last executing test programs: 2.749923025s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='1\n\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/zone_size\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='4\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000350)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r2, &(0x7f0000000390)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='1\n\x00', 0x2) close(r3) nanosleep(&(0x7f0000000380)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./dev\x00', 0x1ff) mount(&(0x7f0000000740)=@filename='devtmpfs\x00', &(0x7f0000000700)='./dev\x00', &(0x7f0000000780)='devtmpfs\x00', 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000800)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x107, 0x1, &(0x7f0000000900)="ffffffff", 0x4) r5 = accept$alg(r4, 0x0, 0x0) write(r5, &(0x7f0000800000)='SFOZ\x00\x00', 0x6) read$alg(r5, &(0x7f0000800004), 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/nullb1\x00', 0x2, 0x0) pwrite64(r6, &(0x7f0000800000), 0x1000, 0x0) close(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='./dev/nullb1\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480)='zonefs\x00', 0x0, 0x0) 2.627163614s ago: executing program 3 (id=4): r0 = syz_usb_connect(0x3, 0x9f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000040480b081000010000000109028d0001010080fa0904000005ffffff000705030200020007058402000200070588058003010705070580030107058a030800010904000105ffffff000705030200020007058402000200070588058003010705070580030107058a030800010904000805ffffff000705030200020007058402000200070588058003010705070580030107058a03080001"], 0x0) syz_usb_ep_read(r0, 0x3, 0x40, &(0x7f0000000180)=""/64) syz_usb_ep_write(r0, 0x84, 0x40, &(0x7f00000001c0)="aa00080c0000000100070009017700"/64) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/drivers/ttusb-dec/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='5-1:1.0\x00', 0x8) close(r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_ep_read(r0, 0x3, 0x40, &(0x7f0000000380)=""/64) syz_usb_ep_write(r0, 0x84, 0x40, &(0x7f00000003c0)="aa00080c0000000100070009017700"/64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers/ttusb-dec/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='5-1:1.0\x00', 0x8) nanosleep(&(0x7f0000000480)={0x1}, 0x0) 2.247911348s ago: executing program 2 (id=6): mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./my_config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='./my_sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./my_config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlink(&(0x7f0000000b00)='./my_config/usb_gadget/g1/functions/acm.usb0\x00', &(0x7f0000000c00)='./my_config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./my_sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000e00)='dummy_udc.0', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000001000)='dummy_udc.0', 0xb) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000001200)='dummy_udc.0', 0xb) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./my_sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000e00)='dummy_udc.0', 0xb) close(r3) write(0xffffffffffffffff, &(0x7f0000001000)='dummy_udc.0', 0xb) close(0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000001200)='dummy_udc.0', 0xb) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./my_sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000e00)='dummy_udc.0', 0xb) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000001000)='dummy_udc.0', 0xb) close(r6) openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) 2.208682498s ago: executing program 1 (id=2): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)={0x40, 0x5, 0x2, "2bd8"}}) syz_usb_control_io(r0, &(0x7f00000000c0), &(0x7f0000000100)) nanosleep(&(0x7f0000000400)={0x1}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.876693462s ago: executing program 2 (id=7): unshare(0x10020000) mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='0x1234', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000900)='0x5678', 0x6) mkdir(&(0x7f0000000a00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000e00)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000001100)='dummy_udc.0', 0xb) nanosleep(&(0x7f0000000040)={0x1}, &(0x7f0000000080)) r3 = syz_open_dev$usbfs(&(0x7f0000001200), 0xb, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000001300), 0xc, 0x2) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000001600)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000001700)) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000002000)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000002100)=0x1) ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f0000001e00)) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000001f00)) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000003000)=@urb_type_control={0x0, {}, 0x0, 0x0, &(0x7f0000003100)={0x21, 0x0, 0x0, 0x0, 0x1c}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000003200)=@urb_type_control={0x0, {}, 0x0, 0x0, &(0x7f0000003300)={0x21, 0x0, 0x0, 0x0, 0x1c}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000004000)={0x21, 0x0, 0x0, 0x0, 0x1c, 