last executing test programs: 14.217017721s ago: executing program 3 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000240)='./file0\x00') chdir(&(0x7f0000000140)='./file0\x00') unlink(&(0x7f0000000100)='./file0\x00') 14.049043131s ago: executing program 3 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000080)='proc\x00', 0xa00000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40800, 0x0) lseek(r0, 0x101, 0x2) getdents64(r0, &(0x7f00000000c0)=""/79, 0x4f) 14.005069304s ago: executing program 3 (id=47): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000008}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20000000) close(0x3) 13.938010455s ago: executing program 3 (id=49): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000280)='L', 0x1) write$char_usb(r0, &(0x7f00000003c0)='0', 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.767692468s ago: executing program 1 (id=72): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0xa1, 0x0, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000400)={0x1a, 0x110, 0x10, 0x0, 0x6, 0x20, @broadcast}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x3, 0x0, 0x42}, 0x10) 12.710116915s ago: executing program 1 (id=75): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f00000002c0)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 440.360964ms ago: executing program 2 (id=108): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x100000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8949, &(0x7f0000000000)) 418.299852ms ago: executing program 2 (id=112): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000000580)='7', 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 395.075344ms ago: executing program 0 (id=115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="000088a2020100000800faff0700d06d6558b77917dd27803253b8a84b006558"], 0x44) 361.956736ms ago: executing program 0 (id=116): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000000)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/dri/1/name\x00', 0x0, 0x0) read(r0, &(0x7f0000000700), 0x1000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./debug/dri/1/state\x00', 0x0, 0x0) read(r1, &(0x7f0000000700), 0x1000) 361.824228ms ago: executing program 1 (id=117): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000003c0)={&(0x7f0000000200)=[0x0], 0x1, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xb4b, 0x1, 0x2, 0x10, 0x12f, 0xe154, 0x1000, 0x0, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 361.712293ms ago: executing program 2 (id=118): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r0, &(0x7f0000000100)=""/9, 0xfffffd87) write$tcp_mem(r0, &(0x7f00000007c0)={0x5c7, 0x20, 0x8000, 0x20, 0x56}, 0x48) write$tun(r0, &(0x7f00000001c0)=ANY=[], 0xffe) 361.629854ms ago: executing program 3 (id=119): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x19) 293.931834ms ago: executing program 1 (id=120): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) 293.350299ms ago: executing program 2 (id=121): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 286.07679ms ago: executing program 0 (id=122): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x6]}, 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./control\x00', 0x40000c17) rmdir(&(0x7f0000000100)='./control\x00') 219.844237ms ago: executing program 2 (id=123): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c40)={'gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) 205.382557ms ago: executing program 1 (id=124): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='9', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0xa0) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) 205.058097ms ago: executing program 2 (id=125): listen(0xffffffffffffffff, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000800000d020000000d00000005"], 0x0, 0x66, 0x0, 0x1}, 0x28) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={'\x00', 0x6, 0xa, 0x3, 0xffffffff}) 198.022459ms ago: executing program 0 (id=126): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x14985, 0x3, 0x3}, 0x18, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) landlock_restrict_self(r0, 0x1) connect$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) 89.729315ms ago: executing program 3 (id=127): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000580)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) 86.954203ms ago: executing program 1 (id=128): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) landlock_restrict_self(0xffffffffffffffff, 0xc) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x64040) 84.950486ms ago: executing program 0 (id=129): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') setuid(0xee00) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) 0s ago: executing program 0 (id=130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000500050007"], 0x4a) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:18004' (ED25519) to the list of known hosts. [ 32.881123][ T5698] cgroup: Unknown subsys name 'net' [ 33.007429][ T5698] cgroup: Unknown subsys name 'cpuset' [ 33.009536][ T5698] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.852482][ T5698] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.396425][ T5736] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.399880][ T5736] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.400755][ T5738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.401137][ T5736] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.402757][ T5736] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.403519][ T5738] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.404613][ T5738] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.404878][ T5736] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.405763][ T5736] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.405897][ T5736] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.408943][ T5738] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.409529][ T5738] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.409912][ T5738] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.410151][ T5738] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.410548][ T5747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.410569][ T5738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.411563][ T5738] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.412604][ T5095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.417008][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.417284][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.937242][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.937805][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.937868][ T5733] bridge_slave_0: entered allmulticast mode [ 37.938640][ T5733] bridge_slave_0: entered promiscuous mode [ 37.958945][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.958993][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.959053][ T5733] bridge_slave_1: entered allmulticast mode [ 37.959748][ T5733] bridge_slave_1: entered promiscuous mode [ 37.986904][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.986957][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.987325][ T5740] bridge_slave_0: entered allmulticast mode [ 37.988056][ T5740] bridge_slave_0: entered promiscuous mode [ 38.009473][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.009579][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.009644][ T5732] bridge_slave_0: entered allmulticast mode [ 38.010379][ T5732] bridge_slave_0: entered promiscuous mode [ 38.011395][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.011454][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.011509][ T5740] bridge_slave_1: entered allmulticast mode [ 38.012259][ T5740] bridge_slave_1: entered promiscuous mode [ 38.034446][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.034534][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.034575][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.034629][ T5745] bridge_slave_0: entered allmulticast mode [ 38.035677][ T5745] bridge_slave_0: entered promiscuous mode [ 38.044947][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.045010][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.045072][ T5732] bridge_slave_1: entered allmulticast mode [ 38.046339][ T5732] bridge_slave_1: entered promiscuous mode [ 38.054490][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.054610][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.054648][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.054702][ T5745] bridge_slave_1: entered allmulticast mode [ 38.055942][ T5745] bridge_slave_1: entered promiscuous mode [ 38.072341][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.086541][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.095126][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.096244][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.097780][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.105031][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.127738][ T5733] team0: Port device team_slave_0 added [ 38.129561][ T5733] team0: Port device team_slave_1 added [ 38.142343][ T5732] team0: Port device team_slave_0 added [ 38.148707][ T5745] team0: Port device team_slave_0 added [ 38.149928][ T5745] team0: Port device team_slave_1 added [ 38.156487][ T5740] team0: Port device team_slave_0 added [ 38.158431][ T5740] team0: Port device team_slave_1 added [ 38.159289][ T5732] team0: Port device team_slave_1 added [ 38.171202][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.171211][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.171263][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.173276][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.173283][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.173295][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.185495][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.185503][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.185516][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.186342][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.186350][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.186361][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.207464][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.207473][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.207486][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.208374][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.208381][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.208393][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.214607][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.214616][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.214628][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.225138][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.225148][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.225160][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.234333][ T5745] hsr_slave_0: entered promiscuous mode [ 38.234917][ T5745] hsr_slave_1: entered promiscuous mode [ 38.270242][ T5733] hsr_slave_0: entered promiscuous mode [ 38.270680][ T5733] hsr_slave_1: entered promiscuous mode [ 38.270980][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 38.271020][ T5733] Cannot create hsr debugfs directory [ 38.302500][ T5740] hsr_slave_0: entered promiscuous mode [ 38.302907][ T5740] hsr_slave_1: entered promiscuous mode [ 38.303189][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 38.303201][ T5740] Cannot create hsr debugfs directory [ 38.311281][ T5732] hsr_slave_0: entered promiscuous mode [ 38.311679][ T5732] hsr_slave_1: entered promiscuous mode [ 38.311964][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 38.311975][ T5732] Cannot create hsr debugfs directory [ 38.507700][ T5745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.513113][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.513556][ T5745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.515826][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.518501][ T5745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.521664][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.522138][ T5745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.525460][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.561605][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.561653][ T5745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.561858][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.561901][ T5745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.570921][ T5732] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.576012][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.576521][ T5732] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.579429][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.588868][ T5732] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.590713][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.591130][ T5732] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.596639][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.635526][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.635571][ T5732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.635667][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.635972][ T5732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.639455][ T5740] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.641908][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.642287][ T5740] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.643963][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.646660][ T5740] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.650598][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.654412][ T5740] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.660792][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.689352][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.708264][ T5733] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.710836][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.712307][ T5733] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.715416][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.725283][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.726064][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.727819][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.728353][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.748402][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.752070][ T5733] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.753975][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.754331][ T5733] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.756730][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.773989][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.774045][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.775354][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.775402][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.802471][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.824175][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.835656][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.835701][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.849899][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.849943][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.870487][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.877405][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.888925][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.891889][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.903412][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.903456][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.906731][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.906772][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.908066][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.908106][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.914055][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.914097][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.173473][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.177948][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.214338][ T5745] veth0_vlan: entered promiscuous mode [ 39.223285][ T5732] veth0_vlan: entered promiscuous mode [ 39.233579][ T5745] veth1_vlan: entered promiscuous mode [ 39.236168][ T5732] veth1_vlan: entered promiscuous mode [ 39.261152][ T5745] veth0_macvtap: entered promiscuous mode [ 39.262763][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.267912][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.272919][ T5732] veth0_macvtap: entered promiscuous mode [ 39.276923][ T5745] veth1_macvtap: entered promiscuous mode [ 39.282070][ T5732] veth1_macvtap: entered promiscuous mode [ 39.292932][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.308772][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.311643][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.325472][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.356963][ T5740] veth0_vlan: entered promiscuous mode [ 39.359042][ T5733] veth0_vlan: entered promiscuous mode [ 39.382473][ T5740] veth1_vlan: entered promiscuous mode [ 39.398899][ T5733] veth1_vlan: entered promiscuous mode [ 39.412835][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.412848][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.422403][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.422416][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.440891][ T5733] veth0_macvtap: entered promiscuous mode [ 39.442336][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.442348][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.448198][ T5740] veth0_macvtap: entered promiscuous mode [ 39.450005][ T5733] veth1_macvtap: entered promiscuous mode [ 39.463112][ T5740] veth1_macvtap: entered promiscuous mode [ 39.465426][ T5095] Bluetooth: hci2: command tx timeout [ 39.465582][ T5095] Bluetooth: hci0: command tx timeout [ 39.465593][ T5741] Bluetooth: hci3: command tx timeout [ 39.465906][ T5095] Bluetooth: hci1: command tx timeout [ 39.475600][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.475612][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.482287][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.487261][ T5745] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.492285][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.493726][ T5745] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.501415][ T5745] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.506273][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.511708][ T5745] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.519086][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.521923][ T5732] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.556117][ T5550] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.556162][ T5550] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.556180][ T5550] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.556197][ T5550] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.556213][ T5550] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.556230][ T5550] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.556247][ T5550] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.556263][ T5550] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.556279][ T5550] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.556295][ T5550] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.556312][ T5550] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.556328][ T5550] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.576980][ T5818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.577235][ T5818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.577456][ T5818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.577484][ T5818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.599703][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.599714][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.623238][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.623250][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.637061][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.637072][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.652095][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.652108][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.667596][ T5882] FAULT_INJECTION: forcing a failure. [ 39.667596][ T5882] name failslab, interval 1, probability 0, space 0, times 1 [ 39.667618][ T5882] CPU: 1 UID: 0 PID: 5882 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 39.667630][ T5882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 39.667637][ T5882] Call Trace: [ 39.667641][ T5882] [ 39.667645][ T5882] dump_stack_lvl+0x100/0x190 [ 39.667663][ T5882] should_fail_ex.cold+0x5/0xa [ 39.667686][ T5882] should_failslab+0xc2/0x120 [ 39.667704][ T5882] __kmalloc_cache_noprof+0x91/0x6d0 [ 39.667717][ T5882] ? apparmor_capable+0x1d7/0x4d0 [ 39.667727][ T5882] ? fsnotify_alloc_group+0x8d/0x320 [ 39.667748][ T5882] fsnotify_alloc_group+0x8d/0x320 [ 39.667766][ T5882] __do_sys_fanotify_init+0x271/0xe30 [ 39.667783][ T5882] __do_fast_syscall_32+0x13a/0x8b0 [ 39.667801][ T5882] do_fast_syscall_32+0x32/0x70 [ 39.667816][ T5882] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 39.667843][ T5882] RIP: 0023:0xf7f95fec [ 39.667855][ T5882] Code: Unable to access opcode bytes at 0xf7f95fc2. [ 39.667860][ T5882] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000152 [ 39.667871][ T5882] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000080000 [ 39.667878][ T5882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 39.667885][ T5882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 39.667891][ T5882] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 39.667898][ T5882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 39.667911][ T5882] [ 39.690317][ T5883] FAULT_INJECTION: forcing a failure. [ 39.690317][ T5883] name failslab, interval 1, probability 0, space 0, times 0 [ 39.690336][ T5883] CPU: 0 UID: 0 PID: 5883 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 39.690348][ T5883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 39.690354][ T5883] Call Trace: [ 39.690358][ T5883] [ 39.690362][ T5883] dump_stack_lvl+0x100/0x190 [ 39.690380][ T5883] should_fail_ex.cold+0x5/0xa [ 39.690396][ T5883] should_failslab+0xc2/0x120 [ 39.690413][ T5883] __kmalloc_cache_noprof+0x91/0x6d0 [ 39.690427][ T5883] ? devpts_init_fs_context+0x47/0x410 [ 39.690443][ T5883] devpts_init_fs_context+0x47/0x410 [ 39.690458][ T5883] alloc_fs_context+0x60c/0xf40 [ 39.690477][ T5883] __ia32_sys_fsopen+0xef/0x230 [ 39.690489][ T5883] __do_fast_syscall_32+0x13a/0x8b0 [ 39.690505][ T5883] do_fast_syscall_32+0x32/0x70 [ 39.690521][ T5883] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 39.690535][ T5883] RIP: 0023:0xf741efec [ 39.690547][ T5883] Code: Unable to access opcode bytes at 0xf741efc2. [ 39.690552][ T5883] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 00000000000001ae [ 39.690563][ T5883] RAX: ffffffffffffffda RBX: 00000000800002c0 RCX: 0000000000000000 [ 39.690569][ T5883] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 39.690575][ T5883] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 39.690581][ T5883] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 39.690587][ T5883] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 39.690600][ T5883] [ 39.918033][ T5900] sg_write: data in/out 1265126/1 bytes for SCSI command 0x32-- guessing data in; [ 39.918033][ T5900] program syz.0.10 not setting count and/or reply_len properly [ 40.031949][ T5910] loop4: detected capacity change from 0 to 7 [ 40.033777][ T5910] Dev loop4: unable to read RDB block 7 [ 40.033798][ T5910] loop4: unable to read partition table [ 40.033938][ T5910] loop4: partition table beyond EOD, truncated [ 40.033953][ T5910] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 40.135104][ T57] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 40.165257][ T5811] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 40.273785][ T5924] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 40.305898][ T57] usb 8-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice= 0.00 [ 40.307670][ T57] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.307702][ T57] usb 8-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 