last executing test programs: 2m51.421697091s ago: executing program 3 (id=865): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407f1802020000010200010902200001010080320904000002000000000705810240000007050202400000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 2m50.771405721s ago: executing program 1 (id=870): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000e0)='\a\x00', 0x2, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='file0\x00', 0x42, 0x1ff) pwrite64(r2, &(0x7f0000000200)="0000ffff1000000000010000", 0xc, 0xb0) pwrite64(r2, &(0x7f0000000300)="434953530000000006010000020000000000000000000000000000000000000020000000000000008000000000000000000000000000000000000000000000004000000000000000000000002000"/96, 0x58, 0x100) pwrite64(r2, &(0x7f0000000400)="1000000000000000", 0x8, 0x1b4) lseek(r2, 0x0, 0x0) read(r2, &(0x7f0000800000)=""/512, 0x200) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='0000:00:02.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000640)='hpsa\x00', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/drivers/hpsa/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000740)='0000:00:02.0\x00', 0xd) 2m49.781725111s ago: executing program 2 (id=876): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000020)=@filename='none\x00', &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000120)=@filename='devtmpfs\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='high-speed\x00', 0xa) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/Loopback.0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f00000004c0)='dummy_udc.0\x00', 0xb) close(r1) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r4, 0x5514) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r5, 0x5514) 2m49.650096818s ago: executing program 2 (id=878): openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x1, 0x0) 2m49.580599267s ago: executing program 2 (id=879): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/module/usbcore/parameters/quirks\x00', 0x1, 0x0) write(r0, &(0x7f0000000c00)='9710:7830:b', 0xb) r1 = syz_usb_connect(0x3, 0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000040109730780001000000010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000240)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000540)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000740)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) syz_open_dev$usbfs(&(0x7f0000000200), 0x19, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/5-1/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/usb/devices/5-1/power/control\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='auto', 0x4) 2m48.369206869s ago: executing program 3 (id=882): syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xc, 0x0) syz_usb_connect(0x2, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040341278560001000000010902200001010080320904000002080650000705810200020007050202000200"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x0) read(r0, &(0x7f0000000500)=""/256, 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x0, 0x0) read(r1, &(0x7f0000000700)=""/256, 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file2\x00', 0x0, 0x0) read(r2, &(0x7f0000000900)=""/256, 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file3\x00', 0x0, 0x0) read(r3, &(0x7f0000000b00)=""/256, 0x100) 2m46.530807639s ago: executing program 2 (id=886): syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x200, 0xfff, 0x0, "ffffffffffff"}]}, {{0x9, 0x5, 0x1, 0x1, 0x40, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x200, 0xfff, 0x0, "ffffffffffff"}]}, {{0x9, 0x5, 0x82, 0x1, 0x40, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x19, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect={0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x2}, 0x0) 2m45.370923411s ago: executing program 3 (id=890): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x777) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='0\x00', 0x1) write(r0, &(0x7f0000000400)='1\x00', 0x1) write(r0, &(0x7f0000000400)='0\x00', 0x1) 2m45.291401939s ago: executing program 3 (id=891): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401e0903000001000000010902270001010080320904000003ff00000007058102000200070502020002000705830340000a"], 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 2m43.501591819s ago: executing program 2 (id=895): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040081605000001010203010902270001010080320904000003ff000000070581034000010705820240000007050202400000"], 0x0) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000400)="030000000000") syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000500)="d0000f") syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000600)="030000000000") syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000700)="c80000") nanosleep(&(0x7f0000000300)={0x1}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000800)='./ttyUSB0\x00', 0x81b6, 0xbc00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./ttyUSB0\x00', 0x2, 0x0) ioctl$TIOCSBRK(r1, 0x5427) ioctl$TIOCCBRK(r1, 0x5428) 2m42.241738773s ago: executing program 3 (id=899): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080fa0904000000ffffff00"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 2m20.934080515s ago: executing program 32 (id=900): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='mem', 0x3) 2m20.890070708s ago: executing program 33 (id=870): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000e0)='\a\x00', 0x2, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='file0\x00', 0x42, 0x1ff) pwrite64(r2, &(0x7f0000000200)="0000ffff1000000000010000", 0xc, 0xb0) pwrite64(r2, &(0x7f0000000300)="434953530000000006010000020000000000000000000000000000000000000020000000000000008000000000000000000000000000000000000000000000004000000000000000000000002000"/96, 0x58, 0x100) pwrite64(r2, &(0x7f0000000400)="1000000000000000", 0x8, 0x1b4) lseek(r2, 0x0, 0x0) read(r2, &(0x7f0000800000)=""/512, 0x200) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='0000:00:02.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000640)='hpsa\x00', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/drivers/hpsa/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000740)='0000:00:02.0\x00', 0xd) 2m20.865341605s ago: executing program 34 (id=895): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040081605000001010203010902270001010080320904000003ff000000070581034000010705820240000007050202400000"], 0x0) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000400)="030000000000") syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000500)="d0000f") syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000600)="030000000000") syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000000700)="c80000") nanosleep(&(0x7f0000000300)={0x1}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000800)='./ttyUSB0\x00', 0x81b6, 0xbc00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./ttyUSB0\x00', 0x2, 0x0) ioctl$TIOCSBRK(r1, 0x5427) ioctl$TIOCCBRK(r1, 0x5428) 2m20.792307093s ago: executing program 35 (id=899): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080fa0904000000ffffff00"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1m55.691319981s ago: executing program 4 (id=972): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x8) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) close(r0) sync() 1m55.609991117s ago: executing program 4 (id=973): mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sysfs\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='foo', 0x3) 1m55.551422301s ago: executing program 4 (id=975): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setrlimit(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write(r0, &(0x7f0000000080)='1000', 0x4) mmap(&(0x7f0000000000/0x1000000)=nil, 0x70000000, 0x3, 0x4032, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) read(r1, &(0x7f0000000000), 0x2000000) 1m55.18054722s ago: executing program 4 (id=977): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000020)=@filename='none\x00', &(0x7f0000000040)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000120)=@filename='devtmpfs\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='high-speed\x00', 0xa) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/Loopback.0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f00000004c0)='dummy_udc.0\x00', 0xb) close(r1) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r4, 0x5514) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r5, 0x5514) 1m55.027127958s ago: executing program 4 (id=981): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/power/pm_test\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='core', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/power/state\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='mem', 0x3) (async) 1m31.536066611s ago: executing program 36 (id=981): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/power/pm_test\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='core', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/power/state\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='mem', 0x3) (async) 1m31.486986331s ago: executing program 37 (id=984): syz_usb_connect(0x2, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cd06040101000102030109022000010100c0010904000002000000000705010240000007058103400001"], 0x0) nanosleep(&(0x7f0000000300)={0x3}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TIOCSBRK(r0, 0x542b) 1m31.472189481s ago: executing program 38 (id=982): mkdir(&(0x7f0000001000)='sys\x00', 0x1ff) mount(&(0x7f0000001040)=@filename='none\x00', &(0x7f0000001080)='sys\x00', &(0x7f00000010c0)='sysfs\x00', 0x0, &(0x7f0000001100)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000001140)='sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000001180)='dummy_udc.0\x00', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f00000011c0)='sys/bus/pci/drivers/pch_udc/new_id\x00', 0x1, 0x0) write(r1, &(0x7f0000001200)='8086 10d3\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000001240)='sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000001280)='0000:00:02.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f00000012c0)='sys/bus/pci/drivers/pch_udc/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000001300)='0000:00:02.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f0000001340)='sys/class/udc\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000001380)=""/4096, 0x1000) 1m31.429590298s ago: executing program 39 (id=983): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000c00)='9710:7830:b', 0xb) close(0xffffffffffffffff) r0 = syz_usb_connect(0x3, 0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000040109730780001000000010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000240)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000540)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000740)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) syz_open_dev$usbfs(&(0x7f0000000200), 0x19, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/5-1/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='0', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/usb/devices/5-1/power/control\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='auto', 0x4) 1m25.463458447s ago: executing program 1 (id=988): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) syz_usb_disconnect(0x3) r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a00e58680001000000010902270001010080320904000003ff000000070581024000000705020240000007058303400001"], 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000500)='my_ttyUSB0\x00', 0x81b6, 0xbc00) openat(0xffffffffffffff9c, &(0x7f0000000600)='my_ttyUSB0\x00', 0x2, 0x0) syz_usb_ep_write(r0, 0x83, 0x8, &(0x7f0000000200)="000003434c000000") 1m22.661446075s ago: executing program 0 (id=987): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000020)=@filename='none\x00', &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000120)=@filename='devtmpfs\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='high-speed\x00', 0xa) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/Loopback.0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f00000004c0)='dummy_udc.0\x00', 0xb) close(r1) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r4, 0x5514) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r5, 0x5514) 1m22.451229072s ago: executing program 0 (id=989): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000020)=@filename='none\x00', &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000120)=@filename='devtmpfs\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='high-speed\x00', 0xa) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/Loopback.0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f00000004c0)='dummy_udc.0\x00', 0xb) close(r1) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r4, 0x5514) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r5, 0x5514) 1m22.360706001s ago: executing program 1 (id=990): r0 = syz_io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x0, &(0x7f0000000090)=0x0, &(0x7f00000000a0)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='file0\x00', 0x42, 0x1ff) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_READV_FIXED={0x3c, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x0, 0x0, 0x0) 1m22.293616096s ago: executing program 1 (id=991): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000300)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000646d3000") ioctl(r0, 0xc138fd09, &(0x7f0000000500)="0400000000000000000000007001000038010000010000000000000000000000000000000000000000000000646d3000") 1m22.292332202s ago: executing program 0 (id=992): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cb0404010000000000010902200001010080320904000002000000000705810240000007050202400000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000100), 0x10, 0x2) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000500)) 1m22.174076628s ago: executing program 1 (id=993): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x16, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x17, 0x2) r3 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x18, 0x2) ioctl$USBDEVFS_RESET(r0, 0x5514) ioctl$USBDEVFS_RESET(r1, 0x5514) ioctl$USBDEVFS_RESET(r2, 0x5514) ioctl$USBDEVFS_RESET(r3, 0x5514) 1m21.816578612s ago: executing program 9 (id=986): syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040a41520900001010203010902270001010080fa0904000003ff000000070581024000000705020240000007058402400000"], 0x0) nanosleep(&(0x7f0000000040)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/usb/drivers/dvb_usb_af9005/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1-1:1.0', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/drivers/dvb_usb_af9005/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1-1:1.0', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/usb/drivers/dvb_usb_af9005/unbind\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='2-1:1.0', 0x7) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/drivers/dvb_usb_af9005/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='2-1:1.0', 0x7) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/usb/drivers/dvb_usb_af9005/unbind\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='3-1:1.0', 0x7) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers/dvb_usb_af9005/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000440)='3-1:1.0', 0x7) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/usb/drivers/dvb_usb_af9005/unbind\x00', 0x1, 0x0) write(r6, &(0x7f00000004c0)='4-1:1.0', 0x7) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/drivers/dvb_usb_af9005/bind\x00', 0x1, 0x0) write(r7, &(0x7f0000000540)='4-1:1.0', 0x7) close(r7) 1m20.642865619s ago: executing program 0 (id=994): syz_usb_connect$midi(0x3, 0x68, &(0x7f0000000740)=ANY=[@ANYBLOB="1201000200000040392ad43f4000010203010902560002010080320904000000010100000924010001090001010904010002010300000724010001160006240201010009240301020101010009050102400000000005250101010905820240000000000525010102"], 0x0) nanosleep(&(0x7f0000000000)={0x1}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0304d20, &(0x7f0000000200)={0x0, 0x1000, 0x1}) write$midi(r0, &(0x7f0000000300)="903c7f903c00", 0x6) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) 1m19.110660977s ago: executing program 1 (id=997): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='none\n', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/power/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='freeze\n', 0x7) (async) 1m19.11034969s ago: executing program 0 (id=998): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004\n\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='ACME\n\x00', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='ACMESynth\n\x00', 0xa) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) write(r4, &(0x7f00000003f0)='0\n\x00', 0x2) close(r4) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc) close(r5) nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000800), 0x0, 0x2) write$midi(r6, &(0x7f0000000900)='12345678', 0x8) nanosleep(&(0x7f0000000700)={0x0, 0xbebc200}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000b00)='\n\x00', 0x1) close(r7) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) 1m18.721075621s ago: executing program 9 (id=999): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408d0406930002000000010902270001010080fa0904000003ff000000070502020002000705810200020007058402000200"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1m18.511252689s ago: executing program 0 (id=1000): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400000010203010902290002010080500904000001ff000000070581031000010904010002ff0000000705820240000007050202400000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/speedtch/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1-1:1.0\x00', 0x8) 57.676450932s ago: executing program 40 (id=996): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904000000ff000000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys_mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys_mnt/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='tps6598x 0x38\n\x00', 0xe) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000780)={0x40, 0x1, 0x4, "01000000"}}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000800)={0x40, 0x3, 0x1, "01"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000880)={0x40, 0x3, 0x5, "0441505020"}}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000900)={0x40, 0x3, 0x1, "01"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000980)={0x40, 0x3, 0x5, "0401020304"}}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000a00)={0x40, 0x3, 0x1, "01"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000a80)={0x40, 0x3, 0x5, "0400000000"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000b00)={0x40, 0x3, 0x1, "01"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000b80)={0x40, 0x3, 0x5, "0400000000"}}) 57.629742754s ago: executing program 41 (id=999): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408d0406930002000000010902270001010080fa0904000003ff000000070502020002000705810200020007058402000200"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 57.575688323s ago: executing program 42 (id=1000): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400000010203010902290002010080500904000001ff000000070581031000010904010002ff0000000705820240000007050202400000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/speedtch/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1-1:1.0\x00', 0x8) 57.514536581s ago: executing program 43 (id=997): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='none\n', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/power/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='freeze\n', 0x7) (async) 46.610940003s ago: executing program 4 (id=1003): mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./mysys\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='devices', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='power/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='mem\n\x00\x00\x00', 