last executing test programs: 35.646425111s ago: executing program 4 (id=5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0x4010ae00, &(0x7f0000000080)={0x10000}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000040)={0x0, 0x10000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000040)={0x0, 0x8000}) 34.870762297s ago: executing program 4 (id=9): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x10000, &(0x7f0000000000/0x10000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040ae8a, &(0x7f0000000800)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80, 0x1}) 33.911664467s ago: executing program 4 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/control\x00', 0x81b6, 0xa00ec) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000100)="040000000100000000000000380100000000000000000000000000000000000000000000000000007465737400") ioctl(r0, 0xc138fd09, &(0x7f0000000100)="04000000010000000000000068010000380100000100000000000000000000000000000000000000746573740000000000000000000000000000000000080000000000000000000000000000696e74656772697479002f6465762f6e756c6c62302030202d204a00") 33.33476994s ago: executing program 4 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb1/power/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='on\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/usb/devices/usb2/power/control\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='on\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/usb/devices/usb3/power/control\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='on\x00', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/bus/usb/devices/usb4/power/control\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='on\x00', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/usb/devices/usb5/power/control\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='on\x00', 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/bus/usb/devices/usb6/power/control\x00', 0x1, 0x0) write(r5, &(0x7f0000000800)='on\x00', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/bus/usb/devices/1-0:1.0/power/control\x00', 0x1, 0x0) write(r6, &(0x7f0000000800)='on\x00', 0x3) r7 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./sys/bus/usb/devices/2-0:1.0/power/control\x00', 0x1, 0x0) write(r7, &(0x7f0000000800)='on\x00', 0x3) r8 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/bus/usb/devices/3-0:1.0/power/control\x00', 0x1, 0x0) write(r8, &(0x7f0000000800)='on\x00', 0x3) r9 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/bus/usb/devices/4-0:1.0/power/control\x00', 0x1, 0x0) write(r9, &(0x7f0000000800)='on\x00', 0x3) r10 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./sys/bus/usb/devices/5-0:1.0/power/control\x00', 0x1, 0x0) write(r10, &(0x7f0000000800)='on\x00', 0x3) r11 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./sys/bus/usb/devices/6-0:1.0/power/control\x00', 0x1, 0x0) write(r11, &(0x7f0000000800)='on\x00', 0x3) syz_usb_connect(0x3, 0x32, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000200000040c30b01000100000000010902200001010080320904000002ffffff000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000f00)={0x2}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001600)='./dev/ttyUSB0\x00', 0x0, 0x0) nanosleep(&(0x7f0000000f00)={0x2}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001600)='./dev/ttyUSB0\x00', 0x0, 0x0) 23.458080067s ago: executing program 3 (id=78): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x44}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, r1, 0x301}, 0x14}}, 0x0) 22.920743067s ago: executing program 3 (id=83): r0 = syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500010000000109023c0001010080fa0904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02000200"], 0x0) syz_usb_ep_write(r0, 0x8d, 0x4, &(0x7f0000000100)="01010101") syz_usb_ep_write(r0, 0x8e, 0x20, &(0x7f0000000200)="0202020202020202020202020202020202020202020202020202020202020202") nanosleep(&(0x7f0000000300)={0x2}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x85) lseek(r1, 0x20000000, 0x0) write$char_usb(r1, &(0x7f0000000400)="0303030303030303", 0x8) syz_usb_disconnect(r0) getuid() 19.632572672s ago: executing program 3 (id=113): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv4_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) 19.426941178s ago: executing program 3 (id=115): mkdir(&(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/damon\x00', 0x0, 0x0) 19.367408626s ago: executing program 3 (id=116): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_helper', 0x1, 0x0) write(r0, &(0x7f0000000080)='gadget.0\x00', 0x8) close(r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/profiling', 0x1, 0x0) write(r1, &(0x7f0000000100)='gadget.0\x00', 0x8) close(r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/uevent_helper', 0x1, 0x0) write(r2, &(0x7f0000000180)='gadget.0\x00', 0x8) close(r2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/profiling', 0x1, 0x0) write(r3, &(0x7f0000000200)='gadget.0\x00', 0x8) close(r3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/uevent_helper', 0x1, 0x0) write(r4, &(0x7f0000000280)='gadget.0\x00', 0x8) close(r4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/profiling', 0x1, 0x0) write(r5, &(0x7f0000000300)='gadget.0\x00', 0x8) close(r5) 18.940076275s ago: executing program 3 (id=120): syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x2) syz_open_dev$usbfs(&(0x7f0000000000), 0xc, 0x2) syz_open_dev$usbfs(&(0x7f0000000000), 0xd, 0x2) syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x2) syz_open_dev$usbfs(&(0x7f0000000000), 0xf, 0x2) syz_open_dev$usbfs(&(0x7f0000000000), 0x10, 0x2) syz_open_dev$usbfs(&(0x7f0000000000), 0x11, 0x2) syz_open_dev$usbfs(&(0x7f0000000000), 0x12, 0x2) syz_open_dev$usbfs(&(0x7f0000000000), 0x13, 0x2) syz_open_dev$usbfs(&(0x7f0000000000), 0x14, 0x2) 18.332531435s ago: executing program 32 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb1/power/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='on\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/usb/devices/usb2/power/control\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='on\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/usb/devices/usb3/power/control\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='on\x00', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/bus/usb/devices/usb4/power/control\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='on\x00', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/usb/devices/usb5/power/control\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='on\x00', 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/bus/usb/devices/usb6/power/control\x00', 0x1, 0x0) write(r5, &(0x7f0000000800)='on\x00', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/bus/usb/devices/1-0:1.0/power/control\x00', 0x1, 0x0) write(r6, &(0x7f0000000800)='on\x00', 0x3) r7 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./sys/bus/usb/devices/2-0:1.0/power/control\x00', 0x1, 0x0) write(r7, &(0x7f0000000800)='on\x00', 0x3) r8 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/bus/usb/devices/3-0:1.0/power/control\x00', 0x1, 0x0) write(r8, &(0x7f0000000800)='on\x00', 0x3) r9 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/bus/usb/devices/4-0:1.0/power/control\x00', 0x1, 0x0) write(r9, &(0x7f0000000800)='on\x00', 0x3) r10 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./sys/bus/usb/devices/5-0:1.0/power/control\x00', 0x1, 0x0) write(r10, &(0x7f0000000800)='on\x00', 0x3) r11 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./sys/bus/usb/devices/6-0:1.0/power/control\x00', 0x1, 0x0) write(r11, &(0x7f0000000800)='on\x00', 0x3) syz_usb_connect(0x3, 0x32, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000200000040c30b01000100000000010902200001010080320904000002ffffff000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000f00)={0x2}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001600)='./dev/ttyUSB0\x00', 0x0, 0x0) nanosleep(&(0x7f0000000f00)={0x2}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001600)='./dev/ttyUSB0\x00', 0x0, 0x0) 10.373327899s ago: executing program 2 (id=186): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0x0, 0x2, &(0x7f0000000440)='\x00', 0x0, 0xc0, 0x1234, 0x5678, 0x43, 0x0, 0x7, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000300)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 10.099005116s ago: executing program 2 (id=189): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/printk/parameters/time\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/100, 0x64) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/kvm/parameters/nested\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/hypervisor/properties\x00', 0x0, 0x0) 9.86140606s ago: executing program 2 (id=192): r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000001040)="01010101", 0x4) read(r0, &(0x7f0000001080)=""/4, 0x4) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000001100)='./my_tracefs\x00', &(0x7f0000001140)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./my_tracefs/events/cdns3/cdns3_ep0_queue\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f00000011c0)='enable\x00', 0x1, 0x0) write(r2, &(0x7f0000001200)='1\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001240)='./my_tracefs/trace\x00', 0x0, 