last executing test programs: 1.796132048s ago: executing program 2 (id=3): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe0, 0x1, 0x1, 0x40, 0x8087, 0x25, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe0, 0x1, 0x1}}]}}]}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000200)="4a00000011007f0314066f9a70932d490675bc59083301", 0x17) write(r0, &(0x7f0000000240)="4a00010011007f0314066f9a70932d490675bc59083301", 0x17) 1.057423837s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x42, 0x1ff) ftruncate(r1, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='./file0\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r5, &(0x7f00000003c0)='loop\x00', 0x4) symlinkat(&(0x7f0000000400)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/subsystems/testnqn\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write(r6, &(0x7f00000004c0)='transport=loop,nqn=testnqn\x00', 0x1a) nanosleep(&(0x7f0000000500)={0x0, 0x10000000}, 0x0) 921.824633ms ago: executing program 4 (id=5): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040e91700000000000000010902120001010080fa0904000000ff000000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/dri/2/VGA-1/edid_override\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/dri/3/VGA-1/edid_override\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="00ffffffffffff0004430000000000000000010480000000010000000000000000000000000001010101010101010101010101010101000000fd00000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a", 0x80) write(r1, &(0x7f0000000400)="00ffffffffffff0004430000000000000000010480000000010000000000000000000000000001010101010101010101010101010101000000fd00000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a", 0x80) r2 = syz_open_dev$dri(&(0x7f0000000500), 0x2, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000540), 0x2, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) 361.53482ms ago: executing program 3 (id=7): r0 = syz_usb_connect(0x2, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001ffffff40cd0c39000101000000010902200001010080320904000002ffffff000705810240000007050102400000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="0812") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b4') syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') clock_nanosleep(0x0, 0x0, &(0x7f0000000200)={0x2}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5446, 0x0) 0s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/target/core/rd_mcp_0/rd1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/core/rd_mcp_0/rd1/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='rd_pages=32768\x00', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/core/rd_mcp_0/rd1/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='0x1d6b\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r4, &(0x7f0000000880)='naa.6001405123456789\x00', 0x14) symlinkat(&(0x7f00000008c0)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r5, &(0x7f0000000980)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000000)={0x1}, 0x0) r6 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000100)={0x53, 0xfffffffe, 0xa, 0x0, @buffer={0x0, 0x1c, &(0x7f0000000200)=""/28}, &(0x7f0000000300)="5f000000000000001c00", &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts. [ 84.523756][ T5605] cgroup: Unknown subsys name 'net' [ 84.638518][ T5605] cgroup: Unknown subsys name 'cpuset' [ 84.648042][ T5605] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.341664][ T5605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.967589][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.977310][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.986088][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.000357][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.008002][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.016492][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.024775][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.044105][ T5638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.052820][ T5638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.067861][ T5638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.079938][ T5634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.085465][ T5642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.088423][ T5638] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.096866][ T5642] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.103636][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.116288][ T5638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.117084][ T5642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.123777][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.139579][ T5638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.140345][ T5642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.149142][ T5638] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.154880][ T5642] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.161008][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.169381][ T5642] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.178419][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.182031][ T5642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.196094][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.205838][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.215873][ T4935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.222922][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.211585][ T9] cfg80211: failed to load regulatory.db [ 91.274143][ T5625] Bluetooth: hci1: command tx timeout [ 91.274331][ T5630] Bluetooth: hci4: command tx timeout [ 91.280119][ T5625] Bluetooth: hci0: command tx timeout [ 91.285950][ T4935] Bluetooth: hci3: command tx timeout [ 91.291645][ T5621] Bluetooth: hci5: command tx timeout [ 91.297810][ T5633] Bluetooth: hci2: command tx timeout [ 91.921685][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.931732][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.938966][ T5629] bridge_slave_0: entered allmulticast mode [ 91.946666][ T5629] bridge_slave_0: entered promiscuous mode [ 92.014974][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.022312][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.029748][ T5629] bridge_slave_1: entered allmulticast mode [ 92.037279][ T5629] bridge_slave_1: entered promiscuous mode [ 92.082079][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.089261][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.096734][ T5619] bridge_slave_0: entered allmulticast mode [ 92.104536][ T5619] bridge_slave_0: entered promiscuous mode [ 92.146106][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.153233][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.160644][ T5620] bridge_slave_0: entered allmulticast mode [ 92.168248][ T5620] bridge_slave_0: entered promiscuous mode [ 92.188976][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.196204][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.203366][ T5619] bridge_slave_1: entered allmulticast mode [ 92.211965][ T5619] bridge_slave_1: entered promiscuous mode [ 92.269270][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.276455][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.283653][ T5620] bridge_slave_1: entered allmulticast mode [ 92.291169][ T5620] bridge_slave_1: entered promiscuous mode [ 92.326636][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.333862][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.341204][ T5627] bridge_slave_0: entered allmulticast mode [ 92.348956][ T5627] bridge_slave_0: entered promiscuous mode [ 92.360163][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.399403][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.408955][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.416658][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.424022][ T5627] bridge_slave_1: entered allmulticast mode [ 92.431709][ T5627] bridge_slave_1: entered promiscuous mode [ 92.442248][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.492486][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.541744][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.603337][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.610989][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.618395][ T5622] bridge_slave_0: entered allmulticast mode [ 92.626011][ T5622] bridge_slave_0: entered promiscuous mode [ 92.636832][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.646223][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.653346][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.660821][ T5628] bridge_slave_0: entered allmulticast mode [ 92.668378][ T5628] bridge_slave_0: entered promiscuous mode [ 92.692136][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.703912][ T5629] team0: Port device team_slave_0 added [ 92.709872][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.723030][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.730312][ T5622] bridge_slave_1: entered allmulticast mode [ 92.738268][ T5622] bridge_slave_1: entered promiscuous mode [ 92.757401][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.764562][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.771715][ T5628] bridge_slave_1: entered allmulticast mode [ 92.779743][ T5628] bridge_slave_1: entered promiscuous mode [ 92.788847][ T5619] team0: Port device team_slave_0 added [ 92.797527][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.809021][ T5629] team0: Port device team_slave_1 added [ 92.872583][ T5619] team0: Port device team_slave_1 added [ 92.919870][ T5620] team0: Port device team_slave_0 added [ 92.965181][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.972192][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.998222][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.013289][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.025405][ T5620] team0: Port device team_slave_1 added [ 93.033810][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.059286][ T5627] team0: Port device team_slave_0 added [ 93.065877][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.072882][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.098836][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.112734][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.149794][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.159760][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.166917][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.193163][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.208169][ T5627] team0: Port device team_slave_1 added [ 93.261513][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.268876][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.295628][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.334200][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.341230][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.353690][ T5630] Bluetooth: hci4: command tx timeout [ 93.367200][ T5625] Bluetooth: hci1: command tx timeout [ 93.367245][ T5625] Bluetooth: hci0: command tx timeout [ 93.367278][ T5625] Bluetooth: hci5: command tx timeout [ 93.368203][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.372812][ T4935] Bluetooth: hci3: command tx timeout [ 93.383025][ T5622] team0: Port device team_slave_0 added [ 93.383585][ T5633] Bluetooth: hci2: command tx timeout [ 93.416802][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.424234][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.450252][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.484924][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.491857][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.518160][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.541209][ T5622] team0: Port device team_slave_1 added [ 93.547573][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.554913][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.580846][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.594128][ T5628] team0: Port device team_slave_0 added [ 93.603250][ T5628] team0: Port device team_slave_1 added [ 93.710038][ T5629] hsr_slave_0: entered promiscuous mode [ 93.717008][ T5629] hsr_slave_1: entered promiscuous mode [ 93.728254][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.735252][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.761570][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.842102][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.849456][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.875429][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.893637][ T5619] hsr_slave_0: entered promiscuous mode [ 93.900338][ T5619] hsr_slave_1: entered promiscuous mode [ 93.906658][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 93.912432][ T5619] Cannot create hsr debugfs directory [ 93.919119][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.926099][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.952040][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.982543][ T5627] hsr_slave_0: entered promiscuous mode [ 93.989086][ T5627] hsr_slave_1: entered promiscuous mode [ 93.995444][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 94.001159][ T5627] Cannot create hsr debugfs directory [ 94.046054][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.053065][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.079657][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.110484][ T5620] hsr_slave_0: entered promiscuous mode [ 94.117828][ T5620] hsr_slave_1: entered promiscuous mode [ 94.124208][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 94.129943][ T5620] Cannot create hsr debugfs directory [ 94.301544][ T5622] hsr_slave_0: entered promiscuous mode [ 94.308431][ T5622] hsr_slave_1: entered promiscuous mode [ 94.316105][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 94.321869][ T5622] Cannot create hsr debugfs directory [ 94.481325][ T5628] hsr_slave_0: entered promiscuous mode [ 94.488035][ T5628] hsr_slave_1: entered promiscuous mode [ 94.494692][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 94.500526][ T5628] Cannot create hsr debugfs directory [ 95.066445][ T5629] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.079781][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.096232][ T5629] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.110474][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.119617][ T5629] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.131393][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.151190][ T5629] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.163328][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.233765][ T5619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.245840][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.255436][ T5619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.267344][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.276006][ T5619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.287599][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.295698][ T5619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.306559][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.408724][ T5627] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.422240][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.431306][ T5627] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.438726][ T5630] Bluetooth: hci4: command tx timeout [ 95.438771][ T5630] Bluetooth: hci3: command tx timeout [ 95.438805][ T5630] Bluetooth: hci2: command tx timeout [ 95.443626][ T4935] Bluetooth: hci5: command tx timeout [ 95.446523][ T5633] Bluetooth: hci1: command tx timeout [ 95.451256][ T5630] Bluetooth: hci0: command tx timeout [ 95.460359][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.490269][ T5627] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.501171][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.509867][ T5627] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.522564][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.633162][ T5620] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.645600][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.655674][ T5620] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.666314][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.675022][ T5620] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.685485][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.710008][ T5620] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.720486][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.802816][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.871933][ T5622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.882688][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.901854][ T5622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.915520][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.925410][ T5622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.935812][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.944458][ T5622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.954318][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.998232][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.041430][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.054825][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.062291][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.114656][ T578] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.121820][ T578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.162356][ T5628] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.175138][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.183153][ T5628] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.199143][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.228491][ T5628] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.239940][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.256229][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.268307][ T5628] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.278492][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.324935][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.342251][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.349397][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.380171][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.387426][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.441107][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.489621][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.496802][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.560152][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.567352][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.652059][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.790224][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.845837][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.910879][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.918098][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.962603][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.969824][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.010811][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.070472][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.101777][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.108996][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.178929][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.186109][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.291732][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.369104][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.376381][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.430877][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.438098][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.514591][ T5630] Bluetooth: hci1: command tx timeout [ 97.517395][ T5633] Bluetooth: hci0: command tx timeout [ 97.520123][ T5621] Bluetooth: hci2: command tx timeout [ 97.526299][ T5633] Bluetooth: hci3: command tx timeout [ 97.531523][ T5625] Bluetooth: hci4: command tx timeout [ 97.544196][ T4935] Bluetooth: hci5: command tx timeout [ 97.717819][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.208961][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.469351][ T5619] veth0_vlan: entered promiscuous mode [ 98.552314][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.569743][ T5619] veth1_vlan: entered promiscuous mode [ 98.798523][ T5619] veth0_macvtap: entered promiscuous mode [ 98.840233][ T5619] veth1_macvtap: entered promiscuous mode [ 98.908019][ T5627] veth0_vlan: entered promiscuous mode [ 99.017484][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.028782][ T5629] veth0_vlan: entered promiscuous mode [ 99.049061][ T5627] veth1_vlan: entered promiscuous mode [ 99.075098][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.148054][ T5629] veth1_vlan: entered promiscuous mode [ 99.186884][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.260215][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.391392][ T5627] veth0_macvtap: entered promiscuous mode [ 99.410022][ T5629] veth0_macvtap: entered promiscuous mode [ 99.436960][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.448129][ T5629] veth1_macvtap: entered promiscuous mode [ 99.457722][ T5627] veth1_macvtap: entered promiscuous mode [ 99.475941][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.484174][ T5822] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.507332][ T5822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.516308][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.534779][ T5822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.554335][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.624883][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.646538][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.658051][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.658491][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.666878][ T5620] veth0_vlan: entered promiscuous mode [ 99.689097][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.716029][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.776538][ T5620] veth1_vlan: entered promiscuous mode [ 99.808491][ T5619] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.874432][ T137] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.936216][ T578] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.030162][ T5622] veth0_vlan: entered promiscuous mode [ 100.059126][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.133195][ T5622] veth1_vlan: entered promiscuous mode [ 100.210788][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.225847][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.238109][ T5620] veth0_macvtap: entered promiscuous mode [ 100.253747][ T5822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.283905][ T185] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.295050][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.303066][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.331218][ T5620] veth1_macvtap: entered promiscuous mode [ 100.355180][ T578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.363412][ T578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.431371][ T5628] veth0_vlan: entered promiscuous mode [ 100.438427][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.449396][ T5622] veth0_macvtap: entered promiscuous mode [ 100.458381][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.461744][ T185] usb 3-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00 [ 100.481749][ T185] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.489363][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.514420][ T185] usb 3-1: config 0 descriptor?? [ 100.519653][ T5622] veth1_macvtap: entered promiscuous mode [ 100.560244][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.620003][ T5628] veth1_vlan: entered promiscuous mode [ 100.662687][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.697261][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.730146][ T30] audit: type=1800 audit(1785886435.208:2): pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="attr_allow_any_host" dev="configfs" ino=8608 res=0 errno=0 [ 100.755525][ T5866] nvmet: adding nsid 1 to subsystem testnqn [ 100.783626][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.818143][ T30] audit: type=1800 audit(1785886435.278:3): pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="device_path" dev="configfs" ino=8614 res=0 errno=0 [ 100.843995][ T5822] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.884577][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.902947][ T5870] Bluetooth: MGMT ver 1.23 [ 100.908045][ T30] audit: type=1800 audit(1785886435.278:4): pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="buffered_io" dev="configfs" ino=8615 res=0 errno=0 [ 100.918916][ T5870] Bluetooth: MGMT ver 1.23 [ 100.939266][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.965068][ T30] audit: type=1800 audit(1785886435.278:5): pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="enable" dev="configfs" ino=8616 res=0 errno=0 [ 100.992642][ T30] audit: type=1800 audit(1785886435.318:6): pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="addr_trtype" dev="configfs" ino=8622 res=0 errno=0 [ 101.054324][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.080492][ T36] nvmet: Created nvm controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:505997b8-f36e-48b7-879e-570b5f586d5c. [ 101.120420][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.131822][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.134725][ T5628] veth0_macvtap: entered promiscuous mode [ 101.147948][ T5866] nvme nvme0: creating 2 I/O queues. [ 101.158053][ T5822] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.174944][ T5749] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 101.188209][ T5866] nvme nvme0: new ctrl: "testnqn" [ 101.214231][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.252199][ T5628] veth1_macvtap: entered promiscuous mode [ 101.352809][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.369323][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.378971][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.387984][ T5749] usb 5-1: New USB device found, idVendor=17e9, idProduct=0000, bcdDevice= 0.00 [ 101.404838][ T137] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.416643][ T5749] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.430022][ T5822] Dev nvme0n1: unable to read RDB block 8 [ 101.456482][ T5822] nvme0n1: unable to read partition table [ 101.472852][ T5822] nvme0n1: partition table beyond EOD, truncated [ 101.560482][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.569510][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.592238][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.694568][ T5785] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 101.740238][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.763402][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.794560][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.831330][ T30] audit: type=1800 audit(1785886436.308:7): pid=5877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="enable" dev="configfs" ino=8760 res=0 errno=0 [ 101.839941][ T185] usb 3-1: USB disconnect, device number 2 [ 101.870129][ T1086] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.907491][ T5785] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice= 1.01 [ 101.937796][ T30] audit: type=1800 audit(1785886436.348:8): pid=5877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="idVendor" dev="configfs" ino=8767 res=0 errno=0 [ 101.939021][ T5785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.973153][ T1086] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.999811][ T1086] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.002731][ T5877] [ 102.009329][ T30] audit: type=1800 audit(1785886436.368:9): pid=5877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="idProduct" dev="configfs" ino=8770 res=0 errno=0 [ 102.010858][ T5877] ====================================================== [ 102.010873][ T5877] WARNING: possible circular locking dependency detected [ 102.010889][ T5877] syzkaller #0 Not tainted [ 102.010908][ T5877] ------------------------------------------------------ [ 102.056161][ T5877] syz.0.1/5877 is trying to acquire lock: [ 102.061879][ T5877] ffffffff90255e80 (tpg_instances_lock){+.+.}-{4:4}, at: tcm_alloc+0x20/0x440 [ 102.070821][ T5877] [ 102.070821][ T5877] but task is already holding lock: [ 102.078177][ T5877] ffff88805071e390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 102.087208][ T5877] [ 102.087208][ T5877] which lock already depends on the new lock. [ 102.087208][ T5877] [ 102.097607][ T5877] [ 102.097607][ T5877] the existing dependency chain (in reverse order) is: [ 102.106618][ T5877] [ 102.106618][ T5877] -> #3 (&gi->lock){+.+.}-{4:4}: [ 102.113770][ T5877] lock_acquire+0x1b9/0x370 [ 102.118816][ T5877] __mutex_lock+0x1a4/0x1bd0 [ 102.123959][ T5877] config_usb_cfg_link+0x57/0x3a0 [ 102.129536][ T5877] configfs_symlink+0x540/0x11f0 [ 102.135011][ T5877] vfs_symlink+0x178/0x4d0 [ 102.139963][ T5877] filename_symlinkat+0x2a6/0x560 [ 102.145544][ T5877] __x64_sys_symlinkat+0x9c/0xe0 [ 102.151036][ T5877] do_syscall_64+0x115/0x870 [ 102.156173][ T5877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.162595][ T5877] [ 102.162595][ T5877] -> #2 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 102.171321][ T5877] lock_acquire+0x1b9/0x370 [ 102.176371][ T5877] down_write+0x8b/0x1f0 [ 102.181170][ T5877] configfs_depend_item_unlocked+0xf3/0x6a0 [ 102.187598][ T5877] usbg_make_tpg+0x261/0x620 [ 102.192730][ T5877] target_fabric_make_tpg+0xab/0x8c0 [ 102.198567][ T5877] configfs_mkdir+0x51e/0xb70 [ 102.203779][ T5877] vfs_mkdir+0x361/0x850 [ 102.208552][ T5877] filename_mkdirat+0x48b/0x5e0 [ 102.214035][ T5877] __x64_sys_mkdirat+0x89/0xc0 [ 102.219351][ T5877] do_syscall_64+0x115/0x870 [ 102.224494][ T5877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.230919][ T5877] [ 102.230919][ T5877] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 102.238593][ T5877] lock_acquire+0x1b9/0x370 [ 102.243636][ T5877] __mutex_lock+0x1a4/0x1bd0 [ 102.248777][ T5877] usbg_make_tpg+0x1a4/0x620 [ 102.253935][ T5877] target_fabric_make_tpg+0xab/0x8c0 [ 102.259773][ T5877] configfs_mkdir+0x51e/0xb70 [ 102.265018][ T5877] vfs_mkdir+0x361/0x850 [ 102.269799][ T5877] filename_mkdirat+0x48b/0x5e0 [ 102.275200][ T5877] __x64_sys_mkdirat+0x89/0xc0 [ 102.280515][ T5877] do_syscall_64+0x115/0x870 [ 102.285650][ T5877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.292095][ T5877] [ 102.292095][ T5877] -> #0 (tpg_instances_lock){+.+.}-{4:4}: [ 102.300027][ T5877] check_prev_add+0xeb/0xe60 [ 102.305156][ T5877] __lock_acquire+0x136c/0x1a40 [ 102.310540][ T5877] lock_acquire+0x1b9/0x370 [ 102.315571][ T5877] __mutex_lock+0x1a4/0x1bd0 [ 102.320710][ T5877] tcm_alloc+0x20/0x440 [ 102.325411][ T5877] usb_get_function+0x5e/0xd0 [ 102.330618][ T5877] config_usb_cfg_link+0x1ed/0x3a0 [ 102.336273][ T5877] configfs_symlink+0x540/0x11f0 [ 102.341764][ T5877] vfs_symlink+0x178/0x4d0 [ 102.346714][ T5877] filename_symlinkat+0x2a6/0x560 [ 102.352296][ T5877] __x64_sys_symlinkat+0x9c/0xe0 [ 102.357785][ T5877] do_syscall_64+0x115/0x870 [ 102.362921][ T5877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.369348][ T5877] [ 102.369348][ T5877] other info that might help us debug this: [ 102.369348][ T5877] [ 102.379614][ T5877] Chain exists of: [ 102.379614][ T5877] tpg_instances_lock --> &sb->s_type->i_mutex_key#24 --> &gi->lock [ 102.379614][ T5877] [ 102.393500][ T5877] Possible unsafe locking scenario: [ 102.393500][ T5877] [ 102.400954][ T5877] CPU0 CPU1 [ 102.406318][ T5877] ---- ---- [ 102.411677][ T5877] lock(&gi->lock); [ 102.415579][ T5877] lock(&sb->s_type->i_mutex_key#24); [ 102.423587][ T5877] lock(&gi->lock); [ 102.430020][ T5877] lock(tpg_instances_lock); [ 102.434707][ T5877] [ 102.434707][ T5877] *** DEADLOCK *** [ 102.434707][ T5877] [ 102.442842][ T5877] 3 locks held by syz.0.1/5877: [ 102.447687][ T5877] #0: ffff88801e3b0450 (sb_writers#12){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 102.457252][ T5877] #1: ffff888076d6c140 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 102.468207][ T5877] #2: ffff88805071e390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 102.477675][ T5877] [ 102.477675][ T5877] stack backtrace: [ 102.483658][ T5877] CPU: 1 UID: 0 PID: 5877 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 102.483698][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 102.483719][ T5877] Call Trace: [ 102.483732][ T5877] [ 102.483746][ T5877] dump_stack_lvl+0x100/0x190 [ 102.483787][ T5877] print_circular_bug.cold+0x178/0x1c7 [ 102.483848][ T5877] check_noncircular+0x146/0x160 [ 102.483893][ T5877] check_prev_add+0xeb/0xe60 [ 102.483934][ T5877] __lock_acquire+0x136c/0x1a40 [ 102.483982][ T5877] lock_acquire+0x1b9/0x370 [ 102.484021][ T5877] ? tcm_alloc+0x20/0x440 [ 102.484071][ T5877] ? __pfx___might_resched+0x10/0x10 [ 102.484115][ T5877] __mutex_lock+0x1a4/0x1bd0 [ 102.484166][ T5877] ? tcm_alloc+0x20/0x440 [ 102.484214][ T5877] ? tcm_alloc+0x20/0x440 [ 102.484261][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.484306][ T5877] ? __mutex_lock+0x26d/0x1bd0 [ 102.484356][ T5877] ? config_usb_cfg_link+0x57/0x3a0 [ 102.484414][ T5877] ? __pfx___mutex_lock+0x10/0x10 [ 102.484473][ T5877] ? __pfx_make_vfsuid+0x10/0x10 [ 102.484524][ T5877] ? tcm_alloc+0x20/0x440 [ 102.484569][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.484614][ T5877] tcm_alloc+0x20/0x440 [ 102.484662][ T5877] usb_get_function+0x5e/0xd0 [ 102.484695][ T5877] config_usb_cfg_link+0x1ed/0x3a0 [ 102.484749][ T5877] ? mntput_no_expire+0xe7/0x220 [ 102.484801][ T5877] configfs_symlink+0x540/0x11f0 [ 102.484843][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.484888][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.484931][ T5877] ? security_inode_permission+0xbf/0x250 [ 102.484979][ T5877] ? __pfx_configfs_symlink+0x10/0x10 [ 102.485024][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.485070][ T5877] vfs_symlink+0x178/0x4d0 [ 102.485108][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.485156][ T5877] filename_symlinkat+0x2a6/0x560 [ 102.485217][ T5877] ? __pfx_filename_symlinkat+0x10/0x10 [ 102.485276][ T5877] ? strncpy_from_user+0x19d/0x2d0 [ 102.485331][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.485374][ T5877] ? do_getname+0x191/0x390 [ 102.485415][ T5877] __x64_sys_symlinkat+0x9c/0xe0 [ 102.485476][ T5877] do_syscall_64+0x115/0x870 [ 102.485528][ T5877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.485566][ T5877] RIP: 0033:0x7f562559e019 [ 102.485594][ T5877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.485628][ T5877] RSP: 002b:00007f56237f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 102.485660][ T5877] RAX: ffffffffffffffda RBX: 00007f5625825fa0 RCX: 00007f562559e019 [ 102.485684][ T5877] RDX: 0000200000000900 RSI: ffffffffffffff9c RDI: 00002000000008c0 [ 102.485709][ T5877] RBP: 00007f562563500c R08: 0000000000000000 R09: 0000000000000000 [ 102.485731][ T5877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.485753][ T5877] R13: 00007f5625826038 R14: 00007f5625825fa0 R15: 00007fff12f9eb18 [ 102.485787][ T5877] [ 102.504498][ T5628] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 102.546434][ T30] audit: type=1800 audit(1785886436.468:10): pid=5877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="nexus" dev="configfs" ino=8791 res=0 errno=0 [ 102.582079][ T578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.584958][ T5822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.590836][ T578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.594507][ T5822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.658600][ T30] audit: type=1800 audit(1785886437.138:11): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="UDC" dev="configfs" ino=9744 res=0 errno=0 [ 102.673787][ T5785] pvrusb2: Hardware description: Terratec Grabster AV400 [ 102.721912][ T5877] udc dummy_udc.0: failed to start g1: -19 [ 102.774536][ T5785] pvrusb2: ********** [ 102.886224][ T5785] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 102.893362][ T5877] UDC core: g1: couldn't find an available UDC or it's busy [ 102.896712][ T5785] pvrusb2: Important functionality might not be entirely working. [ 102.911784][ T5785] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 102.924711][ T5785] pvrusb2: ********** [ 102.930860][ T5749] udl 5-1:1.0: [drm] Unrecognized vendor firmware descriptor [ 102.947538][ T5749] [drm:udl_init] *ERROR* Selecting channel failed [ 102.964298][ T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.975289][ T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.009311][ T5749] [drm] Initialized udl 0.0.1 for 5-1:1.0 on minor 2 [ 103.019315][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.029551][ T5749] [drm] Initialized udl on minor 2 [ 103.059715][ T5749] udl 5-1:1.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 103.083600][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.095592][ T5749] udl 5-1:1.0: [drm] Cannot find any crtc or sizes [ 103.102797][ T9] udl 5-1:1.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 103.111514][ T9] udl 5-1:1.0: [drm] Cannot find any crtc or sizes [ 103.121354][ T5749] usb 5-1: USB disconnect, device number 2 [ 104.416477][ T2361] pvrusb2: Module ID 2 (cx25840) for device Terratec Grabster AV400 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 104.433379][ T2361] pvrusb2: Device being rendered inoperable [ 104.439423][ T2361] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 104.452250][ T2361] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 106.478440][ T24] usb 4-1: USB disconnect, device number 2