last executing test programs: 1m44.533539258s ago: executing program 1 (id=2): syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x572, 0xcafe, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200, 0x1}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x1}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0x1}}]}}]}}]}}, 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/drivers/cxacru/5-1:1.0/downstream_rate\x00', 0x0, 0x0) read(r0, &(0x7f0000000400), 0x100) 1m43.749229948s ago: executing program 2 (id=3): unshare(0x30000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./img0\x00', 0x42, 0x1ff) ftruncate(r0, 0x100000) write(r0, &(0x7f0000001000)="851903200c000000b1b01ee4", 0xc) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='/dev/loop0,4096\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='mtd1\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000800)='jffs2\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt/file0\x00', 0x42, 0x1ff) write(r3, &(0x7f0000000a00)="789c77df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7", 0x1000) write(r3, &(0x7f0000000a00)="789c77df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7", 0x1000) write(r3, &(0x7f0000000a00)="789c77df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7df7", 0x1000) 1m42.44174299s ago: executing program 2 (id=8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@code={0xa, 0x13, {"ebfe"}}], 0x13}) r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=[@code={0xa, 0x13, {"ebfe"}}], 0x13}) ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0x186a0) ioctl$KVM_SET_TSC_KHZ_cpu(r4, 0xaea2, 0x186a0) ioctl$KVM_CAP_XEN_HVM(r1, 0x4068aea3, &(0x7f0000000100)) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000200)={0x0, 0x1000}) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 1m42.265798774s ago: executing program 4 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./config\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/ports/1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='1\n\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='tcp\n\x00', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000390)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r2, &(0x7f00000003a0)='4420\n\x00', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003b0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='127.0.0.1\n\x00', 0xa) close(r3) symlinkat(&(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write(r4, &(0x7f0000000440)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testsubsys\x00', 0x3d) 1m41.62978648s ago: executing program 4 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000200), 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/ehci-platform/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='pcspkr\x00', 0x7) close(r1) 1m41.276587109s ago: executing program 4 (id=13): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf00e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000500)="0100"/64) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/hwmon/hwmon0/temp1_input\x00', 0x0, 0x0) read(r1, &(0x7f0000000400)=""/100, 0x64) 1m41.025017095s ago: executing program 2 (id=14): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000080)={0x1}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x16, 0x2) syz_usb_disconnect(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000200)={0x2, 0x3, 0x0, 0x0, 0x0, 0x3e8, &(0x7f0000000300)}) 1m40.804466711s ago: executing program 1 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='core\n', 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/power/state\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='mem\n', 0x4) 1m39.024527405s ago: executing program 4 (id=18): r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/SourceSink.0/pattern\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='1\x00', 0x2) 1m38.934452397s ago: executing program 4 (id=19): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="b7000000020000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x1, 0x25, 0x0, @void}, 0x30) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r0, 0x2, 0x25, 0x0, @void}, 0x30) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x3, 0x25, 0x0, @void}, 0x30) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r0, 0x4, 0x25, 0x0, @void}, 0x30) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r0, 0x5, 0x25, 0x0, @void}, 0x30) 1m38.82662236s ago: executing program 4 (id=20): syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='0\n\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/power/pm_test\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='devices\n\x00', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/state\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='disk\n\x00', 0x5) close(r2) 1m25.879777362s ago: executing program 32 (id=14): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000080)={0x1}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x16, 0x2) syz_usb_disconnect(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000200)={0x2, 0x3, 0x0, 0x0, 0x0, 0x3e8, &(0x7f0000000300)}) 1m25.443275673s ago: executing program 33 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='core\n', 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/power/state\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='mem\n', 0x4) 1m23.747463055s ago: executing program 34 (id=20): syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='0\n\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/power/pm_test\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='devices\n\x00', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/state\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='disk\n\x00', 0x5) close(r2) 1m17.774669344s ago: executing program 0 (id=81): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/drivers_probe\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='LNXSYSTM:00\x00', 0xc) 1m17.468567571s ago: executing program 0 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk_0/alua\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core/rd_mcp_0/ramdisk_0/alua/tg_pt_gps\x00', 0x1ff) 1m17.12418924s ago: executing program 0 (id=83): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/serial8250/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='serial8250\x00', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/devices/serial8250/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='bdc\x00', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/bdc/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='serial8250\x00', 0xb) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='snd_aloop.0\x00', 0xc) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/devices/snd_aloop.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='bdc\x00', 0x4) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/platform/drivers/bdc/bind\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='snd_aloop.0\x00', 0xc) close(r5) 1m16.455803356s ago: executing program 0 (id=86): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/file_1\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/file_3\x00', 0x42, 0x1ff) close(r1) close(0xffffffffffffffff) unlinkat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file_4\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/filler_1\x00', 0x42, 0x1ff) write(r2, 0x0, 0x0) write(r2, &(0x7f00000003c0), 0x0) write(r2, 0x0, 0x0) write(r2, &(0x7f0000000440)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbcc", 0x3d) close(r2) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write(r3, 0x0, 0x0) write(r3, &(0x7f0000000500)="0011223344556677", 0x8) write(r3, 0x0, 0x0) write(r3, &(0x7f0000000580), 0x0) close(r3) r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write(r4, 0x0, 0x0) write(r4, &(0x7f0000000640), 0x0) write(r4, &(0x7f0000000680)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff001122334455", 0x36) write(r4, &(0x7f00000006c0)="0011223344556677", 0x8) close(r4) write(0xffffffffffffffff, &(0x7f0000000740)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899", 0x3a) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) 1m15.838508392s ago: executing program 0 (id=87): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='ehci-platform', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/ehci-platform/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='pcspkr\x00', 0x7) close(r1) 1m15.451487092s ago: executing program 0 (id=89): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/1/nodeid\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)="020000007f00000100"/130, 0x80) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write(r3, &(0x7f0000000500)="0600000000000000010000000401000000000000000000006c733100"/124, 0x78) r4 = socket$inet(0x2, 0x1, 0x6) connect(r4, &(0x7f0000000600)=@in={0x2, 0x5248, @loopback}, 0x10) 1m7.238706826s ago: executing program 7 (id=113): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) nanosleep(&(0x7f0000000300)={0x3}, 0x0) 1m6.710670159s ago: executing program 6 (id=117): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040fd0b0b000001010203010902200001010080320904000002ff0000000705010200020007058202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x3}, 0x0) 1m6.630696471s ago: executing program 5 (id=118): r0 = syz_usb_connect(0x3, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b081000010000000109028d0001010080fa0904000005ffffff000705030240000007058402400000070588058003010705070580030107058a030800010904000105ffffff000705030240000007058402400000070588058003010705070580030107058a030800010904000805ffffff000705030240000007058402400000070588058003010705070580030107058a03080001"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/drivers/ttusb-dec/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)='1-1:1.0\x00', 0x8) close(r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_ep_read(r0, 0x3, 0x40, &(0x7f0000000600)=""/64) syz_usb_ep_write(r0, 0x84, 0x40, &(0x7f0000000700)="aa00080c0000000100070009017700"/64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/usb/drivers/ttusb-dec/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000840)='1-1:1.0\x00', 0x8) 1m4.884122835s ago: executing program 5 (id=121): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='ehci-platform', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000400)='pcspkr\x00', 0x7) close(r1) 1m4.799261237s ago: executing program 3 (id=122): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core/rd_mcp_0/ramdisk_0/alua/tg_pt_gps\x00', 0x1ff) 1m4.590604362s ago: executing program 5 (id=123): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001220100090581030800000000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x0, 'p'}]}}, 0x0}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x15, 0x2) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)=@usbdevfs_disconnect={0x0, 0x5517}) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect={0x0, 0x5518}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1m4.578970532s ago: executing program 3 (id=124): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/SourceSink.0/pattern\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='1\x00', 0x2) 1m4.365741008s ago: executing program 3 (id=125): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x10}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x10}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x2}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x60) syz_usb_ep_read(r0, 0x2, 0x8, &(0x7f0000000500)) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000400)={0x2, 0x100}) 1m4.050713135s ago: executing program 7 (id=126): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000440)="97fa", 0x9, 0x2, 0xb57, 0x8000, 0x43, 0x0, 0x7, 'syz0\x00'}) 1m3.883911s ago: executing program 7 (id=127): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) getpid() mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mysys/power/state\x00', 0x1, 0x0) pwrite64(r0, &(0x7f0000000500)='freeze\n\x00', 0x6, 0x0) 1m3.608208167s ago: executing program 6 (id=128): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:00.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./mysys/bus/pci/devices/0000:00:01.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./mysys/bus/pci/devices/0000:00:02.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mysys/bus/pci/devices/0000:00:03.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./mysys/bus/pci/devices/0000:00:04.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./mysys/bus/pci/devices/0000:00:05.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./mysys/bus/pci/devices/0000:00:06.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./mysys/bus/pci/devices/0000:00:07.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./mysys/bus/pci/devices/0000:00:08.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000c00)='./mysys/bus/pci/devices/0000:00:09.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000d00)='./mysys/bus/pci/devices/0000:00:10.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e00)='./mysys/bus/pci/devices/0000:00:11.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000f00)='./mysys/bus/pci/devices/0000:00:12.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001000)='./mysys/bus/pci/devices/0000:00:13.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001100)='./mysys/bus/pci/devices/0000:00:14.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001200)='./mysys/bus/pci/devices/0000:00:15.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001300)='./mysys/bus/pci/devices/0000:00:16.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001400)='./mysys/bus/pci/devices/0000:00:17.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001500)='./mysys/bus/pci/devices/0000:00:18.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001600)='./mysys/bus/pci/devices/0000:00:19.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./mysys/bus/pci/devices/0000:00:1a.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001800)='./mysys/bus/pci/devices/0000:00:1b.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001900)='./mysys/bus/pci/devices/0000:00:1c.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001a00)='./mysys/bus/pci/devices/0000:00:1d.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001b00)='./mysys/bus/pci/devices/0000:00:1e.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001c00)='./mysys/bus/pci/devices/0000:00:1f.0\x00', 0x0, 0x0) 1m2.194623711s ago: executing program 7 (id=129): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f00000001c0)='./file1\x00', 0x300000a, &(0x7f0000000540), 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x40089419, &(0x7f0000000100)=0x1) pipe2(&(0x7f0000000500)={0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40389426, &(0x7f0000000080)={{r1}, 0x0, 0x0}) 1m1.87831702s ago: executing program 6 (id=130): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x10000, &(0x7f0000000000/0x10000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x80000001, 0x0, 0x0, 0x20, 0x0, 0x500}) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r3, 0x3, 0x11, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m1.85730625s ago: executing program 5 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, &(0x7f0000000100)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0\x00', 0x1) write(r0, &(0x7f0000000180)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/devices/system/cpu/smt/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='off\x00', 0x3) write(r1, &(0x7f0000000200)='on\x00', 0x2) 1m1.625642906s ago: executing program 5 (id=132): syz_usb_connect(0x1, 0x2b, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x5e1, 0x408, 0x0, 0x1, 0x2, 0x0, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x82, 0x1, 0x200, 0x1}}]}}]}}]}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1m1.424902171s ago: executing program 6 (id=133): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='ehci-platform', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/ehci-platform/bind\x00', 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) 1m1.204186816s ago: executing program 3 (id=134): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core/rd_mcp_0/ramdisk_0/alua/tg_pt_gps\x00', 0x1ff) 1m1.203892696s ago: executing program 6 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/SourceSink.0/pattern\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='1\x00', 0x2) 1m1.203666207s ago: executing program 7 (id=136): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g_syz_unique\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_syz_unique/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g_syz_unique/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='0x0104\x00', 0x6) close(r1) mkdir(&(0x7f0000000900)='./config/usb_gadget/g_syz_unique/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_syz_unique/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00)='Foo\x00', 0x3) close(r2) mkdir(&(0x7f0000000c00)='./config/usb_gadget/g_syz_unique/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./config/usb_gadget/g_syz_unique/configs/c.1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g_syz_unique/configs/c.1/strings/0x409/configuration\x00', 0x1, 0x0) write(r3, &(0x7f0000000f00)='Bar\x00', 0x3) close(r3) mkdir(&(0x7f0000001000)='./config/usb_gadget/g_syz_unique/functions/acm.usb0\x00', 0x1ff) symlink(&(0x7f0000001100)='./config/usb_gadget/g_syz_unique/functions/acm.usb0\x00', &(0x7f0000001200)='./config/usb_gadget/g_syz_unique/configs/c.1/acm.