0x0) read(r3, &(0x7f0000001280)=""/4096, 0x1000) close(r3) close(r1) 9.264873069s ago: executing program 2 (id=197): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004040200193000001020301090212000101008050090400000000000000"], 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='sysfs\x00', &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/drivers/dvb_usb_nova_t_usb2/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='1-1:1.0\x00', 0x8) 6.554680346s ago: executing program 5 (id=129): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, &(0x7f0000001000)={0x0, 0x0, 0xc, &(0x7f0000001100)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x1}]}}) nanosleep(&(0x7f0000000200)={0x1}, 0x0) syz_usb_disconnect(r0) 5.998487353s ago: executing program 2 (id=220): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000103000000092100000001222200090581030800000000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x15, 0x2) ioctl$USBDEVFS_RESET(r0, 0x5514) 4.546173937s ago: executing program 1 (id=230): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0xfa0f, @loopback}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000100)={0x2, 0xfb0f, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0xfb0f, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000400)=""/5, 0xa}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)=""/100, 0x64}], 0x1}, 0x0) 4.245413766s ago: executing program 1 (id=233): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r5, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000300)={0x8, r5}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000340)={0x8, r4}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r3, 0x1c, &(0x7f00000003c0)=""/28}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000400)={0x8, r2}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000440)={0x8, r1}) close(r0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f00000004c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl(r6, 0x3b8e, &(0x7f0000000000)="10000000") ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000540)={0x28, 0x1, r7, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}) ioctl(r6, 0x3b89, &(0x7f0000001000)="300000000400000004000000070000000000000000000000adde00000800000000200000007f00000600000000000000") ioctl(r6, 0x3ba0, &(0x7f0000004000)="480000000200000000000000000000000400000000000000000000000100"/72) read(0x4, &(0x7f0000003000)=""/40, 0x28) 4.034939441s ago: executing program 5 (id=236): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae61, &(0x7f0000000100)={0x2, 0x0, @ioapic={0xfec00000, 0x0, 0x0, 0x0, 0x0, [{0x20, 0x1}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000200)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000070, 0x0, 0x20}]}) 3.879111815s ago: executing program 33 (id=120): syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x2) syz_open_dev$usbfs(&(0x7f0000000000), 0xc, 0x2) syz_open_dev$usbfs(&(0x7f0000000000), 0xd, 0x2) syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x2) syz_open_dev$usbfs(&(0x7f0000000000), 0xf, 0x2) syz_open_dev$usbfs(&(0x7f0000000000), 0x10, 0x2) syz_open_dev$usbfs(&(0x7f0000000000), 0x11, 0x2) syz_open_dev$usbfs(&(0x7f0000000000), 0x12, 0x2) syz_open_dev$usbfs(&(0x7f0000000000), 0x13, 0x2) syz_open_dev$usbfs(&(0x7f0000000000), 0x14, 0x2) 3.59506859s ago: executing program 1 (id=240): rt_sigprocmask(0x0, &(0x7f0000000100)={[0x1]}, 0x0, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000040)={0xb6, 0x0, 0x77359400}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.962408951s ago: executing program 5 (id=244): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='dummy_udc.0\n\x00', 0xc) syz_usb_connect(0x0, 0x1b, &(0x7f0000000400)=ANY=[@ANYBLOB="120100020000004082058205400001020301090209000101008032"], 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000600), 0x0, 0x2) ioctl$USBDEVFS_RESET(r1, 0x5514) 2.793105927s ago: executing program 2 (id=246): syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x200, 0xfff, 0x0, "f441a4440fb2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xfc, 0x3, 0x8, 0x1, "371fc8"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x5, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0x40684111, &(0x7f0000000340)) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 2.72247607s ago: executing program 1 (id=247): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x11, 0x2) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000020)=0x1) 962.592206ms ago: executing program 0 (id=256): mkdir(&(0x7f0000000000)='sys_dir\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='sys_dir\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='sys_dir/module/firmware_class/parameters/path\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='.\x00', 0x2) close(r0) mkdir(&(0x7f0000000500)='keyspan_pda\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='keyspan_pda/keyspan_pda.fw\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000700)="00001b400000", 0x6) close(r1) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000800)=ANY=[@ANYBLOB="1201100100000040cd0603010080010203010902120001010080fa0904000000ff000000"], 0x0) nanosleep(&(0x7f0000000c00)={0x1}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000001100)={0x40, 0xa0}}) syz_usb_control_io(r2, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000001100)={0x40, 0xa0}}) syz_usb_control_io(r2, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000001100)={0x40, 0xa0}}) getpid() nanosleep(&(0x7f0000000c00)={0x1}, 0x0) 935.529513ms ago: executing program 0 (id=257): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:01.0/reset\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='1', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:04.0/reset\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) close(r1) 886.800184ms ago: executing program 1 (id=258): r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x15, 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x1f, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000280), 0x16, 0x2) r3 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x20, 0x2) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000600)) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000600)) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f0000000600)) ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f0000000600)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000300)) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000300)) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000300)) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000500)=0x7f0000000300) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000500)) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f0000000500)) ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, &(0x7f0000000500)) 730.582029ms ago: executing program 0 (id=259): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r5, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000300)={0x8, r5}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000340)={0x8, r4}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r3, 0x1c, &(0x7f00000003c0)=""/28}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000400)={0x8, r2}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000440)={0x8, r1}) close(r0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000002000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl(0xffffffffffffffff, 0x3b8e, &(0x7f0000000000)="10000000") ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000540)={0x28, 0x1, r7, r6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}) ioctl(0xffffffffffffffff, 0x3b89, &(0x7f0000001000)="300000000400000004000000070000000000000000000000adde00000800000000200000007f00000600000000000000") ioctl(0xffffffffffffffff, 0x3ba0, &(0x7f0000004000)="480000000200000000000000000000000400000000000000000000000100"/72) read(0x4, &(0x7f0000003000)=""/40, 0x28) 595.934693ms ago: executing program 0 (id=260): syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x200, 0xfff, 0x0, "f441a4440fb2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xfc, 0x3, 0x8, 0x1, "371fc8"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x5, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x15, 0x2) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000300)={0x1, 0x1}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000340)={0x2, 0x1}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_iso={0x0, {0x1}, 0x0, 0x2, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, [{0x8}]}) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000000)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000001000)=@urb_type_iso={0x0, {0x2, 0x1}, 0x0, 0x2, &(0x7f0000001080)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, [{0x8}]}) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000001000)) ioctl(r0, 0x4004550c, &(0x7f0000000200)='\x00\x00\x00\x00') ioctl(r0, 0x4004550c, &(0x7f0000000200)='\x00\x00\x00\x00') 570.580868ms ago: executing program 1 (id=261): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm_intel/parameters/dump_invalid_vmcs\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x11, r3, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaeab, 0x27ac38) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000080)={[0x8, 0x100000f, 0x9, 0x0, 0x60d, 0x0, 0xd, 