40.307738][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.322164][ T5811] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 40.323000][ T5811] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 40.323014][ T5811] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 40.323030][ T5811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.330651][ T5811] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 40.341956][ T5811] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 40.552625][ T57] usb 8-1: Direct firmware load for usbduxfast_firmware.bin failed with error -2 [ 40.552641][ T57] usb 8-1: Falling back to sysfs fallback for: usbduxfast_firmware.bin [ 40.695583][ T5902] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 40.695915][ T5902] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 40.696481][ T5902] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 40.747232][ T5897] firmware usbduxfast_firmware.bin: firmware_loading_store: unexpected value (0) [ 40.750620][ T57] usbduxfast 8-1:1.0: driver 'usbduxfast' failed to auto-configure device. [ 40.752448][ T57] usbduxfast 8-1:1.0: probe with driver usbduxfast failed with error -2 [ 40.754467][ T57] usb 8-1: USB disconnect, device number 2 [ 40.792369][ T5902] SPCP8x5 ttyUSB0: Set UART format 0x2 failed (error = -32) [ 41.003716][ T5930] netlink: 'syz.2.22': attribute type 1 has an invalid length. [ 41.228612][ T5941] FAULT_INJECTION: forcing a failure. [ 41.228612][ T5941] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 41.228634][ T5941] CPU: 2 UID: 0 PID: 5941 Comm: syz.2.27 Not tainted syzkaller #0 PREEMPT(full) [ 41.228659][ T5941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.228667][ T5941] Call Trace: [ 41.228671][ T5941] [ 41.228676][ T5941] dump_stack_lvl+0x100/0x190 [ 41.228695][ T5941] should_fail_ex.cold+0x5/0xa [ 41.228707][ T5941] ? prepare_alloc_pages+0x16d/0x5b0 [ 41.228726][ T5941] should_fail_alloc_page+0xeb/0x140 [ 41.228744][ T5941] prepare_alloc_pages+0x1f0/0x5b0 [ 41.228763][ T5941] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 41.228780][ T5941] ? mark_held_locks+0x40/0x70 [ 41.228796][ T5941] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 41.228809][ T5941] ? lockdep_hardirqs_on+0x7d/0x110 [ 41.228822][ T5941] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 41.228834][ T5941] ? stack_depot_save_flags+0x49a/0x9f0 [ 41.228847][ T5941] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 41.228866][ T5941] ? kasan_save_stack+0x3f/0x50 [ 41.228880][ T5941] ? kasan_save_stack+0x30/0x50 [ 41.228894][ T5941] ? kasan_save_track+0x14/0x30 [ 41.228909][ T5941] ? __kasan_kmalloc+0xaa/0xb0 [ 41.228924][ T5941] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 41.228936][ T5941] ? mon_bin_open+0x1a8/0x470 [ 41.228952][ T5941] ? chrdev_open+0x234/0x6a0 [ 41.228965][ T5941] ? do_dentry_open+0x6ab/0x14d0 [ 41.228978][ T5941] ? vfs_open+0x82/0x3f0 [ 41.228993][ T5941] ? path_openat+0x19fa/0x2440 [ 41.229006][ T5941] ? do_file_open+0x20e/0x430 [ 41.229020][ T5941] ? do_sys_openat2+0x10f/0x1e0 [ 41.229036][ T5941] ? __ia32_compat_sys_openat+0x12d/0x210 [ 41.229048][ T5941] ? do_int80_emulation+0x166/0x650 [ 41.229063][ T5941] ? asm_int80_emulation+0x1a/0x20 [ 41.229082][ T5941] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 41.229099][ T5941] ? policy_nodemask+0xed/0x4f0 [ 41.229117][ T5941] alloc_pages_mpol+0x201/0x550 [ 41.229134][ T5941] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 41.229154][ T5941] alloc_pages_noprof+0x1a/0x160 [ 41.229166][ T5941] get_zeroed_page_noprof+0x18/0xb0 [ 41.229182][ T5941] mon_alloc_buff+0xce/0x1b0 [ 41.229199][ T5941] mon_bin_open+0x207/0x470 [ 41.229214][ T5941] ? __pfx_mon_bin_open+0x10/0x10 [ 41.229229][ T5941] chrdev_open+0x234/0x6a0 [ 41.229248][ T5941] ? __pfx_chrdev_open+0x10/0x10 [ 41.229263][ T5941] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 41.229283][ T5941] do_dentry_open+0x6ab/0x14d0 [ 41.229296][ T5941] ? __pfx_chrdev_open+0x10/0x10 [ 41.229313][ T5941] vfs_open+0x82/0x3f0 [ 41.229331][ T5941] path_openat+0x19fa/0x2440 [ 41.229349][ T5941] ? __pfx_path_openat+0x10/0x10 [ 41.229367][ T5941] do_file_open+0x20e/0x430 [ 41.229384][ T5941] ? __pfx_do_file_open+0x10/0x10 [ 41.229410][ T5941] ? _raw_spin_unlock+0x28/0x50 [ 41.229421][ T5941] ? alloc_fd+0x471/0x7a0 [ 41.229439][ T5941] do_sys_openat2+0x10f/0x1e0 [ 41.229455][ T5941] ? __pfx_do_sys_openat2+0x10/0x10 [ 41.229472][ T5941] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 41.229488][ T5941] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 41.229503][ T5941] __ia32_compat_sys_openat+0x12d/0x210 [ 41.229515][ T5941] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 41.229531][ T5941] do_int80_emulation+0x166/0x650 [ 41.229548][ T5941] asm_int80_emulation+0x1a/0x20 [ 41.229558][ T5941] RIP: 0023:0xf71a75eb [ 41.229568][ T5941] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 41.229578][ T5941] RSP: 002b:00000000f546603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 41.229589][ T5941] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5466100 [ 41.229596][ T5941] RDX: 0000000000080000 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.229602][ T5941] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 41.229608][ T5941] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 41.229614][ T5941] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 41.229628][ T5941] [ 41.534925][ T5742] Bluetooth: hci3: command tx timeout [ 41.534949][ T5742] Bluetooth: hci0: command tx timeout [ 41.534962][ T5742] Bluetooth: hci2: command tx timeout [ 41.534973][ T5742] Bluetooth: hci1: command tx timeout [ 41.674672][ T5976] loop5: detected capacity change from 0 to 7 [ 41.678524][ T5976] Dev loop5: unable to read RDB block 7 [ 41.678545][ T5976] loop5: unable to read partition table [ 41.678634][ T5976] loop5: partition table beyond EOD, truncated [ 41.678653][ T5976] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 41.791144][ T5991] input: syz1 as /devices/virtual/input/input7 [ 42.024843][ T1347] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 42.138068][ T6006] nvmet: adding nsid 