last executing test programs: 3.472334697s ago: executing program 3 (id=134): r0 = userfaultfd(0x80001) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x40eb, 0x0, 0x0, 0x0, &(0x7f0000000080)) socket(0x10, 0x803, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffb, 0x6, 0x0, 0x1, 'syz1\x00'}, 0x6, 0x100, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b929ade", 0x55}], 0x1}, 0x20048000) write(r3, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) socket$can_raw(0x1d, 0x3, 0x1) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000002500)) 3.435468229s ago: executing program 0 (id=135): sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x9436, 0x42, 0x1, 0x1f4}, 0x0, 0x1, 0x0, 0x0) 3.341359513s ago: executing program 0 (id=137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018007ec0140fffffffe0a00"], 0x44}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 3.341009946s ago: executing program 0 (id=138): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x3c8, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.472645859s ago: executing program 2 (id=141): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) 2.432073657s ago: executing program 3 (id=142): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003c80)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f00000000c0), 0xa7c, r1}, 0x38) 2.30232642s ago: executing program 3 (id=144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}]}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.232721419s ago: executing program 3 (id=146): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", '\x00', "72392a24199b5903"}, 0x28) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c8", 0x1}], 0x1) 2.160953009s ago: executing program 2 (id=148): syz_open_procfs(0x0, &(0x7f0000002180)='syscall\x00') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x8000) 2.160789798s ago: executing program 3 (id=149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2.05178856s ago: executing program 2 (id=150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000600)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[], 0x38}}, 0x40408c0) 1.54265579s ago: executing program 0 (id=151): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYBLOB="1b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10002, 0xf2b70000}}}}}, 0x0) 1.542512442s ago: executing program 0 (id=152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018007ec0140fffffffe0a0011"], 0x44}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 1.49226226s ago: executing program 0 (id=153): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x35, 0xbb, 0x9b, 0x8, 0x10b8, 0x1e6e, 0x9fdb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x3, 0x10, 0x10, "", [{{0x9, 0x4, 0x21, 0x7, 0x0, 0x40, 0x82, 0x49, 0x5}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001140)={0x14, 0x0, &(0x7f0000001100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc27}}}, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000001400)={0x14, 0x0, &(0x7f00000013c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002240)={0x44, &(0x7f0000002040)={0x0, 0x11, 0x2, "0225"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.29256493s ago: executing program 1 (id=154): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r2, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009800c000180080001"], 0xb0}}, 0x0) 1.291623229s ago: executing program 1 (id=155): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x88400, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0xa}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.248440862s ago: executing program 3 (id=156): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.192561384s ago: executing program 1 (id=157): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1b6) ftruncate(r0, 0x1000000) mount(0x0, 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/nvme/nvme0/ctrl_loss_tmo\x00', 0x1, 0x0) write(r2, &(0x7f0000000980)='-1\n', 0x3) 1.192403827s ago: executing program 1 (id=158): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 1.121869694s ago: executing program 2 (id=159): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) socket$inet6_tcp(0xa, 0x1, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x200) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) 1.121706727s ago: executing program 2 (id=160): r0 = socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x4020) msgsnd(0xffffffffffffffff, &(0x7f00000000c0)={0x1, "97730becbc475db1c4d3d4fe95a9b943b4f06cf017b824"}, 0x1f, 0x800) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) recvfrom(r0, &(0x7f0000000580)=""/211, 0xd3, 0x10000, &(0x7f0000000680)=@sco, 0x80) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x81) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r4, r5, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) close(r6) 901.762589ms ago: executing program 1 (id=161): socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mount$fuse(0x0, 0x0, 0x0, 0x100000, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x7, 0xd) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) 198.571µs ago: executing program 1 (id=162): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) 0s ago: executing program 2 (id=163): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='rd_pages=64\n', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='naa.6001405c935d7912\n', 0x16) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000480)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0/virtual_scsi_port\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='1\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1/tcm.