0x3e8, &(0x7f0000004100)="040000001c000000020000000301020100"/28}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000004200)={0x21, 0x0, 0x0, 0x0, 0x1c, 0x3e8, &(0x7f0000004300)="040000001c000000020000000301020100"/28}) 1.428283653s ago: executing program 0 (id=1): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e00500060001010203010902190001010080320904000001ff00000007058103400001"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000200)='\ahello12') read(r1, &(0x7f0000000400)=""/100, 0x64) 1.199591443s ago: executing program 4 (id=8): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='./file0\n', 0x8) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='1\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='loop\n', 0x5) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/subsystems\x00', 0x1ff) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r6, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/block/nvme0n1/wwid\x00', 0x0, 0x0) read(r7, &(0x7f00000009c0), 0x100) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/class/block/nvme0n1/wwid\x00', 0x0, 0x0) read(r8, &(0x7f0000000a80), 0x100) 1.011284464s ago: executing program 4 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1/comms/1/local\x00', 0x1, 0x0) write(r0, &(0x7f0000000000)='1\x00', 0x2) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1/spaces/ls1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1/spaces/ls1/nodes/1\x00', 0x1ff) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_clone(0x11, &(0x7f0000001000), 0x1000, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="0600000000000000020000000401000000000000000000006c733100", 0x1c) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='0\x00', 0x2) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/kernel/dlm/ls1/control\x00', 0x1, 0x0) write(r2, &(0x7f0000000000)='1\x00', 0x2) close(r2) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1/spaces/ls1/nodes/1\x00', 0x200) write(0xffffffffffffffff, &(0x7f0000000000)='1\x00', 0x2) 842.177987ms ago: executing program 4 (id=10): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='./file0\n', 0x8) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='1\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='loop\n', 0x5) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/subsystems\x00', 0x1ff) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r6, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/block/nvme0n1/wwid\x00', 0x0, 0x0) read(r7, &(0x7f00000009c0), 0x100) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/class/block/nvme0n1/wwid\x00', 0x0, 0x0) 689.157604ms ago: executing program 4 (id=11): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', 0x42, 0x1ff) write(r0, 0x0, 0x0) lseek(r0, 0xffffe, 0x0) write(r0, &(0x7f00000000c0)='B\x00', 0x2) close(r0) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g8/functions/mass_storage.usb7/lun.0/file\x00', 0x1, 0x0) write(r1, &(0x7f00000006c0)='/proc/self/cwd/file7\x00', 0x14) 563.416082ms ago: executing program 4 (id=12): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='1\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='loop\n', 0x5) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/subsystems\x00', 0x1ff) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r5, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/block/nvme0n1/wwid\x00', 0x0, 0x0) read(r6, &(0x7f00000009c0), 0x100) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/class/block/nvme0n1/wwid\x00', 0x0, 0x0) read(r7, &(0x7f0000000a80), 0x100) 417.415895ms ago: executing program 4 (id=13): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x16, 0x2) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000080)=0x1) 293.219519ms ago: executing program 2 (id=14): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./dlm\x00', 0x1ff) mount(0x0, &(0x7f0000002200)='./dlm\x00', &(0x7f0000002300)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002400)='./dlm/domain1\x00', 0x1ff) 164.880996ms ago: executing program 2 (id=15): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./my_dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./my_configfs/dlm/cluster1/cluster_name\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='cluster1\x00', 0x9) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r1, &(0x7f0000000f00)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000001100)="0200"/128, 0x80) 0s ago: executing program 2 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='config\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000000)='config\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000e0)='config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000f0)='config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='rd_pages=64\n\x00', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='config/target/core/rd_mcp_0/ramdisk0/wwn/res_aptpl_metadata\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='initiator_node=naa.1234567890123456,target_node=naa.6001405c2e2c2f68,sa_res_key=0x123456789abcdef0,tpgt=1,mapped_lun=0,target_lun=0,res_holder=1,res_type=1\n\x00', 0x90) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f00000004d0)='config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/configs/c.1/tcm.