0x7f, 0x6, 0x0, 0x0, 0x0, 0x6, 0x9, 0x1, 0x3], 0x70000, 0x8340}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 294.520824ms ago: executing program 0 (id=262): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0x0525', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0xa4a7', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000300)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='dummy_udc.0', 0xb) nanosleep(&(0x7f0000000480)={0x0, 0xbebc200}, 0x0) write(r2, &(0x7f0000000500)='\x00', 0x1) close(r2) nanosleep(&(0x7f0000000480)={0x0, 0x5f5e100}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00', 0x0) 0s ago: executing program 0 (id=263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@wrmsr={0x65, 0x20, {0x10, 0x1000}}], 0x20}) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.242' (ED25519) to the list of known hosts. [ 76.369709][ T5570] cgroup: Unknown subsys name 'net' [ 76.610962][ T5570] cgroup: Unknown subsys name 'cpuset' [ 76.686196][ T5570] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.258036][ T5570] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.231742][ T5592] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.255726][ T4898] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.277969][ T4898] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.289698][ T5597] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.306529][ T5597] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.338746][ T5602] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.339598][ T5602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.342115][ T5602] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.343744][ T5602] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.344929][ T5602] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.350371][ T5595] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.353955][ T5602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.359083][ T5602] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.367786][ T5602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.373266][ T5595] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.375842][ T5602] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.376667][ T5602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.377061][ T5602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.381630][ T5602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.383513][ T5602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.390033][ T5590] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.402767][ T5602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.415380][ T5590] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.416490][ T5590] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.495233][ T5595] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.456732][ T4898] Bluetooth: hci0: command tx timeout [ 84.456917][ T5592] Bluetooth: hci1: command tx timeout [ 84.535729][ T4898] Bluetooth: hci2: command tx timeout [ 84.535910][ T5592] Bluetooth: hci4: command tx timeout [ 84.628619][ T5592] Bluetooth: hci3: command tx timeout [ 84.860410][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.861525][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.861635][ T5583] bridge_slave_0: entered allmulticast mode [ 84.863161][ T5583] bridge_slave_0: entered promiscuous mode [ 84.936536][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.936629][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.937052][ T5583] bridge_slave_1: entered allmulticast mode [ 84.939154][ T5583] bridge_slave_1: entered promiscuous mode [ 84.957190][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.957327][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.957789][ T5586] bridge_slave_0: entered allmulticast mode [ 84.960904][ T5586] bridge_slave_0: entered promiscuous mode [ 85.013896][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.014014][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.014105][ T5585] bridge_slave_0: entered allmulticast mode [ 85.015441][ T5585] bridge_slave_0: entered promiscuous mode [ 85.024343][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.024455][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.025373][ T5586] bridge_slave_1: entered allmulticast mode [ 85.028579][ T5586] bridge_slave_1: entered promiscuous mode [ 85.029881][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.030001][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.030138][ T5582] bridge_slave_0: entered allmulticast mode [ 85.033330][ T5582] bridge_slave_0: entered promiscuous mode [ 85.038647][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.038789][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.039260][ T5584] bridge_slave_0: entered allmulticast mode [ 85.043266][ T5584] bridge_slave_0: entered promiscuous mode [ 85.070608][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.070721][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.070925][ T5585] bridge_slave_1: entered allmulticast mode [ 85.075470][ T5585] bridge_slave_1: entered promiscuous mode [ 85.102936][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.103049][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.103186][ T5582] bridge_slave_1: entered allmulticast mode [ 85.107599][ T5582] bridge_slave_1: entered promiscuous mode [ 85.110417][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.110615][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.111184][ T5584] bridge_slave_1: entered allmulticast mode [ 85.113864][ T5584] bridge_slave_1: entered promiscuous mode [ 85.125204][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.211393][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.229919][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.278005][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.280440][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.282849][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.418731][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.436517][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.461242][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.463319][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.464921][ T5583] team0: Port device team_slave_0 added [ 85.522796][ T5583] team0: Port device team_slave_1 added [ 85.538906][ T5586] team0: Port device team_slave_0 added [ 85.575910][ T5585] team0: Port device team_slave_0 added [ 85.579088][ T5586] team0: Port device team_slave_1 added [ 85.580700][ T5582] team0: Port device team_slave_0 added [ 85.582817][ T5584] team0: Port device team_slave_0 added [ 85.606427][ T5585] team0: Port device team_slave_1 added [ 85.622658][ T5582] team0: Port device team_slave_1 added [ 85.624153][ T5584] team0: Port device team_slave_1 added [ 85.625062][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.625070][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.625082][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.703250][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.703260][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.703273][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.728972][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.728986][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.729006][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.788759][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.788774][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.788794][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.791079][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.791091][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.791111][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.793682][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.793693][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.793714][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.795237][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.795248][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.795267][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.825775][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.825791][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.825811][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.827066][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.827077][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.827097][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.830330][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.830341][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.830361][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.955240][ T5583] hsr_slave_0: entered promiscuous mode [ 85.960800][ T5583] hsr_slave_1: entered promiscuous mode [ 86.059106][ T5586] hsr_slave_0: entered promiscuous mode [ 86.060403][ T5586] hsr_slave_1: entered promiscuous mode [ 86.061364][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 86.062094][ T5586] Cannot create hsr debugfs directory [ 86.147589][ T5585] hsr_slave_0: entered promiscuous mode [ 86.148922][ T5585] hsr_slave_1: entered promiscuous mode [ 86.152743][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 86.152765][ T5585] Cannot create hsr debugfs directory [ 86.165001][ T5584] hsr_slave_0: entered promiscuous mode [ 86.168122][ T5584] hsr_slave_1: entered promiscuous mode [ 86.170916][ T5584] debugfs: 'hsr0' already exists in 'hsr' [ 86.170937][ T5584] Cannot create hsr debugfs directory [ 86.200569][ T5582] hsr_slave_0: entered promiscuous mode [ 86.202793][ T5582] hsr_slave_1: entered promiscuous mode [ 86.203564][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 86.203585][ T5582] Cannot create hsr debugfs directory [ 86.535828][ T5592] Bluetooth: hci1: command tx timeout [ 86.535860][ T5592] Bluetooth: hci0: command tx timeout [ 86.617569][ T4898] Bluetooth: hci2: command tx timeout [ 86.617649][ T5592] Bluetooth: hci4: command tx timeout [ 86.696236][ T5592] Bluetooth: hci3: command tx timeout [ 86.711573][ T197] cfg80211: failed to load regulatory.db [ 87.285996][ T5583] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.337015][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.352064][ T5583] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.390564][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.393759][ T5583] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.429754][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.451975][ T5583] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.490750][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.586158][ T5586] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.614823][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.624182][ T5586] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.653105][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.655495][ T5586] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.691808][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.729080][ T5586] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.751381][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.869783][ T5584] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.903357][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.918271][ T5584] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.958898][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.961252][ T5584] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.983998][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.013426][ T5584] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.038766][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.193935][ T5582] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.219599][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.234243][ T5582] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.261734][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.271757][ T5582] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.329709][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.360768][ T5582] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.388578][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.477469][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.523854][ T5585] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.550531][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.568450][ T5585] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.610449][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.614936][ T5585] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.615866][ T5592] Bluetooth: hci1: command tx timeout [ 88.625735][ T5592] Bluetooth: hci0: command tx timeout [ 88.650700][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.655380][ T5585] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.688471][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.695888][ T4898] Bluetooth: hci2: command tx timeout [ 88.696021][ T5592] Bluetooth: hci4: command tx timeout [ 88.741437][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.744756][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.777062][ T5592] Bluetooth: hci3: command tx timeout [ 88.805433][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.814498][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.885015][ T2953] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.885197][ T2953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.921442][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.962350][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.962476][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.984597][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.999098][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.999242][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.077997][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.126871][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.127049][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.179386][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.189568][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.189735][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.408752][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.463613][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.536697][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.536787][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.578771][ T2953] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.578870][ T2953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.658524][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.729246][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.729357][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.831454][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.831617][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.333879][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.692320][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.699879][ T5592] Bluetooth: hci0: command tx timeout [ 90.699908][ T5592] Bluetooth: hci1: command tx timeout [ 90.740724][ T5583] veth0_vlan: entered promiscuous mode [ 90.775861][ T4898] Bluetooth: hci4: command tx timeout [ 90.775891][ T4898] Bluetooth: hci2: command tx timeout [ 90.823597][ T5583] veth1_vlan: entered promiscuous mode [ 90.857498][ T5592] Bluetooth: hci3: command tx timeout [ 91.004598][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.085440][ T5586] veth0_vlan: entered promiscuous mode [ 91.103702][ T5583] veth0_macvtap: entered promiscuous mode [ 91.143216][ T5583] veth1_macvtap: entered promiscuous mode [ 91.190317][ T5586] veth1_vlan: entered promiscuous mode [ 91.215685][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.288345][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.359700][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.478992][ T5586] veth0_macvtap: entered promiscuous mode [ 91.569085][ T5586] veth1_macvtap: entered promiscuous mode [ 91.632341][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.648318][ T5582] veth0_vlan: entered promiscuous mode [ 91.862640][ T5582] veth1_vlan: entered promiscuous mode [ 91.875822][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.941059][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.979639][ T3901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.979665][ T3901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.096333][ T5584] veth0_vlan: entered promiscuous mode [ 92.148505][ T3095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.148524][ T3095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.299681][ T5585] veth0_vlan: entered promiscuous mode [ 92.305207][ T5584] veth1_vlan: entered promiscuous mode [ 92.312576][ T5582] veth0_macvtap: entered promiscuous mode [ 92.494218][ T5582] veth1_macvtap: entered promiscuous mode [ 92.543118][ T5585] veth1_vlan: entered promiscuous mode [ 92.632778][ T1045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.632795][ T1045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.701233][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.749522][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.754623][ T5584] veth0_macvtap: entered promiscuous mode [ 92.839190][ T5584] veth1_macvtap: entered promiscuous mode [ 92.933443][ T5585] veth0_macvtap: entered promiscuous mode [ 92.944381][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.944398][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.051670][ T5585] veth1_macvtap: entered promiscuous mode [ 93.126566][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.188000][ T5713] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.325295][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.401423][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.413266][ T5713] usb 4-1: Using ep0 maxpacket: 8 [ 93.422877][ T5713] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 93.444575][ T5713] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 93.444599][ T5713] usb 4-1: config 0 has no interface number 0 [ 93.444645][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.489441][ T5713] usb 4-1: config 0 descriptor?? [ 93.591010][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.641556][ T5713] viperboard 4-1:0.143: version 0.00 found at bus 004 address 002 [ 93.795931][ T1045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.795948][ T1045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.015665][ T998] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.068755][ T5713] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 94.068784][ T5713] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 94.211186][ T998] usb 