0x7) 46.126919211s ago: executing program 2 (id=1001): syz_usb_connect(0x0, 0x45, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x6cd, 0x121, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x35, 0x1, 0x1, 0x0, 0xa0, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x40}}, {{0x9, 0x5, 0x1, 0x2, 0x40}}, {{0x9, 0x5, 0x82, 0x3, 0x40, 0x1}}, {{0x9, 0x5, 0x2, 0x2, 0x40}}, {{0x9, 0x5, 0x85, 0x3, 0x40, 0x1}}]}}]}}]}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000200)) 45.823853631s ago: executing program 3 (id=1002): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) poll(0x0, 0x0, 0x0) 25.192220701s ago: executing program 44 (id=1001): syz_usb_connect(0x0, 0x45, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x6cd, 0x121, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x35, 0x1, 0x1, 0x0, 0xa0, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x40}}, {{0x9, 0x5, 0x1, 0x2, 0x40}}, {{0x9, 0x5, 0x82, 0x3, 0x40, 0x1}}, {{0x9, 0x5, 0x2, 0x2, 0x40}}, {{0x9, 0x5, 0x85, 0x3, 0x40, 0x1}}]}}]}}]}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000200)) 25.146539348s ago: executing program 45 (id=1002): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) poll(0x0, 0x0, 0x0) 25.102044481s ago: executing program 46 (id=1003): mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./mysys\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='devices', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='power/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='mem\n\x00\x00\x00', 0x7) 10.024295241s ago: executing program 8 (id=1022): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', '::\x00'}, 0x8) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close$binfmt(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x1f00000000000000) 9.981263324s ago: executing program 8 (id=1025): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) getpid() mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mysys/power/state\x00', 0x1, 0x0) pwrite64(r0, &(0x7f0000000500)='freeze\n\x00', 0x5, 0x0) 6.883555854s ago: executing program 8 (id=1031): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r1, 0x4, 0x800) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000500)="a101000000000000") nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x0, &(0x7f0000000700)={0x20, 0x1, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) read$char_usb(r1, &(0x7f0000000400), 0x10) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000500)="a101000000000000") nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x0, &(0x7f0000000700)={0x20, 0x1, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) read$char_usb(r1, &(0x7f0000000400), 0x10) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000500)="a101000000000000") nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x0, &(0x7f0000000700)={0x20, 0x1, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) read$char_usb(r1, &(0x7f0000000400), 0x0) 6.685894779s ago: executing program 7 (id=1033): mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='vivid.0\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/platform/drivers/vimc/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='vimc.0\x00', 0x7) r2 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d89600001010203010902200001010080320904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0xc0, 0xe, 0x8, "0200000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 6.017102445s ago: executing program 5 (id=1049): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000020)=@filename='none\x00', &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='high-speed\x00', 0xa) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/Loopback.0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f00000004c0)='dummy_udc.0\x00', 0xb) close(r1) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r4, 0x5514) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r5, 0x5514) 3.826843055s ago: executing program 8 (id=1042): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0\n', 0x2) write(r0, &(0x7f0000000200)='1\n', 0x2) 3.821375413s ago: executing program 5 (id=1051): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000020)=@filename='none\x00', &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='high-speed\x00', 0xa) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/Loopback.0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f00000004c0)='dummy_udc.0\x00', 0xb) close(r1) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r4, 0x5514) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r5, 0x5514) 3.685518759s ago: executing program 8 (id=1043): syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406a0801010000010203010902220001010080fa090400000103010100092111010001222f0007058103400001"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbhid/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='5-1:1.0\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/usb/drivers/emi26 - firmware loader/new_id\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='086a 0101\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/drivers/emi26 - firmware loader/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='5-1:1.0\x00', 0x8) 3.617414426s ago: executing program 5 (id=1044): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/drivers/nd_region/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='region0\x00', 0x8) write(r0, &(0x7f0000000400)='region1\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/nd/drivers_probe\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='region0\x00', 0x8) write(r1, &(0x7f0000000700)='region1\x00', 0x8) 3.616929713s ago: executing program 7 (id=1045): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/reset\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/reset\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:02.0/reset\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='1', 0x1) 3.562576989s ago: executing program 5 (id=1046): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debugfs\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='debugfs\x00', &(0x7f0000000200)='./debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debugfs/dri/1/Virtual-1/edid_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)="00ffffffffffff0031d800000000000005160104a51f11782ade95a3544c99260f50540000000101010101010101010101010101010164190040410026301888360030e410000018000000100000000000000000000000000000000000fd00324b1e5009000a202020202020000000fc00564b4d530a2020202020202020007c", 0x80) 3.459930587s ago: executing program 5 (id=1047): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000020)=@filename='none\x00', &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000120)=@filename='devtmpfs\x00', 0x0, &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='high-speed\x00', 0xa) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/Loopback.0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f00000004c0)='dummy_udc.0\x00', 0xb) close(r1) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r4, 0x5514) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r5, 0x5514) 3.382618569s ago: executing program 7 (id=1048): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040bf0a70330000010200010902200001010080320904000002000000000705010240000007058202400000"], 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='sysfs\x00', &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='ccgx-ucsi 0x08\n\x00', 0xf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='ccgx-ucsi 0x08\n\x00', 0xf) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-3/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='ccgx-ucsi 0x08\n\x00', 0xf) 3.020645882s ago: executing program 6 (id=1050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000000e0500030000000000200001800700010063740000140002800800024000000003080004400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0xa00}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x1, 0x0, 0x0, {0x2, 0x0, 0xa00}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0xa00}}}, 0x78}}, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000200)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1e, 0x64, 0x0, 0x64, 0x11, 0x0, @remote, @remote}, {0x4e22, 0x4e22, 0xa, 0x0, @opaque="1234"}}}}}, 0x0) 3.020347636s ago: executing program 5 (id=1052): mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys_final\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./sys_final\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_final/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='vivid.0\x00', 0x8) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d89600001010203010902200001010080320904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_control_io(r1, &(0x7f00000000c0), &(0x7f0000001000)={0x84, &(0x7f0000002000)={0xc0, 0xe, 0x8, "0200000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000100), &(0x7f0000001000)={0x84, &(0x7f0000002000)={0xc0, 0xe, 0x8, "0200000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000400), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000500)={0x8, 0xb, 0x1}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000600)=0xb) (async) syz_usb_control_io(r1, &(0x7f0000000140), &(0x7f0000000180)={0x84, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000280), &(0x7f0000000340)={0x84, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000480), &(0x7f0000000540)={0x84, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000680), &(0x7f0000000740)={0x84, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1, 0xbebc200}, 0x0) syz_usb_control_io(r1, &(0x7f0000000880), &(0x7f00000008c0)={0x84, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 2.963575072s ago: executing program 6 (id=1053): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:02.0\x00', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='vfio-pci\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='0000:00:02.0\x00', 0xd) close(r2) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./v254\x00', 0x81b6, 0xfe00) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./v254\x00', 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000980)={0xc}) ioctl(r3, 0x3b76, &(0x7f0000000a00)="18000000000000000300"/24) ioctl(r3, 0x3b77, &(0x7f0000000b00)="10000000000000000100000000000000") r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd(0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000d00)={r7, 0x0, 0x0, 0x0}) ioctl(r3, 0x3b6e, &(0x7f0000000e00)="180000002400000001000000000000000100000005000000") ioctl(r3, 0x3b6e, &(0x7f0000000f00)="180000002400000002000000000000000100000005000000") 2.775318229s ago: executing program 6 (id=1054): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000020)=@filename='none\x00', &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000280)='high-speed\x00', 0xa) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/Loopback.0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f00000004c0)='dummy_udc.0\x00', 0xb) close(r1) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r4, 0x5514) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r5, 0x5514) 341.502965ms ago: executing program 7 (id=1055): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0\n', 0x2) write(r0, &(0x7f0000000200)='1\n', 0x2) 341.362542ms ago: executing program 8 (id=1056): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c40700a000000102030109022000010100803209040000020806ff000705010200020007058102000200"], 0x0) nanosleep(&(0x7f0000000300)={0x3}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000500)={0x53, 0x1, 0xa, 0x10, @buffer={0x0, 0x100, &(0x7f0000000800)=""/127}, &(0x7f0000000700)="2a000000000000000100", &(0x7f0000000a00)=""/16, 0x2710, 0x0, 0x0, 0x0}) 336.32286ms ago: executing program 6 (id=1063): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000020)=@filename='none\x00', &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000280)='high-speed\x00', 0xa) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/Loopback.0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f00000004c0)='dummy_udc.0\x00', 0xb) close(r1) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r4, 0x5514) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r5, 0x5514) 226.952141ms ago: executing program 7 (id=1057): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/drivers/nd_region/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='region0\x00', 0x8) write(r0, &(0x7f0000000400)='region1\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/nd/drivers_probe\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='region0\x00', 0x8) write(r1, &(0x7f0000000700)='region1\x00', 0x8) 140.532412ms ago: executing program 6 (id=1058): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000480)='header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000000500)='header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000740), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000800)={0x2, @pix={0x280, 0x1e0, 0x59555956, 0x1, 0x500, 0x96000, 0x1}}) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000900)={0x4, 0x2, 0x1}) ioctl$VIDIOC_QBUF(r1, 0xc044560f, &(0x7f0000000a00)=@mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000b00)=0x2) 18.521004ms ago: executing program 7 (id=1059): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000020)=@filename='none\x00', &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000120)=@filename='devtmpfs\x00', 0x0, &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='high-speed\x00', 0xa) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/Loopback.0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f00000004c0)='dummy_udc.0\x00', 0xb) close(r1) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r4, 0x5514) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r5, 0x5514) 0s ago: executing program 6 (id=1060): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debugfs\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='debugfs\x00', &(0x7f0000000200)='./debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debugfs/dri/1/Virtual-1/edid_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)="00ffffffffffff0031d800000000000005160104a51f11782ade95a3544c99260f50540000000101010101010101010101010101010164190040410026301888360030e410000018000000100000000000000000000000000000000000fd00324b1e5009000a202020202020000000fc00564b4d530a2020202020202020007c", 0x80) 0s ago: executing program 5 (id=1061): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0x0525\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='0xa4a5\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/target\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/nexus\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='naa.5001405000000002\x00', 0x15) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='1\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1/tcm.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f00000005c0)='dummy_udc.0\x00', 0xc) nanosleep(&(0x7f0000000600)={0x0, 0x1dcd6500}, 0x0) kernel console output (not intermixed with test programs): 96.017181][ T9257] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 296.020289][ T9257] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 296.035705][ T9257] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 296.039868][ T9257] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 296.042711][ T9257] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 296.046603][ T9257] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 296.051844][ T9257] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 296.054670][ T9257] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 296.061723][ T9257] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 296.071071][ T9257] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 296.074650][ T9257] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 296.083554][ T9257] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 296.089438][ T9257] Freezing user space processes [ 297.292589][ T64] Bluetooth: hci4: command 0x0c1a tx timeout [ 298.092705][ T64] Bluetooth: hci7: command 0x0c1a tx timeout [ 298.092765][ T5754] Bluetooth: hci5: command 0x0c1a tx timeout [ 298.098503][ T5751] Bluetooth: hci6: command 0x0c1a tx timeout [ 299.372506][ T5751] Bluetooth: hci4: command 0x0c1a tx timeout [ 300.173130][ T5751] Bluetooth: hci6: command 0x0c1a tx timeout [ 300.182574][ T5751] Bluetooth: hci5: command 0x0c1a tx timeout [ 300.182749][ T5754] Bluetooth: hci7: command 0x0c1a tx timeout [ 301.452688][ T5754] Bluetooth: hci4: command 0x0c1a tx timeout [ 302.252733][ T5754] Bluetooth: hci5: command 0x0c1a tx timeout [ 302.252814][ T5751] Bluetooth: hci7: command 0x0c1a tx timeout [ 302.254395][ T64] Bluetooth: hci6: command 0x0c1a tx timeout [ 316.110242][ T9257] Freezing user space processes failed after 20.014 seconds (3 tasks refusing to freeze, wq_busy=0): [ 316.115204][ T9257] task:syz-executor state:S stack:23336 pid:5748 tgid:5748 ppid:1 task_flags:0x40054c flags:0x08080001 [ 316.120379][ T9257] Call Trace: [ 316.121903][ T9257] [ 316.123341][ T9257] __schedule+0x125c/0x6730 [ 316.125360][ T9257] ? __pfx___schedule+0x10/0x10 [ 316.127451][ T9257] ? find_held_lock+0x2b/0x80 [ 316.129498][ T9257] ? schedule+0x225/0x2c0 [ 316.131376][ T9257] schedule+0xdd/0x2c0 [ 316.133476][ T9257] do_wait+0x1a7/0x570 [ 316.135061][ T9257] kernel_wait4+0x16d/0x280 [ 316.137033][ T9257] ? __pfx_kernel_wait4+0x10/0x10 [ 316.139262][ T9257] ? lockdep_hardirqs_on+0x78/0x100 [ 316.141532][ T9257] ? __pfx_child_wait_callback+0x10/0x10 [ 316.143826][ T9257] ? find_held_lock+0x2b/0x80 [ 316.145639][ T9257] ? zap_pid_ns_processes+0x286/0x6a0 [ 316.147700][ T9257] ? zap_pid_ns_processes+0x286/0x6a0 [ 316.150344][ T9257] zap_pid_ns_processes+0x2ca/0x6a0 [ 316.152309][ T9257] ? do_raw_write_lock+0x11e/0x260 [ 316.155360][ T9257] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 316.157761][ T9257] ? do_exit+0x2205/0x2ae0 [ 316.159689][ T9257] ? rcu_is_watching+0x12/0xc0 [ 316.161706][ T9257] do_exit+0x2377/0x2ae0 [ 316.163546][ T9257] ? __pfx_do_exit+0x10/0x10 [ 316.165560][ T9257] ? do_raw_spin_lock+0x128/0x260 [ 316.167663][ T9257] ? find_held_lock+0x2b/0x80 [ 316.169742][ T9257] ? get_signal+0x7e0/0x21e0 [ 316.171710][ T9257] do_group_exit+0xd5/0x2a0 [ 316.173835][ T9257] get_signal+0x1ec7/0x21e0 [ 316.175812][ T9257] ? __pfx_get_signal+0x10/0x10 [ 316.177908][ T9257] ? __fput+0x68d/0xb50 [ 316.179789][ T9257] arch_do_signal_or_restart+0x91/0x7a0 [ 316.182266][ T9257] ? __pfx___do_compat_sys_wait4+0x10/0x10 [ 316.184982][ T9257] ? __fput+0x692/0xb50 [ 316.186828][ T9257] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 316.189417][ T9257] exit_to_user_mode_loop+0x139/0x6f0 [ 316.191723][ T9257] ? rcu_is_watching+0x12/0xc0 [ 316.193903][ T9257] do_int80_emulation+0x513/0x720 [ 316.196088][ T9257] asm_int80_emulation+0x1a/0x20 [ 316.198214][ T9257] RIP: 0023:0xf71b74eb [ 316.199972][ T9257] RSP: 002b:00000000ffb66b5c EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 316.203763][ T9257] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00000000ffb66cf8 [ 316.207159][ T9257] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 316.210340][ T9257] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 316.213443][ T9257] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 316.216390][ T9257] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 316.219365][ T9257] [ 316.220642][ T9257] task:syz.1.870 state:D stack:24536 pid:8645 tgid:8643 ppid:5748 task_flags:0x400040 flags:0x08080002 [ 316.224618][ T9257] Call Trace: [ 316.225746][ T9257] [ 316.226725][ T9257] __schedule+0x125c/0x6730 [ 316.228258][ T9257] ? __pfx___schedule+0x10/0x10 [ 316.229861][ T9257] ? find_held_lock+0x2b/0x80 [ 316.231386][ T9257] ? schedule+0x225/0x2c0 [ 316.232880][ T9257] schedule+0xdd/0x2c0 [ 316.234236][ T9257] schedule_timeout+0x127/0x280 [ 316.235794][ T9257] ? __pfx_schedule_timeout+0x10/0x10 [ 316.237617][ T9257] ? __pfx_process_timeout+0x10/0x10 [ 316.239664][ T9257] msleep+0x32/0x50 [ 316.241136][ T9257] hpsa_init_one+0xfee/0x53e0 [ 316.242896][ T9257] ? cpu_hotplug_disable+0x17/0x30 [ 316.244604][ T9257] ? __pfx_rpm_resume+0x10/0x10 [ 316.246361][ T9257] ? do_raw_spin_lock+0x128/0x260 [ 316.248454][ T9257] ? __pfx_hpsa_init_one+0x10/0x10 [ 316.250456][ T9257] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 316.253730][ T9257] ? lockdep_hardirqs_on+0x78/0x100 [ 316.255826][ T9257] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 316.258337][ T9257] ? __pfx_hpsa_init_one+0x10/0x10 [ 316.260591][ T9257] local_pci_probe+0xdd/0x1b0 [ 316.263382][ T9257] pci_call_probe+0x176/0x800 [ 316.265277][ T9257] ? __pfx_pci_call_probe+0x10/0x10 [ 316.267291][ T9257] ? find_held_lock+0x2b/0x80 [ 316.269244][ T9257] ? pci_match_device+0x450/0x5f0 [ 316.271000][ T9257] ? pci_match_device+0x450/0x5f0 [ 316.273339][ T9257] ? pci_match_id+0x34d/0x3f0 [ 316.275452][ T9257] ? pci_match_device+0xb4/0x5f0 [ 316.277553][ T9257] pci_device_probe+0x1cd/0x370 [ 316.279223][ T9257] ? __pfx_pci_device_probe+0x10/0x10 [ 316.281012][ T9257] really_probe+0x241/0xa60 [ 316.282650][ T9257] __driver_probe_device+0x20e/0x450 [ 316.284359][ T9257] device_driver_attach+0xd1/0x220 [ 316.286014][ T9257] bind_store+0xf4/0x190 [ 316.287457][ T9257] ? __pfx_bind_store+0x10/0x10 [ 316.289008][ T9257] drv_attr_store+0x74/0xb0 [ 316.290504][ T9257] ? __pfx_drv_attr_store+0x10/0x10 [ 316.292161][ T9257] sysfs_kf_write+0xf2/0x150 [ 316.293760][ T9257] kernfs_fop_write_iter+0x3e0/0x5f0 [ 316.295468][ T9257] ? __pfx_sysfs_kf_write+0x10/0x10 [ 316.297627][ T9257] vfs_write+0x6ac/0x1050 [ 316.299127][ T9257] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 316.301109][ T9257] ? __pfx_vfs_write+0x10/0x10 [ 316.302834][ T9257] ? find_held_lock+0x2b/0x80 [ 316.304372][ T9257] ksys_write+0x12a/0x250 [ 316.305784][ T9257] ? __pfx_ksys_write+0x10/0x10 [ 316.307386][ T9257] __do_fast_syscall_32+0xe7/0x970 [ 316.309037][ T9257] do_fast_syscall_32+0x32/0x70 [ 316.310648][ T9257] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 316.312748][ T9257] RIP: 0023:0xf707efec [ 316.314095][ T9257] RSP: 002b:00000000f544c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 316.316754][ T9257] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000740 [ 316.319389][ T9257] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 316.322071][ T9257] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 316.324783][ T9257] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 316.327333][ T9257] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 316.329841][ T9257] [ 316.330901][ T9257] task:syz.6.982 state:D stack:25576 pid:9260 tgid:9259 ppid:8723 task_flags:0x400140 flags:0x08080002 [ 316.334781][ T9257] Call Trace: [ 316.335860][ T9257] [ 316.336853][ T9257] __schedule+0x125c/0x6730 [ 316.338345][ T9257] ? do_raw_spin_lock+0x128/0x260 [ 316.339974][ T9257] ? __pfx___schedule+0x10/0x10 [ 316.341602][ T9257] ? find_held_lock+0x2b/0x80 [ 316.343236][ T9257] ? schedule+0x225/0x2c0 [ 316.344672][ T9257] schedule+0xdd/0x2c0 [ 316.346108][ T9257] schedule_preempt_disabled+0x13/0x30 [ 316.348059][ T9257] __mutex_lock+0xccc/0x1bd0 [ 316.349581][ T9257] ? device_release_driver_internal+0xb2/0x620 [ 316.351549][ T9257] ? do_raw_spin_lock+0x128/0x260 [ 316.353373][ T9257] ? __pfx___mutex_lock+0x10/0x10 [ 316.355435][ T9257] ? do_raw_spin_unlock+0x145/0x1e0 [ 316.357415][ T9257] ? _raw_spin_unlock+0x28/0x50 [ 316.359187][ T9257] ? __pfx_device_match_name+0x10/0x10 [ 316.361047][ T9257] ? bus_find_device+0x17a/0x1e0 [ 316.363222][ T9257] ? device_release_driver_internal+0xb2/0x620 [ 316.365466][ T9257] device_release_driver_internal+0xb2/0x620 [ 316.367602][ T9257] unbind_store+0xf8/0x110 [ 316.369330][ T9257] ? __pfx_unbind_store+0x10/0x10 [ 316.371432][ T9257] drv_attr_store+0x74/0xb0 [ 316.373516][ T9257] ? __pfx_drv_attr_store+0x10/0x10 [ 316.375252][ T9257] sysfs_kf_write+0xf2/0x150 [ 316.377036][ T9257] kernfs_fop_write_iter+0x3e0/0x5f0 [ 316.379104][ T9257] ? __pfx_sysfs_kf_write+0x10/0x10 [ 316.381367][ T9257] vfs_write+0x6ac/0x1050 [ 316.383323][ T9257] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 316.385789][ T9257] ? __pfx_vfs_write+0x10/0x10 [ 316.387636][ T9257] ? find_held_lock+0x2b/0x80 [ 316.389669][ T9257] ksys_write+0x12a/0x250 [ 316.391491][ T9257] ? __pfx_ksys_write+0x10/0x10 [ 316.393776][ T9257] __do_fast_syscall_32+0xe7/0x970 [ 316.396069][ T9257] do_fast_syscall_32+0x32/0x70 [ 316.398298][ T9257] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 316.401104][ T9257] RIP: 0023:0xf709efec [ 316.403121][ T9257] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 316.406555][ T9257] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001280 [ 316.409827][ T9257] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 316.413308][ T9257] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 316.416622][ T9257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.419914][ T9257] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 316.423514][ T9257] [ 316.426092][ T9257] OOM killer enabled. [ 316.427988][ T9257] Restarting tasks: Starting [ 316.439101][ T9257] Restarting tasks: Done [ 316.444729][ T9257] random: crng reseeded on system resumption [ 316.488824][ T5857] usb 12-1: USB disconnect, device number 7 [ 316.497580][ T9257] PM: suspend exit [ 316.508608][ T5849] usb 10-1: USB disconnect, device number 13 [ 316.591353][ T5754] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 316.602630][ T5754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 316.609565][ T5754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 316.613351][ T5754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 316.616817][ T5754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 316.777192][ T5751] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 316.791978][ T5094] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 316.796277][ T5094] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 316.815001][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 316.819944][ T5750] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 316.849406][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 316.849895][ T5750] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 316.852986][ T5094] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 316.862046][ T64] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 316.862116][ T5094] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.863286][ T5750] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 316.875046][ T5750] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 316.877296][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 316.878534][ T5094] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 316.887031][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 317.159763][ T5823] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.232772][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.235444][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.306502][ T5823] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.480089][ T5823] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.611619][ T5823] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.971556][ T5823] bridge_slave_1: left allmulticast mode [ 317.974584][ T5823] bridge_slave_1: left promiscuous mode [ 317.977362][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.988058][ T5823] bridge_slave_0: left allmulticast mode [ 317.990503][ T5823] bridge_slave_0: left promiscuous mode [ 317.994317][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.160287][ T5823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.167093][ T5823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.173936][ T5823] bond0 (unregistering): Released all slaves [ 318.210638][ T9329] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.214062][ T9329] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.217316][ T9329] bridge_slave_0: entered allmulticast mode [ 318.221667][ T9329] bridge_slave_0: entered promiscuous mode [ 318.227290][ T9329] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.230409][ T9329] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.235357][ T9329] bridge_slave_1: entered allmulticast mode [ 318.242935][ T9329] bridge_slave_1: entered promiscuous mode [ 318.351074][ T9337] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.354653][ T9337] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.357990][ T9337] bridge_slave_0: entered allmulticast mode [ 318.361940][ T9337] bridge_slave_0: entered promiscuous mode [ 318.368396][ T9337] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.371599][ T9337] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.374969][ T9337] bridge_slave_1: entered allmulticast mode [ 318.379000][ T9337] bridge_slave_1: entered promiscuous mode [ 318.403939][ T9329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.411824][ T9329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.547292][ T9329] team0: Port device team_slave_0 added [ 318.582223][ T9337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.589047][ T9336] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.593234][ T9336] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.596488][ T9336] bridge_slave_0: entered allmulticast mode [ 318.600686][ T9336] bridge_slave_0: entered promiscuous mode [ 318.606222][ T9336] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.612041][ T9336] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.615449][ T9336] bridge_slave_1: entered allmulticast mode [ 318.619517][ T9336] bridge_slave_1: entered promiscuous mode [ 318.629980][ T9329] team0: Port device team_slave_1 added [ 318.653906][ T5744] Bluetooth: hci0: command tx timeout [ 318.658667][ T9337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.759269][ T9338] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.762600][ T9338] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.765807][ T9338] bridge_slave_0: entered allmulticast mode [ 318.769850][ T9338] bridge_slave_0: entered promiscuous mode [ 318.776597][ T9336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.787098][ T5823] hsr_slave_0: left promiscuous mode [ 318.790228][ T5823] hsr_slave_1: left promiscuous mode [ 318.793387][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.796743][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.802008][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.805507][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.819259][ T5823] veth1_macvtap: left promiscuous mode [ 318.821712][ T5823] veth0_macvtap: left promiscuous mode [ 318.826979][ T5823] veth1_vlan: left promiscuous mode [ 318.829543][ T5823] veth0_vlan: left promiscuous mode [ 318.980401][ T5744] Bluetooth: hci1: command tx timeout [ 319.052709][ T5744] Bluetooth: hci6: command tx timeout [ 319.052737][ T5094] Bluetooth: hci2: command tx timeout [ 319.101483][ T5823] team0 (unregistering): Port device team_slave_1 removed [ 319.122013][ T5823] team0 (unregistering): Port device team_slave_0 removed [ 319.247323][ T9329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.250355][ T9329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.262107][ T9329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.268898][ T9329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.272000][ T9329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.282954][ T9329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.288319][ T5448] 8021q: adding VLAN 0 to HW filter on device eth13 [ 319.294000][ T9337] team0: Port device team_slave_0 added [ 319.296162][ T9338] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.299858][ T9338] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.303266][ T9338] bridge_slave_1: entered allmulticast mode [ 319.307390][ T9338] bridge_slave_1: entered promiscuous mode [ 319.313954][ T9336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.346114][ T9337] team0: Port device team_slave_1 added [ 319.413599][ T9336] team0: Port device team_slave_0 added [ 319.417435][ T9336] team0: Port device team_slave_1 added [ 319.421896][ T9338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.450349][ T9338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.471907][ T9337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.475145][ T9337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.486030][ T9337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.501294][ T9337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.504122][ T9337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.512661][ T9337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.564245][ T9336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.567319][ T9336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.578288][ T9336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.609448][ T9338] team0: Port device team_slave_0 added [ 319.625040][ T9329] hsr_slave_0: entered promiscuous mode [ 319.628569][ T9329] hsr_slave_1: entered promiscuous mode [ 319.633162][ T9329] debugfs: 'hsr0' already exists in 'hsr' [ 319.635691][ T9329] Cannot create hsr debugfs directory [ 319.639071][ T9336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.642220][ T9336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.653133][ T9336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.676669][ T9338] team0: Port device team_slave_1 added [ 319.697240][ T9337] hsr_slave_0: entered promiscuous mode [ 319.700467][ T9337] hsr_slave_1: entered promiscuous mode [ 319.703673][ T9337] debugfs: 'hsr0' already exists in 'hsr' [ 319.706174][ T9337] Cannot create hsr debugfs directory [ 319.731063][ T9338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.734200][ T9338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.742112][ T9338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.752928][ T9338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.755752][ T9338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.766059][ T9338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.813334][ T9336] hsr_slave_0: entered promiscuous mode [ 319.817604][ T9336] hsr_slave_1: entered promiscuous mode [ 319.820646][ T9336] debugfs: 'hsr0' already exists in 'hsr' [ 319.823310][ T9336] Cannot create hsr debugfs directory [ 319.914514][ T9338] hsr_slave_0: entered promiscuous mode [ 319.918054][ T9338] hsr_slave_1: entered promiscuous mode [ 319.921100][ T9338] debugfs: 'hsr0' already exists in 'hsr' [ 319.923744][ T9338] Cannot create hsr debugfs directory [ 320.053336][ T5823] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.094553][ T5448] 8021q: adding VLAN 0 to HW filter on device eth14 [ 320.210991][ T9337] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.248165][ T5823] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.322832][ T9337] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.386863][ T5823] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.448678][ T9337] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.501653][ T5823] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.543449][ T5448] 8021q: adding VLAN 0 to HW filter on device eth15 [ 320.599457][ T9337] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.733621][ T5744] Bluetooth: hci0: command tx timeout [ 320.779255][ T5823] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.812053][ T5448] 8021q: adding VLAN 0 to HW filter on device eth16 [ 320.856712][ T9337] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 320.876723][ T9337] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 320.883043][ T9337] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 320.893802][ T9337] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 321.004362][ T5823] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.014536][ T9337] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 321.020766][ T9337] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 321.024640][ T9337] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 321.029754][ T9337] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 321.053636][ T5744] Bluetooth: hci1: command tx timeout [ 321.117682][ T5823] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.133263][ T5744] Bluetooth: hci2: command tx timeout [ 321.133325][ T5094] Bluetooth: hci6: command tx timeout [ 321.139843][ T9337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.151527][ T9337] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.163233][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.166686][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.183587][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.186524][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.268841][ T5823] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.378726][ T5448] 8021q: adding VLAN 0 to HW filter on device eth17 [ 321.460119][ T5823] bridge_slave_1: left allmulticast mode [ 321.463129][ T5823] bridge_slave_1: left promiscuous mode [ 321.465811][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.477912][ T5823] bridge_slave_0: left allmulticast mode [ 321.480274][ T5823] bridge_slave_0: left promiscuous mode [ 321.485332][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.498512][ T5823] bridge_slave_1: left allmulticast mode [ 321.500931][ T5823] bridge_slave_1: left promiscuous mode [ 321.504318][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.517019][ T5823] bridge_slave_0: left allmulticast mode [ 321.519578][ T5823] bridge_slave_0: left promiscuous mode [ 321.522001][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.752805][ T5823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.759279][ T5823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.767676][ T5823] bond0 (unregistering): Released all slaves [ 321.880162][ T5823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.889588][ T5823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.894367][ T5823] bond0 (unregistering): Released all slaves [ 321.902935][ T5448] 8021q: adding VLAN 0 to HW filter on device eth18 [ 322.086271][ T9337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.174860][ T9337] veth0_vlan: entered promiscuous mode [ 322.185036][ T9337] veth1_vlan: entered promiscuous mode [ 322.219033][ T9337] veth0_macvtap: entered promiscuous mode [ 322.227078][ T9337] veth1_macvtap: entered promiscuous mode [ 322.298718][ T5448] 8021q: adding VLAN 0 to HW filter on device eth19 [ 322.306847][ T9337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.320900][ T9337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.352583][ T8790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.375772][ T8790] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.438934][ T8790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.445075][ T8790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.468607][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.482472][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.539894][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.548155][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.571275][ T5448] 8021q: adding VLAN 0 to HW filter on device eth20 [ 322.677653][ T5823] hsr_slave_0: left promiscuous mode [ 322.680842][ T5823] hsr_slave_1: left promiscuous mode [ 322.685616][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.688733][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.693394][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.696841][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.705617][ T5823] hsr_slave_0: left promiscuous mode [ 322.708670][ T5823] hsr_slave_1: left promiscuous mode [ 322.711605][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.716307][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.720877][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.725014][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.740076][ T5823] veth1_macvtap: left promiscuous mode [ 322.742607][ T5823] veth0_macvtap: left promiscuous mode [ 322.745112][ T5823] veth1_vlan: left promiscuous mode [ 322.747442][ T5823] veth0_vlan: left promiscuous mode [ 322.751344][ T5823] veth1_macvtap: left promiscuous mode [ 322.754718][ T5823] veth0_macvtap: left promiscuous mode [ 322.757541][ T5823] veth1_vlan: left promiscuous mode [ 322.760254][ T5823] veth0_vlan: left promiscuous mode [ 322.812482][ T5094] Bluetooth: hci0: command tx timeout [ 322.872585][ T8849] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 323.042732][ T8849] usb 6-1: Using ep0 maxpacket: 8 [ 323.050354][ T8849] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 323.056838][ T8849] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 323.060165][ T8849] usb 6-1: config 0 has no interface number 0 [ 323.063224][ T8849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.137744][ T5823] team0 (unregistering): Port device team_slave_1 removed [ 323.142595][ T5094] Bluetooth: hci1: command tx timeout [ 323.154421][ T5823] team0 (unregistering): Port device team_slave_0 removed [ 323.212540][ T5094] Bluetooth: hci2: command tx timeout [ 323.222581][ T5094] Bluetooth: hci6: command tx timeout [ 323.419905][ T5823] team0 (unregistering): Port device team_slave_1 removed [ 323.441114][ T5823] team0 (unregistering): Port device team_slave_0 removed [ 323.841457][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4 [ 323.844465][ T9336] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 323.853984][ T9336] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 323.858175][ T9336] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 323.867069][ T9336] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 323.870966][ T9336] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 323.876960][ T9336] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 323.880721][ T9336] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 323.891415][ T9336] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 324.059057][ T9338] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 324.104488][ T9338] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 324.113653][ T9338] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 324.120704][ T9338] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 324.124732][ T9338] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 324.137902][ T9338] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 324.148877][ T9338] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 324.166990][ T9338] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 324.269154][ T9329] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 324.278876][ T9329] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 324.282981][ T9329] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 324.291680][ T9329] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 324.300349][ T5448] 8021q: adding VLAN 0 to HW filter on device eth21 [ 324.307931][ T9329] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 324.321794][ T9329] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 324.326662][ T9329] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 324.332828][ T9329] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 324.351126][ T9336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.394114][ T9336] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.424681][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.427777][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.449562][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.453025][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.519494][ T9338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.565373][ T9338] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.586547][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.589785][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.595411][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.598694][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.618731][ T9329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.626164][ T5448] 8021q: adding VLAN 0 to HW filter on device eth22 [ 324.661368][ T9329] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.687851][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.691304][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.712150][ T222] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.715304][ T222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.893790][ T5094] Bluetooth: hci0: command tx timeout [ 324.999003][ T5448] 8021q: adding VLAN 0 to HW filter on device eth23 [ 325.020445][ T9336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.070765][ T9336] veth0_vlan: entered promiscuous mode [ 325.080901][ T9336] veth1_vlan: entered promiscuous mode [ 325.115300][ T9336] veth0_macvtap: entered promiscuous mode [ 325.123054][ T9336] veth1_macvtap: entered promiscuous mode [ 325.145711][ T9336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.164616][ T9336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.212756][ T5094] Bluetooth: hci1: command tx timeout [ 325.226829][ T9338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.243469][ T5820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.281626][ T9329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.290624][ T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.297120][ T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.302754][ T5094] Bluetooth: hci6: command tx timeout [ 325.302793][ T5744] Bluetooth: hci2: command tx timeout [ 325.306287][ T5820] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.331795][ T222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.335171][ T5820] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.339022][ T222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.343888][ T5820] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.542307][ T9338] veth0_vlan: entered promiscuous mode [ 325.570678][ T9338] veth1_vlan: entered promiscuous mode [ 325.586615][ T9329] veth0_vlan: entered promiscuous mode [ 325.593232][ T9329] veth1_vlan: entered promiscuous mode [ 325.617867][ T9338] veth0_macvtap: entered promiscuous mode [ 325.629423][ T9338] veth1_macvtap: entered promiscuous mode [ 325.643508][ T9329] veth0_macvtap: entered promiscuous mode [ 325.645285][ T8846] usb 6-1: USB disconnect, device number 62 [ 325.654611][ T9329] veth1_macvtap: entered promiscuous mode [ 325.669914][ T9338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.697977][ T9338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.729683][ T9329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.742034][ T9329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.756660][ T5823] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.779834][ T9604] device-mapper: ioctl: name not supplied when creating device [ 325.802686][ T9405] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.814337][ T9405] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.819461][ T9608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.840872][ T9608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.883032][ T9405] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.953745][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.967495][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.022743][ T5823] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.026466][ T5823] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.031327][ T114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.034927][ T114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.075595][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.079566][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.104417][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.114088][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.133291][ T1343] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 326.133513][ T5823] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.142278][ T5823] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.295327][ T1343] usb 6-1: Using ep0 maxpacket: 8 [ 326.298628][ T1343] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 326.304636][ T1343] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 326.308335][ T1343] usb 6-1: config 0 has no interface number 0 [ 326.310992][ T1343] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.502685][ T40] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 326.505842][ T5857] usb 13-1: new full-speed USB device number 2 using dummy_hcd [ 326.658090][ T40] usb 14-1: New USB device found, idVendor=15a4, idProduct=9020, bcdDevice= 1.00 [ 326.667536][ T40] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 326.675597][ T40] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 326.685280][ T40] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 326.695725][ T40] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.704890][ T40] usb 14-1: Product: syz [ 326.707050][ T40] usb 14-1: Manufacturer: syz [ 326.709348][ T40] usb 14-1: SerialNumber: syz [ 326.714651][ T9639] netlink: 16 bytes leftover after parsing attributes in process `syz.8.985'. [ 327.173915][ T5857] usb 13-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice= 0.00 [ 327.183135][ T5857] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 327.189582][ T5857] usb 13-1: can't read configurations, error -71 [ 327.399375][ T9654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.404079][ T9654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.242598][ T5857] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 328.403960][ T5857] usb 13-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 328.408747][ T5857] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.890720][ T56] usb 6-1: USB disconnect, device number 63 [ 328.924501][ T9670] PM: suspend entry (s2idle) [ 328.963328][ T9405] Filesystems sync: 0.032 seconds [ 329.284908][ T56] usb 14-1: USB disconnect, device number 2 [ 329.526250][ T9679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.530501][ T9679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.652613][ T56] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 329.752656][ T9670] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 329.755230][ T9670] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 329.757527][ T9670] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 329.759968][ T9670] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 329.766226][ T9670] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 329.771087][ T9670] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 329.773569][ T9670] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 329.778844][ T9670] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 329.783489][ T9670] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 329.785884][ T9670] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 329.789309][ T9670] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 329.796055][ T9670] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 329.799563][ T9670] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 329.807609][ T56] usb 14-1: New USB device found, idVendor=048d, idProduct=9306, bcdDevice= 2.00 [ 329.813840][ T9670] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 329.818256][ T56] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.821877][ T9670] Freezing user space processes [ 331.052943][ T5744] Bluetooth: hci3: command 0x0406 tx timeout [ 331.772630][ T5751] Bluetooth: hci5: command 0x0c1a tx timeout [ 331.773760][ T5744] Bluetooth: hci1: command 0x0c1a tx timeout [ 331.774053][ T5094] Bluetooth: hci0: command 0x0c1a tx timeout [ 331.852774][ T5744] Bluetooth: hci6: command 0x0c1a tx timeout [ 331.852810][ T5751] Bluetooth: hci2: command 0x0c1a tx timeout [ 333.855700][ T5751] Bluetooth: hci0: command 0x0c1a tx timeout [ 333.864480][ T5751] Bluetooth: hci1: command 0x0c1a tx timeout [ 333.932767][ T5751] Bluetooth: hci2: command 0x0c1a tx timeout [ 333.942514][ T5751] Bluetooth: hci6: command 0x0c1a tx timeout [ 335.942705][ T5751] Bluetooth: hci1: command 0x0c1a tx timeout [ 335.942724][ T5744] Bluetooth: hci0: command 0x0c1a tx timeout [ 336.012491][ T5751] Bluetooth: hci6: command 0x0c1a tx timeout [ 336.012612][ T5744] Bluetooth: hci2: command 0x0c1a tx timeout [ 349.839287][ T9670] Freezing user space processes failed after 20.014 seconds (4 tasks refusing to freeze, wq_busy=0): [ 349.844736][ T9670] task:syz-executor state:S stack:23336 pid:5748 tgid:5748 ppid:1 task_flags:0x40054c flags:0x08080001 [ 349.850230][ T9670] Call Trace: [ 349.851709][ T9670] [ 349.853116][ T9670] __schedule+0x125c/0x6730 [ 349.855074][ T9670] ? __pfx___schedule+0x10/0x10 [ 349.857174][ T9670] ? find_held_lock+0x2b/0x80 [ 349.859215][ T9670] ? schedule+0x225/0x2c0 [ 349.861044][ T9670] schedule+0xdd/0x2c0 [ 349.862945][ T9670] do_wait+0x1a7/0x570 [ 349.864723][ T9670] kernel_wait4+0x16d/0x280 [ 349.866742][ T9670] ? __pfx_kernel_wait4+0x10/0x10 [ 349.868879][ T9670] ? __pfx_child_wait_callback+0x10/0x10 [ 349.871240][ T9670] ? zap_pid_ns_processes+0x2d9/0x6a0 [ 349.873630][ T9670] zap_pid_ns_processes+0x2ca/0x6a0 [ 349.875815][ T9670] ? do_raw_write_lock+0x11e/0x260 [ 349.877978][ T9670] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 349.880398][ T9670] ? do_exit+0x2205/0x2ae0 [ 349.882499][ T9670] ? rcu_is_watching+0x12/0xc0 [ 349.884764][ T9670] do_exit+0x2377/0x2ae0 [ 349.886662][ T9670] ? __pfx_do_exit+0x10/0x10 [ 349.888601][ T9670] ? do_raw_spin_lock+0x128/0x260 [ 349.890503][ T9670] ? find_held_lock+0x2b/0x80 [ 349.892757][ T9670] ? get_signal+0x7e0/0x21e0 [ 349.894775][ T9670] do_group_exit+0xd5/0x2a0 [ 349.896598][ T9670] get_signal+0x1ec7/0x21e0 [ 349.898552][ T9670] ? __pfx_get_signal+0x10/0x10 [ 349.900594][ T9670] ? __fput+0x68d/0xb50 [ 349.902743][ T9670] arch_do_signal_or_restart+0x91/0x7a0 [ 349.905643][ T9670] ? __pfx___do_compat_sys_wait4+0x10/0x10 [ 349.908556][ T9670] ? __fput+0x692/0xb50 [ 349.910395][ T9670] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 349.913333][ T9670] exit_to_user_mode_loop+0x139/0x6f0 [ 349.915613][ T9670] ? rcu_is_watching+0x12/0xc0 [ 349.917811][ T9670] do_int80_emulation+0x513/0x720 [ 349.919944][ T9670] asm_int80_emulation+0x1a/0x20 [ 349.922063][ T9670] RIP: 0023:0xf71b74eb [ 349.923921][ T9670] RSP: 002b:00000000ffb66b5c EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 349.927351][ T9670] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00000000ffb66cf8 [ 349.930749][ T9670] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 349.934394][ T9670] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 349.937902][ T9670] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 349.941484][ T9670] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 349.945278][ T9670] [ 349.946670][ T9670] task:syz.1.870 state:D stack:24536 pid:8645 tgid:8643 ppid:5748 task_flags:0x400040 flags:0x08080002 [ 349.951593][ T9670] Call Trace: [ 349.953249][ T9670] [ 349.954599][ T9670] __schedule+0x125c/0x6730 [ 349.956563][ T9670] ? __pfx___schedule+0x10/0x10 [ 349.958612][ T9670] ? find_held_lock+0x2b/0x80 [ 349.960623][ T9670] ? schedule+0x225/0x2c0 [ 349.962534][ T9670] schedule+0xdd/0x2c0 [ 349.964141][ T9670] schedule_timeout+0x127/0x280 [ 349.966192][ T9670] ? __pfx_schedule_timeout+0x10/0x10 [ 349.968608][ T9670] ? __pfx_process_timeout+0x10/0x10 [ 349.970909][ T9670] msleep+0x32/0x50 [ 349.972724][ T9670] hpsa_init_one+0xfee/0x53e0 [ 349.974778][ T9670] ? cpu_hotplug_disable+0x17/0x30 [ 349.976927][ T9670] ? __pfx_rpm_resume+0x10/0x10 [ 349.979029][ T9670] ? do_raw_spin_lock+0x128/0x260 [ 349.981050][ T9670] ? __pfx_hpsa_init_one+0x10/0x10 [ 349.983199][ T9670] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 349.985469][ T9670] ? lockdep_hardirqs_on+0x78/0x100 [ 349.987555][ T9670] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 349.989773][ T9670] ? __pfx_hpsa_init_one+0x10/0x10 [ 349.991830][ T9670] local_pci_probe+0xdd/0x1b0 [ 349.993938][ T9670] pci_call_probe+0x176/0x800 [ 349.995993][ T9670] ? __pfx_pci_call_probe+0x10/0x10 [ 349.998241][ T9670] ? find_held_lock+0x2b/0x80 [ 350.000112][ T9670] ? pci_match_device+0x450/0x5f0 [ 350.002125][ T9670] ? pci_match_device+0x450/0x5f0 [ 350.004187][ T9670] ? pci_match_id+0x34d/0x3f0 [ 350.006172][ T9670] ? pci_match_device+0xb4/0x5f0 [ 350.008271][ T9670] pci_device_probe+0x1cd/0x370 [ 350.010550][ T9670] ? __pfx_pci_device_probe+0x10/0x10 [ 350.013258][ T9670] really_probe+0x241/0xa60 [ 350.015424][ T9670] __driver_probe_device+0x20e/0x450 [ 350.017912][ T9670] device_driver_attach+0xd1/0x220 [ 350.020157][ T9670] bind_store+0xf4/0x190 [ 350.022034][ T9670] ? __pfx_bind_store+0x10/0x10 [ 350.024311][ T9670] drv_attr_store+0x74/0xb0 [ 350.026296][ T9670] ? __pfx_drv_attr_store+0x10/0x10 [ 350.028626][ T9670] sysfs_kf_write+0xf2/0x150 [ 350.030671][ T9670] kernfs_fop_write_iter+0x3e0/0x5f0 [ 350.033275][ T9670] ? __pfx_sysfs_kf_write+0x10/0x10 [ 350.035708][ T9670] vfs_write+0x6ac/0x1050 [ 350.037756][ T9670] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 350.040113][ T9670] ? __pfx_vfs_write+0x10/0x10 [ 350.042201][ T9670] ? find_held_lock+0x2b/0x80 [ 350.044396][ T9670] ksys_write+0x12a/0x250 [ 350.046419][ T9670] ? __pfx_ksys_write+0x10/0x10 [ 350.048496][ T9670] __do_fast_syscall_32+0xe7/0x970 [ 350.050735][ T9670] do_fast_syscall_32+0x32/0x70 [ 350.052851][ T9670] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 350.055947][ T9670] RIP: 0023:0xf707efec [ 350.057734][ T9670] RSP: 002b:00000000f544c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 350.060876][ T9670] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000740 [ 350.063919][ T9670] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 350.067025][ T9670] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 350.070123][ T9670] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 350.073657][ T9670] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 350.076675][ T9670] [ 350.077782][ T9670] task:syz-executor state:S stack:23256 pid:8723 tgid:8723 ppid:1 task_flags:0x40054c flags:0x08080001 [ 350.081872][ T9670] Call Trace: [ 350.083233][ T9670] [ 350.084339][ T9670] __schedule+0x125c/0x6730 [ 350.086033][ T9670] ? __pfx___schedule+0x10/0x10 [ 350.088024][ T9670] ? find_held_lock+0x2b/0x80 [ 350.090068][ T9670] ? schedule+0x225/0x2c0 [ 350.091924][ T9670] schedule+0xdd/0x2c0 [ 350.094018][ T9670] do_wait+0x1a7/0x570 [ 350.095916][ T9670] kernel_wait4+0x16d/0x280 [ 350.098112][ T9670] ? __pfx_kernel_wait4+0x10/0x10 [ 350.100257][ T9670] ? lockdep_hardirqs_on+0x78/0x100 [ 350.102738][ T9670] ? __pfx_child_wait_callback+0x10/0x10 [ 350.105217][ T9670] ? find_held_lock+0x2b/0x80 [ 350.107328][ T9670] ? zap_pid_ns_processes+0x286/0x6a0 [ 350.109652][ T9670] ? zap_pid_ns_processes+0x286/0x6a0 [ 350.112072][ T9670] zap_pid_ns_processes+0x2ca/0x6a0 [ 350.114445][ T9670] ? do_raw_write_lock+0x11e/0x260 [ 350.116714][ T9670] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 350.119380][ T9670] ? do_exit+0x2205/0x2ae0 [ 350.121464][ T9670] ? rcu_is_watching+0x12/0xc0 [ 350.123817][ T9670] do_exit+0x2377/0x2ae0 [ 350.125684][ T9670] ? __pfx_do_exit+0x10/0x10 [ 350.127750][ T9670] ? do_raw_spin_lock+0x128/0x260 [ 350.129964][ T9670] ? find_held_lock+0x2b/0x80 [ 350.131968][ T9670] ? get_signal+0x7e0/0x21e0 [ 350.134130][ T9670] do_group_exit+0xd5/0x2a0 [ 350.136073][ T9670] get_signal+0x1ec7/0x21e0 [ 350.138078][ T9670] ? __pfx_get_signal+0x10/0x10 [ 350.140274][ T9670] ? __fput+0x68d/0xb50 [ 350.142292][ T9670] arch_do_signal_or_restart+0x91/0x7a0 [ 350.144844][ T9670] ? __pfx___do_compat_sys_wait4+0x10/0x10 [ 350.147576][ T9670] ? __fput+0x692/0xb50 [ 350.149418][ T9670] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 350.152017][ T9670] exit_to_user_mode_loop+0x139/0x6f0 [ 350.154755][ T9670] ? rcu_is_watching+0x12/0xc0 [ 350.156915][ T9670] do_int80_emulation+0x513/0x720 [ 350.159287][ T9670] asm_int80_emulation+0x1a/0x20 [ 350.161711][ T9670] RIP: 0023:0xf71d74eb [ 350.163734][ T9670] RSP: 002b:00000000ffc06fec EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 350.167314][ T9670] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00000000ffc07188 [ 350.170747][ T9670] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 350.174439][ T9670] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 350.177790][ T9670] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 350.181211][ T9670] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 