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g_syz_unique/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000001500)='dummy_udc.0\x00', 0xb) close(r4) 1m0.948364783s ago: executing program 3 (id=137): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0x6, 0x2, &(0x7f0000000440)="97fa", 0x9, 0x2, 0xb57, 0x8000, 0x43, 0x0, 0x7, 'syz0\x00'}) 1m0.865894075s ago: executing program 6 (id=138): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x242, 0x1a0) pwrite64(r0, &(0x7f0000000080)="0000000000000000010000000000000001000000533153555350454e4400533153555350454e4400", 0x28, 0xfd8) pwrite64(r0, &(0x7f00000000c0)='\x00', 0x1, 0x1fff) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/power/resume\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='7:0', 0x3) (async) 1m0.6503268s ago: executing program 3 (id=139): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) 55.684373824s ago: executing program 35 (id=89): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/1/nodeid\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)="020000007f00000100"/130, 0x80) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write(r3, &(0x7f0000000500)="0600000000000000010000000401000000000000000000006c733100"/124, 0x78) r4 = socket$inet(0x2, 0x1, 0x6) connect(r4, &(0x7f0000000600)=@in={0x2, 0x5248, @loopback}, 0x10) 54.590909321s ago: executing program 7 (id=141): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000600)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000f00)={0x34, &(0x7f0000000cc0)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001240)={0x34, &(0x7f0000001080)={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001700)={0x34, &(0x7f0000001500)={0x20, 0x18, 0x1, ')'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) syz_usb_disconnect(r0) 53.883669018s ago: executing program 5 (id=142): mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/devices\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000600), 0x1000) 41.565663405s ago: executing program 36 (id=138): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x242, 0x1a0) pwrite64(r0, &(0x7f0000000080)="0000000000000000010000000000000001000000533153555350454e4400533153555350454e4400", 0x28, 0xfd8) pwrite64(r0, &(0x7f00000000c0)='\x00', 0x1, 0x1fff) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/power/resume\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='7:0', 0x3) (async) 13.865754534s ago: executing program 37 (id=139): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) 7.430362055s ago: executing program 38 (id=142): mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/devices\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000600), 0x1000) 0s ago: executing program 39 (id=141): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000600)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000f00)={0x34, &(0x7f0000000cc0)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001240)={0x34, &(0x7f0000001080)={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001700)={0x34, &(0x7f0000001500)={0x20, 0x18, 0x1, ')'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) syz_usb_disconnect(r0) kernel console output (not intermixed with test programs): 690562][ T4666] CPU: 0 PID: 4666 Comm: syz.3.74 Tainted: G S syzkaller #0 [ 109.699328][ T4666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.709455][ T4666] Call Trace: [ 109.712786][ T4666] [ 109.715763][ T4666] dump_stack_lvl+0x188/0x24e [ 109.720631][ T4666] ? show_regs_print_info+0x12/0x12 [ 109.722544][ T4671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.725876][ T4666] ? load_image+0x410/0x410 [ 109.738197][ T4666] ? do_futex+0x2e2/0x320 [ 109.742592][ T4666] ? _copy_from_user+0x10b/0x170 [ 109.747840][ T4666] ? __ia32_sys_get_robust_list+0x100/0x100 [ 109.753800][ T4666] should_fail_ex+0x390/0x4c0 [ 109.758798][ T4666] __se_sys_futex+0x18b/0x410 [ 109.761502][ T4290] Bluetooth: hci5: command 0x041b tx timeout [ 109.763522][ T4666] ? __x64_sys_futex+0xf0/0xf0 [ 109.774624][ T4666] ? __x64_sys_futex+0x1d/0xf0 [ 109.779447][ T4666] do_syscall_64+0x4c/0xa0 [ 109.783925][ T4666] ? clear_bhb_loop+0x60/0xb0 [ 109.788658][ T4666] ? clear_bhb_loop+0x60/0xb0 [ 109.793425][ T4666] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.799374][ T4666] RIP: 0033:0x7f319ef9e0d9 [ 109.803856][ T4666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.823695][ T4666] RSP: 002b:00007fff1fc4a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 109.832247][ T4666] RAX: ffffffffffffffda RBX: 000000000001abfb RCX: 00007f319ef9e0d9 [ 109.840388][ T4666] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f319f225fac [ 109.848438][ T4666] RBP: 0000000000000032 R08: 0020f2cb62169286 R09: 0000000000000000 [ 109.856465][ T4666] R10: 00007fff1fc4a130 R11: 0000000000000246 R12: 00007fff1fc4a150 [ 109.864497][ T4666] R13: 00007f319f225fac R14: 000000000001ac2d R15: 00007fff1fc4a130 [ 109.872720][ T4666] [ 109.920016][ T4290] Bluetooth: hci7: command 0x0409 tx timeout [ 109.981694][ T4591] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 110.022373][ T4591] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 110.050213][ T4591] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 110.078435][ T4639] chnl_net:caif_netlink_parms(): no params data found [ 110.088897][ T4666] FAULT_INJECTION: forcing a failure. [ 110.088897][ T4666] name fail_futex, interval 1, probability 0, space 0, times 0 [ 110.115631][ T4666] CPU: 0 PID: 4666 Comm: syz.3.74 Tainted: G S syzkaller #0 [ 110.124404][ T4666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.134574][ T4666] Call Trace: [ 110.137890][ T4666] [ 110.140863][ T4666] dump_stack_lvl+0x188/0x24e [ 110.145598][ T4666] ? lock_chain_count+0x20/0x20 [ 110.150509][ T4666] ? show_regs_print_info+0x12/0x12 [ 110.155773][ T4666] ? load_image+0x410/0x410 [ 110.160349][ T4666] ? futex_q_unlock+0x1f/0x30 [ 110.165088][ T4666] should_fail_ex+0x390/0x4c0 [ 110.169831][ T4666] get_futex_key+0x1b1/0x1000 [ 110.174574][ T4666] ? futex_setup_timer+0xc0/0xc0 [ 110.179591][ T4666] futex_wake+0x123/0x4f0 [ 110.183970][ T4666] ? futex_wake_mark+0x150/0x150 [ 110.188959][ T4666] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 110.195258][ T4666] ? lockdep_hardirqs_on+0x94/0x140 [ 110.200521][ T4666] do_futex+0x2e2/0x320 [ 110.204756][ T4666] ? _copy_from_user+0x10b/0x170 [ 110.209753][ T4666] ? __ia32_sys_get_robust_list+0x100/0x100 [ 110.215711][ T4666] __se_sys_futex+0x381/0x410 [ 110.220537][ T4666] ? __x64_sys_futex+0xf0/0xf0 [ 110.225530][ T4666] ? __x64_sys_futex+0x1d/0xf0 [ 110.230348][ T4666] do_syscall_64+0x4c/0xa0 [ 110.234844][ T4666] ? clear_bhb_loop+0x60/0xb0 [ 110.239661][ T4666] ? clear_bhb_loop+0x60/0xb0 [ 110.244396][ T4666] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.250515][ T4666] RIP: 0033:0x7f319ef9e0d9 [ 110.254978][ T4666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.274721][ T4666] RSP: 002b:00007fff1fc4a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 110.283375][ T4666] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f319ef9e0d9 [ 110.291571][ T4666] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f319f225fa8 [ 110.299602][ T4666] RBP: 0000000000001678 R08: 0000000000000004 R09: 0000000000000000 [ 110.307739][ T4666] R10: 00007f319f225fa0 R11: 0000000000000246 R12: 0000000000000000 [ 110.315767][ T4666] R13: 00007f319f225fac R14: 00007f319f225fa8 R15: 00007f319f225fa0 [ 110.320104][ T4290] Bluetooth: hci6: command 0x041b tx timeout [ 110.323815][ T4666] [ 110.392290][ T4591] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 110.525410][ T4290] Bluetooth: hci1: unexpected event for opcode 0x041b [ 110.537758][ T4639] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.615062][ T4639] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.630135][ T4639] device bridge_slave_0 entered promiscuous mode [ 110.710764][ T4639] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.718030][ T4639] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.733911][ T4639] device bridge_slave_1 entered promiscuous mode [ 110.775432][ T4684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.808476][ T4639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.829988][ T4684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.846665][ T4603] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 110.857857][ T4603] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 110.870083][ T4639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.894525][ T4603] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 110.908134][ T4603] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 110.938246][ T4639] team0: Port device team_slave_0 added [ 110.950473][ T4319] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 110.971942][ T4639] team0: Port device team_slave_1 added [ 111.009597][ T4591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.072646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.089870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.098599][ T4639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.106123][ T4639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.142609][ T4639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.163246][ T4591] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.173027][ T4319] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice= 1.00 [ 111.185811][ T4639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.193581][ T4639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.222011][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.249388][ T4639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.282393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.300573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.310331][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.317660][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.374194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.384177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.393786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.404967][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.412454][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.423052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.465883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.483446][ T4639] device hsr_slave_0 entered promiscuous mode [ 111.493156][ T4639] device hsr_slave_1 entered promiscuous mode [ 111.503817][ T4639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.511837][ T4639] Cannot create hsr debugfs directory [ 111.526207][ T4603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.541783][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.560518][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.573991][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.605234][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.616718][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.652040][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.662795][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.672170][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.683829][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.697505][ T4603] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.715266][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.724328][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.746728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.759398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.781046][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.788383][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.807368][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.826908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.840342][ T4290] Bluetooth: hci5: command 0x040f tx timeout [ 111.843269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.880791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.898454][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.905722][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.938558][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.999949][ T4290] Bluetooth: hci7: command 0x041b tx timeout [ 112.062128][ T4693] jffs2: notice: (4693) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 112.103034][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.132826][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.177611][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.254686][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.264257][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.288425][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.303023][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.326732][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.349291][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.363463][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.393344][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.402134][ T4290] Bluetooth: hci6: command 0x040f tx timeout [ 112.704490][ T4639] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 112.749243][ T4639] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 112.784954][ T4639] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 112.816451][ T4639] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 113.034763][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.067148][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.109822][ T4591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.152994][ T4319] peak_usb 4-1:1.0 can0: unable to request usb[type=2 value=5] err=-71 [ 113.167809][ T4639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.234849][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.257145][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.265559][ T4319] peak_usb: probe of 4-1:1.0 failed with error -71 [ 113.324349][ T4319] usb 4-1: USB disconnect, device number 7 [ 113.358949][ T4639] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.421453][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.450671][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.473274][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.480495][ T4335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.543587][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.562283][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.585498][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.604712][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.611943][ T4335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.635194][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.692277][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.742011][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.775241][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.787140][ T4716] bdc serial8250: invalid resource [ 113.803406][ T4716] bdc: probe of serial8250 failed with error -22 [ 113.827773][ T4603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.866083][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.893327][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.907531][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.921173][ T4276] Bluetooth: hci5: command 0x0419 tx timeout [ 113.945248][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.963103][ T4276] Bluetooth: hci0: unexpected event for opcode 0x041b [ 113.975205][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.034884][ T4639] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.070872][ T4639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.081609][ T4276] Bluetooth: hci7: command 0x040f tx timeout [ 114.102625][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.143071][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.171457][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.222998][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.260969][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.423019][ T27] audit: type=1800 audit(1787007107.401:2): pid=4727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.85" name="idVendor" dev="configfs" ino=36595 res=0 errno=0 [ 114.479985][ T4276] Bluetooth: hci6: command 0x0419 tx timeout [ 114.499884][ T27] audit: type=1800 audit(1787007107.401:3): pid=4727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.85" name="idProduct" dev="configfs" ino=36596 res=0 errno=0 [ 114.559457][ T4731] jffs2: notice: (4731) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 114.633058][ T27] audit: type=1800 audit(1787007107.441:4): pid=4727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.85" name="serialnumber" dev="configfs" ino=36598 res=0 errno=0 [ 114.717004][ T27] audit: type=1800 audit(1787007107.441:5): pid=4727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.85" name="manufacturer" dev="configfs" ino=36599 res=0 errno=0 [ 114.777348][ T27] audit: type=1800 audit(1787007107.441:6): pid=4727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.85" name="product" dev="configfs" ino=36600 res=0 errno=0 [ 114.847557][ T27] audit: type=1800 audit(1787007107.531:7): pid=4727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.85" name="configuration" dev="configfs" ino=36605 res=0 errno=0 [ 114.926527][ T27] audit: type=1800 audit(1787007107.561:8): pid=4727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.85" name="UDC" dev="configfs" ino=36606 res=0 errno=0 [ 115.092900][ T4742] ehci-platform pcspkr: error -ENXIO: IRQ index 0 not found [ 115.132541][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.171133][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.266704][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.302996][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.365284][ T4591] device veth0_vlan entered promiscuous mode [ 115.409158][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.450576][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.482172][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.515144][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.560074][ T4639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.560365][ T4748] dlm: Using TCP for communications [ 115.582031][ T4591] device veth1_vlan entered promiscuous mode [ 115.656683][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 115.672036][ T4748] dlm: ls1: joining the lockspace group... [ 115.691944][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.710936][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.826963][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 115.851122][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.882264][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.913432][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.923876][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.938991][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.948221][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.967242][ T4591] device veth0_macvtap entered promiscuous mode [ 115.984364][ T4603] device veth0_vlan entered promiscuous mode [ 116.000896][ T4591] device veth1_macvtap entered promiscuous mode [ 116.038731][ T4603] device veth1_vlan entered promiscuous mode [ 116.085644][ T4591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.112110][ T4591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.128786][ T4591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.152938][ T4591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.160238][ T4276] Bluetooth: hci7: command 0x0419 tx timeout [ 116.172056][ T4591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.183126][ T4353] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 116.202091][ T4591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.219918][ T4591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.246730][ T4591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.266914][ T4591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.282650][ T4591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.307092][ T4591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.321221][ T4591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.334203][ T4591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.345411][ T4591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.361686][ T4591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.371942][ T4591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.382690][ T4591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.392829][ T4591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.403527][ T4591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.413945][ T4591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.425586][ T4591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.436483][ T4353] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.450690][ T4353] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 1.00 [ 116.460127][ T4353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.468882][ T4591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.497200][ T4353] sisusb 4-1:1.0: Invalid USB2VGA device [ 116.503201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.511857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.520380][ T4353] sisusb: probe of 4-1:1.0 failed with error -22 [ 116.527583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.548869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 116.557668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.567681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.577266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.587254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.613021][ T4591] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.625956][ T4591] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.635484][ T4591] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.657710][ T4591] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.685697][ T4603] device veth0_macvtap entered promiscuous mode [ 116.707317][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.726614][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.753027][ T4603] device veth1_macvtap entered promiscuous mode [ 116.776575][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.791309][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.857396][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.871101][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.886606][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.907900][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.922060][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.937480][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.947664][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.965061][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.975191][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.986234][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.004391][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.017054][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.029492][ T4603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.056037][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.065665][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.083022][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.094615][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.105512][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.116140][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.126870][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.137582][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.148176][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.161389][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.172075][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.182757][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.194701][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.205737][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.223885][ T4603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.253495][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.268893][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.281761][ T4603] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.291716][ T4603] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.302030][ T4603] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.313420][ T4603] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.335448][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.350167][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.390952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.401305][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.413069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.437450][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.449100][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.482228][ T4639] device veth0_vlan entered promiscuous mode [ 117.491273][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.500674][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.516538][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.538576][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.557378][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.595501][ T4639] device veth1_vlan entered promiscuous mode [ 117.717794][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.739406][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.767361][ T4639] device veth0_macvtap entered promiscuous mode [ 117.786226][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.805111][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.818623][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.832527][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.876606][ T4639] device veth1_macvtap entered promiscuous mode [ 117.972690][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.989041][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.991284][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.011550][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.034607][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.056317][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.069606][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.097822][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.117361][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.141101][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.168047][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.183148][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.199859][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.219120][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.239074][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.248956][ T4775] 0x060100 [ 118.254885][ T4775] [ 118.256081][ T4775] 0x000000 [ 118.263469][ T4775] 0x020000 [ 118.265266][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.273520][ T4775] 0x030000 [ 118.283030][ T4775] 0x00ff00 [ 118.295079][ T4639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.311381][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.324998][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 118.344880][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.366442][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.391470][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.411812][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.421978][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.433004][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.443511][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.458609][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.471333][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.482556][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.493624][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.504627][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.515116][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.527105][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.537553][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.548712][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.600883][ T4639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.634334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.649998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.676045][ T4639] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.711455][ T4320] usb 4-1: USB disconnect, device number 8 [ 118.724727][ T4639] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.749963][ T4639] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.758920][ T4639] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.952547][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.978278][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.081190][ T4788] jffs2: notice: (4788) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 119.105804][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.146573][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.156768][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.184503][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.258423][ T4791] svc: failed to register lockdv1 RPC service (errno 111). [ 119.290257][ T4791] lockd_up: makesock failed, error=-111 [ 120.109925][ T4320] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 120.301644][ T4320] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 120.319791][ T4320] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 120.344387][ T4320] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 120.364023][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.384392][ T4320] usb 4-1: Product: syz [ 120.388813][ T4320] usb 4-1: Manufacturer: syz [ 120.400250][ T4317] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 120.420987][ T4320] usb 4-1: SerialNumber: syz [ 120.599988][ T4352] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 120.603355][ T4802] loop7: detected capacity change from 0 to 32768 [ 120.633770][ T4317] usb 6-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00 [ 120.658354][ T4802] (syz.7.62,4802,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 120.669421][ T4317] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.703883][ T4317] usb 6-1: Product: syz [ 120.709854][ T4802] (syz.7.62,4802,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 120.729795][ T4317] usb 6-1: Manufacturer: syz [ 120.737962][ T4317] usb 6-1: SerialNumber: syz [ 120.781965][ T4317] whiteheat 6-1:1.0: Connect Tech - WhiteHEAT converter detected [ 120.809918][ T4352] usb 7-1: Using ep0 maxpacket: 16 [ 120.817797][ T4352] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.858700][ T4352] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 120.914301][ T4352] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 120.939816][ T4352] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.971707][ T4352] usb 7-1: config 0 descriptor?? [ 121.269897][ T1193] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 121.287075][ T4317] usb 6-1: Connect Tech - WhiteHEAT: Couldn't send command [-71] [ 121.299849][ T4317] usb 6-1: Connect Tech - WhiteHEAT: Unable to retrieve firmware version, try replugging [ 121.330050][ T4317] usb 6-1: Connect Tech - WhiteHEAT: If the firmware is not running (status led not blinking) [ 121.351233][ T4317] usb 6-1: Connect Tech - WhiteHEAT: please contact support@connecttech.com [ 121.434668][ T4352] HID 045e:07da: Invalid code 65791 type 1 [ 121.442736][ T4317] usb 6-1: USB disconnect, device number 2 [ 121.472731][ T1193] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.507263][ T1193] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 121.522799][ T4352] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0001/input/input7 [ 121.545864][ T1193] usb 8-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 121.596367][ T1193] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.610643][ T4352] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 122.228810][ T127] usb 7-1: USB disconnect, device number 2 [ 122.662030][ T4853] jffs2: notice: (4853) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 122.695784][ T4320] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 122.732120][ T4320] usb 4-1: USB disconnect, device number 9 [ 122.844869][ T1193] speedtch 8-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 122.863053][ T127] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 122.879037][ T1193] speedtch 8-1:1.0: usbatm_usb_probe: bind failed: -71! [ 122.887605][ T1193] speedtch: probe of 8-1:1.0 failed with error -71 [ 122.907915][ T1193] speedtch 8-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 122.920319][ T1193] speedtch 8-1:1.1: usbatm_usb_probe: bind failed: -71! [ 122.927640][ T1193] speedtch: probe of 8-1:1.1 failed with error -71 [ 122.954911][ T1193] usb 8-1: USB disconnect, device number 2 [ 123.054473][ T127] usb 7-1: Using ep0 maxpacket: 16 [ 123.072043][ T127] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.097346][ T127] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 123.127293][ T127] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 123.145902][ T127] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.184176][ T127] usb 7-1: config 0 descriptor?? [ 123.401250][ T127] usbhid 7-1:0.0: can't add hid device: -71 [ 123.424271][ T127] usbhid: probe of 7-1:0.0 failed with error -71 [ 123.486374][ T127] usb 7-1: USB disconnect, device number 3 [ 123.889861][ T1193] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 124.109952][ T1193] usb 8-1: Using ep0 maxpacket: 16 [ 124.115407][ T127] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 124.125864][ T1193] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.179537][ T1193] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 124.209185][ T1193] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 124.233609][ T1193] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.270463][ T1193] usb 8-1: config 0 descriptor?? [ 124.349831][ T127] usb 4-1: Using ep0 maxpacket: 8 [ 124.361834][ T127] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 124.380461][ T127] usb 4-1: config 0 has no interface number 0 [ 124.386967][ T127] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 124.397614][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.418654][ T127] usb 4-1: config 0 descriptor?? [ 124.424159][ T4320] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 124.563834][ T127] viperboard 4-1:0.143: version 0.00 found at bus 004 address 010 [ 124.600086][ T4352] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 124.615587][ T127] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 124.631923][ T127] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 124.651026][ T4320] usb 7-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice= 1.00 [ 124.689159][ T4320] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.717912][ T127] usb 4-1: USB disconnect, device number 10 [ 124.735086][ T4320] usb 7-1: Product: syz [ 124.747493][ T4320] usb 7-1: Manufacturer: syz [ 124.754710][ T4320] usb 7-1: SerialNumber: syz [ 124.812491][ T4352] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 124.832470][ T4352] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 124.843628][ T4352] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 124.853844][ T4352] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x84 has invalid maxpacket 64 [ 124.864020][ T4352] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 64 [ 124.874147][ T4352] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x84 has invalid maxpacket 64 [ 124.885038][ T4352] usb 6-1: config 1 interface 0 has no altsetting 2 [ 124.892176][ T4352] usb 6-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 124.901570][ T4352] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.926253][ T4892] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 124.938460][ T4892] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 124.965633][ T4352] ttusb_dec_send_command: command bulk message failed: error -71 [ 124.974650][ T4352] ttusb-dec: probe of 6-1:1.0 failed with error -71 [ 125.443046][ T4383] usb 6-1: USB disconnect, device number 3 [ 125.664518][ T4912] jffs2: notice: (4912) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 126.493451][ T4352] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 126.621916][ T1193] usbhid 8-1:0.0: can't add hid device: -71 [ 126.628024][ T1193] usbhid: probe of 8-1:0.0 failed with error -71 [ 126.642662][ T1193] usb 8-1: USB disconnect, device number 3 [ 126.688048][ T4352] usb 6-1: Using ep0 maxpacket: 16 [ 126.693438][ T4353] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 126.705140][ T4352] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.738576][ T4352] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 126.752155][ T4352] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 