.441163][ T4787] ? cd_forget+0x160/0x160 [ 202.445645][ T4787] do_dentry_open+0x7dd/0x10b0 [ 202.450528][ T4787] path_openat+0x2674/0x2f10 [ 202.455217][ T4787] ? do_user_addr_fault+0x8a6/0xb20 [ 202.460519][ T4787] ? do_filp_open+0x420/0x420 [ 202.465250][ T4787] ? up_read+0x20/0x20 [ 202.469425][ T4787] do_filp_open+0x1ee/0x420 [ 202.473983][ T4787] ? vfs_tmpfile+0x470/0x470 [ 202.478658][ T4787] ? _raw_spin_unlock+0x24/0x40 [ 202.483592][ T4787] ? alloc_fd+0x590/0x640 [ 202.488106][ T4787] do_sys_openat2+0x14b/0x4f0 [ 202.492900][ T4787] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 202.498949][ T4787] ? do_sys_open+0xe0/0xe0 [ 202.503475][ T4787] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 202.509572][ T4787] ? fd_install+0x5c/0x4e0 [ 202.514051][ T4787] ? lock_chain_count+0x20/0x20 [ 202.518964][ T4787] __x64_sys_openat+0x135/0x160 [ 202.523925][ T4787] do_syscall_64+0x4c/0xa0 [ 202.528492][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 202.533656][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 202.538415][ T4787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.544413][ T4787] RIP: 0033:0x7f25ee759257 [ 202.548888][ T4787] RSP: 002b:00007ffc877d3f90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 202.557450][ T4787] RAX: ffffffffffffffda RBX: 000055556b5df500 RCX: 00007f25ee759257 [ 202.565548][ T4787] RDX: 0000000000000002 RSI: 00007f25ee835067 RDI: ffffffffffffff9c [ 202.573638][ T4787] RBP: 00007f25eea267b8 R08: 0000000000000000 R09: 0000000000000000 [ 202.581719][ T4787] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 202.589869][ T4787] R13: 0000000000000003 R14: 00007ffc877d42f8 R15: 0000000000000000 [ 202.597928][ T4787] [ 202.601029][ T4787] task:syz-executor state:D stack:26896 pid:5113 ppid:5111 flags:0x00004004 [ 202.610421][ T4787] Call Trace: [ 202.613754][ T4787] [ 202.616773][ T4787] __schedule+0x107f/0x4030 [ 202.621408][ T4787] ? __sched_text_start+0x8/0x8 [ 202.626317][ T4787] ? __mutex_trylock_common+0x86/0x260 [ 202.631873][ T4787] ? trace_raw_output_contention_end+0xd0/0xd0 [ 202.638164][ T4787] schedule+0xb9/0x180 [ 202.642314][ T4787] schedule_preempt_disabled+0xf/0x20 [ 202.647751][ T4787] __mutex_lock+0x548/0xae0 [ 202.652350][ T4787] ? __mutex_lock+0x3ba/0xae0 [ 202.657091][ T4787] ? misc_open+0x55/0x390 [ 202.661508][ T4787] ? mutex_lock_nested+0x10/0x10 [ 202.666509][ T4787] ? __lock_acquire+0x7c40/0x7c40 [ 202.671631][ T4787] ? kobject_get_unless_zero+0x15f/0x1e0 [ 202.677406][ T4787] ? __kobject_del+0x2e0/0x2e0 [ 202.682488][ T4787] ? memset+0x1e/0x40 [ 202.686644][ T4787] misc_open+0x55/0x390 [ 202.690897][ T4787] chrdev_open+0x585/0x5f0 [ 202.695380][ T4787] ? cd_forget+0x160/0x160 [ 202.699899][ T4787] ? fsnotify_perm+0x39b/0x550 [ 202.704812][ T4787] ? cd_forget+0x160/0x160 [ 202.709313][ T4787] do_dentry_open+0x7dd/0x10b0 [ 202.714146][ T4787] path_openat+0x2674/0x2f10 [ 202.718916][ T4787] ? do_user_addr_fault+0x8a6/0xb20 [ 202.724222][ T4787] ? do_filp_open+0x420/0x420 [ 202.729047][ T4787] ? up_read+0x20/0x20 [ 202.733226][ T4787] do_filp_open+0x1ee/0x420 [ 202.737881][ T4787] ? vfs_tmpfile+0x470/0x470 [ 202.742587][ T4787] ? _raw_spin_unlock+0x24/0x40 [ 202.747495][ T4787] ? alloc_fd+0x590/0x640 [ 202.751918][ T4787] do_sys_openat2+0x14b/0x4f0 [ 202.756654][ T4787] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 202.762742][ T4787] ? do_sys_open+0xe0/0xe0 [ 202.767484][ T4787] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 202.773593][ T4787] ? fd_install+0x5c/0x4e0 [ 202.778146][ T4787] ? lock_chain_count+0x20/0x20 [ 202.783081][ T4787] __x64_sys_openat+0x135/0x160 [ 202.788001][ T4787] do_syscall_64+0x4c/0xa0 [ 202.792515][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 202.797248][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 202.802067][ T4787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.808010][ T4787] RIP: 0033:0x7f786a959257 [ 202.812509][ T4787] RSP: 002b:00007ffcd4e0ea90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 202.821012][ T4787] RAX: ffffffffffffffda RBX: 00005555725bd500 RCX: 00007f786a959257 [ 202.829031][ T4787] RDX: 0000000000000002 RSI: 00007f786aa35067 RDI: ffffffffffffff9c [ 202.837089][ T4787] RBP: 00007f786ac267b8 R08: 0000000000000000 R09: 0000000000000000 [ 202.845148][ T4787] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 202.853377][ T4787] R13: 0000000000000003 R14: 00007ffcd4e0edf8 R15: 0000000000000000 [ 202.861456][ T4787] [ 202.864529][ T4787] task:syz-executor state:D stack:27920 pid:5114 ppid:5110 flags:0x00004004 [ 202.873835][ T4787] Call Trace: [ 202.877177][ T4787] [ 202.880363][ T4787] __schedule+0x107f/0x4030 [ 202.884954][ T4787] ? __sched_text_start+0x8/0x8 [ 202.889901][ T4787] ? __mutex_trylock_common+0x86/0x260 [ 202.895434][ T4787] ? trace_raw_output_contention_end+0xd0/0xd0 [ 202.901722][ T4787] schedule+0xb9/0x180 [ 202.905946][ T4787] schedule_preempt_disabled+0xf/0x20 [ 202.911405][ T4787] __mutex_lock+0x548/0xae0 [ 202.915984][ T4787] ? __mutex_lock+0x3ba/0xae0 [ 202.920750][ T4787] ? misc_open+0x55/0x390 [ 202.925135][ T4787] ? mutex_lock_nested+0x10/0x10 [ 202.930182][ T4787] ? __lock_acquire+0x7c40/0x7c40 [ 202.935265][ T4787] ? kobject_get_unless_zero+0x15f/0x1e0 [ 202.940993][ T4787] ? __kobject_del+0x2e0/0x2e0 [ 202.945911][ T4787] ? memset+0x1e/0x40 [ 202.950020][ T4787] misc_open+0x55/0x390 [ 202.954239][ T4787] chrdev_open+0x585/0x5f0 [ 202.958828][ T4787] ? cd_forget+0x160/0x160 [ 202.963356][ T4787] ? fsnotify_perm+0x39b/0x550 [ 202.968179][ T4787] ? cd_forget+0x160/0x160 [ 202.972695][ T4787] do_dentry_open+0x7dd/0x10b0 [ 202.977944][ T4787] path_openat+0x2674/0x2f10 [ 202.982676][ T4787] ? do_user_addr_fault+0x8a6/0xb20 [ 202.987943][ T4787] ? do_filp_open+0x420/0x420 [ 202.992724][ T4787] ? up_read+0x20/0x20 [ 202.996849][ T4787] do_filp_open+0x1ee/0x420 [ 203.001423][ T4787] ? vfs_tmpfile+0x470/0x470 [ 203.006094][ T4787] ? _raw_spin_unlock+0x24/0x40 [ 203.011112][ T4787] ? alloc_fd+0x590/0x640 [ 203.015597][ T4787] do_sys_openat2+0x14b/0x4f0 [ 203.020371][ T4787] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 203.026591][ T4787] ? do_sys_open+0xe0/0xe0 [ 203.031197][ T4787] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 203.037243][ T4787] ? fd_install+0x5c/0x4e0 [ 203.041759][ T4787] ? lock_chain_count+0x20/0x20 [ 203.046765][ T4787] __x64_sys_openat+0x135/0x160 [ 203.051720][ T4787] do_syscall_64+0x4c/0xa0 [ 203.056197][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 203.060977][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 203.065713][ T4787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.071703][ T4787] RIP: 0033:0x7f4966d59257 [ 203.076165][ T4787] RSP: 002b:00007ffecabf3330 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 203.084685][ T4787] RAX: ffffffffffffffda RBX: 0000555569826500 RCX: 00007f4966d59257 [ 203.092744][ T4787] RDX: 0000000000000002 RSI: 00007f4966e35067 RDI: ffffffffffffff9c [ 203.100884][ T4787] RBP: 00007f49670267b8 R08: 0000000000000000 R09: 0000000000000000 [ 203.108935][ T4787] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 203.117057][ T4787] R13: 0000000000000003 R14: 00007ffecabf3698 R15: 0000000000000000 [ 203.125127][ T4787] [ 203.128199][ T4787] task:syz-executor state:D stack:27920 pid:5116 ppid:5115 flags:0x00004004 [ 203.137517][ T4787] Call Trace: [ 203.140870][ T4787] [ 203.143864][ T4787] __schedule+0x107f/0x4030 [ 203.148480][ T4787] ? __sched_text_start+0x8/0x8 [ 203.153440][ T4787] ? __mutex_trylock_common+0x86/0x260 [ 203.158955][ T4787] ? trace_raw_output_contention_end+0xd0/0xd0 [ 203.165187][ T4787] schedule+0xb9/0x180 [ 203.169350][ T4787] schedule_preempt_disabled+0xf/0x20 [ 203.174797][ T4787] __mutex_lock+0x548/0xae0 [ 203.179436][ T4787] ? __mutex_lock+0x3ba/0xae0 [ 203.184187][ T4787] ? misc_open+0x55/0x390 [ 203.188562][ T4787] ? mutex_lock_nested+0x10/0x10 [ 203.193589][ T4787] ? __lock_acquire+0x7c40/0x7c40 [ 203.198691][ T4787] ? kobject_get_unless_zero+0x15f/0x1e0 [ 203.204431][ T4787] ? __kobject_del+0x2e0/0x2e0 [ 203.209287][ T4787] ? memset+0x1e/0x40 [ 203.213327][ T4787] misc_open+0x55/0x390 [ 203.217635][ T4787] chrdev_open+0x585/0x5f0 [ 203.222255][ T4787] ? cd_forget+0x160/0x160 [ 203.226824][ T4787] ? fsnotify_perm+0x39b/0x550 [ 203.231682][ T4787] ? cd_forget+0x160/0x160 [ 203.236153][ T4787] do_dentry_open+0x7dd/0x10b0 [ 203.241025][ T4787] path_openat+0x2674/0x2f10 [ 203.245692][ T4787] ? do_user_addr_fault+0x8a6/0xb20 [ 203.250989][ T4787] ? do_filp_open+0x420/0x420 [ 203.255718][ T4787] ? up_read+0x20/0x20 [ 203.259889][ T4787] do_filp_open+0x1ee/0x420 [ 203.265020][ T4787] ? vfs_tmpfile+0x470/0x470 [ 203.269755][ T4787] ? _raw_spin_unlock+0x24/0x40 [ 203.274661][ T4787] ? alloc_fd+0x590/0x640 [ 203.279056][ T4787] do_sys_openat2+0x14b/0x4f0 [ 203.283837][ T4787] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 203.289910][ T4787] ? do_sys_open+0xe0/0xe0 [ 203.294381][ T4787] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 203.300475][ T4787] ? fd_install+0x5c/0x4e0 [ 203.304950][ T4787] ? lock_chain_count+0x20/0x20 [ 203.309894][ T4787] __x64_sys_openat+0x135/0x160 [ 203.314813][ T4787] do_syscall_64+0x4c/0xa0 [ 203.319345][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 203.324104][ T4787] ? clear_bhb_loop+0x60/0xb0 [ 203.328842][ T4787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.334813][ T4787] RIP: 0033:0x7fb5d1559257 [ 203.339326][ T4787] RSP: 002b:00007fffc9648430 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 203.347795][ T4787] RAX: ffffffffffffffda RBX: 0000555576f09500 RCX: 00007fb5d1559257 [ 203.355892][ T4787] RDX: 0000000000000002 RSI: 00007fb5d1635067 RDI: ffffffffffffff9c [ 203.363978][ T4787] RBP: 00007fb5d18267b8 R08: 0000000000000000 R09: 0000000000000000 [ 203.372039][ T4787] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 203.380093][ T4787] R13: 0000000000000003 R14: 00007fffc9648798 R15: 0000000000000000 [ 203.388139][ T4787] [ 203.435479][ T4787] OOM killer enabled. [ 203.440770][ T4787] Restarting tasks ... done. [ 203.464676][ T4787] random: crng reseeded on system resumption [ 203.537543][ T4976] PM: hibernation: hibernation entry [ 203.588226][ T4787] PM: suspend exit [ 203.619807][ T4976] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 203.625883][ T4976] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 203.662435][ T4976] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 203.686836][ T4976] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 203.695712][ T4976] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 203.723945][ T4976] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 203.759185][ T4976] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 203.766699][ T4976] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 203.817634][ T4976] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 203.859537][ T4976] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 203.865651][ T4976] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 203.886121][ T4976] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 203.909344][ T4976] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 203.919333][ T4976] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 203.940151][ T4976] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 203.960662][ T4976] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 203.979298][ T4976] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 203.987155][ T4976] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 204.016573][ T4976] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 204.023386][ T4976] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 204.030405][ T4976] Bluetooth: hci6: Suspend notifier action (1) failed: -4 [ 204.044139][ T4976] Filesystems sync: 0.006 seconds [ 205.669363][ T4292] Bluetooth: hci0: command 0x0c1a tx timeout [ 205.830232][ T4292] Bluetooth: hci2: command 0x0c1a tx timeout [ 205.909375][ T4292] Bluetooth: hci3: command 0x0c1a tx timeout [ 205.989321][ T4292] Bluetooth: hci5: command 0x0c1a tx timeout [ 205.989344][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout [ 206.069526][ T4285] Bluetooth: hci6: command 0x0c1a tx timeout [ 207.069752][ T3639] udevd[3639]: worker [4408] /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0 is taking a long time [ 207.749481][ T4285] Bluetooth: hci0: command 0x0406 tx timeout [ 207.909361][ T4292] Bluetooth: hci2: command 0x0406 tx timeout [ 207.989307][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 208.069271][ T4292] Bluetooth: hci5: command 0x0406 tx timeout [ 208.079493][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 208.149314][ T4285] Bluetooth: hci6: command 0x0406 tx timeout [ 252.629327][ T4292] Bluetooth: hci5: command 0x0406 tx timeout [ 255.672316][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.678679][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.759380][ T4292] Bluetooth: hci6: command 0x0406 tx timeout [ 265.931762][ T4976] Freezing user space processes [ 265.938310][ T4402] dvb-usb: did not find the firmware file 'af9005.