1 to subsystem testsubsys [ 42.175548][ T6008] syz.0.55 uses obsolete (PF_INET,SOCK_PACKET) [ 42.176197][ T1347] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 42.176994][ T1347] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 42.177007][ T1347] usb 8-1: config 0 has no interface number 0 [ 42.177024][ T1347] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 42.178592][ T1347] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.178603][ T1347] usb 8-1: Product: syz [ 42.178610][ T1347] usb 8-1: Manufacturer: syz [ 42.178617][ T1347] usb 8-1: SerialNumber: syz [ 42.180239][ T1347] usb 8-1: config 0 descriptor?? [ 42.189974][ T1347] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0 [ 42.819508][ T5811] usb 6-1: USB disconnect, device number 2 [ 42.835311][ T5811] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 42.836196][ T5811] spcp8x5 6-1:1.0: device disconnected [ 42.990042][ T6045] smpboot: CPU 1 is now offline [ 43.023741][ T6045] smpboot: CPU 3 is now offline [ 43.086376][ T6055] input: syz1 as /devices/virtual/input/input8 [ 43.252958][ T6066] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 43.265456][ T5811] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 43.394836][ T854] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 43.415324][ T5811] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 43.417134][ T5811] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.417162][ T5811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.429118][ T5811] as10x_usb: device has been detected [ 43.429471][ T5811] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 43.446852][ T5811] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 43.469229][ T5811] as10x_usb: error during firmware upload part1 [ 43.469633][ T5811] Registered device Abilis Systems DVB-Titan [ 43.510900][ T6078] FAULT_INJECTION: forcing a failure. [ 43.510900][ T6078] name failslab, interval 1, probability 0, space 0, times 0 [ 43.510922][ T6078] CPU: 2 UID: 0 PID: 6078 Comm: syz.0.87 Tainted: G L syzkaller #0 PREEMPT(full) [ 43.510938][ T6078] Tainted: [L]=SOFTLOCKUP [ 43.510942][ T6078] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 43.510948][ T6078] Call Trace: [ 43.510952][ T6078] [ 43.510956][ T6078] dump_stack_lvl+0x100/0x190 [ 43.510975][ T6078] should_fail_ex.cold+0x5/0xa [ 43.510989][ T6078] should_failslab+0xc2/0x120 [ 43.511007][ T6078] kmem_cache_alloc_noprof+0x92/0x6a0 [ 43.511022][ T6078] ? __send_signal_locked+0x1d1/0x1430 [ 43.511040][ T6078] __send_signal_locked+0x1d1/0x1430 [ 43.511057][ T6078] send_signal_locked+0x15e/0xa00 [ 43.511075][ T6078] ? __pfx_send_signal_locked+0x10/0x10 [ 43.511091][ T6078] ? do_raw_spin_lock+0x128/0x260 [ 43.511105][ T6078] ? _raw_spin_lock_irqsave+0x52/0x60 [ 43.511121][ T6078] force_sig_info_to_task+0x450/0x660 [ 43.511140][ T6078] force_sig_fault+0xc3/0x100 [ 43.511156][ T6078] ? __pfx_force_sig_fault+0x10/0x10 [ 43.511176][ T6078] ? __pfx___up_read+0x10/0x10 [ 43.511186][ T6078] ? fixup_vdso_exception+0x2d1/0x370 [ 43.511200][ T6078] __bad_area_nosemaphore+0x31b/0x3f0 [ 43.511212][ T6078] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 43.511225][ T6078] do_user_addr_fault+0x8ca/0x12f0 [ 43.511241][ T6078] exc_page_fault+0x6f/0xd0 [ 43.511254][ T6078] asm_exc_page_fault+0x26/0x30 [ 43.511265][ T6078] RIP: 0023:0xf718fa54 [ 43.511274][ T6078] Code: 8d 44 07 30 5f c3 31 c0 5f c3 66 90 66 90 66 90 66 90 66 90 66 90 8b 54 24 04 57 8b 7c 24 0c 83 ef 04 0f 86 4e 05 00 00 31 c0 <80> 3a 00 0f 84 41 03 00 00 80 7a 01 00 0f 84 79 06 00 00 80 7a 02 [ 43.511284][ T6078] RSP: 002b:00000000f5435478 EFLAGS: 00010246 [ 43.511294][ T6078] RAX: 0000000000000000 RBX: 00000000f740aff4 RCX: 0000000000000000 [ 43.511300][ T6078] RDX: 0000000000000000 RSI: 00000000f54354e8 RDI: 000000000000000b [ 43.511306][ T6078] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 43.511312][ T6078] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 43.511318][ T6078] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 43.511331][ T6078] [ 43.546602][ T854] usb 7-1: not running at top speed; connect to a high speed hub [ 43.546620][ T854] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 43.547428][ T854] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 14385, setting to 64 [ 43.547448][ T854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.551016][ T6061] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 43.551904][ T854] cyberjack 7-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 43.562626][ T854] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 43.625718][ T5741] Bluetooth: hci0: command tx timeout [ 43.625738][ T5741] Bluetooth: hci3: command tx timeout [ 43.625847][ T5742] Bluetooth: hci2: command tx timeout [ 43.625881][ T5095] Bluetooth: hci1: command tx timeout [ 43.769402][ T5833] usb 7-1: USB disconnect, device number 2 [ 43.781376][ T5833] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 43.784259][ T5833] cyberjack 7-1:1.0: device disconnected [ 43.907635][ T6094] netlink: 'syz.0.94': attribute type 3 has an invalid length. [ 44.393630][ T6114] FAULT_INJECTION: forcing a failure. [ 44.393630][ T6114] name failslab, interval 1, probability 0, space 0, times 0 [ 44.393671][ T6114] CPU: 2 UID: 0 PID: 6114 Comm: syz.0.103 Tainted: G L syzkaller #0 PREEMPT(full) [ 44.393697][ T6114] Tainted: [L]=SOFTLOCKUP [ 44.393703][ T6114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 44.393715][ T6114] Call Trace: [ 44.393722][ T6114] [ 44.393729][ T6114] dump_stack_lvl+0x100/0x190 [ 44.393760][ T6114] should_fail_ex.cold+0x5/0xa [ 44.393789][ T6114] should_failslab+0xc2/0x120 [ 44.393819][ T6114] __kvmalloc_node_noprof+0x113/0x9b0 [ 44.393844][ T6114] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 44.393864][ T6114] ? io_uring_setup.cold+0x1f4/0x1c5e [ 44.393897][ T6114] io_uring_setup.cold+0x1f4/0x1c5e [ 44.393930][ T6114] ? __pfx_io_uring_setup+0x10/0x10 [ 44.393961][ T6114] ? do_futex+0x190/0x440 [ 44.393984][ T6114] ? __pfx_do_futex+0x10/0x10 [ 44.394016][ T6114] ? xfd_validate_state+0x129/0x190 [ 44.394053][ T6114] __ia32_sys_io_uring_setup+0xc2/0x170 [ 44.394072][ T6114] __do_fast_syscall_32+0x13a/0x8b0 [ 44.394101][ T6114] do_fast_syscall_32+0x32/0x70 [ 44.394125][ T6114] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 44.394148][ T6114] RIP: 0023:0xf741efec [ 44.394180][ T6114] Code: Unable to access opcode bytes at 0xf741efc2. [ 44.394190][ T6114] RSP: 002b:00000000f54364bc EFLAGS: 00000282 ORIG_RAX: 00000000000001a9 [ 44.394210][ T6114] RAX: ffffffffffffffda RBX: 0000000000000020 RCX: 0000000080000080 [ 44.394222][ T6114] RDX: 00000000f71a1017 RSI: 0000000000000001 RDI: 00000000f543653c [ 44.394235][ T6114] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 44.394246][ T6114] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 44.394258][ T6114] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 44.394282][ T6114] [ 44.425774][ C0] usb 8-1: yurex_control_callback - control failed: -2 [ 44.444496][ T5833] usb 8-1: USB disconnect, device number 3 [ 44.453308][ T6116] type: 4294967295 invalid [ 44.471249][ T5833] yurex 8-1:0.50: USB YUREX #0 now disconnected [ 44.550391][ T6126] capability: warning: `syz.0.109' uses 32-bit capabilities (legacy support in use) [ 44.552722][ T6126] process 'syz.0.109' launched './file0' with NULL argv: empty string added [ 44.553217][ T6126] Invalid argument reading file caps for ./file0 [ 44.646833][ T854] e1000 0000:00:06.0 eth0: Reset adapter [ 44.832139][ T6138] device-mapper: table: 248:0: multipath: priority group count mismatch (-EINVAL) [ 44.832156][ T6138] device-mapper: ioctl: error adding target to table [ 44.935100][ T5833] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 45.104896][ T5833] usb 7-1: Using ep0 maxpacket: 32 [ 45.105396][ T5833] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 45.106280][ T5833] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 45.106298][ T5833] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 45.106314][ T5833] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 45.106327][ T5833] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 45.106340][ T5833] usb 7-1: config 0 interface 0 has no altsetting 0 [ 45.107993][ T5833] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 45.108006][ T5833] usb 7-1: Product: syz [ 45.108013][ T5833] usb 7-1: Manufacturer: syz [ 45.108020][ T5833] usb 7-1: SerialNumber: syz [ 45.113410][ T5833] usb 7-1: config 0 descriptor?? [ 45.118457][ T5833] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 45.120305][ T5833] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 45.265086][ T854] usb 6-1: USB disconnect, device number 3 [ 45.273666][ T854] Unregistered device Abilis Systems DVB-Titan [ 45.277292][ T854] as10x_usb: device has been disconnected [ 45.432849][ T5811] usb 7-1: USB disconnect, device number 3 [ 45.432894][ C0] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 45.432954][ T6133] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 45.450352][ T5811] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 45.694946][ T5742] Bluetooth: hci2: command tx timeout [ 45.694968][ T5742] Bluetooth: hci3: command tx timeout [ 45.694981][ T5742] Bluetooth: hci0: command tx timeout [ 45.695007][ T5095] Bluetooth: hci1: command tx timeout [ 46.815918][ T5833] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 55.558574][ T6205] FAULT_INJECTION: forcing a failure. [ 55.558574][ T6205] name failslab, interval 1, probability 0, space 0, times 0 [ 55.558596][ T6205] CPU: 0 UID: 0 PID: 6205 Comm: syz.1.124 Tainted: G L syzkaller #0 PREEMPT(full) [ 55.558611][ T6205] Tainted: [L]=SOFTLOCKUP [ 55.558615][ T6205] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.558621][ T6205] Call Trace: [ 55.558625][ T6205] [ 55.558630][ T6205] dump_stack_lvl+0x100/0x190 [ 55.558649][ T6205] should_fail_ex.cold+0x5/0xa [ 55.558663][ T6205] should_failslab+0xc2/0x120 [ 55.558680][ T6205] __kmalloc_cache_noprof+0x91/0x6d0 [ 55.558692][ T6205] ? sysfs_init_fs_context+0xb4/0x780 [ 55.558710][ T6205] sysfs_init_fs_context+0xb4/0x780 [ 55.558726][ T6205] alloc_fs_context+0x60c/0xf40 [ 55.558746][ T6205] __ia32_sys_fsopen+0xef/0x230 [ 55.558758][ T6205] __do_fast_syscall_32+0x13a/0x8b0 [ 55.558775][ T6205] do_fast_syscall_32+0x32/0x70 [ 55.558789][ T6205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 55.558803][ T6205] RIP: 0023:0xf7f95fec [ 55.558815][ T6205] Code: Unable to access opcode bytes at 0xf7f95fc2. [ 55.558820][ T6205] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 00000000000001ae [ 55.558831][ T6205] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 55.558837][ T6205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.558843][ T6205] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 55.558849][ T6205] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 55.558855][ T6205] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.558869][ T6205] [ 55.638403][ T6208] ======================================================= [ 55.638403][ T6208] WARNING: The mand mount option has been deprecated and [ 55.638403][ T6208] and is ignored by this kernel. Remove the mand [ 55.638403][ T6208] option from the mount to silence this warning. [ 55.638403][ T6208] ======================================================= [ 55.697367][ T6209] block nbd1: shutting down sockets [ 55.741298][ T6211] [ 55.742115][ T6211] ====================================================== [ 55.744280][ T6211] WARNING: possible circular locking dependency detected [ 55.746550][ T6211] syzkaller #0 Tainted: G L [ 55.748469][ T6211] ------------------------------------------------------ [ 55.750884][ T6211] syz.3.127/6211 is trying to acquire lock: [ 55.752739][ T6211] ffffffff8efca0e0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x63/0x6a0 [ 55.755647][ T6211] [ 55.755647][ T6211] but task is already holding lock: [ 55.757920][ T6211] ffff888026ce57b0 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xbc/0xf10 [ 55.760715][ T6211] [ 55.760715][ T6211] which lock already depends on the new lock. [ 55.760715][ T6211] [ 55.763766][ T6211] [ 55.763766][ T6211] the existing dependency chain (in reverse order) is: [ 55.766390][ T6211] [ 55.766390][ T6211] -> #2 (&q->blkcg_mutex){+.+.