126.761702][ T4352] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.791110][ T4352] usb 6-1: config 0 descriptor?? [ 126.923603][ T4353] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 126.933647][ T4353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.954772][ T4353] usb 4-1: config 0 descriptor?? [ 127.093855][ T4320] kvaser_usb 7-1:1.0: Cannot get software info, error -71 [ 127.103694][ T4320] kvaser_usb: probe of 7-1:1.0 failed with error -71 [ 127.119033][ T4320] usb 7-1: USB disconnect, device number 4 [ 127.309921][ T1193] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 127.392311][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.406539][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.414255][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.422263][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.429974][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.437879][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.445850][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.454113][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.461814][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.469539][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.477324][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.485282][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.493038][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.503524][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.511261][ T1193] usb 8-1: Using ep0 maxpacket: 8 [ 127.519144][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.531589][ T1193] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 127.540439][ T1193] usb 8-1: config 0 has no interface number 0 [ 127.546779][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.554546][ T1193] usb 8-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 127.563898][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.571569][ T1193] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.580124][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.588893][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.598698][ T1193] usb 8-1: config 0 descriptor?? [ 127.604736][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.612445][ T4320] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 127.620641][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.631731][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.640177][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.648398][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.656731][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.664675][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.672619][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.680390][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.688285][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.696004][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.704513][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.712974][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.721621][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.729307][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.741118][ T1193] viperboard 8-1:0.143: version 0.00 found at bus 008 address 004 [ 127.749119][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.764318][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.774771][ T1193] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 127.783903][ T1193] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 127.792738][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.803914][ T4353] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.827924][ T4320] usb 7-1: Using ep0 maxpacket: 8 [ 127.837735][ T4320] usb 7-1: config 0 has an invalid interface number: 143 but max is 0 [ 127.856600][ T4353] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 127.874761][ T4932] PM: suspend entry (s2idle) [ 127.885655][ T4320] usb 7-1: config 0 has no interface number 0 [ 127.890373][ T4932] PM: Unsupported test mode for suspend to idle, please choose none/freezer/devices/platform. [ 127.914497][ T4320] usb 7-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 127.948002][ T4932] PM: suspend exit [ 127.953920][ T4320] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.970520][ T4353] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 127.998565][ T4320] usb 7-1: config 0 descriptor?? [ 128.015248][ T1193] usb 8-1: USB disconnect, device number 4 [ 128.110251][ T4320] viperboard 7-1:0.143: version 0.00 found at bus 007 address 005 [ 128.135482][ T4320] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 128.154545][ T4320] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 128.252971][ T4320] usb 7-1: USB disconnect, device number 5 [ 128.285765][ T4352] usbhid 6-1:0.0: can't add hid device: -71 [ 128.301870][ T4352] usbhid: probe of 6-1:0.0 failed with error -71 [ 128.328469][ T4352] usb 6-1: USB disconnect, device number 4 [ 128.984369][ T4940] loop7: detected capacity change from 0 to 32768 [ 129.017131][ T4940] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.129 (4940) [ 129.069816][ T4940] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 129.089958][ T4940] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 129.104745][ T4940] BTRFS info (device loop7): using free space tree [ 129.156404][ T4942] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 129.323584][ T4940] BTRFS info (device loop7): enabling ssd optimizations [ 129.495863][ T4352] usb 4-1: USB disconnect, device number 11 [ 129.531330][ T4383] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 129.598779][ T4639] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 129.729949][ T4383] usb 6-1: Invalid ep0 maxpacket: 64 [ 129.889868][ T4383] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 130.005576][ T4983] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input8 [ 130.089832][ T4383] usb 6-1: Invalid ep0 maxpacket: 64 [ 130.100144][ T4383] usb usb6-port1: attempt power cycle [ 130.214450][ T4986] UDC core: g_syz_unique: couldn't find an available UDC or it's busy [ 130.269002][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 130.603907][ T4383] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 130.739495][ T4383] usb 6-1: Invalid ep0 maxpacket: 64 [ 131.073018][ T4383] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 131.311151][ T4383] usb 6-1: Invalid ep0 maxpacket: 64 [ 131.350734][ T4383] usb usb6-port1: unable to enumerate USB device [ 132.983482][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.010390][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.402533][ T4353] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 142.774389][ T4353] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 142.880862][ T4353] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.889424][ T4353] usb 8-1: Product: syz [ 143.041263][ T4353] usb 8-1: Manufacturer: syz [ 143.046127][ T4353] usb 8-1: SerialNumber: syz [ 146.732273][ T4353] usb 8-1: can't set config #1, error -71 [ 147.210654][ T4353] usb 8-1: USB disconnect, device number 5 [ 153.540329][ T4402] cxacru 2-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 153.620726][ T4420] Freezing user space processes [ 173.740235][ T4420] Freezing of tasks failed after 20.114 seconds (7 tasks refusing to freeze, wq_busy=0): [ 173.760166][ T4420] task:syz-executor state:S stack:22064 pid:4272 ppid:1 flags:0x00004002 [ 173.780395][ T4420] Call Trace: [ 173.784073][ T4420] [ 173.787668][ T4420] __schedule+0x107f/0x4030 [ 173.793375][ T4420] ? do_wait+0x6cb/0xb80 [ 173.798183][ T4420] ? __sched_text_start+0x8/0x8 [ 173.803820][ T4420] ? __lock_acquire+0x7c40/0x7c40 [ 173.809237][ T4420] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 173.816046][ T4420] ? _raw_spin_unlock+0x40/0x40 [ 173.821788][ T4420] schedule+0xb9/0x180 [ 173.826173][ T4420] do_wait+0x7a5/0xb80 [ 173.831320][ T4420] kernel_wait4+0x22b/0x2b0 [ 173.836628][ T4420] ? __ia32_sys_waitid+0xc0/0xc0 [ 173.842535][ T4420] ? kernel_waitid+0x3d0/0x3d0 [ 173.847946][ T4420] ? zap_pid_ns_processes+0x13a/0x690 [ 173.854092][ T4420] zap_pid_ns_processes+0x3a0/0x690 [ 173.860142][ T4420] ? zap_pid_ns_processes+0x13a/0x690 [ 173.865963][ T4420] ? lock_chain_count+0x20/0x20 [ 173.871638][ T4420] ? put_pid_ns+0x130/0x130 [ 173.876594][ T4420] ? _raw_write_unlock_irq+0x1f/0x40 [ 173.882709][ T4420] ? _raw_write_unlock_irq+0x1f/0x40 [ 173.888232][ T4420] ? lockdep_hardirqs_on+0x94/0x140 [ 173.894265][ T4420] do_exit+0x20a2/0x2570 [ 173.898868][ T4420] ? trace_event_buffer_commit+0x254/0x780 [ 173.905962][ T4420] ? put_task_struct+0x80/0x80 [ 173.911635][ T4420] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 173.918153][ T4420] ? lock_chain_count+0x20/0x20 [ 173.923827][ T4420] ? _raw_spin_lock_irq+0xb7/0xf0 [ 173.929298][ T4420] do_group_exit+0x229/0x2e0 [ 173.934777][ T4420] ? lockdep_hardirqs_on+0x94/0x140 [ 173.940805][ T4420] get_signal+0x1259/0x1340 [ 173.946225][ T4420] arch_do_signal_or_restart+0xc4/0x1310 [ 173.952853][ T4420] ? trace_buffer_unlock_commit_regs+0x148/0x600 [ 173.960053][ T4420] ? trace_event_buffer_commit+0x254/0x780 [ 173.966463][ T4420] ? get_sigframe_size+0x10/0x10 [ 173.972406][ T4420] ? trace_event_raw_event_preemptirq_template+0x139/0x1f0 [ 173.981056][ T4420] ? exit_to_user_mode_loop+0x3b/0x110 [ 173.987148][ T4420] exit_to_user_mode_loop+0x70/0x110 [ 173.993288][ T4420] exit_to_user_mode_prepare+0xee/0x180 [ 173.999398][ T4420] syscall_exit_to_user_mode+0x16/0x40 [ 174.005714][ T4420] do_syscall_64+0x58/0xa0 [ 174.010749][ T4420] ? clear_bhb_loop+0x60/0xb0 [ 174.015859][ T4420] ? clear_bhb_loop+0x60/0xb0 [ 174.021601][ T4420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.028083][ T4420] RIP: 0033:0x7fb90055e90e [ 174.033338][ T4420] RSP: 002b:00007fff32b41a68 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 174.042821][ T4420] RAX: fffffffffffffe00 RBX: 00005555595e0500 RCX: 00007fb90055e90e [ 174.051781][ T4420] RDX: 0000000040000000 RSI: 00007fff32b41b0c RDI: ffffffffffffffff [ 174.060671][ T4420] RBP: 00007fff32b41b0c R08: 0000000000000000 R09: 0000000000000000 [ 174.069055][ T4420] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002a [ 174.077860][ T4420] R13: 00005555595f3a00 R14: 000000000001c610 R15: 00007fff32b41b60 [ 174.086893][ T4420] [ 174.090694][ T4420] task:syz-executor state:S stack:22224 pid:4273 ppid:1 flags:0x00004002 [ 174.100881][ T4420] Call Trace: [ 174.104380][ T4420] [ 174.107915][ T4420] __schedule+0x107f/0x4030 [ 174.113728][ T4420] ? do_wait+0x6cb/0xb80 [ 174.118384][ T4420] ? __sched_text_start+0x8/0x8 [ 174.124062][ T4420] ? __lock_acquire+0x7c40/0x7c40 [ 174.130118][ T4420] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 174.136750][ T4420] ? _raw_spin_unlock+0x40/0x40 [ 174.142628][ T4420] schedule+0xb9/0x180 [ 174.147217][ T4420] do_wait+0x7a5/0xb80 [ 174.152291][ T4420] kernel_wait4+0x22b/0x2b0 [ 174.157275][ T4420] ? __ia32_sys_waitid+0xc0/0xc0 [ 174.163199][ T4420] ? kernel_waitid+0x3d0/0x3d0 [ 174.168628][ T4420] ? zap_pid_ns_processes+0x13a/0x690 [ 174.174769][ T4420] zap_pid_ns_processes+0x3a0/0x690 [ 174.180772][ T4420] ? zap_pid_ns_processes+0x13a/0x690 [ 174.186609][ T4420] ? lock_chain_count+0x20/0x20 [ 174.192306][ T4420] ? put_pid_ns+0x130/0x130 [ 174.197539][ T4420] ? _raw_write_unlock_irq+0x1f/0x40 [ 174.203636][ T4420] ? lockdep_hardirqs_on+0x94/0x140 [ 174.209477][ T4420] do_exit+0x20a2/0x2570 [ 174.214749][ T4420] ? put_task_struct+0x80/0x80 [ 174.220377][ T4420] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 174.226868][ T4420] ? lock_chain_count+0x20/0x20 [ 174.232757][ T4420] ? _raw_spin_lock_irq+0xb7/0xf0 [ 174.238320][ T4420] do_group_exit+0x229/0x2e0 [ 174.243726][ T4420] ? lockdep_hardirqs_on+0x94/0x140 [ 174.249249][ T4420] get_signal+0x1259/0x1340 [ 174.255365][ T4420] arch_do_signal_or_restart+0xc4/0x1310 [ 174.261868][ T4420] ? __ia32_sys_waitid+0xc0/0xc0 [ 174.267301][ T4420] ? kernel_waitid+0x3d0/0x3d0 [ 174.272906][ T4420] ? __might_sleep+0xd0/0xd0 [ 174.278001][ T4420] ? get_sigframe_size+0x10/0x10 [ 174.284034][ T4420] ? __x64_sys_wait4+0x1b4/0x230 [ 174.290492][ T4420] ? exit_to_user_mode_loop+0x3b/0x110 [ 174.296316][ T4420] exit_to_user_mode_loop+0x70/0x110 [ 174.302442][ T4420] exit_to_user_mode_prepare+0xee/0x180 [ 174.308533][ T4420] syscall_exit_to_user_mode+0x16/0x40 [ 174.314828][ T4420] do_syscall_64+0x58/0xa0 [ 174.320000][ T4420] ? clear_bhb_loop+0x60/0xb0 [ 174.325153][ T4420] ? clear_bhb_loop+0x60/0xb0 [ 174.330683][ T4420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.337167][ T4420] RIP: 0033:0x7f3b6355e90e [ 174.342413][ T4420] RSP: 002b:00007ffd06197078 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 174.352031][ T4420] RAX: fffffffffffffe00 RBX: 0000555577f03500 RCX: 00007f3b6355e90e [ 174.361107][ T4420] RDX: 0000000040000000 RSI: 00007ffd0619711c RDI: ffffffffffffffff [ 174.369611][ T4420] RBP: 00007ffd0619711c R08: 0000000000000000 R09: 0000000000000000 [ 174.378579][ T4420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 174.387500][ T4420] R13: 0000555577f16a00 R14: 0000000000016644 R15: 00007ffd06197170 [ 174.396959][ T4420] [ 174.400779][ T4420] task:syz-executor state:S stack:22384 pid:4275 ppid:1 flags:0x00004002 [ 174.411220][ T4420] Call Trace: [ 174.415013][ T4420] [ 174.418342][ T4420] __schedule+0x107f/0x4030 [ 174.424344][ T4420] ? do_wait+0x6cb/0xb80 [ 174.428998][ T4420] ? __sched_text_start+0x8/0x8 [ 174.434880][ T4420] ? __lock_acquire+0x7c40/0x7c40 [ 174.440983][ T4420] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 174.447247][ T4420] ? _raw_spin_unlock+0x40/0x40 [ 174.453165][ T4420] schedule+0xb9/0x180 [ 174.457906][ T4420] do_wait+0x7a5/0xb80 [ 174.463426][ T4420] kernel_wait4+0x22b/0x2b0 [ 174.468333][ T4420] ? __ia32_sys_waitid+0xc0/0xc0 [ 174.474386][ T4420] ? kernel_waitid+0x3d0/0x3d0 [ 174.480173][ T4420] ? zap_pid_ns_processes+0x13a/0x690 [ 174.486209][ T4420] zap_pid_ns_processes+0x3a0/0x690 [ 174.492364][ T4420] ? zap_pid_ns_processes+0x13a/0x690 [ 174.498062][ T4420] ? lock_chain_count+0x20/0x20 [ 174.503832][ T4420] ? put_pid_ns+0x130/0x130 [ 174.508888][ T4420] ? _raw_write_unlock_irq+0x1f/0x40 [ 174.515095][ T4420] ? lockdep_hardirqs_on+0x94/0x140 [ 174.521218][ T4420] do_exit+0x20a2/0x2570 [ 174.526457][ T4420] ? put_task_struct+0x80/0x80 [ 174.532476][ T4420] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 174.538852][ T4420] ? lock_chain_count+0x20/0x20 [ 174.544688][ T4420] ? _raw_spin_lock_irq+0xb7/0xf0 [ 174.550639][ T4420] do_group_exit+0x229/0x2e0 [ 174.555689][ T4420] ? lockdep_hardirqs_on+0x94/0x140 [ 174.561918][ T4420] get_signal+0x1259/0x1340 [ 174.567471][ T4420] arch_do_signal_or_restart+0xc4/0x1310 [ 174.573993][ T4420] ? __ia32_sys_waitid+0xc0/0xc0 [ 174.579805][ T4420] ? kernel_waitid+0x3d0/0x3d0 [ 174.585256][ T4420] ? __might_sleep+0xd0/0xd0 [ 174.590864][ T4420] ? get_sigframe_size+0x10/0x10 [ 174.596183][ T4420] ? __x64_sys_wait4+0x1b4/0x230 [ 174.602631][ T4420] ? exit_to_user_mode_loop+0x3b/0x110 [ 174.608650][ T4420] exit_to_user_mode_loop+0x70/0x110 [ 174.614893][ T4420] exit_to_user_mode_prepare+0xee/0x180 [ 174.621489][ T4420] syscall_exit_to_user_mode+0x16/0x40 [ 174.627204][ T4420] do_syscall_64+0x58/0xa0 [ 174.632539][ T4420] ? clear_bhb_loop+0x60/0xb0 [ 174.637573][ T4420] ? clear_bhb_loop+0x60/0xb0 [ 174.643243][ T4420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.650131][ T4420] RIP: 0033:0x7f464a55e90e [ 174.655019][ T4420] RSP: 002b:00007ffc8f7b5568 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 174.664472][ T4420] RAX: fffffffffffffe00 RBX: 000055558486c500 RCX: 00007f464a55e90e [ 174.673373][ T4420] RDX: 0000000040000000 RSI: 00007ffc8f7b560c RDI: ffffffffffffffff [ 174.682184][ T4420] RBP: 00007ffc8f7b560c R08: 0000000000000000 R09: 0000000000000000 [ 174.691091][ T4420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 174.699293][ T4420] R13: 000055558487fa00 R14: 0000000000016a07 R15: 00007ffc8f7b5660 [ 174.708547][ T4420] [ 174.712423][ T4420] task:syz-executor state:S stack:21168 pid:4282 ppid:1 flags:0x00004002 [ 174.723268][ T4420] Call Trace: [ 174.727030][ T4420] [ 174.730907][ T4420] __schedule+0x107f/0x4030 [ 174.736409][ T4420] ? do_wait+0x6cb/0xb80 [ 174.741500][ T4420] ? __sched_text_start+0x8/0x8 [ 174.746805][ T4420] ? __lock_acquire+0x7c40/0x7c40 [ 174.752611][ T4420] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 174.759142][ T4420] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 174.765894][ T4420] ? _raw_spin_unlock+0x40/0x40 [ 174.771819][ T4420] schedule+0xb9/0x180 [ 174.776375][ T4420] do_wait+0x7a5/0xb80 [ 174.781512][ T4420] kernel_wait4+0x22b/0x2b0 [ 174.786613][ T4420] ? __ia32_sys_waitid+0xc0/0xc0 [ 174.792544][ T4420] ? kernel_waitid+0x3d0/0x3d0 [ 174.797870][ T4420] ? zap_pid_ns_processes+0x13a/0x690 [ 174.804154][ T4420] zap_pid_ns_processes+0x3a0/0x690 [ 174.810157][ T4420] ? zap_pid_ns_processes+0x13a/0x690 [ 174.816020][ T4420] ? lock_chain_count+0x20/0x20 [ 174.821690][ T4420] ? put_pid_ns+0x130/0x130 [ 174.827082][ T4420] ? _raw_write_unlock_irq+0x1f/0x40 [ 174.833114][ T4420] ? lockdep_hardirqs_on+0x94/0x140 [ 174.838705][ T4420] do_exit+0x20a2/0x2570 [ 174.843995][ T4420] ? put_task_struct+0x80/0x80 [ 174.849404][ T4420] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 174.856351][ T4420] ? lock_chain_count+0x20/0x20 [ 174.861969][ T4420] ? _raw_spin_lock_irq+0xb7/0xf0 [ 174.867455][ T4420] do_group_exit+0x229/0x2e0 [ 174.872842][ T4420] ? lockdep_hardirqs_on+0x94/0x140 [ 174.878428][ T4420] get_signal+0x1259/0x1340 [ 174.884368][ T4420] arch_do_signal_or_restart+0xc4/0x1310 [ 174.890722][ T4420] ? __ia32_sys_waitid+0xc0/0xc0 [ 174.896127][ T4420] ? kernel_waitid+0x3d0/0x3d0 [ 174.901716][ T4420] ? __might_sleep+0xd0/0xd0 [ 174.906816][ T4420] ? get_sigframe_size+0x10/0x10 [ 174.912594][ T4420] ? __x64_sys_wait4+0x1b4/0x230 [ 174.918443][ T4420] ? exit_to_user_mode_loop+0x3b/0x110 [ 174.924801][ T4420] exit_to_user_mode_loop+0x70/0x110 [ 174.930855][ T4420] exit_to_user_mode_prepare+0xee/0x180 [ 174.937014][ T4420] syscall_exit_to_user_mode+0x16/0x40 [ 174.943350][ T4420] do_syscall_64+0x58/0xa0 [ 174.948212][ T4420] ? clear_bhb_loop+0x60/0xb0 [ 174.953688][ T4420] ? clear_bhb_loop+0x60/0xb0 [ 174.958752][ T4420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.965413][ T4420] RIP: 0033:0x7f276735e90e [ 174.970637][ T4420] RSP: 002b:00007ffdb5661048 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 174.979376][ T4420] RAX: fffffffffffffe00 RBX: 0000555569e62500 RCX: 00007f276735e90e [ 174.988412][ T4420] RDX: 0000000040000000 RSI: 00007ffdb56610ec RDI: ffffffffffffffff [ 174.997310][ T4420] RBP: 00007ffdb56610ec R08: 0000000000000000 R09: 0000000000000000 [ 175.006079][ T4420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.014912][ T4420] R13: 0000555569e75a00 R14: 00000000000162c1 R15: 00007ffdb5661140 [ 175.024091][ T4420] [ 175.027647][ T4420] task:syz-executor state:S stack:22384 pid:4603 ppid:1 flags:0x00004002 [ 175.037895][ T4420] Call Trace: [ 175.041932][ T4420] [ 175.045459][ T4420] __schedule+0x107f/0x4030 [ 175.051382][ T4420] ? do_wait+0x6cb/0xb80 [ 175.056090][ T4420] ? __sched_text_start+0x8/0x8 [ 175.061763][ T4420] ? __lock_acquire+0x7c40/0x7c40 [ 175.067324][ T4420] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 175.073978][ T4420] ? _raw_spin_unlock+0x40/0x40 [ 175.079343][ T4420] schedule+0xb9/0x180 [ 175.084201][ T4420] do_wait+0x7a5/0xb80 [ 175.088989][ T4420] kernel_wait4+0x22b/0x2b0 [ 175.094391][ T4420] ? __ia32_sys_waitid+0xc0/0xc0 [ 175.100241][ T4420] ? kernel_waitid+0x3d0/0x3d0 [ 175.105635][ T4420] ? zap_pid_ns_processes+0x13a/0x690 [ 175.111781][ T4420] zap_pid_ns_processes+0x3a0/0x690 [ 175.117415][ T4420] ? zap_pid_ns_processes+0x13a/0x690 [ 175.123675][ T4420] ? lock_chain_count+0x20/0x20 [ 175.129147][ T4420] ? put_pid_ns+0x130/0x130 [ 175.134458][ T4420] ? _raw_write_unlock_irq+0x1f/0x40 [ 175.140487][ T4420] ? _raw_write_unlock_irq+0x1f/0x40 [ 175.146328][ T4420] ? lockdep_hardirqs_on+0x94/0x140 [ 175.152387][ T4420] do_exit+0x20a2/0x2570 [ 175.156865][ T4420] ? trace_event_buffer_commit+0x254/0x780 [ 175.163669][ T4420] ? put_task_struct+0x80/0x80 [ 175.169101][ T4420] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 175.175969][ T4420] ? lock_chain_count+0x20/0x20 [ 175.181586][ T4420] ? _raw_spin_lock_irq+0xb7/0xf0 [ 175.187077][ T4420] do_group_exit+0x229/0x2e0 [ 175.192521][ T4420] ? lockdep_hardirqs_on+0x94/0x140 [ 175.198338][ T4420] get_signal+0x1259/0x1340 [ 175.204309][ T4420] arch_do_signal_or_restart+0xc4/0x1310 [ 175.210697][ T4420] ? trace_buffer_unlock_commit_regs+0x148/0x600 [ 175.217396][ T4420] ? trace_event_buffer_commit+0x254/0x780 [ 175.224147][ T4420] ? get_sigframe_size+0x10/0x10 [ 175.229479][ T4420] ? trace_event_raw_event_preemptirq_template+0x139/0x1f0 [ 175.237996][ T4420] ? exit_to_user_mode_loop+0x3b/0x110 [ 175.244371][ T4420] exit_to_user_mode_loop+0x70/0x110 [ 175.250507][ T4420] exit_to_user_mode_prepare+0xee/0x180 [ 175.256649][ T4420] syscall_exit_to_user_mode+0x16/0x40 [ 175.262905][ T4420] do_syscall_64+0x58/0xa0 [ 175.267715][ T4420] ? clear_bhb_loop+0x60/0xb0 [ 175.273243][ T4420] ? clear_bhb_loop+0x60/0xb0 [ 175.278450][ T4420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.285147][ T4420] RIP: 0033:0x7f01b955e90e [ 175.290304][ T4420] RSP: 002b:00007ffc413a3228 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 175.299540][ T4420] RAX: fffffffffffffe00 RBX: 000055555a1a1500 RCX: 00007f01b955e90e [ 175.308188][ T4420] RDX: 0000000040000000 RSI: 00007ffc413a32cc RDI: ffffffffffffffff [ 175.317109][ T4420] RBP: 00007ffc413a32cc R08: 0000000000000000 R09: 0000000000000000 [ 175.325826][ T4420] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 175.334542][ T4420] R13: 000055555a1b4a00 R14: 000000000001fe5a R15: 00007ffc413a3320 [ 175.343741][ T4420] [ 175.347337][ T4420] task:syz.0.89 state:D stack:26832 pid:4748 ppid:4272 flags:0x00004004 [ 175.357428][ T4420] Call Trace: [ 175.361517][ T4420] [ 175.364771][ T4420] __schedule+0x107f/0x4030 [ 175.370545][ T4420] ? _raw_spin_unlock+0x40/0x40 [ 175.375819][ T4420] ? __sched_text_start+0x8/0x8 [ 175.381517][ T4420] ? load_image+0x410/0x410 [ 175.386378][ T4420] ? prepare_to_wait_event+0x430/0x470 [ 175.392730][ T4420] schedule+0xb9/0x180 [ 175.397307][ T4420] do_uevent+0x1e9/0x490 [ 175.402629][ T4420] ? dlm_scand+0x220/0x220 [ 175.407501][ T4420] ? __kmem_cache_free+0xb6/0x200 [ 175.413389][ T4420] ? wake_bit_function+0x200/0x200 [ 175.418995][ T4420] ? kobject_uevent_env+0x364/0x890 [ 175.425217][ T4420] __dlm_new_lockspace+0x1d6a/0x22b0 [ 175.431711][ T4420] ? dlm_new_lockspace+0x50/0x50 [ 175.437031][ T4420] ? wake_bit_function+0x200/0x200 [ 175.442987][ T4420] ? apparmor_capable+0x12c/0x190 [ 175.448348][ T4420] ? bpf_lsm_capable+0x5/0x10 [ 175.453806][ T4420] ? security_capable+0x85/0xb0 [ 175.459169][ T4420] ? dlm_new_user_lockspace+0x20/0x40 [ 175.465564][ T4420] device_create_lockspace+0xc4/0x350 [ 175.471876][ T4420] ? device_user_deadlock+0xd0/0xd0 [ 175.477630][ T4420] ? __might_fault+0xc2/0x120 [ 175.483190][ T4420] ? _copy_from_user+0x10b/0x170 [ 175.488460][ T4420] device_write+0x893/0xea0 [ 175.493755][ T4420] ? security_file_permission+0x75/0xa0 [ 175.500084][ T4420] ? device_read+0x1480/0x1480 [ 175.505232][ T4420] vfs_write+0x2dc/0x9a0 [ 175.510446][ T4420] ? file_end_write+0x250/0x250 [ 175.515871][ T4420] ? __fget_files+0x28/0x460 [ 175.521288][ T4420] ? __fget_files+0x3fc/0x460 [ 175.526443][ T4420] ? __fdget_pos+0x1d4/0x360 [ 175.531782][ T4420] ? ksys_write+0x70/0x260 [ 175.536720][ T4420] ksys_write+0x14d/0x260 [ 175.542136][ T4420] ? __ia32_sys_read+0x80/0x80 [ 175.547429][ T4420] ? lockdep_hardirqs_on+0x94/0x140 [ 175.553452][ T4420] do_syscall_64+0x4c/0xa0 [ 175.558167][ T4420] ? clear_bhb_loop+0x60/0xb0 [ 175.563703][ T4420] ? clear_bhb_loop+0x60/0xb0 [ 175.568926][ T4420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.575751][ T4420] RIP: 0033:0x7fb90059e0d9 [ 175.580929][ T4420] RSP: 002b:00007fb90148a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 175.590235][ T4420] RAX: ffffffffffffffda RBX: 00007fb900825fa0 RCX: 00007fb90059e0d9 [ 175.598575][ T4420] RDX: 0000000000000078 RSI: 0000200000000500 RDI: 0000000000000006 [ 175.607506][ T4420] RBP: 00007fb900635024 R08: 0000000000000000 R09: 0000000000000000 [ 175.616358][ T4420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.625437][ T4420] R13: 00007fb900826038 R14: 00007fb900825fa0 R15: 00007fff32b41768 [ 175.634500][ T4420] [ 175.638052][ T4420] task:syz.3.139 state:R running task stack:25304 pid:4988 ppid:4271 flags:0x00004006 [ 175.650342][ T4420] Call Trace: [ 175.654048][ T4420] [ 175.657428][ T4420] __schedule+0x107f/0x4030 [ 175.662828][ T4420] ? lock_chain_count+0x20/0x20 [ 175.668506][ T4420] ? lockdep_hardirqs_on+0x94/0x140 [ 175.674597][ T4420] ? __sched_text_start+0x8/0x8 [ 175.680787][ T4420] preempt_schedule_irq+0xbb/0x160 [ 175.686248][ T4420] ? preempt_schedule_notrace+0x120/0x120 [ 175.692835][ T4420] ? rcu_is_watching+0x11/0xa0 [ 175.698386][ T4420] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 175.705198][ T4420] irqentry_exit+0x63/0x70 [ 175.710491][ T4420] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 175.716909][ T4420] RIP: 0010:put_cpu_partial+0x1b0/0x250 [ 175.723332][ T4420] Code: 3b 44 24 18 0f 85 b4 00 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 7c 37 5d 08 f7 c5 00 02 00 00 74 c0 fb 4d 85 e4 <75> bf eb c8 e8 47 b8 3f 02 85 c0 0f 84 e9 fe ff ff 83 3d c0 5e 4e [ 175.743730][ T4420] RSP: 0018:ffffc900054879a0 EFLAGS: 00000246 [ 175.750671][ T4420] RAX: 9ac10cd8abcfc800 RBX: ffff888019e6c500 RCX: 9ac10cd8abcfc800 [ 175.759038][ T4420] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf5de0 [ 175.767965][ T4420] RBP: 0000000000000286 R08: ffffffff90b1039f R09: 1ffffffff2162073 [ 175.776690][ T4420] R10: dffffc0000000000 R11: fffffbfff2162074 R12: 0000000000000000 [ 175.785442][ T4420] R13: 0000000000000001 R14: ffff88807b98bc00 R15: ffff8880b8f44620 [ 175.794493][ T4420] ? put_cpu_partial+0x6e/0x250 [ 175.800273][ T4420] qlist_free_all+0x76/0xe0 [ 175.805407][ T4420] kasan_quarantine_reduce+0x144/0x160 [ 175.811738][ T4420] __kasan_kmalloc+0x1e/0xa0 [ 175.816571][ T4420] ? tracepoint_add_func+0x2f1/0xa10 [ 175.822757][ T4420] __kmalloc+0xb3/0x240 [ 175.827265][ T4420] ? perf_trace_ocfs2_split_extent+0x3b0/0x3b0 [ 175.834246][ T4420] tracepoint_add_func+0x2f1/0xa10 [ 175.840390][ T4420] ? perf_trace_ocfs2_split_extent+0x3b0/0x3b0 [ 175.847195][ T4420] tracepoint_probe_register+0x5a/0x90 [ 175.853533][ T4420] ? perf_trace_ocfs2_split_extent+0x3b0/0x3b0 [ 175.860669][ T4420] __ftrace_event_enable_disable+0x3a3/0x740 [ 175.867294][ T4420] ? trace_event_buffer_reserve+0x3d0/0x3d0 [ 175.874123][ T4420] __ftrace_set_clr_event_nolock+0x324/0x3d0 [ 175.881291][ T4420] system_enable_write+0x213/0x280 [ 175.886823][ T4420] ? system_enable_read+0x4b0/0x4b0 [ 175.892878][ T4420] ? common_file_perm+0x171/0x1c0 [ 175.898640][ T4420] ? system_enable_read+0x4b0/0x4b0 [ 175.904840][ T4420] vfs_write+0x2dc/0x9a0 [ 175.910092][ T4420] ? file_end_write+0x250/0x250 [ 175.915363][ T4420] ? __fget_files+0x28/0x460 [ 175.920758][ T4420] ? __fget_files+0x3fc/0x460 [ 175.926158][ T4420] ? __fdget_pos+0x2ae/0x360 [ 175.931573][ T4420] ? ksys_write+0x70/0x260 [ 175.936850][ T4420] ksys_write+0x14d/0x260 [ 175.942082][ T4420] ? __ia32_sys_read+0x80/0x80 [ 175.947188][ T4420] ? lockdep_hardirqs_on+0x94/0x140 [ 175.953271][ T4420] do_syscall_64+0x4c/0xa0 [ 175.958458][ T4420] ? clear_bhb_loop+0x60/0xb0 [ 175.963931][ T4420] ? clear_bhb_loop+0x60/0xb0 [ 175.969284][ T4420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.975861][ T4420] RIP: 0033:0x7f319ef9e0d9 [ 175.980993][ T4420] RSP: 002b:00007f319fe15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 175.990331][ T4420] RAX: ffffffffffffffda RBX: 00007f319f225fa0 RCX: 00007f319ef9e0d9 [ 175.998870][ T4420] RDX: 0000000000000002 RSI: 0000200000000200 RDI: 0000000000000003 [ 176.007638][ T4420] RBP: 00007f319f035024 R08: 0000000000000000 R09: 0000000000000000 [ 176.016459][ T4420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.025172][ T4420] R13: 00007f319f226038 R14: 00007f319f225fa0 R15: 00007fff1fc49ec8 [ 176.034682][ T4420] [ 176.691517][ T4420] OOM killer enabled. [ 176.695857][ T4420] Restarting tasks ... done. [ 178.352967][ T4420] random: crng reseeded on system resumption [ 178.623791][ T4436] PM: hibernation: hibernation entry [ 178.770498][ T4420] PM: suspend exit [ 181.143947][ T4436] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 181.161967][ T4436] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 181.605033][ T4436] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 181.761176][ T4436] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 181.768354][ T4436] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 182.562047][ T4436] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 182.760765][ T4436] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 182.767865][ T4436] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 183.232258][ T4276] Bluetooth: hci1: command 0x0c1a tx timeout [ 183.484845][ T4436] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 183.600647][ T4436] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 183.670624][ T4436] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 183.937834][ T4276] Bluetooth: hci2: command 0x0c1a tx timeout [ 184.860758][ T4290] Bluetooth: hci0: command 0x0c1a tx timeout [ 185.464293][ T4276] Bluetooth: hci1: command 0x0406 tx timeout [ 185.755285][ T4276] Bluetooth: hci3: command 0x0c1a tx timeout [ 186.011806][ T4276] Bluetooth: hci2: command 0x0406 tx timeout [ 186.892247][ T4276] Bluetooth: hci0: command 0x0406 tx timeout [ 187.850655][ T4276] Bluetooth: hci3: command 0x0406 tx timeout [ 188.571500][ T4436] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 188.720556][ T4436] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 188.727609][ T4436] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 189.927816][ T4436] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 190.078094][ T4436] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 190.217947][ T4436] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 190.811869][ T4276] Bluetooth: hci4: command 0x0c1a tx timeout [ 190.917314][ T4436] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 191.061884][ T4436] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 191.204695][ T4436] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 191.605999][ T4436] Bluetooth: hci6: Suspend notifier action (1) failed: -4 [ 191.792943][ T4436] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 191.860572][ T4436] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 192.081422][ T4276] Bluetooth: hci5: command 0x0c1a tx timeout [ 192.283091][ T4436] Bluetooth: hci7: Suspend notifier action (1) failed: -4 [ 192.881818][ T4276] Bluetooth: hci4: command 0x0406 tx timeout [ 193.122672][ T4276] Bluetooth: hci6: command 0x0c1a tx timeout [ 193.840986][ T4276] Bluetooth: hci7: command 0x0c1a tx timeout [ 194.083368][ T4436] Filesystems sync: 1.706 seconds [ 194.161524][ T4276] Bluetooth: hci5: command 0x0406 tx timeout [ 194.354247][ T4436] Freezing user space processes [ 194.495807][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.503258][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.202039][ T4276] Bluetooth: hci6: command 0x0406 tx timeout [ 195.925999][ T4276] Bluetooth: hci7: command 0x0406 tx timeout [ 214.593520][ T4436] Freezing of tasks failed after 20.091 seconds (12 tasks refusing to freeze, wq_busy=0): [ 214.671625][ T4436] task:syz-executor state:S stack:22608 pid:4271 ppid:1 flags:0x00004002 [ 214.681949][ T4436] Call Trace: [ 214.685533][ T4436] [ 214.689087][ T4436] __schedule+0x107f/0x4030 [ 214.695457][ T4436] ? do_wait+0x6cb/0xb80 [ 214.700338][ T4436] ? __sched_text_start+0x8/0x8 [ 214.705662][ T4436] ? __lock_acquire+0x7c40/0x7c40 [ 214.712050][ T4436] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 214.718539][ T4436] ? _raw_spin_unlock+0x40/0x40 [ 214.724433][ T4436] schedule+0xb9/0x180 [ 214.728866][ T4436] do_wait+0x7a5/0xb80 [ 214.734712][ T4436] kernel_wait4+0x22b/0x2b0 [ 214.740111][ T4436] ? __ia32_sys_waitid+0xc0/0xc0 [ 214.750431][ T4436] ? kernel_waitid+0x3d0/0x3d0 [ 214.756003][ T4436] ? zap_pid_ns_processes+0x13a/0x690 [ 214.765461][ T4436] zap_pid_ns_processes+0x3a0/0x690 [ 214.771473][ T4436] ? zap_pid_ns_processes+0x13a/0x690 [ 214.777405][ T4436] ? lock_chain_count+0x20/0x20 [ 214.783100][ T4436] ? put_pid_ns+0x130/0x130 [ 214.788302][ T4436] ? _raw_write_unlock_irq+0x1f/0x40 [ 214.794330][ T4436] ? _raw_write_unlock_irq+0x1f/0x40 [ 214.800315][ T4436] ? lockdep_hardirqs_on+0x94/0x140 [ 214.806052][ T4436] do_exit+0x20a2/0x2570 [ 214.810999][ T4436] ? trace_event_buffer_commit+0x254/0x780 [ 214.817581][ T4436] ? put_task_struct+0x80/0x80 [ 214.823139][ T4436] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 214.829592][ T4436] ? lock_chain_count+0x20/0x20 [ 214.835241][ T4436] ? _raw_spin_lock_irq+0xb7/0xf0 [ 214.841141][ T4436] do_group_exit+0x229/0x2e0 [ 214.846155][ T4436] ? lockdep_hardirqs_on+0x94/0x140 [ 214.852118][ T4436] get_signal+0x1259/0x1340 [ 214.857698][ T4436] arch_do_signal_or_restart+0xc4/0x1310 [ 214.864103][ T4436] ? trace_buffer_unlock_commit_regs+0x148/0x600 [ 214.871293][ T4436] ? trace_event_buffer_commit+0x254/0x780 [ 214.877721][ T4436] ? get_sigframe_size+0x10/0x10 [ 214.883360][ T4436] ? trace_event_raw_event_preemptirq_template+0x139/0x1f0 [ 214.892472][ T4436] ? exit_to_user_mode_loop+0x3b/0x110 [ 214.898476][ T4436] exit_to_user_mode_loop+0x70/0x110 [ 214.904642][ T4436] exit_to_user_mode_prepare+0xee/0x180 [ 214.910864][ T4436] syscall_exit_to_user_mode+0x16/0x40 [ 214.916698][ T4436] do_syscall_64+0x58/0xa0 [ 214.921816][ T4436] ? clear_bhb_loop+0x60/0xb0 [ 214.926827][ T4436] ? clear_bhb_loop+0x60/0xb0 [ 214.932446][ T4436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.938547][ T4436] RIP: 0033:0x7f319ef5e90e [ 214.943735][ T4436] RSP: 002b:00007fff1fc4a1c8 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 214.953059][ T4436] RAX: fffffffffffffe00 RBX: 000055557f7de500 RCX: 00007f319ef5e90e [ 214.961645][ T4436] RDX: 0000000040000000 RSI: 00007fff1fc4a26c RDI: ffffffffffffffff [ 214.970383][ T4436] RBP: 00007fff1fc4a26c R08: 0000000000000000 R09: 0000000000000000 [ 214.978845][ T4436] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002d [ 214.987718][ T4436] R13: 000055557f7f1a00 R14: 000000000001ff8b R15: 00007fff1fc4a2c0 [ 214.996853][ T4436] [ 215.000601][ T4436] task:syz-executor state:S stack:22064 pid:4272 ppid:1 flags:0x00004002 [ 215.010721][ T4436] Call Trace: [ 215.014289][ T4436] [ 215.017805][ T4436] __schedule+0x107f/0x4030 [ 215.024126][ T4436] ? do_wait+0x6cb/0xb80 [ 215.028719][ T4436] ? __sched_text_start+0x8/0x8 [ 215.034316][ T4436] ? __lock_acquire+0x7c40/0x7c40 [ 215.040120][ T4436] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 215.046469][ T4436] ? _raw_spin_unlock+0x40/0x40 [ 215.052312][ T4436] schedule+0xb9/0x180 [ 215.056862][ T4436] do_wait+0x7a5/0xb80 [ 215.062072][ T4436] kernel_wait4+0x22b/0x2b0 [ 215.066985][ T4436] ? __ia32_sys_waitid+0xc0/0xc0 [ 215.072792][ T4436] ? kernel_waitid+0x3d0/0x3d0 [ 215.078345][ T4436] ? zap_pid_ns_processes+0x13a/0x690 [ 215.084360][ T4436] zap_pid_ns_processes+0x3a0/0x690 [ 215.090383][ T4436] ? zap_pid_ns_processes+0x13a/0x690 [ 215.096247][ T4436] ? lock_chain_count+0x20/0x20 [ 215.101949][ T4436] ? put_pid_ns+0x130/0x130 [ 215.106971][ T4436] ? _raw_write_unlock_irq+0x1f/0x40 [ 215.113023][ T4436] ? _raw_write_unlock_irq+0x1f/0x40 [ 215.118966][ T4436] ? lockdep_hardirqs_on+0x94/0x140 [ 215.125009][ T4436] do_exit+0x20a2/0x2570 [ 215.129903][ T4436] ? trace_event_buffer_commit+0x254/0x780 [ 215.136423][ T4436] ? put_task_struct+0x80/0x80 [ 215.142144][ T4436] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 215.148509][ T4436] ? lock_chain_count+0x20/0x20 [ 215.154108][ T4436] ? _raw_spin_lock_irq+0xb7/0xf0 [ 215.159752][ T4436] do_group_exit+0x229/0x2e0 [ 215.164695][ T4436] ? lockdep_hardirqs_on+0x94/0x140 [ 215.170658][ T4436] get_signal+0x1259/0x1340 [ 215.176100][ T4436] arch_do_signal_or_restart+0xc4/0x1310 [ 215.182485][ T4436] ? trace_buffer_unlock_commit_regs+0x148/0x600 [ 215.189240][ T4436] ? trace_event_buffer_commit+0x254/0x780 [ 215.196393][ T4436] ? get_sigframe_size+0x10/0x10 [ 215.202000][ T4436] ? trace_event_raw_event_preemptirq_template+0x139/0x1f0 [ 215.210294][ T4436] ? exit_to_user_mode_loop+0x3b/0x110 [ 215.216233][ T4436] exit_to_user_mode_loop+0x70/0x110 [ 215.222333][ T4436] exit_to_user_mode_prepare+0xee/0x180 [ 215.228239][ T4436] syscall_exit_to_user_mode+0x16/0x40 [ 215.234417][ T4436] do_syscall_64+0x58/0xa0 [ 215.239493][ T4436] ? clear_bhb_loop+0x60/0xb0 [ 215.244967][ T4436] ? clear_bhb_loop+0x60/0xb0 [ 215.250573][ T4436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.256685][ T4436] RIP: 0033:0x7fb90055e90e [ 215.261834][ T4436] RSP: 002b:00007fff32b41a68 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 215.271145][ T4436] RAX: fffffffffffffe00 RBX: 00005555595e0500 RCX: 00007fb90055e90e [ 215.279453][ T4436] RDX: 0000000040000000 RSI: 00007fff32b41b0c RDI: ffffffffffffffff [ 215.288245][ T4436] RBP: 00007fff32b41b0c R08: 0000000000000000 R09: 0000000000000000 [ 215.297001][ T4436] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002a [ 215.305750][ T4436] R13: 00005555595f3a00 R14: 000000000001c610 R15: 00007fff32b41b60 [ 215.314815][ T4436] [ 215.318362][ T4436] task:syz-executor state:S stack:22224 pid:4273 ppid:1 flags:0x00004002 [ 215.328766][ T4436] Call Trace: [ 215.332686][ T4436] [ 215.336366][ T4436] __schedule+0x107f/0x4030 [ 215.342010][ T4436] ? do_wait+0x6cb/0xb80 [ 215.346644][ T4436] ? __sched_text_start+0x8/0x8 [ 215.352365][ T4436] ? __lock_acquire+0x7c40/0x7c40 [ 215.357866][ T4436] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 215.364479][ T4436] ? _raw_spin_unlock+0x40/0x40 [ 215.370206][ T4436] schedule+0xb9/0x180 [ 215.374775][ T4436] do_wait+0x7a5/0xb80 [ 215.379432][ T4436] kernel_wait4+0x22b/0x2b0 [ 215.384903][ T4436] ? __ia32_sys_waitid+0xc0/0xc0 [ 215.390662][ T4436] ? kernel_waitid+0x3d0/0x3d0 [ 215.396215][ T4436] ? zap_pid_ns_processes+0x13a/0x690 [ 215.402207][ T4436] zap_pid_ns_processes+0x3a0/0x690 [ 215.407944][ T4436] ? zap_pid_ns_processes+0x13a/0x690 [ 215.413985][ T4436] ? lock_chain_count+0x20/0x20 [ 215.419232][ T4436] ? put_pid_ns+0x130/0x130 [ 215.424635][ T4436] ? _raw_write_unlock_irq+0x1f/0x40 [ 215.430562][ T4436] ? lockdep_hardirqs_on+0x94/0x140 [ 215.436205][ T4436] do_exit+0x20a2/0x2570 [ 215.441416][ T4436] ? put_task_struct+0x80/0x80 [ 215.446725][ T4436] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 215.453501][ T4436] ? lock_chain_count+0x20/0x20 [ 215.458876][ T4436] ? _raw_spin_lock_irq+0xb7/0xf0 [ 215.464789][ T4436] do_group_exit+0x229/0x2e0 [ 215.470002][ T4436] ? lockdep_hardirqs_on+0x94/0x140 [ 215.475742][ T4436] get_signal+0x1259/0x1340 [ 215.481504][ T4436] arch_do_signal_or_restart+0xc4/0x1310 [ 215.487599][ T4436] ? __ia32_sys_waitid+0xc0/0xc0 [ 215.493814][ T4436] ? kernel_waitid+0x3d0/0x3d0 [ 215.499119][ T4436] ? __might_sleep+0xd0/0xd0 [ 215.504697][ T4436] ? get_sigframe_size+0x10/0x10 [ 215.510597][ T4436] ? __x64_sys_wait4+0x1b4/0x230 [ 215.516389][ T4436] ? exit_to_user_mode_loop+0x3b/0x110 [ 215.522856][ T4436] exit_to_user_mode_loop+0x70/0x110 [ 215.528771][ T4436] exit_to_user_mode_prepare+0xee/0x180 [ 215.535016][ T4436] syscall_exit_to_user_mode+0x16/0x40 [ 215.541383][ T4436] do_syscall_64+0x58/0xa0 [ 215.546265][ T4436] ? clear_bhb_loop+0x60/0xb0 [ 215.551673][ T4436] ? clear_bhb_loop+0x60/0xb0 [ 215.557121][ T4436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.563590][ T4436] RIP: 0033:0x7f3b6355e90e [ 215.568542][ T4436] RSP: 002b:00007ffd06197078 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 215.577806][ T4436] RAX: fffffffffffffe00 RBX: 0000555577f03500 RCX: 00007f3b6355e90e [ 215.586411][ T4436] RDX: 0000000040000000 RSI: 00007ffd0619711c RDI: ffffffffffffffff [ 215.595067][ T4436] RBP: 00007ffd0619711c R08: 0000000000000000 R09: 0000000000000000 [ 215.603833][ T4436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 215.612487][ T4436] R13: 0000555577f16a00 R14: 0000000000016644 R15: 00007ffd06197170 [ 215.621603][ T4436] [ 215.624884][ T4436] task:syz-executor state:S stack:22384 pid:4275 ppid:1 flags:0x00004002 [ 215.635067][ T4436] Call Trace: [ 215.638780][ T4436] [ 215.642698][ T4436] __schedule+0x107f/0x4030 [ 215.648149][ T4436] ? do_wait+0x6cb/0xb80 [ 215.653146][ T4436] ? __sched_text_start+0x8/0x8 [ 215.658307][ T4436] ? __lock_acquire+0x7c40/0x7c40 [ 215.664175][ T4436] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 215.670957][ T4436] ? _raw_spin_unlock+0x40/0x40 [ 215.676216][ T4436] schedule+0xb9/0x180 [ 215.681114][ T4436] do_wait+0x7a5/0xb80 [ 215.685996][ T4436] kernel_wait4+0x22b/0x2b0 [ 215.691362][ T4436] ? __ia32_sys_waitid+0xc0/0xc0 [ 215.696824][ T4436] ? kernel_waitid+0x3d0/0x3d0 [ 215.702692][ T4436] ? zap_pid_ns_processes+0x13a/0x690 [ 215.708537][ T4436] zap_pid_ns_processes+0x3a0/0x690 [ 215.714672][ T4436] ? zap_pid_ns_processes+0x13a/0x690 [ 215.720681][ T4436] ? lock_chain_count+0x20/0x20 [ 215.726041][ T4436] ? put_pid_ns+0x130/0x130 [ 215.731546][ T4436] ? _raw_write_unlock_irq+0x1f/0x40 [ 215.737487][ T4436] ? lockdep_hardirqs_on+0x94/0x140 [ 215.743555][ T4436] do_exit+0x20a2/0x2570 [ 215.748562][ T4436] ? put_task_struct+0x80/0x80 [ 215.754201][ T4436] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 215.761133][ T4436] ? lock_chain_count+0x20/0x20 [ 215.766442][ T4436] ? _raw_spin_lock_irq+0xb7/0xf0 [ 215.772802][ T4436] do_group_exit+0x229/0x2e0 [ 215.777912][ T4436] ? lockdep_hardirqs_on+0x94/0x140 [ 215.784218][ T4436] get_signal+0x1259/0x1340 [ 215.790124][ T4436] arch_do_signal_or_restart+0xc4/0x1310 [ 215.796122][ T4436] ? __ia32_sys_waitid+0xc0/0xc0 [ 215.802018][ T4436] ? kernel_waitid+0x3d0/0x3d0 [ 215.807276][ T4436] ? __might_sleep+0xd0/0xd0 [ 215.812780][ T4436] ? get_sigframe_size+0x10/0x10 [ 215.818391][ T4436] ? __x64_sys_wait4+0x1b4/0x230 [ 215.825160][ T4436] ? exit_to_user_mode_loop+0x3b/0x110 [ 215.831490][ T4436] exit_to_user_mode_loop+0x70/0x110 [ 215.837203][ T4436] exit_to_user_mode_prepare+0xee/0x180 [ 215.843584][ T4436] syscall_exit_to_user_mode+0x16/0x40 [ 215.849486][ T4436] do_syscall_64+0x58/0xa0 [ 215.854646][ T4436] ? clear_bhb_loop+0x60/0xb0 [ 215.860152][ T4436] ? clear_bhb_loop+0x60/0xb0 [ 215.865405][ T4436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.872150][ T4436] RIP: 0033:0x7f464a55e90e [ 215.877035][ T4436] RSP: 002b:00007ffc8f7b5568 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 215.886482][ T4436] RAX: fffffffffffffe00 RBX: 000055558486c500 RCX: 00007f464a55e90e [ 215.895254][ T4436] RDX: 0000000040000000 RSI: 00007ffc8f7b560c RDI: ffffffffffffffff [ 215.904035][ T4436] RBP: 00007ffc8f7b560c R08: 0000000000000000 R09: 0000000000000000 [ 215.912881][ T4436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 215.921697][ T4436] R13: 000055558487fa00 R14: 0000000000016a07 R15: 00007ffc8f7b5660 [ 215.931099][ T4436] [ 215.934593][ T4436] task:syz-executor state:S stack:21168 pid:4282 ppid:1 flags:0x00004002 [ 215.944909][ T4436] Call Trace: [ 215.948434][ T4436] [ 215.952489][ T4436] __schedule+0x107f/0x4030 [ 215.958022][ T4436] ? do_wait+0x6cb/0xb80 [ 215.963067][ T4436] ? __sched_text_start+0x8/0x8 [ 215.968431][ T4436] ? __lock_acquire+0x7c40/0x7c40 [ 215.974423][ T4436] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 215.981111][ T4436] ? _raw_spin_unlock+0x40/0x40 [ 215.986553][ T4436] schedule+0xb9/0x180 [ 215.991527][ T4436] do_wait+0x7a5/0xb80 [ 215.996467][ T4436] kernel_wait4+0x22b/0x2b0 [ 216.001867][ T4436] ? __ia32_sys_waitid+0xc0/0xc0 [ 216.007608][ T4436] ? kernel_waitid+0x3d0/0x3d0 [ 216.013523][ T4436] ? zap_pid_ns_processes+0x13a/0x690 [ 216.019268][ T4436] zap_pid_ns_processes+0x3a0/0x690 [ 216.025429][ T4436] ? zap_pid_ns_processes+0x13a/0x690 [ 216.031866][ T4436] ? lock_chain_count+0x20/0x20 [ 216.037156][ T4436] ? put_pid_ns+0x130/0x130 [ 216.042599][ T4436] ? _raw_write_unlock_irq+0x1f/0x40 [ 216.048404][ T4436] ? lockdep_hardirqs_on+0x94/0x140 [ 216.054485][ T4436] do_exit+0x20a2/0x2570 [ 216.059596][ T4436] ? put_task_struct+0x80/0x80 [ 216.065296][ T4436] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 216.072223][ T4436] ? lock_chain_count+0x20/0x20 [ 216.077453][ T4436] ? _raw_spin_lock_irq+0xb7/0xf0 [ 216.083461][ T4436] do_group_exit+0x229/0x2e0 [ 216.088508][ T4436] ? lockdep_hardirqs_on+0x94/0x140 [ 216.094630][ T4436] get_signal+0x1259/0x1340 [ 216.100837][ T4436] arch_do_signal_or_restart+0xc4/0x1310 [ 216.106873][ T4436] ? __ia32_sys_waitid+0xc0/0xc0 [ 216.112775][ T4436] ? kernel_waitid+0x3d0/0x3d0 [ 216.118000][ T4436] ? __might_sleep+0xd0/0xd0 [ 216.123494][ T4436] ? get_sigframe_size+0x10/0x10 [ 216.129034][ T4436] ? __x64_sys_wait4+0x1b4/0x230 [ 216.135514][ T4436] ? exit_to_user_mode_loop+0x3b/0x110 [ 216.141921][ T4436] exit_to_user_mode_loop+0x70/0x110 [ 216.147558][ T4436] exit_to_user_mode_prepare+0xee/0x180 [ 216.154007][ T4436] syscall_exit_to_user_mode+0x16/0x40 [ 216.160344][ T4436] do_syscall_64+0x58/0xa0 [ 216.165034][ T4436] ? clear_bhb_loop+0x60/0xb0 [ 216.170551][ T4436] ? clear_bhb_loop+0x60/0xb0 [ 216.175586][ T4436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.182266][ T4436] RIP: 0033:0x7f276735e90e [ 216.187053][ T4436] RSP: 002b:00007ffdb5661048 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 216.196692][ T4436] RAX: fffffffffffffe00 RBX: 0000555569e62500 RCX: 00007f276735e90e [ 216.205447][ T4436] RDX: 0000000040000000 RSI: 00007ffdb56610ec RDI: ffffffffffffffff [ 216.214262][ T4436] RBP: 00007ffdb56610ec R08: 0000000000000000 R09: 0000000000000000 [ 216.222956][ T4436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.231743][ T4436] R13: 0000555569e75a00 R14: 00000000000162c1 R15: 00007ffdb5661140 [ 216.240861][ T4436] [ 216.244429][ T4436] task:syz.2.14 state:R running task stack:24408 pid:4424 ppid:4273 flags:0x00004006 [ 216.256306][ T4436] Call Trace: [ 216.260334][ T4436] [ 216.263945][ T4436] __schedule+0x107f/0x4030 [ 216.268718][ T4436] ? trace_event_buffer_commit+0x254/0x780 [ 216.275662][ T4436] ? trace_event_raw_event_lock+0x1a5/0x230 [ 216.282646][ T4436] ? __sched_text_start+0x8/0x8 [ 216.288006][ T4436] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 216.295122][ T4436] ? preempt_schedule+0xbc/0xd0 [ 216.301052][ T4436] preempt_schedule_common+0x82/0xd0 [ 216.306872][ T4436] preempt_schedule+0xbc/0xd0 [ 216.312442][ T4436] ? schedule_preempt_disabled+0x20/0x20 [ 216.318777][ T4436] ? __lock_acquire+0x7c40/0x7c40 [ 216.324781][ T4436] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 216.331733][ T4436] ? _raw_spin_unlock+0x40/0x40 [ 216.337360][ T4436] preempt_schedule_thunk+0x16/0x18 [ 216.343642][ T4436] free_unref_page+0x399/0x3f0 [ 216.348903][ T4436] __unfreeze_partials+0x188/0x1e0 [ 216.354970][ T4436] put_cpu_partial+0x17c/0x250 [ 216.360623][ T4436] ? put_cpu_partial+0x6e/0x250 [ 216.365944][ T4436] qlist_free_all+0x76/0xe0 [ 216.371427][ T4436] kasan_quarantine_reduce+0x144/0x160 [ 216.377435][ T4436] __kasan_slab_alloc+0x1e/0x80 [ 216.383309][ T4436] slab_post_alloc_hook+0x4b/0x490 [ 216.389037][ T4436] ? slab_pre_alloc_hook+0x59/0x300 [ 216.395204][ T4436] kmem_cache_alloc_node+0x1ad/0x310 [ 216.401364][ T4436] ? __alloc_skb+0xf9/0x7d0 [ 216.406651][ T4436] __alloc_skb+0xf9/0x7d0 [ 216.412074][ T4436] alloc_uevent_skb+0x7d/0x230 [ 216.417367][ T4436] kobject_uevent_net_broadcast+0x17e/0x530 [ 216.424162][ T4436] kobject_uevent_env+0x555/0x890 [ 216.429878][ T4436] __kobject_del+0xd1/0x2e0 [ 216.435009][ T4436] kobject_put+0x22f/0x450 [ 216.440391][ T4436] net_rx_queue_update_kobjects+0x457/0x4d0 [ 216.447008][ T4436] netdev_unregister_kobject+0xf8/0x250 [ 216.453740][ T4436] unregister_netdevice_many_notify+0x14b6/0x1990 [ 216.461228][ T4436] ? unregister_netdevice_many+0x20/0x20 [ 216.467219][ T4436] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 216.474406][ T4436] ? __lock_acquire+0x7c40/0x7c40 [ 216.480296][ T4436] ? lock_chain_count+0x20/0x20 [ 216.485632][ T4436] ? queue_delayed_work_on+0x110/0x1f0 [ 216.491915][ T4436] ? lockdep_hardirqs_on+0x94/0x140 [ 216.497790][ T4436] unregister_netdevice_queue+0x2e5/0x330 [ 216.504415][ T4436] ? delayed_work_timer_fn+0x80/0x80 [ 216.510797][ T4436] ? list_netdevice+0x640/0x640 [ 216.516260][ T4436] ? linkwatch_urgent_event+0x346/0x3c0 [ 216.522941][ T4436] __tun_detach+0xdb7/0x1590 [ 216.528348][ T4436] tun_chr_close+0x109/0x1b0 [ 216.533688][ T4436] ? tun_chr_open+0x4d0/0x4d0 [ 216.538788][ T4436] __fput+0x20a/0x8b0 [ 216.543760][ T4436] task_work_run+0x1d0/0x260 [ 216.548993][ T4436] ? task_work_cancel+0x220/0x220 [ 216.554808][ T4436] ? do_exit+0x9d0/0x2570 [ 216.559483][ T4436] ? kmem_cache_free+0xf7/0x2a0 [ 216.565311][ T4436] do_exit+0x9d5/0x2570 [ 216.570258][ T4436] ? trace_event_buffer_commit+0x254/0x780 [ 216.576591][ T4436] ? put_task_struct+0x80/0x80 [ 216.582110][ T4436] ? ct_nmi_exit+0x145/0x1c0 [ 216.587333][ T4436] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 216.594120][ T4436] ? lock_chain_count+0x20/0x20 [ 216.599582][ T4436] ? _raw_spin_lock_irq+0xb7/0xf0 [ 216.605467][ T4436] do_group_exit+0x229/0x2e0 [ 216.610685][ T4436] ? lockdep_hardirqs_on+0x94/0x140 [ 216.616403][ T4436] get_signal+0x1259/0x1340 [ 216.622069][ T4436] arch_do_signal_or_restart+0xc4/0x1310 [ 216.628236][ T4436] ? trace_buffer_unlock_commit_regs+0x148/0x600 [ 216.635444][ T4436] ? trace_event_buffer_commit+0x254/0x780 [ 216.642570][ T4436] ? get_sigframe_size+0x10/0x10 [ 216.647912][ T4436] ? trace_event_raw_event_preemptirq_template+0x139/0x1f0 [ 216.656908][ T4436] ? exit_to_user_mode_loop+0x3b/0x110 [ 216.663272][ T4436] exit_to_user_mode_loop+0x70/0x110 [ 216.669033][ T4436] exit_to_user_mode_prepare+0xee/0x180 [ 216.675609][ T4436] syscall_exit_to_user_mode+0x16/0x40 [ 216.681747][ T4436] do_syscall_64+0x58/0xa0 [ 216.686524][ T4436] ? clear_bhb_loop+0x60/0xb0 [ 216.692002][ T4436] ? clear_bhb_loop+0x60/0xb0 [ 216.697138][ T4436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.703787][ T4436] RIP: 0033:0x7f3b6355e90e [ 216.708672][ T4436] RSP: 002b:00007f3b643e9b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 216.718017][ T4436] RAX: ffffffffffffffed RBX: 00007f3b643ea6c0 RCX: 00007f3b6355e90e [ 216.726685][ T4436] RDX: 0000000000000002 RSI: 00007f3b643e9c00 RDI: ffffffffffffff9c [ 216.735396][ T4436] RBP: 00007f3b643e9c00 R08: 0000000000000000 R09: 0000000000000000 [ 216.744082][ T4436] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 216.752690][ T4436] R13: 00007f3b63826128 R14: 00007f3b63826090 R15: 00007ffd06196d78 [ 216.761786][ T4436] [ 216.765254][ T4436] task:syz.1.15 state:D stack:25024 pid:4420 ppid:4282 flags:0x00004006 [ 216.775476][ T4436] Call Trace: [ 216.778959][ T4436] [ 216.782841][ T4436] __schedule+0x107f/0x4030 [ 216.788100][ T4436] ? trace_buffer_unlock_commit_regs+0x148/0x600 [ 216.795420][ T4436] ? __sched_text_start+0x8/0x8 [ 216.801311][ T4436] ? trace_event_raw_event_preemptirq_template+0x139/0x1f0 [ 216.809020][ T4436] schedule+0xb9/0x180 [ 216.813969][ T4436] schedule_timeout+0xbd/0x2d0 [ 216.819183][ T4436] ? console_conditional_schedule+0x40/0x40 [ 216.826122][ T4436] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 216.832853][ T4436] ? __lock_acquire+0x7c40/0x7c40 [ 216.838252][ T4436] ? lock_chain_count+0x20/0x20 [ 216.843902][ T4436] ? _raw_spin_lock_irq+0xb7/0xf0 [ 216.849176][ T4436] ? _raw_spin_lock_irqsave+0x100/0x100 [ 216.855655][ T4436] ? _raw_spin_unlock_irq+0x1f/0x40 [ 216.861608][ T4436] ? _raw_spin_unlock_irq+0x1f/0x40 [ 216.867348][ T4436] ? lockdep_hardirqs_on+0x94/0x140 [ 216.873390][ T4436] ? wait_for_completion+0x26f/0x590 [ 216.878979][ T4436] wait_for_completion+0x2c2/0x590 [ 216.885102][ T4436] ? io_schedule+0xd0/0xd0 [ 216.890339][ T4436] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 216.896714][ T4436] ? debug_object_active_state+0x6b/0x380 [ 216.903360][ T4436] __synchronize_srcu+0x2b3/0x350 [ 216.908926][ T4436] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 216.915481][ T4436] ? synchronize_srcu_expedited+0x20/0x20 [ 216.921957][ T4436] ? rcu_read_lock_any_held+0x130/0x130 [ 216.930569][ T4436] ? do_raw_read_unlock+0x70/0x70 [ 216.936186][ T4436] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 216.942558][ T4436] ? synchronize_srcu+0x18f/0x1b0 [ 216.948235][ T4436] hci_unregister_dev+0x144/0x500 [ 216.954158][ T4436] vhci_release+0x7f/0xd0 [ 216.958885][ T4436] ? vhci_open+0x360/0x360 [ 216.964021][ T4436] __fput+0x20a/0x8b0 [ 216.968739][ T4436] task_work_run+0x1d0/0x260 [ 216.974326][ T4436] ? task_work_cancel+0x220/0x220 [ 216.980362][ T4436] ? do_exit+0x9d0/0x2570 [ 216.985137][ T4436] ? kmem_cache_free+0xf7/0x2a0 [ 216.990949][ T4436] do_exit+0x9d5/0x2570 [ 216.995684][ T4436] ? trace_event_buffer_commit+0x254/0x780 [ 217.002550][ T4436] ? put_task_struct+0x80/0x80 [ 217.007593][ T4436] ? ct_nmi_exit+0x145/0x1c0 [ 217.013120][ T4436] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 217.020058][ T4436] ? lock_chain_count+0x20/0x20 [ 217.025388][ T4436] ? _raw_spin_lock_irq+0xb7/0xf0 [ 217.031247][ T4436] do_group_exit+0x229/0x2e0 [ 217.036279][ T4436] ? lockdep_hardirqs_on+0x94/0x140 [ 217.042533][ T4436] get_signal+0x1259/0x1340 [ 217.047983][ T4436] arch_do_signal_or_restart+0xc4/0x1310 [ 217.054357][ T4436] ? trace_buffer_unlock_commit_regs+0x148/0x600 [ 217.061474][ T4436] ? trace_event_buffer_commit+0x254/0x780 [ 217.067953][ T4436] ? get_sigframe_size+0x10/0x10 [ 217.073543][ T4436] ? trace_event_raw_event_preemptirq_template+0x139/0x1f0 [ 217.082430][ T4436] ? exit_to_user_mode_loop+0x3b/0x110 [ 217.088299][ T4436] exit_to_user_mode_loop+0x70/0x110 [ 217.094339][ T4436] exit_to_user_mode_prepare+0xee/0x180 [ 217.100682][ T4436] syscall_exit_to_user_mode+0x16/0x40 [ 217.106512][ T4436] do_syscall_64+0x58/0xa0 [ 217.111686][ T4436] ? clear_bhb_loop+0x60/0xb0 [ 217.116640][ T4436] ? clear_bhb_loop+0x60/0xb0 [ 217.122110][ T4436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.128331][ T4436] RIP: 0033:0x7f276739e0d9 [ 217.133495][ T4436] RSP: 002b:00007f2768350028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 