last executing test programs: 3.919931506s ago: executing program 2 (id=128): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x14, r1, 0x321, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x140048c0}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002340)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x84004}, 0x20000080) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x4000000) 3.607718294s ago: executing program 2 (id=132): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0xfa, 0x81, 0x8, 0x7, 0x2d, 0xb8, 0x5, 0x8, 0x9, 0x3, 0x3, 0xa, 0x6, 0xe}, 0xe) 3.491368614s ago: executing program 2 (id=135): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x2) socket(0x10, 0x803, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) socket$netlink(0x10, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x50040, &(0x7f0000000500)={0x11, 0xb, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 2.73996648s ago: executing program 2 (id=143): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4c, 0xed, 0xfe, 0x4d, 0x0, 0xa, 0x64, 0xe, 0x9, 0x3d, [0xffff, 0xfffffffd, 0xa, 0xfff, 0xd50, 0x2000009, 0x8001]}}) 2.587818342s ago: executing program 2 (id=145): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x88801) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x10}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'geneve1\x00', 0x200}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000280)={0x0, 0x10, 0x2, &(0x7f00000000c0)={0x13, "c2ba2cdddf96c2d905bd4296ce341591ddc08dbe750690648bd79a7fbf3d4cefc6"}}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) 1.44017416s ago: executing program 1 (id=163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a011e00000000000000000a0000060900020073797a31000000000900010073797a3100000000140003"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.268622173s ago: executing program 1 (id=164): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x2, 0xa, 0x0, 0x2, 0x2}, 0x10}}, 0x0) 1.215972452s ago: executing program 1 (id=165): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x400, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) syz_usb_connect(0xe7af3cf0599a7105, 0x24, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x8dc3, 0x900) 604.693119ms ago: executing program 1 (id=168): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000140000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0) 604.476044ms ago: executing program 3 (id=169): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180), 0x4) 559.199972ms ago: executing program 3 (id=170): setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000080)=0x3, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={r2, 0xbd24, 0x4, 0x8000, 0x8, 0x9, 0x0, 0x4, {0x0, @in6={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1}}, 0x8, 0x545, 0x8, 0x7, 0x81}}, &(0x7f00000001c0)=0xb0) 528.276623ms ago: executing program 1 (id=171): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, r1, 0x301, 0x70bd2c, 0x5, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040004) 465.047921ms ago: executing program 3 (id=172): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x21, 0x0, 0x4) 464.855527ms ago: executing program 1 (id=173): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) write$tun(r1, 0x0, 0xb6) write$cgroup_subtree(r1, 0x0, 0xfe33) 417.492576ms ago: executing program 0 (id=174): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1600, 0xd30, 0x4, 0xe, 0x3, 0xd5fe, 0x0, 0x400]}}]}]}]}, 0x38}}, 0x40) 411.617122ms ago: executing program 3 (id=175): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) 348.960215ms ago: executing program 2 (id=176): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x400, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) syz_usb_connect(0xe7af3cf0599a7105, 0x24, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x8dc3, 0x900) 292.416111ms ago: executing program 0 (id=177): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000018c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x800) 272.278594ms ago: executing program 3 (id=178): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d28616573290000000000000000000000000000000000000000000000001c000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 230.335552ms ago: executing program 0 (id=179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x28008000}, 0x20000800) 165.02482ms ago: executing program 3 (id=180): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r1], 0x7c}}, 0x20000000) 121.385018ms ago: executing program 0 (id=181): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_coalesce={0x1, 0x2, 0x9295, 0xf86, 0x0, 0x5b9b8ab7, 0xbc95, 0x3, 0x1b9, 0x0, 0x1, 0x3, 0x1741, 0x4, 0x6, 0x7, 0xfffffff5, 0xfffffffe, 0xa236, 0x1, 0x1, 0xfb, 0x5}}) 92.010789ms ago: executing program 0 (id=182): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x21, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000040000100fcff0700040000000100000004004880300001802c00108014000c80100090800c00588008007300", @ANYRES32=0x0, @ANYBLOB="14000c00000093b0b9a052bc946d050000000000080002"], 0x50}, 0x1, 0x0, 0x0, 0x4000805}, 0x2004c094) 0s ago: executing program 0 (id=183): socket$inet6_tcp(0xa, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.17' (ED25519) to the list of known hosts. [ 67.076936][ T5588] cgroup: Unknown subsys name 'net' [ 67.318562][ T5588] cgroup: Unknown subsys name 'cpuset' [ 67.384349][ T5588] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.994528][ T5588] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.233906][ T5601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.244755][ T5601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.246438][ T5601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.248597][ T5601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.250565][ T5601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.270014][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.270830][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.312292][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.323115][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.331175][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.341465][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.352831][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.356855][ T5601] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.381480][ T5601] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.385027][ T5601] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.409602][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.410811][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.538118][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.541234][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.542766][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.583102][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.592715][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.230265][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.230946][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.231094][ T5604] bridge_slave_0: entered allmulticast mode [ 73.232905][ T5604] bridge_slave_0: entered promiscuous mode [ 73.283811][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.287050][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.287323][ T5604] bridge_slave_1: entered allmulticast mode [ 73.291091][ T5604] bridge_slave_1: entered promiscuous mode [ 73.314731][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.314891][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.315022][ T5599] bridge_slave_0: entered allmulticast mode [ 73.316720][ T5599] bridge_slave_0: entered promiscuous mode [ 73.318755][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.319040][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.319522][ T5603] bridge_slave_0: entered allmulticast mode [ 73.321244][ T5603] bridge_slave_0: entered promiscuous mode [ 73.334962][ T60] Bluetooth: hci0: command tx timeout [ 73.378465][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.379632][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.379849][ T5599] bridge_slave_1: entered allmulticast mode [ 73.385245][ T5599] bridge_slave_1: entered promiscuous mode [ 73.388261][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.388545][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.388755][ T5603] bridge_slave_1: entered allmulticast mode [ 73.391776][ T5603] bridge_slave_1: entered promiscuous mode [ 73.415675][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.415998][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.416215][ T5611] bridge_slave_0: entered allmulticast mode [ 73.419163][ T5611] bridge_slave_0: entered promiscuous mode [ 73.469720][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.470087][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.470363][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.470586][ T5611] bridge_slave_1: entered allmulticast mode [ 73.472338][ T5611] bridge_slave_1: entered promiscuous mode [ 73.494059][ T60] Bluetooth: hci2: command tx timeout [ 73.495862][ T60] Bluetooth: hci1: command tx timeout [ 73.525247][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.546380][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.550501][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.588505][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.591315][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.621751][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.654287][ T5607] Bluetooth: hci3: command tx timeout [ 73.656218][ T5604] team0: Port device team_slave_0 added [ 73.661488][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.697201][ T5604] team0: Port device team_slave_1 added [ 73.716900][ T5599] team0: Port device team_slave_0 added [ 73.719586][ T5603] team0: Port device team_slave_0 added [ 73.751805][ T5599] team0: Port device team_slave_1 added [ 73.759839][ T5603] team0: Port device team_slave_1 added [ 74.110664][ T5611] team0: Port device team_slave_0 added [ 74.139856][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.139865][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.139879][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.152065][ T5611] team0: Port device team_slave_1 added [ 74.198646][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.198659][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.198682][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.222961][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.222975][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.222997][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.229028][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.229041][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.229063][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.272429][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.272442][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.272465][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.276692][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.276705][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.276728][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.287030][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.287043][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.287066][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.316315][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.316328][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.316351][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.443748][ T5604] hsr_slave_0: entered promiscuous mode [ 74.446168][ T5604] hsr_slave_1: entered promiscuous mode [ 74.535719][ T5599] hsr_slave_0: entered promiscuous mode [ 74.537121][ T5599] hsr_slave_1: entered promiscuous mode [ 74.538090][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 