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 265.953124][ T4402] dvb_usb_af9005: probe of 1-1:1.0 failed with error -110 [ 265.964932][ T4402] usb 1-1: USB disconnect, device number 14 [ 285.939388][ T4976] Freezing of tasks failed after 20.002 seconds (20 tasks refusing to freeze, wq_busy=0): [ 285.949742][ T4976] task:syz-executor state:S stack:22384 pid:4275 ppid:1 flags:0x00004002 [ 285.959022][ T4976] Call Trace: [ 285.962386][ T4976] [ 285.965363][ T4976] __schedule+0x107f/0x4030 [ 285.971800][ T4976] ? do_wait+0x6cb/0xb80 [ 285.976161][ T4976] ? __sched_text_start+0x8/0x8 [ 285.981196][ T4976] ? __lock_acquire+0x7c40/0x7c40 [ 285.986300][ T4976] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 285.992609][ T4976] ? _raw_spin_unlock+0x40/0x40 [ 285.997566][ T4976] schedule+0xb9/0x180 [ 286.001805][ T4976] do_wait+0x7a5/0xb80 [ 286.005963][ T4976] kernel_wait4+0x22b/0x2b0 [ 286.010589][ T4976] ? __ia32_sys_waitid+0xc0/0xc0 [ 286.015863][ T4976] ? kernel_waitid+0x3d0/0x3d0 [ 286.020767][ T4976] ? zap_pid_ns_processes+0x13a/0x690 [ 286.026183][ T4976] zap_pid_ns_processes+0x3a0/0x690 [ 286.031493][ T4976] ? zap_pid_ns_processes+0x13a/0x690 [ 286.036921][ T4976] ? lock_chain_count+0x20/0x20 [ 286.041863][ T4976] ? put_pid_ns+0x130/0x130 [ 286.046449][ T4976] ? _raw_write_unlock_irq+0x1f/0x40 [ 286.052045][ T4976] ? lockdep_hardirqs_on+0x94/0x140 [ 286.057327][ T4976] do_exit+0x20a2/0x2570 [ 286.061736][ T4976] ? put_task_struct+0x80/0x80 [ 286.066567][ T4976] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 286.074087][ T4976] ? lock_chain_count+0x20/0x20 [ 286.079002][ T4976] ? _raw_spin_lock_irq+0xb7/0xf0 [ 286.084528][ T4976] do_group_exit+0x229/0x2e0 [ 286.089239][ T4976] ? lockdep_hardirqs_on+0x94/0x140 [ 286.094500][ T4976] get_signal+0x1259/0x1340 [ 286.099125][ T4976] arch_do_signal_or_restart+0xc4/0x1310 [ 286.104851][ T4976] ? __ia32_sys_waitid+0xc0/0xc0 [ 286.109908][ T4976] ? kernel_waitid+0x3d0/0x3d0 [ 286.114741][ T4976] ? __might_sleep+0xd0/0xd0 [ 286.119414][ T4976] ? get_sigframe_size+0x10/0x10 [ 286.124406][ T4976] ? __x64_sys_wait4+0x1b4/0x230 [ 286.129539][ T4976] ? exit_to_user_mode_loop+0x3b/0x110 [ 286.135058][ T4976] exit_to_user_mode_loop+0x70/0x110 [ 286.140440][ T4976] exit_to_user_mode_prepare+0xee/0x180 [ 286.146044][ T4976] syscall_exit_to_user_mode+0x16/0x40 [ 286.151589][ T4976] do_syscall_64+0x58/0xa0 [ 286.156067][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 286.160886][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 286.165622][ T4976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.171611][ T4976] RIP: 0033:0x7f36bd95e90e [ 286.176087][ T4976] RSP: 002b:00007fffe0851e88 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 286.184598][ T4976] RAX: fffffffffffffe00 RBX: 00005555569df500 RCX: 00007f36bd95e90e [ 286.192659][ T4976] RDX: 0000000040000000 RSI: 00007fffe0851f2c RDI: ffffffffffffffff [ 286.200705][ T4976] RBP: 00007fffe0851f2c R08: 0000000000000000 R09: 0000000000000000 [ 286.208724][ T4976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 286.216871][ T4976] R13: 00005555569f2a00 R14: 000000000001bc83 R15: 00007fffe0851f80 [ 286.224968][ T4976] [ 286.228049][ T4976] task:syz-executor state:S stack:21248 pid:4283 ppid:1 flags:0x00004002 [ 286.237348][ T4976] Call Trace: [ 286.240704][ T4976] [ 286.243692][ T4976] __schedule+0x107f/0x4030 [ 286.248297][ T4976] ? do_wait+0x6cb/0xb80 [ 286.252615][ T4976] ? __sched_text_start+0x8/0x8 [ 286.257530][ T4976] ? __lock_acquire+0x7c40/0x7c40 [ 286.262653][ T4976] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 286.268603][ T4976] ? _raw_spin_unlock+0x40/0x40 [ 286.273551][ T4976] schedule+0xb9/0x180 [ 286.277681][ T4976] do_wait+0x7a5/0xb80 [ 286.281868][ T4976] kernel_wait4+0x22b/0x2b0 [ 286.286438][ T4976] ? __ia32_sys_waitid+0xc0/0xc0 [ 286.291482][ T4976] ? kernel_waitid+0x3d0/0x3d0 [ 286.296313][ T4976] ? zap_pid_ns_processes+0x13a/0x690 [ 286.301776][ T4976] zap_pid_ns_processes+0x3a0/0x690 [ 286.307047][ T4976] ? zap_pid_ns_processes+0x13a/0x690 [ 286.312508][ T4976] ? lock_chain_count+0x20/0x20 [ 286.317418][ T4976] ? put_pid_ns+0x130/0x130 [ 286.322020][ T4976] ? _raw_write_unlock_irq+0x1f/0x40 [ 286.327355][ T4976] ? lockdep_hardirqs_on+0x94/0x140 [ 286.332640][ T4976] do_exit+0x20a2/0x2570 [ 286.337000][ T4976] ? put_task_struct+0x80/0x80 [ 286.341915][ T4976] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 286.348006][ T4976] ? lock_chain_count+0x20/0x20 [ 286.352977][ T4976] ? _raw_spin_lock_irq+0xb7/0xf0 [ 286.358245][ T4976] do_group_exit+0x229/0x2e0 [ 286.363030][ T4976] ? lockdep_hardirqs_on+0x94/0x140 [ 286.368274][ T4976] get_signal+0x1259/0x1340 [ 286.372889][ T4976] arch_do_signal_or_restart+0xc4/0x1310 [ 286.378586][ T4976] ? __ia32_sys_waitid+0xc0/0xc0 [ 286.383634][ T4976] ? kernel_waitid+0x3d0/0x3d0 [ 286.388560][ T4976] ? __might_sleep+0xd0/0xd0 [ 286.393240][ T4976] ? get_sigframe_size+0x10/0x10 [ 286.398245][ T4976] ? __x64_sys_wait4+0x1b4/0x230 [ 286.403674][ T4976] ? exit_to_user_mode_loop+0x3b/0x110 [ 286.409327][ T4976] exit_to_user_mode_loop+0x70/0x110 [ 286.414697][ T4976] exit_to_user_mode_prepare+0xee/0x180 [ 286.420372][ T4976] syscall_exit_to_user_mode+0x16/0x40 [ 286.425904][ T4976] do_syscall_64+0x58/0xa0 [ 286.430445][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 286.435198][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 286.440000][ T4976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.445975][ T4976] RIP: 0033:0x7f2c7495e90e [ 286.450492][ T4976] RSP: 002b:00007ffd4205b738 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 286.458971][ T4976] RAX: fffffffffffffe00 RBX: 00005555691df500 RCX: 00007f2c7495e90e [ 286.467042][ T4976] RDX: 0000000040000000 RSI: 00007ffd4205b7dc RDI: ffffffffffffffff [ 286.475117][ T4976] RBP: 00007ffd4205b7dc R08: 0000000000000000 R09: 0000000000000000 [ 286.483184][ T4976] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003f [ 286.491263][ T4976] R13: 00005555691f2a00 R14: 0000000000020ec3 R15: 00007ffd4205b830 [ 286.499525][ T4976] [ 286.502601][ T4976] task:syz-executor state:S stack:22384 pid:4286 ppid:1 flags:0x00004002 [ 286.511925][ T4976] Call Trace: [ 286.515258][ T4976] [ 286.518257][ T4976] __schedule+0x107f/0x4030 [ 286.522898][ T4976] ? do_wait+0x6cb/0xb80 [ 286.527218][ T4976] ? __sched_text_start+0x8/0x8 [ 286.532179][ T4976] ? __lock_acquire+0x7c40/0x7c40 [ 286.537284][ T4976] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 286.543286][ T4976] ? _raw_spin_unlock+0x40/0x40 [ 286.548213][ T4976] schedule+0xb9/0x180 [ 286.552402][ T4976] do_wait+0x7a5/0xb80 [ 286.556596][ T4976] kernel_wait4+0x22b/0x2b0 [ 286.561235][ T4976] ? __ia32_sys_waitid+0xc0/0xc0 [ 286.566261][ T4976] ? kernel_waitid+0x3d0/0x3d0 [ 286.571149][ T4976] ? zap_pid_ns_processes+0x13a/0x690 [ 286.576587][ T4976] zap_pid_ns_processes+0x3a0/0x690 [ 286.581884][ T4976] ? zap_pid_ns_processes+0x13a/0x690 [ 286.587317][ T4976] ? lock_chain_count+0x20/0x20 [ 286.592293][ T4976] ? put_pid_ns+0x130/0x130 [ 286.596861][ T4976] ? _raw_write_unlock_irq+0x1f/0x40 [ 286.602242][ T4976] ? lockdep_hardirqs_on+0x94/0x140 [ 286.607499][ T4976] do_exit+0x20a2/0x2570 [ 286.611866][ T4976] ? put_task_struct+0x80/0x80 [ 286.616785][ T4976] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 286.622866][ T4976] ? lock_chain_count+0x20/0x20 [ 286.627784][ T4976] ? _raw_spin_lock_irq+0xb7/0xf0 [ 286.632912][ T4976] do_group_exit+0x229/0x2e0 [ 286.637594][ T4976] ? lockdep_hardirqs_on+0x94/0x140 [ 286.642885][ T4976] get_signal+0x1259/0x1340 [ 286.647500][ T4976] arch_do_signal_or_restart+0xc4/0x1310 [ 286.653316][ T4976] ? __ia32_sys_waitid+0xc0/0xc0 [ 286.658311][ T4976] ? kernel_waitid+0x3d0/0x3d0 [ 286.663155][ T4976] ? __might_sleep+0xd0/0xd0 [ 286.667806][ T4976] ? get_sigframe_size+0x10/0x10 [ 286.672835][ T4976] ? __x64_sys_wait4+0x1b4/0x230 [ 286.677861][ T4976] ? exit_to_user_mode_loop+0x3b/0x110 [ 286.683412][ T4976] exit_to_user_mode_loop+0x70/0x110 [ 286.688751][ T4976] exit_to_user_mode_prepare+0xee/0x180 [ 286.694408][ T4976] syscall_exit_to_user_mode+0x16/0x40 [ 286.700044][ T4976] do_syscall_64+0x58/0xa0 [ 286.704512][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 286.709289][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 286.714025][ T4976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.720015][ T4976] RIP: 0033:0x7f474b55e90e [ 286.724476][ T4976] RSP: 002b:00007fff3339bf38 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 286.733096][ T4976] RAX: fffffffffffffe00 RBX: 0000555584be5500 RCX: 00007f474b55e90e [ 286.741150][ T4976] RDX: 0000000040000000 RSI: 00007fff3339bfdc RDI: ffffffffffffffff [ 286.749200][ T4976] RBP: 00007fff3339bfdc R08: 0000000000000000 R09: 0000000000000000 [ 286.757267][ T4976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000025 [ 286.765328][ T4976] R13: 0000555584bf8a00 R14: 00000000000228c2 R15: 00007fff3339c030 [ 286.773443][ T4976] [ 286.776521][ T4976] task:syz-executor state:S stack:20560 pid:4287 ppid:1 flags:0x00004002 [ 286.785920][ T4976] Call Trace: [ 286.789274][ T4976] [ 286.792267][ T4976] __schedule+0x107f/0x4030 [ 286.796865][ T4976] ? do_wait+0x6cb/0xb80 [ 286.801186][ T4976] ? __sched_text_start+0x8/0x8 [ 286.806098][ T4976] ? __lock_acquire+0x7c40/0x7c40 [ 286.811217][ T4976] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 286.817175][ T4976] ? _raw_spin_unlock+0x40/0x40 [ 286.822119][ T4976] schedule+0xb9/0x180 [ 286.826240][ T4976] do_wait+0x7a5/0xb80 [ 286.830419][ T4976] kernel_wait4+0x22b/0x2b0 [ 286.834986][ T4976] ? __ia32_sys_waitid+0xc0/0xc0 [ 286.840021][ T4976] ? kernel_waitid+0x3d0/0x3d0 [ 286.844866][ T4976] ? zap_pid_ns_processes+0x13a/0x690 [ 286.850323][ T4976] zap_pid_ns_processes+0x3a0/0x690 [ 286.855585][ T4976] ? zap_pid_ns_processes+0x13a/0x690 [ 286.861049][ T4976] ? lock_chain_count+0x20/0x20 [ 286.865958][ T4976] ? put_pid_ns+0x130/0x130 [ 286.870551][ T4976] ? _raw_write_unlock_irq+0x1f/0x40 [ 286.875898][ T4976] ? lockdep_hardirqs_on+0x94/0x140 [ 286.881210][ T4976] do_exit+0x20a2/0x2570 [ 286.885546][ T4976] ? put_task_struct+0x80/0x80 [ 286.890420][ T4976] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 286.896466][ T4976] ? lock_chain_count+0x20/0x20 [ 286.901416][ T4976] ? _raw_spin_lock_irq+0xb7/0xf0 [ 286.906499][ T4976] do_group_exit+0x229/0x2e0 [ 286.911189][ T4976] ? lockdep_hardirqs_on+0x94/0x140 [ 286.916438][ T4976] get_signal+0x1259/0x1340 [ 286.921064][ T4976] arch_do_signal_or_restart+0xc4/0x1310 [ 286.926848][ T4976] ? __ia32_sys_waitid+0xc0/0xc0 [ 286.931916][ T4976] ? kernel_waitid+0x3d0/0x3d0 [ 286.936745][ T4976] ? __might_sleep+0xd0/0xd0 [ 286.941483][ T4976] ? get_sigframe_size+0x10/0x10 [ 286.946573][ T4976] ? __x64_sys_wait4+0x1b4/0x230 [ 286.951668][ T4976] ? exit_to_user_mode_loop+0x3b/0x110 [ 286.957200][ T4976] exit_to_user_mode_loop+0x70/0x110 [ 286.962627][ T4976] exit_to_user_mode_prepare+0xee/0x180 [ 286.968250][ T4976] syscall_exit_to_user_mode+0x16/0x40 [ 286.973840][ T4976] do_syscall_64+0x58/0xa0 [ 286.978328][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 286.983100][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 286.987843][ T4976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.993851][ T4976] RIP: 0033:0x7f3d1f55e90e [ 286.998352][ T4976] RSP: 002b:00007fff85fa2358 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 287.006895][ T4976] RAX: fffffffffffffe00 RBX: 00005555569bb500 RCX: 00007f3d1f55e90e [ 287.015049][ T4976] RDX: 0000000040000000 RSI: 00007fff85fa23fc RDI: ffffffffffffffff [ 287.023112][ T4976] RBP: 00007fff85fa23fc R08: 0000000000000000 R09: 0000000000000000 [ 287.031165][ T4976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 287.039312][ T4976] R13: 00005555569cea00 R14: 000000000002287a R15: 00007fff85fa2450 [ 287.047380][ T4976] [ 287.050526][ T4976] task:syz.1.97 state:D stack:26832 pid:4688 ppid:4275 flags:0x00004004 [ 287.060122][ T4976] Call Trace: [ 287.063624][ T4976] [ 287.066615][ T4976] __schedule+0x107f/0x4030 [ 287.071234][ T4976] ? preempt_schedule_thunk+0x16/0x18 [ 287.076695][ T4976] ? _raw_spin_unlock+0x40/0x40 [ 287.081659][ T4976] ? __sched_text_start+0x8/0x8 [ 287.086571][ T4976] ? load_image+0x410/0x410 [ 287.091174][ T4976] ? prepare_to_wait_event+0x430/0x470 [ 287.096700][ T4976] schedule+0xb9/0x180 [ 287.100958][ T4976] do_uevent+0x1e9/0x490 [ 287.105259][ T4976] ? dlm_scand+0x220/0x220 [ 287.109764][ T4976] ? __kmem_cache_free+0xb6/0x200 [ 287.114848][ T4976] ? wake_bit_function+0x200/0x200 [ 287.120050][ T4976] ? kobject_uevent_env+0x364/0x890 [ 287.125327][ T4976] __dlm_new_lockspace+0x1d6a/0x22b0 [ 287.130722][ T4976] ? dlm_new_lockspace+0x50/0x50 [ 287.135719][ T4976] ? wake_bit_function+0x200/0x200 [ 287.140924][ T4976] ? apparmor_capable+0x12c/0x190 [ 287.146002][ T4976] ? bpf_lsm_capable+0x5/0x10 [ 287.150764][ T4976] ? security_capable+0x85/0xb0 [ 287.155684][ T4976] ? dlm_new_user_lockspace+0x20/0x40 [ 287.161152][ T4976] device_create_lockspace+0xc4/0x350 [ 287.166599][ T4976] ? device_user_deadlock+0xd0/0xd0 [ 287.171893][ T4976] ? __might_fault+0xc2/0x120 [ 287.176622][ T4976] ? _copy_from_user+0x10b/0x170 [ 287.181657][ T4976] device_write+0x893/0xea0 [ 287.186260][ T4976] ? security_file_permission+0x75/0xa0 [ 287.191892][ T4976] ? device_read+0x1480/0x1480 [ 287.196744][ T4976] vfs_write+0x2dc/0x9a0 [ 287.201106][ T4976] ? file_end_write+0x250/0x250 [ 287.206022][ T4976] ? __fget_files+0x28/0x460 [ 287.210889][ T4976] ? __fget_files+0x3fc/0x460 [ 287.215635][ T4976] ? __fdget_pos+0x1d4/0x360 [ 287.220313][ T4976] ? ksys_write+0x70/0x260 [ 287.224799][ T4976] ksys_write+0x14d/0x260 [ 287.229218][ T4976] ? __ia32_sys_read+0x80/0x80 [ 287.234054][ T4976] ? lockdep_hardirqs_on+0x94/0x140 [ 287.239336][ T4976] do_syscall_64+0x4c/0xa0 [ 287.243833][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 287.248588][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 287.253359][ T4976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.259378][ T4976] RIP: 0033:0x7f36bd99e0d9 [ 287.263845][ T4976] RSP: 002b:00007f36be927028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 287.272346][ T4976] RAX: ffffffffffffffda RBX: 00007f36bdc25fa0 RCX: 00007f36bd99e0d9 [ 287.280407][ T4976] RDX: 0000000000000078 RSI: 0000200000000300 RDI: 0000000000000006 [ 287.288470][ T4976] RBP: 00007f36bda35024 R08: 0000000000000000 R09: 0000000000000000 [ 287.296612][ T4976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.304672][ T4976] R13: 00007f36bdc26038 R14: 00007f36bdc25fa0 R15: 00007fffe0851b88 [ 287.312845][ T4976] [ 287.315910][ T4976] task:syz-executor state:S stack:22384 pid:4882 ppid:1 flags:0x00004002 [ 287.325351][ T4976] Call Trace: [ 287.328657][ T4976] [ 287.331654][ T4976] __schedule+0x107f/0x4030 [ 287.336238][ T4976] ? do_wait+0x6cb/0xb80 [ 287.340647][ T4976] ? __sched_text_start+0x8/0x8 [ 287.345556][ T4976] ? __lock_acquire+0x7c40/0x7c40 [ 287.350669][ T4976] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 287.356610][ T4976] ? _raw_spin_unlock+0x40/0x40 [ 287.361567][ T4976] schedule+0xb9/0x180 [ 287.365703][ T4976] do_wait+0x7a5/0xb80 [ 287.370026][ T4976] kernel_wait4+0x22b/0x2b0 [ 287.374606][ T4976] ? __ia32_sys_waitid+0xc0/0xc0 [ 287.379656][ T4976] ? kernel_waitid+0x3d0/0x3d0 [ 287.384678][ T4976] ? zap_pid_ns_processes+0x13a/0x690 [ 287.390157][ T4976] zap_pid_ns_processes+0x3a0/0x690 [ 287.395418][ T4976] ? zap_pid_ns_processes+0x13a/0x690 [ 287.400897][ T4976] ? lock_chain_count+0x20/0x20 [ 287.405816][ T4976] ? put_pid_ns+0x130/0x130 [ 287.410426][ T4976] ? _raw_write_unlock_irq+0x1f/0x40 [ 287.415780][ T4976] ? lockdep_hardirqs_on+0x94/0x140 [ 287.421066][ T4976] do_exit+0x20a2/0x2570 [ 287.425385][ T4976] ? put_task_struct+0x80/0x80 [ 287.430250][ T4976] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 287.436295][ T4976] ? lock_chain_count+0x20/0x20 [ 287.441241][ T4976] ? _raw_spin_lock_irq+0xb7/0xf0 [ 287.446320][ T4976] do_group_exit+0x229/0x2e0 [ 287.451004][ T4976] ? lockdep_hardirqs_on+0x94/0x140 [ 287.456259][ T4976] get_signal+0x1259/0x1340 [ 287.460875][ T4976] arch_do_signal_or_restart+0xc4/0x1310 [ 287.466566][ T4976] ? __ia32_sys_waitid+0xc0/0xc0 [ 287.471607][ T4976] ? kernel_waitid+0x3d0/0x3d0 [ 287.476469][ T4976] ? __might_sleep+0xd0/0xd0 [ 287.481153][ T4976] ? get_sigframe_size+0x10/0x10 [ 287.486149][ T4976] ? __x64_sys_wait4+0x1b4/0x230 [ 287.491202][ T4976] ? exit_to_user_mode_loop+0x3b/0x110 [ 287.496732][ T4976] exit_to_user_mode_loop+0x70/0x110 [ 287.502114][ T4976] exit_to_user_mode_prepare+0xee/0x180 [ 287.507772][ T4976] syscall_exit_to_user_mode+0x16/0x40 [ 287.513319][ T4976] do_syscall_64+0x58/0xa0 [ 287.517789][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 287.522643][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 287.527383][ T4976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.533364][ T4976] RIP: 0033:0x7f8fea55e90e [ 287.537831][ T4976] RSP: 002b:00007fff42028128 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 287.546343][ T4976] RAX: fffffffffffffe00 RBX: 00005555695e6500 RCX: 00007f8fea55e90e [ 287.554405][ T4976] RDX: 0000000040000000 RSI: 00007fff420281cc RDI: ffffffffffffffff [ 287.562499][ T4976] RBP: 00007fff420281cc R08: 0000000000000000 R09: 0000000000000000 [ 287.570551][ T4976] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 287.578570][ T4976] R13: 00005555695f9a00 R14: 0000000000022b16 R15: 00007fff42028220 [ 287.586646][ T4976] [ 287.589786][ T4976] task:syz-executor state:S stack:22384 pid:4987 ppid:1 flags:0x00004002 [ 287.599124][ T4976] Call Trace: [ 287.602450][ T4976] [ 287.605443][ T4976] __schedule+0x107f/0x4030 [ 287.610074][ T4976] ? do_wait+0x6cb/0xb80 [ 287.614386][ T4976] ? __sched_text_start+0x8/0x8 [ 287.619328][ T4976] ? __lock_acquire+0x7c40/0x7c40 [ 287.624420][ T4976] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 287.630406][ T4976] ? _raw_spin_unlock+0x40/0x40 [ 287.635314][ T4976] schedule+0xb9/0x180 [ 287.639479][ T4976] do_wait+0x7a5/0xb80 [ 287.643643][ T4976] kernel_wait4+0x22b/0x2b0 [ 287.648282][ T4976] ? __ia32_sys_waitid+0xc0/0xc0 [ 287.653307][ T4976] ? kernel_waitid+0x3d0/0x3d0 [ 287.658234][ T4976] ? zap_pid_ns_processes+0x13a/0x690 [ 287.663688][ T4976] zap_pid_ns_processes+0x3a0/0x690 [ 287.668947][ T4976] ? zap_pid_ns_processes+0x13a/0x690 [ 287.674490][ T4976] ? lock_chain_count+0x20/0x20 [ 287.679433][ T4976] ? put_pid_ns+0x130/0x130 [ 287.683994][ T4976] ? _raw_write_unlock_irq+0x1f/0x40 [ 287.689362][ T4976] ? lockdep_hardirqs_on+0x94/0x140 [ 287.694614][ T4976] do_exit+0x20a2/0x2570 [ 287.698931][ T4976] ? put_task_struct+0x80/0x80 [ 287.703783][ T4976] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 287.709864][ T4976] ? lock_chain_count+0x20/0x20 [ 287.714779][ T4976] ? _raw_spin_lock_irq+0xb7/0xf0 [ 287.719908][ T4976] do_group_exit+0x229/0x2e0 [ 287.724576][ T4976] ? lockdep_hardirqs_on+0x94/0x140 [ 287.729965][ T4976] get_signal+0x1259/0x1340 [ 287.734554][ T4976] arch_do_signal_or_restart+0xc4/0x1310 [ 287.740269][ T4976] ? __ia32_sys_waitid+0xc0/0xc0 [ 287.745271][ T4976] ? kernel_waitid+0x3d0/0x3d0 [ 287.750131][ T4976] ? __might_sleep+0xd0/0xd0 [ 287.754777][ T4976] ? get_sigframe_size+0x10/0x10 [ 287.759814][ T4976] ? __x64_sys_wait4+0x1b4/0x230 [ 287.764834][ T4976] ? exit_to_user_mode_loop+0x3b/0x110 [ 287.770414][ T4976] exit_to_user_mode_loop+0x70/0x110 [ 287.775758][ T4976] exit_to_user_mode_prepare+0xee/0x180 [ 287.781399][ T4976] syscall_exit_to_user_mode+0x16/0x40 [ 287.786933][ T4976] do_syscall_64+0x58/0xa0 [ 287.791434][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 287.796169][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 287.800935][ T4976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.807289][ T4976] RIP: 0033:0x7f970475e90e [ 287.811869][ T4976] RSP: 002b:00007fff3d6f2bf8 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 287.820374][ T4976] RAX: fffffffffffffe00 RBX: 0000555557958500 RCX: 00007f970475e90e [ 287.828396][ T4976] RDX: 0000000040000000 RSI: 00007fff3d6f2c9c RDI: ffffffffffffffff [ 287.836463][ T4976] RBP: 00007fff3d6f2c9c R08: 0000000000000000 R09: 0000000000000000 [ 287.844518][ T4976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 287.852584][ T4976] R13: 000055555796ba00 R14: 00000000000227ab R15: 00007fff3d6f2cf0 [ 287.860655][ T4976] [ 287.863730][ T4976] task:syz.2.188 state:D stack:27920 pid:5070 ppid:4287 flags:0x00004004 [ 287.873107][ T4976] Call Trace: [ 287.876427][ T4976] [ 287.879430][ T4976] __schedule+0x107f/0x4030 [ 287.884046][ T4976] ? __sched_text_start+0x8/0x8 [ 287.888952][ T4976] ? __mutex_trylock_common+0x86/0x260 [ 287.894692][ T4976] ? trace_raw_output_contention_end+0xd0/0xd0 [ 287.900976][ T4976] schedule+0xb9/0x180 [ 287.905108][ T4976] schedule_preempt_disabled+0xf/0x20 [ 287.910575][ T4976] __mutex_lock+0x548/0xae0 [ 287.915147][ T4976] ? __mutex_lock+0x3ba/0xae0 [ 287.919924][ T4976] ? misc_open+0x55/0x390 [ 287.924315][ T4976] ? mutex_lock_nested+0x10/0x10 [ 287.929347][ T4976] ? __lock_acquire+0x7c40/0x7c40 [ 287.934523][ T4976] ? kobject_get_unless_zero+0x15f/0x1e0 [ 287.940251][ T4976] ? __kobject_del+0x2e0/0x2e0 [ 287.945065][ T4976] ? memset+0x1e/0x40 [ 287.949141][ T4976] misc_open+0x55/0x390 [ 287.953363][ T4976] chrdev_open+0x585/0x5f0 [ 287.957841][ T4976] ? cd_forget+0x160/0x160 [ 287.962369][ T4976] ? fsnotify_perm+0x39b/0x550 [ 287.967206][ T4976] ? cd_forget+0x160/0x160 [ 287.971722][ T4976] do_dentry_open+0x7dd/0x10b0 [ 287.976556][ T4976] path_openat+0x2674/0x2f10 [ 287.981266][ T4976] ? verify_lock_unused+0x140/0x140 [ 287.986509][ T4976] ? do_sys_openat2+0xdd/0x4f0 [ 287.991344][ T4976] ? do_filp_open+0x420/0x420 [ 287.996087][ T4976] do_filp_open+0x1ee/0x420 [ 288.000724][ T4976] ? vfs_tmpfile+0x470/0x470 [ 288.005408][ T4976] ? _raw_spin_unlock+0x24/0x40 [ 288.010346][ T4976] ? alloc_fd+0x590/0x640 [ 288.014944][ T4976] do_sys_openat2+0x14b/0x4f0 [ 288.019732][ T4976] ? do_sys_open+0xe0/0xe0 [ 288.024404][ T4976] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 288.030492][ T4976] ? rcu_is_watching+0x11/0xa0 [ 288.035315][ T4976] ? lock_chain_count+0x20/0x20 [ 288.040259][ T4976] __x64_sys_openat+0x135/0x160 [ 288.045175][ T4976] do_syscall_64+0x4c/0xa0 [ 288.049690][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 288.054453][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 288.059220][ T4976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.065165][ T4976] RIP: 0033:0x7f3d1f59e0d9 [ 288.069670][ T4976] RSP: 002b:00007f3d2046f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 288.078170][ T4976] RAX: ffffffffffffffda RBX: 00007f3d1f825fa0 RCX: 00007f3d1f59e0d9 [ 288.086427][ T4976] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 288.094496][ T4976] RBP: 00007f3d1f635024 R08: 0000000000000000 R09: 0000000000000000 [ 288.102553][ T4976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.110612][ T4976] R13: 00007f3d1f826038 R14: 00007f3d1f825fa0 R15: 00007fff85fa2058 [ 288.118695][ T4976] [ 288.121818][ T4976] task:syz.4.189 state:D stack:27664 pid:5073 ppid:4286 flags:0x00004004 [ 288.131126][ T4976] Call Trace: [ 288.134445][ T4976] [ 288.137417][ T4976] __schedule+0x107f/0x4030 [ 288.142063][ T4976] ? __sched_text_start+0x8/0x8 [ 288.147082][ T4976] ? __mutex_trylock_common+0x86/0x260 [ 288.152662][ T4976] ? trace_raw_output_contention_end+0xd0/0xd0 [ 288.158890][ T4976] schedule+0xb9/0x180 [ 288.163065][ T4976] schedule_preempt_disabled+0xf/0x20 [ 288.168498][ T4976] __mutex_lock+0x548/0xae0 [ 288.173104][ T4976] ? __mutex_lock+0x3ba/0xae0 [ 288.177859][ T4976] ? misc_open+0x55/0x390 [ 288.182281][ T4976] ? mutex_lock_nested+0x10/0x10 [ 288.187285][ T4976] ? __lock_acquire+0x7c40/0x7c40 [ 288.192427][ T4976] ? kobject_get_unless_zero+0x15f/0x1e0 [ 288.198121][ T4976] ? __kobject_del+0x2e0/0x2e0 [ 288.202987][ T4976] ? memset+0x1e/0x40 [ 288.207054][ T4976] misc_open+0x55/0x390 [ 288.211310][ T4976] chrdev_open+0x585/0x5f0 [ 288.215877][ T4976] ? cd_forget+0x160/0x160 [ 288.220388][ T4976] ? fsnotify_perm+0x39b/0x550 [ 288.225230][ T4976] ? cd_forget+0x160/0x160 [ 288.229751][ T4976] do_dentry_open+0x7dd/0x10b0 [ 288.234596][ T4976] path_openat+0x2674/0x2f10 [ 288.239286][ T4976] ? verify_lock_unused+0x140/0x140 [ 288.244543][ T4976] ? do_sys_openat2+0xdd/0x4f0 [ 288.249409][ T4976] ? do_filp_open+0x420/0x420 [ 288.254167][ T4976] do_filp_open+0x1ee/0x420 [ 288.258731][ T4976] ? vfs_tmpfile+0x470/0x470 [ 288.263571][ T4976] ? _raw_spin_unlock+0x24/0x40 [ 288.268504][ T4976] ? alloc_fd+0x590/0x640 [ 288.272945][ T4976] do_sys_openat2+0x14b/0x4f0 [ 288.277678][ T4976] ? do_sys_open+0xe0/0xe0 [ 288.282192][ T4976] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 288.288235][ T4976] ? rcu_is_watching+0x11/0xa0 [ 288.293091][ T4976] ? lock_chain_count+0x20/0x20 [ 288.297999][ T4976] __x64_sys_openat+0x135/0x160 [ 288.302940][ T4976] do_syscall_64+0x4c/0xa0 [ 288.307412][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 288.312178][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 288.316948][ T4976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.322930][ T4976] RIP: 0033:0x7f474b59e0d9 [ 288.327393][ T4976] RSP: 002b:00007f47497f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 288.335908][ T4976] RAX: ffffffffffffffda RBX: 00007f474b825fa0 RCX: 00007f474b59e0d9 [ 288.343974][ T4976] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 288.352033][ T4976] RBP: 00007f474b635024 R08: 0000000000000000 R09: 0000000000000000 [ 288.360095][ T4976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.368118][ T4976] R13: 00007f474b826038 R14: 00007f474b825fa0 R15: 00007fff3339bc38 [ 288.376194][ T4976] [ 288.379298][ T4976] task:syz.5.196 state:D stack:26896 pid:5091 ppid:4882 flags:0x00004004 [ 288.388565][ T4976] Call Trace: [ 288.391928][ T4976] [ 288.394917][ T4976] __schedule+0x107f/0x4030 [ 288.399568][ T4976] ? __sched_text_start+0x8/0x8 [ 288.404486][ T4976] ? __mutex_trylock_common+0x86/0x260 [ 288.410137][ T4976] ? trace_raw_output_contention_end+0xd0/0xd0 [ 288.416441][ T4976] schedule+0xb9/0x180 [ 288.420616][ T4976] schedule_preempt_disabled+0xf/0x20 [ 288.426132][ T4976] __mutex_lock+0x548/0xae0 [ 288.430763][ T4976] ? __mutex_lock+0x3ba/0xae0 [ 288.435506][ T4976] ? misc_open+0x55/0x390 [ 288.439931][ T4976] ? mutex_lock_nested+0x10/0x10 [ 288.444934][ T4976] ? __lock_acquire+0x7c40/0x7c40 [ 288.450059][ T4976] ? kobject_get_unless_zero+0x15f/0x1e0 [ 288.455743][ T4976] ? __kobject_del+0x2e0/0x2e0 [ 288.460595][ T4976] ? memset+0x1e/0x40 [ 288.464632][ T4976] misc_open+0x55/0x390 [ 288.468851][ T4976] chrdev_open+0x585/0x5f0 [ 288.473356][ T4976] ? cd_forget+0x160/0x160 [ 288.477832][ T4976] ? fsnotify_perm+0x39b/0x550 [ 288.482699][ T4976] ? cd_forget+0x160/0x160 [ 288.487185][ T4976] do_dentry_open+0x7dd/0x10b0 [ 288.492057][ T4976] path_openat+0x2674/0x2f10 [ 288.496753][ T4976] ? verify_lock_unused+0x140/0x140 [ 288.502051][ T4976] ? do_sys_openat2+0xdd/0x4f0 [ 288.506883][ T4976] ? do_filp_open+0x420/0x420 [ 288.511664][ T4976] do_filp_open+0x1ee/0x420 [ 288.516226][ T4976] ? vfs_tmpfile+0x470/0x470 [ 288.520934][ T4976] ? _raw_spin_unlock+0x24/0x40 [ 288.525833][ T4976] ? alloc_fd+0x590/0x640 [ 288.530262][ T4976] do_sys_openat2+0x14b/0x4f0 [ 288.535010][ T4976] ? do_sys_open+0xe0/0xe0 [ 288.539513][ T4976] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 288.545569][ T4976] ? lock_chain_count+0x20/0x20 [ 288.550520][ T4976] __x64_sys_openat+0x135/0x160 [ 288.555445][ T4976] do_syscall_64+0x4c/0xa0 [ 288.560036][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 288.564942][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 288.569714][ T4976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.575664][ T4976] RIP: 0033:0x7f8fea55e90e [ 288.580158][ T4976] RSP: 002b:00007f8feb442ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 288.588637][ T4976] RAX: ffffffffffffffda RBX: 00007f8feb4456c0 RCX: 00007f8fea55e90e [ 288.596957][ T4976] RDX: 0000000000000002 RSI: 00007f8fea6343aa RDI: ffffffffffffff9c [ 288.605010][ T4976] RBP: 00007f8fea635024 R08: 0000000000000000 R09: 0000000000000000 [ 288.613152][ T4976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000036 [ 288.621207][ T4976] R13: 0000200000000000 R14: 0000000000000000 R15: 00007fff42027e28 [ 288.629272][ T4976] [ 288.632338][ T4976] task:syz-executor state:D stack:27760 pid:5108 ppid:1 flags:0x00004004 [ 288.641677][ T4976] Call Trace: [ 288.645260][ T4976] [ 288.648262][ T4976] __schedule+0x107f/0x4030 [ 288.652887][ T4976] ? __sched_text_start+0x8/0x8 [ 288.657789][ T4976] ? __mutex_trylock_common+0x86/0x260 [ 288.663342][ T4976] ? trace_raw_output_contention_end+0xd0/0xd0 [ 288.669601][ T4976] schedule+0xb9/0x180 [ 288.673736][ T4976] schedule_preempt_disabled+0xf/0x20 [ 288.679199][ T4976] __mutex_lock+0x548/0xae0 [ 288.683774][ T4976] ? __mutex_lock+0x3ba/0xae0 [ 288.688609][ T4976] ? misc_open+0x55/0x390 [ 288.693069][ T4976] ? mutex_lock_nested+0x10/0x10 [ 288.698169][ T4976] ? __lock_acquire+0x7c40/0x7c40 [ 288.703293][ T4976] ? kobject_get_unless_zero+0x15f/0x1e0 [ 288.709066][ T4976] ? __kobject_del+0x2e0/0x2e0 [ 288.713931][ T4976] ? memset+0x1e/0x40 [ 288.718224][ T4976] misc_open+0x55/0x390 [ 288.722653][ T4976] chrdev_open+0x585/0x5f0 [ 288.727135][ T4976] ? cd_forget+0x160/0x160 [ 288.731640][ T4976] ? fsnotify_perm+0x39b/0x550 [ 288.736463][ T4976] ? cd_forget+0x160/0x160 [ 288.741007][ T4976] do_dentry_open+0x7dd/0x10b0 [ 288.745931][ T4976] path_openat+0x2674/0x2f10 [ 288.750626][ T4976] ? do_user_addr_fault+0x8a6/0xb20 [ 288.755909][ T4976] ? do_filp_open+0x420/0x420 [ 288.760797][ T4976] ? up_read+0x20/0x20 [ 288.765211][ T4976] do_filp_open+0x1ee/0x420 [ 288.769806][ T4976] ? vfs_tmpfile+0x470/0x470 [ 288.774477][ T4976] ? _raw_spin_unlock+0x24/0x40 [ 288.779408][ T4976] ? alloc_fd+0x590/0x640 [ 288.783801][ T4976] do_sys_openat2+0x14b/0x4f0 [ 288.788526][ T4976] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 288.794591][ T4976] ? do_sys_open+0xe0/0xe0 [ 288.799111][ T4976] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 288.805158][ T4976] ? fd_install+0x5c/0x4e0 [ 288.809672][ T4976] ? lock_chain_count+0x20/0x20 [ 288.814591][ T4976] __x64_sys_openat+0x135/0x160 [ 288.819542][ T4976] do_syscall_64+0x4c/0xa0 [ 288.824014][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 288.828760][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 288.833527][ T4976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.839520][ T4976] RIP: 0033:0x7f1143159257 [ 288.843981][ T4976] RSP: 002b:00007ffceb5a30f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 288.852477][ T4976] RAX: ffffffffffffffda RBX: 0000555565a4d500 RCX: 00007f1143159257 [ 288.860563][ T4976] RDX: 0000000000000002 RSI: 00007f1143235067 RDI: ffffffffffffff9c [ 288.868658][ T4976] RBP: 00007f11434267b8 R08: 0000000000000000 R09: 0000000000000000 [ 288.876698][ T4976] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 288.884754][ T4976] R13: 0000000000000003 R14: 00007ffceb5a3458 R15: 0000000000000000 [ 288.892824][ T4976] [ 288.895888][ T4976] task:syz-executor state:D stack:27920 pid:5112 ppid:1 flags:0x00004004 [ 288.905208][ T4976] Call Trace: [ 288.908533][ T4976] [ 288.911555][ T4976] __schedule+0x107f/0x4030 [ 288.916147][ T4976] ? __sched_text_start+0x8/0x8 [ 288.921104][ T4976] ? __mutex_trylock_common+0x86/0x260 [ 288.926641][ T4976] ? trace_raw_output_contention_end+0xd0/0xd0 [ 288.932911][ T4976] schedule+0xb9/0x180 [ 288.937043][ T4976] schedule_preempt_disabled+0xf/0x20 [ 288.942518][ T4976] __mutex_lock+0x548/0xae0 [ 288.947093][ T4976] ? __mutex_lock+0x3ba/0xae0 [ 288.952009][ T4976] ? misc_open+0x55/0x390 [ 288.956394][ T4976] ? mutex_lock_nested+0x10/0x10 [ 288.961435][ T4976] ? __lock_acquire+0x7c40/0x7c40 [ 288.966522][ T4976] ? kobject_get_unless_zero+0x15f/0x1e0 [ 288.972242][ T4976] ? __kobject_del+0x2e0/0x2e0 [ 288.977048][ T4976] ? memset+0x1e/0x40 [ 288.981154][ T4976] misc_open+0x55/0x390 [ 288.985364][ T4976] chrdev_open+0x585/0x5f0 [ 288.989868][ T4976] ? cd_forget+0x160/0x160 [ 288.994366][ T4976] ? fsnotify_perm+0x39b/0x550 [ 288.999229][ T4976] ? cd_forget+0x160/0x160 [ 289.003968][ T4976] do_dentry_open+0x7dd/0x10b0 [ 289.008874][ T4976] path_openat+0x2674/0x2f10 [ 289.013558][ T4976] ? do_user_addr_fault+0x8a6/0xb20 [ 289.019127][ T4976] ? do_filp_open+0x420/0x420 [ 289.023853][ T4976] ? up_read+0x20/0x20 [ 289.027992][ T4976] do_filp_open+0x1ee/0x420 [ 289.032602][ T4976] ? vfs_tmpfile+0x470/0x470 [ 289.037284][ T4976] ? _raw_spin_unlock+0x24/0x40 [ 289.042260][ T4976] ? alloc_fd+0x590/0x640 [ 289.046755][ T4976] do_sys_openat2+0x14b/0x4f0 [ 289.051527][ T4976] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 289.057655][ T4976] ? do_sys_open+0xe0/0xe0 [ 289.062170][ T4976] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 289.068251][ T4976] ? fd_install+0x5c/0x4e0 [ 289.072772][ T4976] ? lock_chain_count+0x20/0x20 [ 289.077682][ T4976] __x64_sys_openat+0x135/0x160 [ 289.082640][ T4976] do_syscall_64+0x4c/0xa0 [ 289.087123][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 289.092163][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 289.096908][ T4976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.102894][ T4976] RIP: 0033:0x7f25ee759257 [ 289.107357][ T4976] RSP: 002b:00007ffc877d3f90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 289.115870][ T4976] RAX: ffffffffffffffda RBX: 000055556b5df500 RCX: 00007f25ee759257 [ 289.124105][ T4976] RDX: 0000000000000002 RSI: 00007f25ee835067 RDI: ffffffffffffff9c [ 289.132157][ T4976] RBP: 00007f25eea267b8 R08: 0000000000000000 R09: 0000000000000000 [ 289.140217][ T4976] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 289.148251][ T4976] R13: 0000000000000003 R14: 00007ffc877d42f8 R15: 0000000000000000 [ 289.156336][ T4976] [ 289.159432][ T4976] task:syz-executor state:D stack:26896 pid:5113 ppid:1 flags:0x00004004 [ 289.168838][ T4976] Call Trace: [ 289.172241][ T4976] [ 289.175229][ T4976] __schedule+0x107f/0x4030 [ 289.179863][ T4976] ? __sched_text_start+0x8/0x8 [ 289.184869][ T4976] ? __mutex_trylock_common+0x86/0x260 [ 289.190525][ T4976] ? trace_raw_output_contention_end+0xd0/0xd0 [ 289.196744][ T4976] schedule+0xb9/0x180 [ 289.200917][ T4976] schedule_preempt_disabled+0xf/0x20 [ 289.206351][ T4976] __mutex_lock+0x548/0xae0 [ 289.211088][ T4976] ? __mutex_lock+0x3ba/0xae0 [ 289.215853][ T4976] ? misc_open+0x55/0x390 [ 289.220274][ T4976] ? mutex_lock_nested+0x10/0x10 [ 289.225277][ T4976] ? __lock_acquire+0x7c40/0x7c40 [ 289.230408][ T4976] ? kobject_get_unless_zero+0x15f/0x1e0 [ 289.236466][ T4976] ? __kobject_del+0x2e0/0x2e0 [ 289.241315][ T4976] ? memset+0x1e/0x40 [ 289.245351][ T4976] misc_open+0x55/0x390 [ 289.249640][ T4976] chrdev_open+0x585/0x5f0 [ 289.254111][ T4976] ? cd_forget+0x160/0x160 [ 289.258601][ T4976] ? fsnotify_perm+0x39b/0x550 [ 289.263479][ T4976] ? cd_forget+0x160/0x160 [ 289.267953][ T4976] do_dentry_open+0x7dd/0x10b0 [ 289.272857][ T4976] path_openat+0x2674/0x2f10 [ 289.277520][ T4976] ? do_user_addr_fault+0x8a6/0xb20 [ 289.282846][ T4976] ? do_filp_open+0x420/0x420 [ 289.287575][ T4976] ? up_read+0x20/0x20 [ 289.291756][ T4976] do_filp_open+0x1ee/0x420 [ 289.296315][ T4976] ? vfs_tmpfile+0x470/0x470 [ 289.301011][ T4976] ? _raw_spin_unlock+0x24/0x40 [ 289.305916][ T4976] ? alloc_fd+0x590/0x640 [ 289.310356][ T4976] do_sys_openat2+0x14b/0x4f0 [ 289.315099][ T4976] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 289.321172][ T4976] ? do_sys_open+0xe0/0xe0 [ 289.325646][ T4976] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 289.331725][ T4976] ? fd_install+0x5c/0x4e0 [ 289.336198][ T4976] ? lock_chain_count+0x20/0x20 [ 289.341145][ T4976] __x64_sys_openat+0x135/0x160 [ 289.346073][ T4976] do_syscall_64+0x4c/0xa0 [ 289.350583][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 289.355361][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 289.360182][ T4976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.366164][ T4976] RIP: 0033:0x7f786a959257 [ 289.370686][ T4976] RSP: 002b:00007ffcd4e0ea90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 289.379199][ T4976] RAX: ffffffffffffffda RBX: 00005555725bd500 RCX: 00007f786a959257 [ 289.387233][ T4976] RDX: 0000000000000002 RSI: 00007f786aa35067 RDI: ffffffffffffff9c [ 289.395393][ T4976] RBP: 00007f786ac267b8 R08: 0000000000000000 R09: 0000000000000000 [ 289.403493][ T4976] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 289.411560][ T4976] R13: 0000000000000003 R14: 00007ffcd4e0edf8 R15: 0000000000000000 [ 289.420005][ T4976] [ 289.423075][ T4976] task:syz-executor state:D stack:27920 pid:5114 ppid:1 flags:0x00004004 [ 289.432379][ T4976] Call Trace: [ 289.435704][ T4976] [ 289.438682][ T4976] __schedule+0x107f/0x4030 [ 289.443318][ T4976] ? __sched_text_start+0x8/0x8 [ 289.448230][ T4976] ? __mutex_trylock_common+0x86/0x260 [ 289.453788][ T4976] ? trace_raw_output_contention_end+0xd0/0xd0 [ 289.460041][ T4976] schedule+0xb9/0x180 [ 289.464170][ T4976] schedule_preempt_disabled+0xf/0x20 [ 289.469631][ T4976] __mutex_lock+0x548/0xae0 [ 289.474199][ T4976] ? __mutex_lock+0x3ba/0xae0 [ 289.478942][ T4976] ? misc_open+0x55/0x390 [ 289.483388][ T4976] ? mutex_lock_nested+0x10/0x10 [ 289.488395][ T4976] ? __lock_acquire+0x7c40/0x7c40 [ 289.493526][ T4976] ? kobject_get_unless_zero+0x15f/0x1e0 [ 289.499233][ T4976] ? __kobject_del+0x2e0/0x2e0 [ 289.504041][ T4976] ? memset+0x1e/0x40 [ 289.508071][ T4976] misc_open+0x55/0x390 [ 289.512316][ T4976] chrdev_open+0x585/0x5f0 [ 289.516789][ T4976] ? cd_forget+0x160/0x160 [ 289.521299][ T4976] ? fsnotify_perm+0x39b/0x550 [ 289.526120][ T4976] ? cd_forget+0x160/0x160 [ 289.530619][ T4976] do_dentry_open+0x7dd/0x10b0 [ 289.535458][ T4976] path_openat+0x2674/0x2f10 [ 289.540160][ T4976] ? do_user_addr_fault+0x8a6/0xb20 [ 289.545423][ T4976] ? do_filp_open+0x420/0x420 [ 289.550184][ T4976] ? up_read+0x20/0x20 [ 289.554323][ T4976] do_filp_open+0x1ee/0x420 [ 289.558894][ T4976] ? vfs_tmpfile+0x470/0x470 [ 289.563610][ T4976] ? _raw_spin_unlock+0x24/0x40 [ 289.568511][ T4976] ? alloc_fd+0x590/0x640 [ 289.573048][ T4976] do_sys_openat2+0x14b/0x4f0 [ 289.577798][ T4976] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 289.583885][ T4976] ? do_sys_open+0xe0/0xe0 [ 289.588379][ T4976] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 289.594461][ T4976] ? fd_install+0x5c/0x4e0 [ 289.598938][ T4976] ? lock_chain_count+0x20/0x20 [ 289.603909][ T4976] __x64_sys_openat+0x135/0x160 [ 289.608840][ T4976] do_syscall_64+0x4c/0xa0 [ 289.613348][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 289.618081][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 289.622945][ T4976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.628883][ T4976] RIP: 0033:0x7f4966d59257 [ 289.633375][ T4976] RSP: 002b:00007ffecabf3330 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 289.641974][ T4976] RAX: ffffffffffffffda RBX: 0000555569826500 RCX: 00007f4966d59257 [ 289.650210][ T4976] RDX: 0000000000000002 RSI: 00007f4966e35067 RDI: ffffffffffffff9c [ 289.658235][ T4976] RBP: 00007f49670267b8 R08: 0000000000000000 R09: 0000000000000000 [ 289.666299][ T4976] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 289.674392][ T4976] R13: 0000000000000003 R14: 00007ffecabf3698 R15: 0000000000000000 [ 289.682476][ T4976] [ 289.685553][ T4976] task:syz-executor state:D stack:27920 pid:5116 ppid:1 flags:0x00004004 [ 289.694887][ T4976] Call Trace: [ 289.698214][ T4976] [ 289.701227][ T4976] __schedule+0x107f/0x4030 [ 289.705824][ T4976] ? __sched_text_start+0x8/0x8 [ 289.710758][ T4976] ? __mutex_trylock_common+0x86/0x260 [ 289.716274][ T4976] ? trace_raw_output_contention_end+0xd0/0xd0 [ 289.722528][ T4976] schedule+0xb9/0x180 [ 289.726685][ T4976] schedule_preempt_disabled+0xf/0x20 [ 289.732146][ T4976] __mutex_lock+0x548/0xae0 [ 289.736713][ T4976] ? __mutex_lock+0x3ba/0xae0 [ 289.741491][ T4976] ? misc_open+0x55/0x390 [ 289.745875][ T4976] ? mutex_lock_nested+0x10/0x10 [ 289.750917][ T4976] ? __lock_acquire+0x7c40/0x7c40 [ 289.756002][ T4976] ? kobject_get_unless_zero+0x15f/0x1e0 [ 289.761815][ T4976] ? __kobject_del+0x2e0/0x2e0 [ 289.766628][ T4976] ? memset+0x1e/0x40 [ 289.770699][ T4976] misc_open+0x55/0x390 [ 289.774914][ T4976] chrdev_open+0x585/0x5f0 [ 289.779447][ T4976] ? cd_forget+0x160/0x160 [ 289.783942][ T4976] ? fsnotify_perm+0x39b/0x550 [ 289.788744][ T4976] ? cd_forget+0x160/0x160 [ 289.793226][ T4976] do_dentry_open+0x7dd/0x10b0 [ 289.798076][ T4976] path_openat+0x2674/0x2f10 [ 289.802777][ T4976] ? do_user_addr_fault+0x8a6/0xb20 [ 289.808063][ T4976] ? do_filp_open+0x420/0x420 [ 289.812837][ T4976] ? up_read+0x20/0x20 [ 289.817000][ T4976] do_filp_open+0x1ee/0x420 [ 289.821623][ T4976] ? vfs_tmpfile+0x470/0x470 [ 289.826320][ T4976] ? _raw_spin_unlock+0x24/0x40 [ 289.831263][ T4976] ? alloc_fd+0x590/0x640 [ 289.835680][ T4976] do_sys_openat2+0x14b/0x4f0 [ 289.840476][ T4976] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 289.846525][ T4976] ? do_sys_open+0xe0/0xe0 [ 289.851070][ T4976] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 289.857292][ T4976] ? fd_install+0x5c/0x4e0 [ 289.861809][ T4976] ? lock_chain_count+0x20/0x20 [ 289.866748][ T4976] __x64_sys_openat+0x135/0x160 [ 289.871801][ T4976] do_syscall_64+0x4c/0xa0 [ 289.876280][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 289.881061][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 289.885918][ T4976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.891911][ T4976] RIP: 0033:0x7fb5d1559257 [ 289.896400][ T4976] RSP: 002b:00007fffc9648430 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 289.904901][ T4976] RAX: ffffffffffffffda RBX: 0000555576f09500 RCX: 00007fb5d1559257 [ 289.912957][ T4976] RDX: 0000000000000002 RSI: 00007fb5d1635067 RDI: ffffffffffffff9c [ 289.921043][ T4976] RBP: 00007fb5d18267b8 R08: 0000000000000000 R09: 0000000000000000 [ 289.929184][ T4976] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 289.937212][ T4976] R13: 0000000000000003 R14: 00007fffc9648798 R15: 0000000000000000 [ 289.945324][ T4976] [ 289.948388][ T4976] task:syz-executor state:D stack:27920 pid:5126 ppid:5125 flags:0x00004004 [ 289.957698][ T4976] Call Trace: [ 289.961055][ T4976] [ 289.964037][ T4976] __schedule+0x107f/0x4030 [ 289.968627][ T4976] ? __sched_text_start+0x8/0x8 [ 289.973579][ T4976] ? __mutex_trylock_common+0x86/0x260 [ 289.979152][ T4976] ? trace_raw_output_contention_end+0xd0/0xd0 [ 289.985384][ T4976] schedule+0xb9/0x180 [ 289.989611][ T4976] schedule_preempt_disabled+0xf/0x20 [ 289.995056][ T4976] __mutex_lock+0x548/0xae0 [ 289.999654][ T4976] ? __mutex_lock+0x3ba/0xae0 [ 290.004517][ T4976] ? misc_open+0x55/0x390 [ 290.009013][ T4976] ? mutex_lock_nested+0x10/0x10 [ 290.014058][ T4976] ? __lock_acquire+0x7c40/0x7c40 [ 290.019183][ T4976] ? kobject_get_unless_zero+0x15f/0x1e0 [ 290.024865][ T4976] ? __kobject_del+0x2e0/0x2e0 [ 290.029708][ T4976] ? memset+0x1e/0x40 [ 290.033741][ T4976] misc_open+0x55/0x390 [ 290.037953][ T4976] chrdev_open+0x585/0x5f0 [ 290.042465][ T4976] ? cd_forget+0x160/0x160 [ 290.046957][ T4976] ? fsnotify_perm+0x39b/0x550 [ 290.051807][ T4976] ? cd_forget+0x160/0x160 [ 290.056272][ T4976] do_dentry_open+0x7dd/0x10b0 [ 290.061229][ T4976] path_openat+0x2674/0x2f10 [ 290.065901][ T4976] ? do_user_addr_fault+0x8a6/0xb20 [ 290.071207][ T4976] ? do_filp_open+0x420/0x420 [ 290.075935][ T4976] ? up_read+0x20/0x20 [ 290.080103][ T4976] do_filp_open+0x1ee/0x420 [ 290.084663][ T4976] ? vfs_tmpfile+0x470/0x470 [ 290.089389][ T4976] ? _raw_spin_unlock+0x24/0x40 [ 290.094287][ T4976] ? alloc_fd+0x590/0x640 [ 290.098681][ T4976] do_sys_openat2+0x14b/0x4f0 [ 290.103473][ T4976] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 290.109545][ T4976] ? do_sys_open+0xe0/0xe0 [ 290.114019][ T4976] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 290.120177][ T4976] ? fd_install+0x5c/0x4e0 [ 290.124654][ T4976] ? lock_chain_count+0x20/0x20 [ 290.129686][ T4976] __x64_sys_openat+0x135/0x160 [ 290.134610][ T4976] do_syscall_64+0x4c/0xa0 [ 290.139138][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 290.143884][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 290.148627][ T4976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.154628][ T4976] RIP: 0033:0x7fc4f5159257 [ 290.159136][ T4976] RSP: 002b:00007ffeffc64060 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 290.167627][ T4976] RAX: ffffffffffffffda RBX: 000055557dcec500 RCX: 00007fc4f5159257 [ 290.175813][ T4976] RDX: 0000000000000002 RSI: 00007fc4f5235067 RDI: ffffffffffffff9c [ 290.183894][ T4976] RBP: 00007fc4f54267b8 R08: 0000000000000000 R09: 0000000000000000 [ 290.191946][ T4976] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 290.200007][ T4976] R13: 0000000000000003 R14: 00007ffeffc643c8 R15: 0000000000000000 [ 290.208060][ T4976] [ 290.211170][ T4976] task:syz-executor state:D stack:27920 pid:5130 ppid:5127 flags:0x00004004 [ 290.220459][ T4976] Call Trace: [ 290.223777][ T4976] [ 290.226756][ T4976] __schedule+0x107f/0x4030 [ 290.231385][ T4976] ? __sched_text_start+0x8/0x8 [ 290.236291][ T4976] ? __mutex_trylock_common+0x86/0x260 [ 290.241846][ T4976] ? trace_raw_output_contention_end+0xd0/0xd0 [ 290.248075][ T4976] schedule+0xb9/0x180 [ 290.252245][ T4976] schedule_preempt_disabled+0xf/0x20 [ 290.257688][ T4976] __mutex_lock+0x548/0xae0 [ 290.262292][ T4976] ? __mutex_lock+0x3ba/0xae0 [ 290.267033][ T4976] ? misc_open+0x55/0x390 [ 290.271459][ T4976] ? mutex_lock_nested+0x10/0x10 [ 290.276462][ T4976] ? __lock_acquire+0x7c40/0x7c40 [ 290.281583][ T4976] ? kobject_get_unless_zero+0x15f/0x1e0 [ 290.287266][ T4976] ? __kobject_del+0x2e0/0x2e0 [ 290.292120][ T4976] ? memset+0x1e/0x40 [ 290.296149][ T4976] misc_open+0x55/0x390 [ 290.300394][ T4976] chrdev_open+0x585/0x5f0 [ 290.304873][ T4976] ? cd_forget+0x160/0x160 [ 290.309376][ T4976] ? fsnotify_perm+0x39b/0x550 [ 290.314201][ T4976] ? cd_forget+0x160/0x160 [ 290.318760][ T4976] do_dentry_open+0x7dd/0x10b0 [ 290.323730][ T4976] path_openat+0x2674/0x2f10 [ 290.328395][ T4976] ? do_user_addr_fault+0x8a6/0xb20 [ 290.333692][ T4976] ? do_filp_open+0x420/0x420 [ 290.338708][ T4976] ? up_read+0x20/0x20 [ 290.342884][ T4976] do_filp_open+0x1ee/0x420 [ 290.347453][ T4976] ? vfs_tmpfile+0x470/0x470 [ 290.352185][ T4976] ? _raw_spin_unlock+0x24/0x40 [ 290.357088][ T4976] ? alloc_fd+0x590/0x640 [ 290.361511][ T4976] do_sys_openat2+0x14b/0x4f0 [ 290.366446][ T4976] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 290.372527][ T4976] ? do_sys_open+0xe0/0xe0 [ 290.377002][ T4976] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 290.383505][ T4976] ? fd_install+0x5c/0x4e0 [ 290.387989][ T4976] ? lock_chain_count+0x20/0x20 [ 290.392948][ T4976] __x64_sys_openat+0x135/0x160 [ 290.397862][ T4976] do_syscall_64+0x4c/0xa0 [ 290.402376][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 290.407111][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 290.411879][ T4976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.417869][ T4976] RIP: 0033:0x7f65a5159257 [ 290.422492][ T4976] RSP: 002b:00007ffd31d443e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 290.430999][ T4976] RAX: ffffffffffffffda RBX: 0000555576e9d500 RCX: 00007f65a5159257 [ 290.439026][ T4976] RDX: 0000000000000002 RSI: 00007f65a5235067 RDI: ffffffffffffff9c [ 290.447109][ T4976] RBP: 00007f65a54267b8 R08: 0000000000000000 R09: 0000000000000000 [ 290.455160][ T4976] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 290.463209][ T4976] R13: 0000000000000003 R14: 00007ffd31d44748 R15: 0000000000000000 [ 290.471284][ T4976] [ 290.474351][ T4976] task:syz-executor state:D stack:27920 pid:5131 ppid:5128 flags:0x00004004 [ 290.483652][ T4976] Call Trace: [ 290.486977][ T4976] [ 290.490003][ T4976] __schedule+0x107f/0x4030 [ 290.494628][ T4976] ? __sched_text_start+0x8/0x8 [ 290.499569][ T4976] ? __mutex_trylock_common+0x86/0x260 [ 290.505520][ T4976] ? trace_raw_output_contention_end+0xd0/0xd0 [ 290.511774][ T4976] schedule+0xb9/0x180 [ 290.515902][ T4976] schedule_preempt_disabled+0xf/0x20 [ 290.521435][ T4976] __mutex_lock+0x548/0xae0 [ 290.526036][ T4976] ? __mutex_lock+0x3ba/0xae0 [ 290.530856][ T4976] ? misc_open+0x55/0x390 [ 290.535263][ T4976] ? mutex_lock_nested+0x10/0x10 [ 290.540328][ T4976] ? __lock_acquire+0x7c40/0x7c40 [ 290.545427][ T4976] ? kobject_get_unless_zero+0x15f/0x1e0 [ 290.551175][ T4976] ? __kobject_del+0x2e0/0x2e0 [ 290.556007][ T4976] ? memset+0x1e/0x40 [ 290.560111][ T4976] misc_open+0x55/0x390 [ 290.564335][ T4976] chrdev_open+0x585/0x5f0 [ 290.568916][ T4976] ? cd_forget+0x160/0x160 [ 290.573451][ T4976] ? fsnotify_perm+0x39b/0x550 [ 290.578284][ T4976] ? cd_forget+0x160/0x160 [ 290.582835][ T4976] do_dentry_open+0x7dd/0x10b0 [ 290.587702][ T4976] path_openat+0x2674/0x2f10 [ 290.592431][ T4976] ? do_user_addr_fault+0x8a6/0xb20 [ 290.597704][ T4976] ? do_filp_open+0x420/0x420 [ 290.602520][ T4976] ? up_read+0x20/0x20 [ 290.606678][ T4976] do_filp_open+0x1ee/0x420 [ 290.611281][ T4976] ? vfs_tmpfile+0x470/0x470 [ 290.615947][ T4976] ? _raw_spin_unlock+0x24/0x40 [ 290.620976][ T4976] ? alloc_fd+0x590/0x640 [ 290.625388][ T4976] do_sys_openat2+0x14b/0x4f0 [ 290.630165][ T4976] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 290.636201][ T4976] ? do_sys_open+0xe0/0xe0 [ 290.640720][ T4976] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 290.646766][ T4976] ? fd_install+0x5c/0x4e0 [ 290.651458][ T4976] ? lock_chain_count+0x20/0x20 [ 290.656384][ T4976] __x64_sys_openat+0x135/0x160 [ 290.661440][ T4976] do_syscall_64+0x4c/0xa0 [ 290.666004][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 290.670774][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 290.675540][ T4976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.681532][ T4976] RIP: 0033:0x7f58e9159257 [ 290.686003][ T4976] RSP: 002b:00007ffd9cc9ae80 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 290.694513][ T4976] RAX: ffffffffffffffda RBX: 0000555581b40500 RCX: 00007f58e9159257 [ 290.702567][ T4976] RDX: 0000000000000002 RSI: 00007f58e9235067 RDI: ffffffffffffff9c [ 290.710703][ T4976] RBP: 