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0\n', 0xc) close(r4) nanosleep(&(0x7f00000006c0)={0x1}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000700), 0x1, 0x2) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000740)={0x53, 0xffffffffffffffff, 0x10, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000780)="8f000000000000000000000000010000", 0x0, 0x3e8, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:31487' (ED25519) to the list of known hosts. [ 32.034906][ T5648] cgroup: Unknown subsys name 'net' [ 32.148042][ T5648] cgroup: Unknown subsys name 'cpuset' [ 32.150246][ T5648] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.044697][ T5648] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.787934][ T5743] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.790329][ T5743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.790671][ T5743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.791119][ T5745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.791650][ T5745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.791886][ T5743] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.792325][ T5743] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.792363][ T5744] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.792868][ T5743] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.794573][ T5746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.796176][ T5744] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.796476][ T5746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.797660][ T5743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.798364][ T5743] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.799563][ T5743] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.800162][ T5743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.800532][ T5746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.803261][ T5095] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.805783][ T5743] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.807488][ T5746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.426491][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.426540][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.426600][ T5732] bridge_slave_0: entered allmulticast mode [ 37.427451][ T5732] bridge_slave_0: entered promiscuous mode [ 37.436678][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.436754][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.436834][ T5732] bridge_slave_1: entered allmulticast mode [ 37.438065][ T5732] bridge_slave_1: entered promiscuous mode [ 37.444734][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.444799][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.444862][ T5731] bridge_slave_0: entered allmulticast mode [ 37.445734][ T5731] bridge_slave_0: entered promiscuous mode [ 37.467855][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.468624][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.468685][ T5731] bridge_slave_1: entered allmulticast mode [ 37.469394][ T5731] bridge_slave_1: entered promiscuous mode [ 37.487072][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.506615][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.506779][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.506846][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.506991][ T5733] bridge_slave_0: entered allmulticast mode [ 37.507710][ T5733] bridge_slave_0: entered promiscuous mode [ 37.510874][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.512960][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.524733][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.524775][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.524924][ T5733] bridge_slave_1: entered allmulticast mode [ 37.526102][ T5733] bridge_slave_1: entered promiscuous mode [ 37.545623][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.545729][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.545822][ T5730] bridge_slave_0: entered allmulticast mode [ 37.546937][ T5730] bridge_slave_0: entered promiscuous mode [ 37.559571][ T5731] team0: Port device team_slave_0 added [ 37.561068][ T5731] team0: Port device team_slave_1 added [ 37.569410][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.571445][ T5732] team0: Port device team_slave_0 added [ 37.571579][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.571649][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.571761][ T5730] bridge_slave_1: entered allmulticast mode [ 37.572901][ T5730] bridge_slave_1: entered promiscuous mode [ 37.574772][ T5732] team0: Port device team_slave_1 added [ 37.584254][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.623135][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.623146][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.623159][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.624412][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.624424][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.624439][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.625506][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.625514][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.625526][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.626240][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.626249][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.626261][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.636821][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.637865][ T5733] team0: Port device team_slave_0 added [ 37.642638][ T5733] team0: Port device team_slave_1 added [ 37.649209][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.700208][ T5730] team0: Port device team_slave_0 added [ 37.710421][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.710431][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.710444][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.714028][ T5732] hsr_slave_0: entered promiscuous mode [ 37.714573][ T5732] hsr_slave_1: entered promiscuous mode [ 37.721983][ T5730] team0: Port device team_slave_1 added [ 37.722539][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.722550][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.722568][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.727671][ T5731] hsr_slave_0: entered promiscuous mode [ 37.728311][ T5731] hsr_slave_1: entered promiscuous mode [ 37.728876][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 37.728939][ T5731] Cannot create hsr debugfs directory [ 37.757239][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.757249][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.757262][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.777764][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.777775][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.777788][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.795886][ T5733] hsr_slave_0: entered promiscuous mode [ 37.796800][ T5733] hsr_slave_1: entered promiscuous mode [ 37.797109][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 37.797120][ T5733] Cannot create hsr debugfs directory [ 37.884251][ T5730] hsr_slave_0: entered promiscuous mode [ 37.884709][ T5730] hsr_slave_1: entered promiscuous mode [ 37.885529][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 37.885547][ T5730] Cannot create hsr debugfs directory [ 38.040523][ T5732] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.048207][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.048842][ T5732] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.053386][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.066869][ T5732] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.069796][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.080571][ T5732] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.082770][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.112110][ T5733] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.116280][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.116683][ T5733] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.119693][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.121466][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.121520][ T5732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.121724][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.121767][ T5732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.126605][ T5733] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.129307][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.130458][ T5733] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.134902][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.179364][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.179411][ T5733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.179547][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.179590][ T5733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.183703][ T5731] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.187001][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.188358][ T5731] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.197085][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.200280][ T5731] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.206394][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.210816][ T174] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.215607][ T174] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.224474][ T174] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.231661][ T174] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.246659][ T5731] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.249770][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.320985][ T5730] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.323857][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.324314][ T5730] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.326984][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.332482][ T5730] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.336447][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.342795][ T5730] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.346338][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.351550][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.376492][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.377408][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.386548][ T174] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.386602][ T174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.402204][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.410688][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.410769][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.416030][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.418975][ T174] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.419330][ T174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.441724][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.441783][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.444986][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.464191][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.464238][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.473531][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.473576][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.532239][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.561909][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.565734][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.565777][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.570242][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.570286][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.786332][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.826461][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.838706][ T5737] Bluetooth: hci1: command tx timeout [ 38.838802][ T5737] Bluetooth: hci0: command tx timeout [ 38.838884][ T5737] Bluetooth: hci2: command tx timeout [ 38.838944][ T5737] Bluetooth: hci3: command tx timeout [ 38.839255][ T5733] veth0_vlan: entered promiscuous mode [ 38.843263][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.846612][ T5733] veth1_vlan: entered promiscuous mode [ 38.854657][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.874030][ T5733] veth0_macvtap: entered promiscuous mode [ 38.881457][ T5733] veth1_macvtap: entered promiscuous mode [ 38.918472][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.920521][ T5730] veth0_vlan: entered promiscuous mode [ 38.920745][ T5732] veth0_vlan: entered promiscuous mode [ 38.926195][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.933512][ T5732] veth1_vlan: entered promiscuous mode [ 38.935896][ T5731] veth0_vlan: entered promiscuous mode [ 38.943921][ T5730] veth1_vlan: entered promiscuous mode [ 38.966198][ T5731] veth1_vlan: entered promiscuous mode [ 38.998993][ T5730] veth0_macvtap: entered promiscuous mode [ 39.007668][ T5730] veth1_macvtap: entered promiscuous mode [ 39.008790][ T5732] veth0_macvtap: entered promiscuous mode [ 39.017330][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.017342][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.022574][ T5732] veth1_macvtap: entered promiscuous mode [ 39.027400][ T5731] veth0_macvtap: entered promiscuous mode [ 39.033800][ T5731] veth1_macvtap: entered promiscuous mode [ 39.047125][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.047138][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.050588][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.051369][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.057592][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.060375][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.062193][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.064537][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.064617][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.068938][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.071800][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.071898][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.072233][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.072328][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.073919][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.087065][ T5589] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.087188][ T5589] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.121569][ T5733] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.124667][ T5733] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.137753][ T5733] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.140357][ T5733] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.166513][ T5733] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.174789][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.174803][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.195112][ T5589] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.195329][ T5589] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.195349][ T5589] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.195366][ T5589] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.195382][ T5589] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.195399][ T5589] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.195416][ T5589] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.202979][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.202991][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.244172][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.244185][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.258709][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.258722][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.282289][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.282302][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.303660][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.303674][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.426424][ T5892] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.495447][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 39.655285][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 39.656327][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 39.658225][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 39.658252][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 39.658263][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 39.658274][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 39.658285][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 39.658304][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.875895][ T10] usb 6-1: usb_control_msg returned -32 [ 39.875925][ T10] usbtmc 6-1:16.0: can't read capabilities [ 39.978675][ T5903] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 39.978691][ T5903] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 39.979362][ T5903] vhci_hcd vhci_hcd.0: Device attached [ 40.096477][ T5903] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 40.256412][ T5882] usb 38-1: SetAddress Request (2) to port 0 [ 40.256520][ T5882] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 40.291179][ T5907] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 40.340323][ T5904] vhci_hcd: connection reset by peer [ 40.342152][ T5589] vhci_hcd vhci_hcd.0: stop threads [ 40.342314][ T5589] vhci_hcd vhci_hcd.0: release socket [ 40.342829][ T5589] vhci_hcd vhci_hcd.0: disconnect device [ 40.428939][ T5885] usb 6-1: USB disconnect, device number 2 [ 40.915311][ T5743] Bluetooth: hci3: command tx timeout [ 40.915347][ T5743] Bluetooth: hci2: command tx timeout [ 40.915366][ T5743] Bluetooth: hci0: command tx timeout [ 40.915380][ T5743] Bluetooth: hci1: command tx timeout [ 41.385369][ T30] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 41.435099][ T3375] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 41.537310][ T30] usb 6-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=9f.db [ 41.542384][ T30] usb 6-1: config 8 has an invalid interface number: 33 but max is 0 [ 41.542401][ T30] usb 6-1: config 8 has no interface number 0 [ 41.543648][ T30] usb 6-1: config 8 interface 33 has no altsetting 0 [ 41.569992][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.570466][ T30] usb 6-1: Product: syz [ 41.570475][ T30] usb 6-1: Manufacturer: syz [ 41.570482][ T30] usb 6-1: SerialNumber: syz [ 41.586841][ T3375] usb 5-1: Using ep0 maxpacket: 32 [ 41.590278][ T3375] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 41.592323][ T3375] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.592336][ T3375] usb 5-1: config 0 has no interfaces? [ 41.612680][ T3375] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 41.612778][ T3375] usb 5-1: Product: syz [ 41.612819][ T3375] usb 5-1: Manufacturer: syz [ 41.613001][ T3375] usb 5-1: SerialNumber: syz [ 41.766340][ T3375] usb 5-1: config 0 descriptor?? [ 42.022824][ T30] dvb-usb: found a 'DiBcom TFE7790P reference design' in cold state, will try to load a firmware [ 42.086335][ T30] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 42.086609][ T30] dib0700: firmware download failed at 7 with -22 [ 42.124548][ T30] usb 6-1: USB disconnect, device number 3 [ 42.726680][ T30] usb 5-1: USB disconnect, device number 2 [ 42.804735][ T5979] netlink: 76 bytes leftover after parsing attributes in process `syz.1.16'. [ 42.895155][ T2308] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 42.995224][ T5743] Bluetooth: hci0: command tx timeout [ 42.995276][ T5743] Bluetooth: hci2: command tx timeout [ 42.995297][ T5743] Bluetooth: hci3: command tx timeout [ 42.998694][ T5737] Bluetooth: hci1: command tx timeout [ 43.055225][ T2308] usb 7-1: Using ep0 maxpacket: 32 [ 43.057914][ T2308] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 43.074466][ T2308] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.074503][ T2308] usb 7-1: config 0 has no interfaces? [ 43.087955][ T2308] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 43.087984][ T2308] usb 7-1: Product: syz [ 43.089028][ T2308] usb 7-1: Manufacturer: syz [ 43.089705][ T2308] usb 7-1: SerialNumber: syz [ 43.130565][ T2308] usb 7-1: config 0 descriptor?? [ 43.305111][ T5885] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 43.456503][ T5885] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice= 0.01 [ 43.457430][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.472611][ T5885] usb 6-1: New