74.538161][ T5599] Cannot create hsr debugfs directory [ 74.545602][ T5603] hsr_slave_0: entered promiscuous mode [ 74.547934][ T5603] hsr_slave_1: entered promiscuous mode [ 74.550198][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 74.550218][ T5603] Cannot create hsr debugfs directory [ 74.602138][ T5611] hsr_slave_0: entered promiscuous mode [ 74.603271][ T5611] hsr_slave_1: entered promiscuous mode [ 74.604699][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 74.604720][ T5611] Cannot create hsr debugfs directory [ 75.342195][ T5604] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.406288][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.415287][ T5607] Bluetooth: hci0: command tx timeout [ 75.428613][ T5604] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.459200][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.462464][ T5604] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.499082][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.518095][ T5604] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.547071][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.575116][ T60] Bluetooth: hci2: command tx timeout [ 75.575197][ T5607] Bluetooth: hci1: command tx timeout [ 75.695450][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.734919][ T5607] Bluetooth: hci3: command tx timeout [ 75.741024][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.744799][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.779736][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.789205][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.817257][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.836453][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.877137][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.013446][ T5603] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.057818][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.071284][ T5603] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.107739][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.122090][ T5603] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.147820][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.170689][ T5603] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.207146][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.322796][ T5599] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.359249][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.370783][ T5599] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.397646][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.410295][ T5599] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.447053][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.450910][ T5599] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.470529][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.497145][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.591962][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.649079][ T2226] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.650055][ T2226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.687443][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.727021][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.729798][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.818382][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.865723][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.865934][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.892525][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.915268][ T2226] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.915484][ T2226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.015203][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.063433][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.076833][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.078212][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.142627][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.143163][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.236521][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.290336][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.290578][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.359332][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.359507][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.496024][ T5607] Bluetooth: hci0: command tx timeout [ 77.659430][ T5607] Bluetooth: hci1: command tx timeout [ 77.659459][ T5607] Bluetooth: hci2: command tx timeout [ 77.819142][ T60] Bluetooth: hci3: command tx timeout [ 78.077566][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.425476][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.511412][ T5604] veth0_vlan: entered promiscuous mode [ 78.565205][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.586068][ T5604] veth1_vlan: entered promiscuous mode [ 78.728589][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.757519][ T5611] veth0_vlan: entered promiscuous mode [ 78.824817][ T5604] veth0_macvtap: entered promiscuous mode [ 78.841944][ T5611] veth1_vlan: entered promiscuous mode [ 78.851092][ T5603] veth0_vlan: entered promiscuous mode [ 78.864890][ T5604] veth1_macvtap: entered promiscuous mode [ 78.910275][ T5603] veth1_vlan: entered promiscuous mode [ 78.949352][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.973741][ T5599] veth0_vlan: entered promiscuous mode [ 78.985554][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.021826][ T2240] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.035939][ T2240] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.036570][ T5599] veth1_vlan: entered promiscuous mode [ 79.040444][ T5611] veth0_macvtap: entered promiscuous mode [ 79.056444][ T2240] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.075287][ T2240] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.086487][ T5611] veth1_macvtap: entered promiscuous mode [ 79.161124][ T5603] veth0_macvtap: entered