00007f58e94267b8 R08: 0000000000000000 R09: 0000000000000000 [ 290.718722][ T4976] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 290.726784][ T4976] R13: 0000000000000003 R14: 00007ffd9cc9b1e8 R15: 0000000000000000 [ 290.734856][ T4976] [ 290.737922][ T4976] task:syz-executor state:D stack:27920 pid:5132 ppid:5129 flags:0x00004004 [ 290.747242][ T4976] Call Trace: [ 290.750600][ T4976] [ 290.753583][ T4976] __schedule+0x107f/0x4030 [ 290.758178][ T4976] ? __sched_text_start+0x8/0x8 [ 290.763205][ T4976] ? __mutex_trylock_common+0x86/0x260 [ 290.768722][ T4976] ? trace_raw_output_contention_end+0xd0/0xd0 [ 290.774978][ T4976] schedule+0xb9/0x180 [ 290.779143][ T4976] schedule_preempt_disabled+0xf/0x20 [ 290.784579][ T4976] __mutex_lock+0x548/0xae0 [ 290.789178][ T4976] ? __mutex_lock+0x3ba/0xae0 [ 290.793916][ T4976] ? misc_open+0x55/0x390 [ 290.798329][ T4976] ? mutex_lock_nested+0x10/0x10 [ 290.803394][ T4976] ? __lock_acquire+0x7c40/0x7c40 [ 290.808473][ T4976] ? kobject_get_unless_zero+0x15f/0x1e0 [ 290.814191][ T4976] ? __kobject_del+0x2e0/0x2e0 [ 290.818996][ T4976] ? memset+0x1e/0x40 [ 290.823059][ T4976] misc_open+0x55/0x390 [ 290.827304][ T4976] chrdev_open+0x585/0x5f0 [ 290.831819][ T4976] ? cd_forget+0x160/0x160 [ 290.836290][ T4976] ? fsnotify_perm+0x39b/0x550 [ 290.841145][ T4976] ? cd_forget+0x160/0x160 [ 290.845610][ T4976] do_dentry_open+0x7dd/0x10b0 [ 290.850483][ T4976] path_openat+0x2674/0x2f10 [ 290.855145][ T4976] ? do_user_addr_fault+0x8a6/0xb20 [ 290.860460][ T4976] ? do_filp_open+0x420/0x420 [ 290.865227][ T4976] ? up_read+0x20/0x20 [ 290.869412][ T4976] do_filp_open+0x1ee/0x420 [ 290.873970][ T4976] ? vfs_tmpfile+0x470/0x470 [ 290.878636][ T4976] ? _raw_spin_unlock+0x24/0x40 [ 290.883578][ T4976] ? alloc_fd+0x590/0x640 [ 290.887985][ T4976] do_sys_openat2+0x14b/0x4f0 [ 290.892762][ T4976] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 290.898802][ T4976] ? do_sys_open+0xe0/0xe0 [ 290.903354][ T4976] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 290.909429][ T4976] ? fd_install+0x5c/0x4e0 [ 290.913902][ T4976] ? lock_chain_count+0x20/0x20 [ 290.918914][ T4976] __x64_sys_openat+0x135/0x160 [ 290.923866][ T4976] do_syscall_64+0x4c/0xa0 [ 290.928359][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 290.933228][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 290.938061][ T4976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.944046][ T4976] RIP: 0033:0x7f8ec1f59257 [ 290.948513][ T4976] RSP: 002b:00007ffff0d6e6c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 290.957140][ T4976] RAX: ffffffffffffffda RBX: 0000555585a7c500 RCX: 00007f8ec1f59257 [ 290.965305][ T4976] RDX: 0000000000000002 RSI: 00007f8ec2035067 RDI: ffffffffffffff9c [ 290.973450][ T4976] RBP: 00007f8ec22267b8 R08: 0000000000000000 R09: 0000000000000000 [ 290.981498][ T4976] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 290.989550][ T4976] R13: 0000000000000003 R14: 00007ffff0d6ea28 R15: 0000000000000000 [ 290.997599][ T4976] [ 291.000714][ T4976] task:syz-executor state:D stack:27920 pid:5134 ppid:5133 flags:0x00004004 [ 291.010043][ T4976] Call Trace: [ 291.013370][ T4976] [ 291.016355][ T4976] __schedule+0x107f/0x4030 [ 291.021066][ T4976] ? __sched_text_start+0x8/0x8 [ 291.025983][ T4976] ? __mutex_trylock_common+0x86/0x260 [ 291.031533][ T4976] ? trace_raw_output_contention_end+0xd0/0xd0 [ 291.037752][ T4976] schedule+0xb9/0x180 [ 291.041949][ T4976] schedule_preempt_disabled+0xf/0x20 [ 291.047383][ T4976] __mutex_lock+0x548/0xae0 [ 291.051985][ T4976] ? __mutex_lock+0x3ba/0xae0 [ 291.056725][ T4976] ? misc_open+0x55/0x390 [ 291.061135][ T4976] ? mutex_lock_nested+0x10/0x10 [ 291.066135][ T4976] ? __lock_acquire+0x7c40/0x7c40 [ 291.071252][ T4976] ? kobject_get_unless_zero+0x15f/0x1e0 [ 291.076943][ T4976] ? __kobject_del+0x2e0/0x2e0 [ 291.081813][ T4976] ? memset+0x1e/0x40 [ 291.085852][ T4976] misc_open+0x55/0x390 [ 291.090105][ T4976] chrdev_open+0x585/0x5f0 [ 291.094674][ T4976] ? cd_forget+0x160/0x160 [ 291.099177][ T4976] ? fsnotify_perm+0x39b/0x550 [ 291.104024][ T4976] ? cd_forget+0x160/0x160 [ 291.108583][ T4976] do_dentry_open+0x7dd/0x10b0 [ 291.113470][ T4976] path_openat+0x2674/0x2f10 [ 291.118131][ T4976] ? do_user_addr_fault+0x8a6/0xb20 [ 291.123421][ T4976] ? do_filp_open+0x420/0x420 [ 291.128164][ T4976] ? up_read+0x20/0x20 [ 291.132363][ T4976] do_filp_open+0x1ee/0x420 [ 291.136933][ T4976] ? vfs_tmpfile+0x470/0x470 [ 291.141935][ T4976] ? _raw_spin_unlock+0x24/0x40 [ 291.146843][ T4976] ? alloc_fd+0x590/0x640 [ 291.151559][ T4976] do_sys_openat2+0x14b/0x4f0 [ 291.156309][ T4976] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 291.162398][ T4976] ? do_sys_open+0xe0/0xe0 [ 291.166880][ T4976] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 291.172975][ T4976] ? fd_install+0x5c/0x4e0 [ 291.177450][ T4976] ? lock_chain_count+0x20/0x20 [ 291.182383][ T4976] __x64_sys_openat+0x135/0x160 [ 291.187310][ T4976] do_syscall_64+0x4c/0xa0 [ 291.191822][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 291.196559][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 291.201345][ T4976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.207470][ T4976] RIP: 0033:0x7fd854d59257 [ 291.211985][ T4976] RSP: 002b:00007ffe93465aa0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 291.220512][ T4976] RAX: ffffffffffffffda RBX: 00005555857b8500 RCX: 00007fd854d59257 [ 291.228518][ T4976] RDX: 0000000000000002 RSI: 00007fd854e35067 RDI: ffffffffffffff9c [ 291.236561][ T4976] RBP: 00007fd8550267b8 R08: 0000000000000000 R09: 0000000000000000 [ 291.244630][ T4976] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 291.252710][ T4976] R13: 0000000000000003 R14: 00007ffe93465e08 R15: 0000000000000000 [ 291.260781][ T4976] [ 291.278644][ T4976] OOM killer enabled. [ 291.282733][ T4976] Restarting tasks ... done. [ 291.383716][ T4976] PM: hibernation: hibernation exit [ 291.481992][ T5063] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 291.493511][ T5063] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 291.510375][ T5063] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 291.516483][ T5063] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 291.567490][ T5063] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 291.610223][ T5063] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 291.709615][ T5151] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 291.718461][ T5151] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 291.730178][ T5151] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 291.740294][ T5151] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 291.749276][ T5151] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 291.758292][ T5151] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 291.767401][ T5151] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 291.786575][ T5151] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 291.799726][ T5151] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 291.810852][ T5153] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 291.812109][ T5151] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 291.821337][ T5153] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 291.827154][ T5151] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 291.836104][ T5153] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 291.841576][ T5151] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 291.851713][ T5153] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 291.857126][ T5151] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 291.867386][ T5153] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 291.870564][ T5151] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 291.878436][ T5153] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 291.890273][ T5151] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 291.890462][ T5153] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 291.897739][ T5151] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 291.905577][ T5153] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 291.912751][ T5151] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 291.931323][ T5153] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 291.939757][ T5153] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 291.947124][ T5153] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 291.949013][ T5151] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 291.955751][ T5153] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 291.962037][ T5151] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 291.968822][ T5153] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 291.976217][ T5151] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 291.983402][ T5153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 291.999958][ T5153] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 292.003510][ T5151] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 292.008212][ T5153] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 292.022401][ T5151] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 292.026304][ T5153] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 292.033144][ T5151] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 292.036977][ T5153] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 292.045876][ T5151] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 292.063141][ T5151] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 292.067969][ T5153] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 292.070958][ T5151] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 292.077770][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 292.086418][ T5151] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 292.092172][ T5153] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 292.099067][ T5151] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 292.111505][ T5153] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 292.124929][ T4291] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 292.139630][ T4282] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 292.147011][ T4282] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 292.155594][ T4282] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 292.165569][ T4291] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 292.173005][ T4291] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 292.202852][ T4285] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 292.219796][ T4285] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 292.242411][ T4291] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 292.272158][ T5155] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 292.595498][ T5134] lo speed is unknown, defaulting to 1000 [ 293.509444][ T5156] Bluetooth: hci0: command 0x0c1a tx timeout [ 293.547046][ T5112] lo speed is unknown, defaulting to 1000 [ 293.982105][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 293.991108][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 294.000837][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 294.010219][ T5151] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 294.010230][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 294.021935][ T5151] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 294.032587][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 294.032723][ T5151] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 294.050491][ T4278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 294.091136][ T4278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 294.100050][ T4278] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 294.112696][ T4278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 294.149327][ T5153] Bluetooth: hci8: command 0x0409 tx timeout [ 294.149402][ T5151] Bluetooth: hci1: command 0x0409 tx timeout [ 294.177072][ T5153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 294.186962][ T5153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 294.197246][ T5153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 294.213660][ T5153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 294.222297][ T5153] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 294.229459][ T4278] Bluetooth: hci7: command 0x0409 tx timeout [ 294.229568][ T5156] Bluetooth: hci12: command 0x0409 tx timeout [ 294.236269][ T4278] Bluetooth: hci10: command 0x0409 tx timeout [ 294.259353][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 294.309794][ T4278] Bluetooth: hci11: command 0x0409 tx timeout [ 294.309830][ T5156] Bluetooth: hci14: command 0x0409 tx timeout [ 294.316774][ T4278] Bluetooth: hci13: command 0x0409 tx timeout [ 294.325161][ T5156] Bluetooth: hci15: command 0x0409 tx timeout [ 294.329420][ T5153] Bluetooth: hci9: command 0x0409 tx timeout [ 294.375983][ T4278] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 294.387966][ T4278] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 294.396590][ T4278] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 294.407319][ T4278] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 294.416991][ T4278] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 294.424689][ T4278] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 294.434738][ T5131] lo speed is unknown, defaulting to 1000 [ 294.464474][ T4324] usb 7-1: USB disconnect, device number 3 [ 294.489049][ T5151] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 294.498925][ T5151] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 294.507444][ T5151] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 294.515610][ T5151] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 294.523351][ T5151] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 294.532826][ T5151] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 294.645373][ T4327] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.691039][ T5108] lo speed is unknown, defaulting to 1000 [ 294.813521][ T4327] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.867371][ T5132] lo speed is unknown, defaulting to 1000 [ 294.943551][ T4327] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.045067][ T5113] lo speed is unknown, defaulting to 1000 [ 295.125043][ T4327] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.150817][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 295.285871][ T5116] lo speed is unknown, defaulting to 1000 [ 295.408765][ T5108] chnl_net:caif_netlink_parms(): no params data found [ 295.515093][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.533133][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.554198][ T5112] device bridge_slave_0 entered promiscuous mode [ 295.568980][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.589648][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.610475][ T5112] device bridge_slave_1 entered promiscuous mode [ 295.617758][ T5130] lo speed is unknown, defaulting to 1000 [ 295.667319][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.771599][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.041808][ T5126] lo speed is unknown, defaulting to 1000 [ 296.050830][ T5112] team0: Port device team_slave_0 added [ 296.069265][ T4278] Bluetooth: hci2: command 0x0409 tx timeout [ 296.149475][ T4278] Bluetooth: hci3: command 0x0409 tx timeout [ 296.172710][ T5112] team0: Port device team_slave_1 added [ 296.194221][ T5114] lo speed is unknown, defaulting to 1000 [ 296.230617][ T4278] Bluetooth: hci1: command 0x041b tx timeout [ 296.230628][ T5151] Bluetooth: hci8: command 0x041b tx timeout [ 296.302362][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.309706][ T5151] Bluetooth: hci4: command 0x0409 tx timeout [ 296.318034][ T5151] Bluetooth: hci12: command 0x041b tx timeout [ 296.319868][ T5153] Bluetooth: hci10: command 0x041b tx timeout [ 296.326120][ T5151] Bluetooth: hci7: command 0x041b tx timeout [ 296.339382][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.369299][ T5108] device bridge_slave_0 entered promiscuous mode [ 296.389456][ T5151] Bluetooth: hci13: command 0x041b tx timeout [ 296.395639][ T5151] Bluetooth: hci15: command 0x041b tx timeout [ 296.402009][ T5155] Bluetooth: hci9: command 0x041b tx timeout [ 296.402045][ T5153] Bluetooth: hci14: command 0x041b tx timeout [ 296.408082][ T5155] Bluetooth: hci11: command 0x041b tx timeout [ 296.496086][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.515498][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.558766][ T5155] Bluetooth: hci5: command 0x0409 tx timeout [ 296.568776][ T5108] device bridge_slave_1 entered promiscuous mode [ 296.592261][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.599948][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.629917][ T5155] Bluetooth: hci6: command 0x0409 tx timeout [ 296.659491][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.726993][ T5166] lo speed is unknown, defaulting to 1000 [ 296.754058][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.761276][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.789964][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.844095][ T5113] chnl_net:caif_netlink_parms(): no params data found [ 296.976931][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.063233][ T5168] lo speed is unknown, defaulting to 1000 [ 297.071446][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.093631][ T5112] device hsr_slave_0 entered promiscuous mode [ 297.109905][ T5112] device hsr_slave_1 entered promiscuous mode [ 297.116716][ T5112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.124672][ T5112] Cannot create hsr debugfs directory [ 297.348639][ T5108] team0: Port device team_slave_0 added [ 297.395533][ T5163] lo speed is unknown, defaulting to 1000 [ 297.482362][ T5108] team0: Port device team_slave_1 added [ 297.566621][ T5116] chnl_net:caif_netlink_parms(): no params data found [ 297.616579][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.629301][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.650418][ T5113] device bridge_slave_0 entered promiscuous mode [ 297.872012][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.889259][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.897915][ T5113] device bridge_slave_1 entered promiscuous mode [ 297.986795][ T5162] lo speed is unknown, defaulting to 1000 [ 298.064900][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.089709][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.149507][ T5155] Bluetooth: hci2: command 0x041b tx timeout [ 298.170132][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.229206][ T5155] Bluetooth: hci3: command 0x041b tx timeout [ 298.277777][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.313190][ T5155] Bluetooth: hci1: command 0x040f tx timeout [ 298.319309][ T5155] Bluetooth: hci8: command 0x040f tx timeout [ 298.373627][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.389635][ T5151] Bluetooth: hci10: command 0x040f tx timeout [ 298.395803][ T5151] Bluetooth: hci12: command 0x040f tx timeout [ 298.399920][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.402888][ T5155] Bluetooth: hci4: command 0x041b tx timeout [ 298.428952][ T5153] Bluetooth: hci7: command 0x040f tx timeout [ 298.469321][ T5153] Bluetooth: hci14: command 0x040f tx timeout [ 298.475498][ T5153] Bluetooth: hci11: command 0x040f tx timeout [ 298.481990][ T5151] Bluetooth: hci9: command 0x040f tx timeout [ 298.483866][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.488078][ T5151] Bluetooth: hci15: command 0x040f tx timeout [ 298.506134][ T5156] Bluetooth: hci13: command 0x040f tx timeout [ 298.547169][ T5170] lo speed is unknown, defaulting to 1000 [ 298.621304][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.630885][ T5151] Bluetooth: hci5: command 0x041b tx timeout [ 298.684733][ T5114] chnl_net:caif_netlink_parms(): no params data found [ 298.709666][ T5153] Bluetooth: hci6: command 0x041b tx timeout [ 299.418288][ T5108] device hsr_slave_0 entered promiscuous mode [ 299.425585][ T5108] device hsr_slave_1 entered promiscuous mode [ 299.433037][ T5108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.441722][ T5108] Cannot create hsr debugfs directory [ 299.513807][ T5113] team0: Port device team_slave_0 added [ 299.560035][ T4327] device hsr_slave_0 left promiscuous mode [ 299.567242][ T4327] device hsr_slave_1 left promiscuous mode [ 299.574523][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.582341][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.593467][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.606057][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.614964][ T4327] device bridge_slave_1 left promiscuous mode [ 299.631838][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.645113][ T4327] device bridge_slave_0 left promiscuous mode [ 299.653673][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.696386][ T4327] device veth1_macvtap left promiscuous mode [ 299.703285][ T4327] device veth0_macvtap left promiscuous mode [ 299.711037][ T4327] device veth1_vlan left promiscuous mode [ 299.717290][ T4327] device veth0_vlan left promiscuous mode [ 300.229915][ T5153] Bluetooth: hci2: command 0x040f tx timeout [ 300.309430][ T5153] Bluetooth: hci3: command 0x040f tx timeout [ 300.328402][ T4327] team0 (unregistering): Port device team_slave_1 removed [ 300.373855][ T4327] team0 (unregistering): Port device team_slave_0 removed [ 300.392933][ T5153] Bluetooth: hci8: command 0x0419 tx timeout [ 300.394246][ T5151] Bluetooth: hci1: command 0x0419 tx timeout [ 300.444603][ T4327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.469364][ T5153] Bluetooth: hci12: command 0x0419 tx timeout [ 300.475549][ T5153] Bluetooth: hci7: command 0x0419 tx timeout [ 300.480267][ T5151] Bluetooth: hci4: command 0x040f tx timeout [ 300.482079][ T5156] Bluetooth: hci10: command 0x0419 tx timeout [ 300.517887][ T4327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.549222][ T5151] Bluetooth: hci15: command 0x0419 tx timeout [ 300.549909][ T5156] Bluetooth: hci11: command 0x0419 tx timeout [ 300.555377][ T5151] Bluetooth: hci13: command 0x0419 tx timeout [ 300.561565][ T5153] Bluetooth: hci9: command 0x0419 tx timeout [ 300.561596][ T5153] Bluetooth: hci14: command 0x0419 tx timeout [ 300.713042][ T5151] Bluetooth: hci5: command 0x040f tx timeout [ 300.789555][ T5151] Bluetooth: hci6: command 0x040f tx timeout [ 300.914277][ T4327] bond0 (unregistering): Released all slaves [ 301.038718][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.046788][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.057478][ T5116] device bridge_slave_0 entered promiscuous mode [ 301.089520][ T5113] team0: Port device team_slave_1 added [ 301.099311][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.106439][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.115619][ T5116] device bridge_slave_1 entered promiscuous mode [ 301.354769][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.401180][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.417781][ T5114] device bridge_slave_0 entered promiscuous mode [ 301.449888][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.457030][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.468580][ T5114] device bridge_slave_1 entered promiscuous mode [ 301.527632][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.549490][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.590160][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.620211][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.627232][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.653736][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.693514][ T5166] chnl_net:caif_netlink_parms(): no params data found [ 301.718202][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.763378][ T5114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.846446][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.938461][ T5114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.100921][ T5116] team0: Port device team_slave_0 added [ 302.131782][ T5114] team0: Port device team_slave_0 added [ 302.167334][ T5112] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 302.215710][ T5113] device hsr_slave_0 entered promiscuous mode [ 302.309499][ T5151] Bluetooth: hci2: command 0x0419 tx timeout [ 302.316960][ T5113] device hsr_slave_1 entered promiscuous mode [ 302.389388][ T5151] Bluetooth: hci3: command 0x0419 tx timeout [ 302.389994][ T28] INFO: task syz.1.97:4688 blocked for more than 184 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 302.447066][ T5114] team0: Port device team_slave_1 added [ 302.489143][ T28] Not tainted syzkaller #0 [ 302.494407][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 302.509565][ T28] task:syz.1.97 state:D stack:26832 pid:4688 ppid:4275 flags:0x00004004 [ 302.529191][ T28] Call Trace: [ 302.532586][ T28] [ 302.535563][ T28] __schedule+0x107f/0x4030 [ 302.549183][ T5151] Bluetooth: hci4: command 0x0419 tx timeout [ 302.613700][ T5116] team0: Port device team_slave_1 added [ 302.679338][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 302.684827][ T28] ? _raw_spin_unlock+0x40/0x40 [ 302.759674][ T28] ? __sched_text_start+0x8/0x8 [ 302.764957][ T28] ? load_image+0x410/0x410 [ 302.789706][ T5151] Bluetooth: hci5: command 