device @ 480 Mbps (05e1:0408, interface 0, class 0) [ 43.472628][ T5885] usb 6-1: video interface 0 found [ 43.581239][ T9] usb 7-1: USB disconnect, device number 2 [ 43.783042][ T5997] process 'syz.0.23' launched '/dev/fd/3' with NULL argv: empty string added [ 44.229946][ T6004] netlink: 76 bytes leftover after parsing attributes in process `syz.2.26'. [ 44.516715][ T5885] stk1160: write failed on reg 0x202 (-110) [ 44.516977][ T5885] stk1160: write failed on reg 0x2ff (-32) [ 44.533533][ T5885] stk1160: write failed on reg 0x203 (-32) [ 44.533805][ T5885] stk1160: write failed on reg 0x2 (-32) [ 44.534046][ T5885] stk1160: write failed on reg 0xd (-32) [ 44.534279][ T5885] stk1160: write failed on reg 0xf (-32) [ 44.534525][ T5885] stk1160: write failed on reg 0x18 (-32) [ 44.534761][ T5885] stk1160: write failed on reg 0x19 (-32) [ 44.534992][ T5885] stk1160: write failed on reg 0x1a (-32) [ 44.536008][ T5885] stk1160: write failed on reg 0x1b (-32) [ 44.536231][ T5885] stk1160: write failed on reg 0x1c (-32) [ 44.536471][ T5885] stk1160: write failed on reg 0x300 (-32) [ 44.536705][ T5885] stk1160: write failed on reg 0x350 (-32) [ 44.536946][ T5885] stk1160: write failed on reg 0x351 (-32) [ 44.537168][ T5885] stk1160: write failed on reg 0x352 (-32) [ 44.537385][ T5885] stk1160: write failed on reg 0x353 (-32) [ 44.537600][ T5885] stk1160: write failed on reg 0x300 (-32) [ 44.537819][ T5885] stk1160: write failed on reg 0x0 (-32) [ 44.538140][ T5885] stk1160: read failed on reg 0x10 (-32) [ 44.538378][ T5885] stk1160: read failed on reg 0x10 (-32) [ 44.538605][ T5885] stk1160: write failed on reg 0x500 (-32) [ 44.538834][ T5885] stk1160: write failed on reg 0x500 (-32) [ 44.539053][ T5885] stk1160: write failed on reg 0x506 (-32) [ 44.539347][ T5885] stk1160: write failed on reg 0x507 (-32) [ 44.539566][ T5885] stk1160: write failed on reg 0x504 (-32) [ 44.539785][ T5885] stk1160: write failed on reg 0x502 (-32) [ 44.540007][ T5885] stk1160: write failed on reg 0x503 (-32) [ 44.540264][ T5885] stk1160: write failed on reg 0x500 (-32) [ 44.540492][ T5885] stk1160: read failed on reg 0x500 (-32) [ 44.540720][ T5885] stk1160: write failed on reg 0x504 (-32) [ 44.540956][ T5885] stk1160: write failed on reg 0x502 (-32) [ 44.541191][ T5885] stk1160: write failed on reg 0x503 (-32) [ 44.541410][ T5885] stk1160: write failed on reg 0x500 (-32) [ 44.542132][ T5885] stk1160: read failed on reg 0x500 (-32) [ 44.542365][ T5885] stk1160: write failed on reg 0x504 (-32) [ 44.542622][ T5885] stk1160: write failed on reg 0x502 (-32) [ 44.542845][ T5885] stk1160: write failed on reg 0x503 (-32) [ 44.543076][ T5885] stk1160: write failed on reg 0x500 (-32) [ 44.543325][ T5885] stk1160: read failed on reg 0x500 (-32) [ 44.543574][ T5885] stk1160: write failed on reg 0x504 (-32) [ 44.543793][ T5885] stk1160: write failed on reg 0x502 (-32) [ 44.544015][ T5885] stk1160: write failed on reg 0x503 (-32) [ 44.544247][ T5885] stk1160: write failed on reg 0x500 (-32) [ 44.544511][ T5885] stk1160: read failed on reg 0x500 (-32) [ 44.544738][ T5885] stk1160: write failed on reg 0x504 (-32) [ 44.544956][ T5885] stk1160: write failed on reg 0x502 (-32) [ 44.548890][ T5885] stk1160: write failed on reg 0x503 (-32) [ 44.549129][ T5885] stk1160: write failed on reg 0x500 (-32) [ 44.549788][ T5885] stk1160: read failed on reg 0x500 (-32) [ 44.550037][ T5885] stk1160: write failed on reg 0x504 (-32) [ 44.550318][ T5885] stk1160: write failed on reg 0x502 (-32) [ 44.550553][ T5885] stk1160: write failed on reg 0x503 (-32) [ 44.550807][ T5885] stk1160: write failed on reg 0x500 (-32) [ 44.551041][ T5885] stk1160: read failed on reg 0x500 (-32) [ 44.551293][ T5885] stk1160: write failed on reg 0x504 (-32) [ 44.551516][ T5885] stk1160: write failed on reg 0x502 (-32) [ 44.551740][ T5885] stk1160: write failed on reg 0x503 (-32) [ 44.551992][ T5885] stk1160: write failed on reg 0x500 (-32) [ 44.552259][ T5885] stk1160: read failed on reg 0x500 (-32) [ 44.552510][ T5885] stk1160: write failed on reg 0x110 (-32) [ 44.552754][ T5885] stk1160: write failed on reg 0x111 (-32) [ 44.553073][ T5885] stk1160: write failed on reg 0x112 (-32) [ 44.553328][ T5885] stk1160: write failed on reg 0x113 (-32) [ 44.553557][ T5885] stk1160: write failed on reg 0x114 (-32) [ 44.553795][ T5885] stk1160: write failed on reg 0x115 (-32) [ 44.554014][ T5885] stk1160: write failed on reg 0x116 (-32) [ 44.554229][ T5885] stk1160: write failed on reg 0x117 (-32) [ 44.558985][ T5885] stk1160 6-1:1.0: V4L2 device registered as video103 [ 44.585578][ T6019] ptrace attach of "/syz-executor exec"[5732] was attempted by "/syz-executor exec"[6019] [ 44.667172][ T5999] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 44.677941][ T50] usb 6-1: USB disconnect, device number 4 [ 44.869747][ T6026] netlink: 168 bytes leftover after parsing attributes in process `syz.0.34'. [ 44.869761][ T6026] netlink: 168 bytes leftover after parsing attributes in process `syz.0.34'. [ 44.913115][ T6028] netlink: 24 bytes leftover after parsing attributes in process `syz.0.35'. [ 44.913140][ T6028] netlink: 28 bytes leftover after parsing attributes in process `syz.0.35'. [ 44.913147][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 45.076466][ T5095] Bluetooth: hci3: command tx timeout [ 45.076515][ T5743] Bluetooth: hci2: command tx timeout [ 45.076545][ T5737] Bluetooth: hci1: command tx timeout [ 45.185147][ T5885] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 45.325462][ T5882] usb 38-1: device descriptor read/8, error -110 [ 45.335645][ T5885] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 45.336830][ T5885] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 45.336855][ T5885] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 45.336884][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.343383][ T6030] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 45.348495][ T5885] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 45.605749][ T30] usb 5-1: USB disconnect, device number 3 [ 45.693516][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 45.694317][ T6046] ipvlan0: entered promiscuous mode [ 45.745606][ T5882] usb usb38-port1: attempt power cycle [ 46.308328][ T5882] usb usb38-port1: unable to enumerate USB device [ 46.551807][ T6070] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 46.575120][ T5882] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 46.735684][ T5882] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 46.737086][ T5882] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 