1-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 94.227250][ T998] usb 1-1: config index 0 descriptor too short (expected 34, got 16) [ 94.227274][ T998] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 94.227290][ T998] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 94.227321][ T998] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.448665][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.448682][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.469101][ T5713] usb 4-1: USB disconnect, device number 2 [ 94.806005][ T1045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.806023][ T1045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.839724][ T5788] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 94.893187][ T1133] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.157165][ T5789] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 95.250091][ T5790] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 95.308337][ T3901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.308355][ T3901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.376130][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.377905][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.739870][ T5800] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.775638][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.775656][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.776136][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.858660][ T3901] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.864666][ T1045] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.864846][ T1045] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.878236][ T1045] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.053193][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.053206][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.149521][ T1045] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.149729][ T1045] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.149905][ T1045] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.150411][ T1045] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.150692][ T1045] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.150879][ T1045] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.849138][ T1045] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.981917][ T1045] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.153569][ T1128] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.155495][ T1128] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.156446][ T1128] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.157128][ T1128] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.199496][ T5817] UDC core: g1: couldn't find an available UDC or it's busy [ 97.542197][ T5721] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.674129][ T5825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.713081][ T5721] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 97.715316][ T5721] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.715360][ T5721] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 97.715383][ T5721] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 97.715419][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.769108][ T5822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.824309][ T5820] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 97.841601][ T5721] gspca_main: spca501-2.14.0 probing 0000:0000 [ 97.872120][ T5822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.952584][ T5822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.123838][ T5713] usb 1-1: USB disconnect, device number 2 [ 98.269966][ T5721] gspca_spca501: reg write: error -71 [ 98.269981][ T5721] spca501 2-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 98.270070][ T5721] spca501 2-1:1.0: probe with driver spca501 failed with error -22 [ 98.348794][ T5721] usb 2-1: USB disconnect, device number 2 [ 99.073028][ T5848] process 'syz.1.21' launched './file0' with NULL argv: empty string added [ 99.085683][ T5721] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.267366][ T5722] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.268603][ T5721] usb 5-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice= 0.01 [ 99.295502][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.428046][ T5722] usb 1-1: Using ep0 maxpacket: 8 [ 99.430008][ T5722] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 99.432500][ T5722] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 99.432521][ T5722] usb 1-1: config 0 has no interface number 0 [ 99.432559][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.496581][ T5721] ipw 5-1:1.0: IPWireless converter converter detected [ 99.520785][ T5722] usb 1-1: config 0 descriptor?? [ 99.551655][ T5721] usb 5-1: IPWireless converter converter now attached to ttyUSB0 [ 99.609211][ T998] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 99.687879][ T5722] viperboard 1-1:0.143: version 0.00 found at bus 001 address 003 [ 100.313467][ T5722] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 100.313562][ T5722] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 100.626299][ T5722] usb 1-1: USB disconnect, device number 3 [ 101.067373][ T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 101.305053][ T5721] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.516832][ T5721] usb 2-1: Using ep0 maxpacket: 8 [ 101.520081][ T5721] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 101.524651][ T5721] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 101.524720][ T5721] usb 2-1: config 0 has no interface number 0 [ 101.524761][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.774139][ T5721] usb 2-1: config 0 descriptor?? [ 101.891835][ T10] usb 4-1: New USB device found, idVendor=2184, idProduct=001c, bcdDevice= 1.00 [ 101.957606][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 101.957646][ T10] usb 4-1: can't read configurations, error -71 [ 102.027896][ T5721] viperboard 2-1:0.143: version 0.00 found at bus 002 address 003 [ 102.359323][ T998] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 102.360463][ T998] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 102.360494][ T998] usb 3-1: can't read configurations, error -71 [ 102.410692][ T5721] viperboard-i2c viperboard-i2c.1.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 102.410920][ T5721] viperboard-i2c viperboard-i2c.1.auto: probe with driver viperboard-i2c failed with error -5 [ 102.582298][ T5721] usb 2-1: USB disconnect, device number 3 [ 103.287511][ T5892] loop0: detected capacity change from 0 to 2048 [ 103.330926][ T5898] loop2: detected capacity change from 0 to 2048 [ 103.355490][ T5894] loop1: detected capacity change from 0 to 2048 [ 103.397898][ T5892] loop3: detected capacity change from 0 to 2048 [ 103.399472][ T5892] loop4: detected capacity change from 0 to 2048 [ 104.536378][ T998] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.559139][ T5784] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 104.609173][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 104.686447][ T998] usb 3-1: New USB device found, idVendor=0552, idProduct=a4a1, bcdDevice= 0.40 [ 104.687981][ T998] usb 3-1: config index 0 descriptor too short (expected 315, got 58) [ 104.688003][ T998] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.688019][ T998] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 104.688049][ T998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.718016][ T5784] usb 4-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice= 1.00 [ 104.719376][ T5784] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 104.719400][ T5784] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 256 [ 104.730305][ T5784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.730327][ T5784] usb 4-1: Product: syz [ 104.730339][ T5784] usb 4-1: Manufacturer: syz [ 104.730351][ T5784] usb 4-1: SerialNumber: syz [ 104.756405][ T10] usb 2-1: New USB device found, idVendor=1110, idProduct=900f, bcdDevice= 0.00 [ 104.766674][ T10] usb 2-1: config 1 interface 2 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 104.766698][ T10] usb 2-1: config 1 interface 2 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 104.770145][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.770165][ T10] usb 2-1: Product: syz [ 104.770177][ T10] usb 2-1: Manufacturer: syz [ 104.770189][ T10] usb 2-1: SerialNumber: syz [ 104.950451][ T5920] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 104.964203][ T5920] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 105.046857][ T998] usb 3-1: config 0 descriptor?? [ 106.582267][ T10] usb 2-1: [UEAGLE-ATM] urb submission failed with error -19 [ 106.582779][ T10] ueagle-atm 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 106.798698][ T10] usb 2-1: USB disconnect, device number 4 [ 107.163293][ T5784] f81232 4-1:1.0: f81232 converter detected [ 107.221008][ T5784] usb 4-1: f81232 converter now attached to ttyUSB1 [ 107.322738][ T5784] usb 4-1: USB disconnect, device number 5 [ 107.336990][ T10] usb 3-1: USB disconnect, device number 4 [ 107.500794][ T5784] f81232 ttyUSB1: f81232 converter now disconnected from ttyUSB1 [ 107.513393][ T5784] f81232 4-1:1.0: device disconnected [ 108.055664][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 