last executing test programs: 4.133695483s ago: executing program 1 (id=6684): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='rd_pages=8', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000c00)='1', 0x1) mkdir(0x0, 0x1ff) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0) write(r2, &(0x7f0000001400)='1', 0x1) 4.130295787s ago: executing program 1 (id=6686): openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) close(r0) 3.349347919s ago: executing program 3 (id=6698): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000cc0)={0x18, 0x110, 0xfa00, {r1, 0x7fffffff, 0x12, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @loopback}}}, 0x118) 3.269593614s ago: executing program 3 (id=6699): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x28901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) read$hiddev(r2, 0x0, 0x0) 3.269080562s ago: executing program 1 (id=6700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 1.268439531s ago: executing program 1 (id=6713): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x1000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1.267431084s ago: executing program 0 (id=6714): write(0xffffffffffffffff, &(0x7f0000000300)='$', 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 1.205650885s ago: executing program 0 (id=6715): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xd4}}, 0x20040040) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x30042101}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x4000) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "3edea8", 0x1}}}, 0xd) 1.205209815s ago: executing program 0 (id=6716): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) openat(r0, 0x0, 0x42, 0xdf) getdents64(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 1.038414299s ago: executing program 1 (id=6717): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000006c0)='G'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 346.226231ms ago: executing program 0 (id=6721): socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) 346.088636ms ago: executing program 2 (id=6722): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x20e6, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="010530000a00140006000000600000000030114020010000000000000000000000000001ff02000000000000000000000000000120e620e6"], 0x64) 213.98654ms ago: executing program 3 (id=6723): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) shutdown(r0, 0x1) 213.756628ms ago: executing program 2 (id=6724): write(0xffffffffffffffff, &(0x7f0000000300)='$', 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 212.75687ms ago: executing program 3 (id=6725): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='rd_pages=8', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000c00)='1', 0x1) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000001400)='1', 0x1) 212.438033ms ago: executing program 1 (id=6726): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r0, &(0x7f0000002c00)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000001c0)="15", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)="4022071c8cfe7c8b02afeebf3094a941e67e14afa257ced511f98083c2ac8bb5f6e0dd585e1fe6daa2b6cd060981a60c79da235f22466c5a6abf8f05e6805253f238443adb5ba11c21e7ba95cd1f5de9682b3066cfb9622148f66086ef7828a93c", 0x61}], 0x1}}], 0x2, 0x20000000) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000002c0), 0x4) 159.495313ms ago: executing program 2 (id=6727): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1, 0x84c, 0x6, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x3}, 0x2c, 0x2, 0x0, 0x0, "77cdd5ec2fbc7a9ec4a453d493b56c7c14329ec7276f956b67944c3c74fa4e7197ca171b8de8de55252f560ae405bcfa7cf6dfdd4e660583b714a00b39113edb"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 159.124698ms ago: executing program 3 (id=6728): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='rd_pages=8', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000c00)='1', 0x1) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0) write(r2, &(0x7f0000001400)='1', 0x1) 150.846971ms ago: executing program 0 (id=6729): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) recvmmsg(r4, 0x0, 0x0, 0x20, 0x0) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 88.551679ms ago: executing program 2 (id=6730): unshare(0x28000600) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 88.249754ms ago: executing program 3 (id=6731): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) openat(r0, 0x0, 0x42, 0xdf) getdents64(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) socket(0x1e, 0x805, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 87.906116ms ago: executing program 0 (id=6732): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x28901, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x1) r2 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) read$hiddev(r2, 0x0, 0x0) 87.831839ms ago: executing program 2 (id=6733): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x101403) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, 0x0) 0s ago: executing program 2 (id=6734): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000006c0)='G'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=6735): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vud', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0x1d6b\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') kernel console output (not intermixed with test programs): ] o2cb: Local heartbeat has not been started. [ 454.226033][T19710] o2cb: Cluster check failed. Fix errors before retrying. [ 454.244379][T19710] (syz.0.5477,19710,1):user_dlm_register:674 ERROR: status = -22 [ 454.247868][T19710] (syz.0.5477,19710,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 454.468893][T19720] syzkaller0: entered promiscuous mode [ 454.471362][T19720] syzkaller0: entered allmulticast mode [ 454.610809][ T48] Bluetooth: hci3: Frame reassembly failed (-84) [ 455.527543][T19698] Set syz1 is full, maxelem 65536 reached [ 456.504854][T19751] fuse: Unknown parameter 'group_i00000000000000000000' [ 456.619475][ T5742] Bluetooth: hci3: command 0x1003 tx timeout [ 456.619511][ T5744] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 457.768497][ T42] audit: type=1800 audit(1786113494.510:693): pid=19795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5507" name="ipv4_address" dev="configfs" ino=88176 res=0 errno=0 [ 457.774902][T19795] o2cb: Local heartbeat has not been started. [ 457.777168][T19795] o2cb: Cluster check failed. Fix errors before retrying. [ 457.779523][T19795] (syz.3.5507,19795,3):user_dlm_register:674 ERROR: status = -22 [ 457.780700][ T42] audit: type=1800 audit(1786113494.510:694): pid=19795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5507" name="ipv4_port" dev="configfs" ino=88177 res=0 errno=0 [ 457.782696][T19795] (syz.3.5507,19795,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 457.799581][ T42] audit: type=1800 audit(1786113494.520:695): pid=19795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5507" name="num" dev="configfs" ino=88178 res=0 errno=0 [ 457.814121][ T42] audit: type=1800 audit(1786113494.520:696): pid=19795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5507" name="local" dev="configfs" ino=88179 res=0 errno=0 [ 458.842230][ T50] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 458.975647][T19832] se_dev->se_dev_ptr already set for storage object [ 458.993333][ T50] usb 7-1: Using ep0 maxpacket: 16 [ 459.002792][ T50] usb 7-1: too many endpoints for config 0 interface 0 altsetting 16: 250, using maximum allowed: 30 [ 459.010894][ T50] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 250 [ 459.020964][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 459.025832][ T50] usb 7-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 459.028935][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.036185][ T50] usb 7-1: config 0 descriptor?? [ 459.165936][T19844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5528'. [ 459.449576][ T50] apple 0003:05AC:029C.0015: unknown main item tag 0x2 [ 459.455543][ T50] apple 0003:05AC:029C.0015: unknown main item tag 0x1 [ 459.458548][ T50] apple 0003:05AC:029C.0015: reserved main item tag 0xe [ 459.460888][ T50] apple 0003:05AC:029C.0015: unknown main item tag 0x3 [ 459.463236][ T50] apple 0003:05AC:029C.0015: reserved main item tag 0xe [ 459.465531][ T50] apple 0003:05AC:029C.0015: item fetching failed at offset 38/40 [ 459.468399][ T50] apple 0003:05AC:029C.0015: parse failed [ 459.470509][ T50] apple 0003:05AC:029C.0015: probe with driver apple failed with error -22 [ 459.654462][ T2322] usb 7-1: USB disconnect, device number 52 [ 459.891998][T19866] fuse: Unknown parameter 'group_id00000000000000000000' [ 460.106668][T19880] netlink: 'syz.1.5545': attribute type 1 has an invalid length. [ 460.129530][T19880] 8021q: adding VLAN 0 to HW filter on device bond3 [ 460.152785][T19880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5545'. [ 460.633664][ T42] audit: type=1800 audit(1786113497.380:697): pid=19903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5554" name="ipv4_address" dev="configfs" ino=88330 res=0 errno=0 [ 460.646892][ T42] audit: type=1800 audit(1786113497.380:698): pid=19903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5554" name="ipv4_port" dev="configfs" ino=88331 res=0 errno=0 [ 460.657822][ T42] audit: type=1800 audit(1786113497.380:699): pid=19903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5554" name="num" dev="configfs" ino=88332 res=0 errno=0 [ 460.664850][ T42] audit: type=1800 audit(1786113497.380:700): pid=19903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5554" name="local" dev="configfs" ino=88333 res=0 errno=0 [ 460.768145][T19909] se_dev->se_dev_ptr already set for storage object [ 461.217804][T19917] pimreg1: tun_chr_ioctl cmd 1074025676 [ 461.220567][T19917] pimreg1: owner set to 0 [ 461.327592][ T42] audit: type=1800 audit(1786113498.060:701): pid=19921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5563" name="ipv4_address" dev="configfs" ino=85975 res=0 errno=0 [ 461.340285][ T42] audit: type=1800 audit(1786113498.080:702): pid=19921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5563" name="ipv4_port" dev="configfs" ino=85976 res=0 errno=0 [ 461.350527][ T42] audit: type=1800 audit(1786113498.090:703): pid=19921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5563" name="num" dev="configfs" ino=85977 res=0 errno=0 [ 461.359100][ T42] audit: type=1800 audit(1786113498.100:704): pid=19921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5563" name="local" dev="configfs" ino=87953 res=0 errno=0 [ 461.402128][ T50] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 461.545979][T19928] se_dev->se_dev_ptr already set for storage object [ 461.549590][T19929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5564'. [ 461.553055][ T50] usb 6-1: Using ep0 maxpacket: 16 [ 461.559970][ T50] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 461.566735][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.572400][ T50] usb 6-1: Product: syz [ 461.573768][ T50] usb 6-1: Manufacturer: syz [ 461.581840][ T50] usb 6-1: SerialNumber: syz [ 461.588001][ T50] usb 6-1: config 0 descriptor?? [ 461.996604][ T50] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 462.000617][ T50] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 462.004348][ T50] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 462.006940][ T50] usb 6-1: media controller created [ 462.014830][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 462.203018][ T50] zl10353_read_register: readreg error (reg=127, ret==0) [ 462.207249][ T50] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 462.210109][ T50] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 462.214746][ T50] usb 6-1: USB disconnect, device number 64 [ 462.235909][ T50] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 462.605655][T19955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.609351][T19955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.753306][T19959] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 463.456758][T11798] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 463.602202][T11798] usb 6-1: Using ep0 maxpacket: 16 [ 463.612884][T11798] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 463.617052][T11798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.620393][T11798] usb 6-1: Product: syz [ 463.622643][T11798] usb 6-1: Manufacturer: syz [ 463.625049][T11798] usb 6-1: SerialNumber: syz [ 463.643675][T11798] usb 6-1: config 0 descriptor?? [ 463.951709][ T50] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 464.060789][T11798] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 464.071570][T11798] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 464.076258][T11798] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 464.079073][T11798] usb 6-1: media controller created [ 464.092972][T11798] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 464.127694][ T50] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 464.130935][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.133805][ T50] usb 7-1: Product: syz [ 464.135580][ T50] usb 7-1: Manufacturer: syz [ 464.137239][ T50] usb 7-1: SerialNumber: syz [ 464.274294][T11798] zl10353_read_register: readreg error (reg=127, ret==0) [ 464.278830][T11798] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 464.281576][T11798] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 464.287844][T11798] usb 6-1: USB disconnect, device number 65 [ 464.325961][T11798] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 464.764959][ T50] cdc_ncm 7-1:1.0: failed GET_NTB_PARAMETERS [ 464.767103][ T50] cdc_ncm 7-1:1.0: bind() failure [ 464.772830][ T50] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 464.775371][ T50] cdc_ncm 7-1:1.1: bind() failure [ 464.785030][ T50] usb 7-1: USB disconnect, device number 53 [ 464.890153][T20004] fuse: Bad value for 'fd' [ 465.071689][ T24] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 465.223345][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 465.227796][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 465.231577][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 465.238335][ T24] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 465.241363][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.244268][ T24] usb 6-1: Product: syz [ 465.245804][ T24] usb 6-1: Manufacturer: syz [ 465.247338][ T24] usb 6-1: SerialNumber: syz [ 465.258014][ T24] usb 6-1: config 0 descriptor?? [ 465.332643][ T12] bond1 (unregistering): (slave geneve2): Releasing active interface [ 465.353487][ T12] bond0 (unregistering): Released all slaves [ 465.358798][ T12] bond1 (unregistering): Released all slaves [ 465.453868][ T12] ¿: left promiscuous mode [ 465.469610][ T24] adutux 6-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 465.483139][ T24] usb 6-1: USB disconnect, device number 66 [ 465.608691][ T12] tipc: Disabling bearer [ 465.621766][ T12] tipc: Left network mode [ 465.814718][T20021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.817758][T20021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.895599][T20025] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 465.989517][T20028] fuse: Bad value for 'fd' [ 466.008022][ T12] hsr_slave_0: left promiscuous mode [ 466.013472][ T12] hsr_slave_1: left promiscuous mode [ 466.029713][ T12] veth1_macvtap: left promiscuous mode [ 466.033473][ T12] veth0_macvtap: left promiscuous mode [ 466.036595][ T12] veth1_vlan: left promiscuous mode [ 466.038939][ T12] veth0_vlan: left promiscuous mode [ 466.069313][T20032] se_dev->se_dev_ptr already set for storage object [ 466.091440][T20026] md/raid:md0: not clean -- starting background reconstruction [ 466.094588][T20026] md/raid:md0: invalid chunk size 0 [ 466.097756][T20026] md: pers->run() failed ... [ 466.106980][T20025] md: could not open device unknown-block(1,0). [ 466.178756][T20037] se_dev->se_dev_ptr already set for storage object [ 466.752844][ T12] IPVS: stop unused estimator thread 0... [ 468.011519][T20076] netlink: 'syz.2.5623': attribute type 1 has an invalid length. [ 468.055362][T20076] 8021q: adding VLAN 0 to HW filter on device bond4 [ 468.067890][T20063] Set syz1 is full, maxelem 65536 reached [ 468.651967][ T5883] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 468.801679][ T5883] usb 6-1: Using ep0 maxpacket: 16 [ 468.808249][ T5883] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 468.812126][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.814737][ T5883] usb 6-1: Product: syz [ 468.816138][ T5883] usb 6-1: Manufacturer: syz [ 468.817635][ T5883] usb 6-1: SerialNumber: syz [ 468.820938][ T5883] usb 6-1: config 0 descriptor?? [ 469.127671][ T5742] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 469.132364][ T5742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 469.137637][ T5742] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 469.143843][ T5742] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 469.146974][ T5742] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 469.163383][ T42] audit: type=1800 audit(1786113505.900:705): pid=20111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5635" name="ipv4_address" dev="configfs" ino=88736 res=0 errno=0 [ 469.176451][ T42] audit: type=1800 audit(1786113505.910:706): pid=20111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5635" name="ipv4_port" dev="configfs" ino=88737 res=0 errno=0 [ 469.183301][T20111] o2cb: Local heartbeat has not been started. [ 469.185767][T20111] o2cb: Cluster check failed. Fix errors before retrying. [ 469.188102][T20111] (syz.2.5635,20111,3):user_dlm_register:674 ERROR: status = -22 [ 469.190777][ T42] audit: type=1800 audit(1786113505.920:707): pid=20111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5635" name="num" dev="configfs" ino=88738 res=0 errno=0 [ 469.197586][T20111] (syz.2.5635,20111,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 469.204549][ T42] audit: type=1800 audit(1786113505.920:708): pid=20111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5635" name="local" dev="configfs" ino=88739 res=0 errno=0 [ 469.251707][ T5883] dvb_usb_dtv5100 6-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 469.272668][ T5883] usb 6-1: USB disconnect, device number 67 [ 469.358745][T20117] syzkaller0: entered promiscuous mode [ 469.365007][T20117] syzkaller0: entered allmulticast mode [ 469.437999][T20122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.442995][T20122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.690355][T20108] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.693121][T20108] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.695530][T20108] bridge_slave_0: entered allmulticast mode [ 469.698270][T20108] bridge_slave_0: entered promiscuous mode [ 469.701919][T20108] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.704251][T20108] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.706573][T20108] bridge_slave_1: entered allmulticast mode [ 469.709402][T20108] bridge_slave_1: entered promiscuous mode [ 469.726486][T20108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.731214][T20108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.750367][T20108] team0: Port device team_slave_0 added [ 469.754357][T20108] team0: Port device team_slave_1 added [ 469.770991][T20108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.773276][T20108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.781266][T20108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.785657][T20108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.787760][T20108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.796013][T20108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.827800][T20108] hsr_slave_0: entered promiscuous mode [ 469.830168][T20108] hsr_slave_1: entered promiscuous mode [ 469.834781][T20108] debugfs: 'hsr0' already exists in 'hsr' [ 469.836677][T20108] Cannot create hsr debugfs directory [ 469.979427][T20108] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.983650][T20108] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 469.997068][T20142] se_dev->se_dev_ptr already set for storage object [ 470.120581][T20108] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.126340][T20108] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 470.220123][T20108] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.224486][T20108] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 470.344785][T20108] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.348790][T20108] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 470.494797][T20108] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 470.500054][T20108] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 470.502999][T20108] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 470.507084][T20108] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 470.509801][T20108] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 470.515604][T20108] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 470.518431][T20108] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 470.524711][T20108] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 470.592250][T20108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.680882][T20108] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.723399][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.725729][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.743911][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.746350][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.888634][T20174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.894979][T20174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.010968][T20182] Bluetooth: MGMT ver 1.23 [ 471.013109][T20182] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 471.104108][T20108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.137289][T20108] veth0_vlan: entered promiscuous mode [ 471.143234][T20108] veth1_vlan: entered promiscuous mode [ 471.159630][T20108] veth0_macvtap: entered promiscuous mode [ 471.164526][T20108] veth1_macvtap: entered promiscuous mode [ 471.176126][T20108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.184226][T20108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.252946][ T5744] Bluetooth: hci3: command tx timeout [ 471.356771][T20193] fuse: Invalid rootmode [ 471.366933][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.374468][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.403834][T15621] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.409299][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.413864][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.417757][T15621] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.460203][T15621] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.464791][T15621] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.508327][T20198] netlink: 'syz.0.5657': attribute type 1 has an invalid length. [ 471.540162][T20198] 8021q: adding VLAN 0 to HW filter on device bond5 [ 471.595770][T20203] se_dev->se_dev_ptr already set for storage object [ 471.905818][T20213] fuse: Invalid rootmode [ 472.021188][T20219] se_dev->se_dev_ptr already set for storage object [ 473.251878][T20201] Set syz1 is full, maxelem 65536 reached [ 473.331743][ T5744] Bluetooth: hci3: command tx timeout [ 473.492619][T11798] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 473.644447][T11798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 473.648104][T11798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 473.651326][T11798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 473.656866][T11798] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 473.659955][T11798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.662693][T11798] usb 6-1: Product: syz [ 473.664072][T11798] usb 6-1: Manufacturer: syz [ 473.665599][T11798] usb 6-1: SerialNumber: syz [ 473.669444][T11798] usb 6-1: config 0 descriptor?? [ 473.883158][T11798] adutux 6-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 473.906320][T11798] usb 6-1: USB disconnect, device number 68 [ 474.079096][T20255] syzkaller0: entered promiscuous mode [ 474.080888][T20255] syzkaller0: entered allmulticast mode [ 474.250138][T20263] netlink: 'syz.3.5682': attribute type 1 has an invalid length. [ 474.265621][T20263] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5682'. [ 474.282034][T20263] bridge0: port 3(ip6gretap1) entered blocking state [ 474.285073][T20263] bridge0: port 3(ip6gretap1) entered disabled state [ 474.287585][T20263] ip6gretap1: entered allmulticast mode [ 474.291242][T20263] ip6gretap1: entered promiscuous mode [ 474.339671][T20267] se_dev->se_dev_ptr already set for storage object [ 474.537226][T20279] binder_alloc: 20276: binder_alloc_buf, no vma [ 474.872126][T11798] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 475.141708][T11798] usb 7-1: unable to get BOS descriptor or descriptor too short [ 475.148090][T11798] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 475.150938][T11798] usb 7-1: can't read configurations, error -71 [ 475.385966][ T42] audit: type=1800 audit(1786113512.130:709): pid=20289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5691" name="ipv4_address" dev="configfs" ino=90966 res=0 errno=0 [ 475.390752][T20289] o2cb: Local heartbeat has not been started. [ 475.401949][T20289] o2cb: Cluster check failed. Fix errors before retrying. [ 475.402599][ T42] audit: type=1800 audit(1786113512.130:710): pid=20289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5691" name="ipv4_port" dev="configfs" ino=90967 res=0 errno=0 [ 475.405428][T20289] (syz.1.5691,20289,1):user_dlm_register:674 ERROR: status = -22 [ 475.419279][T20289] (syz.1.5691,20289,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 475.421871][ T5744] Bluetooth: hci3: command tx timeout [ 475.427046][ T42] audit: type=1800 audit(1786113512.130:711): pid=20289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5691" name="num" dev="configfs" ino=90968 res=0 errno=0 [ 475.444505][ T42] audit: type=1800 audit(1786113512.130:712): pid=20289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5691" name="local" dev="configfs" ino=90969 res=0 errno=0 [ 475.735686][T20299] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 476.091713][ T5106] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 476.253263][ T5106] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 476.257514][ T5106] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 476.261977][ T5106] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 476.269533][ T5106] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 476.277677][ T5106] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.285765][ T5106] usb 6-1: Product: syz [ 476.287098][ T5106] usb 6-1: Manufacturer: syz [ 476.291989][ T5106] usb 6-1: SerialNumber: syz [ 476.299857][ T5106] usb 6-1: config 0 descriptor?? [ 476.516086][ T5106] adutux 6-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 476.541839][ T5106] usb 6-1: USB disconnect, device number 69 [ 476.660109][T20325] binder_alloc: 20322: binder_alloc_buf, no vma [ 476.714362][ T42] audit: type=1800 audit(1786113513.460:713): pid=20328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5702" name="ipv4_address" dev="configfs" ino=92403 res=0 errno=0 [ 476.725702][ T42] audit: type=1800 audit(1786113513.470:714): pid=20328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5702" name="ipv4_port" dev="configfs" ino=92404 res=0 errno=0 [ 476.735905][ T42] audit: type=1800 audit(1786113513.480:715): pid=20328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5702" name="num" dev="configfs" ino=92405 res=0 errno=0 [ 476.745851][ T42] audit: type=1800 audit(1786113513.490:716): pid=20328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5702" name="local" dev="configfs" ino=92406 res=0 errno=0 [ 476.753010][T20328] o2cb: Local heartbeat has not been started. [ 476.757667][T20328] o2cb: Cluster check failed. Fix errors before retrying. [ 476.760937][T20328] (syz.3.5702,20328,0):user_dlm_register:674 ERROR: status = -22 [ 476.763912][T20328] (syz.3.5702,20328,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 476.918918][T20335] fuse: Unknown parameter 'use00000000000000000000' [ 477.491686][ T5744] Bluetooth: hci3: command tx timeout [ 477.521758][T11798] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 477.673385][T11798] usb 7-1: Using ep0 maxpacket: 8 [ 477.677783][T11798] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 477.681403][T11798] usb 7-1: config 0 has no interface number 0 [ 477.684223][T11798] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 477.689083][T11798] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 477.694404][T11798] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 477.699257][T11798] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 477.705417][T11798] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 477.709517][T11798] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.716182][T11798] usb 7-1: config 0 descriptor?? [ 477.743335][T11798] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 477.961772][T20357] fuse: Unknown parameter 'use00000000000000000000' [ 478.302552][ T5881] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 478.465002][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 478.469483][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 478.473555][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 478.480446][ T5881] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 478.484355][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.487416][ T5881] usb 6-1: Product: syz [ 478.488935][ T5881] usb 6-1: Manufacturer: syz [ 478.490635][ T5881] usb 6-1: SerialNumber: syz [ 478.493469][T20363] md/raid:md0: not clean -- starting background reconstruction [ 478.495936][T20363] md/raid:md0: invalid chunk size 0 [ 478.497470][ T5881] usb 6-1: config 0 descriptor?? [ 478.497806][T20363] md: pers->run() failed ... [ 478.706409][ T5881] adutux 6-1:0.0: ADU208 now attached to /dev/usb/adutux1 [ 478.716554][ T5881] usb 6-1: USB disconnect, device number 70 [ 479.406646][T20383] fuse: Unknown parameter 'use00000000000000000000' [ 479.579850][T20390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.584050][T20390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.685959][T20394] se_dev->se_dev_ptr already set for storage object [ 480.134950][T20407] fuse: Unknown parameter 'user_i00000000000000000000' [ 480.315341][ T5106] usb 7-1: USB disconnect, device number 56 [ 480.321578][ T5106] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 480.421679][T20420] se_dev->se_dev_ptr already set for storage object [ 480.805212][T20445] se_dev->se_dev_ptr already set for storage object [ 480.881688][ T50] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 481.011857][ T50] usb 6-1: device descriptor read/64, error -71 [ 481.261788][ T50] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 481.392377][ T50] usb 6-1: device descriptor read/64, error -71 [ 481.512158][ T50] usb usb6-port1: attempt power cycle [ 481.853951][ T50] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 481.872528][ T50] usb 6-1: device descriptor read/8, error -71 [ 481.917360][T20466] se_dev->se_dev_ptr already set for storage object [ 481.949519][T20470] netlink: 'syz.0.5760': attribute type 1 has an invalid length. [ 481.962049][T20470] 8021q: adding VLAN 0 to HW filter on device bond6 [ 481.968327][T20470] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5760'. [ 482.077224][T20478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.083556][T20478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.121897][ T50] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 