217.142712][ T4436] RAX: fffffffffffffff0 RBX: 00007f2767625fa0 RCX: 00007f276739e0d9 [ 217.151394][ T4436] RDX: 0000000000000004 RSI: 0000200000000200 RDI: 0000000000000006 [ 217.159972][ T4436] RBP: 00007f2767435024 R08: 0000000000000000 R09: 0000000000000000 [ 217.168426][ T4436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.176988][ T4436] R13: 00007f2767626038 R14: 00007f2767625fa0 R15: 00007ffdb5660d48 [ 217.186110][ T4436] [ 217.189446][ T4436] task:syz-executor state:D stack:22384 pid:4591 ppid:1 flags:0x00004006 [ 217.199530][ T4436] Call Trace: [ 217.203619][ T4436] [ 217.207043][ T4436] __schedule+0x107f/0x4030 [ 217.212421][ T4436] ? trace_event_buffer_commit+0x254/0x780 [ 217.219357][ T4436] ? __sched_text_start+0x8/0x8 [ 217.224857][ T4436] ? __mutex_trylock_common+0x86/0x260 [ 217.231199][ T4436] ? trace_raw_output_contention_end+0xd0/0xd0 [ 217.238374][ T4436] schedule+0xb9/0x180 [ 217.243180][ T4436] schedule_preempt_disabled+0xf/0x20 [ 217.249077][ T4436] __mutex_lock+0x548/0xae0 [ 217.254404][ T4436] ? __mutex_lock+0x3ba/0xae0 [ 217.259507][ T4436] ? tun_chr_close+0x3d/0x1b0 [ 217.264990][ T4436] ? mutex_lock_nested+0x10/0x10 [ 217.271059][ T4436] ? tun_chr_open+0x4d0/0x4d0 [ 217.276409][ T4436] tun_chr_close+0x3d/0x1b0 [ 217.281767][ T4436] ? tun_chr_open+0x4d0/0x4d0 [ 217.286942][ T4436] __fput+0x20a/0x8b0 [ 217.292040][ T4436] task_work_run+0x1d0/0x260 [ 217.297187][ T4436] ? task_work_cancel+0x220/0x220 [ 217.303198][ T4436] ? do_exit+0x9d0/0x2570 [ 217.307794][ T4436] ? kmem_cache_free+0xf7/0x2a0 [ 217.313721][ T4436] do_exit+0x9d5/0x2570 [ 217.318343][ T4436] ? trace_event_buffer_commit+0x254/0x780 [ 217.325309][ T4436] ? put_task_struct+0x80/0x80 [ 217.330893][ T4436] ? ct_nmi_exit+0x145/0x1c0 [ 217.336084][ T4436] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 217.343030][ T4436] ? lock_chain_count+0x20/0x20 [ 217.348513][ T4436] ? _raw_spin_lock_irq+0xb7/0xf0 [ 217.354519][ T4436] do_group_exit+0x229/0x2e0 [ 217.359355][ T4436] ? lockdep_hardirqs_on+0x94/0x140 [ 217.365542][ T4436] get_signal+0x1259/0x1340 [ 217.371291][ T4436] arch_do_signal_or_restart+0xc4/0x1310 [ 217.377801][ T4436] ? trace_buffer_unlock_commit_regs+0x148/0x600 [ 217.385321][ T4436] ? trace_event_buffer_commit+0x254/0x780 [ 217.392236][ T4436] ? get_sigframe_size+0x10/0x10 [ 217.397768][ T4436] ? trace_event_raw_event_preemptirq_template+0x139/0x1f0 [ 217.406204][ T4436] ? exit_to_user_mode_loop+0x3b/0x110 [ 217.412482][ T4436] exit_to_user_mode_loop+0x70/0x110 [ 217.418307][ T4436] exit_to_user_mode_prepare+0xee/0x180 [ 217.424756][ T4436] syscall_exit_to_user_mode+0x16/0x40 [ 217.430945][ T4436] do_syscall_64+0x58/0xa0 [ 217.435786][ T4436] ? clear_bhb_loop+0x60/0xb0 [ 217.441191][ T4436] ? clear_bhb_loop+0x60/0xb0 [ 217.446531][ T4436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.453327][ T4436] RIP: 0033:0x7ff24c55e90e [ 217.458307][ T4436] RSP: 002b:00007ffc55680388 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 217.467622][ T4436] RAX: fffffffffffffe00 RBX: 00005555641f9500 RCX: 00007ff24c55e90e [ 217.476672][ T4436] RDX: 0000000000000030 RSI: 00007ffc55680480 RDI: 00000000000000f9 [ 217.485367][ T4436] RBP: 00007ffc5568042c R08: 0000000000000000 R09: 0000000000000000 [ 217.494198][ T4436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 217.502941][ T4436] R13: 000055556420ca00 R14: 00000000000232cd R15: 00007ffc55680480 [ 217.512076][ T4436] [ 217.515442][ T4436] task:syz-executor state:S stack:22384 pid:4603 ppid:1 flags:0x00004002 [ 217.525552][ T4436] Call Trace: [ 217.529052][ T4436] [ 217.532990][ T4436] __schedule+0x107f/0x4030 [ 217.538710][ T4436] ? do_wait+0x6cb/0xb80 [ 217.543638][ T4436] ? __sched_text_start+0x8/0x8 [ 217.548964][ T4436] ? __lock_acquire+0x7c40/0x7c40 [ 217.555015][ T4436] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 217.561660][ T4436] ? _raw_spin_unlock+0x40/0x40 [ 217.567133][ T4436] schedule+0xb9/0x180 [ 217.572017][ T4436] do_wait+0x7a5/0xb80 [ 217.576853][ T4436] kernel_wait4+0x22b/0x2b0 [ 217.582271][ T4436] ? __ia32_sys_waitid+0xc0/0xc0 [ 217.588017][ T4436] ? kernel_waitid+0x3d0/0x3d0 [ 217.593831][ T4436] ? zap_pid_ns_processes+0x13a/0x690 [ 217.600200][ T4436] zap_pid_ns_processes+0x3a0/0x690 [ 217.605843][ T4436] ? zap_pid_ns_processes+0x13a/0x690 [ 217.612063][ T4436] ? lock_chain_count+0x20/0x20 [ 217.617267][ T4436] ? put_pid_ns+0x130/0x130 [ 217.622610][ T4436] ? _raw_write_unlock_irq+0x1f/0x40 [ 217.628262][ T4436] ? _raw_write_unlock_irq+0x1f/0x40 [ 217.634389][ T4436] ? lockdep_hardirqs_on+0x94/0x140 [ 217.640404][ T4436] do_exit+0x20a2/0x2570 [ 217.645000][ T4436] ? trace_event_buffer_commit+0x254/0x780 [ 217.651774][ T4436] ? put_task_struct+0x80/0x80 [ 217.657208][ T4436] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 217.664654][ T4436] ? lock_chain_count+0x20/0x20 [ 217.670248][ T4436] ? _raw_spin_lock_irq+0xb7/0xf0 [ 217.675832][ T4436] do_group_exit+0x229/0x2e0 [ 217.681387][ T4436] ? lockdep_hardirqs_on+0x94/0x140 [ 217.687097][ T4436] get_signal+0x1259/0x1340 [ 217.692872][ T4436] arch_do_signal_or_restart+0xc4/0x1310 [ 217.699276][ T4436] ? trace_buffer_unlock_commit_regs+0x148/0x600 [ 217.706443][ T4436] ? trace_event_buffer_commit+0x254/0x780 [ 217.713940][ T4436] ? get_sigframe_size+0x10/0x10 [ 217.719233][ T4436] ? trace_event_raw_event_preemptirq_template+0x139/0x1f0 [ 217.727709][ T4436] ? exit_to_user_mode_loop+0x3b/0x110 [ 217.734178][ T4436] exit_to_user_mode_loop+0x70/0x110 [ 217.740334][ T4436] exit_to_user_mode_prepare+0xee/0x180 [ 217.746905][ T4436] syscall_exit_to_user_mode+0x16/0x40 [ 217.753133][ T4436] do_syscall_64+0x58/0xa0 [ 217.758022][ T4436] ? clear_bhb_loop+0x60/0xb0 [ 217.771881][ T4436] ? clear_bhb_loop+0x60/0xb0 [ 217.777181][ T4436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.783726][ T4436] RIP: 0033:0x7f01b955e90e [ 217.788793][ T4436] RSP: 002b:00007ffc413a3228 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 217.797992][ T4436] RAX: fffffffffffffe00 RBX: 000055555a1a1500 RCX: 00007f01b955e90e [ 217.806647][ T4436] RDX: 0000000040000000 RSI: 00007ffc413a32cc RDI: ffffffffffffffff [ 217.815327][ T4436] RBP: 00007ffc413a32cc R08: 0000000000000000 R09: 0000000000000000 [ 217.824191][ T4436] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 217.834377][ T4436] R13: 000055555a1b4a00 R14: 000000000001fe5a R15: 00007ffc413a3320 [ 217.843637][ T4436] [ 217.847045][ T4436] task:syz-executor state:R running task stack:22896 pid:4639 ppid:1 flags:0x00004006 [ 217.859001][ T4436] Call Trace: [ 217.863057][ T4436] [ 217.866631][ T4436] __schedule+0x107f/0x4030 [ 217.872022][ T4436] ? ring_buffer_unlock_commit+0x472/0x5f0 [ 217.878596][ T4436] ? __sched_text_start+0x8/0x8 [ 217.884542][ T4436] preempt_schedule_notrace+0xd9/0x120 [ 217.890817][ T4436] ? preempt_schedule_common+0xd0/0xd0 [ 217.896770][ T4436] preempt_schedule_notrace_thunk+0x16/0x18 [ 217.903762][ T4436] lock_release+0x8c2/0x920 [ 217.909057][ T4436] ? is_bpf_text_address+0x22/0x2a0 [ 217.915198][ T4436] ? trace_buffer_unlock_commit_regs+0x148/0x600 [ 217.922300][ T4436] ? preempt_schedule_thunk+0x16/0x18 [ 217.928355][ T4436] ? unwind_next_frame+0x172b/0x1fd0 [ 217.934445][ T4436] ? free_unref_page_prepare+0x8e5/0x9e0 [ 217.941107][ T4436] ? stack_trace_save+0xf0/0xf0 [ 217.946410][ T4436] ? arch_stack_walk+0x10c/0x140 [ 217.952314][ T4436] ? free_unref_page+0x2e/0x3f0 [ 217.958031][ T4436] ? stack_trace_save+0xa6/0xf0 [ 217.963768][ T4436] ? stack_trace_snprint+0xe0/0xe0 [ 217.969930][ T4436] ? perf_trace_lock_acquire+0x3f0/0x3f0 [ 217.976449][ T4436] ? lock_acquire+0x452/0x4a0 [ 217.981970][ T4436] ? preempt_schedule_notrace_thunk+0x16/0x18 [ 217.988581][ T4436] ? lock_release+0x8c2/0x920 [ 217.994286][ T4436] ? page_ext_put+0x98/0xb0 [ 217.999274][ T4436] ? __lock_acquire+0x7c40/0x7c40 [ 218.005073][ T4436] ? page_ext_get+0x1de/0x2a0 [ 218.010667][ T4436] ? free_unref_page_prepare+0x8f5/0x9e0 [ 218.016940][ T4436] ? do_raw_spin_unlock+0x11d/0x230 [ 218.023013][ T4436] ? free_unref_page+0x2e/0x3f0 [ 218.028401][ T4436] ? __vunmap+0x874/0xa40 [ 218.033677][ T4436] ? integrity_iint_find+0x51/0x120 [ 218.039271][ T4436] ? kcov_open+0x80/0x80 [ 218.044310][ T4436] ? kcov_close+0x27/0x50 [ 218.049063][ T4436] ? __fput+0x20a/0x8b0 [ 218.054201][ T4436] ? task_work_run+0x1d0/0x260 [ 218.059518][ T4436] ? task_work_cancel+0x220/0x220 [ 218.065427][ T4436] ? do_exit+0x9d0/0x2570 [ 218.070389][ T4436] ? kmem_cache_free+0xf7/0x2a0 [ 218.075915][ T4436] ? do_exit+0x9d5/0x2570 [ 218.080971][ T4436] ? trace_event_buffer_commit+0x254/0x780 [ 218.087346][ T4436] ? put_task_struct+0x80/0x80 [ 218.092857][ T4436] ? ct_nmi_exit+0x145/0x1c0 [ 218.097951][ T4436] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 218.104733][ T4436] ? lock_chain_count+0x20/0x20 [ 218.110372][ T4436] ? _raw_spin_lock_irq+0xb7/0xf0 [ 218.116153][ T4436] ? do_group_exit+0x229/0x2e0 [ 218.121603][ T4436] ? lockdep_hardirqs_on+0x94/0x140 [ 218.127400][ T4436] ? get_signal+0x1259/0x1340 [ 218.133220][ T4436] ? arch_do_signal_or_restart+0xc4/0x1310 [ 218.139762][ T4436] ? trace_buffer_unlock_commit_regs+0x148/0x600 [ 218.146591][ T4436] ? trace_event_buffer_commit+0x254/0x780 [ 218.153358][ T4436] ? get_sigframe_size+0x10/0x10 [ 218.158824][ T4436] ? trace_event_raw_event_preemptirq_template+0x139/0x1f0 [ 218.167205][ T4436] ? exit_to_user_mode_loop+0x3b/0x110 [ 218.173422][ T4436] ? exit_to_user_mode_loop+0x70/0x110 [ 218.179317][ T4436] ? exit_to_user_mode_prepare+0xee/0x180 [ 218.185778][ T4436] ? syscall_exit_to_user_mode+0x16/0x40 [ 218.192128][ T4436] ? do_syscall_64+0x58/0xa0 [ 218.197025][ T4436] ? clear_bhb_loop+0x60/0xb0 [ 218.202481][ T4436] ? clear_bhb_loop+0x60/0xb0 [ 218.207667][ T4436] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.214922][ T4436] [ 218.218335][ T4436] task:syz.0.89 state:D stack:26832 pid:4748 ppid:4272 flags:0x00004004 [ 218.228351][ T4436] Call Trace: [ 218.232316][ T4436] [ 218.235652][ T4436] __schedule+0x107f/0x4030 [ 218.241372][ T4436] ? _raw_spin_unlock+0x40/0x40 [ 218.246749][ T4436] ? __sched_text_start+0x8/0x8 [ 218.252298][ T4436] ? load_image+0x410/0x410 [ 218.257337][ T4436] ? prepare_to_wait_event+0x430/0x470 [ 218.263729][ T4436] schedule+0xb9/0x180 [ 218.268079][ T4436] do_uevent+0x1e9/0x490 [ 218.273093][ T4436] ? dlm_scand+0x220/0x220 [ 218.277873][ T4436] ? __kmem_cache_free+0xb6/0x200 [ 218.283791][ T4436] ? wake_bit_function+0x200/0x200 [ 218.289390][ T4436] ? kobject_uevent_env+0x364/0x890 [ 218.295555][ T4436] __dlm_new_lockspace+0x1d6a/0x22b0 [ 218.302058][ T4436] ? dlm_new_lockspace+0x50/0x50 [ 218.307368][ T4436] ? wake_bit_function+0x200/0x200 [ 218.313297][ T4436] ? apparmor_capable+0x12c/0x190 [ 218.318772][ T4436] ? bpf_lsm_capable+0x5/0x10 [ 218.324188][ T4436] ? security_capable+0x85/0xb0 [ 218.329439][ T4436] ? dlm_new_user_lockspace+0x20/0x40 [ 218.335737][ T4436] device_create_lockspace+0xc4/0x350 [ 218.341936][ T4436] ? device_user_deadlock+0xd0/0xd0 [ 218.347507][ T4436] ? __might_fault+0xc2/0x120 [ 218.353101][ T4436] ? _copy_from_user+0x10b/0x170 [ 218.358668][ T4436] device_write+0x893/0xea0 [ 218.363877][ T4436] ? security_file_permission+0x75/0xa0 [ 218.370166][ T4436] ? device_read+0x1480/0x1480 [ 218.375529][ T4436] vfs_write+0x2dc/0x9a0 [ 218.380865][ T4436] ? file_end_write+0x250/0x250 [ 218.386187][ T4436] ? __fget_files+0x28/0x460 [ 218.391550][ T4436] ? __fget_files+0x3fc/0x460 [ 218.396825][ T4436] ? __fdget_pos+0x1d4/0x360 [ 218.402286][ T4436] ? ksys_write+0x70/0x260 [ 218.407286][ T4436] ksys_write+0x14d/0x260 [ 218.412378][ T4436] ? __ia32_sys_read+0x80/0x80 [ 218.417749][ T4436] ? lockdep_hardirqs_on+0x94/0x140 [ 218.423964][ T4436] do_syscall_64+0x4c/0xa0 [ 218.428625][ T4436] ? clear_bhb_loop+0x60/0xb0 [ 218.434135][ T4436] ? clear_bhb_loop+0x60/0xb0 [ 218.439314][ T4436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.446020][ T4436] RIP: 0033:0x7fb90059e0d9 [ 218.451296][ T4436] RSP: 002b:00007fb90148a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 218.461482][ T4436] RAX: ffffffffffffffda RBX: 00007fb900825fa0 RCX: 00007fb90059e0d9 [ 218.470131][ T4436] RDX: 0000000000000078 RSI: 0000200000000500 RDI: 0000000000000006 [ 218.478576][ T4436] RBP: 00007fb900635024 R08: 0000000000000000 R09: 0000000000000000 [ 218.487318][ T4436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.496054][ T4436] R13: 00007fb900826038 R14: 00007fb900825fa0 R15: 00007fff32b41768 [ 218.505127][ T4436] [ 218.508627][ T4436] task:syz.3.139 state:R running task stack:25304 pid:4988 ppid:4271 flags:0x00004006 [ 218.520368][ T4436] Call Trace: [ 218.524090][ T4436] [ 218.527417][ T4436] __schedule+0x107f/0x4030 [ 218.533349][ T4436] ? __sched_text_start+0x8/0x8 [ 218.538563][ T4436] ? lock_chain_count+0x20/0x20 [ 218.544258][ T4436] ? preempt_schedule_irq+0xb0/0x160 [ 218.550561][ T4436] preempt_schedule_irq+0xbb/0x160 [ 218.556055][ T4436] ? preempt_schedule_notrace+0x120/0x120 [ 218.562851][ T4436] ? rcu_is_watching+0x11/0xa0 [ 218.568131][ T4436] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 218.574784][ T4436] irqentry_exit+0x63/0x70 [ 218.579938][ T4436] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 218.586260][ T4436] RIP: 0010:put_cpu_partial+0x1b0/0x250 [ 218.592503][ T4436] Code: 3b 44 24 18 0f 85 b4 00 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 7c 37 5d 08 f7 c5 00 02 00 00 74 c0 fb 4d 85 e4 <75> bf eb c8 e8 47 b8 3f 02 85 c0 0f 84 e9 fe ff ff 83 3d c0 5e 4e [ 218.612806][ T4436] RSP: 0018:ffffc900054879a0 EFLAGS: 00000286 [ 218.619338][ T4436] RAX: 9ac10cd8abcfc800 RBX: ffff888019e6c500 RCX: 9ac10cd8abcfc800 [ 218.628051][ T4436] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf5de0 [ 218.637089][ T4436] RBP: 0000000000000286 R08: ffffffff90b1039f R09: 1ffffffff2162073 [ 218.645800][ T4436] R10: dffffc0000000000 R11: fffffbfff2162074 R12: ffffea00012184c0 [ 218.654425][ T4436] R13: 0000000000000000 R14: ffff88807b98bc00 R15: ffff8880b8e44620 [ 218.663455][ T4436] ? put_cpu_partial+0x6e/0x250 [ 218.668901][ T4436] qlist_free_all+0x76/0xe0 [ 218.674341][ T4436] kasan_quarantine_reduce+0x144/0x160 [ 218.680507][ T4436] __kasan_kmalloc+0x1e/0xa0 [ 218.685463][ T4436] ? tracepoint_add_func+0x2f1/0xa10 [ 218.691620][ T4436] __kmalloc+0xb3/0x240 [ 218.696085][ T4436] ? __traceiter_rdpmc+0xd0/0xd0 [ 218.701906][ T4436] tracepoint_add_func+0x2f1/0xa10 [ 218.707609][ T4436] ? __traceiter_rdpmc+0xd0/0xd0 [ 218.713413][ T4436] tracepoint_probe_register+0x5a/0x90 [ 218.719263][ T4436] ? __traceiter_rdpmc+0xd0/0xd0 [ 218.724975][ T4436] __ftrace_event_enable_disable+0x3a3/0x740 [ 218.731772][ T4436] ? trace_event_buffer_reserve+0x3d0/0x3d0 [ 218.738262][ T4436] __ftrace_set_clr_event_nolock+0x324/0x3d0 [ 218.745270][ T4436] system_enable_write+0x213/0x280 [ 218.751291][ T4436] ? system_enable_read+0x4b0/0x4b0 [ 218.757144][ T4436] ? common_file_perm+0x171/0x1c0 [ 218.763183][ T4436] ? system_enable_read+0x4b0/0x4b0 [ 218.768813][ T4436] vfs_write+0x2dc/0x9a0 [ 218.773943][ T4436] ? file_end_write+0x250/0x250 [ 218.779208][ T4436] ? __fget_files+0x28/0x460 [ 218.784731][ T4436] ? __fget_files+0x3fc/0x460 [ 218.790315][ T4436] ? __fdget_pos+0x2ae/0x360 [ 218.795388][ T4436] ? ksys_write+0x70/0x260 [ 218.800597][ T4436] ksys_write+0x14d/0x260 [ 218.805624][ T4436] ? __ia32_sys_read+0x80/0x80 [ 218.811208][ T4436] ? lockdep_hardirqs_on+0x94/0x140 [ 218.816937][ T4436] do_syscall_64+0x4c/0xa0 [ 218.822108][ T4436] ? clear_bhb_loop+0x60/0xb0 [ 218.827171][ T4436] ? clear_bhb_loop+0x60/0xb0 [ 218.832608][ T4436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.838832][ T4436] RIP: 0033:0x7f319ef9e0d9 [ 218.843994][ T4436] RSP: 002b:00007f319fe15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 218.853237][ T4436] RAX: ffffffffffffffda RBX: 00007f319f225fa0 RCX: 00007f319ef9e0d9 [ 218.861986][ T4436] RDX: 0000000000000002 RSI: 0000200000000200 RDI: 0000000000000003 [ 218.870694][ T4436] RBP: 00007f319f035024 R08: 0000000000000000 R09: 0000000000000000 [ 218.879225][ T4436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.887893][ T4436] R13: 00007f319f226038 R14: 00007f319f225fa0 R15: 00007fff1fc49ec8 [ 218.897118][ T4436] [ 220.456181][ T4436] OOM killer enabled. [ 220.471830][ T4436] Restarting tasks ... done. [ 222.149852][ T4436] PM: hibernation: hibernation exit [ 232.321599][ T4290] Bluetooth: hci6: command 0x0406 tx timeout [ 233.973348][ T4996] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.905156][ T4996] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.980709][ T4996] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.598148][ T4276] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 244.623356][ T4276] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 244.647548][ T4276] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 244.910218][ T4276] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 244.931348][ T4276] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 244.981887][ T4276] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 247.052012][ T4290] Bluetooth: hci2: command 0x0409 tx timeout [ 247.591592][ T4276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 247.608025][ T4276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 247.629497][ T4276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 247.755360][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 247.811757][ T49] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 247.876623][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 249.122344][ T4290] Bluetooth: hci2: command 0x041b tx timeout [ 250.167432][ T4996] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.186076][ T4290] Bluetooth: hci4: command 0x0409 tx timeout [ 251.216523][ T4290] Bluetooth: hci2: command 0x040f tx timeout [ 252.245520][ T4290] Bluetooth: hci4: command 0x041b tx timeout [ 253.290167][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 254.330918][ T4290] Bluetooth: hci4: command 0x040f tx timeout [ 255.836914][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.850273][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.434233][ T49] Bluetooth: hci4: command 0x0419 tx timeout [ 