46.739854][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.739866][ T5882] usb 7-1: Product: syz [ 46.739874][ T5882] usb 7-1: Manufacturer: syz [ 46.739880][ T5882] usb 7-1: SerialNumber: syz [ 46.742300][ T5882] usb 7-1: config 0 descriptor?? [ 46.745847][ T5882] streamzap 7-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 46.774657][ T6075] Bluetooth: MGMT ver 1.23 [ 46.950265][ T42] usb 7-1: USB disconnect, device number 3 [ 47.489432][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 47.493155][ T6092] netlink: 72 bytes leftover after parsing attributes in process `syz.2.58'. [ 47.586724][ T6102] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 47.590213][ T6094] input: syz1 as /devices/virtual/input/input5 [ 48.595650][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 48.755249][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 48.760391][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 48.760492][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 48.764058][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.764112][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 48.769584][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.769598][ T9] usb 5-1: Product: syz [ 48.769605][ T9] usb 5-1: Manufacturer: syz [ 48.769612][ T9] usb 5-1: SerialNumber: syz [ 48.874637][ T43] audit: type=1326 audit(1789678647.734:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.1.72" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf6feefec code=0x50000 [ 48.876032][ T43] audit: type=1326 audit(1789678647.744:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.1.72" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf6fef017 code=0x50000 [ 48.900519][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 49.088202][ T9] usb 5-1: 0:2 : does not exist [ 49.112304][ T9] usb 5-1: USB disconnect, device number 4 [ 49.134012][ T5909] udevd[5909]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 49.148239][ T6142] netlink: 24 bytes leftover after parsing attributes in process `syz.2.76'. [ 49.148275][ T6142] netlink: 28 bytes leftover after parsing attributes in process `syz.2.76'. [ 49.331363][ T6151] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 49.660082][ T6158] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 49.692964][ T6160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.85'. [ 49.692987][ T6160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.85'. [ 49.715462][ T5843] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 49.749135][ T6162] gadgetfs: bound to dummy_udc driver [ 49.866189][ T5843] usb 8-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 49.868751][ T5843] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.868777][ T5843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.882980][ T5843] as10x_usb: device has been detected [ 49.883790][ T5843] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 49.904440][ T5843] usb 8-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 49.919906][ T5843] as10x_usb: error during firmware upload part1 [ 49.920436][ T5843] Registered device Abilis Systems DVB-Titan [ 49.995093][ T2308] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 49.995312][ C3] gadgetfs: connected [ 49.996138][ T2308] gadgetfs: disconnected [ 50.494339][ T6197] netlink: 24 bytes leftover after parsing attributes in process `syz.1.94'. [ 50.494424][ T6197] netlink: 24 bytes leftover after parsing attributes in process `syz.1.94'. [ 50.965220][ T2308] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 51.115663][ T2308] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 51.116498][ T2308] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.116521][ T2308] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 51.116533][ T2308] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 51.117747][ T2308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 51.117759][ T2308] usb 5-1: Product: syz [ 51.117766][ T2308] usb 5-1: Manufacturer: syz [ 51.120224][ T6183] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 51.121384][ T2308] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 51.128588][ T2308] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 51.328203][ T2308] usb 5-1: USB disconnect, device number 6 [ 51.336224][ T2308] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 51.336766][ T2308] garmin_gps 5-1:1.0: device disconnected [ 52.482052][ T6244] netlink: 24 bytes leftover after parsing attributes in process `syz.1.103'. [ 52.482086][ T6244] netlink: 24 bytes leftover after parsing attributes in process `syz.1.103'. [ 52.819823][ T6260] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 52.819845][ T6260] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 52.819856][ T6260] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 52.857281][ T6261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.857297][ T6261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.858202][ T6261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.858213][ T6261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.590945][ T6272] syz.1.110 uses obsolete (PF_INET,SOCK_PACKET) [ 53.658302][ T6277] netlink: 24 bytes leftover after parsing attributes in process `syz.2.113'. [ 53.658326][ T6277] netlink: 16 bytes leftover after parsing attributes in process `syz.2.113'. [ 54.811128][ T6291] gfs2: error -5 reading superblock [ 55.021002][ T47] Bluetooth: hci4: Frame reassembly failed (-84) [ 55.021132][ T47] Bluetooth: hci4: Frame reassembly failed (-84) [ 55.021395][ T47] Bluetooth: hci4: Frame reassembly failed (-84) [ 55.021470][ T47] Bluetooth: hci4: Frame reassembly failed (-84) [ 55.964501][ T6301] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 56.285082][ T50] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 56.435741][ T50] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 56.437862][ T50] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 56.437876][ T50] usb 5-1: config 0 has no interface number 0 [ 56.437894][ T50] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 56.439746][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.439759][ T50] usb 5-1: Product: syz [ 56.439766][ T50] usb 5-1: Manufacturer: syz [ 56.439773][ T50] usb 5-1: SerialNumber: syz [ 56.441643][ T50] usb 5-1: config 0 descriptor?? [ 56.450992][ T50] yurex 5-1:0.50: USB YUREX device now attached to Yurex #1 [ 56.535228][ T10] usb 8-1: USB disconnect, device number 2 [ 56.572924][ T10] Unregistered device Abilis Systems