482.142868][ T50] usb 6-1: device descriptor read/8, error -71 [ 482.252186][ T50] usb usb6-port1: unable to enumerate USB device [ 483.567846][ T42] audit: type=1800 audit(1786113520.310:717): pid=20487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5766" name="ipv4_address" dev="configfs" ino=89977 res=0 errno=0 [ 483.576896][ T42] audit: type=1800 audit(1786113520.320:718): pid=20487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5766" name="num" dev="configfs" ino=89978 res=0 errno=0 [ 483.586895][ T42] audit: type=1800 audit(1786113520.330:719): pid=20487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5766" name="local" dev="configfs" ino=89979 res=0 errno=0 [ 483.602596][T20487] o2cb: Local heartbeat has not been started. [ 483.605214][T20487] o2cb: Cluster check failed. Fix errors before retrying. [ 483.608115][T20487] (syz.0.5766,20487,2):user_dlm_register:674 ERROR: status = -22 [ 483.611463][T20487] (syz.0.5766,20487,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 483.772723][T20493] se_dev->se_dev_ptr already set for storage object [ 484.091750][ T5883] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 484.216983][T20510] fuse: Unknown parameter 'user_id00000000000000000000' [ 484.254881][T20512] input: syz0 as /devices/virtual/input/input17 [ 484.261727][ T5883] usb 6-1: Using ep0 maxpacket: 32 [ 484.265661][ T5883] usb 6-1: unable to get BOS descriptor or descriptor too short [ 484.269054][ T5883] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 484.272753][ T5883] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 484.275396][ T5883] usb 6-1: config 14 has no interface number 0 [ 484.277381][ T5883] usb 6-1: config 14 has no interface number 1 [ 484.279369][ T5883] usb 6-1: config 14 interface 57 has no altsetting 0 [ 484.281514][ T5883] usb 6-1: config 14 interface 228 has no altsetting 0 [ 484.286095][ T5883] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 484.289048][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.291833][ T5883] usb 6-1: Product: syz [ 484.293205][ T5883] usb 6-1: Manufacturer: syz [ 484.294726][ T5883] usb 6-1: SerialNumber: syz [ 484.450034][T20483] Set syz1 is full, maxelem 65536 reached [ 484.600968][T20520] se_dev->se_dev_ptr already set for storage object [ 484.708809][ T5883] legousbtower 6-1:14.57: interrupt endpoints not found [ 484.909627][ T5883] legousbtower 6-1:14.228: interrupt endpoints not found [ 485.539815][T20536] se_dev->se_dev_ptr already set for storage object [ 485.864056][T20545] batadv_slave_0: Caught tx_queue_len zero misconfig [ 486.255171][T20551] se_dev->se_dev_ptr already set for storage object [ 486.429242][T20555] db_root: cannot be changed because it's in use [ 486.527551][T20558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5792'. [ 486.843918][T11798] usb 6-1: USB disconnect, device number 75 [ 486.990989][ T42] audit: type=1800 audit(1786113523.730:720): pid=20569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5797" name="ipv4_address" dev="configfs" ino=92759 res=0 errno=0 [ 487.007609][T20569] o2cb: Local heartbeat has not been started. [ 487.009578][T20569] o2cb: Cluster check failed. Fix errors before retrying. [ 487.011838][ T42] audit: type=1800 audit(1786113523.730:721): pid=20569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5797" name="ipv4_port" dev="configfs" ino=92760 res=0 errno=0 [ 487.011865][ T42] audit: type=1800 audit(1786113523.750:722): pid=20569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5797" name="num" dev="configfs" ino=92761 res=0 errno=0 [ 487.011888][ T42] audit: type=1800 audit(1786113523.750:723): pid=20569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5797" name="local" dev="configfs" ino=92762 res=0 errno=0 [ 487.031672][T20569] (syz.1.5797,20569,1):user_dlm_register:674 ERROR: status = -22 [ 487.034410][T20569] (syz.1.5797,20569,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 487.481302][T20579] se_dev->se_dev_ptr already set for storage object [ 487.981898][ T24] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 488.132102][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 488.136588][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 488.140647][ T24] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 488.143452][ T24] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 488.146132][ T24] usb 7-1: config 14 has no interface number 0 [ 488.148137][ T24] usb 7-1: config 14 has no interface number 1 [ 488.150481][ T24] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 488.154040][ T24] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 488.157920][ T24] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 488.161759][ T24] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 488.165292][ T24] usb 7-1: config 14 interface 228 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 488.169450][ T24] usb 7-1: config 14 interface 57 has no altsetting 0 [ 488.171572][ T24] usb 7-1: config 14 interface 228 has no altsetting 0 [ 488.176113][ T24] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 488.179085][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.181737][ T24] usb 7-1: Product: syz [ 488.183187][ T24] usb 7-1: Manufacturer: syz [ 488.184750][ T24] usb 7-1: SerialNumber: syz [ 488.595084][ T24] legousbtower 7-1:14.57: interrupt endpoints not found [ 488.800354][ T24] legousbtower 7-1:14.228: interrupt endpoints not found [ 490.751005][ T5883] usb 7-1: USB disconnect, device number 57 [ 491.317890][T20623] se_dev->se_dev_ptr already set for storage object [ 491.606832][T20635] netlink: 'syz.0.5823': attribute type 1 has an invalid length. [ 491.629878][T20635] 8021q: adding VLAN 0 to HW filter on device bond7 [ 491.641122][T20635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5823'. [ 491.655443][T20635] macvlan2: entered promiscuous mode [ 491.658404][T20635] macvlan2: entered allmulticast mode [ 491.733080][T20643] se_dev->se_dev_ptr already set for storage object [ 491.762737][T20641] nvmet: adding nsid 1 to subsystem subsys1 [ 491.792665][T20645] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5822'. [ 492.458019][T20665] netlink: 'syz.1.5834': attribute type 1 has an invalid length. [ 492.486131][T20665] 8021q: adding VLAN 0 to HW filter on device bond4 [ 492.500479][T20665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5834'. [ 492.511802][T20665] macvlan3: entered promiscuous mode [ 492.514469][T20665] macvlan3: entered allmulticast mode [ 493.190568][T20694] netlink: 'syz.3.5844': attribute type 1 has an invalid length. [ 493.244121][T20697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5844'. [ 493.248003][T20694] 8021q: adding VLAN 0 to HW filter on device bond1 [ 493.259701][T20697] macvlan2: entered promiscuous mode [ 493.262276][T20697] macvlan2: entered allmulticast mode [ 493.953712][T20723] netlink: 'syz.2.5853': attribute type 1 has an invalid length. [ 493.965579][T20723] 8021q: adding VLAN 0 to HW filter on device bond5 [ 493.972528][T20723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5853'. [ 493.980031][T20723] macvlan6: entered promiscuous mode [ 493.981858][T20723] macvlan6: entered allmulticast mode [ 494.138414][T20730] se_dev->se_dev_ptr already set for storage object [ 494.302843][T20734] db_root: cannot be changed because it's in use [ 494.431353][T20743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5861'. [ 494.446476][T20745] netlink: 'syz.0.5862': attribute type 1 has an invalid length. [ 494.486664][T20745] 8021q: adding VLAN 0 to HW filter on device bond8 [ 494.499667][T20745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5862'. [ 494.509317][T20745] macvlan3: entered promiscuous mode [ 494.511499][T20745] macvlan3: entered allmulticast mode [ 494.635111][T20759] se_dev->se_dev_ptr already set for storage object [ 494.764400][T20770] db_root: cannot be changed because it's in use [ 494.797227][T20775] se_dev->se_dev_ptr already set for storage object [ 494.933379][T20787] se_dev->se_dev_ptr already set for storage object [ 494.958090][T20785] Console: switching to colour dummy device 80x25 [ 494.995859][ T42] audit: type=1800 audit(1786113531.740:724): pid=20790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5881" name="ipv4_address" dev="configfs" ino=91890 res=0 errno=0 [ 495.007526][ T42] audit: type=1800 audit(1786113531.750:725): pid=20790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5881" name="ipv4_port" dev="configfs" ino=91891 res=0 errno=0 [ 495.019011][ T42] audit: type=1800 audit(1786113531.760:726): pid=20790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5881" name="num" dev="configfs" ino=91892 res=0 errno=0 [ 495.028173][ T42] audit: type=1800 audit(1786113531.760:727): pid=20790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5881" name="local" dev="configfs" ino=91893 res=0 errno=0 [ 495.040289][T20790] o2cb: Local heartbeat has not been started. [ 495.042985][T20790] o2cb: Cluster check failed. Fix errors before retrying. [ 495.045306][T20790] (syz.3.5881,20790,3):user_dlm_register:674 ERROR: status = -22 [ 495.047893][T20790] (syz.3.5881,20790,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 495.182644][ T5744] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 495.189226][ T5744] CPU: 3 UID: 0 PID: 5744 Comm: kworker/u34:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.189258][ T5744] Tainted: [L]=SOFTLOCKUP [ 495.189264][ T5744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 495.189275][ T5744] Workqueue: hci4 hci_rx_work [ 495.189374][ T5744] Call Trace: [ 495.189391][ T5744] [ 495.189399][ T5744] dump_stack_lvl+0x100/0x190 [ 495.189506][ T5744] sysfs_warn_dup.cold+0x1c/0x28 [ 495.189556][ T5744] sysfs_create_dir_ns+0x24b/0x2b0 [ 495.189624][ T5744] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 495.189651][ T5744] ? find_held_lock+0x2b/0x80 [ 495.189695][ T5744] ? kobject_add_internal+0x25f/0x930 [ 495.189722][ T5744] ? kobject_add_internal+0x25f/0x930 [ 495.189743][ T5744] ? do_raw_spin_unlock+0x145/0x1e0 [ 495.189764][ T5744] kobject_add_internal+0x2c8/0x930 [ 495.189787][ T5744] kobject_add+0x16a/0x1e0 [ 495.189807][ T5744] ? __pfx_kobject_add+0x10/0x10 [ 495.189823][ T5744] ? class_to_subsys+0x10f/0x150 [ 495.189887][ T5744] ? kobject_put+0xb9/0x640 [ 495.189904][ T5744] ? _raw_spin_unlock+0x28/0x50 [ 495.189932][ T5744] device_add+0x294/0x1970 [ 495.189963][ T5744] ? __pfx_dev_set_name+0x10/0x10 [ 495.189984][ T5744] ? __pfx_device_add+0x10/0x10 [ 495.190013][ T5744] ? mgmt_send_event_skb+0x2fb/0x460 [ 495.190044][ T5744] hci_conn_add_sysfs+0x1a3/0x260 [ 495.190075][ T5744] le_conn_complete_evt+0x11eb/0x1f60 [ 495.190107][ T5744] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 495.190130][ T5744] ? hci_event_packet+0x186/0xcd0 [ 495.190160][ T5744] hci_le_conn_complete_evt+0x23c/0x3a0 [ 495.190185][ T5744] ? skb_pull_data+0x15f/0x1e0 [ 495.190217][ T5744] hci_le_meta_evt+0x34a/0x5f0 [ 495.190244][ T5744] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 495.190274][ T5744] hci_event_packet+0x51c/0xcd0 [ 495.190299][ T5744] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 495.190331][ T5744] ? __pfx_hci_event_packet+0x10/0x10 [ 495.190360][ T5744] ? kcov_remote_start+0x384/0x670 [ 495.190398][ T5744] ? lockdep_hardirqs_on+0x78/0x100 [ 495.190431][ T5744] hci_rx_work+0x451/0xfc0 [ 495.190462][ T5744] process_one_work+0xa23/0x1940 [ 495.190511][ T5744] ? __pfx_process_one_work+0x10/0x10 [ 495.190547][ T5744] ? __pfx_hci_rx_work+0x10/0x10 [ 495.190573][ T5744] worker_thread+0x5ef/0xe50 [ 495.190607][ T5744] ? __pfx_worker_thread+0x10/0x10 [ 495.190635][ T5744] ? kthread+0x13a/0x450 [ 495.190666][ T5744] ? __pfx_worker_thread+0x10/0x10 [ 495.190689][ T5744] kthread+0x370/0x450 [ 495.190713][ T5744] ? __pfx_kthread+0x10/0x10 [ 495.190740][ T5744] ret_from_fork+0x72b/0xd50 [ 495.190775][ T5744] ? __pfx_ret_from_fork+0x10/0x10 [ 495.190798][ T5744] ? rcu_is_watching+0x12/0xc0 [ 495.190830][ T5744] ? __switch_to+0x800/0x10f0 [ 495.190860][ T5744] ? __pfx_kthread+0x10/0x10 [ 495.190887][ T5744] ret_from_fork_asm+0x1a/0x30 [ 495.190927][ T5744] [ 495.190959][ T5744] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 495.314570][ T5744] Bluetooth: hci4: failed to register connection device [ 495.509127][T20809] db_root: cannot be changed because it's in use [ 495.607622][T20814] se_dev->se_dev_ptr already set for storage object [ 495.660604][T20818] syzkaller0: entered promiscuous mode [ 495.663158][T20818] syzkaller0: entered allmulticast mode [ 495.670916][T20818] tipc: Started in network mode [ 495.672902][T20818] tipc: Node identity ba5004e45d1d, cluster identity 4711 [ 495.675448][T20818] tipc: Enabled bearer , priority 0 [ 495.684301][T20817] tipc: Resetting bearer [ 495.710263][T20817] tipc: Disabling bearer [ 495.848271][T20825] o2cb: Local heartbeat has not been started. [ 495.851049][T20825] o2cb: Cluster check failed. Fix errors before retrying. [ 495.854410][T20825] (syz.2.5895,20825,1):user_dlm_register:674 ERROR: status = -22 [ 495.857549][T20825] (syz.2.5895,20825,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 495.994493][T20837] se_dev->se_dev_ptr already set for storage object [ 496.128614][T20846] db_root: cannot be changed because it's in use [ 496.160705][T20848] o2cb: Local heartbeat has not been started. [ 496.163663][T20848] o2cb: Cluster check failed. Fix errors before retrying. [ 496.166713][T20848] (syz.1.5904,20848,0):user_dlm_register:674 ERROR: status = -22 [ 496.170071][T20848] (syz.1.5904,20848,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 496.438810][T20870] o2cb: Local heartbeat has not been started. [ 496.440797][T20870] o2cb: Cluster check failed. Fix errors before retrying. [ 496.445412][T20870] (syz.3.5913,20870,3):user_dlm_register:674 ERROR: status = -22 [ 496.448697][T20870] (syz.3.5913,20870,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 496.658566][T20883] db_root: cannot be changed because it's in use [ 497.213574][T20901] o2cb: Local heartbeat has not been started. [ 497.216329][T20901] o2cb: Cluster check failed. Fix errors before retrying. [ 497.219428][T20901] (syz.3.5924,20901,2):user_dlm_register:674 ERROR: status = -22 [ 497.223010][T20901] (syz.3.5924,20901,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 497.352998][T20910] syzkaller0: entered promiscuous mode [ 497.354965][T20913] db_root: cannot be changed because it's in use [ 497.355176][T20912] Format for deleting device is "id" (uint). [ 497.355473][T20910] syzkaller0: entered allmulticast mode [ 497.671948][ T5106] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 497.833307][ T5106] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 497.836332][ T5106] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 497.839982][ T5106] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 497.844345][ T5106] usb 7-1: config 220 has no interface number 2 [ 497.846865][ T5106] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 497.851739][ T5106] usb 7-1: config 220 interface 0 has no altsetting 0 [ 497.854419][ T5106] usb 7-1: config 220 interface 76 has no altsetting 0 [ 497.856456][ T5106] usb 7-1: config 220 interface 1 has no altsetting 0 [ 497.861570][ T5106] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 497.866350][ T5106] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.869572][ T5106] usb 7-1: Product: syz [ 497.871335][ T5106] usb 7-1: Manufacturer: syz [ 497.873346][ T5106] usb 7-1: SerialNumber: syz [ 498.091219][ T5106] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 498.093815][ T5106] uvcvideo 7-1:220.0: No valid video chain found. [ 498.095977][ T5106] usb 7-1: selecting invalid altsetting 0 [ 498.105519][ T5106] usb 7-1: selecting invalid altsetting 0 [ 498.107449][ T5106] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 498.111766][ T5106] usb 7-1: USB disconnect, device number 58 [ 498.436292][T20935] netlink: 'syz.1.5938': attribute