108.206540][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00 [ 108.207824][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.212638][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.80'. [ 108.259209][ T5992] netlink: 16 bytes leftover after parsing attributes in process `syz.3.78'. [ 108.694937][ T10] ljca 2-1:1.0: probe with driver ljca failed with error -110 [ 109.131201][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 109.171212][ T6010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 109.281852][ T10] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 1.00 [ 109.285368][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.339507][ T6010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 109.409240][ T6013] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 109.467738][ T10] usb 4-1: USB2VGA dongle found at address 6 [ 109.620464][ T10] usb 4-1: Allocated 8 output buffers [ 110.255680][ T48] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 110.407033][ T48] usb 3-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice= 1.00 [ 110.415007][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.415031][ T48] usb 3-1: Product: syz [ 110.415044][ T48] usb 3-1: Manufacturer: syz [ 110.415056][ T48] usb 3-1: SerialNumber: syz [ 110.796082][ T48] usb 3-1: reset high-speed USB device number 5 using dummy_hcd [ 111.614519][ T5873] usb 2-1: USB disconnect, device number 5 [ 111.827365][ T10] usb 4-1: Failed to early initialize device [ 111.921625][ T10] usb 4-1: USB disconnect, device number 6 [ 112.095282][ T6071] lo: entered allmulticast mode [ 112.117623][ T6069] lo: left allmulticast mode [ 112.212802][ T6073] tipc: Started in network mode [ 112.213044][ T6073] tipc: Node identity 7f000001, cluster identity 4711 [ 112.503597][ T6073] tipc: Enabled bearer , priority 10 [ 112.894191][ T48] usb 3-1: Direct firmware load for ueagle-atm/930-fpga.bin failed with error -2 [ 112.894218][ T48] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/930-fpga.bin [ 113.187010][ T5721] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 113.351227][ T5721] usb 2-1: New USB device found, idVendor=2040, idProduct=c604, bcdDevice= 0.01 [ 113.399296][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.462289][ T4898] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.510231][ T4898] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.511552][ T4898] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.542151][ T4898] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.547626][ T4898] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.559544][ T5722] tipc: Node number set to 2130706433 [ 113.777602][ T5721] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx DVBT' in warm state [ 114.090623][ T5721] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 114.093441][ T5721] dvbdev: DVB: registering new adapter (Hauppauge 126xxx DVBT) [ 114.093534][ T5721] usb 2-1: media controller created [ 114.230092][ T5721] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.692966][ T6123] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.694014][ T6123] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.700613][ T6123] bridge_slave_0: entered allmulticast mode [ 115.709093][ T6123] bridge_slave_0: entered promiscuous mode [ 115.732189][ T6123] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.732345][ T6123] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.732557][ T6123] bridge_slave_1: entered allmulticast mode [ 115.736193][ T5592] Bluetooth: hci5: command tx timeout [ 115.776648][ T6123] bridge_slave_1: entered promiscuous mode [ 115.881677][ T6123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.900049][ T6123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.020342][ T6123] team0: Port device team_slave_0 added [ 116.031622][ T6123] team0: Port device team_slave_1 added [ 116.106344][ T6123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.106358][ T6123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.106375][ T6123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.109073][ T6123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.109085][ T6123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.109105][ T6123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.117105][ T5721] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-71 [ 116.117178][ T5721] error writing reg: 0xff, val: 0x00 [ 116.688385][ T6123] hsr_slave_0: entered promiscuous mode [ 116.690438][ T6123] hsr_slave_1: entered promiscuous mode [ 116.691869][ T6123] debugfs: 'hsr0' already exists in 'hsr' [ 116.725440][ T6123] Cannot create hsr debugfs directory [ 117.028971][ T5721] dvb_usb_mxl111sf 2-1:1.0: probe with driver dvb_usb_mxl111sf failed with error -71 [ 117.093292][ T5721] usb 2-1: USB disconnect, device number 6 [ 117.525739][ T5721] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 117.711913][ T5721] usb 2-1: New USB device found, idVendor=9710, idProduct=7830, bcdDevice= 1.00 [ 117.715132][ T5721] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 117.715163][ T5721] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.715263][ T5721] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.743788][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.743811][ T5721] usb 2-1: Product: syz [ 117.743823][ T5721] usb 2-1: Manufacturer: syz [ 117.743884][ T5721] usb 2-1: SerialNumber: syz [ 117.820118][ T5592] Bluetooth: hci5: command tx timeout [ 117.967360][ T6123] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 118.070798][ T6123] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 118.087512][ T6123] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 118.266873][ T6123] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 118.307607][ T6123] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 118.408904][ T6521] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 118.471945][ T6123] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 118.493840][ T6521] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 118.557142][ T6123] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 118.579469][ T6521] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 118.609344][ T6123] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 118.787201][ T5721] usb 2-1: Cannot read MAC address [ 118.787978][ T5721] MOSCHIP usb-ethernet driver 2-1:1.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 118.958255][ T5721] usb 2-1: USB disconnect, device number 7 [ 119.129815][ T6559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.305221][ T6559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.400179][ T6559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.434358][ T6559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.607047][ T6584] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 119.852928][ T6123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.895663][ T5592] Bluetooth: hci5: command tx timeout [ 119.898945][ T6123] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.922433][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.922592][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.952560][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.952683][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.145689][ T5721] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 120.303305][ T5721] usb 2-1: New USB device found, idVendor=0bda, idProduct=2831, bcdDevice= 0.00 [ 120.344103][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 120.344127][ T5721] usb 2-1: Product: syz [ 120.344189][ T5721] usb 2-1: Manufacturer: syz [ 121.743820][ T5721] dvb_usb_rtl28xxu 2-1:1.0: chip type detection failed -110 [ 121.743972][ T5721] dvb_usb_rtl28xxu 2-1:1.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 121.978701][ T5592] Bluetooth: hci5: command tx timeout [ 122.030366][ T6123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.737226][ T10] usb 2-1: USB disconnect, device number 8 [ 122.852074][ T6123] veth0_vlan: entered promiscuous mode [ 122.883135][ T6123] veth1_vlan: entered promiscuous mode [ 122.934177][ T6123] veth0_macvtap: entered promiscuous mode [ 122.954049][ T6123] veth1_macvtap: entered promiscuous mode [ 123.044945][ T6123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.099633][ T6123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.055855][ T1045] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.055962][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.055992][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.056335][ T1136] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.136173][ T1015] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.136837][ T2953] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.236725][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.236969][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.247861][ T5873] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 124.429698][ T5873] usb 2-1: New USB device found, idVendor=04b4, idProduct=5500, bcdDevice= 1.00 [ 124.431490][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.486688][ T5873] cypress_m8 2-1:1.0: HID->COM RS232 Adapter converter detected [ 125.406705][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 125.558732][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 125.560559][ T10] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 125.563421][ T10] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 125.563442][ T10] usb 6-1: config 0 has no interface number 0 [ 125.563485][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.628630][ T10] usb 6-1: config 0 descriptor?? [ 125.756580][ T10] viperboard 6-1:0.143: version 0.00 found at bus 006 address 002 [ 125.906983][ T10] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 125.907025][ T10] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 125.939355][ T6773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.941341][ T6773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.948468][ T5874] usb 6-1: USB disconnect, device number 2 [ 127.009857][ T5873] usb 2-1: HID->COM RS232 Adapter converter now attached to ttyUSB1 [ 127.038933][ T5873] usb 2-1: USB disconnect, device number 9 [ 127.060666][ T5873] cyphidcom ttyUSB1: HID->COM RS232 Adapter converter now disconnected from ttyUSB1 [ 127.061476][ T5873] cypress_m8 2-1:1.0: device disconnected [ 127.459955][ T6878] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 127.713328][ T6878] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 127.770116][ T6899] iommufd_mock iommufd_mock2: Adding to iommu group 0 [ 128.409216][ T4898] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 128.454085][ T4898] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 128.467754][ T4898] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 128.470265][ T4898] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 128.472863][ T4898] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 129.305797][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 129.332179][ T998] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 129.485788][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 129.486714][ T10] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 129.488879][ T10] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 129.488900][ T10] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 129.488917][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 129.488959][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 129.488978][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 129.488999][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 129.489034][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.490979][ T998] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 129.491771][ T998] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 129.611532][ T10] usb 2-1: config 0 descriptor?? [ 129.620014][ T998] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.620036][ T998] usb 6-1: Product: syz [ 129.620108][ T998] usb 6-1: Manufacturer: syz [ 129.620121][ T998] usb 6-1: SerialNumber: syz [ 129.897209][ T6958] usb usb7: usbfs: interface 0 claimed by hub while 'syz.1.247' sets config #1 [ 130.010184][ T10] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 130.032528][ T10] usb 2-1: USB disconnect, device number 10 [ 130.129715][ T10] usblp0: removed [ 130.535816][ T4898] Bluetooth: hci6: command tx timeout [ 131.353694][ T7062] kvm_intel: VMCS ffff8880634ad000, last attempted VM-entry on CPU 0 [ 131.353713][ T7062] kvm_intel: *** Guest State *** [ 131.353720][ T7062] kvm_intel: CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffefff7 [ 131.353826][ T7062] kvm_intel: CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=fffffffffffff871 [ 131.353840][ T7062] kvm_intel: CR3 = 0x0000000000000000 [ 131.353851][ T7062] kvm_intel: PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 131.353864][ T7062] kvm_intel: PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 131.353872][ T7062] kvm_intel: RSP = 0x000000000000000d RIP = 0x0000000000070000 [ 131.353883][ T7062] kvm_intel: RFLAGS=0x00008342 DR7 = 0x0000000000000400 [ 131.353899][ T7062] kvm_intel: Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 131.353922][ T7062] kvm_intel: CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 131.353951][ T7062] kvm_intel: DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 131.353972][ T7062] kvm_intel: SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 131.353993][ T7062] kvm_intel: ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 131.354015][ T7062] kvm_intel: FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 131.354035][ T7062] kvm_intel: GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 131.354051][ T7062] kvm_intel: GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 131.354070][ T7062] kvm_intel: LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 131.354087][ T7062] kvm_intel: IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 131.354106][ T7062] kvm_intel: TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 131.354121][ T7062] kvm_intel: EFER= 0x0000000000000000 [ 131.354130][ T7062] kvm_intel: PAT = 0x0007040600070406 [ 131.354141][ T7062] kvm_intel: DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 131.354153][ T7062] kvm_intel: Interruptibility = 00000000 ActivityState = 00000000 [ 131.354166][ T7062] kvm_intel: *** Host State *** [ 131.354174][ T7062] kvm_intel: RIP = 0xffffffff8b44ce70 RSP = 0xffffc9000dcd7478 [ 131.354195][ T7062] kvm_intel: CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 131.354213][ T7062] kvm_intel: FSBase=00007fed8ee566c0 GSBase=ffff888125c3a000 TRBase=fffffe0000003000 [ 131.354230][ T7062] kvm_intel: GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 131.354246][ T7062] kvm_intel: CR0=0000000080050033 CR3=000000003ef94000 CR4=00000000003526f0 [ 131.354264][ T7062] kvm_intel: Sysenter RSP=fffffe0000003000 CS:RIP=0010:ffffffff81001e70 [ 131.354279][ T7062] kvm_intel: EFER= 0x0000000000000d01 [ 131.354287][ T7062] kvm_intel: PAT = 0x0407050600070106 [ 131.354303][ T7062] kvm_intel: *** Control State *** [ 131.354309][ T7062] kvm_intel: CPUBased=0xb5986dfa SecondaryExec=0x000000e2 TertiaryExec=0x0000000000000000 [ 131.354321][ T7062] kvm_intel: PinBased=0x0000007f EntryControls=0000d1ff ExitControls=002befff [ 131.354336][ T7062] kvm_intel: ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 131.354348][ T7062] kvm_intel: VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 131.354358][ T7062] kvm_intel: VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 131.354369][ T7062] kvm_intel: reason=80000021 qualification=0000000000000000 [ 131.354378][ T7062] kvm_intel: IDTVectoring: info=00000000 errcode=00000000 [ 131.354388][ T7062] kvm_intel: TSC Offset = 0xffffffb8e5d7e2c0 [ 131.354397][ T7062] kvm_intel: EPT pointer = 0x00000000611d205e [ 131.354406][ T7062] kvm_intel: Virtual processor ID = 0x0001 [ 131.861397][ T6948] ================================================================== [ 131.861409][ T6948] BUG: KASA[ 131.861409][ T6948] BUG: KASAN: stack-out-of-bounds in f_midi2_create_usb_configs+0x25ac/0x4380 [ 131.861443][ T6948] Write of size 1 at addr ffffc9000d9576f8 by task syz.5.244/6948 [ 131.861452][ T6948] [ 131.861467][ T6948] CPU: 1 UID: 0 PID: 6948 Comm: syz.5.244 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 131.861482][ T6948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.861493][ T6948] Call Trace: [ 131.861497][ T6948] [ 131.861501][ T6948] dump_stack_lvl+0xe8/0x150 [ 131.861517][ T6948] print_address_description+0x55/0x1e0 [ 131.861531][ T6948] ? f_midi2_create_usb_configs+0x25ac/0x4380 [ 131.861544][ T6948] print_report+0x58/0x70 [ 131.861555][ T6948] kasan_report+0x117/0x150 [ 131.861565][ T6948] ? krealloc_node_align_noprof+0x235/0x390 [ 131.861576][ T6948] ? f_midi2_create_usb_configs+0x25ac/0x4380 [ 131.861590][ T6948] f_midi2_create_usb_configs+0x25ac/0x4380 [ 131.861608][ T6948] f_midi2_bind+0x2690/0x2c40 [ 131.861620][ T6948] ? lockdep_hardirqs_on+0x7a/0x110 [ 131.861634][ T6948] ? __pfx_f_midi2_bind+0x10/0x10 [ 131.861645][ T6948] ? bus_for_each_dev+0x23e/0x2c0 [ 131.861654][ T6948] ? driver_register+0x23a/0x320 [ 131.861666][ T6948] ? usb_gadget_register_driver_owner+0xf9/0x270 [ 131.861678][ T6948] ? gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 131.861690][ T6948] ? vfs_write+0x61e/0xbb0 [ 131.861700][ T6948] ? ksys_write+0x156/0x270 [ 131.861709][ T6948] ? do_syscall_64+0x174/0x580 [ 131.861729][ T6948] ? __kmalloc_noprof+0x43b/0x780 [ 131.861738][ T6948] usb_add_function+0x290/0x930 [ 131.861747][ T6948] ? check_remote_wakeup_config+0x58/0x1c0 [ 131.861757][ T6948] configfs_composite_bind+0xde0/0x1410 [ 131.861769][ T6948] ? __pfx_configfs_composite_bind+0x10/0x10 [ 131.861778][ T6948] gadget_bind_driver+0x2ca/0x9e0 [ 131.861792][ T6948] ? __pfx_gadget_bind_driver+0x10/0x10 [ 131.861804][ T6948] really_probe+0x254/0xae0 [ 131.861817][ T6948] __driver_probe_device+0x1e8/0x360 [ 131.861829][ T6948] driver_probe_device+0x4f/0x240 [ 131.861841][ T6948] __driver_attach+0x339/0x600 [ 131.861852][ T6948] bus_for_each_dev+0x23e/0x2c0 [ 131.861861][ T6948] ? __pfx___driver_attach+0x10/0x10 [ 131.861872][ T6948] ? __pfx_bus_for_each_dev+0x10/0x10 [ 131.861882][ T6948] ? rt_spin_unlock+0x163/0x200 [ 131.861891][ T6948] bus_add_driver+0x348/0x670 [ 131.861901][ T6948] driver_register+0x23a/0x320 [ 131.861914][ T6948] usb_gadget_register_driver_owner+0xf9/0x270 [ 131.861933][ T6948] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 131.861946][ T6948] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 131.861960][ T6948] configfs_write_iter+0x33a/0x430 [ 131.861972][ T6948] vfs_write+0x61e/0xbb0 [ 131.861983][ T6948] ? __pfx_vfs_write+0x10/0x10 [ 131.861994][ T6948] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 131.862004][ T6948] ? lockdep_hardirqs_on+0x7a/0x110 [ 131.862015][ T6948] ? mutex_lock_nested+0x152/0x1d0 [ 131.862027][ T6948] ? fdget_pos+0x252/0x320 [ 131.862037][ T6948] ksys_write+0x156/0x270 [ 131.862048][ T6948] ? __pfx_ksys_write+0x10/0x10 [ 131.862060][ T6948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.862069][ T6948] do_syscall_64+0x174/0x580 [ 131.862079][ T6948] ? trace_irq_disable+0x3b/0x140 [ 131.862093][ T6948] ? clear_bhb_loop+0x70/0xc0 [ 131.862103][ T6948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.862112][ T6948] RIP: 0033:0x7f1e2180e0d9 [ 131.862125][ T6948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.862134][ T6948] RSP: 002b:00007f1e1fa45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 131.862151][ T6948] RAX: ffffffffffffffda RBX: 00007f1e21a96090 RCX: 00007f1e2180e0d9 [ 131.862158][ T6948] RDX: 000000000000000c RSI: 0000200000000380 RDI: 0000000000000003 [ 131.862164][ T6948] RBP: 00007f1e218a5024 R08: 0000000000000000 R09: 0000000000000000 [ 131.862170][ T6948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.862176][ T6948] R13: 00007f1e21a96128 R14: 00007f1e21a96090 R15: 00007ffd989da648 [ 131.862187][ T6948] [ 131.862190][ T6948] [ 131.862193][ T6948] The buggy address belongs to stack of task syz.5.244/6948 [ 131.862198][ T6948] and is located at offset 376 in frame: [ 131.862203][ T6948] f_midi2_bind+0x0/0x2c40 [ 131.862215][ T6948] [ 131.862217][ T6948] This frame has 6 objects: [ 131.862223][ T6948] [32, 40) 'card.i' [ 131.862227][ T6948] [64, 72) 'ump.i' [ 131.862232][ T6948] [96, 100) 'sw.i' [ 131.862237][ T6948] [112, 376) 'config' [ 131.862242][ T6948] [448, 464) 'string_fn' [ 131.862247][ T6948] [480, 496) 'strings2' [ 131.862252][ T6948] [ 131.862254][ T6948] The buggy address belongs to a 8-page vmalloc region starting at 0xffffc9000d950000 allocated at copy_process+0x820/0x4390 [ 131.862274][ T6948] The buggy address belongs to the physical page: [ 131.862287][ T6948] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60aaf [ 131.862296][ T6948] memcg:ffff888021b0ff82 [ 131.862300][ T6948] flags: 0x80000000000000(node=0|zone=1) [ 131.862314][ T6948] raw: 0080000000000000 0000000000000000 ffffea000182abc8 0000000000000000 [ 131.862322][ T6948] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff888021b0ff82 [ 131.862327][ T6948] page dumped because: kasan: bad access detected [ 131.862334][ T6948] page_owner tracks the page as allocated [ 131.862338][ T6948] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 1133, tgid 1133 (kworker/u8:9), ts 127025070049, free_ts 127022182979 [ 131.862354][ T6948] post_alloc_hook+0x1f9/0x250 [ 131.862367][ T6948] get_page_from_freelist+0x262a/0x26a0 [ 131.862376][ T6948] __alloc_frozen_pages_noprof+0x18d/0x380 [ 131.862385][ T6948] alloc_pages_mpol+0xce/0x280 [ 131.862395][ T6948] alloc_pages_noprof+0xd2/0x2f0 [ 131.862403][ T6948] __vmalloc_node_range_noprof+0x795/0x1730 [ 131.862416][ T6948] __vmalloc_node_noprof+0xc2/0x100 [ 131.862431][ T6948] dup_task_struct+0x2a0/0x8f0 [ 131.862440][ T6948] copy_process+0x820/0x4390 [ 131.862448][ T6948] kernel_clone+0x2d2/0x8d0 [ 131.862457][ T6948] user_mode_thread+0x110/0x180 [ 131.862466][ T6948] call_usermodehelper_exec_work+0x5c/0x230 [ 131.862475][ T6948] process_scheduled_works+0xa8e/0x14e0 [ 131.862484][ T6948] worker_thread+0xa47/0xfb0 [ 131.862493][ T6948] kthread+0x388/0x470 [ 131.862503][ T6948] ret_from_fork+0x514/0xb70 [ 131.862514][ T6948] page last free pid 5585 tgid 5585 stack trace: [ 131.862519][ T6948] __free_frozen_pages+0x10e7/0x11c0 [ 131.862531][ T6948] __slab_free+0x252/0x2a0 [ 131.862539][ T6948] qlist_free_all+0x99/0x100 [ 131.862550][ T6948] kasan_quarantine_reduce+0x148/0x160 [ 131.862561][ T6948] __kasan_slab_alloc+0x22/0x80 [ 131.862569][ T6948] __kmalloc_cache_noprof+0x351/0x6b0 [ 131.862576][ T6948] alloc_fdtable+0xc0/0x2c0 [ 131.862588][ T6948] dup_fd+0x821/0xb20 [ 131.862598][ T6948] copy_files+0xaf/0x120 [ 131.862606][ T6948] copy_process+0x1cd2/0x4390 [ 131.862615][ T6948] kernel_clone+0x2d2/0x8d0 [ 131.862624][ T6948] __x64_sys_clone+0x1b6/0x230 [ 131.862633][ T6948] do_syscall_64+0x174/0x580 [ 131.862642][ T6948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.862651][ T6948] [ 131.862653][ T6948] Memory state around the buggy address: [ 131.862658][ T6948] ffffc9000d957580: f1 f1 f1 f1 f8 f2 f2 f2 f8 f2 f2 f2 f8 f2 00 00 [ 131.862663][ T6948] ffffc9000d957600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 131.862669][ T6948] >ffffc9000d957680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f2 [ 131.862673][ T6948] ^ [ 131.862678][ T6948] ffffc9000d957700: f2 f2 f2 f2 f2 f2 f2 f2 00 00 f2 f2 00 00 f3 f3 [ 131.862684][ T6948] ffffc9000d957780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 131.862688][ T6948] ================================================================== [ 131.874156][ T6948] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 131.874174][ T6948] CPU: 1 UID: 0 PID: 6948 Comm: syz.5.244 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 131.874196][ T6948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.874206][ T6948] Call Trace: [ 131.874213][ T6948] [ 131.874220][ T6948] vpanic+0x56c/0xa60 [ 131.874253][ T6948] ? rcu_is_watching+0x15/0xb0 [ 131.874273][ T6948] ? __pfx_vpanic+0x10/0x10 [ 131.874299][ T6948] panic+0xc5/0xd0 [ 131.874320][ T6948] ? __pfx_panic+0x10/0x10 [ 131.874343][ T6948] ? preempt_schedule_thunk+0x16/0x40 [ 131.874364][ T6948] ? preempt_schedule_thunk+0x16/0x40 [ 131.874382][ T6948] ? f_midi2_create_usb_configs+0x25ac/0x4380 [ 131.874406][ T6948] check_panic_on_warn+0x89/0xb0 [ 131.874428][ T6948] ? f_midi2_create_usb_configs+0x25ac/0x4380 [ 131.874452][ T6948] end_report+0x73/0x170 [ 131.874469][ T6948] ? f_midi2_create_usb_configs+0x25ac/0x4380 [ 131.874490][ T6948] kasan_report+0x128/0x150 [ 131.874507][ T6948] ? krealloc_node_align_noprof+0x235/0x390 [ 131.874525][ T6948] ? f_midi2_create_usb_configs+0x25ac/0x4380 [ 131.874553][ T6948] f_midi2_create_usb_configs+0x25ac/0x4380 [ 131.874584][ T6948] f_midi2_bind+0x2690/0x2c40 [ 131.874605][ T6948] ? lockdep_hardirqs_on+0x7a/0x110 [ 131.874632][ T6948] ? __pfx_f_midi2_bind+0x10/0x10 [ 131.874652][ T6948] ? bus_for_each_dev+0x23e/0x2c0 [ 131.874669][ T6948] ? driver_register+0x23a/0x320 [ 131.874690][ T6948] ? usb_gadget_register_driver_owner+0xf9/0x270 [ 131.874712][ T6948] ? gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 131.874735][ T6948] ? vfs_write+0x61e/0xbb0 [ 131.874752][ T6948] ? ksys_write+0x156/0x270 [ 131.874769][ T6948] ? do_syscall_64+0x174/0x580 [ 131.874804][ T6948] ? __kmalloc_noprof+0x43b/0x780 [ 131.874821][ T6948] usb_add_function+0x290/0x930 [ 131.874837][ T6948] ? check_remote_wakeup_config+0x58/0x1c0 [ 131.874857][ T6948] configfs_composite_bind+0xde0/0x1410 [ 131.874879][ T6948] ? __pfx_configfs_composite_bind+0x10/0x10 [ 131.874896][ T6948] gadget_bind_driver+0x2ca/0x9e0 [ 131.874929][ T6948] ? __pfx_gadget_bind_driver+0x10/0x10 [ 131.874950][ T6948] really_probe+0x254/0xae0 [ 131.874974][ T6948] __driver_probe_device+0x1e8/0x360 [ 131.874997][ T6948] driver_probe_device+0x4f/0x240 [ 131.875019][ T6948] __driver_attach+0x339/0x600 [ 131.875041][ T6948] bus_for_each_dev+0x23e/0x2c0 [ 131.875059][ T6948] ? __pfx___driver_attach+0x10/0x10 [ 131.875079][ T6948] ? __pfx_bus_for_each_dev+0x10/0x10 [ 131.875098][ T6948] ? rt_spin_unlock+0x163/0x200 [ 131.875114][ T6948] bus_add_driver+0x348/0x670 [ 131.875134][ T6948] driver_register+0x23a/0x320 [ 131.875157][ T6948] usb_gadget_register_driver_owner+0xf9/0x270 [ 131.875180][ T6948] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 131.875202][ T6948] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 131.875225][ T6948] configfs_write_iter+0x33a/0x430 [ 131.875245][ T6948] vfs_write+0x61e/0xbb0 [ 131.875267][ T6948] ? __pfx_vfs_write+0x10/0x10 [ 131.875287][ T6948] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 131.875305][ T6948] ? lockdep_hardirqs_on+0x7a/0x110 [ 131.875324][ T6948] ? mutex_lock_nested+0x152/0x1d0 [ 131.875346][ T6948] ? fdget_pos+0x252/0x320 [ 131.875365][ T6948] ksys_write+0x156/0x270 [ 131.875384][ T6948] ? __pfx_ksys_write+0x10/0x10 [ 131.875406][ T6948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.875423][ T6948] do_syscall_64+0x174/0x580 [ 131.875441][ T6948] ? trace_irq_disable+0x3b/0x140 [ 131.875464][ T6948] ? clear_bhb_loop+0x70/0xc0 [ 131.875482][ T6948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.875499][ T6948] RIP: 0033:0x7f1e2180e0d9 [ 131.875516][ T6948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.875529][ T6948] RSP: 002b:00007f1e1fa45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 131.875547][ T6948] RAX: ffffffffffffffda RBX: 00007f1e21a96090 RCX: 00007f1e2180e0d9 [ 131.875559][ T6948] RDX: 000000000000000c RSI: 0000200000000380 RDI: 0000000000000003 [ 131.875569][ T6948] RBP: 00007f1e218a5024 R08: 0000000000000000 R09: 0000000000000000 [ 131.875580][ T6948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.875590][ T6948] R13: 00007f1e21a96128 R14: 00007f1e21a96090 R15: 00007ffd989da648 [ 131.875607][ T6948] [ 131.875811][ T6948] Kernel Offset: disabled