350.184796][ T9670] [ 350.186283][ T9670] task:syz.6.982 state:D stack:25576 pid:9260 tgid:9259 ppid:8723 task_flags:0x400140 flags:0x08080002 [ 350.191451][ T9670] Call Trace: [ 350.193020][ T9670] [ 350.194388][ T9670] __schedule+0x125c/0x6730 [ 350.196386][ T9670] ? do_raw_spin_lock+0x128/0x260 [ 350.198555][ T9670] ? __pfx___schedule+0x10/0x10 [ 350.200663][ T9670] ? find_held_lock+0x2b/0x80 [ 350.202872][ T9670] ? schedule+0x225/0x2c0 [ 350.204958][ T9670] schedule+0xdd/0x2c0 [ 350.207001][ T9670] schedule_preempt_disabled+0x13/0x30 [ 350.209414][ T9670] __mutex_lock+0xccc/0x1bd0 [ 350.211431][ T9670] ? device_release_driver_internal+0xb2/0x620 [ 350.214215][ T9670] ? do_raw_spin_lock+0x128/0x260 [ 350.216315][ T9670] ? __pfx___mutex_lock+0x10/0x10 [ 350.218437][ T9670] ? do_raw_spin_unlock+0x145/0x1e0 [ 350.220643][ T9670] ? _raw_spin_unlock+0x28/0x50 [ 350.222866][ T9670] ? __pfx_device_match_name+0x10/0x10 [ 350.225285][ T9670] ? bus_find_device+0x17a/0x1e0 [ 350.227329][ T9670] ? device_release_driver_internal+0xb2/0x620 [ 350.229911][ T9670] device_release_driver_internal+0xb2/0x620 [ 350.232538][ T9670] unbind_store+0xf8/0x110 [ 350.234463][ T9670] ? __pfx_unbind_store+0x10/0x10 [ 350.236623][ T9670] drv_attr_store+0x74/0xb0 [ 350.238645][ T9670] ? __pfx_drv_attr_store+0x10/0x10 [ 350.241193][ T9670] sysfs_kf_write+0xf2/0x150 [ 350.243666][ T9670] kernfs_fop_write_iter+0x3e0/0x5f0 [ 350.245997][ T9670] ? __pfx_sysfs_kf_write+0x10/0x10 [ 350.248427][ T9670] vfs_write+0x6ac/0x1050 [ 350.250284][ T9670] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 350.253147][ T9670] ? __pfx_vfs_write+0x10/0x10 [ 350.255217][ T9670] ? find_held_lock+0x2b/0x80 [ 350.257271][ T9670] ksys_write+0x12a/0x250 [ 350.259121][ T9670] ? __pfx_ksys_write+0x10/0x10 [ 350.261263][ T9670] __do_fast_syscall_32+0xe7/0x970 [ 350.263651][ T9670] do_fast_syscall_32+0x32/0x70 [ 350.265743][ T9670] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 350.268429][ T9670] RIP: 0023:0xf709efec [ 350.270226][ T9670] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 350.273365][ T9670] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001280 [ 350.275882][ T9670] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 350.278909][ T9670] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 350.282183][ T9670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.286046][ T9670] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 350.289338][ T9670] [ 350.291443][ T9670] OOM killer enabled. [ 350.292838][ T9670] Restarting tasks: Starting [ 350.304508][ T9670] Restarting tasks: Done [ 350.311692][ T9670] random: crng reseeded on system resumption [ 350.369588][ T9670] PM: suspend exit [ 350.379420][ T5859] usb 14-1: USB disconnect, device number 3 [ 350.382586][ T8958] usb 13-1: USB disconnect, device number 3 [ 350.582710][ T5751] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 350.594232][ T5751] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 350.601154][ T5751] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 350.614707][ T5751] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 350.617956][ T5751] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 350.637408][ T5751] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 350.653338][ T5751] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 350.659800][ T5751] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 350.671284][ T5094] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 350.682155][ T5094] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 350.739490][ T5094] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 350.749447][ T5094] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 350.755118][ T5094] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 350.767490][ T5094] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 350.771551][ T5094] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 350.857579][ T5094] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 350.881563][ T5094] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 350.894500][ T5094] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 350.905471][ T5094] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 350.908516][ T5094] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 351.218003][ T9405] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.412172][ T9405] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.560957][ T9405] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.736889][ T9405] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.194824][ T9694] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.198554][ T9694] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.202058][ T9694] bridge_slave_0: entered allmulticast mode [ 352.209799][ T9694] bridge_slave_0: entered promiscuous mode [ 352.218640][ T9694] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.222163][ T9694] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.226263][ T9694] bridge_slave_1: entered allmulticast mode [ 352.230442][ T9694] bridge_slave_1: entered promiscuous mode [ 352.239413][ T9405] bridge_slave_1: left allmulticast mode [ 352.242550][ T9405] bridge_slave_1: left promiscuous mode [ 352.245274][ T9405] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.254619][ T9405] bridge_slave_0: left allmulticast mode [ 352.257272][ T9405] bridge_slave_0: left promiscuous mode [ 352.259865][ T9405] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.442561][ T9405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.449564][ T9405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.454934][ T9405] bond0 (unregistering): Released all slaves [ 352.512235][ T9694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.583657][ T9700] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.587075][ T9700] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.594702][ T9700] bridge_slave_0: entered allmulticast mode [ 352.598974][ T9700] bridge_slave_0: entered promiscuous mode [ 352.604449][ T9700] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.607737][ T9700] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.611054][ T9700] bridge_slave_1: entered allmulticast mode [ 352.615538][ T9700] bridge_slave_1: entered promiscuous mode [ 352.621616][ T9694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.637663][ T9697] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.640289][ T9697] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.643014][ T9697] bridge_slave_0: entered allmulticast mode [ 352.645793][ T9697] bridge_slave_0: entered promiscuous mode [ 352.694774][ T9697] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.698137][ T9697] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.701190][ T9697] bridge_slave_1: entered allmulticast mode [ 352.706933][ T9697] bridge_slave_1: entered promiscuous mode [ 352.742527][ T5744] Bluetooth: hci7: command tx timeout [ 352.747969][ T5094] Bluetooth: hci4: command tx timeout [ 352.773133][ T9700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.784633][ T9694] team0: Port device team_slave_0 added [ 352.791139][ T9694] team0: Port device team_slave_1 added [ 352.839697][ T9697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.846930][ T9697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.854032][ T9700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.892589][ T5094] Bluetooth: hci8: command tx timeout [ 352.944171][ T5448] 8021q: adding VLAN 0 to HW filter on device eth1 [ 352.967522][ T9706] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.971466][ T9706] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.974999][ T9706] bridge_slave_0: entered allmulticast mode [ 352.979203][ T9706] bridge_slave_0: entered promiscuous mode [ 353.001790][ T9700] team0: Port device team_slave_0 added [ 353.011831][ T9694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.015729][ T9694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.026872][ T9694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.031823][ T9706] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.035278][ T9706] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.038615][ T9706] bridge_slave_1: entered allmulticast mode [ 353.042922][ T9706] bridge_slave_1: entered promiscuous mode [ 353.048500][ T9697] team0: Port device team_slave_0 added [ 353.053622][ T5094] Bluetooth: hci6: command tx timeout [ 353.059627][ T9700] team0: Port device team_slave_1 added [ 353.078900][ T9405] hsr_slave_0: left promiscuous mode [ 353.082624][ T9405] hsr_slave_1: left promiscuous mode [ 353.085575][ T9405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.088655][ T9405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.092216][ T9405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.096213][ T9405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.108541][ T9405] veth1_macvtap: left promiscuous mode [ 353.111684][ T9405] veth0_macvtap: left promiscuous mode [ 353.115075][ T9405] veth1_vlan: left promiscuous mode [ 353.117632][ T9405] veth0_vlan: left promiscuous mode [ 353.294756][ T9405] team0 (unregistering): Port device team_slave_1 removed [ 353.309406][ T9405] team0 (unregistering): Port device team_slave_0 removed [ 353.401198][ T9694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.403610][ T9694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.419585][ T9694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.446040][ T9697] team0: Port device team_slave_1 added [ 353.460641][ T9700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.464584][ T9700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.475056][ T9700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.515126][ T9697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.518164][ T9697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.540772][ T9697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.561705][ T9700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.564409][ T9700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.573864][ T9700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.589269][ T9706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.594549][ T9697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.597355][ T9697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.607559][ T9697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.644248][ T9706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.717027][ T9700] hsr_slave_0: entered promiscuous mode [ 353.720526][ T9700] hsr_slave_1: entered promiscuous mode [ 353.730708][ T9694] hsr_slave_0: entered promiscuous mode [ 353.734182][ T9694] hsr_slave_1: entered promiscuous mode [ 353.737206][ T9694] debugfs: 'hsr0' already exists in 'hsr' [ 353.739564][ T9694] Cannot create hsr debugfs directory [ 353.745355][ T9706] team0: Port device team_slave_0 added [ 353.750630][ T9706] team0: Port device team_slave_1 added [ 353.763954][ T9697] hsr_slave_0: entered promiscuous mode [ 353.773556][ T9697] hsr_slave_1: entered promiscuous mode [ 353.779364][ T9697] debugfs: 'hsr0' already exists in 'hsr' [ 353.784099][ T9697] Cannot create hsr debugfs directory [ 353.840796][ T9706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.843331][ T9706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.852274][ T9706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.875653][ T9706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.878195][ T9706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.886637][ T9706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.030555][ T9706] hsr_slave_0: entered promiscuous mode [ 354.033545][ T9706] hsr_slave_1: entered promiscuous mode [ 354.035962][ T9706] debugfs: 'hsr0' already exists in 'hsr' [ 354.039010][ T9706] Cannot create hsr debugfs directory [ 354.118102][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 354.162597][ T9405] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.383789][ T9405] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.525783][ T9405] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.631617][ T9405] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.798298][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3 [ 354.822553][ T5094] Bluetooth: hci4: command tx timeout [ 354.822712][ T5744] Bluetooth: hci7: command tx timeout [ 354.973824][ T5744] Bluetooth: hci8: command tx timeout [ 355.020782][ T9405] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.134532][ T5744] Bluetooth: hci6: command tx timeout [ 355.160747][ T5448] 8021q: adding VLAN 0 to HW filter on device eth24 [ 355.225000][ T9405] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.386862][ T9405] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.494949][ T9405] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.729964][ T9405] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.869018][ T9405] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.976044][ T9405] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.071958][ T9405] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.284176][ T9405] bridge_slave_1: left allmulticast mode [ 356.286695][ T9405] bridge_slave_1: left promiscuous mode [ 356.289362][ T9405] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.295646][ T9405] bridge_slave_0: left allmulticast mode [ 356.297986][ T9405] bridge_slave_0: left promiscuous mode [ 356.300377][ T9405] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.319254][ T9405] bridge_slave_1: left allmulticast mode [ 356.321737][ T9405] bridge_slave_1: left promiscuous mode [ 356.326746][ T9405] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.332510][ T9405] bridge_slave_0: left allmulticast mode [ 356.335032][ T9405] bridge_slave_0: left promiscuous mode [ 356.337637][ T9405] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.349291][ T9405] bridge_slave_1: left allmulticast mode [ 356.351811][ T9405] bridge_slave_1: left promiscuous mode [ 356.355014][ T9405] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.383750][ T9405] bridge_slave_0: left allmulticast mode [ 356.386168][ T9405] bridge_slave_0: left promiscuous mode [ 356.388649][ T9405] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.614057][ T9405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.620618][ T9405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.626661][ T9405] bond0 (unregistering): Released all slaves [ 356.768469][ T9405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.775254][ T9405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.780550][ T9405] bond0 (unregistering): Released all slaves [ 356.893138][ T5744] Bluetooth: hci7: command tx timeout [ 356.894506][ T5094] Bluetooth: hci4: command tx timeout [ 356.918947][ T9405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.927038][ T9405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.932608][ T9405] bond0 (unregistering): Released all slaves [ 357.053448][ T5094] Bluetooth: hci8: command tx timeout [ 357.212877][ T5094] Bluetooth: hci6: command tx timeout [ 358.094932][ T9405] hsr_slave_0: left promiscuous mode [ 358.097356][ T9405] hsr_slave_1: left promiscuous mode [ 358.099500][ T9405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.102050][ T9405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.107212][ T9405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.109572][ T9405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.121227][ T9405] hsr_slave_0: left promiscuous mode [ 358.129554][ T9405] hsr_slave_1: left promiscuous mode [ 358.132842][ T9405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.136554][ T9405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.141379][ T9405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.145578][ T9405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.154131][ T9405] hsr_slave_0: left promiscuous mode [ 358.157447][ T9405] hsr_slave_1: left promiscuous mode [ 358.160460][ T9405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.164699][ T9405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.169181][ T9405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.172868][ T9405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.205493][ T9405] veth1_macvtap: left promiscuous mode [ 358.208159][ T9405] veth0_macvtap: left promiscuous mode [ 358.210823][ T9405] veth1_vlan: left promiscuous mode [ 358.213807][ T9405] veth0_vlan: left promiscuous mode [ 358.217838][ T9405] veth1_macvtap: left promiscuous mode [ 358.220308][ T9405] veth0_macvtap: left promiscuous mode [ 358.223103][ T9405] veth1_vlan: left promiscuous mode [ 358.225609][ T9405] veth0_vlan: left promiscuous mode [ 358.229503][ T9405] veth1_macvtap: left promiscuous mode [ 358.232260][ T9405] veth0_macvtap: left promiscuous mode [ 358.236730][ T9405] veth1_vlan: left promiscuous mode [ 358.239425][ T9405] veth0_vlan: left promiscuous mode [ 358.587680][ T9405] team0 (unregistering): Port device team_slave_1 removed [ 358.601202][ T9405] team0 (unregistering): Port device team_slave_0 removed [ 358.794008][ T9405] team0 (unregistering): Port device team_slave_1 removed [ 358.801736][ T9405] team0 (unregistering): Port device team_slave_0 removed [ 358.972521][ T5094] Bluetooth: hci4: command tx timeout [ 358.982549][ T5094] Bluetooth: hci7: command tx timeout [ 358.995474][ T9405] team0 (unregistering): Port device team_slave_1 removed [ 359.008730][ T9405] team0 (unregistering): Port device team_slave_0 removed [ 359.132516][ T5094] Bluetooth: hci8: command tx timeout [ 359.271082][ T9700] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 359.280807][ T9700] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 359.285267][ T9700] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 359.292430][ T5094] Bluetooth: hci6: command tx timeout [ 359.303968][ T9700] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 359.307790][ T9700] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 359.330372][ T9700] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 359.402192][ T9700] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 359.408738][ T9700] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 359.575139][ T9700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.635528][ T9700] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.642158][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.645288][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.657419][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.660204][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.697277][ T9700] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 359.701326][ T9700] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 360.013324][ T9697] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 360.021075][ T9697] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 360.025954][ T9697] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 360.031732][ T9697] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 360.036258][ T9697] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 360.064318][ T9697] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 360.068489][ T9697] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 360.075684][ T9697] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 360.106912][ T9700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.245151][ T9694] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 360.285460][ T9694] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 360.288844][ T9694] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 360.293607][ T9694] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 360.302011][ T9694] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 360.313789][ T9694] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 360.321260][ T9694] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 360.352957][ T9694] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 360.486817][ T9706] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 360.492894][ T9706] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 360.496830][ T9706] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 360.503057][ T9706] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 360.507844][ T9706] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 360.513950][ T9706] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 360.517871][ T9706] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 360.528126][ T9706] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 360.585388][ T9697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.612884][ T9700] veth0_vlan: entered promiscuous mode [ 360.640449][ T9697] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.648253][ T9700] veth1_vlan: entered promiscuous mode [ 360.678250][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.681302][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.706264][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.709764][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.756845][ T9694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.797146][ T9700] veth0_macvtap: entered promiscuous mode [ 360.816602][ T9694] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.823634][ T9700] veth1_macvtap: entered promiscuous mode [ 360.842168][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.845678][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.880562][ T222] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.883905][ T222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.903197][ T9706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.944223][ T9706] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.948848][ T9700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.988573][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.991642][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.998552][ T9700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.011129][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.014273][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.027279][ T9694] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 361.114662][ T9405] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.155522][ T5823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.255078][ T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.268107][ T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.355313][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.358698][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.390483][ T9697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.491579][ T9697] veth0_vlan: entered promiscuous mode [ 361.503004][ T9697] veth1_vlan: entered promiscuous mode [ 361.522843][ T9405] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.529646][ T9405] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.551589][ T9981] PM: suspend entry (deep) [ 361.577056][ T9697] veth0_macvtap: entered promiscuous mode [ 361.585708][ T9405] Filesystems sync: 0.030 seconds [ 361.587000][ T9697] veth1_macvtap: entered promiscuous mode [ 361.602079][ T9697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.634383][ T9694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.638649][ T9697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.653681][ T5820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.657744][ T5820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.796737][ T9694] veth0_vlan: entered promiscuous mode [ 361.808710][ T9706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.818723][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.828579][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.843981][ T9694] veth1_vlan: entered promiscuous mode [ 361.852717][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.852716][ T5820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.868452][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.924691][ T9694] veth0_macvtap: entered promiscuous mode [ 361.944251][ T5820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.954818][ T9694] veth1_macvtap: entered promiscuous mode [ 361.974582][ T9694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.982039][ T9694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.062551][ T5820] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.068143][ T5820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.120438][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.127227][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.184280][ T114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.187768][ T114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.211107][ T9706] veth0_vlan: entered promiscuous mode [ 362.222993][ T9706] veth1_vlan: entered promiscuous mode [ 362.244305][ T24] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 362.267789][ T9706] veth0_macvtap: entered promiscuous mode [ 362.312203][ T9706] veth1_macvtap: entered promiscuous mode [ 362.322950][T10017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.329794][ T9981] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 362.333864][ T9706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.335467][ T9981] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 362.340256][ T9981] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 362.342965][ T9981] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 362.350610][ T9981] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 362.353387][ T5820] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.365142][ T9706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.371334][ T9981] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 362.378931][ T9981] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 362.383515][ T5903] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 362.389208][ T5903] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 362.391673][T10017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.400456][ T1163] wlan1: authenticated [ 362.402533][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.404145][ T24] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice= 1.00 [ 362.410246][ T24] usb 7-1: config index 0 descriptor too short (expected 53, got 51) [ 362.411908][ T9981] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 362.414310][ T24] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 362.414335][ T24] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 362.414348][ T24] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 362.414361][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 362.415983][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.415996][ T24] usb 7-1: Product: syz [ 362.416003][ T24] usb 7-1: Manufacturer: syz [ 362.416011][ T24] usb 7-1: SerialNumber: syz [ 362.422856][ T75] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 362.452801][T10017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.456816][ T75] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 362.460534][ T75] wlan1: associated [ 362.469741][ T9981] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 362.474271][ T9981] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 362.494051][ T9981] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 362.514046][ T9981] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 362.525741][ T9981] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 362.534370][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.538194][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.561415][ T9981] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 362.571685][ T9981] Freezing user space processes [ 362.583042][ T5823] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.586957][ T5823] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.602834][ T5820] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.605918][ T5820] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.702881][ T5094] Bluetooth: hci3: command 0x0406 tx timeout [ 364.412640][ T5744] Bluetooth: hci4: command 0x0c1a tx timeout [ 364.412666][ T64] Bluetooth: hci5: command 0x0c1a tx timeout [ 364.415219][ T5094] Bluetooth: hci7: command 0x0c1a tx timeout [ 364.493438][ T5094] Bluetooth: hci8: command 0x0c1a tx timeout [ 364.572906][ T5094] Bluetooth: hci6: command 0x0c1a tx timeout [ 366.493284][ T5094] Bluetooth: hci7: command 0x0c1a tx timeout [ 366.502677][ T5094] Bluetooth: hci4: command 0x0c1a tx timeout [ 366.573212][ T5094] Bluetooth: hci8: command 0x0c1a tx timeout [ 366.652887][ T5094] Bluetooth: hci6: command 0x0c1a tx timeout [ 368.572551][ T5094] Bluetooth: hci4: command 0x0c1a tx timeout [ 368.572855][ T5744] Bluetooth: hci7: command 0x0c1a tx timeout [ 368.652738][ T5744] Bluetooth: hci8: command 0x0c1a tx timeout [ 368.732674][ T5744] Bluetooth: hci6: command 0x0c1a tx timeout [ 371.822442][ T8645] hpsa 0000:00:02.0: board not ready, timed out. [ 378.656219][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.658336][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.590928][ T9981] Freezing user space processes failed after 20.016 seconds (2 tasks refusing to freeze, wq_busy=0): [ 382.595611][ T9981] task:syz-executor state:S stack:23336 pid:5748 tgid:5748 ppid:1 task_flags:0x40054c flags:0x08080001 [ 382.600275][ T9981] Call Trace: [ 382.601701][ T9981] [ 382.603149][ T9981] __schedule+0x125c/0x6730 [ 382.605161][ T9981] ? __pfx___schedule+0x10/0x10 [ 382.608087][ T9981] ? find_held_lock+0x2b/0x80 [ 382.610082][ T9981] ? schedule+0x225/0x2c0 [ 382.611817][ T9981] schedule+0xdd/0x2c0 [ 382.613570][ T9981] do_wait+0x1a7/0x570 [ 382.615201][ T9981] kernel_wait4+0x16d/0x280 [ 382.616984][ T9981] ? __pfx_kernel_wait4+0x10/0x10 [ 382.618810][ T9981] ? __pfx_child_wait_callback+0x10/0x10 [ 382.620588][ T9981] ? zap_pid_ns_processes+0x2d9/0x6a0 [ 382.622608][ T9981] zap_pid_ns_processes+0x2ca/0x6a0 [ 382.624477][ T9981] ? do_raw_write_lock+0x11e/0x260 [ 382.626112][ T9981] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 382.627895][ T9981] ? do_exit+0x2205/0x2ae0 [ 382.629380][ T9981] ? rcu_is_watching+0x12/0xc0 [ 382.631023][ T9981] do_exit+0x2377/0x2ae0 [ 382.632427][ T9981] ? __pfx_do_exit+0x10/0x10 [ 382.633886][ T9981] ? do_raw_spin_lock+0x128/0x260 [ 382.635551][ T9981] ? find_held_lock+0x2b/0x80 [ 382.637182][ T9981] ? get_signal+0x7e0/0x21e0 [ 382.638666][ T9981] do_group_exit+0xd5/0x2a0 [ 382.640108][ T9981] get_signal+0x1ec7/0x21e0 [ 382.641663][ T9981] ? __pfx_get_signal+0x10/0x10 [ 382.643886][ T9981] ? __fput+0x68d/0xb50 [ 382.645309][ T9981] arch_do_signal_or_restart+0x91/0x7a0 [ 382.647177][ T9981] ? __pfx___do_compat_sys_wait4+0x10/0x10 [ 382.649249][ T9981] ? __fput+0x692/0xb50 [ 382.650536][ T9981] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 382.652731][ T9981] exit_to_user_mode_loop+0x139/0x6f0 [ 382.654597][ T9981] ? rcu_is_watching+0x12/0xc0 [ 382.656358][ T9981] do_int80_emulation+0x513/0x720 [ 382.658117][ T9981] asm_int80_emulation+0x1a/0x20 [ 382.659691][ T9981] RIP: 0023:0xf71b74eb [ 382.661080][ T9981] RSP: 002b:00000000ffb66b5c EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 382.663811][ T9981] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00000000ffb66cf8 [ 382.666453][ T9981] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 382.668903][ T9981] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 382.671330][ T9981] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 382.674184][ T9981] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 382.677073][ T9981] [ 382.678332][ T9981] task:syz-executor state:S stack:23256 pid:8723 tgid:8723 ppid:1 task_flags:0x40054c flags:0x08080001 [ 382.683019][ T9981] Call Trace: [ 382.684232][ T9981] [ 382.685287][ T9981] __schedule+0x125c/0x6730 [ 382.686892][ T9981] ? __pfx___schedule+0x10/0x10 [ 382.688525][ T9981] ? find_held_lock+0x2b/0x80 [ 382.690224][ T9981] ? schedule+0x225/0x2c0 [ 382.691931][ T9981] schedule+0xdd/0x2c0 [ 382.693567][ T9981] do_wait+0x1a7/0x570 [ 382.694911][ T9981] kernel_wait4+0x16d/0x280 [ 382.696395][ T9981] ? __pfx_kernel_wait4+0x10/0x10 [ 382.698381][ T9981] ? lockdep_hardirqs_on+0x78/0x100 [ 382.700429][ T9981] ? __pfx_child_wait_callback+0x10/0x10 [ 382.702759][ T9981] ? find_held_lock+0x2b/0x80 [ 382.704545][ T9981] ? zap_pid_ns_processes+0x286/0x6a0 [ 382.706631][ T9981] ? zap_pid_ns_processes+0x286/0x6a0 [ 382.709342][ T9981] zap_pid_ns_processes+0x2ca/0x6a0 [ 382.711414][ T9981] ? do_raw_write_lock+0x11e/0x260 [ 382.714186][ T9981] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 382.716384][ T9981] ? do_exit+0x2205/0x2ae0 [ 382.718285][ T9981] ? rcu_is_watching+0x12/0xc0 [ 382.720062][ T9981] do_exit+0x2377/0x2ae0 [ 382.721431][ T9981] ? __pfx_do_exit+0x10/0x10 [ 382.723033][ T9981] ? do_raw_spin_lock+0x128/0x260 [ 382.724710][ T9981] ? find_held_lock+0x2b/0x80 [ 382.726650][ T9981] ? get_signal+0x7e0/0x21e0 [ 382.728594][ T9981] do_group_exit+0xd5/0x2a0 [ 382.730636][ T9981] get_signal+0x1ec7/0x21e0 [ 382.732998][ T9981] ? __pfx_get_signal+0x10/0x10 [ 382.735140][ T9981] ? __fput+0x68d/0xb50 [ 382.736852][ T9981] arch_do_signal_or_restart+0x91/0x7a0 [ 382.739117][ T9981] ? __pfx___do_compat_sys_wait4+0x10/0x10 [ 382.741465][ T9981] ? __fput+0x692/0xb50 [ 382.743273][ T9981] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 382.745822][ T9981] exit_to_user_mode_loop+0x139/0x6f0 [ 382.748019][ T9981] ? rcu_is_watching+0x12/0xc0 [ 382.750036][ T9981] do_int80_emulation+0x513/0x720 [ 382.752016][ T9981] asm_int80_emulation+0x1a/0x20 [ 382.754065][ T9981] RIP: 0023:0xf71d74eb [ 382.755689][ T9981] RSP: 002b:00000000ffc06fec EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 382.758654][ T9981] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00000000ffc07188 [ 382.761099][ T9981] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 382.763863][ T9981] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 382.767028][ T9981] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 382.770469][ T9981] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 382.773686][ T9981] [ 382.776141][ T9981] OOM killer enabled. [ 382.777958][ T9981] Restarting tasks: Starting [ 382.791641][ T9981] Restarting tasks: Done [ 382.803444][ T9981] random: crng reseeded on system resumption [ 382.817468][ T9981] PM: suspend exit [ 382.817818][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.831230][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.836343][ T5903] usb 7-1: USB disconnect, device number 68 [ 383.069021][ T8958] IPVS: starting estimator thread 0... [ 383.162901][T10033] IPVS: using max 45 ests per chain, 108000 per kthread [ 383.168638][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 383.173517][ T5751] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 383.217240][ T5751] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 383.217527][ T5094] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 383.224649][ T5094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 383.224838][ T5751] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 383.256873][ T5094] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 383.274579][ T5754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 383.279559][ T5754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 383.299890][ T5094] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 383.305868][ T5094] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 383.312119][ T5750] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 383.314773][ T5094] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 383.315675][ T5750] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 383.320860][ T5094] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 383.358080][T10045] UDC core: g1: couldn't find an available UDC or it's busy [ 383.714114][ T5820] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.901730][ T5820] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.171950][ T5820] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.345853][ T5820] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.485074][ T5834] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 384.633163][ T5834] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 384.641133][ T5834] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 384.648383][ T5834] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.659105][ T5834] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 384.664460][ T5834] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.671113][ T5834] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 384.676703][ T5834] usb 10-1: Product: syz [ 384.678669][ T5834] usb 10-1: Manufacturer: syz [ 384.718014][T10036] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.721417][T10036] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.724866][T10036] bridge_slave_0: entered allmulticast mode [ 384.729062][T10036] bridge_slave_0: entered promiscuous mode [ 384.789353][T10036] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.792645][T10036] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.795820][T10036] bridge_slave_1: entered allmulticast mode [ 384.799840][T10036] bridge_slave_1: entered promiscuous mode [ 384.805563][ T5820] bridge_slave_1: left allmulticast mode [ 384.808269][ T5820] bridge_slave_1: left promiscuous mode [ 384.811030][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.817406][ T5820] bridge_slave_0: left allmulticast mode [ 384.819665][ T5820] bridge_slave_0: left promiscuous mode [ 384.821898][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.966703][ T5820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.974260][ T5820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.979807][ T5820] bond0 (unregistering): Released all slaves [ 384.997302][T10040] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.000704][T10040] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.004407][T10040] bridge_slave_0: entered allmulticast mode [ 385.008003][T10040] bridge_slave_0: entered promiscuous mode [ 385.034922][T10040] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.038072][T10040] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.041343][T10040] bridge_slave_1: entered allmulticast mode [ 385.048085][T10040] bridge_slave_1: entered promiscuous mode [ 385.065020][T10036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.153847][T10036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.189766][T10040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.194604][T10040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.204663][T10037] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.212074][T10037] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.215664][T10037] bridge_slave_0: entered allmulticast mode [ 385.219709][T10037] bridge_slave_0: entered promiscuous mode [ 385.246519][T10037] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.252629][T10037] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.255879][T10037] bridge_slave_1: entered allmulticast mode [ 385.259974][T10037] bridge_slave_1: entered promiscuous mode [ 385.297279][T10036] team0: Port device team_slave_0 added [ 385.302628][T10036] team0: Port device team_slave_1 added [ 385.327676][T10040] team0: Port device team_slave_0 added [ 385.362250][T10037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.369245][T10037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.372800][ T64] Bluetooth: hci0: command tx timeout [ 385.377715][T10040] team0: Port device team_slave_1 added [ 385.381478][T10036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.384746][T10036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.401676][T10036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.452697][ T64] Bluetooth: hci1: command tx timeout [ 385.476151][ T64] Bluetooth: hci2: command tx timeout [ 385.481222][T10036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.486771][T10036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.500488][T10036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.511347][T10037] team0: Port device team_slave_0 added [ 385.517429][T10037] team0: Port device team_slave_1 added [ 385.520619][T10040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.523886][T10040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.538232][T10040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.550062][ T5820] hsr_slave_0: left promiscuous mode [ 385.556813][ T5820] hsr_slave_1: left promiscuous mode [ 385.559967][ T5820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.563775][ T5820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.568206][ T5820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.571348][ T5820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.586012][ T5820] veth1_macvtap: left promiscuous mode [ 385.588463][ T5820] veth0_macvtap: left promiscuous mode [ 385.591105][ T5820] veth1_vlan: left promiscuous mode [ 385.595528][ T5820] veth0_vlan: left promiscuous mode [ 385.823101][ T5820] team0 (unregistering): Port device team_slave_1 removed [ 385.837873][ T5820] team0 (unregistering): Port device team_slave_0 removed [ 385.963698][T10040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.966915][T10040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.978062][T10040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.016316][T10037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.019085][T10037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.028736][T10037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.033903][T10037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.036383][T10037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.045904][T10037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.060026][T10036] hsr_slave_0: entered promiscuous mode [ 386.063383][T10036] hsr_slave_1: entered promiscuous mode [ 386.066373][T10036] debugfs: 'hsr0' already exists in 'hsr' [ 386.068847][T10036] Cannot create hsr debugfs directory [ 386.130606][T10037] hsr_slave_0: entered promiscuous mode [ 386.133336][T10037] hsr_slave_1: entered promiscuous mode [ 386.135562][T10037] debugfs: 'hsr0' already exists in 'hsr' [ 386.137432][T10037] Cannot create hsr debugfs directory [ 386.177046][T10040] hsr_slave_0: entered promiscuous mode [ 386.179380][T10040] hsr_slave_1: entered promiscuous mode [ 386.181432][T10040] debugfs: 'hsr0' already exists in 'hsr' [ 386.185141][T10040] Cannot create hsr debugfs directory [ 386.545530][ T5823] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.662954][ T5823] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.801165][ T5823] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.923722][ T5823] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.248995][ T8958] usb 10-1: USB disconnect, device number 14 [ 387.267784][ T5823] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.446495][ T5823] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.452846][ T64] Bluetooth: hci0: command tx timeout [ 387.532630][ T64] Bluetooth: hci1: command tx timeout [ 387.542603][ T64] Bluetooth: hci2: command tx timeout [ 387.590466][ T5823] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.687941][ T5823] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.712540][ T8958] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 387.865182][ T8958] usb 10-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 387.875368][ T8958] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.881375][ T8958] usb 10-1: Product: syz [ 387.885443][ T8958] usb 10-1: Manufacturer: syz [ 387.887023][ T8958] usb 10-1: SerialNumber: syz [ 387.917554][ T5823] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.072803][ T5823] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.238021][ T5823] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.333414][ T5823] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.478402][ T5823] bridge_slave_1: left allmulticast mode [ 388.481045][ T5823] bridge_slave_1: left promiscuous mode [ 388.483904][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.489710][ T5823] bridge_slave_0: left allmulticast mode [ 388.492196][ T5823] bridge_slave_0: left promiscuous mode [ 388.495296][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.508178][ T5823] bridge_slave_1: left allmulticast mode [ 388.510664][ T5823] bridge_slave_1: left promiscuous mode [ 388.513965][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.519833][ T5823] bridge_slave_0: left allmulticast mode [ 388.522847][ T5823] bridge_slave_0: left promiscuous mode [ 388.525700][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.546195][ T5823] bridge_slave_1: left allmulticast mode [ 388.548685][ T5823] bridge_slave_1: left promiscuous mode [ 388.551280][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.557951][ T5823] bridge_slave_0: left allmulticast mode [ 388.560435][ T5823] bridge_slave_0: left promiscuous mode [ 388.563467][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.577679][ T5823] bridge_slave_1: left allmulticast mode [ 388.580252][ T5823] bridge_slave_1: left promiscuous mode [ 388.582946][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.588136][ T5823] bridge_slave_0: left allmulticast mode [ 388.590686][ T5823] bridge_slave_0: left promiscuous mode [ 388.593396][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.791928][ T5823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.800255][ T5823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.806379][ T5823] bond0 (unregistering): Released all slaves [ 388.911907][ T5823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.918037][ T5823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.924527][ T5823] bond0 (unregistering): Released all slaves [ 389.047799][ T5823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.056057][ T5823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.062732][ T5823] bond0 (unregistering): Released all slaves [ 389.196436][ T5823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.203071][ T5823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.208504][ T5823] bond0 (unregistering): Released all slaves [ 389.221898][ T5448] 8021q: adding VLAN 0 to HW filter on device eth8 [ 389.532994][ T64] Bluetooth: hci0: command tx timeout [ 389.612435][ T64] Bluetooth: hci1: command tx timeout [ 389.614676][ T5751] Bluetooth: hci2: command tx timeout [ 389.918397][ T5448] 8021q: adding VLAN 0 to HW filter on device eth25 [ 390.162806][ T5448] 8021q: adding VLAN 0 to HW filter on device eth26 [ 390.360313][ T6759] usb 10-1: USB disconnect, device number 15 [ 390.404773][ T5448] 8021q: adding VLAN 0 to HW filter on device eth27 [ 390.430562][T10036] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 390.441113][T10036] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 390.478050][T10036] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 390.493142][T10036] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 390.497588][T10036] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 390.505528][T10036] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 390.527163][T10036] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 390.534099][T10036] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 390.680538][T10037] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 390.689643][T10037] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 390.708514][T10037] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 390.716876][T10037] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 390.720621][T10037] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 390.731829][T10037] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 390.738888][T10037] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 390.742763][ T6759] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 390.744869][T10037] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 390.796835][ T5823] hsr_slave_0: left promiscuous mode [ 390.800834][ T5823] hsr_slave_1: left promiscuous mode [ 390.804213][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.807004][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.812808][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.816309][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.838734][ T5823] hsr_slave_0: left promiscuous mode [ 390.842289][ T5823] hsr_slave_1: left promiscuous mode [ 390.847354][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.850583][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.856398][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.860022][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.877592][ T5823] hsr_slave_0: left promiscuous mode [ 390.883516][ T5823] hsr_slave_1: left promiscuous mode [ 390.888428][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.894969][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.901199][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.904719][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.912923][ T6759] usb 10-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.00 [ 390.920141][ T6759] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.924525][ T5823] hsr_slave_0: left promiscuous mode [ 390.924939][ T6759] usb 10-1: Product: syz [ 390.928808][ T6759] usb 10-1: Manufacturer: syz [ 390.928845][ T5823] hsr_slave_1: left promiscuous mode [ 390.930656][ T6759] usb 10-1: SerialNumber: syz [ 390.936878][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.939810][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.948413][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.951453][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.983234][ T5823] veth1_macvtap: left promiscuous mode [ 390.985685][ T5823] veth0_macvtap: left promiscuous mode [ 390.988258][ T5823] veth1_vlan: left promiscuous mode [ 390.990580][ T5823] veth0_vlan: left promiscuous mode [ 390.996163][ T5823] veth1_macvtap: left promiscuous mode [ 390.998416][ T5823] veth0_macvtap: left promiscuous mode [ 391.000767][ T5823] veth1_vlan: left promiscuous mode [ 391.003269][ T5823] veth0_vlan: left promiscuous mode [ 391.016246][ T5823] veth1_macvtap: left promiscuous mode [ 391.023145][ T5823] veth0_macvtap: left promiscuous mode [ 391.025840][ T5823] veth1_vlan: left promiscuous mode [ 391.028195][ T5823] veth0_vlan: left promiscuous mode [ 391.032062][ T5823] veth1_macvtap: left promiscuous mode [ 391.034888][ T5823] veth0_macvtap: left promiscuous mode [ 391.037594][ T5823] veth1_vlan: left promiscuous mode [ 391.039927][ T5823] veth0_vlan: left promiscuous mode [ 391.394198][ T5823] team0 (unregistering): Port device team_slave_1 removed [ 391.421200][ T5823] team0 (unregistering): Port device team_slave_0 removed [ 391.622523][ T5751] Bluetooth: hci0: command tx timeout [ 391.662835][ T5823] team0 (unregistering): Port device team_slave_1 removed [ 391.678507][ T5823] team0 (unregistering): Port device team_slave_0 removed [ 391.692592][ T5751] Bluetooth: hci2: command tx timeout [ 391.692715][ T64] Bluetooth: hci1: command tx timeout [ 391.941926][ T5823] team0 (unregistering): Port device team_slave_1 removed [ 391.956012][ T5823] team0 (unregistering): Port device team_slave_0 removed [ 392.208470][ T5823] team0 (unregistering): Port device team_slave_1 removed [ 392.220816][ T5823] team0 (unregistering): Port device team_slave_0 removed [ 392.463857][ T5448] 8021q: adding VLAN 0 to HW filter on device eth28 [ 392.597897][T10040] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 392.613688][T10040] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 392.630130][T10040] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 392.638423][T10040] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 392.644149][T10040] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 392.651091][T10040] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 392.659996][T10036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.663588][T10040] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 392.681696][T10040] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 392.710963][ T5448] 8021q: adding VLAN 0 to HW filter on device eth29 [ 392.757657][T10036] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.766649][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.769838][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.786089][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.789175][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.801664][T10037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.860335][T10037] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.915952][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.919091][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.927335][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.930523][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.960214][T10040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.974333][ T5448] 8021q: adding VLAN 0 to HW filter on device eth30 [ 393.015684][T10040] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.070038][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.073160][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.095624][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.098740][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.453434][ T5841] usb 10-1: USB disconnect, device number 16 [ 393.629428][T10036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.645713][T10347] vmwgfx 0000:00:02.0: probe with driver vmwgfx failed with error -22 [ 393.658897][T10037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.790032][T10040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.976118][T10036] veth0_vlan: entered promiscuous mode [ 393.999322][T10036] veth1_vlan: entered promiscuous mode [ 394.008166][T10037] veth0_vlan: entered promiscuous mode [ 394.037607][T10037] veth1_vlan: entered promiscuous mode [ 394.057664][T10036] veth0_macvtap: entered promiscuous mode [ 394.089258][T10036] veth1_macvtap: entered promiscuous mode [ 394.138422][T10036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.153353][ T8958] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 394.165665][T10037] veth0_macvtap: entered promiscuous mode [ 394.186756][T10037] veth1_macvtap: entered promiscuous mode [ 394.192660][T10036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.199290][T10040] veth0_vlan: entered promiscuous mode [ 394.223824][T10040] veth1_vlan: entered promiscuous mode [ 394.235984][T10037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.247141][ T5820] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.264723][T10037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.308732][ T5820] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.312703][ T5820] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.324293][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.331061][ T8958] usb 10-1: New USB device found, idVendor=086a, idProduct=0101, bcdDevice= 0.00 [ 394.345632][ T8958] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.353479][ T8958] usb 10-1: Product: syz [ 394.355377][ T8958] usb 10-1: Manufacturer: syz [ 394.361954][ T8958] usb 10-1: SerialNumber: syz [ 394.374502][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.378625][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.384466][ T5820] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.404726][T10040] veth0_macvtap: entered promiscuous mode [ 394.471536][T10040] veth1_macvtap: entered promiscuous mode [ 394.483790][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.495650][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.532927][ T5820] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.538223][ T5820] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.561558][T10040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.568183][T10040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.586208][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.592861][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.604986][T10396] UDC core: g1: couldn't find an available UDC or it's busy [ 394.621188][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.627464][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.698424][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.715896][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.725204][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.731496][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.736436][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.771566][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.772251][T10403] UDC core: g1: couldn't find an available UDC or it's busy [ 394.779170][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.824259][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.831549][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.864462][T10406] smpboot: CPU 1 is now offline [ 394.892257][T10408] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 395.202670][ T1343] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 395.213741][ T8958] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 395.253234][ T5106] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 395.363494][ T1343] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 395.368210][ T1343] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 395.371833][ T1343] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.375928][ T8958] usb 13-1: New USB device found, idVendor=04cb, idProduct=0104, bcdDevice= 0.00 [ 395.376463][ T1343] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 395.380517][ T8958] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 395.383539][ T1343] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.387365][ T8958] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 395.393363][ T1343] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 395.395696][ T8958] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.402295][ T1343] usb 12-1: Product: syz [ 395.404233][ T1343] usb 12-1: Manufacturer: syz [ 395.414585][ T5106] usb 11-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 395.421718][ T5106] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.425457][ T5106] usb 11-1: Product: syz [ 395.427257][ T5106] usb 11-1: Manufacturer: syz [ 395.429217][ T5106] usb 11-1: SerialNumber: syz [ 396.772174][ T5448] 8021q: adding VLAN 0 to HW filter on device eth9 [ 396.926783][ T8846] usb 10-1: USB disconnect, device number 17 [ 396.951460][ T5448] 8021q: adding VLAN 0 to HW filter on device eth10 [ 397.118655][ T5448] 8021q: adding VLAN 0 to HW filter on device eth13 [ 397.287977][ T5448] 8021q: adding VLAN 0 to HW filter on device eth14 [ 397.449587][ T5448] 8021q: adding VLAN 0 to HW filter on device eth15 [ 397.615931][ T5448] 8021q: adding VLAN 0 to HW filter on device eth16 [ 397.969033][ T6759] usb 12-1: USB disconnect, device number 8 [ 397.974849][ T5106] usb 13-1: USB disconnect, device number 4 [ 398.016795][ T8846] usb 11-1: USB disconnect, device number 6 [ 398.107748][T10526] smpboot: CPU 1 is now offline [ 398.200296][T10530] vmwgfx 0000:00:02.0: probe with driver vmwgfx failed with error -22 [ 398.214521][T10529] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 398.326603][T10539] UDC core: g1: couldn't find an available UDC or it's busy [ 398.362271][T10543] UDC core: g1: couldn't find an available UDC or it's busy [ 398.392567][ T6759] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 398.443184][ T5106] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 398.554571][ T6759] usb 12-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.00 [ 398.561290][ T6759] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.565365][ T6759] usb 12-1: Product: syz [ 398.567255][ T6759] usb 12-1: Manufacturer: syz [ 398.572280][ T6759] usb 12-1: SerialNumber: syz [ 398.595463][ T5106] usb 13-1: Using ep0 maxpacket: 8 [ 398.600982][ T5106] usb 13-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 398.610618][ T5106] usb 13-1: config 0 has an invalid interface number: 143 but max is 0 [ 398.618428][ T5106] usb 13-1: config 0 has no interface number 0 [ 398.621781][ T5106] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.807800][ T5448] 8021q: adding VLAN 0 to HW filter on device eth22 [ 398.842548][ T6759] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 398.986726][ T5448] 8021q: adding VLAN 0 to HW filter on device eth23 [ 399.012955][ T6759] usb 11-1: New USB device found, idVendor=086a, idProduct=0101, bcdDevice= 0.00 [ 399.019560][ T6759] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.024312][ T6759] usb 