type 1 has an invalid length. [ 498.458006][T20935] 8021q: adding VLAN 0 to HW filter on device bond5 [ 498.461589][T20939] ±ÿ†Ý'É|d<: renamed from lo (while UP) [ 498.468175][T20935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5938'. [ 498.483149][T20935] macvlan4: entered promiscuous mode [ 498.485507][T20935] macvlan4: entered allmulticast mode [ 498.500552][T20944] se_dev->se_dev_ptr already set for storage object [ 498.601945][T20954] db_root: cannot be changed because it's in use [ 498.991396][T20970] netlink: 'syz.1.5952': attribute type 1 has an invalid length. [ 499.006509][T20970] 8021q: adding VLAN 0 to HW filter on device bond6 [ 499.018193][T20970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5952'. [ 499.024617][T20970] macvlan5: entered promiscuous mode [ 499.026457][T20970] macvlan5: entered allmulticast mode [ 499.292273][ T5883] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 499.441700][ T5883] usb 6-1: Using ep0 maxpacket: 32 [ 499.445765][ T5883] usb 6-1: unable to get BOS descriptor or descriptor too short [ 499.449290][ T5883] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 499.452420][ T5883] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 499.455124][ T5883] usb 6-1: config 14 has no interface number 0 [ 499.457205][ T5883] usb 6-1: config 14 has no interface number 1 [ 499.459339][ T5883] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 499.463008][ T5883] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 499.466832][ T5883] usb 6-1: config 14 interface 57 has no altsetting 0 [ 499.469224][ T5883] usb 6-1: config 14 interface 228 has no altsetting 0 [ 499.474375][ T5883] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 499.477421][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.480039][ T5883] usb 6-1: Product: syz [ 499.481486][ T5883] usb 6-1: Manufacturer: syz [ 499.483330][ T5883] usb 6-1: SerialNumber: syz [ 499.526697][T20975] key id 000004d2 not found [ 499.581947][T20977] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5955'. [ 499.762109][T15621] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.766107][T15621] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.769321][T15621] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.772925][T15621] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.819493][T20991] netlink: 'syz.0.5961': attribute type 1 has an invalid length. [ 499.841856][T20991] 8021q: adding VLAN 0 to HW filter on device bond9 [ 499.849343][T20991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5961'. [ 499.856629][T20991] macvlan4: entered promiscuous mode [ 499.858365][T20991] macvlan4: entered allmulticast mode [ 499.906068][ T5883] legousbtower 6-1:14.57: interrupt endpoints not found [ 499.927197][T20997] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 500.107175][ T5883] legousbtower 6-1:14.228: interrupt endpoints not found [ 500.421860][ T5883] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 500.573522][ T5883] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 500.577568][ T5883] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 500.580897][ T5883] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 500.587357][ T5883] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 500.591034][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.594277][ T5883] usb 7-1: Product: syz [ 500.595920][ T5883] usb 7-1: Manufacturer: syz [ 500.597732][ T5883] usb 7-1: SerialNumber: syz [ 500.602081][ T5883] usb 7-1: config 0 descriptor?? [ 500.820516][ T5883] adutux 7-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 500.827900][ T5883] usb 7-1: USB disconnect, device number 59 [ 500.886427][T21015] netlink: 864 bytes leftover after parsing attributes in process `syz.0.5968'. [ 501.014431][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.018859][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.270209][T21026] o2cb: Local heartbeat has not been started. [ 501.272903][T21026] o2cb: Cluster check failed. Fix errors before retrying. [ 501.275930][T21026] (syz.0.5972,21026,1):user_dlm_register:674 ERROR: status = -22 [ 501.279154][T21026] (syz.0.5972,21026,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 502.071015][T11798] usb 6-1: USB disconnect, device number 76 [ 502.496655][T21064] xs_local_setup_socket: unhandled error (91) connecting to /var/run/gssproxy.sock [ 503.505883][T21087] syzkaller0: entered promiscuous mode [ 503.508292][T21087] syzkaller0: entered allmulticast mode [ 503.858011][T21111] netlink: 'syz.0.6005': attribute type 1 has an invalid length. [ 503.910304][T21112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6005'. [ 505.183795][T21107] tipc: Enabling of bearer rejected, failed to enable media [ 505.187295][T21111] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 505.374445][T21131] nvmet: adding nsid 1 to subsystem testnqn [ 505.381809][ T42] audit: type=1800 audit(1786113542.120:728): pid=21131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6011" name="device_path" dev="configfs" ino=96400 res=0 errno=0 [ 505.383438][T21131] nvmet: failed to open block device (null): (-22) [ 505.389884][ T42] audit: type=1800 audit(1786113542.130:729): pid=21131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6011" name="enable" dev="configfs" ino=96401 res=0 errno=0 [ 505.421383][ T42] audit: type=1800 audit(1786113542.160:730): pid=21131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6011" name="addr_trtype" dev="configfs" ino=96407 res=0 errno=0 [ 505.429173][T21131] nvmet_tcp: malformed ip/port passed: :4420 [ 505.430040][ T42] audit: type=1800 audit(1786113542.160:731): pid=21131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6011" name="addr_adrfam" dev="configfs" ino=96408 res=0 errno=0 [ 505.441248][ T42] audit: type=1800 audit(1786113542.160:732): pid=21131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6011" name="addr_trsvcid" dev="configfs" ino=96409 res=0 errno=0 [ 507.411044][T21140] tipc: Enabling of bearer rejected, failed to enable media [ 507.474947][T21150] syzkaller0: entered promiscuous mode [ 507.477194][T21150] syzkaller0: entered allmulticast mode [ 507.486243][T21152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.498667][T21152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.552495][T21157] nvmet: failed to open block device ./file0: (-2) [ 507.640617][T21166] netlink: 'syz.1.6025': attribute type 1 has an invalid length. [ 507.688622][T21166] 8021q: adding VLAN 0 to HW filter on device bond7 [ 507.735470][T21166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6025'. [ 507.755510][T21166] macvlan6: entered promiscuous mode [ 507.755524][T21166] macvlan6: entered allmulticast mode [ 508.121782][ T5106] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 508.211779][T20802] Bluetooth: hci4: command 0x0406 tx timeout [ 508.281845][ T5106] usb 6-1: Using ep0 maxpacket: 16 [ 508.291884][ T5106] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.302070][ T5106] usb 6-1: config 0 has no interfaces? [ 508.313417][ T5106] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 508.316801][ T5106] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.319366][ T5106] usb 6-1: Product: syz [ 508.320723][ T5106] usb 6-1: Manufacturer: syz [ 508.323526][ T5106] usb 6-1: SerialNumber: syz [ 508.330421][ T5106] usb 6-1: config 0 descriptor?? [ 508.616478][T21186] nvmet: failed to open block device ./file0: (-2) [ 508.691459][T21193] netlink: 'syz.3.6035': attribute type 1 has an invalid length. [ 508.740469][T21193] 8021q: adding VLAN 0 to HW filter on device bond2 [ 508.749617][T21193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6035'. [ 508.755805][T21193] macvlan3: entered promiscuous mode [ 508.757570][T21193] macvlan3: entered allmulticast mode [ 509.093812][ T5742] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 509.104163][ T5742] CPU: 1 UID: 0 PID: 5742 Comm: kworker/u34:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 509.104200][ T5742] Tainted: [L]=SOFTLOCKUP [ 509.104208][ T5742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 509.104222][ T5742] Workqueue: hci1 hci_rx_work [ 509.104254][ T5742] Call Trace: [ 509.104262][ T5742] [ 509.104272][ T5742] dump_stack_lvl+0x100/0x190 [ 509.104303][ T5742] sysfs_warn_dup.cold+0x1c/0x28 [ 509.104336][ T5742] sysfs_create_dir_ns+0x24b/0x2b0 [ 509.104368][ T5742] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 509.104397][ T5742] ? find_held_lock+0x2b/0x80 [ 509.104423][ T5742] ? kobject_add_internal+0x25f/0x930 [ 509.104443][ T5742] ? kobject_add_internal+0x25f/0x930 [ 509.104467][ T5742] ? do_raw_spin_unlock+0x145/0x1e0 [ 509.104491][ T5742] kobject_add_internal+0x2c8/0x930 [ 509.104516][ T5742] kobject_add+0x16a/0x1e0 [ 509.104536][ T5742] ? __pfx_kobject_add+0x10/0x10 [ 509.104554][ T5742] ? class_to_subsys+0x10f/0x150 [ 509.104582][ T5742] ? kobject_put+0xb9/0x640 [ 509.104598][ T5742] ? _raw_spin_unlock+0x28/0x50 [ 509.104629][ T5742] device_add+0x294/0x1970 [ 509.104660][ T5742] ? __pfx_dev_set_name+0x10/0x10 [ 509.104682][ T5742] ? __pfx_device_add+0x10/0x10 [ 509.104712][ T5742] ? mgmt_send_event_skb+0x2fb/0x460 [ 509.104746][ T5742] hci_conn_add_sysfs+0x1a3/0x260 [ 509.104776][ T5742] le_conn_complete_evt+0x11eb/0x1f60 [ 509.104809][ T5742] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 509.104832][ T5742] ? hci_event_packet+0x186/0xcd0 [ 509.104869][ T5742] hci_le_conn_complete_evt+0x23c/0x3a0 [ 509.104896][ T5742] ? skb_pull_data+0x15f/0x1e0 [ 509.104919][ T5742] hci_le_meta_evt+0x34a/0x5f0 [ 509.104947][ T5742] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 509.105006][ T5742] hci_event_packet+0x51c/0xcd0 [ 509.105147][ T5742] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 509.105190][ T5742] ? __pfx_hci_event_packet+0x10/0x10 [ 509.105220][ T5742] ? kcov_remote_start+0x384/0x670 [ 509.105250][ T5742] ? lockdep_hardirqs_on+0x78/0x100 [ 509.105282][ T5742] hci_rx_work+0x451/0xfc0 [ 509.105309][ T5742] process_one_work+0xa23/0x1940 [ 509.105348][ T5742] ? __pfx_process_one_work+0x10/0x10 [ 509.105382][ T5742] ? __pfx_hci_rx_work+0x10/0x10 [ 509.105406][ T5742] worker_thread+0x5ef/0xe50 [ 509.105442][ T5742] ? kthread+0x13a/0x450 [ 509.105468][ T5742] ? __pfx_worker_thread+0x10/0x10 [ 509.105493][ T5742] kthread+0x370/0x450 [ 509.105517][ T5742] ? __pfx_kthread+0x10/0x10 [ 509.105543][ T5742] ret_from_fork+0x72b/0xd50 [ 509.105570][ T5742] ? __pfx_ret_from_fork+0x10/0x10 [ 509.105593][ T5742] ? rcu_is_watching+0x12/0xc0 [ 509.105616][ T5742] ? __switch_to+0x800/0x10f0 [ 509.105647][ T5742] ? __pfx_kthread+0x10/0x10 [ 509.105675][ T5742] ret_from_fork_asm+0x1a/0x30 [ 509.105716][ T5742] [ 509.105785][ T5742] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 509.232753][ T5742] Bluetooth: hci1: failed to register connection device [ 509.329515][T21216] db_root: cannot be changed because it's in use [ 509.792828][T21226] nvmet: failed to open block device ./file0: (-2) [ 509.953316][ T42] audit: type=1800 audit(1786113546.700:733): pid=21233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6047" name="ipv4_address" dev="configfs" ino=94973 res=0 errno=0 [ 509.958101][T21233] o2cb: Local heartbeat has not been started. [ 509.960288][ T42] audit: type=1800 audit(1786113546.700:734): pid=21233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6047" name="ipv4_port" dev="configfs" ino=94974 res=0 errno=0 [ 509.962744][T21233] o2cb: Cluster check failed. Fix errors before retrying. [ 509.968851][ T42] audit: type=1800 audit(1786113546.700:735): pid=21233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6047" name="num" dev="configfs" ino=94975 res=0 errno=0 [ 509.971109][T21233] (syz.0.6047,21233,2):user_dlm_register:674 ERROR: status = -22 [ 509.971131][T21233] (syz.0.6047,21233,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 509.983833][ T42] audit: type=1800 audit(1786113546.700:736): pid=21233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6047" name="local" dev="configfs" ino=94976 res=0 errno=0 [ 510.083238][T21235] se_dev->se_dev_ptr already set for storage object [ 510.122030][ T5883] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 510.281751][ T5883] usb 7-1: Using ep0 maxpacket: 32 [ 510.285646][ T5883] usb 7-1: unable to get BOS descriptor or descriptor too short [ 510.289434][ T5883] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 510.292734][ T5883] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 510.295897][ T5883] usb 7-1: config 14 has no interface number 0 [ 510.298299][ T5883] usb 7-1: config 14 has no interface number 1 [ 510.300719][ T5883] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 510.305120][ T5883] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 510.309538][ T5883] usb 7-1: config 14 interface 57 has no altsetting 0 [ 510.312225][ T5883] usb 7-1: config 14 interface 228 has no altsetting 0 [ 510.316676][ T5883] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 510.320147][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.323420][ T5883] usb 7-1: Product: syz [ 510.325151][ T5883] usb 7-1: Manufacturer: syz [ 510.327049][ T5883] usb 7-1: SerialNumber: syz [ 510.740139][ T5883] legousbtower 7-1:14.57: interrupt endpoints not found [ 510.896784][ T50] usb 6-1: USB disconnect, device number 77 [ 510.928470][ T42] audit: type=1800 audit(1786113547.670:737): pid=21257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6058" name="device_path" dev="configfs" ino=96671 res=0 errno=0 [ 510.929587][T21257] nvmet: failed to open block device (null): (-22) [ 510.935766][T21256] syzkaller0: entered promiscuous mode [ 510.935789][T21256] syzkaller0: entered allmulticast mode [ 510.948395][T21257] nvmet_tcp: malformed ip/port passed: :4420 [ 510.949598][ T42] audit: type=1800 audit(1786113547.670:738): pid=21257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6058" name="enable" dev="configfs" ino=96672 res=0 errno=0 [ 510.953344][ T5883] legousbtower 7-1:14.228: interrupt endpoints not found [ 510.958192][ T42] audit: type=1800 audit(1786113547.690:739): pid=21257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6058" name="addr_trtype" dev="configfs" ino=96673 res=0 errno=0 [ 511.079048][T21266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6060'. [ 511.286113][T21281] overlayfs: overlapping lowerdir path [ 511.528409][T21290] syzkaller0: entered promiscuous mode [ 511.530877][T21290] syzkaller0: entered allmulticast mode [ 512.899952][ T10] usb 7-1: USB disconnect, device number 60 [ 512.963906][T21316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6078'. [ 513.868831][T21329] se_dev->se_dev_ptr already set for storage object [ 513.997522][ T42] audit: type=1800 audit(1786113550.740:740): pid=21341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6089" name="ipv4_address" dev="configfs" ino=97525 res=0 errno=0 [ 514.003348][T21341] o2cb: Local heartbeat has not been started. [ 514.014673][T21341] o2cb: Cluster check failed. Fix errors before retrying. [ 514.016180][ T42] audit: type=1800 audit(1786113550.740:741): pid=21341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6089" name="ipv4_port" dev="configfs" ino=97526 res=0 errno=0 [ 514.017483][T21341] (syz.1.6089,21341,1):user_dlm_register:674 ERROR: status = -22 [ 514.028525][T21341] (syz.1.6089,21341,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 514.034885][ T42] audit: type=1800 audit(1786113550.740:742): pid=21341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6089" name="num" dev="configfs" ino=97527 res=0 errno=0 [ 514.051297][ T42] audit: type=1800 audit(1786113550.740:743): pid=21341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6089" name="local" dev="configfs" ino=97528 res=0 errno=0 [ 514.148442][T21352] se_dev->se_dev_ptr already set for storage object [ 514.478689][T21370] nvmet_tcp: malformed ip/port passed: :4420 [ 514.543974][ T5742] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 