DVB-Titan [ 56.577427][ T10] as10x_usb: device has been disconnected [ 56.592201][ T6306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.122'. [ 56.592238][ T6306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.122'. [ 56.667141][ T6301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.667457][ T6301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.674231][ T50] usb 5-1: USB disconnect, device number 7 [ 56.677706][ T50] yurex 5-1:0.50: USB YUREX #1 now disconnected [ 57.086221][ T5737] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 57.086254][ T5743] Bluetooth: hci4: command 0x1003 tx timeout [ 57.563666][ T6334] Zero length message leads to an empty skb [ 58.169011][ T6334] lo speed is unknown, defaulting to 1000 [ 58.207453][ T6334] lo speed is unknown, defaulting to 1000 [ 58.223785][ T6334] lo speed is unknown, defaulting to 1000 [ 58.224587][ T6334] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 58.224607][ T6334] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 58.224630][ T6334] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 58.250663][ T6334] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 58.266689][ T6334] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 58.321589][ T6339] pimreg: entered allmulticast mode [ 58.349139][ T6334] lo speed is unknown, defaulting to 1000 [ 58.349899][ T6334] lo speed is unknown, defaulting to 1000 [ 58.350683][ T6334] lo speed is unknown, defaulting to 1000 [ 58.360887][ T6334] lo speed is unknown, defaulting to 1000 [ 58.398320][ T6343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.133'. [ 58.398354][ T6343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.133'. [ 58.439421][ T6345] netlink: 'syz.3.134': attribute type 4 has an invalid length. [ 58.439435][ T6345] netlink: 17 bytes leftover after parsing attributes in process `syz.3.134'. [ 58.466865][ T6348] o2cb: This node has not been configured. [ 58.466875][ T6348] o2cb: Cluster check failed. Fix errors before retrying. [ 58.466890][ T6348] (syz.1.136,6348,1):user_dlm_register:674 ERROR: status = -22 [ 58.466904][ T6348] (syz.1.136,6348,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain1" [ 59.256460][ T6360] tc action pedit 'at' offset 5 out of bounds [ 59.256474][ T6360] tc action pedit 'at' offset 5 out of bounds [ 59.256480][ T6360] tc action pedit 'at' offset 5 out of bounds [ 59.256485][ T6360] tc action pedit 'at' offset 5 out of bounds [ 59.256490][ T6360] tc action pedit 'at' offset 5 out of bounds [ 59.256495][ T6360] tc action pedit 'at' offset 5 out of bounds [ 59.256500][ T6360] tc action pedit 'at' offset 5 out of bounds [ 59.256505][ T6360] tc action pedit 'at' offset 5 out of bounds [ 59.256510][ T6360] tc action pedit 'at' offset 5 out of bounds [ 59.256515][ T6360] tc action pedit 'at' offset 5 out of bounds [ 59.256547][ T6360] 0: reclassify loop, rule prio 0, protocol 800 [ 60.585564][ T2308] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 60.736096][ T2308] usb 5-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=9f.db [ 60.736914][ T2308] usb 5-1: config 8 has an invalid interface number: 33 but max is 0 [ 60.736927][ T2308] usb 5-1: config 8 has no interface number 0 [ 60.736940][ T2308] usb 5-1: config 8 interface 33 has no altsetting 0 [ 60.739778][ T2308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.739790][ T2308] usb 5-1: Product: syz [ 60.739797][ T2308] usb 5-1: Manufacturer: syz [ 60.739804][ T2308] usb 5-1: SerialNumber: syz [ 60.982518][ T35] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 60.988419][ T6413] pim6reg: entered allmulticast mode [ 61.060265][ T6413] pim6reg: left allmulticast mode [ 61.219765][ T35] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 61.523518][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.523534][ T35] usb 8-1: Product: syz [ 61.523541][ T35] usb 8-1: Manufacturer: syz [ 61.523549][ T35] usb 8-1: SerialNumber: syz [ 61.810404][ T35] usb 8-1: config 0 descriptor?? [ 61.810845][ T2308] dvb-usb: found a 'DiBcom TFE7790P reference design' in warm state. [ 61.822901][ T2308] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 61.824384][ T2308] dvbdev: DVB: registering new adapter (DiBcom TFE7790P reference design) [ 61.824409][ T2308] usb 5-1: media controller created [ 61.826273][ T2308] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 61.853149][ T2308] DVB: Unable to find symbol dib7000p_attach() [ 61.853159][ T2308] dvb-usb: no frontend was attached by 'DiBcom TFE7790P reference design' [ 61.873200][ T6419] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 61.881543][ T6419] [ 61.882366][ T6419] ====================================================== [ 61.884802][ T6419] WARNING: possible circular locking dependency detected [ 61.887001][ T6419] syzkaller #0 Not tainted [ 61.888488][ T6419] ------------------------------------------------------ [ 61.890737][ T6419] syz.2.163/6419 is trying to acquire lock: [ 61.892594][ T6419] ffffffff90480980 (tpg_instances_lock){+.+.}-{4:4}, at: tcm_alloc+0x20/0x440 [ 61.895924][ T6419] [ 61.895924][ T6419] but task is already holding lock: [ 61.898212][ T6419] ffff888013e84390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 61.900994][ T6419] [ 61.900994][ T6419] which lock already depends on the new lock. [ 61.900994][ T6419] [ 61.904141][ T6419] [ 61.904141][ T6419] the existing dependency chain (in reverse order) is: [ 61.905118][ T2308] rc_core: IR keymap rc-dib0700-rc5 not found [ 61.905129][ T2308] Registered IR keymap rc-empty [ 61.905278][ T2308] dvb-usb: could not initialize remote control. [ 61.905286][ T2308] dvb-usb: DiBcom TFE7790P reference design successfully initialized and connected. [ 61.915532][ T6419] [ 61.915532][ T6419] -> #2 (&gi->lock){+.+.}-{4:4}: [ 61.918380][ T6419] lock_acquire+0x1d1/0x380 [ 61.920460][ T6419] __mutex_lock+0x1a4/0x1bd0 [ 61.922541][ T6419] config_usb_cfg_link+0x57/0x3a0 [ 61.924842][ T6419] configfs_symlink+0x695/0x1340 [ 61.926949][ T6419] vfs_symlink+0x178/0x4d0 [ 61.928987][ T6419] filename_symlinkat+0x2a6/0x560 [ 61.931234][ T6419] __ia32_sys_symlinkat+0x9b/0xe0 [ 61.933453][ T6419] __do_fast_syscall_32+0x13a/0x8b0 [ 61.935743][ T6419] do_fast_syscall_32+0x32/0x70 [ 61.937865][ T6419] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 61.940616][ T6419] [ 61.940616][ T6419] -> #1 (&sb->s_type->i_mutex_key#25){++++}-{4:4}: [ 61.944149][ T6419] lock_acquire+0x1d1/0x380 [ 61.946198][ T6419] down_write+0x8b/0x1f0 [ 61.948152][ T6419] configfs_depend_item_unlocked+0xf3/0x6a0 [ 61.950195][ T6419] usbg_make_tpg+0x251/0x610 [ 61.951864][ T6419] target_fabric_make_tpg+0xab/0x8c0 [ 61.953786][ T6419] configfs_mkdir+0x525/0xd40 [ 61.955589][ T6419] vfs_mkdir+0x364/0x850 [ 61.957201][ T6419] filename_mkdirat+0x48b/0x5e0 [ 61.958883][ T6419] __ia32_sys_mkdirat+0x88/0xc0 [ 61.960573][ T6419] __do_fast_syscall_32+0x13a/0x8b0 [ 61.962391][ T6419] do_fast_syscall_32+0x32/0x70 [ 61.964114][ T6419] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 61.966238][ T6419] [ 61.966238][ T6419] -> #0 (tpg_instances_lock){+.