promiscuous mode [ 79.235874][ T5603] veth1_macvtap: entered promiscuous mode [ 79.378916][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.473823][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.512241][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.534238][ T5599] veth0_macvtap: entered promiscuous mode [ 79.568897][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.573328][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.576563][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.582898][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.582918][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.585250][ T60] Bluetooth: hci0: command tx timeout [ 79.631938][ T5599] veth1_macvtap: entered promiscuous mode [ 79.646600][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.661710][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.695056][ T2240] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.713113][ T2240] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.737857][ T5607] Bluetooth: hci1: command tx timeout [ 79.737897][ T60] Bluetooth: hci2: command tx timeout [ 79.760721][ T2240] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.773508][ T2240] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.779153][ T2240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.779169][ T2240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.843529][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.896609][ T60] Bluetooth: hci3: command tx timeout [ 80.031957][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.292690][ T2226] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.377939][ T2226] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.398174][ T2226] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.429996][ T2226] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.461085][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.461101][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.771942][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.771959][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.660905][ T1253] cfg80211: failed to load regulatory.db [ 82.858653][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.858672][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.111059][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.111076][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.227236][ T124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.227254][ T124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.589019][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.589038][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.994394][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.369719][ T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 84.369736][ T9] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 84.369747][ T9] usb 2-1: Product: syz [ 84.369754][ T9] usb 2-1: SerialNumber: syz [ 84.517141][ T32] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.591401][ T9] usb 2-1: config 0 descriptor?? [ 84.705895][ T32] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 84.705923][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.705942][ T32] usb 4-1: Product: syz [ 84.705956][ T32] usb 4-1: Manufacturer: syz [ 84.705969][ T32] usb 4-1: SerialNumber: syz [ 85.031545][ T32] usb 4-1: config 0 descriptor?? [ 85.158429][ T9] usb 2-1: USB disconnect, device number 2 [ 86.453809][ T32] usb 4-1: USB disconnect, device number 2 [ 86.737444][ T5787] syz.1.12 (5787) used greatest stack depth: 18112 bytes left [ 87.737168][ T32] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.947773][ T32] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 87.947790][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.947800][ T32] usb 2-1: Product: syz [ 87.947808][ T32] usb 2-1: Manufacturer: syz [ 87.947815][ T32] usb 2-1: SerialNumber: syz [ 87.998329][ T32] usb 2-1: config 0 descriptor?? [ 88.278507][ T1253] usb 2-1: USB disconnect, device number 3 [ 89.058164][ T5841] capability: warning: `syz.0.34' uses deprecated v2 capabilities in a way that may be insecure [ 89.704298][ T1253] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.936033][ T1253] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 89.936062][ T1253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.936081][ T1253] usb 4-1: Product: syz [ 89.936095][ T1253] usb 4-1: Manufacturer: syz [ 89.936108][ T1253] usb 4-1: SerialNumber: syz [ 89.946980][ T1253] usb 4-1: config 0 descriptor?? [ 90.202079][ T1253] usb 4-1: USB disconnect, device number 3 [ 91.178374][ T5755] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.324255][ T5755] usb 3-1: Using ep0 maxpacket: 32 [ 91.344865][ T5755] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 91.344888][ T5755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.344905][ T5755] usb 3-1: Product: syz [ 91.344918][ T5755] usb 3-1: Manufacturer: syz [ 91.344931][ T5755] usb 3-1: SerialNumber: syz [ 91.398449][ T5755] usb 3-1: config 0 descriptor?? [ 91.524548][ T5674] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 91.635884][ T5755] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 002 [ 91.693030][ T5674] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 91.693059][ T5674] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 91.693078][ T5674] usb 2-1: Product: syz [ 91.693093][ T5674] usb 2-1: SerialNumber: syz [ 91.740527][ T5674] usb 2-1: config 0 descriptor?? [ 91.970757][ T5674] hso 2-1:0.0: Failed to find INT IN ep [ 92.189252][ T5674] usb 2-1: USB disconnect, device number 4 [ 92.301508][ T5905] i2c i2c-1: failure reading status [ 92.507345][ T5755] usb 3-1: USB disconnect, device number 2 [ 92.784244][ T5688] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 92.934028][ T5688] usb 4-1: Using ep0 maxpacket: 32 [ 92.944551][ T5688] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 92.944575][ T5688] usb 4-1: config 0 has