last executing test programs: 4.258609835s ago: executing program 0 (id=20): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904000000ff000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000600)={0x40, 0x0, 0x2, "0001"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000500)={0x40, 0x1, 0x4, "01000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys_mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mnt/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='tps25750 0x38\n\x00', 0xe) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000400)={0x40, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000003c0)={0x40, 0x3, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000380)={0x40, 0x6, 0x5, "0401020304"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000340)={0x40, 0x3, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e00)={0x84, &(0x7f00000002c0)={0x40, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000200)={0x40, 0x3, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f00000001c0)={0x40, 0x6, 0x5, "0450544348"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000180)={0x40, 0x3, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000e40)={0x1}, 0x0) syz_usb_disconnect(r0) 3.736010016s ago: executing program 2 (id=25): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setrlimit(0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write(r0, &(0x7f0000000080)='1000', 0x4) mmap(&(0x7f0000000000/0x1000000)=nil, 0xc0000000, 0x3, 0xc032, 0xffffffffffffffff, 0x0) 2.67476613s ago: executing program 0 (id=34): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) syz_usb_disconnect(0x0) r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a00e58680001000000010902270001010080320904000003ff000000070581024000000705020240000007058303400001"], 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x83, 0x8, &(0x7f0000000200)="000003434c000000") 2.591578612s ago: executing program 2 (id=35): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e130100c9000000aaaaaaaaaa1106000000200000"], 0x16) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c9000600020006000b05"], 0xb) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 2.048147358s ago: executing program 1 (id=44): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904000000ff000000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='none\x00', &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/i2c-adapter/i2c-2/new_device\x00', 0x1, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x40, 0x3, 0x2, "0102"}}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x40, 0x0, 0x1, "01"}}) (async) write(r1, &(0x7f0000000800)='tcpci 0x50\x00', 0xb) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/typec/port0/port_type\x00', 0x0, 0x0) 1.842938701s ago: executing program 0 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:04.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:05.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:06.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:0d.0\x00', 0x0, 0x0) 1.842653309s ago: executing program 0 (id=46): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040341902120001000000010902270001010080320904000003ffffff00070581020002000705010200020007058203400001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)={0x84, &(0x7f0000000300)={0x40, 0xc0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) (async) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) (async) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) 1.741034537s ago: executing program 2 (id=47): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') nanosleep(&(0x7f0000000080)={0x0, 0x3e8}, 0x0) 1.343279995s ago: executing program 0 (id=48): r0 = syz_usb_connect(0x0, 0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000400a1150120000000000010902200001000000000904000002ffffff000705810240000007050202400000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) 1.282575968s ago: executing program 3 (id=51): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x1000000) openat(0xffffffffffffff9c, &(0x7f0000000020)='./file1\x00', 0x42, 0x1b6) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000120)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001a0)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='131072\n', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f00000002a0)='./sys/block/md0/md/layout\x00', 0x1, 0x0) write(r2, &(0x7f00000002e0)='0\n', 0x2) 1.261605431s ago: executing program 3 (id=52): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) 1.241314623s ago: executing program 3 (id=53): mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/numa_balancing\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1\x00', 0x1) 1.198806603s ago: executing program 4 (id=54): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsub\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testsub/attr_allow_any_host\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\x00', 0x2) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='loop\x00', 0x5) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/subsystems\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/nvmet/subsystems/testsub\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/subsystems/testsub\x00') r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write(r2, &(0x7f0000000440)='nqn=testsub,transport=loop\x00', 0x1b) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/nvme/nvme0/delete_controller\x00', 0x1, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/subsystems/testsub\x00', 0x0) 1.198426512s ago: executing program 2 (id=55): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='md0\n\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='raid5\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='65536\n\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='3\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='1:0\n\x00', 0x4) write(r4, &(0x7f00000003c0)='1:1\n\x00', 0x4) write(r4, &(0x7f0000000400)='1:2\n\x00', 0x4) write(0xffffffffffffffff, &(0x7f0000000480)='0\n\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='1\n\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/dev-ram2/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000580)='2\n\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r7, &(0x7f0000000600)='active\n\x00', 0x7) write(r4, &(0x7f0000000640)='1:3\n\x00', 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/block/md0/md/dev-ram3/slot\x00', 0x1, 0x0) write(r8, &(0x7f00000006c0)='3\n\x00', 0x2) write(r3, &(0x7f0000000700)='4\n\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000780)='reshape\n\x00', 0x8) 1.198291188s ago: executing program 3 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./mysys/class/i2c-dev/i2c-1/device/new_device\x00', 0x1, 0x0) 1.161541665s ago: executing program 3 (id=57): r0 = socket$inet_icmp(0x2, 0x2, 0x1) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000100)={0x1, 0x30d40}, 0x10) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x6c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x64, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x1388}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x3a98}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 871.765657ms ago: executing program 4 (id=58): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x2) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000100)) r1 = syz_open_dev$usbfs(&(0x7f0000000200), 0xc, 0x2) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000100)) r2 = syz_open_dev$usbfs(&(0x7f0000000300), 0x15, 0x2) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f0000000100)) r3 = syz_open_dev$usbfs(&(0x7f0000000400), 0x16, 0x2) ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000100)) 798.974997ms ago: executing program 4 (id=59): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407f1800010001000000010902200001010080320904000002ffffff000705810200020007050202000200"], 0x0) 798.683512ms ago: executing program 0 (id=60): r0 = syz_usb_connect(0x1, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000083a0846100000010203010902270001010580000904000003ff0000050705810240000000070502024000000007058303080001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000700)={0x1}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000800)={'syzkaller0\x00', 0x101}) 778.91089ms ago: executing program 2 (id=61): syz_usb_connect(0x0, 0x45, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x6cd, 0x121, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x35, 0x1, 0x1, 0x0, 0xa0, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x40}}, {{0x9, 0x5, 0x1, 0x2, 0x40}}, {{0x9, 0x5, 0x82, 0x3, 0x40, 0x1}}, {{0x9, 0x5, 0x2, 0x2, 0x40}}, {{0x9, 0x5, 0x85, 0x3, 0x40, 0x1}}]}}]}}]}}, 0x0) 523.702778ms ago: executing program 1 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:01.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000a00000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./temp_file\x00', 0x42, 0x1ff) write(r1, &(0x7f0000a00000)="20000001010101010000000000000000000000000000000000000000000000000000000001000000", 0x28) close(r1) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='xhci_hcd', 0x8) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/xhci_hcd/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000640)='0000:00:01.0', 0xc) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/drivers/xhci_hcd/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000740)='0000:00:01.0', 0xc) close(r4) 460.342683ms ago: executing program 1 (id=63): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x1000000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000120)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001a0)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='131072\n', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f00000002a0)='./sys/block/md0/md/layout\x00', 0x1, 0x0) write(r2, &(0x7f00000002e0)='0\n', 0x2) 455.045082ms ago: executing program 1 (id=64): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) 435.654433ms ago: executing program 1 (id=65): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/x86_fpu/x86_fpu_xstate_check_failed/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) rt_sigreturn() 378.919476ms ago: executing program 1 (id=66): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea60, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x1, 0x80, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x40}}, {{0x9, 0x5, 0x2, 0x2, 0x40}}]}}]}}]}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./ttyUSB0\x00', 0x201b6, 0xbc00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10}) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000200)="00000201") 318.70756ms ago: executing program 4 (id=67): mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/numa_balancing\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1\x00', 0x1) 302.352107ms ago: executing program 3 (id=68): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='dummy_udc.0', 0xb) nanosleep(&(0x7f0000000440)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/ttyGS0\x00', 0x2, 0x0) ioctl$TIOCSBRK(r1, 0x5423) ioctl$TCSBRK(r1, 0x5409, 0x0) 254.870303ms ago: executing program 4 (id=69): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsub\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testsub/attr_allow_any_host\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\x00', 0x2) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='loop\x00', 0x5) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/subsystems\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/nvmet/subsystems/testsub\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/subsystems/testsub\x00') r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write(r2, &(0x7f0000000440)='nqn=testsub,transport=loop\x00', 0x1b) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/subsystems/testsub\x00', 0x0) 253.592869ms ago: executing program 2 (id=70): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='./sys\x00', &(0x7f0000000600)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:02.0\x00', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='thunderbolt\x00', 0xb) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/drivers/thunderbolt/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='0000:00:02.0\x00', 0xc) close(r2) 0s ago: executing program 4 (id=71): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a5, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x0, 0xc0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x7, 0x5, 0x81, 0x2, 0x200}}, {{0x7, 0x5, 0x2, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f0000000200)='6\x00'/36) syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000300)="55534253010000000000000000") nanosleep(&(0x7f0000000400)={0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.167' (ED25519) to the list of known hosts. [ 29.185832][ T4699] cgroup: Unknown subsys name 'net' [ 29.345814][ T4699] cgroup: Unknown subsys name 'cpuset' [ 29.347919][ T4699] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.508047][ T4699] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.312604][ T4718] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.312841][ T4718] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.313124][ T4718] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.313383][ T4718] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.313530][ T4718] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.329875][ T4719] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.331499][ T4719] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.331622][ T4719] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.340384][ T4720] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.341314][ T4720] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.341705][ T4720] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.342424][ T4720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.343244][ T4720] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.343401][ T4720] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.343704][ T4720] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.343869][ T4720] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.344409][ T4720] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.345144][ T4720] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.345312][ T4720] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.345591][ T4720] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.345882][ T4720] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.346407][ T4720] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.347057][ T4720] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.349136][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.363258][ T4716] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.722358][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.722692][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.722764][ T4715] bridge_slave_0: entered allmulticast mode [ 30.723250][ T4715] bridge_slave_0: entered promiscuous mode [ 30.738646][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.738706][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.738781][ T4715] bridge_slave_1: entered allmulticast mode [ 30.739243][ T4715] bridge_slave_1: entered promiscuous mode [ 30.749397][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.759709][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.776380][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.776467][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.776534][ T4711] bridge_slave_0: entered allmulticast mode [ 30.776980][ T4711] bridge_slave_0: entered promiscuous mode [ 30.786453][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.786521][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.786617][ T4711] bridge_slave_1: entered allmulticast mode [ 30.787033][ T4711] bridge_slave_1: entered promiscuous mode [ 30.798883][ T4715] team0: Port device team_slave_0 added [ 30.812125][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.813617][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.814460][ T4710] bridge_slave_0: entered allmulticast mode [ 30.814937][ T4710] bridge_slave_0: entered promiscuous mode [ 30.815750][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.815772][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.815856][ T4710] bridge_slave_1: entered allmulticast mode [ 30.816256][ T4710] bridge_slave_1: entered promiscuous mode [ 30.817536][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.818453][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.825092][ T4711] team0: Port device team_slave_0 added [ 30.828556][ T4715] team0: Port device team_slave_1 added [ 30.836523][ T4711] team0: Port device team_slave_1 added [ 30.837706][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.837747][ T4722] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.837840][ T4722] bridge_slave_0: entered allmulticast mode [ 30.838246][ T4722] bridge_slave_0: entered promiscuous mode [ 30.839096][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.839115][ T4722] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.839170][ T4722] bridge_slave_1: entered allmulticast mode [ 30.839620][ T4722] bridge_slave_1: entered promiscuous mode [ 30.846844][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.846873][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.846894][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.847597][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.847604][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.847620][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.858413][ T4715] hsr_slave_0: entered promiscuous mode [ 30.858756][ T4715] hsr_slave_1: entered promiscuous mode [ 30.885341][ T4722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.886783][ T4722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.893079][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.894860][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.904956][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.906274][ T4721] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.906393][ T4721] bridge_slave_0: entered allmulticast mode [ 30.906817][ T4721] bridge_slave_0: entered promiscuous mode [ 30.910349][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.910390][ T4721] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.910489][ T4721] bridge_slave_1: entered allmulticast mode [ 30.910902][ T4721] bridge_slave_1: entered promiscuous mode [ 30.915342][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.915362][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.915380][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.915972][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.915979][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.915992][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.925950][ T4711] hsr_slave_0: entered promiscuous mode [ 30.926235][ T4711] hsr_slave_1: entered promiscuous mode [ 30.926436][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 30.926478][ T4711] Cannot create hsr debugfs directory [ 30.935582][ T4722] team0: Port device team_slave_0 added [ 30.936680][ T4722] team0: Port device team_slave_1 added [ 30.950730][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.950755][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.950780][ T4722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.953017][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.953031][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.953052][ T4722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.956272][ T4710] team0: Port device team_slave_0 added [ 30.957495][ T4710] team0: Port device team_slave_1 added [ 30.965155][ T4721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.966478][ T4721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.978752][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.980005][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.984548][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.989639][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.990918][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.995453][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.006818][ T4722] hsr_slave_0: entered promiscuous mode [ 31.008385][ T4722] hsr_slave_1: entered promiscuous mode [ 31.009544][ T4722] debugfs: 'hsr0' already exists in 'hsr' [ 31.010606][ T4722] Cannot create hsr debugfs directory [ 31.015627][ T4721] team0: Port device team_slave_0 added [ 31.026922][ T4721] team0: Port device team_slave_1 added [ 31.028376][ T4710] hsr_slave_0: entered promiscuous mode [ 31.028706][ T4710] hsr_slave_1: entered promiscuous mode [ 31.028902][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 31.028912][ T4710] Cannot create hsr debugfs directory [ 31.075434][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.076820][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.081236][ T4721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.083699][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.085056][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.085080][ T4721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.119766][ T4715] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.123137][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.137612][ T4715] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.139939][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.150952][ T4715] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.153318][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.154769][ T4715] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.157027][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.158958][ T4721] hsr_slave_0: entered promiscuous mode [ 31.159507][ T4721] hsr_slave_1: entered promiscuous mode [ 31.159715][ T4721] debugfs: 'hsr0' already exists in 'hsr' [ 31.159726][ T4721] Cannot create hsr debugfs directory [ 31.190527][ T4711] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.193423][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.193741][ T4711] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.196152][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.196906][ T4711] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.198995][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.206476][ T4711] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.208667][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.218713][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.218770][ T4715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.218914][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.218958][ T4715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.233236][ T4722] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.236362][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.238028][ T4722] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.240225][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.241943][ T4722] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.245465][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.247081][ T4722] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.249687][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.262708][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.262759][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.262852][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.262889][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.280921][ T4710] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.283571][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.285085][ T4710] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.286165][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.288608][ T4710] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.290978][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.292708][ T4710] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.296621][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.314205][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.314251][ T4722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.314367][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.314406][ T4722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.322390][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.333928][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.336559][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.336600][ T4710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.336680][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.336708][ T4710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.340440][ T1242] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.341396][ T1242] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.345475][ T1242] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.346868][ T1242] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.348247][ T1242] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.349972][ T1242] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.351627][ T1242] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.354009][ T1242] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.365274][ T4721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.367686][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.368180][ T4721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.371677][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.373385][ T4721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.375749][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.377415][ T1242] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.377471][ T1242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.380800][ T4721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.381808][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.382647][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.382677][ T1242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.404072][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.410271][ T4722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.418632][ T4722] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.427692][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.431415][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.437621][ T1242] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.437660][ T1242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.438008][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.438026][ T1242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.465435][ T910] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.465495][ T910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.477915][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.479629][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.479674][ T1242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.501025][ T4722] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.504013][ T4722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.528831][ T910] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.528884][ T910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.529229][ T910] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.529249][ T910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.543383][ T4721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.555425][ T4710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.555459][ T4710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.563316][ T4721] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.575287][ T910] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.575335][ T910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.580016][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.580041][ T1242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.592809][ T4721] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.592850][ T4721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.663461][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.675884][ T4715] veth0_vlan: entered promiscuous mode [ 31.689617][ T4715] veth1_vlan: entered promiscuous mode [ 31.713064][ T4715] veth0_macvtap: entered promiscuous mode [ 31.718740][ T4715] veth1_macvtap: entered promiscuous mode [ 31.723418][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.726924][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.755419][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.807703][ T4711] veth0_vlan: entered promiscuous mode [ 31.809437][ T4711] veth1_vlan: entered promiscuous mode [ 31.809889][ T910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.809900][ T910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.827677][ T4845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.827979][ T4845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.828060][ T4845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.828121][ T4845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.833745][ T4722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.840641][ T4721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.849213][ T4711] veth0_macvtap: entered promiscuous mode [ 31.851614][ T4845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.853122][ T4845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.861370][ T4711] veth1_macvtap: entered promiscuous mode [ 31.868073][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.890001][ T4721] veth0_vlan: entered promiscuous mode [ 31.893411][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.898706][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.901729][ T4721] veth1_vlan: entered promiscuous mode [ 31.923951][ T4715] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.929531][ T4722] veth0_vlan: entered promiscuous mode [ 31.941572][ T4721] veth0_macvtap: entered promiscuous mode [ 31.955313][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.957036][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.959629][ T4722] veth1_vlan: entered promiscuous mode [ 31.979488][ T4721] veth1_macvtap: entered promiscuous mode [ 31.992862][ T12] nvmet: Created nvm controller 1 for subsystem testsub for NQN nqn.2014-08.org.nvmexpress:uuid:c5a3bc2b-2101-49dc-9a70-2ffa9c8924e1. [ 31.999767][ T4722] veth0_macvtap: entered promiscuous mode [ 32.002865][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.004709][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.005233][ T4893] nvme nvme1: creating 2 I/O queues. [ 32.009963][ T4893] nvme nvme1: new ctrl: "testsub" [ 32.024262][ T4722] veth1_macvtap: entered promiscuous mode [ 32.026963][ T12] nvme nvme1: Removing ctrl: NQN "testsub" [ 32.029941][ T4710] veth0_vlan: entered promiscuous mode [ 32.034284][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.034316][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.040781][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.045313][ T39] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.047087][ T4710] veth1_vlan: entered promiscuous mode [ 32.049812][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.064253][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.065888][ T39] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.069953][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.072350][ T4710] veth0_macvtap: entered promiscuous mode [ 32.077410][ T15] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.077460][ T15] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.077482][ T15] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.087448][ T4710] veth1_macvtap: entered promiscuous mode [ 32.116846][ T39] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.117011][ T39] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.117090][ T39] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.117214][ T39] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.117333][ T39] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.138532][ T4845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.138565][ T4845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.145320][ T4900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.145541][ T4900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.156327][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.159102][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.169486][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.169516][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.194681][ T15] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.196350][ T15] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.196395][ T15] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.201344][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.201373][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.223119][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.224899][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.246443][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.246477][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.273248][ T4906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.278189][ T4906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.278911][ T4904] configfs-gadget.g1 gadget.0: HOST MAC 2a:bd:61:a5:b9:a5 [ 32.278934][ T4904] configfs-gadget.g1 gadget.0: MAC 4e:d9:49:84:68:35 [ 32.286730][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.290578][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.290628][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.366411][ T4915] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 32.424911][ T4716] Bluetooth: hci2: command tx timeout [ 32.424939][ T4719] Bluetooth: hci4: command tx timeout [ 32.425167][ T50] Bluetooth: hci3: command tx timeout [ 32.425309][ T4719] Bluetooth: hci1: command tx timeout [ 32.425312][ T50] Bluetooth: hci0: command tx timeout [ 32.503863][ T4915] md/raid:md0: not clean -- starting background reconstruction [ 32.507003][ T4915] md/raid:md0: device ram2 operational as raid disk 2 [ 32.508587][ T4915] md/raid:md0: device ram1 operational as raid disk 1 [ 32.516893][ T4915] md/raid:md0: cannot start dirty degraded array. [ 32.535484][ T4833] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.609433][ T4826] input: syz0 as /devices/virtual/misc/uhid/0005:054C:0306.0001/input/input2 [ 32.615328][ T4826] sony 0005:054C:0306.0001: input,hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 32.676706][ T4915] md/raid:md0: failed to run raid set. [ 32.680261][ T4915] md: pers->run() failed ... [ 32.686503][ T4833] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 7.02 [ 32.687073][ T4833] usb 1-1: Dual-Role OTG device on HNP port [ 32.687289][ T4833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.707227][ T4833] rndis_host 1-1:1.0 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, 2a:bd:61:a5:b9:a5 [ 32.903066][ T4980] Zero length message leads to an empty skb [ 32.947881][ T4982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.953883][ T4982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.959576][ T4982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.960635][ T4982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.048742][ T4997] ubi0: attaching mtd0 [ 33.049844][ T4997] ubi0: scanning is finished [ 33.049854][ T4997] ubi0: empty MTD device detected [ 33.172349][ T5010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.174323][ T5010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.200211][ T4997] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 33.202723][ T4997] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 33.204767][ T4997] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 33.204803][ T4997] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 33.204818][ T4997] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 33.204832][ T4997] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 33.204845][ T4997] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 810659658 [ 33.204858][ T4997] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 33.214134][ T5015] ubi0: background thread "ubi_bgt0d" started, PID 5015 [ 33.553753][ T5021] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 33.617622][ T5024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.618624][ T5024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.644557][ T5021] md: could not open device unknown-block(1,0). [ 33.695766][ T5021] md: could not open device unknown-block(1,1). [ 33.735505][ T5021] md: could not open device unknown-block(1,2). [ 33.751124][ T5021] md/raid:md0: not clean -- starting background reconstruction [ 33.751258][ T5021] md/raid:md0: device ram2 operational as raid disk 2 [ 33.751270][ T5021] md/raid:md0: device ram1 operational as raid disk 1 [ 33.759973][ T5021] md/raid:md0: cannot start dirty degraded array. [ 33.906661][ T5021] md/raid:md0: failed to run raid set. [ 33.906709][ T5021] md: pers->run() failed ... [ 33.907004][ T5029] md: could not open device unknown-block(1,3). [ 34.504830][ T4716] Bluetooth: hci0: command tx timeout [ 34.514480][ T4716] Bluetooth: hci2: command tx timeout [ 34.514512][ T4719] Bluetooth: hci3: command tx timeout [ 34.514570][ T4720] Bluetooth: hci1: command tx timeout [ 34.761045][ T5053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.761284][ T5053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.880549][ T4720] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 34.880577][ T4720] CPU: 0 UID: 0 PID: 4720 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT [ 34.880590][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 34.880596][ T4720] Workqueue: hci4 hci_rx_work [ 34.880614][ T4720] Call trace: [ 34.880617][ T4720] show_stack+0x2c/0x3c (C) [ 34.880633][ T4720] __dump_stack+0x30/0x40 [ 34.880645][ T4720] dump_stack_lvl+0xd8/0x12c [ 34.880657][ T4720] dump_stack+0x1c/0x28 [ 34.880669][ T4720] sysfs_warn_dup+0x9c/0xb8 [ 34.880681][ T4720] sysfs_create_dir_ns+0x190/0x1f4 [ 34.880693][ T4720] kobject_add_internal+0x290/0x6f0 [ 34.880706][ T4720] kobject_add_varg+0x9c/0xe8 [ 34.880717][ T4720] kobject_add+0x110/0x1c8 [ 34.880727][ T4720] device_add+0x394/0x9e0 [ 34.880737][ T4720] hci_conn_add_sysfs+0xbc/0x1e8 [ 34.880746][ T4720] le_conn_complete_evt+0xc68/0x10f8 [ 34.880758][ T4720] hci_le_conn_complete_evt+0x114/0x3d8 [ 34.880770][ T4720] hci_le_meta_evt+0x2b0/0x46c [ 34.880779][ T4720] hci_event_packet+0x4c0/0x9c8 [ 34.880787][ T4720] hci_rx_work+0x2f4/0xd78 [ 34.880798][ T4720] process_scheduled_works+0x788/0x10b8 [ 34.880809][ T4720] worker_thread+0x798/0xbd0 [ 34.880819][ T4720] kthread+0x304/0x3d4 [ 34.880827][ T4720] ret_from_fork+0x10/0x20 [ 34.880843][ T4720] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 34.880857][ T4720] Bluetooth: hci4: failed to register connection device [ 34.967586][ T5053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.967913][ T5053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.065921][ T5059] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 35.083462][ T5061] FAULT_INJECTION: forcing a failure. [ 35.083462][ T5061] name failslab, interval 1, probability 100, space 0, times 1 [ 35.083490][ T5061] CPU: 1 UID: 0 PID: 5061 Comm: syz.4.37 Not tainted syzkaller #0 PREEMPT [ 35.083502][ T5061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 35.083507][ T5061] Call trace: [ 35.083510][ T5061] show_stack+0x2c/0x3c (C) [ 35.083533][ T5061] __dump_stack+0x30/0x40 [ 35.083547][ T5061] dump_stack_lvl+0xd8/0x12c [ 35.083559][ T5061] dump_stack+0x1c/0x28 [ 35.083571][ T5061] should_fail_ex+0x41c/0x590 [ 35.083580][ T5061] should_failslab+0xc4/0x120 [ 35.083589][ T5061] kmem_cache_alloc_noprof+0x94/0x5d8 [ 35.083599][ T5061] do_getname+0x48/0x234 [ 35.083608][ T5061] __arm64_sys_mkdirat+0x88/0xc0 [ 35.083619][ T5061] invoke_syscall+0x98/0x244 [ 35.083631][ T5061] el0_svc_common+0xec/0x23c [ 35.083643][ T5061] do_el0_svc+0x4c/0x5c [ 35.083654][ T5061] el0_svc+0x64/0x260 [ 35.083665][ T5061] el0t_64_sync_handler+0x44/0x104 [ 35.083675][ T5061] el0t_64_sync+0x198/0x19c [ 35.175294][ T5059] md: could not open device unknown-block(1,0). [ 35.204901][ T5059] md: could not open device unknown-block(1,1). [ 35.211252][ T5073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.212912][ T5073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.235227][ T5059] md: could not open device unknown-block(1,2). [ 35.247243][ T5059] md/raid:md0: not clean -- starting background reconstruction [ 35.247393][ T5059] md/raid:md0: device ram2 operational as raid disk 2 [ 35.247437][ T5059] md/raid:md0: device ram1 operational as raid disk 1 [ 35.253145][ T5059] md/raid:md0: cannot start dirty degraded array. [ 35.365397][ T5059] md/raid:md0: failed to run raid set. [ 35.365421][ T5059] md: pers->run() failed ... [ 35.365736][ T5076] md: could not open device unknown-block(1,3). [ 35.423424][ T5079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.425581][ T5079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.603713][ T5086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.603916][ T5086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.732859][ T5090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.733052][ T5090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.132443][ T5092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.133242][ T5092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.149019][ T867] IPVS: starting estimator thread 0... [ 36.235114][ T5096] IPVS: using max 60 ests per chain, 144000 per kthread [ 36.270924][ T910] nvmet: Created nvm controller 1 for subsystem testsub for NQN nqn.2014-08.org.nvmexpress:uuid:c5a3bc2b-2101-49dc-9a70-2ffa9c8924e1. [ 36.272126][ T5109] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 36.283312][ T5105] nvme nvme1: creating 2 I/O queues. [ 36.286404][ T5105] nvme nvme1: new ctrl: "testsub" [ 36.292018][ T15] nvme nvme1: Removing ctrl: NQN "testsub" [ 36.394638][ T5109] md: could not open device unknown-block(1,0). [ 36.434539][ T5109] md: could not open device unknown-block(1,1). [ 36.474586][ T5109] md: could not open device unknown-block(1,2). [ 36.483931][ T5109] md/raid:md0: not clean -- starting background reconstruction [ 36.484031][ T5109] md/raid:md0: device ram2 operational as raid disk 2 [ 36.484041][ T5109] md/raid:md0: device ram1 operational as raid disk 1 [ 36.490153][ T5109] md/raid:md0: cannot start dirty degraded array. [ 36.584455][ T4720] Bluetooth: hci1: command tx timeout [ 36.584494][ T4720] Bluetooth: hci2: command tx timeout [ 36.584527][ T4720] Bluetooth: hci3: command tx timeout [ 36.584547][ T4720] Bluetooth: hci0: command tx timeout [ 36.630858][ T5123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.632740][ T5123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.646768][ T5109] md/raid:md0: failed to run raid set. [ 36.646794][ T5109] md: pers->run() failed ... [ 36.659294][ T5118] md: could not open device unknown-block(1,3). [ 36.674499][ T5126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.676533][ T5126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.695360][ T5128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.695559][ T5128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.904708][ T4719] Bluetooth: hci4: command 0x040f tx timeout [ 37.052633][ T5141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.052832][ T5141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.197388][ T12] nvmet: Created nvm controller 1 for subsystem testsub for NQN nqn.2014-08.org.nvmexpress:uuid:c5a3bc2b-2101-49dc-9a70-2ffa9c8924e1. [ 37.204848][ T5147] nvme nvme1: creating 2 I/O queues. [ 37.207980][ T5147] nvme nvme1: new ctrl: "testsub" [ 37.214860][ T39] nvme nvme1: Removing ctrl: NQN "testsub" [ 37.338682][ T5151] EXT4-fs (nvme0n1p2): shut down requested (2) [ 37.338790][ T5151] Aborting journal on device nvme0n1p2-8. Jan 1 00:00:37 syzkaller kern.alert kernel: [ 37.338682][ T5151] EXT4-fs (nvme0n1p2): shut down requested (2) [ 37 ** replaying previous printk message ** [ 37.498281][ T5153] Unable to handle kernel paging request at virtual address ffff8000943f9640 [ 37.498315][ T5153] KASAN: probably user-memory-access in range [0x00000004a1fcb200-0x00000004a1fcb207] [ 37.498441][ T5153] Mem abort info: [ 37.498446][ T5153] ESR = 0x0000000096000007 [ 37.498452][ T5153] EC = 0x25: DABT (current EL), IL = 32 bits [ 37.498459][ T5153] SET = 0, FnV = 0 [ 37.498463][ T5153] EA = 0, S1PTW = 0 [ 37.498467][ T5153] FSC = 0x07: level 3 translation fault Jan 1 00:00:37 syzkaller kern.alert kernel: [ 37.498281][ T5153] Unable to handle kernel paging request at virtual address ffff8000943f9640[ 37.498472][ T5153] Data abort info: [ 37.498475][ T5153] ISV = 0, ISS = 0x00000007, ISS2 = 0x00000000 [ 37.498480][ T5153] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 37.498485][ T5153] GCS = 0, Overlay = 0, DirtyBit = 0 [ 37.498491][ T5153] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000000021b049000 [ 37.498497][ T5153] [ffff8000943f9640] pgd=0000000000000000, p4d=1000000221341003, pud=1000000221342003, pmd=1000000107353403, pte=0000000000000000 [ 37.498571][ T5153] Internal error: Oops: 0000000096000007 [#1] SMP Jan 1 00:00:37 syzkaller kern.alert kernel: [ 37.498315][ T5153] KASAN: probably user-memory-access in range [0x00000004a1fcb200-0x00000004a1fcb207][ 37.509341][ T5153] Modules linked in: [ 37.520669][ T5153] CPU: 1 UID: 0 PID: 5153 Comm: syz.2.70 Not tainted syzkaller #0 PREEMPT [ 37.522158][ T5153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 37.523905][ T5153] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 37.525203][ T5153] pc : nhi_probe+0xc0/0x730 Jan 1 00:00:37 syzkaller kern.alert kernel: [ 37.498441][ T5153] Mem abort info:[ 37.525992][ T5153] lr : nhi_probe+0x34/0x730 [ 37.528045][ T5153] sp : ffff8000987375b0 [ 37.528828][ T5153] x29: ffff8000987375c0 x28: 1fffe0001a42009a x27: ffff0000d21004d0 [ 37.530216][ T5153] x26: 1fffe0001a420098 x25: ffff0000c2ed40d0 x24: 1fffe0001a420099 [ 37.531651][ T5153] x23: dfff800000000000 x22: 1fffe0001a4200a7 x21: ffff0000d2100538 Jan 1 00:00:37 syzkaller kern.alert kernel: [ 37.498446][ T5153] ESR = 0x0000000096000007[ 37.533081][ T5153] x20: ffff0000d2100480 x19: ffff0000d21004c8 x18: 1fffe00034bbbe28 [ 37.535996][ T5153] x17: 0000000000000003 x16: ffff800088b37000 x15: ffff800088bed220 [ 37.537479][ T5153] x14: ffff0001a5ddf14c x13: 0000000000000001 x12: 0000000000000000 [ 37.538946][ T5153] x11: ffff80008a5d5e28 x10: 0000000000080000 x9 : 00000000000041b2 [ 37.540352][ T5153] x8 : ffff8000943f9640 x7 : 0000000000000000 x6 : 0000000000000000 [ 37.541702][ T5153] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff800080156118 Jan 1 00:00:37 syzkaller kern.alert kernel: [ 37.498452][ T5153] EC = 0x25: DABT (current EL), IL = 32 bits[ 37.543134][ T5153] x2 : 0000000000000006 x1 : ffff0000f2bb9d40 x0 : 0000000000000001 [ 37.546241][ T5153] Call trace: [ 37.546828][ T5153] nhi_probe+0xc0/0x730 (P) Jan 1 00:00:37 syzkaller kern.alert kernel: [ 37.498459][ T5153] SET = 0, FnV = 0[ 37.547598][ T5153] nhi_pci_probe+0x418/0x4e4 [ 37.549735][ T5153] local_pci_probe+0xc8/0x158 [ 37.550569][ T5153] pci_device_probe+0x460/0x8d4 Jan 1 00:00:37 syzkaller kern.alert kernel: [ 37.498463][ T5153] EA = 0, S1PTW = 0[ 37.551394][ T5153] really_probe+0x29c/0x800 [ 37.553545][ T5153] __driver_probe_device+0x1e0/0x350 [ 37.554511][ T5153] device_driver_attach+0x58/0xac Jan 1 00:00:37 syzkaller kern.alert kernel: [ 37.498467][ T5153] FSC = 0x07: level 3 translation fault[ 37.555399][ T5153] bind_store+0xf4/0x14c [ 37.557816][ T5153] drv_attr_store+0x80/0xa4 [ 37.558666][ T5153] sysfs_kf_write+0xe0/0x108 [ 37.559488][ T5153] kernfs_fop_write_iter+0x260/0x3b8 [ 37.560426][ T5153] vfs_write+0x51c/0xa0c Jan 1 00:00:37 syzkaller kern.alert kernel: [ 37.498472][ T5153] Data abort info:[ 37.561186][ T5153] ksys_write+0x12c/0x228 [ 37.563175][ T5153] __arm64_sys_write+0x84/0x98 [ 37.564002][ T5153] invoke_syscall+0x98/0x244 Jan 1 00:00:37 syzkaller kern.alert kernel: [ 37.498475][ T5153] ISV = 0, ISS = 0x00000007, ISS2 = 0x00000000[ 37.564848][ T5153] el0_svc_common+0xec/0x23c [ 37.567393][ T5153] do_el0_svc+0x4c/0x5c [ 37.568188][ T5153] el0_svc+0x64/0x260 Jan 1 00:00:37 syzkaller kern.alert kernel: [ 37.498480][ T5153] CM = 0, WnR = 0, TnD = 0, TagAccess = 0[ 37.568901][ T5153] el0t_64_sync_handler+0x44/0x104 [ 37.571426][ T5153] el0t_64_sync+0x198/0x19c [ 37.572266][ T5153] Code: d343feb6 9140e508 91190108 d503201f (b9400109) [ 37.573468][ T5153] ---[ end trace 0000000000000000 ]--- Jan 1 00:00:37 syzkaller kern.alert kernel: [ 37.498485][ T5153] GCS = 0, Overlay = 0, DirtyBit = 0 Jan 1 00:00:37 syzkaller kern.alert kernel: [ 37.498491][ T5153] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000000021b049000 Jan 1 00:00:37 syzkaller kern.alert kernel: [ 37.498497][ T5153] [ffff8000943f9640] pgd=0000000000000000, p4d=1000000221341003, pud=1000000221342003, pmd=1000000107353403, pte=0000000000000000 Jan 1 00:00:37 syzkaller kern.emerg kernel: [ 37.498571][ T5153] Internal error: Oops: 0000000096000007 [#1] SMP Jan 1 00:00:37 syzkaller kern.emerg kernel: [ 37.572266][ T5153] Code: d343feb6 9140e508 91190108 d503201f (b9400109) [ 37.801045][ T5153] Kernel panic - not syncing: Oops: Fatal exception [ 37.802221][ T5153] SMP: stopping secondary CPUs [ 37.803044][ T5153] Kernel Offset: disabled [ 37.803797][ T5153] CPU features: 0x14000000,003c0008,27020a02,a84ff6a7 [ 37.805043][ T5153] Memory Limit: none [ 38.027913][ T5153] Rebooting in 86400 seconds..