+.}-{4:4}: [ 61.968693][ T6419] check_prev_add+0xeb/0xe60 [ 61.970301][ T6419] __lock_acquire+0x1528/0x1f40 [ 61.972029][ T6419] lock_acquire+0x1d1/0x380 [ 61.973608][ T6419] __mutex_lock+0x1a4/0x1bd0 [ 61.975244][ T6419] tcm_alloc+0x20/0x440 [ 61.976727][ T6419] usb_get_function+0x5e/0xd0 [ 61.978410][ T6419] config_usb_cfg_link+0x1ed/0x3a0 [ 61.980172][ T6419] configfs_symlink+0x695/0x1340 [ 61.981926][ T6419] vfs_symlink+0x178/0x4d0 [ 61.983496][ T6419] filename_symlinkat+0x2a6/0x560 [ 61.985246][ T6419] __ia32_sys_symlinkat+0x9b/0xe0 [ 61.986973][ T6419] __do_fast_syscall_32+0x13a/0x8b0 [ 61.988883][ T6419] do_fast_syscall_32+0x32/0x70 [ 61.990586][ T6419] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 61.992741][ T6419] [ 61.992741][ T6419] other info that might help us debug this: [ 61.992741][ T6419] [ 61.995880][ T6419] Chain exists of: [ 61.995880][ T6419] tpg_instances_lock --> &sb->s_type->i_mutex_key#25 --> &gi->lock [ 61.995880][ T6419] [ 62.000157][ T6419] Possible unsafe locking scenario: [ 62.000157][ T6419] [ 62.002477][ T6419] CPU0 CPU1 [ 62.004184][ T6419] ---- ---- [ 62.005844][ T6419] lock(&gi->lock); [ 62.007079][ T6419] lock(&sb->s_type->i_mutex_key#25); [ 62.009561][ T6419] lock(&gi->lock); [ 62.011550][ T6419] lock(tpg_instances_lock); [ 62.013053][ T6419] [ 62.013053][ T6419] *** DEADLOCK *** [ 62.013053][ T6419] [ 62.014312][ T2308] usb 5-1: USB disconnect, device number 8 [ 62.017389][ T6419] locks held by syz.2.163/6419: 3, last CPU#2: [ 62.019310][ T6419] #0: ffff88802290e460 (sb_writers#13){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 62.022274][ T6419] #1: ffff88801317f800 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 62.026176][ T6419] #2: ffff888013e84390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 62.029937][ T6419] [ 62.029937][ T6419] stack backtrace: [ 62.032300][ T6419] CPU: 2 UID: 0 PID: 6419 Comm: syz.2.163 Not tainted syzkaller #0 PREEMPT(full) [ 62.035890][ T6419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.039897][ T6419] Call Trace: [ 62.041244][ T6419] [ 62.042453][ T6419] dump_stack_lvl+0x100/0x190 [ 62.044249][ T6419] print_circular_bug.cold+0x178/0x1be [ 62.045966][ T6419] check_noncircular+0x146/0x160 [ 62.047561][ T6419] check_prev_add+0xeb/0xe60 [ 62.049022][ T6419] __lock_acquire+0x1528/0x1f40 [ 62.050574][ T6419] lock_acquire+0x1d1/0x380 [ 62.052067][ T6419] ? tcm_alloc+0x20/0x440 [ 62.053442][ T6419] ? __pfx___might_resched+0x10/0x10 [ 62.055127][ T6419] ? config_usb_cfg_link+0x57/0x3a0 [ 62.056766][ T6419] __mutex_lock+0x1a4/0x1bd0 [ 62.058224][ T6419] ? tcm_alloc+0x20/0x440 [ 62.059598][ T6419] ? tcm_alloc+0x20/0x440 [ 62.060965][ T6419] ? __mutex_lock+0x26c/0x1bd0 [ 62.062509][ T6419] ? config_usb_cfg_link+0x57/0x3a0 [ 62.064192][ T6419] ? __pfx___mutex_lock+0x10/0x10 [ 62.065805][ T6419] ? __lock_acquire+0x5c0/0x1f40 [ 62.067370][ T6419] ? tcm_alloc+0x20/0x440 [ 62.068747][ T6419] tcm_alloc+0x20/0x440 [ 62.070084][ T6419] usb_get_function+0x5e/0xd0 [ 62.071569][ T6419] config_usb_cfg_link+0x1ed/0x3a0 [ 62.073213][ T6419] ? mntput_no_expire+0xe7/0x220 [ 62.074792][ T6419] configfs_symlink+0x695/0x1340 [ 62.076362][ T6419] ? bpf_lsm_inode_permission+0x9/0x10 [ 62.078095][ T6419] ? security_inode_permission+0xbf/0x250 [ 62.079899][ T6419] ? __pfx_configfs_symlink+0x10/0x10 [ 62.081583][ T6419] vfs_symlink+0x178/0x4d0 [ 62.083018][ T6419] filename_symlinkat+0x2a6/0x560 [ 62.084658][ T6419] ? __pfx_filename_symlinkat+0x10/0x10 [ 62.086394][ T6419] ? strncpy_from_user+0x19d/0x2d0 [ 62.088010][ T6419] ? do_getname+0x191/0x390 [ 62.089452][ T6419] __ia32_sys_symlinkat+0x9b/0xe0 [ 62.091102][ T6419] __do_fast_syscall_32+0x13a/0x8b0 [ 62.092868][ T6419] do_fast_syscall_32+0x32/0x70 [ 62.094414][ T6419] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 62.096356][ T6419] RIP: 0023:0xf7f67fec [ 62.097637][ T6419] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 62.099687][ T6419] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 62.102308][ T6419] RAX: ffffffffffffffda RBX: 00000000800005c0 RCX: 00000000ffffff9c [ 62.104798][ T6419] RDX: 0000000080000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.107238][ T6419] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 62.109674][ T6419] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 62.112129][ T6419] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 62.114567][ T6419] [ 62.116751][ T35] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 62.118416][ T2308] dvb-usb: DiBcom TFE7790P reference design successfully deinitialized and disconnected. [ 62.131566][ C1] sr 2:0:0:0: [sr0] tag#1 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 62.131590][ C1] sr 2:0:0:0: [sr0] tag#1 CDB: Verify(16) 8f 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 [ 62.455159][ T2308] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 62.625356][ T2308] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 62.625891][ T2308] usb 5-1: Dual-Role OTG device on HNP port [ 62.626091][ T2308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.630345][ T5818] Using the BOT protocol [ 62.634749][ T5818] Using the UAS protocol [ 62.638868][ T2308] scsi host6: uas [ 62.646731][ T220] scsi 6:0:0:0: Direct-Access LIO-ORG RAMDISK-MCP 4.0 PQ: 0 ANSI: 6 [ 62.650522][ T220] sd 6:0:0:0: Attached scsi generic sg2 type 0 [ 62.654111][ T174] sd 6:0:0:0: [sdb] 512 512-byte logical blocks: (262 kB/256 KiB) [ 62.654940][ T174] sd 6:0:0:0: [sdb] Write Protect is off [ 62.654955][ T174] sd 6:0:0:0: [sdb] Mode Sense: 43 00 00 08 [ 62.657480][ T174] sd 6:0:0:0: [sdb] Write cache: disabled, read cache: enabled, doesn't support DPO or FUA [ 62.720252][ T174] sd 6:0:0:0: [sdb] Attached SCSI disk [ 63.120644][ T35] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 63.121167][ T35] usb 8-1: USB disconnect, device number 3 [ 70.916770][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.916804][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.917217][ T3374] cfg80211: failed to load regulatory.db