11-1: Product: syz [ 399.025717][ T6759] usb 11-1: Manufacturer: syz [ 399.027694][ T6759] usb 11-1: SerialNumber: syz [ 399.730333][ T5448] 8021q: adding VLAN 0 to HW filter on device eth12 [ 400.126954][ T5448] 8021q: adding VLAN 0 to HW filter on device eth11 [ 401.063139][ T5106] usb 12-1: USB disconnect, device number 9 [ 401.162795][ T5833] usb 13-1: USB disconnect, device number 5 [ 401.214634][T10652] dlm: no local IP address has been set [ 401.222999][T10650] smpboot: CPU 1 is now offline [ 401.232208][T10652] dlm: cannot start dlm midcomms -107 [ 401.240448][T10650] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 401.512523][ T5833] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 401.618530][ T6759] usb 11-1: USB disconnect, device number 7 [ 401.644748][ T9460] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 401.669382][ T5833] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 401.675712][ T5833] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 401.681960][ T5833] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.687305][ T5833] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 401.687594][T10676] UDC core: g1: couldn't find an available UDC or it's busy [ 401.692021][ T5833] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.696313][ T5833] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 401.704266][ T5833] usb 13-1: Product: syz [ 401.705831][ T5833] usb 13-1: Manufacturer: syz [ 401.754972][T10678] smpboot: CPU 1 is now offline [ 401.774340][T10681] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 401.793343][ T9460] usb 12-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 401.800638][ T9460] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.803468][ T9460] usb 12-1: Product: syz [ 401.804957][ T9460] usb 12-1: Manufacturer: syz [ 401.806682][ T9460] usb 12-1: SerialNumber: syz [ 401.856372][T10687] UDC core: g1: couldn't find an available UDC or it's busy [ 401.940537][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4 [ 402.058300][T10700] UDC core: g1: couldn't find an available UDC or it's busy [ 402.263768][ T1036] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 402.423140][ T1036] usb 11-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.00 [ 402.432916][ T1036] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.436244][ T1036] usb 11-1: Product: syz [ 402.438009][ T1036] usb 11-1: Manufacturer: syz [ 402.440033][ T1036] usb 11-1: SerialNumber: syz [ 403.772134][ T5448] 8021q: adding VLAN 0 to HW filter on device eth20 [ 404.218656][ T5834] usb 13-1: USB disconnect, device number 6 [ 404.259192][T10777] UDC core: g1: couldn't find an available UDC or it's busy [ 404.279698][T10780] smpboot: CPU 1 is now offline [ 404.320095][T10784] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 404.427416][ T9553] usb 12-1: USB disconnect, device number 10 [ 404.569955][T10800] UDC core: g1: couldn't find an available UDC or it's busy [ 404.722498][ T5834] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 404.741476][ T5448] 8021q: adding VLAN 0 to HW filter on device eth19 [ 404.883591][ T5834] usb 13-1: New USB device found, idVendor=086a, idProduct=0101, bcdDevice= 0.00 [ 404.892539][ T5834] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.896177][ T5834] usb 13-1: Product: syz [ 404.898459][ T5834] usb 13-1: Manufacturer: syz [ 404.900899][ T5834] usb 13-1: SerialNumber: syz [ 404.953141][ T852] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 405.027746][ T5834] usb 11-1: USB disconnect, device number 8 [ 405.119607][ T5448] 8021q: adding VLAN 0 to HW filter on device eth21 [ 405.123650][ T852] usb 12-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 0.00 [ 405.132690][ T852] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 405.137701][ T852] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 405.147106][ T852] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 405.159077][ T852] usb 12-1: Product: syz [ 405.161174][ T852] usb 12-1: Manufacturer: syz [ 405.307122][ T5841] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 405.314669][T10836] UDC core: g1: couldn't find an available UDC or it's busy [ 405.463312][ T5841] usb 10-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 405.472083][ T5841] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.475789][ T5841] usb 10-1: Product: syz [ 405.477657][ T5841] usb 10-1: Manufacturer: syz [ 405.479923][ T5841] usb 10-1: SerialNumber: syz [ 407.423733][ T6759] usb 13-1: USB disconnect, device number 7 [ 407.704104][ T9775] usb 12-1: USB disconnect, device number 11 [ 407.741444][T10861] UDC core: g1: couldn't find an available UDC or it's busy [ 407.757890][T10860] smpboot: CPU 1 is now offline [ 407.777477][T10860] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 407.907243][T10867] UDC core: g1: couldn't find an available UDC or it's busy [ 407.962461][ T5841] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 408.059596][T10871] UDC core: g1: couldn't find an available UDC or it's busy [ 408.074247][ T5834] usb 10-1: USB disconnect, device number 18 [ 408.132223][T10875] [ 408.133030][ T5841] usb 13-1: New USB device found, idVendor=07c4, idProduct=a000, bcdDevice= 0.00 [ 408.133370][T10875] ====================================================== [ 408.139830][ T5841] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.140104][T10875] WARNING: possible circular locking dependency detected [ 408.144088][ T5841] usb 13-1: Product: syz [ 408.146431][T10875] syzkaller #0 Not tainted [ 408.146446][T10875] ------------------------------------------------------ [ 408.146453][T10875] syz.5.1061/10875 is trying to acquire lock: [ 408.146463][T10875] ffffffff9024edc0 (tpg_instances_lock){+.+.}-{4:4} [ 408.148409][ T5841] usb 13-1: Manufacturer: syz [ 408.150283][T10875] , at: tcm_alloc+0x20/0x440 [ 408.153401][ T5841] usb 13-1: SerialNumber: syz [ 408.155783][T10875] [ 408.155783][T10875] but task is already holding lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 408.155793][T10875] ffff88802328e390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 408.171840][T10875] [ 408.171840][T10875] which lock already depends on the new lock. [ 408.171840][T10875] [ 408.176107][T10875] [ 408.176107][T10875] the existing dependency chain (in reverse order) is: [ 408.179866][T10875] [ 408.179866][T10875] -> #3 (&gi->lock){+.+.}-{4:4}: [ 408.182947][T10875] lock_acquire+0x1b9/0x370 [ 408.185125][T10875] __mutex_lock+0x1a4/0x1bd0 [ 408.187301][T10875] config_usb_cfg_link+0x57/0x3a0 [ 408.189690][T10875] configfs_symlink+0x540/0x11f0 [ 408.191994][T10875] vfs_symlink+0x178/0x4d0 [ 408.194157][T10875] filename_symlinkat+0x2a6/0x560 [ 408.196499][T10875] __ia32_sys_symlinkat+0x9b/0xe0 [ 408.198846][T10875] __do_fast_syscall_32+0xe7/0x970 [ 408.201248][T10875] do_fast_syscall_32+0x32/0x70 [ 408.203553][T10875] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 408.206400][T10875] [ 408.206400][T10875] -> #2 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 408.210035][T10875] lock_acquire+0x1b9/0x370 [ 408.212156][T10875] down_write+0x8b/0x1f0 [ 408.214221][T10875] configfs_depend_item_unlocked+0xf3/0x6a0 [ 408.216888][T10875] usbg_make_tpg+0x261/0x620 [ 408.219062][T10875] target_fabric_make_tpg+0xab/0x8c0 [ 408.221569][T10875] configfs_mkdir+0x51e/0xb70 [ 408.223786][T10875] vfs_mkdir+0x361/0x850 [ 408.225872][T10875] filename_mkdirat+0x48b/0x5e0 [ 408.228119][T10875] __ia32_sys_mkdirat+0x88/0xc0 [ 408.230380][T10875] __do_fast_syscall_32+0xe7/0x970 [ 408.232742][T10875] do_fast_syscall_32+0x32/0x70 [ 408.235031][T10875] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 408.237873][T10875] [ 408.237873][T10875] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 408.241079][T10875] lock_acquire+0x1b9/0x370 [ 408.243244][T10875] __mutex_lock+0x1a4/0x1bd0 [ 408.245435][T10875] usbg_make_tpg+0x1a4/0x620 [ 408.247610][T10875] target_fabric_make_tpg+0xab/0x8c0 [ 408.250067][T10875] configfs_mkdir+0x51e/0xb70 [ 408.252268][T10875] vfs_mkdir+0x361/0x850 [ 408.254367][T10875] filename_mkdirat+0x48b/0x5e0 [ 408.256714][T10875] __ia32_sys_mkdirat+0x88/0xc0 [ 408.259023][T10875] __do_fast_syscall_32+0xe7/0x970 [ 408.261392][T10875] do_fast_syscall_32+0x32/0x70 [ 408.263650][T10875] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 408.266462][T10875] [ 408.266462][T10875] -> #0 (tpg_instances_lock){+.+.}-{4:4}: [ 408.269464][T10875] check_prev_add+0xeb/0xe60 [ 408.271419][T10875] __lock_acquire+0x136c/0x1a40 [ 408.273578][T10875] lock_acquire+0x1b9/0x370 [ 408.275707][T10875] __mutex_lock+0x1a4/0x1bd0 [ 408.277881][T10875] tcm_alloc+0x20/0x440 [ 408.279862][T10875] usb_get_function+0x5e/0xd0 [ 408.282167][T10875] config_usb_cfg_link+0x1ed/0x3a0 [ 408.284707][T10875] configfs_symlink+0x540/0x11f0 [ 408.287254][T10875] vfs_symlink+0x178/0x4d0 [ 408.289362][T10875] filename_symlinkat+0x2a6/0x560 [ 408.291667][T10875] __ia32_sys_symlinkat+0x9b/0xe0 [ 408.294009][T10875] __do_fast_syscall_32+0xe7/0x970 [ 408.296435][T10875] do_fast_syscall_32+0x32/0x70 [ 408.298750][T10875] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 408.301648][T10875] [ 408.301648][T10875] other info that might help us debug this: [ 408.301648][T10875] [ 408.305855][T10875] Chain exists of: [ 408.305855][T10875] tpg_instances_lock --> &sb->s_type->i_mutex_key#24 --> &gi->lock [ 408.305855][T10875] [ 408.311435][T10875] Possible unsafe locking scenario: [ 408.311435][T10875] [ 408.314532][T10875] CPU0 CPU1 [ 408.316760][T10875] ---- ---- [ 408.319040][T10875] lock(&gi->lock); [ 408.320761][T10875] lock(&sb->s_type->i_mutex_key#24); [ 408.324064][T10875] lock(&gi->lock); [ 408.326734][T10875] lock(tpg_instances_lock); [ 408.328718][T10875] [ 408.328718][T10875] *** DEADLOCK *** [ 408.328718][T10875] [ 408.332047][T10875] 3 locks held by syz.5.1061/10875: [ 408.334228][T10875] #0: ffff888021c9a450 (sb_writers#12){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 408.338159][T10875] #1: ffff888013f48ac0 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 408.342628][T10875] #2: ffff88802328e390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 408.346599][T10875] [ 408.346599][T10875] stack backtrace: [ 408.349106][T10875] CPU: 1 UID: 0 PID: 10875 Comm: syz.5.1061 Not tainted syzkaller #0 PREEMPT(full) [ 408.349130][T10875] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 408.349141][T10875] Call Trace: [ 408.349150][T10875] [ 408.349158][T10875] dump_stack_lvl+0x100/0x190 [ 408.349214][T10875] print_circular_bug.cold+0x178/0x1c7 [ 408.349257][T10875] check_noncircular+0x146/0x160 [ 408.349282][T10875] ? arch_stack_walk+0xa6/0xf0 [ 408.349317][T10875] check_prev_add+0xeb/0xe60 [ 408.349341][T10875] ? stack_trace_save+0x8e/0xc0 [ 408.349365][T10875] __lock_acquire+0x136c/0x1a40 [ 408.349381][T10875] ? kasan_save_stack+0x3f/0x50 [ 408.349414][T10875] lock_acquire+0x1b9/0x370 [ 408.349428][T10875] ? tcm_alloc+0x20/0x440 [ 408.349451][T10875] ? __pfx___might_resched+0x10/0x10 [ 408.349489][T10875] __mutex_lock+0x1a4/0x1bd0 [ 408.349511][T10875] ? tcm_alloc+0x20/0x440 [ 408.349532][T10875] ? tcm_alloc+0x20/0x440 [ 408.349552][T10875] ? __mutex_lock+0x26d/0x1bd0 [ 408.349571][T10875] ? config_usb_cfg_link+0x57/0x3a0 [ 408.349595][T10875] ? __pfx___mutex_lock+0x10/0x10 [ 408.349621][T10875] ? tcm_alloc+0x20/0x440 [ 408.349641][T10875] tcm_alloc+0x20/0x440 [ 408.349662][T10875] usb_get_function+0x5e/0xd0 [ 408.349677][T10875] config_usb_cfg_link+0x1ed/0x3a0 [ 408.349700][T10875] ? mntput_no_expire+0xe7/0x220 [ 408.349730][T10875] configfs_symlink+0x540/0x11f0 [ 408.349755][T10875] ? bpf_lsm_inode_permission+0x9/0x10 [ 408.349793][T10875] ? security_inode_permission+0xbf/0x250 [ 408.349834][T10875] ? __pfx_configfs_symlink+0x10/0x10 [ 408.349857][T10875] vfs_symlink+0x178/0x4d0 [ 408.349882][T10875] filename_symlinkat+0x2a6/0x560 [ 408.349903][T10875] ? __pfx_filename_symlinkat+0x10/0x10 [ 408.349922][T10875] ? strncpy_from_user+0x19d/0x2d0 [ 408.349947][T10875] ? do_getname+0x191/0x390 [ 408.349967][T10875] __ia32_sys_symlinkat+0x9b/0xe0 [ 408.349987][T10875] __do_fast_syscall_32+0xe7/0x970 [ 408.350010][T10875] do_fast_syscall_32+0x32/0x70 [ 408.350032][T10875] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 408.350054][T10875] RIP: 0023:0xf7f62fec [ 408.350078][T10875] Code: Unable to access opcode bytes at 0xf7f62fc2. [ 408.350092][T10875] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 408.350110][T10875] RAX: ffffffffffffffda RBX: 0000000080000500 RCX: 00000000ffffff9c [ 408.350120][T10875] RDX: 0000000080000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 408.350129][T10875] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 408.350138][T10875] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 408.350147][T10875] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 408.350162][T10875] [ 408.723930][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.914732][ T9775] usb 13-1: USB disconnect, device number 8 [ 408.922990][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.030357][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.107311][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.213994][ T13] bridge_slave_1: left allmulticast mode [ 409.216497][ T13] bridge_slave_1: left promiscuous mode [ 409.219030][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.223935][ T13] bridge_slave_0: left allmulticast mode [ 409.226405][ T13] bridge_slave_0: left promiscuous mode [ 409.228979][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.290737][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.298966][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.303768][ T13] bond0 (unregistering): Released all slaves [ 409.441540][ T5448] 8021q: adding VLAN 0 to HW filter on device eth5 [ 409.569536][ T5448] 8021q: adding VLAN 0 to HW filter on device eth6 [ 409.589806][ T13] hsr_slave_0: left promiscuous mode [ 409.592935][ T13] hsr_slave_1: left promiscuous mode [ 409.595675][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.598750][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.603547][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.606759][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.612974][ T13] veth1_macvtap: left promiscuous mode [ 409.615371][ T13] veth0_macvtap: left promiscuous mode [ 409.617750][ T13] veth1_vlan: left promiscuous mode [ 409.620066][ T13] veth0_vlan: left promiscuous mode [ 409.714915][ T13] team0 (unregistering): Port device team_slave_1 removed [ 409.724194][ T13] team0 (unregistering): Port device team_slave_0 removed [ 409.760671][ T5448] 8021q: adding VLAN 0 to HW filter on device eth7 [ 409.900074][ T5448] 8021q: adding VLAN 0 to HW filter on device eth8 [ 410.180538][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.277402][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.378814][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.437826][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.541381][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.597498][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.674964][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.681025][ T5448] 8021q: adding VLAN 0 to HW filter on device eth17 [ 410.729255][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.803858][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.809062][ T5448] 8021q: adding VLAN 0 to HW filter on device eth18 [ 410.850084][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.935686][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.945464][ T5448] 8021q: adding VLAN 0 to HW filter on device eth31 [ 411.007830][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.109586][ T13] bridge_slave_1: left allmulticast mode [ 411.112549][ T13] bridge_slave_1: left promiscuous mode [ 411.115155][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.119859][ T13] bridge_slave_0: left allmulticast mode [ 411.122683][ T13] bridge_slave_0: left promiscuous mode [ 411.125408][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.136925][ T13] bridge_slave_1: left allmulticast mode [ 411.139417][ T13] bridge_slave_1: left promiscuous mode [ 411.141918][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.148011][ T13] bridge_slave_0: left allmulticast mode [ 411.150616][ T13] bridge_slave_0: left promiscuous mode [ 411.153395][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.161735][ T13] bridge_slave_1: left allmulticast mode [ 411.164449][ T13] bridge_slave_1: left promiscuous mode [ 411.167046][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.174142][ T13] bridge_slave_0: left allmulticast mode [ 411.176987][ T13] bridge_slave_0: left promiscuous mode [ 411.179494][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.275717][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.280214][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.284671][ T13] bond0 (unregistering): Released all slaves [ 411.307083][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.310967][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.322149][ T13] bond0 (unregistering): Released all slaves [ 411.340095][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.345220][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.348637][ T13] bond0 (unregistering): Released all slaves [ 411.870575][ T5448] 8021q: adding VLAN 0 to HW filter on device eth32 [ 411.882705][ T13] hsr_slave_0: left promiscuous mode [ 411.885603][ T13] hsr_slave_1: left promiscuous mode [ 411.888398][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.891578][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.896578][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.899774][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.906342][ T13] hsr_slave_0: left promiscuous mode [ 411.909192][ T13] hsr_slave_1: left promiscuous mode [ 411.911858][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.915096][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.918650][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.921841][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.927533][ T13] hsr_slave_0: left promiscuous mode [ 411.930319][ T13] hsr_slave_1: left promiscuous mode [ 411.933045][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.936137][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.939770][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.943196][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.954774][ T13] veth1_macvtap: left promiscuous mode [ 411.956585][ T13] veth0_macvtap: left promiscuous mode [ 411.958413][ T13] veth1_vlan: left promiscuous mode [ 411.960099][ T13] veth0_vlan: left promiscuous mode [ 411.963007][ T13] veth1_macvtap: left promiscuous mode [ 411.965528][ T13] veth0_macvtap: left promiscuous mode [ 411.968016][ T13] veth1_vlan: left promiscuous mode [ 411.970380][ T13] veth0_vlan: left promiscuous mode [ 411.973524][ T13] veth1_macvtap: left promiscuous mode [ 411.975349][ T13] veth0_macvtap: left promiscuous mode [ 411.977122][ T13] veth1_vlan: left promiscuous mode [ 411.978808][ T13] veth0_vlan: left promiscuous mode [ 412.107032][ T13] team0 (unregistering): Port device team_slave_1 removed [ 412.115864][ T13] team0 (unregistering): Port device team_slave_0 removed [ 412.216448][ T13] team0 (unregistering): Port device team_slave_1 removed [ 412.223978][ T13] team0 (unregistering): Port device team_slave_0 removed [ 412.311012][ T13] team0 (unregistering): Port device team_slave_1 removed [ 412.318322][ T13] team0 (unregistering): Port device team_slave_0 removed [ 412.517207][ T5448] 8021q: adding VLAN 0 to HW filter on device eth33 [ 412.666217][ T5448] 8021q: adding VLAN 0 to HW filter on device eth34 [ 412.819712][ T5448] 8021q: adding VLAN 0 to HW filter on device eth35 [ 413.059456][ T5448] 8021q: adding VLAN 0 to HW filter on device eth36 [ 413.196032][ T5448] 8021q: adding VLAN 0 to HW filter on device eth37 [ 413.331172][ T5448] 8021q: adding VLAN 0 to HW filter on device eth38 [ 413.464344][ T5448] 8021q: adding VLAN 0 to HW filter on device eth39 [ 413.588869][ T5448] 8021q: adding VLAN 0 to HW filter on device eth40 [ 413.597136][ T13] IPVS: stop unused estimator thread 0...