no interface number 0 [ 92.944617][ T5688] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 92.944639][ T5688] usb 4-1: config 0 interface 89 has no altsetting 0 [ 92.983301][ T5688] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 92.983327][ T5688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.983345][ T5688] usb 4-1: Product: syz [ 92.983359][ T5688] usb 4-1: Manufacturer: syz [ 92.983373][ T5688] usb 4-1: SerialNumber: syz [ 93.035466][ T5688] usb 4-1: config 0 descriptor?? [ 93.056389][ T5688] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 93.056422][ T5688] em28xx 4-1:0.89: Video interface 89 found: [ 93.707668][ T5688] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 94.354138][ T1253] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.409981][ T5688] em28xx 4-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 94.410010][ T5688] em28xx 4-1:0.89: board has no eeprom [ 94.464102][ T5688] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 94.464144][ T5688] em28xx 4-1:0.89: analog set to bulk mode. [ 94.464408][ T5687] em28xx 4-1:0.89: Registering V4L2 extension [ 94.524499][ T1253] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 94.524530][ T1253] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 94.524549][ T1253] usb 3-1: Product: syz [ 94.524563][ T1253] usb 3-1: SerialNumber: syz [ 94.563327][ T5688] usb 4-1: USB disconnect, device number 4 [ 94.590201][ T5688] em28xx 4-1:0.89: Disconnecting em28xx [ 94.600274][ T1253] usb 3-1: config 0 descriptor?? [ 94.644713][ T5687] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 94.644732][ T5687] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 94.644745][ T5687] em28xx 4-1:0.89: No AC97 audio processor [ 94.737238][ T5687] usb 4-1: Decoder not found [ 94.737255][ T5687] em28xx 4-1:0.89: failed to create media graph [ 94.737357][ T5687] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 94.813698][ T5687] em28xx 4-1:0.89: Registering snapshot button... [ 94.858906][ T5687] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input5 [ 94.862055][ T1253] hso 3-1:0.0: Failed to find INT IN ep [ 94.923408][ T5687] em28xx 4-1:0.89: Remote control support is not available for this card. [ 94.930490][ T5688] em28xx 4-1:0.89: Closing input extension [ 94.931032][ T5688] em28xx 4-1:0.89: Deregistering snapshot button [ 95.134239][ T5755] usb 3-1: USB disconnect, device number 3 [ 95.392211][ T5688] em28xx 4-1:0.89: Freeing device [ 95.407501][ T5939] syz.0.79 (5939) used greatest stack depth: 18088 bytes left [ 96.014139][ T5674] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.165824][ T5674] usb 1-1: Using ep0 maxpacket: 32 [ 96.183112][ T5674] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 96.183140][ T5674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.183160][ T5674] usb 1-1: Product: syz [ 96.183174][ T5674] usb 1-1: Manufacturer: syz [ 96.183188][ T5674] usb 1-1: SerialNumber: syz [ 96.243823][ T5674] usb 1-1: config 0 descriptor?? [ 96.498019][ T5674] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 002 [ 97.136194][ T5963] i2c i2c-1: failure reading status [ 97.341289][ T5703] usb 1-1: USB disconnect, device number 2 [ 97.708287][ T6003] Zero length message leads to an empty skb [ 97.999527][ T6009] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 98.800422][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 98.966536][ T9] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 98.966566][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.966585][ T9] usb 3-1: Product: syz [ 98.966599][ T9] usb 3-1: Manufacturer: syz [ 98.966613][ T9] usb 3-1: SerialNumber: syz [ 99.022873][ T9] usb 3-1: config 0 descriptor?? [ 99.127534][ T5687] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 99.290234][ T5687] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 99.290263][ T5687] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 99.290282][ T5687] usb 4-1: Product: syz [ 99.290296][ T5687] usb 4-1: SerialNumber: syz [ 99.292978][ T1253] usb 3-1: USB disconnect, device number 4 [ 99.398844][ T5687] usb 4-1: config 0 descriptor?? [ 99.644725][ T5687] hso 4-1:0.0: Failed to find BULK eps [ 99.834834][ T5703] usb 4-1: USB disconnect, device number 5 [ 99.933195][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.134027][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 100.137955][ T9] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 100.137980][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.137999][ T9] usb 1-1: Product: syz [ 100.138012][ T9] usb 1-1: Manufacturer: syz [ 100.138026][ T9] usb 1-1: SerialNumber: syz [ 100.151244][ T9] usb 1-1: config 0 descriptor?? [ 100.389549][ T9] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 003 [ 101.004352][ T5937] Set syz1 is full, maxelem 65536 reached [ 101.037029][ T6030] i2c i2c-1: failure reading status [ 101.241979][ T9] usb 1-1: USB disconnect, device number 3 [ 101.802819][ T6066] syzkaller0: entered promiscuous mode [ 101.802844][ T6066] syzkaller0: entered allmulticast mode [ 102.635114][ T6064] Set syz1 is full, maxelem 65536 reached [ 102.955881][ T5688] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 103.124041][ T5688] usb 3-1: Using ep0 maxpacket: 32 [ 103.142130][ T5688] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 103.142155][ T5688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.142175][ T5688] usb 3-1: Product: syz [ 103.142188][ T5688] usb 3-1: Manufacturer: syz [ 103.142203][ T5688] usb 3-1: SerialNumber: syz [ 103.194158][ T5688] usb 3-1: config 0 descriptor?? [ 103.487660][ T5703] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.506645][ T5688] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 005 [ 103.642279][ T5703] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 103.642296][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 103.642408][ T5703] usb 1-1: Product: syz [ 103.642416][ T5703] usb 1-1: SerialNumber: syz [ 