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000660)='config/target/usb_gadget/naa.6001405c2e2c2f68\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='config/target/usb_gadget/naa.6001405c2e2c2f68/tpgt_1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='config/target/usb_gadget/naa.6001405c2e2c2f68/tpgt_1/nexus\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)='naa.1234567890123456\n\x00', 0x15) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='config/target/usb_gadget/naa.6001405c2e2c2f68/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000780)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='config/target/usb_gadget/naa.6001405c2e2c2f68/tpgt_1/lun/lun_0/virtual_scsi_port\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='config/target/usb_gadget/naa.6001405c2e2c2f68/tpgt_1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000840)='1\n\x00', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000880)='config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f00000008c0)='dummy_udc.0\n\x00', 0xc) close(r5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.16' (ED25519) to the list of known hosts. [ 65.022119][ T5603] cgroup: Unknown subsys name 'net' [ 65.131235][ T5603] cgroup: Unknown subsys name 'cpuset' [ 65.139439][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.477495][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.546039][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.546792][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.554493][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.555149][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.556245][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.556937][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.592260][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.603442][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.610848][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.611491][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.642288][ T4935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.645071][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.645551][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.648409][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.649013][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.662379][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.664568][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.665233][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.666923][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.670333][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.711179][ T4935] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.713773][ T4935] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.714353][ T4935] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.716720][ T4935] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.719770][ T4935] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.263039][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.263132][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.372747][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.374488][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.374715][ T5625] bridge_slave_0: entered allmulticast mode [ 72.376511][ T5625] bridge_slave_0: entered promiscuous mode [ 72.413321][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.413491][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.413611][ T5614] bridge_slave_0: entered allmulticast mode [ 72.415351][ T5614] bridge_slave_0: entered promiscuous mode [ 72.418577][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.418672][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.418799][ T5625] bridge_slave_1: entered allmulticast mode [ 72.420498][ T5625] bridge_slave_1: entered promiscuous mode [ 72.471537][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.471642][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.472014][ T5614] bridge_slave_1: entered allmulticast mode [ 72.475208][ T5614] bridge_slave_1: entered promiscuous mode [ 72.532625][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.532787][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.533154][ T5615] bridge_slave_0: entered allmulticast mode [ 72.534792][ T5615] bridge_slave_0: entered promiscuous mode [ 72.566681][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.575755][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.575842][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.575963][ T5615] bridge_slave_1: entered allmulticast mode [ 72.578602][ T5615] bridge_slave_1: entered promiscuous mode [ 72.582603][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.598503][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.622396][ T52] Bluetooth: hci0: command tx timeout [ 72.624093][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.698371][ T52] Bluetooth: hci3: command tx timeout [ 72.698579][ T4935] Bluetooth: hci2: command tx timeout [ 72.698740][ T52] Bluetooth: hci1: command tx timeout [ 72.709507][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.709659][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.709774][ T5624] bridge_slave_0: entered allmulticast mode [ 72.711428][ T5624] bridge_slave_0: entered promiscuous mode [ 72.718330][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.746657][ T5625] team0: Port device team_slave_0 added [ 72.747551][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.747644][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.748237][ T5624] bridge_slave_1: entered allmulticast mode [ 72.750915][ T5624] bridge_slave_1: entered promiscuous mode [ 72.754744][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.757291][ T5614] team0: Port device team_slave_0 added [ 72.775477][ T5625] team0: Port device team_slave_1 added [ 72.778023][ T52] Bluetooth: hci4: command tx timeout [ 72.819330][ T5614] team0: Port device team_slave_1 added [ 72.874447][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.874559][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.874684][ T5631] bridge_slave_0: entered allmulticast mode [ 72.876429][ T5631] bridge_slave_0: entered promiscuous mode [ 72.879813][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.879827][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.879852][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.884225][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.884238][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.884262][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.889261][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.892667][ T5615] team0: Port device team_slave_0 added [ 72.892995][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.893136][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.893255][ T5631] bridge_slave_1: entered allmulticast mode [ 72.896102][ T5631] bridge_slave_1: entered promiscuous mode [ 72.913557][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.913574][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.913605][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.925295][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.925312][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.925336][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.930348][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.932680][ T5615] team0: Port device team_slave_1 added [ 73.137983][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.182445][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.206142][ T5624] team0: Port device team_slave_0 added [ 73.210490][ T5624] team0: Port device team_slave_1 added [ 73.211095][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.211106][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.211129][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.235509][ T5625] hsr_slave_0: entered promiscuous mode [ 73.237237][ T5625] hsr_slave_1: entered promiscuous mode [ 73.247191][ T5614] hsr_slave_0: entered promiscuous mode [ 73.248584][ T5614] hsr_slave_1: entered promiscuous mode [ 73.249355][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 73.249449][ T5614] Cannot create hsr debugfs directory [ 73.266798][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.266816][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.266840][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.311767][ T5631] team0: Port device team_slave_0 added [ 73.336930][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.336947][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.336971][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.359563][ T5631] team0: Port device team_slave_1 added [ 73.373716][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.373734][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.373758][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.501252][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.501431][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.501457][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.542592][ T5615] hsr_slave_0: entered promiscuous mode [ 73.543556][ T5615] hsr_slave_1: entered promiscuous mode [ 73.544299][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 73.544317][ T5615] Cannot create hsr debugfs directory [ 73.570831][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.570869][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.571274][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.628095][ T5624] hsr_slave_0: entered promiscuous mode [ 73.629535][ T5624] hsr_slave_1: entered promiscuous mode [ 73.630163][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 73.630180][ T5624] Cannot create hsr debugfs directory [ 73.740442][ T5631] hsr_slave_0: entered promiscuous mode [ 73.741404][ T5631] hsr_slave_1: entered promiscuous mode [ 73.742027][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 73.742044][ T5631] Cannot create hsr debugfs directory [ 74.052210][ T5625] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.063225][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.084061][ T5625] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.094805][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.103631][ T5625] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.113141][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.114275][ T5625] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.125223][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.191841][ T5614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.202088][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.204546][ T5614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.213273][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.227148][ T5614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.237483][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.251102][ T5614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.261606][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.341551][ T5615] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.350985][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.351749][ T5615] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.362412][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.376684][ T5615] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.386397][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.387230][ T5615] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.400521][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.510158][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.514907][ T5624] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.521518][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.522285][ T5624] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.527034][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.555436][ T5624] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.564402][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.565203][ T5624] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.575239][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.636386][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.650161][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.690427][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.690792][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.699874][ T52] Bluetooth: hci0: command tx timeout [ 74.721086][ T5631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.730401][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.731194][ T5631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.741644][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.750506][ T5631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.761902][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.777985][ T5621] Bluetooth: hci3: command tx timeout [ 74.778041][ T5621] Bluetooth: hci1: command tx timeout [ 74.778158][ T52] Bluetooth: hci2: command tx timeout [ 74.790221][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.790328][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.795075][ T5631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.806123][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.826747][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.858670][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.858779][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.858941][ T52] Bluetooth: hci4: command tx timeout [ 74.910341][ T1505] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.910445][ T1505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.959092][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.050886][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.073386][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.100796][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.100974][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.132697][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.132902][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.195561][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.235537][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.235687][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.290182][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.290275][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.376171][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.461414][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.526237][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.526343][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.552288][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.552460][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.030480][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.194975][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.255128][ T5625] veth0_vlan: entered promiscuous mode [ 76.305587][ T5625] veth1_vlan: entered promiscuous mode [ 76.493268][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.494777][ T5614] veth0_vlan: entered promiscuous mode [ 76.515778][ T5625] veth0_macvtap: entered promiscuous mode [ 76.523645][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.548796][ T5614] veth1_vlan: entered promiscuous mode [ 76.556861][ T5625] veth1_macvtap: entered promiscuous mode [ 76.630392][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.656614][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.720147][ T5614] veth0_macvtap: entered promiscuous mode [ 76.724952][ T5615] veth0_vlan: entered promiscuous mode [ 76.741672][ T5614] veth1_macvtap: entered promiscuous mode [ 76.753075][ T5615] veth1_vlan: entered promiscuous mode [ 76.778354][ T52] Bluetooth: hci0: command tx timeout [ 76.789403][ T1444] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.828360][ T1419] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.829361][ T1419] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.829401][ T1419] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.868816][ T4935] Bluetooth: hci1: command tx timeout [ 76.868879][ T4935] Bluetooth: hci3: command tx timeout [ 76.880604][ T52] Bluetooth: hci2: command tx timeout [ 76.900447][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.924288][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.941927][ T52] Bluetooth: hci4: command tx timeout [ 76.956482][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.978780][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.978852][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.978882][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.978910][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.039232][ T5615] veth0_macvtap: entered promiscuous mode [ 77.061129][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.061173][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.083969][ T5615] veth1_macvtap: entered promiscuous mode [ 77.168371][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.168415][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.189084][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.231222][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.266744][ T5625] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.276612][ T1419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.276634][ T1419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.322188][ T5631] veth0_vlan: entered promiscuous mode [ 77.349143][ T1444] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.349210][ T1444] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.349241][ T1444] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.377640][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.377841][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.403352][ T5624] veth0_vlan: entered promiscuous mode [ 77.408981][ T1419] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.412650][ T5624] veth1_vlan: entered promiscuous mode [ 77.487488][ T5631] veth1_vlan: entered promiscuous mode [ 77.639289][ T5807] null_blk: nullb1: using native zone append [ 77.643611][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.643631][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.646791][ T5624] veth0_macvtap: entered promiscuous mode [ 77.689567][ T5624] veth1_macvtap: entered promiscuous mode [ 77.722468][ T5631] veth0_macvtap: entered promiscuous mode [ 77.752985][ T1444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.753031][ T1444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.761173][ T5631] veth1_macvtap: entered promiscuous mode [ 77.822664][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.838172][ T967] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.866040][ T5807] null_blk: disk nullb1 created [ 77.873799][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.886718][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.911629][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.000221][ T967] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 78.021245][ T1419] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.022225][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.022493][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.023266][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.038753][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.039858][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.039980][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.040115][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.092385][ T967] usb 4-1: config 1 interface 0 has no altsetting 2 [ 78.099154][ T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.361498][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.361545][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.429785][ T1444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.429823][ T1444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.474630][ T1419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.474666][ T1419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.483969][ T5745] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.533666][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.542971][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.552848][ T967] dvbdev: DVB: registering new adapter (DEC2000-t) [ 78.577873][ T5352] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.602969][ T967] usb 4-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 78.650605][ T5745] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 78.661331][ T5745] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 78.661402][ T5745] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 78.661445][ T5745] usb 2-1: config 1 interface 0 has no altsetting 0 [ 78.693796][ T5745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.693849][ T5745] usb 2-1: Product: syz [ 78.693899][ T5745] usb 2-1: Manufacturer: syz [ 78.693916][ T5745] usb 2-1: SerialNumber: syz [ 78.736961][ T5820] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 78.737281][ T5820] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 78.753124][ T5352] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 7.02 [ 78.763065][ T5352] usb 1-1: Dual-Role OTG device on HNP port [ 78.771079][ T5352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.806362][ T5352] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 78.857834][ T52] Bluetooth: hci0: command tx timeout [ 78.880684][ T5830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.891778][ T5830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.939100][ T5621] Bluetooth: hci3: command tx timeout [ 78.939143][ T5621] Bluetooth: hci1: command tx timeout [ 78.944702][ T52] Bluetooth: hci2: command tx timeout [ 79.006618][ T5834] nvmet: adding nsid 1 to subsystem testsubsys [ 79.027806][ T52] Bluetooth: hci4: command tx timeout [ 79.080211][ T12] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:0a502988-1af8-4814-8f4f-2f8eb82fb5b3. [ 79.114071][ T5834] nvme nvme0: creating 2 I/O queues. [ 79.124906][ T5834] nvme nvme0: new ctrl: "testsubsys" [ 79.379567][ T5841] nvmet: disable ns before setting buffered_io value. [ 79.381514][ T5841] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 79.441659][ T1419] nvmet: Created nvm controller 2 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:0a502988-1af8-4814-8f4f-2f8eb82fb5b3. [ 79.447074][ T5841] nvme nvme1: creating 2 I/O queues. [ 79.456551][ T5841] nvme nvme1: new ctrl: "testsubsys" [ 79.632384][ T5849] nvmet: disable ns before setting buffered_io value. [ 79.642470][ T5849] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 79.705724][ T1419] nvmet: Created nvm controller 3 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:0a502988-1af8-4814-8f4f-2f8eb82fb5b3. [ 79.713197][ T5849] nvme nvme2: creating 2 I/O queues. [ 79.720821][ T5849] nvme nvme2: new ctrl: "testsubsys" [ 79.768771][ T5745] (unnamed net_device) (uninitialized): Assigned a random MAC address: 1e:a6:cb:e2:83:aa [ 79.819313][ T5745] rtl8150 2-1:1.0: eth1: rtl8150 is detected [ 79.984486][ T5857] o2cb: This node has not been configured. [ 79.984526][ T5857] o2cb: Cluster check failed. Fix errors before retrying. [ 79.985134][ T5857] (syz.2.14,5857,0):user_dlm_register:674 ERROR: status = -22 [ 79.985158][ T5857] (syz.2.14,5857,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain1" [ 80.094913][ T31] audit: type=1800 audit(1786960106.319:2): pid=5861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.15" name="cluster_name" dev="configfs" ino=8611 res=0 errno=0 [ 80.116916][ T5745] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.130556][ T31] audit: type=1800 audit(1786960106.359:3): pid=5861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.15" name="local" dev="configfs" ino=8613 res=0 errno=0 [ 80.245086][ T5866] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 80.268410][ T5745] usb 5-1: Using ep0 maxpacket: 8 [ 80.274220][ T5745] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 80.286050][ T5745] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 80.286094][ T5745] usb 5-1: config 0 has no interface number 0 [ 80.286179][ T5745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.290336][ T5745] usb 5-1: config 0 descriptor?? [ 80.329687][ T5866] [ 80.332055][ T5866] ====================================================== [ 80.339075][ T5866] WARNING: possible circular locking dependency detected [ 80.346098][ T5866] syzkaller #0 Not tainted [ 80.350500][ T5866] ------------------------------------------------------ [ 80.357505][ T5866] syz.2.16/5866 is trying to acquire lock: [ 80.363303][ T5866] ffff888032c0f518 (&opts->dep_lock){+.+.}-{4:4}, at: tcm_register_callback+0x20/0x70 [ 80.372888][ T5866] [ 80.372888][ T5866] but task is already holding lock: [ 80.380240][ T5866] ffff88802e50dd70 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x238/0x430 [ 80.389552][ T5866] [ 80.389552][ T5866] which lock already depends on the new lock. [ 80.389552][ T5866] [ 80.399942][ T5866] [ 80.399942][ T5866] the existing dependency chain (in reverse order) is: [ 80.408947][ T5866] [ 80.408947][ T5866] -> #2 (&p->frag_sem){++++}-{4:4}: [ 80.416335][ T5866] down_write_killable+0xa6/0x240 [ 80.421897][ T5866] configfs_rmdir+0x3b0/0x950 [ 80.427105][ T5866] vfs_rmdir+0x3e6/0x6a0 [ 80.431885][ T5866] filename_rmdir+0x292/0x520 [ 80.437086][ T5866] __se_sys_unlinkat+0x71/0x1a0 [ 80.438477][ T5745] viperboard 5-1:0.143: version 0.00 found at bus 005 address 002 [ 80.449050][ T5745] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 80.449103][ T5745] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 80.470181][ T5866] do_syscall_64+0x166/0x520 [ 80.475302][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.481727][ T5866] [ 80.481727][ T5866] -> #1 (&sb->s_type->i_mutex_key#23){++++}-{4:4}: [ 80.490443][ T5866] down_write+0x96/0x200 [ 80.495236][ T5866] configfs_depend_item_unlocked+0x153/0x420 [ 80.501766][ T5866] usbg_make_tpg+0x1f6/0x590 [ 80.506884][ T5866] target_fabric_make_tpg+0xa8/0x6d0 [ 80.512697][ T5866] configfs_mkdir+0x4f6/0x9e0 [ 80.517902][ T5866] vfs_mkdir+0x40c/0x620 [ 80.522675][ T5866] filename_mkdirat+0x285/0x510 [ 80.528048][ T5866] __se_sys_mkdirat+0x35/0x150 [ 80.533331][ T5866] do_syscall_64+0x166/0x520 [ 80.538457][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.544880][ T5866] [ 80.544880][ T5866] -> #0 (&opts->dep_lock){+.+.}-{4:4}: [ 80.552533][ T5866] __lock_acquire+0x15ff/0x2e50 [ 80.557908][ T5866] lock_acquire+0x115/0x350 [ 80.562927][ T5866] __mutex_lock+0x19d/0x1550 [ 80.568038][ T5866] tcm_register_callback+0x20/0x70 [ 80.573673][ T5866] usbg_enable_tpg+0x73/0x120 [ 80.578922][ T5866] target_tpg_enable+0x2e5/0x590 [ 80.584420][ T5866] target_fabric_tpg_base_enable_store+0x122/0x1c0 [ 80.591460][ T5866] configfs_write_iter+0x337/0x430 [ 80.597115][ T5866] vfs_write+0x612/0xba0 [ 80.601884][ T5866] ksys_write+0x150/0x270 [ 80.606734][ T5866] do_syscall_64+0x166/0x520 [ 80.611850][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.618270][ T5866] [ 80.618270][ T5866] other info that might help us debug this: [ 80.618270][ T5866] [ 80.628489][ T5866] Chain exists of: [ 80.628489][ T5866] &opts->dep_lock --> &sb->s_type->i_mutex_key#23 --> &p->frag_sem [ 80.628489][ T5866] [ 80.642317][ T5866] Possible unsafe locking scenario: [ 80.642317][ T5866] [ 80.649767][ T5866] CPU0 CPU1 [ 80.655128][ T5866] ---- ---- [ 80.660485][ T5866] rlock(&p->frag_sem); [ 80.664721][ T5866] lock(&sb->s_type->i_mutex_key#23); [ 80.672698][ T5866] lock(&p->frag_sem); [ 80.679365][ T5866] lock(&opts->dep_lock); [ 80.683777][ T5866] [ 80.683777][ T5866] *** DEADLOCK *** [ 80.683777][ T5866] [ 80.691911][ T5866] locks held by syz.2.16/5866: 4, last CPU#0: [ 80.697971][ T5866] #0: ffff8880321022b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 80.707026][ T5866] #1: ffff88801d7a0460 (sb_writers#11){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 80.715992][ T5866] #2: ffff888079abb280 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x7e/0x430 [ 80.725835][ T5866] #3: ffff88802e50dd70 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x238/0x430 [ 80.735600][ T5866] [ 80.735600][ T5866] stack backtrace: [ 80.741505][ T5866] CPU: 0 UID: 0 PID: 5866 Comm: syz.2.16 Not tainted syzkaller #0 PREEMPT(full) [ 80.750621][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.760692][ T5866] Call Trace: [ 80.763973][ T5866] [ 80.766902][ T5866] dump_stack_lvl+0xe8/0x150 [ 80.771498][ T5866] print_circular_bug+0x2e2/0x300 [ 80.776526][ T5866] check_noncircular+0x12f/0x150 [ 80.781475][ T5866] __lock_acquire+0x15ff/0x2e50 [ 80.786325][ T5866] ? rcu_is_watching+0x16/0xb0 [ 80.791089][ T5866] ? trace_kmem_cache_alloc+0x29/0xe0 [ 80.796466][ T5866] lock_acquire+0x115/0x350 [ 80.800963][ T5866] ? tcm_register_callback+0x20/0x70 [ 80.806251][ T5866] __mutex_lock+0x19d/0x1550 [ 80.810841][ T5866] ? tcm_register_callback+0x20/0x70 [ 80.816130][ T5866] ? tcm_register_callback+0x20/0x70 [ 80.821413][ T5866] ? __pfx___mutex_lock+0x10/0x10 [ 80.826443][ T5866] ? __xas_nomem+0xa4/0x420 [ 80.830949][ T5866] tcm_register_callback+0x20/0x70 [ 80.836065][ T5866] usbg_enable_tpg+0x73/0x120 [ 80.840742][ T5866] target_tpg_enable+0x2e5/0x590 [ 80.845682][ T5866] ? _copy_from_iter+0x21b/0x1660 [ 80.850704][ T5866] ? __pfx_target_tpg_enable+0x10/0x10 [ 80.856164][ T5866] target_fabric_tpg_base_enable_store+0x122/0x1c0 [ 80.862665][ T5866] ? __pfx_target_fabric_tpg_base_enable_store+0x10/0x10 [ 80.869690][ T5866] ? down_read+0x2be/0x330 [ 80.874104][ T5866] ? __pfx_target_fabric_tpg_base_enable_store+0x10/0x10 [ 80.881127][ T5866] configfs_write_iter+0x337/0x430 [ 80.886237][ T5866] vfs_write+0x612/0xba0 [ 80.890478][ T5866] ? __pfx_vfs_write+0x10/0x10 [ 80.895251][ T5866] ? __fget_files+0x2a/0x420 [ 80.899837][ T5866] ksys_write+0x150/0x270 [ 80.904174][ T5866] ? __pfx_ksys_write+0x10/0x10 [ 80.909020][ T5866] do_syscall_64+0x166/0x520 [ 80.913605][ T5866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.919662][ T5866] ? clear_bhb_loop+0x70/0xc0 [ 80.924339][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.930228][ T5866] RIP: 0033:0x7f82c499e0d9 [ 80.934652][ T5866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.954252][ T5866] RSP: 002b:00007f82c5785028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 80.962753][ T5866] RAX: ffffffffffffffda RBX: 00007f82c4c25fa0 RCX: 00007f82c499e0d9 [ 80.970724][ T5866] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000004 [ 80.978692][ T5866] RBP: 00007f82c4a35024 R08: 0000000000000000 R09: 0000000000000000 [ 80.986659][ T5866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.994630][ T5866] R13: 00007f82c4c26038 R14: 00007f82c4c25fa0 R15: 00007fffb2abc158 [ 81.002620][ T5866] [ 81.037808][ T5745] usb 2-1: USB disconnect, device number 2 [ 81.082538][ T10] usb 5-1: USB disconnect, device number 2 [ 81.127877][ T967] usb 4-1: USB disconnect, device number 2 [ 86.623005][ T30] cfg80211: failed to load regulatory.db