514.549432][ T5742] CPU: 1 UID: 0 PID: 5742 Comm: kworker/u34:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.549454][ T5742] Tainted: [L]=SOFTLOCKUP [ 514.549459][ T5742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 514.549468][ T5742] Workqueue: hci3 hci_rx_work [ 514.549488][ T5742] Call Trace: [ 514.549493][ T5742] [ 514.549498][ T5742] dump_stack_lvl+0x100/0x190 [ 514.549515][ T5742] sysfs_warn_dup.cold+0x1c/0x28 [ 514.549535][ T5742] sysfs_create_dir_ns+0x24b/0x2b0 [ 514.549554][ T5742] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 514.549571][ T5742] ? find_held_lock+0x2b/0x80 [ 514.549588][ T5742] ? kobject_add_internal+0x25f/0x930 [ 514.549600][ T5742] ? kobject_add_internal+0x25f/0x930 [ 514.549613][ T5742] ? do_raw_spin_unlock+0x145/0x1e0 [ 514.549629][ T5742] kobject_add_internal+0x2c8/0x930 [ 514.549645][ T5742] kobject_add+0x16a/0x1e0 [ 514.549657][ T5742] ? __pfx_kobject_add+0x10/0x10 [ 514.549668][ T5742] ? class_to_subsys+0x10f/0x150 [ 514.549682][ T5742] ? kobject_put+0xb9/0x640 [ 514.549692][ T5742] ? _raw_spin_unlock+0x28/0x50 [ 514.549709][ T5742] device_add+0x294/0x1970 [ 514.549728][ T5742] ? __pfx_dev_set_name+0x10/0x10 [ 514.549741][ T5742] ? __pfx_device_add+0x10/0x10 [ 514.549759][ T5742] ? mgmt_send_event_skb+0x2fb/0x460 [ 514.549783][ T5742] hci_conn_add_sysfs+0x1a3/0x260 [ 514.549808][ T5742] le_conn_complete_evt+0x11eb/0x1f60 [ 514.549837][ T5742] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 514.549859][ T5742] ? hci_event_packet+0x186/0xcd0 [ 514.549880][ T5742] hci_le_conn_complete_evt+0x23c/0x3a0 [ 514.549895][ T5742] ? skb_pull_data+0x15f/0x1e0 [ 514.549908][ T5742] hci_le_meta_evt+0x34a/0x5f0 [ 514.549925][ T5742] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 514.549941][ T5742] hci_event_packet+0x51c/0xcd0 [ 514.549956][ T5742] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 514.549971][ T5742] ? __pfx_hci_event_packet+0x10/0x10 [ 514.549987][ T5742] ? kcov_remote_start+0x384/0x670 [ 514.550005][ T5742] ? lockdep_hardirqs_on+0x78/0x100 [ 514.550024][ T5742] hci_rx_work+0x451/0xfc0 [ 514.550040][ T5742] process_one_work+0xa23/0x1940 [ 514.550063][ T5742] ? __pfx_process_one_work+0x10/0x10 [ 514.550083][ T5742] ? __pfx_hci_rx_work+0x10/0x10 [ 514.550098][ T5742] worker_thread+0x5ef/0xe50 [ 514.550120][ T5742] ? kthread+0x13a/0x450 [ 514.550134][ T5742] ? __pfx_worker_thread+0x10/0x10 [ 514.550149][ T5742] kthread+0x370/0x450 [ 514.550163][ T5742] ? __pfx_kthread+0x10/0x10 [ 514.550178][ T5742] ret_from_fork+0x72b/0xd50 [ 514.550194][ T5742] ? __pfx_ret_from_fork+0x10/0x10 [ 514.550214][ T5742] ? rcu_is_watching+0x12/0xc0 [ 514.550229][ T5742] ? __switch_to+0x800/0x10f0 [ 514.550248][ T5742] ? __pfx_kthread+0x10/0x10 [ 514.550265][ T5742] ret_from_fork_asm+0x1a/0x30 [ 514.550291][ T5742] [ 514.550310][ T5742] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 514.654250][ T5742] Bluetooth: hci3: failed to register connection device [ 514.684356][T21379] se_dev->se_dev_ptr already set for storage object [ 514.817684][T21383] se_dev->se_dev_ptr already set for storage object [ 514.849983][T21385] kernel profiling enabled (shift: 9) [ 515.125289][T21398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6112'. [ 515.131924][ T50] usb 5-1: USB disconnect, device number 3 [ 515.337186][T21408] nvmet_tcp: malformed ip/port passed: :4420 [ 515.385277][T21410] se_dev->se_dev_ptr already set for storage object [ 516.118127][T21437] xs_local_setup_socket: unhandled error (91) connecting to /var/run/gssproxy.sock [ 516.258004][T21443] syzkaller0: entered promiscuous mode [ 516.260406][T21443] syzkaller0: entered allmulticast mode [ 516.270675][T21443] tipc: Started in network mode [ 516.272817][T21443] tipc: Node identity be01057310ad, cluster identity 4711 [ 516.275970][T21443] tipc: Enabled bearer , priority 0 [ 516.279788][T21442] tipc: Resetting bearer [ 516.300843][T21442] tipc: Disabling bearer [ 516.334595][T21445] nvmet_tcp: malformed ip/port passed: :4420 [ 516.387885][ T42] audit: type=1800 audit(1786113553.130:744): pid=21447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6133" name="ipv4_address" dev="configfs" ino=97777 res=0 errno=0 [ 516.400791][T21447] o2cb: Local heartbeat has not been started. [ 516.403362][ T42] audit: type=1800 audit(1786113553.140:745): pid=21447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6133" name="ipv4_port" dev="configfs" ino=97778 res=0 errno=0 [ 516.405781][T21447] o2cb: Cluster check failed. Fix errors before retrying. [ 516.417565][T21447] (syz.3.6133,21447,1):user_dlm_register:674 ERROR: status = -22 [ 516.420857][T21447] (syz.3.6133,21447,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 516.421580][ T42] audit: type=1800 audit(1786113553.140:746): pid=21447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6133" name="num" dev="configfs" ino=97779 res=0 errno=0 [ 516.444622][ T42] audit: type=1800 audit(1786113553.140:747): pid=21447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6133" name="local" dev="configfs" ino=97782 res=0 errno=0 [ 516.619371][T21465] syzkaller0: entered promiscuous mode [ 516.622883][T21465] syzkaller0: entered allmulticast mode [ 516.779462][T21471] syzkaller0: entered promiscuous mode [ 516.781313][T21471] syzkaller0: entered allmulticast mode [ 516.795634][T21471] tipc: Started in network mode [ 516.797290][T21471] tipc: Node identity 16fed7a3ec66, cluster identity 4711 [ 516.799781][T21471] tipc: Enabled bearer , priority 0 [ 516.803754][T21470] tipc: Resetting bearer [ 516.827822][T21470] tipc: Disabling bearer [ 517.034909][T21482] db_root: cannot be changed because it's in use [ 517.195001][T20802] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 517.750270][T21500] se_dev->se_dev_ptr already set for storage object [ 518.147796][T21525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.152907][T21525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.190505][T21526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6165'. [ 519.068653][ T5742] Bluetooth: hci3: link tx timeout [ 519.090054][ T5742] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 519.103884][ T5742] Bluetooth: hci3: link tx timeout [ 519.105915][ T5742] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 519.461523][ T42] audit: type=1800 audit(1786113556.200:748): pid=21545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6172" name="ipv4_address" dev="configfs" ino=98421 res=0 errno=0 [ 519.465161][T21545] o2cb: Local heartbeat has not been started. [ 519.470222][ T42] audit: type=1800 audit(1786113556.210:749): pid=21545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6172" name="ipv4_port" dev="configfs" ino=98422 res=0 errno=0 [ 519.471564][T21545] o2cb: Cluster check failed. Fix errors before retrying. [ 519.471585][T21545] (syz.2.6172,21545,2):user_dlm_register:674 ERROR: status = -22 [ 519.480531][ T42] audit: type=1800 audit(1786113556.210:750): pid=21545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6172" name="num" dev="configfs" ino=98423 res=0 errno=0 [ 519.482151][T21545] (syz.2.6172,21545,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 519.487677][ T42] audit: type=1800 audit(1786113556.210:751): pid=21545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6172" name="local" dev="configfs" ino=98424 res=0 errno=0 [ 519.545042][T21547] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6174'. [ 519.642409][ T10] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 519.821855][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 519.826557][ T10] usb 6-1: config 0 has an invalid interface number: 107 but max is 0 [ 519.830333][ T10] usb 6-1: config 0 has no interface number 0 [ 519.833214][ T10] usb 6-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 519.837902][ T10] usb 6-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 519.845945][ T10] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 519.849984][ T10] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 519.853938][ T10] usb 6-1: Product: syz [ 519.855747][ T10] usb 6-1: Manufacturer: syz [ 519.857730][ T10] usb 6-1: SerialNumber: syz [ 519.864062][ T10] usb 6-1: config 0 descriptor?? [ 519.868986][ T10] keyspan 6-1:0.107: Keyspan 4 port adapter converter detected [ 519.872579][ T10] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 81 [ 519.878520][ T10] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 1 [ 519.884281][ T10] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 519.889911][ T10] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 2 [ 519.896526][ T10] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 519.906147][ T10] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 4 [ 519.914866][ T10] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 519.921233][ T10] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 6 [ 519.932753][ T10] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 519.953070][T21555] syzkaller0: entered promiscuous mode [ 519.955471][T21555] syzkaller0: entered allmulticast mode [ 519.990257][T21555] tipc: Enabled bearer , priority 0 [ 520.001462][T21554] tipc: Resetting bearer [ 520.032486][T21554] tipc: Disabling bearer [ 520.073490][T21560] se_dev->se_dev_ptr already set for storage object [ 520.320086][T21567] db_root: cannot be changed because it's in use [ 520.728317][ T2322] usb 6-1: USB disconnect, device number 78 [ 520.742051][ T2322] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 520.752882][ T2322] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 520.757143][ T2322] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 520.763274][ T2322] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 520.772576][ T2322] keyspan 6-1:0.107: device disconnected [ 521.173862][ T5742] Bluetooth: hci3: command 0x0406 tx timeout [ 521.358578][T21583] se_dev->se_dev_ptr already set for storage object [ 521.737146][T20802] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 522.468064][ T42] audit: type=1800 audit(1786113559.210:752): pid=21611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6197" name="ipv4_address" dev="configfs" ino=97965 res=0 errno=0 [ 522.468852][T21611] o2cb: Local heartbeat has not been started. [ 522.475154][ T42] audit: type=1800 audit(1786113559.210:753): pid=21611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6197" name="ipv4_port" dev="configfs" ino=97966 res=0 errno=0 [ 522.477755][T21611] o2cb: Cluster check failed. Fix errors before retrying. [ 522.483532][ T42] audit: type=1800 audit(1786113559.210:754): pid=21611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6197" name="num" dev="configfs" ino=97967 res=0 errno=0 [ 522.486063][T21611] (syz.3.6197,21611,1):user_dlm_register:674 ERROR: status = -22 [ 522.492015][ T42] audit: type=1800 audit(1786113559.210:755): pid=21611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6197" name="local" dev="configfs" ino=97968 res=0 errno=0 [ 522.501748][T21611] (syz.3.6197,21611,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 522.505600][T21603] tipc: Enabling of bearer rejected, failed to enable media [ 522.612500][T21620] se_dev->se_dev_ptr already set for storage object [ 522.838976][T21629] db_root: cannot be changed because it's in use [ 522.896696][T21631] overlayfs: overlapping lowerdir path [ 523.155330][ T5742] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 523.598087][ T42] audit: type=1800 audit(1786113560.340:756): pid=21643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6208" name="ipv4_address" dev="configfs" ino=99428 res=0 errno=0 [ 523.607914][ T42] audit: type=1800 audit(1786113560.350:757): pid=21643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6208" name="ipv4_port" dev="configfs" ino=99429 res=0 errno=0 [ 523.610586][T21643] o2cb: Local heartbeat has not been started. [ 523.616154][ T42] audit: type=1800 audit(1786113560.350:758): pid=21643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6208" name="num" dev="configfs" ino=97986 res=0 errno=0 [ 523.616202][ T42] audit: type=1800 audit(1786113560.350:759): pid=21643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6208" name="local" dev="configfs" ino=97987 res=0 errno=0 [ 523.635922][T21643] o2cb: Cluster check failed. Fix errors before retrying. [ 523.638847][T21643] (syz.1.6208,21643,3):user_dlm_register:674 ERROR: status = -22 [ 523.641969][T21643] (syz.1.6208,21643,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 523.877701][T21649] tipc: Enabled bearer , priority 0 [ 523.883208][T21648] tipc: Disabling bearer [ 523.996736][T21655] se_dev->se_dev_ptr already set for storage object [ 524.320046][ T42] audit: type=1800 audit(1786113561.060:760): pid=21666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6217" name="ipv4_address" dev="configfs" ino=99444 res=0 errno=0 [ 524.326506][T21666] o2cb: Local heartbeat has not been started. [ 524.328586][ T42] audit: type=1800 audit(1786113561.070:761): pid=21666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6217" name="ipv4_port" dev="configfs" ino=98560 res=0 errno=0 [ 524.330225][T21666] o2cb: Cluster check failed. Fix errors before retrying. [ 524.330252][T21666] (syz.1.6217,21666,2):user_dlm_register:674 ERROR: status = -22 [ 524.342919][T21666] (syz.1.6217,21666,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 524.526416][T21674] tipc: Enabled bearer , priority 0 [ 524.531241][T21673] tipc: Disabling bearer [ 524.659760][T21678] se_dev->se_dev_ptr already set for storage object [ 525.074253][T21685] o2cb: Local heartbeat has not been started. [ 525.076939][T21685] o2cb: Cluster check failed. Fix errors before retrying. [ 525.080016][T21685] (syz.0.6226,21685,0):user_dlm_register:674 ERROR: status = -22 [ 525.085653][T21685] (syz.0.6226,21685,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 525.248065][T21689] db_root: cannot be changed because it's in use [ 525.509542][T21702] hub 1-0:1.0: USB hub found [ 525.515372][T21702] hub 1-0:1.0: 2 ports detected [ 525.765994][T21722] se_dev->se_dev_ptr already set for storage object [ 525.797019][T21726] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.6242' sets config #0 [ 525.801352][T21726] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.6242' sets config #1 [ 525.822336][T21729] se_dev->se_dev_ptr already set for storage object [ 526.126999][T21754] se_dev->se_dev_ptr already set for storage object [ 526.175655][T21759] se_dev->se_dev_ptr already set for storage object [ 526.222615][T21763] se_dev->se_dev_ptr already set for storage object [ 526.299220][T21773] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6260'. [ 527.150106][T21792] se_dev->se_dev_ptr already set for storage object [ 528.118170][T21831] tipc: Enabled bearer , priority 0 [ 528.136851][T21830] tipc: Disabling bearer [ 529.218549][T21847] se_dev->se_dev_ptr already set for storage object [ 529.653262][T18112] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 529.784200][T21869] se_dev->se_dev_ptr already set for storage object [ 529.787682][T21870] se_dev->se_dev_ptr already set for storage object [ 529.813667][T18112] usb 7-1: Using ep0 maxpacket: 32 [ 529.819656][T18112] usb 7-1: unable to get BOS descriptor or descriptor too short [ 529.827557][T18112] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 529.835504][T18112] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 529.841715][T18112] usb 7-1: config 14 has no interface number 0 [ 529.848735][T18112] usb 7-1: config 14 has no interface number 1 [ 529.856427][T18112] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 529.861079][T18112] usb 7-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 5, skipping [ 529.864841][T18112] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 529.868442][T18112] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 529.872686][T18112] usb 7-1: config 14 interface 57 has no altsetting 0 [ 529.876819][T18112] usb 7-1: config 14 interface 228 has no altsetting 0 [ 