103.685625][ T6128] netlink: 20 bytes leftover after parsing attributes in process `syz.1.162'. [ 103.746903][ T5703] usb 1-1: config 0 descriptor?? [ 103.972872][ T5703] hso 1-1:0.0: Failed to find BULK eps [ 104.062122][ T6089] i2c i2c-1: failure reading status [ 104.173320][ T5688] usb 1-1: USB disconnect, device number 4 [ 104.263290][ T32] usb 3-1: USB disconnect, device number 5 [ 105.078953][ T6170] netlink: 'syz.0.182': attribute type 1 has an invalid length. [ 105.292153][ T5607] block nbd0: Receive control failed (result -107) [ 105.350002][ T6166] nbd0: detected capacity change from 0 to 63 [ 105.370796][ T60] block nbd0: Receive control failed (result -32) [ 105.379903][ T5954] [ 105.379911][ T5954] ====================================================== [ 105.379918][ T5954] WARNING: possible circular locking dependency detected [ 105.379933][ T5954] syzkaller #0 Not tainted [ 105.379941][ T5954] ------------------------------------------------------ [ 105.379948][ T5954] udevd/5954 is trying to acquire lock: [ 105.379957][ T5954] ffff88805af47860 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x37b/0x1100 [ 105.380005][ T5954] [ 105.380005][ T5954] but task is already holding lock: [ 105.380011][ T5954] ffff88805fe1e170 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 105.380053][ T5954] [ 105.380053][ T5954] which lock already depends on the new lock. [ 105.380053][ T5954] [ 105.380059][ T5954] [ 105.380059][ T5954] the existing dependency chain (in reverse order) is: [ 105.380065][ T5954] [ 105.380065][ T5954] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 105.380088][ T5954] mutex_lock_nested+0x5a/0x1d0 [ 105.380114][ T5954] nbd_queue_rq+0xc6/0x1100 [ 105.380131][ T5954] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 105.380154][ T5954] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 105.380178][ T5954] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 105.380201][ T5954] blk_mq_run_hw_queue+0x368/0x520 [ 105.380221][ T5954] blk_mq_dispatch_list+0xd1f/0xe20 [ 105.380243][ T5954] blk_mq_flush_plug_list+0x48d/0x570 [ 105.380265][ T5954] __blk_flush_plug+0x3ed/0x4d0 [ 105.380286][ T5954] __submit_bio+0x28d/0x580 [ 105.380308][ T5954] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 105.380330][ T5954] block_read_full_folio+0x581/0x810 [ 105.380354][ T5954] filemap_read_folio+0x137/0x3b0 [ 105.380372][ T5954] do_read_cache_folio+0x2bf/0x560 [ 105.380396][ T5954] read_part_sector+0xb8/0x2b0 [ 105.380415][ T5954] adfspart_check_ICS+0xb1/0x960 [ 105.380436][ T5954] bdev_disk_changed+0x840/0x1780 [ 105.380457][ T5954] blkdev_get_whole+0x2e5/0x480 [ 105.380480][ T5954] bdev_open+0x31e/0xcc0 [ 105.380501][ T5954] blkdev_open+0x485/0x620 [ 105.380523][ T5954] do_dentry_open+0x83d/0x13e0 [ 105.380547][ T5954] vfs_open+0x3b/0x350 [ 105.380569][ T5954] path_openat+0x2e24/0x37e0 [ 105.380588][ T5954] do_file_open+0x23e/0x4a0 [ 105.380606][ T5954] do_sys_openat2+0x115/0x200 [ 105.380620][ T5954] __x64_sys_openat+0x138/0x170 [ 105.380634][ T5954] do_syscall_64+0x174/0x580 [ 105.380654][ T5954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.380671][ T5954] [ 105.380671][ T5954] -> #5 (set->srcu){.+.+}-{0:0}: [ 105.380695][ T5954] __synchronize_srcu+0xca/0x300 [ 105.380715][ T5954] elevator_switch+0x1e8/0x7a0 [ 105.380735][ T5954] elevator_change+0x2cc/0x450 [ 105.380755][ T5954] elevator_set_default+0x36c/0x430 [ 105.380776][ T5954] blk_register_queue+0x3e9/0x4e0 [ 105.380798][ T5954] __add_disk+0x677/0xd50 [ 105.380812][ T5954] add_disk_fwnode+0xfb/0x480 [ 105.380827][ T5954] nbd_dev_add+0x72c/0xb50 [ 105.380843][ T5954] nbd_init+0x168/0x1f0 [ 105.380865][ T5954] do_one_initcall+0x250/0x870 [ 105.380885][ T5954] do_initcall_level+0x104/0x190 [ 105.380907][ T5954] do_initcalls+0x59/0xa0 [ 105.380927][ T5954] kernel_init_freeable+0x2a6/0x3e0 [ 105.380949][ T5954] kernel_init+0x1d/0x1d0 [ 105.380972][ T5954] ret_from_fork+0x514/0xb70 [ 105.380990][ T5954] ret_from_fork_asm+0x1a/0x30 [ 105.381011][ T5954] [ 105.381011][ T5954] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 105.381034][ T5954] mutex_lock_nested+0x5a/0x1d0 [ 105.381058][ T5954] elevator_change+0x1b3/0x450 [ 105.381078][ T5954] elevator_set_none+0xb5/0x140 [ 105.381098][ T5954] blk_mq_update_nr_hw_queues+0x607/0x1a80 [ 105.381123][ T5954] nbd_start_device+0x17f/0xb20 [ 105.381140][ T5954] nbd_genl_connect+0x1651/0x1c80 [ 105.381157][ T5954] genl_family_rcv_msg_doit+0x22a/0x330 [ 105.381183][ T5954] genl_rcv_msg+0x61c/0x7a0 [ 105.381206][ T5954] netlink_rcv_skb+0x232/0x4b0 [ 105.381224][ T5954] genl_rcv+0x28/0x40 [ 105.381246][ T5954] netlink_unicast+0x780/0x920 [ 105.381263][ T5954] netlink_sendmsg+0x813/0xb40 [ 105.381282][ T5954] sock_sendmsg_nosec+0x13a/0x180 [ 105.381306][ T5954] ____sys_sendmsg+0x55c/0x870 [ 105.381324][ T5954] ___sys_sendmsg+0x2a5/0x360 [ 105.381343][ T5954] __x64_sys_sendmsg+0x1b7/0x290 [ 105.381362][ T5954] do_syscall_64+0x174/0x580 [ 105.381388][ T5954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.381404][ T5954] [ 105.381404][ T5954] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 105.381432][ T5954] blk_alloc_queue+0x54e/0x690 [ 105.381451][ T5954] __blk_mq_alloc_disk+0x197/0x390 [ 105.381474][ T5954] nbd_dev_add+0x499/0xb50 [ 105.381490][ T5954] nbd_init+0x168/0x1f0 [ 105.381512][ T5954] do_one_initcall+0x250/0x870 [ 105.381530][ T5954] do_initcall_level+0x104/0x190 [ 105.381552][ T5954] do_initcalls+0x59/0xa0 [ 105.381573][ T5954] kernel_init_freeable+0x2a6/0x3e0 [ 105.381595][ T5954] kernel_init+0x1d/0x1d0 [ 105.381617][ T5954] ret_from_fork+0x514/0xb70 [ 105.381634][ T5954] ret_from_fork_asm+0x1a/0x30 [ 105.381655][ T5954] [ 105.381655][ T5954] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 105.381677][ T5954] fs_reclaim_acquire+0x71/0x100 [ 105.381694][ T5954] kmem_cache_alloc_node_noprof+0x6a/0x710 [ 105.381720][ T5954] __alloc_skb+0x1d0/0x7d0 [ 105.381736][ T5954] tcp_stream_alloc_skb+0x3f/0x5c0 [ 105.381754][ T5954] tcp_sendmsg_locked+0x134b/0x5370 [ 105.381771][ T5954] tcp_sendmsg+0x2f/0x50 [ 105.381788][ T5954] sock_sendmsg_nosec+0x10e/0x180 [ 105.381811][ T5954] sock_write_iter+0x2e4/0x3f0 [ 105.381833][ T5954] vfs_write+0x629/0xba0 [ 105.381850][ T5954] ksys_write+0x156/0x270 [ 105.381868][ T5954] do_syscall_64+0x174/0x580 [ 105.381887][ T5954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.381903][ T5954] [ 105.381903][ T5954] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 105.381927][ T5954] lock_sock_nested+0x41/0x130 [ 105.381950][ T5954] inet_shutdown+0x6a/0x390 [ 105.381965][ T5954] nbd_mark_nsock_dead+0x2e9/0x560 [ 105.381983][ T5954] recv_work+0x1c4b/0x1d60 [ 105.382001][ T5954] process_one_work+0x98b/0x1630 [ 105.382023][ T5954] worker_thread+0xb49/0x1140 [ 105.382046][ T5954] kthread+0x388/0x470 [ 105.382063][ T5954] ret_from_fork+0x514/0xb70 [ 105.382081][ T5954] ret_from_fork_asm+0x1a/0x30 [ 105.382101][ T5954] [ 105.382101][ T5954] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 105.382124][ T5954] __lock_acquire+0x15a5/0x2d10 [ 105.382144][ T5954] lock_acquire+0x106/0x350 [ 105.382162][ T5954] mutex_lock_nested+0x5a/0x1d0 [ 105.382186][ T5954] nbd_queue_rq+0x37b/0x1100 [ 105.382202][ T5954] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 105.382224][ T5954] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 105.382248][ T5954] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 105.382271][ T5954] blk_mq_run_hw_queue+0x368/0x520 [ 105.382290][ T5954] blk_mq_dispatch_list+0xd1f/0xe20 [ 105.382312][ T5954] blk_mq_flush_plug_list+0x48d/0x570 [ 105.382334][ T5954] __blk_flush_plug+0x3ed/0x4d0 [ 105.382355][ T5954] __submit_bio+0x28d/0x580 [ 105.382377][ T5954] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 105.382403][ T5954] block_read_full_folio+0x581/0x810 [ 105.382427][ T5954] filemap_read_folio+0x137/0x3b0 [ 105.382444][ T5954] do_read_cache_folio+0x2bf/0x560 [ 105.382462][ T5954] read_part_sector+0xb8/0x2b0 [ 105.382482][ T5954] adfspart_check_ICS+0xb1/0x960 [ 105.382504][ T5954] bdev_disk_changed+0x840/0x1780 [ 105.382525][ T5954] blkdev_get_whole+0x2e5/0x480 [ 105.382546][ T5954] bdev_open+0x31e/0xcc0 [ 105.382566][ T5954] blkdev_open+0x485/0x620 [ 105.382588][ T5954] do_dentry_open+0x83d/0x13e0 [ 105.382611][ T5954] vfs_open+0x3b/0x350 [ 105.382634][ T5954] path_openat+0x2e24/0x37e0 [ 105.382652][ T5954] do_file_open+0x23e/0x4a0 [ 105.382670][ T5954] do_sys_openat2+0x115/0x200 [ 105.382684][ T5954] __x64_sys_openat+0x138/0x170 [ 105.382698][ T5954] do_syscall_64+0x174/0x580 [ 105.382718][ T5954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.382734][ T5954] [ 105.382734][ T5954] other info that might help us debug this: [ 105.382734][ T5954] [ 105.382740][ T5954] Chain exists of: [ 105.382740][ T5954] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 105.382740][ T5954] [ 105.382767][ T5954] Possible unsafe locking scenario: [ 105.382767][ T5954] [ 105.382773][ T5954] CPU0 CPU1 [ 105.382778][ T5954] ---- ---- [ 105.382783][ T5954] lock(&cmd->lock); [ 105.382794][ T5954] lock(set->srcu); [ 105.382807][ T5954] lock(&cmd->lock); [ 105.382819][ T5954] lock(&nsock->tx_lock); [ 105.382831][ T5954] [ 105.382831][ T5954] *** DEADLOCK *** [ 105.382831][ T5954] [ 105.382836][ T5954] 3 locks held by udevd/5954: [ 105.382846][ T5954] #0: ffff8880266794c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 105.382891][ T5954] #1: ffff888026add818 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x33e/0x520 [ 105.382936][ T5954] #2: ffff88805fe1e170 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 105.382977][ T5954] [ 105.382977][ T5954] stack backtrace: [ 105.382997][ T5954] CPU: 0 UID: 0 PID: 5954 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 105.383017][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 105.383036][ T5954] Call Trace: [ 105.383046][ T5954] [ 105.383053][ T5954] dump_stack_lvl+0xe8/0x150 [ 105.383074][ T5954] print_circular_bug+0x2e1/0x300 [ 105.383100][ T5954] check_noncircular+0x12e/0x150 [ 105.383128][ T5954] __lock_acquire+0x15a5/0x2d10 [ 105.383158][ T5954] ? nbd_queue_rq+0x37b/0x1100 [ 105.383176][ T5954] lock_acquire+0x106/0x350 [ 105.383195][ T5954] ? nbd_queue_rq+0x37b/0x1100 [ 105.383215][ T5954] ? nbd_queue_rq+0x37b/0x1100 [ 105.383235][ T5954] ? nbd_queue_rq+0x37b/0x1100 [ 105.383253][ T5954] mutex_lock_nested+0x5a/0x1d0 [ 105.383277][ T5954] ? nbd_queue_rq+0x37b/0x1100 [ 105.383296][ T5954] nbd_queue_rq+0x37b/0x1100 [ 105.383319][ T5954] ? __pfx_nbd_queue_rq+0x10/0x10 [ 105.383340][ T5954] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 105.383364][ T5954] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 105.383399][ T5954] ? sbitmap_get+0x229/0x390 [ 105.383418][ T5954] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 105.383441][ T5954] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 105.383467][ T5954] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 105.383500][ T5954] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 105.383525][ T5954] ? blk_mq_hw_queue_need_run+0x13c/0x690 [ 105.383550][ T5954] ? blk_mq_run_hw_queue+0x33e/0x520 [ 105.383571][ T5954] ? blk_mq_run_hw_queue+0x33e/0x520 [ 105.383596][ T5954] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 105.383620][ T5954] ? blk_mq_run_hw_queue+0x33e/0x520 [ 105.383642][ T5954] blk_mq_run_hw_queue+0x368/0x520 [ 105.383664][ T5954] blk_mq_dispatch_list+0xd1f/0xe20 [ 105.383688][ T5954] ? bdev_count_inflight+0x1cf/0x210 [ 105.383705][ T5954] ? blk_mq_dispatch_list+0x190/0xe20 [ 105.383731][ T5954] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 105.383757][ T5954] ? rcu_is_watching+0x15/0xb0 [ 105.383783][ T5954] blk_mq_flush_plug_list+0x48d/0x570 [ 105.383806][ T5954] ? blk_add_rq_to_plug+0x300/0x450 [ 105.383829][ T5954] ? blk_mq_submit_bio+0x1c08/0x29e0 [ 105.383852][ T5954] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 105.383875][ T5954] ? blk_mq_submit_bio+0x302/0x29e0 [ 105.383901][ T5954] __blk_flush_plug+0x3ed/0x4d0 [ 105.383926][ T5954] ? __pfx___blk_flush_plug+0x10/0x10 [ 105.383952][ T5954] __submit_bio+0x28d/0x580 [ 105.383976][ T5954] ? __pfx___submit_bio+0x10/0x10 [ 105.384006][ T5954] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 105.384030][ T5954] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 105.384060][ T5954] block_read_full_folio+0x581/0x810 [ 105.384087][ T5954] ? __pfx_blkdev_get_block+0x10/0x10 [ 105.384114][ T5954] filemap_read_folio+0x137/0x3b0 [ 105.384133][ T5954] ? __pfx_blkdev_read_folio+0x10/0x10 [ 105.384158][ T5954] ? __pfx_filemap_read_folio+0x10/0x10 [ 105.384177][ T5954] ? filemap_add_folio+0x3d9/0x610 [ 105.384202][ T5954] ? __filemap_get_folio_mpol+0x9b8/0xf50 [ 105.384221][ T5954] do_read_cache_folio+0x2bf/0x560 [ 105.384241][ T5954] ? __pfx_blkdev_read_folio+0x10/0x10 [ 105.384267][ T5954] read_part_sector+0xb8/0x2b0 [ 105.384291][ T5954] adfspart_check_ICS+0xb1/0x960 [ 105.384314][ T5954] ? seq_buf_printf+0x212/0x2d0 [ 105.384339][ T5954] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 105.384363][ T5954] ? __kmalloc_cache_noprof+0x3d0/0x6d0 [ 105.384387][ T5954] ? bdev_disk_changed+0x573/0x1780 [ 105.384409][ T5954] ? bdev_disk_changed+0x573/0x1780 [ 105.384433][ T5954] bdev_disk_changed+0x840/0x1780 [ 105.384464][ T5954] ? __pfx_bdev_disk_changed+0x10/0x10 [ 105.384488][ T5954] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 105.384511][ T5954] blkdev_get_whole+0x2e5/0x480 [ 105.384535][ T5954] bdev_open+0x31e/0xcc0 [ 105.384562][ T5954] blkdev_open+0x485/0x620 [ 105.384588][ T5954] ? __pfx_blkdev_open+0x10/0x10 [ 105.384612][ T5954] do_dentry_open+0x83d/0x13e0 [ 105.384641][ T5954] vfs_open+0x3b/0x350 [ 105.384665][ T5954] ? path_openat+0x2e04/0x37e0 [ 105.384686][ T5954] path_openat+0x2e24/0x37e0 [ 105.384707][ T5954] ? __lock_acquire+0x6b5/0x2d10 [ 105.384729][ T5954] ? kmem_cache_alloc_noprof+0x354/0x6c0 [ 105.384755][ T5954] ? do_sys_openat2+0xcc/0x200 [ 105.384779][ T5954] do_file_open+0x23e/0x4a0 [ 105.384799][ T5954] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 105.384821][ T5954] ? __pfx_do_file_open+0x10/0x10 [ 105.384840][ T5954] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 105.384864][ T5954] ? alloc_fd+0x679/0x6f0 [ 105.384884][ T5954] do_sys_openat2+0x115/0x200 [ 105.384901][ T5954] ? __pfx_do_sys_openat2+0x10/0x10 [ 105.384917][ T5954] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 105.384941][ T5954] __x64_sys_openat+0x138/0x170 [ 105.384959][ T5954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.384977][ T5954] do_syscall_64+0x174/0x580 [ 105.384998][ T5954] ? clear_bhb_loop+0x40/0x90 [ 105.385018][ T5954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.385035][ T5954] RIP: 0033:0x7fac04100407 [ 105.385056][ T5954] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 105.385071][ T5954] RSP: 002b:00007ffec653acb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 105.385089][ T5954] RAX: ffffffffffffffda RBX: 00007fac04012880 RCX: 00007fac04100407 [ 105.385103][ T5954] RDX: 00000000000a0800 RSI: 0000558fa4585e40 RDI: ffffffffffffff9c [ 105.385115][ T5954] RBP: 0000558fa4576910 R08: 0000000000000000 R09: 0000000000000000 [ 105.385126][ T5954] R10: 0000000000000000 R11: 0000000000000202 R12: 0000558fa459ac80 [ 105.385137][ T5954] R13: 0000558fa4584190 R14: 0000000000000000 R15: 0000558fa459ac80 [ 105.385156][ T5954] [ 105.391762][ T5688] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 105.403718][ T5954] block nbd0: Dead connection, failed to find a fallback [ 105.403738][ T5954] block nbd0: shutting down sockets [ 105.403751][ T5954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.405322][ T5954] Buffer I/O error on dev nbd0, logical block 0, async page read [ 105.406188][ T5954] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.406252][ T5954] Buffer I/O error on dev nbd0, logical block 1, async page read [ 105.406858][ T5954] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.408238][ T5954] Buffer I/O error on dev nbd0, logical block 2, async page read [ 105.408298][ T5954] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.408839][ T5954] Buffer I/O error on dev nbd0, logical block 3, async page read [ 105.408904][ T5954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.409502][ T5954] Buffer I/O error on dev nbd0, logical block 0, async page read [ 105.409887][ T5954] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.409949][ T5954] Buffer I/O error on dev nbd0, logical block 1, async page read [ 105.410622][ T5954] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.411326][ T5954] Buffer I/O error on dev nbd0, logical block 2, async page read [ 105.411389][ T5954] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.412223][ T5954] Buffer I/O error on dev nbd0, logical block 3, async page read [ 105.412287][ T5954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.412958][ T5954] Buffer I/O error on dev nbd0, logical block 0, async page read [ 105.413713][ T5954] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.413812][ T5954] Buffer I/O error on dev nbd0, logical block 1, async page read [ 105.427656][ T5954] ldm_validate_partition_table(): Disk read failed. [ 105.437393][ T5954] Dev nbd0: unable to read RDB block 0 [ 105.445780][ T5954] nbd0: unable to read partition table [ 105.461923][ T5954] ldm_validate_partition_table(): Disk read failed. [ 105.463681][ T5954] Dev nbd0: unable to read RDB block 0 [ 105.467738][ T5954] nbd0: unable to read partition table [ 105.639423][ T5688] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 105.639457][ T5688] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 105.639476][ T5688] usb 1-1: Product: syz [ 105.639490][ T5688] usb 1-1: SerialNumber: syz [ 105.641731][ T5688] usb 1-1: config 0 descriptor?? [ 105.877759][ T5688] hso 1-1:0.0: Failed to find BULK eps [ 106.080310][ T5688] usb 1-1: USB disconnect, device number 5