}-{4:4}: [ 55.768646][ T6211] lock_acquire+0x1d1/0x380 [ 55.770240][ T6211] __mutex_lock+0x1a4/0x1bd0 [ 55.771853][ T6211] blkcg_activate_policy+0x34f/0xbf0 [ 55.773714][ T6211] blk_throtl_init+0x39a/0x5b0 [ 55.775383][ T6211] tg_set_conf.isra.0+0x252/0x500 [ 55.777117][ T6211] cgroup_file_write+0x1e6/0x8a0 [ 55.778824][ T6211] kernfs_fop_write_iter+0x3e0/0x5f0 [ 55.780671][ T6211] vfs_write+0x6af/0x1050 [ 55.782201][ T6211] ksys_write+0x12a/0x250 [ 55.783743][ T6211] __do_fast_syscall_32+0x13a/0x8b0 [ 55.785542][ T6211] do_fast_syscall_32+0x32/0x70 [ 55.787241][ T6211] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 55.789385][ T6211] [ 55.789385][ T6211] -> #1 (&q->q_usage_counter(io)#17){++++}-{0:0}: [ 55.792051][ T6211] lock_acquire+0x1d1/0x380 [ 55.793672][ T6211] blk_alloc_queue+0x610/0x790 [ 55.795336][ T6211] blk_mq_alloc_queue+0x174/0x290 [ 55.797085][ T6211] __blk_mq_alloc_disk+0x29/0x120 [ 55.798826][ T6211] loop_add+0x498/0xb60 [ 55.800332][ T6211] loop_init+0x1d3/0x200 [ 55.801840][ T6211] do_one_initcall+0x11c/0x6f0 [ 55.803518][ T6211] kernel_init_freeable+0x6ea/0x7b0 [ 55.805327][ T6211] kernel_init+0x21/0x1e0 [ 55.806863][ T6211] ret_from_fork+0x730/0xd60 [ 55.808515][ T6211] ret_from_fork_asm+0x1a/0x30 [ 55.810183][ T6211] [ 55.810183][ T6211] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 55.812464][ T6211] check_prev_add+0xeb/0xe60 [ 55.814080][ T6211] __lock_acquire+0x1528/0x1f40 [ 55.815790][ T6211] lock_acquire+0x1d1/0x380 [ 55.817388][ T6211] fs_reclaim_acquire+0xc4/0x100 [ 55.819094][ T6211] kmem_cache_alloc_noprof+0x63/0x6a0 [ 55.820971][ T6211] __radix_tree_preload+0x333/0x820 [ 55.822765][ T6211] blkg_conf_prep+0x489/0xf10 [ 55.824406][ T6211] tg_set_conf.isra.0+0x1ed/0x500 [ 55.826166][ T6211] cgroup_file_write+0x1e6/0x8a0 [ 55.827878][ T6211] kernfs_fop_write_iter+0x3e0/0x5f0 [ 55.829733][ T6211] vfs_write+0x6af/0x1050 [ 55.831260][ T6211] ksys_write+0x12a/0x250 [ 55.832812][ T6211] __do_fast_syscall_32+0x13a/0x8b0 [ 55.834596][ T6211] do_fast_syscall_32+0x32/0x70 [ 55.836334][ T6211] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 55.838790][ T6211] [ 55.838790][ T6211] other info that might help us debug this: [ 55.838790][ T6211] [ 55.841982][ T6211] Chain exists of: [ 55.841982][ T6211] fs_reclaim --> &q->q_usage_counter(io)#17 --> &q->blkcg_mutex [ 55.841982][ T6211] [ 55.846179][ T6211] Possible unsafe locking scenario: [ 55.846179][ T6211] [ 55.848486][ T6211] CPU0 CPU1 [ 55.850143][ T6211] ---- ---- [ 55.851797][ T6211] lock(&q->blkcg_mutex); [ 55.853208][ T6211] lock(&q->q_usage_counter(io)#17); [ 55.855634][ T6211] lock(&q->blkcg_mutex); [ 55.857768][ T6211] lock(fs_reclaim); [ 55.859015][ T6211] [ 55.859015][ T6211] *** DEADLOCK *** [ 55.859015][ T6211] [ 55.861501][ T6211] locks held by syz.3.127/6211: 6, last CPU#2: [ 55.863411][ T6211] #0: ffff8880262102b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 55.866842][ T6211] #1: ffff888014128460 (sb_writers#10){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 55.870418][ T6211] #2: ffff888023f70c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 55.874223][ T6211] #3: ffff88802ad9ca58 (kn->active#73){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 55.878149][ T6211] #4: ffff888026ce5630 (&q->rq_qos_mutex){+.+.}-{4:4}, at: blkg_conf_open_bdev+0x253/0x410 [ 55.882070][ T6211] #5: ffff888026ce57b0 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xbc/0xf10 [ 55.885796][ T6211] [ 55.885796][ T6211] stack backtrace: [ 55.888129][ T6211] CPU: 2 UID: 0 PID: 6211 Comm: syz.3.127 Tainted: G L syzkaller #0 PREEMPT(full) [ 55.892290][ T6211] Tainted: [L]=SOFTLOCKUP [ 55.894000][ T6211] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.897979][ T6211] Call Trace: [ 55.899317][ T6211] [ 55.900533][ T6211] dump_stack_lvl+0x100/0x190 [ 55.902427][ T6211] print_circular_bug.cold+0x178/0x1be [ 55.904591][ T6211] check_noncircular+0x146/0x160 [ 55.906603][ T6211] check_prev_add+0xeb/0xe60 [ 55.908481][ T6211] ? check_noncircular+0x97/0x160 [ 55.910508][ T6211] __lock_acquire+0x1528/0x1f40 [ 55.912488][ T6211] lock_acquire+0x1d1/0x380 [ 55.914318][ T6211] ? kmem_cache_alloc_noprof+0x63/0x6a0 [ 55.916583][ T6211] fs_reclaim_acquire+0xc4/0x100 [ 55.918567][ T6211] ? kmem_cache_alloc_noprof+0x63/0x6a0 [ 55.920792][ T6211] kmem_cache_alloc_noprof+0x63/0x6a0 [ 55.922935][ T6211] ? __radix_tree_preload+0x2f4/0x820 [ 55.925098][ T6211] ? __radix_tree_preload+0x333/0x820 [ 55.927235][ T6211] __radix_tree_preload+0x333/0x820 [ 55.929314][ T6211] blkg_conf_prep+0x489/0xf10 [ 55.931207][ T6211] tg_set_conf.isra.0+0x1ed/0x500 [ 55.933154][ T6211] ? __pfx_tg_set_conf.isra.0+0x10/0x10 [ 55.935368][ T6211] ? kernfs_root+0xf8/0x2a0 [ 55.937223][ T6211] cgroup_file_write+0x1e6/0x8a0 [ 55.939210][ T6211] ? __pfx_tg_set_conf_uint+0x10/0x10 [ 55.941376][ T6211] ? __pfx_cgroup_file_write+0x10/0x10 [ 55.943301][ T6211] ? __kmalloc_noprof+0x350/0x840 [ 55.944921][ T6211] kernfs_fop_write_iter+0x3e0/0x5f0 [ 55.946587][ T6211] ? __pfx_cgroup_file_write+0x10/0x10 [ 55.948309][ T6211] vfs_write+0x6af/0x1050 [ 55.949686][ T6211] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 55.951521][ T6211] ? __pfx_vfs_write+0x10/0x10 [ 55.953006][ T6211] ? find_held_lock+0x2b/0x80 [ 55.954502][ T6211] ksys_write+0x12a/0x250 [ 55.955901][ T6211] ? __pfx_ksys_write+0x10/0x10 [ 55.957453][ T6211] __do_fast_syscall_32+0x13a/0x8b0 [ 55.959103][ T6211] ? lockdep_hardirqs_on+0x7d/0x110 [ 55.960772][ T6211] do_fast_syscall_32+0x32/0x70 [ 55.962315][ T6211] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 55.964332][ T6211] RIP: 0023:0xf73eefec [ 55.965623][ T6211] Code: Unable to access opcode bytes at 0xf73eefc2. [ 55.967668][ T6211] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 55.970259][ T6211] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 55.972698][ T6211] RDX: 000000000000006a RSI: 0000000000000000 RDI: 0000000000000000 [ 55.975182][ T6211] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 55.978042][ T6211] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 55.981149][ T6211] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.984266][ T6211]