529.879437][T21878] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 529.882587][T18112] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 529.889587][T21878] CIFS: Attempting to mount //127.0.0.1/share [ 529.890943][T18112] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.890957][T18112] usb 7-1: Product: syz [ 529.890965][T18112] usb 7-1: Manufacturer: syz [ 529.890974][T18112] usb 7-1: SerialNumber: syz [ 530.219423][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 530.219436][ T42] audit: type=1800 audit(1786113566.960:768): pid=21886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6304" name="ipv4_address" dev="configfs" ino=99781 res=0 errno=0 [ 530.229240][ T42] audit: type=1800 audit(1786113566.980:769): pid=21886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6304" name="num" dev="configfs" ino=99782 res=0 errno=0 [ 530.236486][ T42] audit: type=1800 audit(1786113566.990:770): pid=21886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6304" name="local" dev="configfs" ino=99783 res=0 errno=0 [ 530.238548][T21886] o2cb: Local heartbeat has not been started. [ 530.245335][T21886] o2cb: Cluster check failed. Fix errors before retrying. [ 530.248187][T21886] (syz.0.6304,21886,1):user_dlm_register:674 ERROR: status = -22 [ 530.251208][T21886] (syz.0.6304,21886,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 530.312007][T18112] legousbtower 7-1:14.57: interrupt endpoints not found [ 530.532094][T18112] legousbtower 7-1:14.228: interrupt endpoints not found [ 530.711368][T21878] CIFS: VFS: cifs_mount failed w/return code = -512 [ 530.748153][T21898] se_dev->se_dev_ptr already set for storage object [ 530.839606][ T42] audit: type=1800 audit(1786113567.580:771): pid=21907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6313" name="ipv4_address" dev="configfs" ino=99275 res=0 errno=0 [ 530.847273][ T42] audit: type=1800 audit(1786113567.590:772): pid=21907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6313" name="ipv4_port" dev="configfs" ino=99276 res=0 errno=0 [ 530.856027][ T42] audit: type=1800 audit(1786113567.600:773): pid=21907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6313" name="num" dev="configfs" ino=99277 res=0 errno=0 [ 530.863045][ T42] audit: type=1800 audit(1786113567.610:774): pid=21907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6313" name="local" dev="configfs" ino=99278 res=0 errno=0 [ 530.870644][T21907] o2cb: Local heartbeat has not been started. [ 530.873986][T21907] o2cb: Cluster check failed. Fix errors before retrying. [ 530.876497][T21907] (syz.1.6313,21907,2):user_dlm_register:674 ERROR: status = -22 [ 530.878991][T21907] (syz.1.6313,21907,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 531.155382][T21924] se_dev->se_dev_ptr already set for storage object [ 531.158166][T20802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 531.164340][T20802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 531.174662][T20802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 531.177866][T20802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 531.180980][T20802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 531.290013][ T42] audit: type=1800 audit(1786113568.030:775): pid=21936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6322" name="ipv4_address" dev="configfs" ino=101574 res=0 errno=0 [ 531.290959][T21936] o2cb: Local heartbeat has not been started. [ 531.299635][T21936] o2cb: Cluster check failed. Fix errors before retrying. [ 531.302610][T21936] (syz.3.6322,21936,1):user_dlm_register:674 ERROR: status = -22 [ 531.304380][ T42] audit: type=1800 audit(1786113568.030:776): pid=21936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6322" name="ipv4_port" dev="configfs" ino=101575 res=0 errno=0 [ 531.305228][T21936] (syz.3.6322,21936,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 531.319823][ T42] audit: type=1800 audit(1786113568.030:777): pid=21936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6322" name="num" dev="configfs" ino=101576 res=0 errno=0 [ 531.603073][T21921] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.605417][T21921] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.607831][T21921] bridge_slave_0: entered allmulticast mode [ 531.610649][T21921] bridge_slave_0: entered promiscuous mode [ 531.614137][T21921] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.616599][T21921] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.619000][T21921] bridge_slave_1: entered allmulticast mode [ 531.621801][T21921] bridge_slave_1: entered promiscuous mode [ 531.643145][T21921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.647742][T21921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.663767][T21921] team0: Port device team_slave_0 added [ 531.667131][T21921] team0: Port device team_slave_1 added [ 531.681910][T21921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.684101][T21921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.692058][T21921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.696961][T21921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.699490][T21921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.707296][T21921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.732017][T21921] hsr_slave_0: entered promiscuous mode [ 531.734537][T21921] hsr_slave_1: entered promiscuous mode [ 531.736781][T21921] debugfs: 'hsr0' already exists in 'hsr' [ 531.738789][T21921] Cannot create hsr debugfs directory [ 531.862651][T21921] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.958177][T21921] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.022528][T21921] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.114926][T21921] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.228258][T21964] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.231381][T21964] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.288434][T21964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.294332][T21964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.331231][T21969] se_dev->se_dev_ptr already set for storage object [ 532.472015][T11661] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.477050][T11661] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.477354][T18112] usb 7-1: USB disconnect, device number 61 [ 532.492314][T11661] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.495242][T11661] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.633578][T21921] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 532.639794][T21921] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 532.644495][T21921] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 532.650391][T21921] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 532.654100][T21921] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 532.658395][T21921] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 532.661315][T21921] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 532.665559][T21921] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 532.713480][T21921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.723587][T21921] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.730128][ T109] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.732361][ T109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.758597][ T109] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.761086][ T109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.784320][T21997] se_dev->se_dev_ptr already set for storage object [ 532.793802][T21996] o2cb: Local heartbeat has not been started. [ 532.796294][T21996] o2cb: Cluster check failed. Fix errors before retrying. [ 532.799902][T21996] (syz.3.6335,21996,3):user_dlm_register:674 ERROR: status = -22 [ 532.810647][T21996] (syz.3.6335,21996,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 533.000367][T22018] netlink: 212 bytes leftover after parsing attributes in process `syz.1.6341'. [ 533.066355][T21921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.107066][T21921] veth0_vlan: entered promiscuous mode [ 533.114346][T22025] binder: BINDER_SET_CONTEXT_MGR already set [ 533.114945][T21921] veth1_vlan: entered promiscuous mode [ 533.116328][T22025] binder: 22024:22025 ioctl 4018620d 80004a80 returned -16 [ 533.141956][T21921] veth0_macvtap: entered promiscuous mode [ 533.152176][T21921] veth1_macvtap: entered promiscuous mode [ 533.164203][T21921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.180139][T21921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.252557][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.263276][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.263657][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.268965][ T5742] Bluetooth: hci2: command tx timeout [ 533.285536][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.314403][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.317396][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.324163][T19294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.330660][T19294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.487898][T22046] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6351'. [ 533.537199][T22048] syzkaller0: entered promiscuous mode [ 533.538967][T22048] syzkaller0: entered allmulticast mode [ 533.543168][T22048] tipc: Enabled bearer , priority 0 [ 533.546231][T22047] tipc: Resetting bearer [ 533.547339][T22050] binder: BINDER_SET_CONTEXT_MGR already set [ 533.552668][T22050] binder: 22049:22050 ioctl 4018620d 80004a80 returned -16 [ 533.565174][T22047] tipc: Disabling bearer [ 533.578050][T22051] overlayfs: overlapping lowerdir path [ 533.605659][T22053] se_dev->se_dev_ptr already set for storage object [ 534.490280][T22078] se_dev->se_dev_ptr already set for storage object [ 534.521373][T22080] binder: 22079:22080 ioctl c0306201 0 returned -14 [ 534.988635][T22083] se_dev->se_dev_ptr already set for storage object [ 535.332269][ T5742] Bluetooth: hci2: command tx timeout [ 536.077462][T22096] db_root: cannot be changed because it's in use [ 536.427048][T22104] se_dev->se_dev_ptr already set for storage object [ 536.453423][T22105] overlayfs: overlapping lowerdir path [ 536.518911][T22109] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 536.748506][T22122] db_root: cannot be changed because it's in use [ 537.268985][T22145] se_dev->se_dev_ptr already set for storage object [ 537.276173][T22147] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 537.422567][ T5742] Bluetooth: hci2: command tx timeout [ 537.435707][T22157] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6388'. [ 537.440917][T22157] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6388'. [ 537.626628][T22171] se_dev->se_dev_ptr already set for storage object [ 537.669825][T22173] binder: 22172:22173 ioctl c0306201 0 returned -14 [ 537.767160][T22180] bridge0: port 4(macvlan4) entered blocking state [ 537.769549][T22180] bridge0: port 4(macvlan4) entered disabled state [ 537.772233][T22180] macvlan4: entered allmulticast mode [ 537.774043][T22180] ip6gretap0: entered allmulticast mode [ 537.778293][T22180] macvlan4: entered promiscuous mode [ 537.783158][T22180] bridge0: port 4(macvlan4) entered blocking state [ 537.785336][T22180] bridge0: port 4(macvlan4) entered forwarding state [ 537.807116][T22182] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.6397' sets config #0 [ 537.828095][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 537.828112][ T42] audit: type=1800 audit(1786113574.570:783): pid=22184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6398" name="ipv4_address" dev="configfs" ino=100192 res=0 errno=0 [ 537.832592][T22184] o2cb: Local heartbeat has not been started. [ 537.837253][ T42] audit: type=1800 audit(1786113574.570:784): pid=22184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6398" name="ipv4_port" dev="configfs" ino=100193 res=0 errno=0 [ 537.839713][T22184] o2cb: Cluster check failed. Fix errors before retrying. [ 537.846482][ T42] audit: type=1800 audit(1786113574.570:785): pid=22184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6398" name="num" dev="configfs" ino=100194 res=0 errno=0 [ 537.846506][ T42] audit: type=1800 audit(1786113574.570:786): pid=22184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6398" name="local" dev="configfs" ino=100195 res=0 errno=0 [ 537.863726][T22184] (syz.3.6398,22184,0):user_dlm_register:674 ERROR: status = -22 [ 537.866956][T22184] (syz.3.6398,22184,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 537.980742][T22191] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6401'. [ 538.112953][T22195] se_dev->se_dev_ptr already set for storage object [ 538.592431][T22213] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6410'. [ 538.682436][T22220] se_dev->se_dev_ptr already set for storage object [ 539.090609][T22229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.094675][T22229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.164879][T22232] overlayfs: overlapping lowerdir path [ 539.501673][ T5742] Bluetooth: hci2: command tx timeout [ 539.749288][T22242] se_dev->se_dev_ptr already set for storage object [ 539.789500][T22245] ip6erspan0: entered allmulticast mode [ 540.081733][ T5883] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 540.095351][T22257] syzkaller0: entered promiscuous mode [ 540.097158][T22257] syzkaller0: entered allmulticast mode [ 540.101102][T22257] tipc: Started in network mode [ 540.103592][T22257] tipc: Node identity aa8c69e6a6d6, cluster identity 4711 [ 540.106239][T22257] tipc: Enabled bearer , priority 0 [ 540.110154][T22255] tipc: Resetting bearer [ 540.132222][T22255] tipc: Disabling bearer [ 540.261795][ T5883] usb 7-1: Using ep0 maxpacket: 16 [ 540.275331][ T5883] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 540.291698][ T5883] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 540.299786][ T5883] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 540.305690][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.321746][ T5883] usb 7-1: Product: syz [ 540.323099][ T5883] usb 7-1: Manufacturer: syz [ 540.325157][ T5883] usb 7-1: SerialNumber: syz [ 540.335125][ T5883] usb 7-1: 0:2 : does not exist [ 540.482245][ T2322] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 540.554294][ T5883] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 540.593191][ T5883] usb 7-1: USB disconnect, device number 62 [ 540.622600][T11310] udevd[11310]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 540.634387][ T2322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.643029][ T2322] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 540.648161][ T2322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.655207][ T2322] usb 6-1: config 0 descriptor?? [ 540.873451][ T2322] usbhid 6-1:0.0: can't add hid device: -71 [ 540.876261][ T2322] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 540.883553][ T2322] usb 6-1: USB disconnect, device number 79 [ 541.283287][T22298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.286946][T22298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.311766][ T2322] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 541.374061][T22302] se_dev->se_dev_ptr already set for storage object [ 541.473669][ T2322] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 541.477771][ T2322] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 541.481421][ T2322] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 541.489037][ T2322] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 541.495297][ T2322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.500040][ T2322] usb 6-1: Product: syz [ 541.502262][ T2322] usb 6-1: Manufacturer: syz [ 541.504471][ T2322] usb 6-1: SerialNumber: syz [ 541.811831][ T2322] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 541.923982][T11798] usb 6-1: USB disconnect, device number 80 [ 541.972974][ T2322] usb 7-1: Using ep0 maxpacket: 32 [ 541.977031][ T2322] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.981052][ T2322] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.987499][ T2322] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 541.991190][ T2322] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.995129][ T13] bridge_slave_1: left allmulticast mode [ 541.997570][ T13] bridge_slave_1: left promiscuous mode [ 541.997649][ T2322] usb 7-1: config 0 descriptor?? [ 542.000065][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.008088][ T13] bridge_slave_0: left allmulticast mode [ 542.010339][ T13] bridge_slave_0: left promiscuous mode [ 542.014541][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.029027][T22316] db_root: cannot be changed because it's in use [ 542.157966][ T13] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 542.259563][ T13] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 542.335071][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.341357][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.349127][ T13] bond0 (unregistering): Released all slaves [ 542.358456][ T13] bond1 (unregistering): Released all slaves [ 542.371737][ T13] bond2 (unregistering): Released all slaves [ 542.389593][ T13] team0: Port device macvlan2 removed [ 542.400376][ T13] bond3 (unregistering): Released all slaves [ 542.415371][ T13] team0: Port device macvlan3 removed [ 542.440626][ T13] bond4 (unregistering): Released all slaves [ 542.458611][ T2322] savu 0003:1E7D:2D5A.0016: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 542.476464][ T13] bond5 (unregistering): Released all slaves [ 542.500717][ T13] team0: Port device macvlan4 removed [ 542.512247][ T13] bond6 (unregistering): Released all slaves [ 542.523444][T22328] se_dev->se_dev_ptr already set for storage object [ 542.525459][ T13] bond7 (unregistering): Released all slaves [ 542.543870][ T13] bond8 (unregistering): Released all slaves [ 542.557654][ T13] bond9 (unregistering): Released all slaves [ 542.584682][ T13] team0: Port device macvlan5 removed [ 542.598381][ T13] bond10 (unregistering): Released all slaves [ 542.612094][ T13] bond11 (unregistering): Released all slaves [ 542.689619][ T41] usb 7-1: USB disconnect, device number 63 [ 542.808855][ T13] tipc: Left network mode [ 542.847309][T22335] binder_alloc: 22334: binder_alloc_buf, no vma [ 542.979617][ T42] audit: type=1800 audit(1786113579.720:787): pid=22341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6463" name="ipv4_address" dev="configfs" ino=104510 res=0 errno=0 [ 542.991819][ T42] audit: type=1800 audit(1786113579.720:788): pid=22341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6463" name="ipv4_port" dev="configfs" ino=104511 res=0 errno=0 [ 542.999917][T22341] o2cb: Local heartbeat has not been started. [ 543.002112][ T42] audit: type=1800 audit(1786113579.720:789): pid=22341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6463" name="num" dev="configfs" ino=104512 res=0 errno=0 [ 543.009575][T22341] o2cb: Cluster check failed. Fix errors before retrying. [ 543.017642][T22341] (syz.0.6463,22341,0):user_dlm_register:674 ERROR: status = -22 [ 543.020331][T22341] (syz.0.6463,22341,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 543.145769][ T13] hsr_slave_0: left promiscuous mode [ 543.149087][ T13] hsr_slave_1: left promiscuous mode [ 543.160111][ T13] veth1_macvtap: left promiscuous mode [ 543.162842][ T13] veth0_macvtap: left promiscuous mode [ 543.165328][ T13] veth1_vlan: left promiscuous mode [ 543.167600][ T13] veth0_vlan: left promiscuous mode [ 543.492870][ T13] team0 (unregistering): Port device team_slave_1 removed [ 543.550490][T22352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6466'. [ 544.010197][T22364] se_dev->se_dev_ptr already set for storage object [ 544.026013][T22366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6473'. [ 544.119411][T22370] nvmet: failed to open block device ./file0: (-2) [ 544.459420][ T24] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 544.491510][ T24] hid-generic 0000:0000:0000.0017: hidraw1: HID v0.00 Device [syz1] on syz0 [ 544.576407][T22388] se_dev->se_dev_ptr already set for storage object [ 545.030336][ T42] audit: type=1800 audit(1786113581.770:790): pid=22413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6490" name="ipv4_address" dev="configfs" ino=103891 res=0 errno=0 [ 545.045463][ T42] audit: type=1800 audit(1786113581.790:791): pid=22413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6490" name="ipv4_port" dev="configfs" ino=103892 res=0 errno=0 [ 545.056010][T22413] o2cb: Local heartbeat has not been started. [ 545.058335][ T42] audit: type=1800 audit(1786113581.790:792): pid=22413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6490" name="num" dev="configfs" ino=103893 res=0 errno=0 [ 545.065001][T22413] o2cb: Cluster check failed. Fix errors before retrying. [ 545.067591][T22413] (syz.0.6490,22413,3):user_dlm_register:674 ERROR: status = -22 [ 545.070135][T22413] (syz.0.6490,22413,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 545.073627][ T42] audit: type=1800 audit(1786113581.800:793): pid=22413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6490" name="local" dev="configfs" ino=103894 res=0 errno=0 [ 545.158743][T22423] nvmet: failed to open block device ./file0: (-2) [ 545.218529][T22428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6494'. [ 545.232052][T22428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6494'. [ 545.423071][T22437] tipc: Enabling of bearer rejected, failed to enable media [ 545.756019][T22463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.759285][ T42] audit: type=1800 audit(1786113582.500:794): pid=22464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6501" name="ipv4_address" dev="configfs" ino=103224 res=0 errno=0 [ 545.760014][T22463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.769101][ T42] audit: type=1800 audit(1786113582.510:795): pid=22464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6501" name="ipv4_port" dev="configfs" ino=103225 res=0 errno=0 [ 545.776595][ T42] audit: type=1800 audit(1786113582.510:796): pid=22464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6501" name="num" dev="configfs" ino=103226 res=0 errno=0 [ 545.789065][T22464] o2cb: Local heartbeat has not been started. [ 545.792294][T22464] o2cb: Cluster check failed. Fix errors before retrying. [ 545.795270][T22464] (syz.2.6501,22464,2):user_dlm_register:674 ERROR: status = -22 [ 545.798629][T22464] (syz.2.6501,22464,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 546.059839][T22472] se_dev->se_dev_ptr already set for storage object [ 546.108137][T22475] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6506'. [ 546.189670][T22479] se_dev->se_dev_ptr already set for storage object [ 546.238431][T22483] o2cb: Local heartbeat has not been started. [ 546.241049][T22483] o2cb: Cluster check failed. Fix errors before retrying. [ 546.243982][T22483] (syz.2.6510,22483,2):user_dlm_register:674 ERROR: status = -22 [ 546.247136][T22483] (syz.2.6510,22483,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 546.329390][T22489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6513'. [ 546.332508][T22489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6513'. [ 546.374697][T22492] se_dev->se_dev_ptr already set for storage object [ 546.502563][T22500] batman_adv: batadv0: Adding interface: veth0 [ 546.505139][T22500] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.515217][T22500] batman_adv: batadv0: Interface activated: veth0 [ 546.524414][T22500] batman_adv: batadv0: Interface deactivated: veth0 [ 546.534903][T22500] batman_adv: batadv0: Removing interface: veth0 [ 546.575955][T22502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.578613][T22502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.581935][T22502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.584379][T22502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.954212][T22511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6522'. [ 546.958015][T22511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6522'. [ 547.003517][T22513] se_dev->se_dev_ptr already set for storage object [ 547.239377][T22533] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6533'. [ 547.364260][ T5742] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 547.370744][ T5742] CPU: 3 UID: 0 PID: 5742 Comm: kworker/u34:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 547.370778][ T5742] Tainted: [L]=SOFTLOCKUP [ 547.370786][ T5742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 547.370800][ T5742] Workqueue: hci2 hci_rx_work [ 547.370832][ T5742] Call Trace: [ 547.370841][ T5742] [ 547.370851][ T5742] dump_stack_lvl+0x100/0x190 [ 547.370883][ T5742] sysfs_warn_dup.cold+0x1c/0x28 [ 547.370916][ T5742] sysfs_create_dir_ns+0x24b/0x2b0 [ 547.370949][ T5742] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 547.370977][ T5742] ? find_held_lock+0x2b/0x80 [ 547.371002][ T5742] ? kobject_add_internal+0x25f/0x930 [ 547.371022][ T5742] ? kobject_add_internal+0x25f/0x930 [ 547.371044][ T5742] ? do_raw_spin_unlock+0x145/0x1e0 [ 547.371068][ T5742] kobject_add_internal+0x2c8/0x930 [ 547.371093][ T5742] kobject_add+0x16a/0x1e0 [ 547.371113][ T5742] ? __pfx_kobject_add+0x10/0x10 [ 547.371138][ T5742] ? class_to_subsys+0x10f/0x150 [ 547.371167][ T5742] ? kobject_put+0xb9/0x640 [ 547.371184][ T5742] ? _raw_spin_unlock+0x28/0x50 [ 547.371214][ T5742] device_add+0x294/0x1970 [ 547.371247][ T5742] ? __pfx_dev_set_name+0x10/0x10 [ 547.371268][ T5742] ? __pfx_device_add+0x10/0x10 [ 547.371298][ T5742] ? mgmt_send_event_skb+0x2fb/0x460 [ 547.371331][ T5742] hci_conn_add_sysfs+0x1a3/0x260 [ 547.371361][ T5742] le_conn_complete_evt+0x11eb/0x1f60 [ 547.371394][ T5742] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 547.371418][ T5742] ? hci_event_packet+0x186/0xcd0 [ 547.371446][ T5742] hci_le_conn_complete_evt+0x23c/0x3a0 [ 547.371472][ T5742] ? skb_pull_data+0x15f/0x1e0 [ 547.371496][ T5742] hci_le_meta_evt+0x34a/0x5f0 [ 547.371523][ T5742] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 547.371549][ T5742] hci_event_packet+0x51c/0xcd0 [ 547.371573][ T5742] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 547.371596][ T5742] ? __pfx_hci_event_packet+0x10/0x10 [ 547.371640][ T5742] ? kcov_remote_start+0x384/0x670 [ 547.371667][ T5742] ? lockdep_hardirqs_on+0x78/0x100 [ 547.371701][ T5742] hci_rx_work+0x451/0xfc0 [ 547.371730][ T5742] process_one_work+0xa23/0x1940 [ 547.371767][ T5742] ? __pfx_process_one_work+0x10/0x10 [ 547.371801][ T5742] ? __pfx_hci_rx_work+0x10/0x10 [ 547.371827][ T5742] worker_thread+0x5ef/0xe50 [ 547.371861][ T5742] ? kthread+0x13a/0x450 [ 547.371882][ T5742] ? __pfx_worker_thread+0x10/0x10 [ 547.371902][ T5742] kthread+0x370/0x450 [ 547.371923][ T5742] ? __pfx_kthread+0x10/0x10 [ 547.371969][ T5742] ret_from_fork+0x72b/0xd50 [ 547.371997][ T5742] ? __pfx_ret_from_fork+0x10/0x10 [ 547.372018][ T5742] ? rcu_is_watching+0x12/0xc0 [ 547.372042][ T5742] ? __switch_to+0x800/0x10f0 [ 547.372069][ T5742] ? __pfx_kthread+0x10/0x10 [ 547.372093][ T5742] ret_from_fork_asm+0x1a/0x30 [ 547.372131][ T5742] [ 547.493353][T22543] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 547.502130][ T5742] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 547.507776][ T5742] Bluetooth: hci2: failed to register connection device [ 547.569520][T22545] se_dev->se_dev_ptr already set for storage object [ 548.555509][T20802] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 548.913738][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 548.913755][ T42] audit: type=1800 audit(1786113585.660:802): pid=22599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6559" name="ipv4_address" dev="configfs" ino=104109 res=0 errno=0 [ 548.924335][ T42] audit: type=1800 audit(1786113585.670:803): pid=22599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6559" name="ipv4_port" dev="configfs" ino=104736 res=0 errno=0 [ 548.934774][ T42] audit: type=1800 audit(1786113585.670:804): pid=22599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6559" name="num" dev="configfs" ino=104737 res=0 errno=0 [ 548.943410][ T42] audit: type=1800 audit(1786113585.670:805): pid=22599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6559" name="local" dev="configfs" ino=105624 res=0 errno=0 [ 549.369227][T22612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.374640][T22612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.975628][ T42] audit: type=1800 audit(1786113586.720:806): pid=22620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6568" name="ipv4_address" dev="configfs" ino=105642 res=0 errno=0 [ 549.985410][ T42] audit: type=1800 audit(1786113586.730:807): pid=22620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6568" name="ipv4_port" dev="configfs" ino=105643 res=0 errno=0 [ 549.994197][ T42] audit: type=1800 audit(1786113586.740:808): pid=22620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6568" name="num" dev="configfs" ino=105644 res=0 errno=0 [ 550.004002][ T42] audit: type=1800 audit(1786113586.740:809): pid=22620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6568" name="local" dev="configfs" ino=105645 res=0 errno=0 [ 550.051183][T22624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6569'. [ 550.254986][ T5742] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 550.568169][T22647] netlink: 'syz.2.6579': attribute type 1 has an invalid length. [ 550.587470][T22647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6579'. [ 550.592467][T22647] 8021q: adding VLAN 0 to HW filter on device bond6 [ 550.602166][T22647] 8021q: adding VLAN 0 to HW filter on device bond6 [ 550.607146][T22647] bond6: (slave geneve2): making interface the new active one [ 550.610907][T22647] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 550.621761][ T41] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 550.661893][ T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 550.665001][ T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 550.667858][ T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 550.670600][ T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 550.771749][ T41] usb 6-1: Using ep0 maxpacket: 32 [ 550.776601][ T41] usb 6-1: unable to get BOS descriptor or descriptor too short [ 550.783806][ T41] usb 6-1: config 14 has an invalid interface number: 228 but max is 0 [ 550.790349][ T41] usb 6-1: config 14 has no interface number 0 [ 550.792726][ T41] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 550.796377][ T41] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 550.800061][ T41] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 550.803832][ T41] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 550.807584][ T41] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 550.811897][ T41] usb 6-1: config 14 interface 228 has no altsetting 0 [ 550.815954][ T41] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 550.819281][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.822146][ T41] usb 6-1: Product: syz [ 550.823501][ T41] usb 6-1: Manufacturer: syz [ 550.825033][ T41] usb 6-1: SerialNumber: syz [ 551.110646][T22671] se_dev->se_dev_ptr already set for storage object [ 551.237353][ T41] legousbtower 6-1:14.228: interrupt endpoints not found [ 552.718299][T22684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.723312][T22684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.820991][T20802] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 553.286911][T22695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6595'. [ 553.549759][ T41] usb 6-1: USB disconnect, device number 81 [ 555.571777][ T5742] Bluetooth: hci2: command tx timeout [ 555.761277][T22732] syzkaller0: entered promiscuous mode [ 555.763555][T22732] syzkaller0: entered allmulticast mode [ 555.767884][T22732] tipc: Enabled bearer , priority 0 [ 555.773767][T22730] tipc: Resetting bearer [ 555.791392][T22730] tipc: Disabling bearer [ 555.797808][T22736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.801203][T22736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.819421][ T42] audit: type=1800 audit(1786113592.560:810): pid=22738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6608" name="ipv4_address" dev="configfs" ino=106689 res=0 errno=0 [ 555.829791][ T42] audit: type=1800 audit(1786113592.560:811): pid=22738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6608" name="ipv4_port" dev="configfs" ino=106690 res=0 errno=0 [ 555.838886][ T42] audit: type=1800 audit(1786113592.560:812): pid=22738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6608" name="num" dev="configfs" ino=106691 res=0 errno=0 [ 555.859806][ T42] audit: type=1800 audit(1786113592.560:813): pid=22738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6608" name="local" dev="configfs" ino=106692 res=0 errno=0 [ 556.402580][ T42] audit: type=1800 audit(1786113593.140:814): pid=22767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6618" name="ipv4_address" dev="configfs" ino=104829 res=0 errno=0 [ 556.413383][ T42] audit: type=1800 audit(1786113593.150:815): pid=22767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6618" name="ipv4_port" dev="configfs" ino=104830 res=0 errno=0 [ 556.423986][ T42] audit: type=1800 audit(1786113593.170:816): pid=22767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6618" name="num" dev="configfs" ino=104831 res=0 errno=0 [ 556.432635][ T42] audit: type=1800 audit(1786113593.180:817): pid=22767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6618" name="local" dev="configfs" ino=105744 res=0 errno=0 [ 558.185162][T22798] tipc: Enabling of bearer rejected, failed to enable media [ 558.286815][T22803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6627'. [ 558.490372][T22831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6639'. [ 558.547551][T22833] syzkaller0: entered promiscuous mode [ 558.549336][T22833] syzkaller0: entered allmulticast mode [ 558.553565][T22833] tipc: Enabled bearer , priority 0 [ 558.557030][T22832] tipc: Resetting bearer [ 558.570452][T22832] tipc: Disabling bearer [ 558.660826][T22840] se_dev->se_dev_ptr already set for storage object [ 558.925722][T22859] loop1: detected capacity change from 0 to 8065 [ 558.965389][T22861] syzkaller0: entered promiscuous mode [ 558.967173][T22861] syzkaller0: entered allmulticast mode [ 558.971144][T22861] tipc: Enabled bearer , priority 0 [ 558.975851][T22860] tipc: Resetting bearer [ 558.996710][T22860] tipc: Disabling bearer [ 559.026461][T22859] block device autoloading is deprecated and will be removed. [ 559.029161][T22859] md: loop0 has zero or unknown size, marking faulty! [ 559.102676][T22867] se_dev->se_dev_ptr already set for storage object [ 559.213201][T22878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.218405][T22878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.263697][T22881] syzkaller0: entered promiscuous mode [ 559.265540][T22881] syzkaller0: entered allmulticast mode [ 559.271002][T22881] tipc: Enabled bearer , priority 0 [ 559.276579][T22880] tipc: Resetting bearer [ 559.302597][T22880] tipc: Disabling bearer [ 559.331474][T22887] se_dev->se_dev_ptr already set for storage object [ 560.001760][ T5742] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 560.467848][T20802] Bluetooth: hci2: command tx timeout [ 560.759570][T22941] fuse: Bad value for 'fd' [ 560.832376][T22943] se_dev->se_dev_ptr already set for storage object [ 560.878155][T22949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.881062][T22949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.465648][T22960] overlayfs: missing 'lowerdir' [ 561.505528][T22962] fuse: Bad value for 'fd' [ 561.562847][T22966] se_dev->se_dev_ptr already set for storage object [ 561.583897][T20802] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 561.825328][T22987] db_root: cannot be changed because it's in use [ 561.968193][T22990] overlayfs: missing 'lowerdir' [ 562.054692][ T42] audit: type=1800 audit(1786113598.800:818): pid=22994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6704" name="bDeviceClass" dev="configfs" ino=105963 res=0 errno=0 [ 562.096608][T22996] se_dev->se_dev_ptr already set for storage object [ 562.471532][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.473696][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.076112][T23007] se_dev->se_dev_ptr already set for storage object [ 563.699356][T23016] syzkaller0: entered promiscuous mode [ 563.702900][T23016] syzkaller0: entered allmulticast mode [ 563.708153][T23016] tipc: Enabled bearer , priority 0 [ 563.714103][T23015] tipc: Resetting bearer [ 563.736806][T23015] tipc: Disabling bearer [ 563.838865][ T5742] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 563.920699][T23026] binder: 23025:23026 ioctl 4018620d 0 returned -22 [ 564.575526][T23031] se_dev->se_dev_ptr already set for storage object [ 564.619945][T23033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6720'. [ 564.802662][T23044] se_dev->se_dev_ptr already set for storage object [ 564.846292][T23049] se_dev->se_dev_ptr already set for storage object [ 564.907086][T23060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.910738][T23060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.935901][ T5742] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 564.953795][T23063] binder: 23062:23063 ioctl 4018620d 0 returned -22 [ 565.464996][T23066] [ 565.465859][T23066] ====================================================== [ 565.468306][T23066] WARNING: possible circular locking dependency detected [ 565.470506][T23066] syzkaller #0 Tainted: G L [ 565.472915][T23066] ------------------------------------------------------ [ 565.475363][T23066] syz.0.6735/23066 is trying to acquire lock: [ 565.477103][T23066] ffffffff901cc4e8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650 [ 565.480327][T23066] [ 565.480327][T23066] but task is already holding lock: [ 565.482447][T23066] ffff8880132e8ac0 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 565.485480][T23066] [ 565.485480][T23066] which lock already depends on the new lock. [ 565.485480][T23066] [ 565.488444][T23066] [ 565.488444][T23066] the existing dependency chain (in reverse order) is: [ 565.491059][T23066] [ 565.491059][T23066] -> #2 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 565.493677][T23066] lock_acquire+0x1b9/0x370 [ 565.495221][T23066] down_write+0x8b/0x1f0 [ 565.496679][T23066] configfs_depend_item_unlocked+0xf3/0x6a0 [ 565.498586][T23066] usbg_make_tpg+0x261/0x620 [ 565.500099][T23066] target_fabric_make_tpg+0xab/0x8c0 [ 565.501958][T23066] configfs_mkdir+0x51e/0xb70 [ 565.503723][T23066] vfs_mkdir+0x361/0x850 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 565.505169][T23066] filename_mkdirat+0x48b/0x5e0 [ 565.506960][T23066] __ia32_sys_mkdir+0x6a/0x90 [ 565.508468][T23066] __do_fast_syscall_32+0xe7/0x970 [ 565.510165][T23066] do_fast_syscall_32+0x32/0x70 [ 565.511811][T23066] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 565.513999][T23066] [ 565.513999][T23066] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 565.516442][T23066] lock_acquire+0x1b9/0x370 [ 565.517985][T23066] __mutex_lock+0x1a4/0x1bd0 [ 565.519556][T23066] tcm_set_name+0x29/0xb0 [ 565.521006][T23066] function_make+0x21c/0x3f0 [ 565.522575][T23066] configfs_mkdir+0x51e/0xb70 [ 565.524148][T23066] vfs_mkdir+0x361/0x850 [ 565.525581][T23066] filename_mkdirat+0x48b/0x5e0 [ 565.527177][T23066] __ia32_sys_mkdir+0x6a/0x90 [ 565.528756][T23066] __do_fast_syscall_32+0xe7/0x970 [ 565.530408][T23066] do_fast_syscall_32+0x32/0x70 [ 565.532052][T23066] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 565.534079][T23066] [ 565.534079][T23066] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 565.536583][T23066] check_prev_add+0xeb/0xe60 [ 565.538096][T23066] __lock_acquire+0x136c/0x1a40 [ 565.539718][T23066] lock_acquire+0x1b9/0x370 [ 565.541192][T23066] __mutex_lock+0x1a4/0x1bd0 [ 565.542776][T23066] uvcg_streaming_header_allow_link+0x7c/0x650 [ 565.544758][T23066] configfs_symlink+0x540/0x11f0 [ 565.546394][T23066] vfs_symlink+0x178/0x4d0 [ 565.547835][T23066] filename_symlinkat+0x2a6/0x560 [ 565.549468][T23066] __ia32_sys_symlinkat+0x9b/0xe0 [ 565.551136][T23066] __do_fast_syscall_32+0xe7/0x970 [ 565.552889][T23066] do_fast_syscall_32+0x32/0x70 [ 565.554531][T23066] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 565.556536][T23066] [ 565.556536][T23066] other info that might help us debug this: [ 565.556536][T23066] [ 565.559441][T23066] Chain exists of: [ 565.559441][T23066] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#24 [ 565.559441][T23066] [ 565.563761][T23066] Possible unsafe locking scenario: [ 565.563761][T23066] [ 565.566016][T23066] CPU0 CPU1 [ 565.567636][T23066] ---- ---- [ 565.569193][T23066] lock(&sb->s_type->i_mutex_key#24); [ 565.570758][T23066] lock(&opts->dep_lock); [ 565.572841][T23066] lock(&sb->s_type->i_mutex_key#24); [ 565.575087][T23066] lock(gadget_subsys.su_mutex); [ 565.576590][T23066] [ 565.576590][T23066] *** DEADLOCK *** [ 565.576590][T23066] [ 565.578984][T23066] 2 locks held by syz.0.6735/23066: [ 565.580495][T23066] #0: ffff88802201a450 (sb_writers#12){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 565.583333][T23066] #1: ffff8880132e8ac0 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 565.586473][T23066] [ 565.586473][T23066] stack backtrace: [ 565.588226][T23066] CPU: 1 UID: 0 PID: 23066 Comm: syz.0.6735 Tainted: G L syzkaller #0 PREEMPT(full) [ 565.588243][T23066] Tainted: [L]=SOFTLOCKUP [ 565.588248][T23066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 565.588256][T23066] Call Trace: [ 565.588262][T23066] [ 565.588269][T23066] dump_stack_lvl+0x100/0x190 [ 565.588284][T23066] print_circular_bug.cold+0x178/0x1c7 [ 565.588305][T23066] check_noncircular+0x146/0x160 [ 565.588326][T23066] check_prev_add+0xeb/0xe60 [ 565.588344][T23066] ? try_to_unlazy+0x296/0x910 [ 565.588366][T23066] __lock_acquire+0x136c/0x1a40 [ 565.588384][T23066] ? __kasan_slab_free+0x5f/0x80 [ 565.588415][T23066] lock_acquire+0x1b9/0x370 [ 565.588433][T23066] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 565.588451][T23066] ? __pfx___might_resched+0x10/0x10 [ 565.588471][T23066] __mutex_lock+0x1a4/0x1bd0 [ 565.588487][T23066] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 565.588504][T23066] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 565.588520][T23066] ? __lock_acquire+0x49f/0x1a40 [ 565.588537][T23066] ? __pfx___mutex_lock+0x10/0x10 [ 565.588554][T23066] ? make_vfsuid+0xec/0x140 [ 565.588571][T23066] ? __pfx___might_resched+0x10/0x10 [ 565.588587][T23066] ? make_vfsgid+0xf1/0x140 [ 565.588605][T23066] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 565.588623][T23066] ? security_inode_permission+0xbf/0x250 [ 565.588663][T23066] uvcg_streaming_header_allow_link+0x7c/0x650 [ 565.588682][T23066] ? inode_permission+0x374/0x620 [ 565.588699][T23066] ? mntput_no_expire+0xe7/0x220 [ 565.588742][T23066] configfs_symlink+0x540/0x11f0 [ 565.588760][T23066] ? bpf_lsm_inode_permission+0x9/0x10 [ 565.588790][T23066] ? security_inode_permission+0xbf/0x250 [ 565.588803][T23066] ? __pfx_configfs_symlink+0x10/0x10 [ 565.588820][T23066] vfs_symlink+0x178/0x4d0 [ 565.588835][T23066] filename_symlinkat+0x2a6/0x560 [ 565.588851][T23066] ? __pfx_filename_symlinkat+0x10/0x10 [ 565.588868][T23066] ? strncpy_from_user+0x19d/0x2d0 [ 565.588896][T23066] ? do_getname+0x191/0x390 [ 565.588910][T23066] __ia32_sys_symlinkat+0x9b/0xe0 [ 565.588924][T23066] __do_fast_syscall_32+0xe7/0x970 [ 565.588943][T23066] do_fast_syscall_32+0x32/0x70 [ 565.588961][T23066] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 565.588979][T23066] RIP: 0023:0xf7fe8fec [ 565.588995][T23066] Code: Unable to access opcode bytes at 0xf7fe8fc2. [ 565.589007][T23066] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 565.589025][T23066] RAX: ffffffffffffffda RBX: 0000000080001500 RCX: 00000000ffffff9c [ 565.589035][T23066] RDX: 0000000080001600 RSI: 0000000000000000 RDI: 0000000000000000 [ 565.589044][T23066] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 565.589054][T23066] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 565.589063][T23066] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 565.589080][T23066] [ 565.812106][T20802] Bluetooth: hci2: command tx timeout [ 566.392524][T15621] bridge_slave_1: left allmulticast mode [ 566.394841][T15621] bridge_slave_1: left promiscuous mode [ 566.397164][T15621] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.400999][T15621] bridge_slave_0: left allmulticast mode [ 566.403466][T15621] bridge_slave_0: left promiscuous mode [ 566.405785][T15621] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.445061][T15621] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 566.497280][T15621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.501147][T15621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.504538][T15621] bond0 (unregistering): Released all slaves [ 566.509500][T15621] bond1 (unregistering): Released all slaves [ 566.516169][T15621] bond2 (unregistering): Released all slaves [ 566.520152][T15621] bond3 (unregistering): Released all slaves [ 566.528672][T15621] bond4 (unregistering): Released all slaves [ 566.533821][T15621] bond5 (unregistering): Released all slaves [ 566.539684][T15621] bond6 (unregistering): Released all slaves [ 566.546472][T15621] bond7 (unregistering): Released all slaves [ 566.646174][T15621] tipc: Left network mode [ 566.700686][ T5447] 8021q: adding VLAN 0 to HW filter on device eth2 [ 566.820943][ T5447] 8021q: adding VLAN 0 to HW filter on device eth3 [ 566.866245][T15621] hsr_slave_0: left promiscuous mode [ 566.869322][T15621] hsr_slave_1: left promiscuous mode [ 566.871758][T15621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.874686][T15621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.920399][T15621] team0 (unregistering): Port device team_slave_1 removed [ 566.926342][T15621] team0 (unregistering): Port device team_slave_0 removed [ 566.980298][ T5447] 8021q: adding VLAN 0 to HW filter on device eth4 [ 567.114274][ T5447] 8021q: adding VLAN 0 to HW filter on device eth5 [ 567.345510][T15621] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.395173][T15621] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.445804][T15621] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.516077][T15621] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.615310][T15621] bridge_slave_1: left allmulticast mode [ 567.617491][T15621] bridge_slave_1: left promiscuous mode [ 567.619738][T15621] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.623884][T15621] bridge_slave_0: left allmulticast mode [ 567.626110][T15621] bridge_slave_0: left promiscuous mode [ 567.628311][T15621] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.679010][T15621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.684942][T15621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.689151][T15621] bond0 (unregistering): Released all slaves [ 567.764580][T15621] tipc: Left network mode [ 567.799481][ T5447] 8021q: adding VLAN 0 to HW filter on device eth6 [ 567.916650][ T5447] 8021q: adding VLAN 0 to HW filter on device eth8 [ 567.923027][T15621] hsr_slave_0: left promiscuous mode [ 567.925590][T15621] hsr_slave_1: left promiscuous mode [ 567.930372][T15621] veth1_macvtap: left promiscuous mode [ 567.934910][T15621] veth0_macvtap: left promiscuous mode [ 567.937019][T15621] veth1_vlan: left promiscuous mode [ 567.939119][T15621] veth0_vlan: left promiscuous mode [ 568.030691][T15621] team0 (unregistering): Port device team_slave_1 removed [ 568.040656][T15621] team0 (unregistering): Port device team_slave_0 removed [ 568.167815][ T5447] 8021q: adding VLAN 0 to HW filter on device eth7 [ 568.298162][ T5447] 8021q: adding VLAN 0 to HW filter on device eth9