0x0419 tx timeout [ 302.819332][ T28] ? prepare_to_wait_event+0x430/0x470 [ 302.824958][ T28] schedule+0xb9/0x180 [ 302.864196][ T28] do_uevent+0x1e9/0x490 [ 302.869776][ T5151] Bluetooth: hci6: command 0x0419 tx timeout [ 302.872970][ T28] ? dlm_scand+0x220/0x220 [ 302.910093][ T28] ? __kmem_cache_free+0xb6/0x200 [ 302.915215][ T28] ? wake_bit_function+0x200/0x200 [ 302.920529][ T28] ? kobject_uevent_env+0x364/0x890 [ 302.925796][ T28] __dlm_new_lockspace+0x1d6a/0x22b0 [ 302.931254][ T28] ? dlm_new_lockspace+0x50/0x50 [ 302.936289][ T28] ? wake_bit_function+0x200/0x200 [ 302.941583][ T28] ? apparmor_capable+0x12c/0x190 [ 302.946674][ T28] ? bpf_lsm_capable+0x5/0x10 [ 302.951524][ T28] ? security_capable+0x85/0xb0 [ 302.956447][ T28] ? dlm_new_user_lockspace+0x20/0x40 [ 302.962223][ T28] device_create_lockspace+0xc4/0x350 [ 302.970418][ T28] ? device_user_deadlock+0xd0/0xd0 [ 302.975715][ T28] ? __might_fault+0xc2/0x120 [ 302.980951][ T28] ? _copy_from_user+0x10b/0x170 [ 302.986055][ T28] device_write+0x893/0xea0 [ 302.990699][ T28] ? security_file_permission+0x75/0xa0 [ 302.996314][ T28] ? device_read+0x1480/0x1480 [ 303.009137][ T28] vfs_write+0x2dc/0x9a0 [ 303.013490][ T28] ? file_end_write+0x250/0x250 [ 303.018399][ T28] ? __fget_files+0x28/0x460 [ 303.039204][ T28] ? __fget_files+0x3fc/0x460 [ 303.043987][ T28] ? __fdget_pos+0x1d4/0x360 [ 303.048630][ T28] ? ksys_write+0x70/0x260 [ 303.071320][ T28] ksys_write+0x14d/0x260 [ 303.075747][ T28] ? __ia32_sys_read+0x80/0x80 [ 303.089530][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 303.094843][ T28] do_syscall_64+0x4c/0xa0 [ 303.129382][ T28] ? clear_bhb_loop+0x60/0xb0 [ 303.134242][ T28] ? clear_bhb_loop+0x60/0xb0 [ 303.138972][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.156474][ T28] RIP: 0033:0x7f36bd99e0d9 [ 303.161145][ T28] RSP: 002b:00007f36be927028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 303.186221][ T28] RAX: ffffffffffffffda RBX: 00007f36bdc25fa0 RCX: 00007f36bd99e0d9 [ 303.209197][ T28] RDX: 0000000000000078 RSI: 0000200000000300 RDI: 0000000000000006 [ 303.217260][ T28] RBP: 00007f36bda35024 R08: 0000000000000000 R09: 0000000000000000 [ 303.237065][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.246870][ T28] R13: 00007f36bdc26038 R14: 00007f36bdc25fa0 R15: 00007fffe0851b88 [ 303.255803][ T28] [ 303.258963][ T28] [ 303.258963][ T28] Showing all locks held in the system: [ 303.267247][ T28] 4 locks held by kworker/u4:0/9: [ 303.272384][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 303.286489][ T28] #1: ffffc900000e7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 303.297214][ T28] #2: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 303.306296][ T28] #3: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 303.329240][ T28] 1 lock held by rcu_tasks_kthre/12: [ 303.334665][ T28] #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 303.367803][ T28] 1 lock held by rcu_tasks_trace/13: [ 303.399124][ T28] #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 303.423333][ T28] 2 locks held by kworker/1:0/22: [ 303.428434][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 303.454119][ T28] #1: ffffc900001c7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 303.478529][ T28] 1 lock held by khungtaskd/28: [ 303.487367][ T28] #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 303.497665][ T28] 1 lock held by dhcpcd/3934: [ 303.502587][ T28] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x27f/0x1bf0 [ 303.511997][ T28] 2 locks held by getty/4032: [ 303.516709][ T28] #0: ffff88802f8c4098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 303.527616][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 303.537897][ T28] 4 locks held by kworker/u4:6/4327: [ 303.543507][ T28] #0: ffff88801761e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 303.554977][ T28] #1: ffffc900044d7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 303.565830][ T28] #2: ffffffff8dd4ead0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 303.576779][ T28] #3: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: bareudp_exit_batch_net+0xb8/0x200 [ 303.588541][ T28] 2 locks held by kworker/u4:7/4337: [ 303.593952][ T28] 3 locks held by kworker/1:7/4340: [ 303.599342][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 303.609858][ T28] #1: ffffc90004487d00 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 303.619781][ T28] #2: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 303.631648][ T28] 1 lock held by syz.1.97/4688: [ 303.636551][ T28] #0: ffffffff96d4d888 (&ls_lock){+.+.}-{3:3}, at: __dlm_new_lockspace+0xad/0x22b0 [ 303.649208][ T28] 1 lock held by dlm_recoverd/4695: [ 303.654565][ T28] #0: ffff888050b88ca0 (&ls->ls_in_recovery){+.+.}-{3:3}, at: dlm_recoverd+0xa6/0x1df0 [ 303.669224][ T28] 1 lock held by syz-executor/5108: [ 303.674475][ T28] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 303.686732][ T28] 1 lock held by syz-executor/5112: [ 303.692738][ T28] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 303.702391][ T28] 1 lock held by syz-executor/5113: [ 303.707638][ T28] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 303.717220][ T28] 1 lock held by syz-executor/5114: [ 303.722494][ T28] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 303.732047][ T28] 1 lock held by syz-executor/5116: [ 303.737282][ T28] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 303.747498][ T28] 3 locks held by syz-executor/5126: [ 303.752960][ T28] #0: ffff8880636554b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x20e/0x500 [ 303.763051][ T28] #1: ffff888063654428 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x506/0x1120 [ 303.779299][ T28] #2: ffffffff8deb9d28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xac/0x290 [ 303.805640][ T28] 3 locks held by syz-executor/5130: [ 303.815988][ T28] #0: ffff8880396454b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x20e/0x500 [ 303.836715][ T28] #1: ffff888039644428 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x506/0x1120 [ 303.850028][ T28] #2: ffffffff8deb9d28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xac/0x290 [ 303.860471][ T28] 2 locks held by syz-executor/5131: [ 303.865801][ T28] #0: ffffffff8dd4ead0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x324/0x5b0 [ 303.875672][ T28] #1: ffffffff8cb33700 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x5e0 [ 303.886115][ T28] 3 locks held by syz-executor/5132: [ 303.892898][ T28] #0: ffff88803df114b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x20e/0x500 [ 303.903134][ T28] #1: ffff88803df10428 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x506/0x1120 [ 303.922406][ T28] #2: ffffffff8deb9d28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xac/0x290 [ 303.933153][ T28] 3 locks held by syz-executor/5134: [ 303.938498][ T28] #0: ffff8880382294b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x20e/0x500 [ 303.948980][ T28] #1: ffff888038228428 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x506/0x1120 [ 303.958909][ T28] #2: ffffffff8deb9d28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xac/0x290 [ 303.969393][ T28] 1 lock held by syz-executor/5162: [ 303.974660][ T28] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 303.984523][ T28] 1 lock held by syz-executor/5163: [ 303.991369][ T28] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 304.001162][ T28] 1 lock held by syz-executor/5166: [ 304.006400][ T28] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 304.016207][ T28] 1 lock held by syz-executor/5168: [ 304.021886][ T28] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xb01/0x1f90 [ 304.032038][ T28] 1 lock held by syz-executor/5170: [ 304.037277][ T28] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 304.048182][ T28] [ 304.053886][ T28] ============================================= [ 304.053886][ T28] [ 304.062766][ T28] NMI backtrace for cpu 0 [ 304.067153][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 304.074387][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 304.084564][ T28] Call Trace: [ 304.087899][ T28] [ 304.090862][ T28] dump_stack_lvl+0x188/0x24e [ 304.095578][ T28] ? irq_work_queue+0xb8/0x140 [ 304.100387][ T28] ? show_regs_print_info+0x12/0x12 [ 304.105701][ T28] ? load_image+0x410/0x410 [ 304.110239][ T28] ? vprintk_emit+0x59f/0x6a0 [ 304.114946][ T28] ? printk_sprint+0x460/0x460 [ 304.119746][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 304.124725][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 304.130938][ T28] ? _printk+0xda/0x130 [ 304.135123][ T28] ? load_image+0x410/0x410 [ 304.139655][ T28] ? load_image+0x410/0x410 [ 304.144183][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 304.150283][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 304.156396][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 304.162405][ T28] watchdog+0xf0e/0xf50 [ 304.166592][ T28] ? watchdog+0x1ed/0xf50 [ 304.171041][ T28] kthread+0x29d/0x330 [ 304.175136][ T28] ? hungtask_pm_notify+0x40/0x40 [ 304.180192][ T28] ? kthread_blkcg+0xd0/0xd0 [ 304.184812][ T28] ret_from_fork+0x1f/0x30 [ 304.189278][ T28] [ 304.193936][ T28] Sending NMI from CPU 0 to CPUs 1: [ 304.200519][ C1] NMI backtrace for cpu 1 [ 304.200536][ C1] CPU: 1 PID: 76 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 304.200557][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 304.200569][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 304.200618][ C1] RIP: 0010:check_preemption_disabled+0x3/0x110 [ 304.200646][ C1] Code: bc 8c 4c 89 f6 e8 dd 53 0d fa e9 6e ff ff ff 00 00 cc cc 00 00 cc cc 48 c7 c7 80 5d df 8a 48 c7 c6 c0 5d df 8a eb 00 55 41 57 <41> 56 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 65 [ 304.200665][ C1] RSP: 0018:ffffc90001587af8 EFLAGS: 00000283 [ 304.200678][ C1] RAX: 0000000000000001 RBX: ffff8880353fb280 RCX: ffff888018ba5a00 [ 304.200690][ C1] RDX: 0000000000000000 RSI: ffffffff8adf5dc0 RDI: ffffffff8adf5d80 [ 304.200702][ C1] RBP: ffff8880353fb280 R08: ffff888018ba5a00 R09: 0000000000000002 [ 304.200714][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 00000000000000c8 [ 304.200724][ C1] R13: ffff888055b7aa48 R14: ffff88801867e500 R15: ffffffff8617d31f [ 304.200737][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 304.200751][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 304.200767][ C1] CR2: 00005592deb22138 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 304.200782][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 304.200791][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 304.200801][ C1] Call Trace: [ 304.200806][ C1] [ 304.200811][ C1] ? nsim_dev_trap_report_work+0x71f/0xa80 [ 304.200835][ C1] rcu_is_watching+0x11/0xa0 [ 304.200866][ C1] ? nsim_dev_trap_report_work+0x71f/0xa80 [ 304.200888][ C1] kmem_cache_free+0x5f/0x2a0 [ 304.200908][ C1] nsim_dev_trap_report_work+0x71f/0xa80 [ 304.200936][ C1] ? process_one_work+0x7b4/0x1160 [ 304.200956][ C1] process_one_work+0x8ab/0x1160 [ 304.200981][ C1] ? worker_detach_from_pool+0x240/0x240 [ 304.201003][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 304.201022][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 304.201042][ C1] ? wq_worker_running+0x97/0x190 [ 304.201069][ C1] worker_thread+0xaf5/0x12a0 [ 304.201102][ C1] kthread+0x29d/0x330 [ 304.201116][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 304.201134][ C1] ? kthread_blkcg+0xd0/0xd0 [ 304.201150][ C1] ret_from_fork+0x1f/0x30 [ 304.201179][ C1] [ 304.286634][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 304.286683][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 304.286745][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 304.286778][ T28] Call Trace: [ 304.286798][ T28] [ 304.286813][ T28] dump_stack_lvl+0x188/0x24e [ 304.286911][ T28] ? memcpy+0x3c/0x60 [ 304.286968][ T28] ? show_regs_print_info+0x12/0x12 [ 304.287044][ T28] ? load_image+0x410/0x410 [ 304.287139][ T28] panic+0x2d3/0x710 [ 304.287258][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 304.287354][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 304.287408][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 304.287539][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 304.287619][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 304.287692][ T28] watchdog+0xf4d/0xf50 [ 304.287768][ T28] ? watchdog+0x1ed/0xf50 [ 304.287863][ T28] kthread+0x29d/0x330 [ 304.287923][ T28] ? hungtask_pm_notify+0x40/0x40 [ 304.287995][ T28] ? kthread_blkcg+0xd0/0xd0 [ 304.288050][ T28] ret_from_fork+0x1f/0x30 [ 304.288157][ T28] [ 304.294966][ T28] Kernel Offset: disabled [ 304.556294][ T28] Rebooting in 86400 seconds..