256.715596][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 256.741821][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 256.755739][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 256.841668][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 256.923338][ T4276] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 256.948586][ T4276] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 259.151600][ T4290] Bluetooth: hci5: command 0x0409 tx timeout [ 260.805787][ T4276] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 260.830019][ T4276] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 260.844181][ T4276] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 260.903535][ T4276] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 261.143641][ T4276] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 261.161844][ T4276] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 261.200473][ T4276] Bluetooth: hci5: command 0x041b tx timeout [ 263.281416][ T4290] Bluetooth: hci5: command 0x040f tx timeout [ 263.281436][ T4276] Bluetooth: hci6: command 0x0409 tx timeout [ 265.372999][ T4276] Bluetooth: hci6: command 0x041b tx timeout [ 265.502461][ T4276] Bluetooth: hci5: command 0x0419 tx timeout [ 267.459295][ T4276] Bluetooth: hci6: command 0x040f tx timeout [ 269.536371][ T4276] Bluetooth: hci6: command 0x0419 tx timeout [ 295.185746][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 295.275670][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 295.289173][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 295.312458][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 295.443328][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 295.467994][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 297.760890][ T4290] Bluetooth: hci0: command 0x0409 tx timeout [ 299.874453][ T4290] Bluetooth: hci0: command 0x041b tx timeout [ 301.934208][ T4290] Bluetooth: hci0: command 0x040f tx timeout [ 302.583705][ T4276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.600644][ T4276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.628852][ T4276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.721796][ T4276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 302.767755][ T4276] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 302.780172][ T4276] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 304.070255][ T4290] Bluetooth: hci0: command 0x0419 tx timeout [ 304.932779][ T4290] Bluetooth: hci3: command 0x0409 tx timeout [ 306.075416][ T4276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.118022][ T4276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.182205][ T4276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.276366][ T4276] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.481873][ T49] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 306.519452][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 306.972596][ T49] Bluetooth: hci3: command 0x041b tx timeout [ 308.880579][ T4290] Bluetooth: hci4: command 0x0409 tx timeout [ 309.078683][ T49] Bluetooth: hci3: command 0x040f tx timeout [ 310.059018][ T4290] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 310.153554][ T4290] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 310.174283][ T4290] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 310.368460][ T4290] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 310.399469][ T4290] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 310.518651][ T4290] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 310.964128][ T4290] Bluetooth: hci4: command 0x041b tx timeout [ 311.145891][ T4290] Bluetooth: hci3: command 0x0419 tx timeout [ 312.724574][ T49] Bluetooth: hci7: command 0x0409 tx timeout [ 313.044489][ T4290] Bluetooth: hci4: command 0x040f tx timeout [ 314.461167][ T4290] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 314.487866][ T4290] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 314.515220][ T4290] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 314.545793][ T4290] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 314.705111][ T4290] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 314.811228][ T4290] Bluetooth: hci7: command 0x041b tx timeout [ 315.067467][ T4290] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 315.121484][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 316.890179][ T49] Bluetooth: hci7: command 0x040f tx timeout [ 317.216084][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.223757][ T49] Bluetooth: hci8: command 0x0409 tx timeout [ 317.259063][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.973208][ T49] Bluetooth: hci7: command 0x0419 tx timeout [ 319.307533][ T49] Bluetooth: hci8: command 0x041b tx timeout [ 321.394298][ T49] Bluetooth: hci8: command 0x040f tx timeout [ 323.473984][ T49] Bluetooth: hci8: command 0x0419 tx timeout [ 347.496952][ T4996] device hsr_slave_0 left promiscuous mode [ 347.777718][ T4996] device hsr_slave_1 left promiscuous mode [ 348.321986][ T4996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.382595][ T4996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.604088][ T4996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.719879][ T4996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.140811][ T4996] device bridge_slave_1 left promiscuous mode [ 349.150943][ T4996] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.940961][ T4996] device bridge_slave_0 left promiscuous mode [ 349.948315][ T4996] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.777137][ T4996] device veth1_macvtap left promiscuous mode [ 351.910852][ T4996] device veth0_macvtap left promiscuous mode [ 352.001810][ T4996] device veth1_vlan left promiscuous mode [ 352.092631][ T4996] device veth0_vlan left promiscuous mode [ 356.035406][ T49] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 356.105371][ T49] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 356.129367][ T49] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 356.475622][ T49] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 356.548367][ T49] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 356.592422][ T49] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 358.900537][ T4290] Bluetooth: hci9: command 0x0409 tx timeout [ 360.981983][ T4290] Bluetooth: hci9: command 0x041b tx timeout [ 363.133798][ T4290] Bluetooth: hci9: command 0x040f tx timeout [ 363.925386][ T49] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 364.268676][ T49] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 364.476731][ T49] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 365.046263][ T49] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 365.077963][ T49] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 365.130769][ T49] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 365.266615][ T49] Bluetooth: hci9: command 0x0419 tx timeout [ 367.377191][ T49] Bluetooth: hci10: command 0x0409 tx timeout [ 369.466988][ T4290] Bluetooth: hci10: command 0x041b tx timeout [ 370.482755][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 370.697553][ T4276] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 370.775292][ T4276] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 370.806715][ T4276] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 370.890358][ T4276] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 370.921887][ T4276] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 370.951535][ T4276] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 371.531514][ T4290] Bluetooth: hci10: command 0x040f tx timeout [ 373.075869][ T4290] Bluetooth: hci11: command 0x0409 tx timeout [ 373.615993][ T4290] Bluetooth: hci10: command 0x0419 tx timeout [ 375.180707][ T4276] Bluetooth: hci11: command 0x041b tx timeout [ 375.985055][ T4290] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 376.017058][ T4290] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 376.042076][ T4290] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 376.306594][ T4290] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 376.578052][ T4290] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 376.630576][ T4290] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 377.212398][ T4276] Bluetooth: hci11: command 0x040f tx timeout [ 378.674259][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.712556][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.801527][ T4276] Bluetooth: hci12: command 0x0409 tx timeout [ 379.291346][ T4276] Bluetooth: hci11: command 0x0419 tx timeout [ 380.719903][ T4290] Bluetooth: hci5: command 0x0406 tx timeout [ 380.886220][ T4276] Bluetooth: hci12: command 0x041b tx timeout [ 381.267552][ T28] INFO: task syz.0.89:4748 blocked for more than 143 seconds. [ 381.341753][ T28] Tainted: G S syzkaller #0 [ 381.349045][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 381.403605][ T4276] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 381.489053][ T4276] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 381.504661][ T4276] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 381.545688][ T4276] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 381.562686][ T28] task:syz.0.89 state:D stack:26832 pid:4748 ppid:4272 flags:0x00004004 [ 381.593057][ T4276] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 381.611144][ T4276] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 381.728765][ T28] Call Trace: [ 381.865644][ T28] [ 381.900400][ T28] __schedule+0x107f/0x4030 [ 381.906047][ T28] ? _raw_spin_unlock+0x40/0x40 [ 382.050052][ T28] ? __sched_text_start+0x8/0x8 [ 382.056284][ T28] ? load_image+0x410/0x410 [ 382.160484][ T28] ? prepare_to_wait_event+0x430/0x470 [ 382.269822][ T28] schedule+0xb9/0x180 [ 382.274380][ T28] do_uevent+0x1e9/0x490 [ 382.279273][ T28] ? dlm_scand+0x220/0x220 [ 382.349779][ T28] ? __kmem_cache_free+0xb6/0x200 [ 382.355306][ T28] ? wake_bit_function+0x200/0x200 [ 382.474281][ T28] ? kobject_uevent_env+0x364/0x890 [ 382.522063][ T28] __dlm_new_lockspace+0x1d6a/0x22b0 [ 382.528444][ T28] ? dlm_new_lockspace+0x50/0x50 [ 382.631886][ T28] ? wake_bit_function+0x200/0x200 [ 382.637517][ T28] ? apparmor_capable+0x12c/0x190 [ 382.710213][ T28] ? bpf_lsm_capable+0x5/0x10 [ 382.715671][ T28] ? security_capable+0x85/0xb0 [ 382.757779][ T28] ? dlm_new_user_lockspace+0x20/0x40 [ 382.775207][ T28] device_create_lockspace+0xc4/0x350 [ 382.827636][ T28] ? device_user_deadlock+0xd0/0xd0 [ 382.872058][ T28] ? __might_fault+0xc2/0x120 [ 382.877509][ T28] ? _copy_from_user+0x10b/0x170 [ 382.947001][ T28] device_write+0x893/0xea0 [ 382.960486][ T4290] Bluetooth: hci12: command 0x040f tx timeout [ 382.996810][ T28] ? security_file_permission+0x75/0xa0 [ 383.012744][ T28] ? device_read+0x1480/0x1480 [ 383.017895][ T28] vfs_write+0x2dc/0x9a0 [ 383.028073][ T28] ? file_end_write+0x250/0x250 [ 383.069176][ T28] ? __fget_files+0x28/0x460 [ 383.074694][ T28] ? __fget_files+0x3fc/0x460 [ 383.158311][ T28] ? __fdget_pos+0x1d4/0x360 [ 383.165432][ T28] ? ksys_write+0x70/0x260 [ 383.210113][ T28] ksys_write+0x14d/0x260 [ 383.214871][ T28] ? __ia32_sys_read+0x80/0x80 [ 383.310046][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 383.315829][ T28] do_syscall_64+0x4c/0xa0 [ 383.409793][ T28] ? clear_bhb_loop+0x60/0xb0 [ 383.414969][ T28] ? clear_bhb_loop+0x60/0xb0 [ 383.493009][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.499236][ T28] RIP: 0033:0x7fb90059e0d9 [ 383.573467][ T28] RSP: 002b:00007fb90148a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 383.610107][ T28] RAX: ffffffffffffffda RBX: 00007fb900825fa0 RCX: 00007fb90059e0d9 [ 383.618439][ T28] RDX: 0000000000000078 RSI: 0000200000000500 RDI: 0000000000000006 [ 383.760031][ T28] RBP: 00007fb900635024 R08: 0000000000000000 R09: 0000000000000000 [ 383.768514][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.850055][ T4290] Bluetooth: hci13: command 0x0409 tx timeout [ 383.954835][ T28] R13: 00007fb900826038 R14: 00007fb900825fa0 R15: 00007fff32b41768 [ 384.065889][ T28] [ 384.122547][ T28] [ 384.122547][ T28] Showing all locks held in the system: [ 384.181563][ T28] 4 locks held by kworker/u4:1/11: [ 384.187158][ T28] 1 lock held by rcu_tasks_kthre/12: [ 384.260315][ T28] #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 384.381240][ T28] 1 lock held by rcu_tasks_trace/13: [ 384.386937][ T28] #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 384.516083][ T28] 3 locks held by kworker/1:0/22: [ 384.613890][ T28] #0: ffff88802f2a7d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 384.758694][ T28] #1: ffffc900001c7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 384.910100][ T28] #2: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x15/0x30 [ 385.050353][ T4290] Bluetooth: hci12: command 0x0419 tx timeout [ 385.100097][ T28] 1 lock held by khungtaskd/28: [ 385.105290][ T28] #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 385.246295][ T28] 3 locks held by kworker/u4:2/41: [ 385.337398][ T28] #0: ffff8880b8e3ad18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x130 SYZFAIL: failed to recv rpc [ 385.450126][ T28] #1: ffff8880b8e27888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x400/0x740 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 385.580484][ T28] #2: ffff88807b4787a8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x31/0x260 [ 385.705534][ T28] 3 locks held by kworker/u4:4/76: [ 385.780280][ T28] 2 locks held by kworker/1:2/2122: [ 385.786155][ T28] 2 locks held by getty/4027: [ 385.864152][ T4290] Bluetooth: hci6: command 0x0406 tx timeout [ 385.878257][ T28] #0: ffff88802ffdc098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 385.999787][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 386.032776][ T4290] Bluetooth: hci13: command 0x041b tx timeout [ 386.139717][ T28] 1 lock held by syz-executor/4259: [ 386.145234][ T28] 3 locks held by kworker/u4:6/4325: [ 386.261807][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 386.380992][ T28] #1: ffffc900044d7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 386.481058][ T28] #2: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 386.550919][ T28] 1 lock held by syz.0.89/4748: [ 386.556330][ T28] #0: ffffffff96d4d888 (&ls_lock){+.+.}-{3:3}, at: __dlm_new_lockspace+0xad/0x22b0 [ 386.725064][ T28] 1 lock held by dlm_recoverd/4753: [ 386.756200][ T28] #0: ffff88805653cca0 (&ls->ls_in_recovery){+.+.}-{3:3}, at: dlm_recoverd+0xa6/0x1df0 [ 386.850349][ T28] 3 locks held by kworker/0:11/4974: [ 386.856337][ T28] 3 locks held by kworker/0:12/4975: [ 386.969736][ T28] #0: ffff88802f2a7d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 387.092074][ T28] #1: ffffc90005d8fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 387.181747][ T28] #2: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x15/0x30 [ 387.259945][ T28] 2 locks held by kworker/0:13/4977: [ 387.265791][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 387.386521][ T28] #1: ffffc9000610fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 387.515540][ T28] 3 locks held by kworker/0:14/4979: [ 387.580469][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 387.685696][ T28] #1: ffffc9000611fd00 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 387.792795][ T28] #2: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 [ 387.990007][ T28] 5 locks held by kworker/u4:13/4996: [ 387.996038][ T28] #0: ffff88801761e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 388.081389][ T4290] Bluetooth: hci13: command 0x040f tx timeout [ 388.170840][ T28] #1: ffffc90006177d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 388.273365][ T28] #2: ffffffff8dd4ead0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 388.369773][ T28] #3: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xee/0x9f0 [ 388.531715][ T28] #4: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 388.641907][ T28] 2 locks held by syz-executor/5023: [ 388.647870][ T28] #0: ffffffff8dd4ead0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x324/0x5b0 [ 388.809798][ T28] #1: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: fib_net_exit_batch+0x1c/0x90 [ 388.991221][ T28] 2 locks held by syz-executor/5037: [ 388.997274][ T28] #0: ffffffff8dd4ead0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x324/0x5b0 [ 389.142371][ T28] #1: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: ife_exit_net+0x2c/0x100 [ 389.229855][ T28] 2 locks held by syz-executor/5042: [ 389.235684][ T28] #0: ffffffff8dd4ead0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x324/0x5b0 [ 389.397589][ T28] #1: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: ip6mr_net_exit_batch+0x1c/0x90 [ 389.520831][ T28] 2 locks held by syz-executor/5051: [ 389.526522][ T28] #0: ffffffff8dd4ead0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x324/0x5b0 [ 389.699899][ T28] #1: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_delete_nets+0xd2/0x370 [ 389.813765][ T28] 2 locks held by syz-executor/5054: [ 389.819437][ T28] #0: ffffffff8dd4ead0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x324/0x5b0 [ 390.010498][ T28] #1: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x7fd/0xbd0 [ 390.149750][ T28] 2 locks held by syz-executor/5057: [ 390.155385][ T28] #0: ffffffff8dd4ead0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x324/0x5b0 [ 390.170683][ T4290] Bluetooth: hci13: command 0x0419 tx timeout [ 390.374459][ T28] #1: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_delete_nets+0xd2/0x370 [ 390.421991][ T28] 2 locks held by syz-executor/5059: [ 390.427823][ T28] #0: ffffffff8dd4ead0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x324/0x5b0 [ 390.580023][ T28] #1: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x29c/0x7a0 [ 390.721578][ T28] 2 locks held by syz-executor/5061: [ 390.727364][ T28] #0: ffffffff8dd4ead0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x324/0x5b0 [ 390.929776][ T28] #1: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x29c/0x7a0 [ 391.040234][ T28] 1 lock held by syz-executor/5065: [ 391.046115][ T28] 1 lock held by syz-executor/5068: [ 391.212856][ T28] 1 lock held by syz-executor/5069: [ 391.218468][ T28] 1 lock held by syz-executor/5073: