last executing test programs: 8.054723008s ago: executing program 0 (id=1): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) chdir(&(0x7f0000000000)='.\x00') 7.723117151s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_piix/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='8086 7010\x00', 0xa) close(r0) 7.508302664s ago: executing program 1 (id=7): r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000406d0499c200010102000109022200010100a032090400000103000000092110010001221f000705810308000a"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00221f00000005010904a101050109300931150025ff7508950281021901290795079102c0"], 0x0}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/hid/drivers/logitech/0003:046D:C299.0001/range\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='270\n\x00', 0x4) write(r1, &(0x7f0000000500)='900\n\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/hid/drivers/logitech/0003:046D:C299.0002/range\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='270\n\x00', 0x4) write(r2, &(0x7f0000000500)='900\n\x00', 0x4) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 7.330779269s ago: executing program 2 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='8\n\x00', 0x2) r1 = fsopen(&(0x7f0000000600)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source\x00', &(0x7f0000000800)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000900)='addr\x00', &(0x7f0000000a00)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b00)='clientaddr\x00', &(0x7f0000000c00)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000d00)='vers\x00', &(0x7f0000000e00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 6.831559646s ago: executing program 2 (id=9): r0 = socket$inet_tcp(0x2, 0x1, 0x6) write(r0, &(0x7f0000000040)="00000081fe534d42", 0x8) 6.81127468s ago: executing program 2 (id=10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068ae63, &(0x7f0000000080)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000090, 0x0, 0x20}]}) ioctl$KVM_SET_LAPIC(r2, 0x4008ae8f, &(0x7f0000001000)={'0000\x00'}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000070}]}) 6.682469646s ago: executing program 2 (id=11): r0 = syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02000200"], 0x0) syz_usb_ep_write(r0, 0x8d, 0x4, &(0x7f0000000200)='\x00\x00\x00\x00') nanosleep(&(0x7f0000000300)={0x1}, 0x0) 6.526792766s ago: executing program 0 (id=12): syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ab0701fc00000000000109022000010100000009040000020803f1000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000100)={0xa}, 0x0) 4.739355695s ago: executing program 1 (id=16): r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c80000001010203010902290002010080000904000002ff00000007058103400001070501034000010904010000ff000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x9, &(0x7f0000000400)={0x2, 0xb0, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000500)={0x1}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000640)) 4.547527519s ago: executing program 3 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys_mnt\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_mnt/bus/pci/slots/1/attention\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/bus/pci/slots/0/attention\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys_mnt/bus/pci/slots/0000:00:01.0/attention\x00', 0x0, 0x0) 4.53811474s ago: executing program 3 (id=18): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001040)=""/4096, 0x1000) 4.484152421s ago: executing program 3 (id=19): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3e, 0x1, 0x10078, 0x40, 0x0, 0x0, 0x40, 0x38, 0x1, 0x40}, [{0x1, 0x7, 0x0, 0x10000, 0x10000, 0x1000, 0x1000, 0x1000}], "0f0104180f010c180f012418b83c0000000f0500"/4096}, 0x10b8) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000200), &(0x7f0000000300), 0x0) 4.375541928s ago: executing program 3 (id=20): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_REGS(0xa, 0x8090ae81, &(0x7f0000000100)) ioctl$KVM_GET_SREGS(0xa, 0x8138ae83, &(0x7f0000000200)) ioctl$KVM_GET_MP_STATE(0xa, 0x8004ae98, &(0x7f0000000300)) ioctl$KVM_GET_REGS(0xb, 0x8090ae81, &(0x7f0000000100)) ioctl$KVM_GET_SREGS(0xb, 0x8138ae83, &(0x7f0000000200)) ioctl$KVM_GET_MP_STATE(0xb, 0x8004ae98, &(0x7f0000000300)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup2(r2, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_REGS(0xa, 0x8090ae81, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) dup2(r3, 0xb) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_REGS(0xb, 0x8090ae81, &(0x7f0000000100)) 4.264117416s ago: executing program 3 (id=21): r0 = socket$inet_icmp(0x2, 0x2, 0x1) close(r0) mkdir(&(0x7f0000000000)='config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffff9c, &(0x7f0000000400)='config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='0x1d6b\x00', 0x6) close(r1) r2 = openat(0xffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0x0104\x00', 0x6) close(r2) mkdir(&(0x7f0000000800)='config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffff9c, &(0x7f0000000900)='config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r3, &(0x7f0000000a00)='fedcba9876543210\x00', 0x10) close(r3) mkdir(&(0x7f0000000b00)='config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000c00)='config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) r4 = openat(0xffffff9c, &(0x7f0000000f00)='config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000001000)='dummy_udc\x00', 0x9) close(r4) nanosleep(&(0x7f0000001100)={0x1}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000001200), 0x15, 0x2) r6 = syz_open_dev$usbfs(&(0x7f0000001300), 0x1f, 0x2) r7 = syz_open_dev$usbfs(&(0x7f0000001400), 0x16, 0x2) r8 = syz_open_dev$usbfs(&(0x7f0000001500), 0x20, 0x2) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000001600)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x80045505, &(0x7f0000001700)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000001800)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x80045505, &(0x7f0000001900)=0x1) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f0000001a00)) ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f0000001b00)) ioctl$USBDEVFS_SETINTERFACE(r7, 0x80085504, &(0x7f0000001c00)) ioctl$USBDEVFS_SETINTERFACE(r8, 0x80085504, &(0x7f0000001d00)) 4.219120995s ago: executing program 2 (id=22): syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501dc6600001010203010902190001010080320904000001ff00000007058102400000"], 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/5-1/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='0\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/5-1/power/control\x00', 0x1, 0x0) write(r1, &(0x7f0000000480)='auto\x00', 0x5) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='0\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/1-1/power/control\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='auto\x00', 0x5) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/5-1/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='0\x00', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/5-1/power/control\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='auto\x00', 0x5) close(r5) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/5-1/power/control\x00', 0x1, 0x0) write(r6, &(0x7f0000000580)='on\x00', 0x3) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/1-1/power/control\x00', 0x1, 0x0) write(r7, &(0x7f0000000580)='on\x00', 0x3) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/5-1/power/control\x00', 0x1, 0x0) write(r8, &(0x7f0000000580)='on\x00', 0x3) close(r8) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r9, &(0x7f0000000600), 0x0) 3.395735413s ago: executing program 0 (id=23): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x1, 0x0) write(r0, &(0x7f0000000100)='core\n\x00', 0x5) 3.37361994s ago: executing program 0 (id=24): r0 = syz_usb_connect$hid(0x2, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000402404345500010000000109021900010100e000090400000109000000070581030200ff"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.803362102s ago: executing program 0 (id=25): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') openat(0xffffffffffffff9c, &(0x7f0000000000)='sys\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='sys/bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='sys/bus/i2c\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='sys/bus/i2c/devices\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='dev\x00', 0x0, 0x0) getuid() getgid() 2.259652178s ago: executing program 1 (id=26): syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004010110f900000010203010902390003010080320904000001ffffff00070584034000010904010001ffffff00070502024000000904020001ffffff0007058202400000"], 0x0) nanosleep(&(0x7f0000000300)={0x5}, 0x0) 71.674022ms ago: executing program 2 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:06.0/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='dwc3-pci\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:06.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='0000:00:06.0\n\x00', 0xd) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/dwc3-pci/bind\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='0000:00:06.0\n\x00', 0xd) close(r2) 0s ago: executing program 3 (id=28): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1, 0x0, 0x100000, 0x2000, &(0x7f0000100000/0x2000)=nil}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@code={0xa, 0x1d, {"48c704250000100078563412"}}], 0x1d}) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1, 0x0, 0x100000, 0x0, &(0x7f0000100000/0x2000)=nil}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.23' (ED25519) to the list of known hosts. [ 64.126642][ T5596] cgroup: Unknown subsys name 'net' [ 64.210855][ T5596] cgroup: Unknown subsys name 'cpuset' [ 64.220377][ T5596] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.616341][ T5596] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.739985][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.742677][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.743154][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.744099][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.744891][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.836718][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.840400][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.842614][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.845428][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.846096][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.920071][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.927671][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.946985][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.947874][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.949544][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.950009][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.951257][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.951800][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.996177][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.997231][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.070870][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.071175][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.072191][ T5614] bridge_slave_0: entered allmulticast mode [ 69.073998][ T5614] bridge_slave_0: entered promiscuous mode [ 69.114840][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.115356][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.115474][ T5614] bridge_slave_1: entered allmulticast mode [ 69.117095][ T5614] bridge_slave_1: entered promiscuous mode [ 69.195594][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.233338][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.297632][ T5614] team0: Port device team_slave_0 added [ 69.326624][ T5614] team0: Port device team_slave_1 added [ 69.340360][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.340472][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.348886][ T5609] bridge_slave_0: entered allmulticast mode [ 69.351110][ T5609] bridge_slave_0: entered promiscuous mode [ 69.394110][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.394217][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.394336][ T5609] bridge_slave_1: entered allmulticast mode [ 69.395965][ T5609] bridge_slave_1: entered promiscuous mode [ 69.398820][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.398835][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.398858][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.445702][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.445719][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.445742][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.523519][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.541652][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.616923][ T5614] hsr_slave_0: entered promiscuous mode [ 69.619291][ T5614] hsr_slave_1: entered promiscuous mode [ 69.644376][ T5609] team0: Port device team_slave_0 added [ 69.647200][ T5609] team0: Port device team_slave_1 added [ 69.659588][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.659891][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.660012][ T5619] bridge_slave_0: entered allmulticast mode [ 69.661651][ T5619] bridge_slave_0: entered promiscuous mode [ 69.665167][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.665261][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.665373][ T5617] bridge_slave_0: entered allmulticast mode [ 69.668065][ T5617] bridge_slave_0: entered promiscuous mode [ 69.713863][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.713959][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.714096][ T5619] bridge_slave_1: entered allmulticast mode [ 69.715901][ T5619] bridge_slave_1: entered promiscuous mode [ 69.718983][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.719083][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.719194][ T5617] bridge_slave_1: entered allmulticast mode [ 69.721189][ T5617] bridge_slave_1: entered promiscuous mode [ 69.768333][ T4932] Bluetooth: hci0: command tx timeout [ 69.786509][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.786558][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.786580][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.790333][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.790348][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.790372][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.911726][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.928463][ T4932] Bluetooth: hci1: command tx timeout [ 69.934294][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.939182][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.960501][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.008190][ T4932] Bluetooth: hci3: command tx timeout [ 70.017125][ T5609] hsr_slave_0: entered promiscuous mode [ 70.018775][ T5609] hsr_slave_1: entered promiscuous mode [ 70.019596][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 70.019701][ T5609] Cannot create hsr debugfs directory [ 70.045267][ T5619] team0: Port device team_slave_0 added [ 70.062066][ T5617] team0: Port device team_slave_0 added [ 70.064302][ T5619] team0: Port device team_slave_1 added [ 70.088381][ T4932] Bluetooth: hci2: command tx timeout [ 70.102125][ T5617] team0: Port device team_slave_1 added [ 70.152232][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.152271][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.152316][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.166047][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.166064][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.166087][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.188325][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.188342][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.188366][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.275392][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.275408][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.275432][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.331229][ T5617] hsr_slave_0: entered promiscuous mode [ 70.332222][ T5617] hsr_slave_1: entered promiscuous mode [ 70.332947][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 70.332979][ T5617] Cannot create hsr debugfs directory [ 70.333399][ T5614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.345099][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.345983][ T5614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.352159][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.377179][ T5614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.385180][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.415833][ T5614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.424974][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.433452][ T5619] hsr_slave_0: entered promiscuous mode [ 70.434382][ T5619] hsr_slave_1: entered promiscuous mode [ 70.435035][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 70.435052][ T5619] Cannot create hsr debugfs directory [ 70.706642][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.716779][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.740535][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.749603][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.750582][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.761403][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.763208][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.767071][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.872988][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.885074][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.886312][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.896308][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.906847][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.924956][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.934472][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.935361][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.946100][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.971460][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.012805][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.012916][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.039141][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.039236][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.073660][ T5619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.082667][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.083450][ T5619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.093381][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.106677][ T5619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.115579][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.116382][ T5619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.126116][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.252229][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.321055][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.336332][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.349609][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.349714][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.371754][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.371843][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.390881][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.390990][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.410608][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.441042][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.441153][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.466139][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.466270][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.491847][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.563817][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.601017][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.601130][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.622527][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.622639][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.847742][ T4932] Bluetooth: hci0: command tx timeout [ 71.992186][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.008736][ T4932] Bluetooth: hci1: command tx timeout [ 72.086212][ T5614] veth0_vlan: entered promiscuous mode [ 72.089949][ T4932] Bluetooth: hci3: command tx timeout [ 72.145072][ T5614] veth1_vlan: entered promiscuous mode [ 72.169044][ T4932] Bluetooth: hci2: command tx timeout [ 72.274487][ T5614] veth0_macvtap: entered promiscuous mode [ 72.294764][ T5614] veth1_macvtap: entered promiscuous mode [ 72.361402][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.370176][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.384563][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.462906][ T1013] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.464004][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.464327][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.464361][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.551545][ T5609] veth0_vlan: entered promiscuous mode [ 72.662629][ T5609] veth1_vlan: entered promiscuous mode [ 72.664400][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.664420][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.703329][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.752960][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.753008][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.817891][ T5609] veth0_macvtap: entered promiscuous mode [ 72.851791][ T5609] veth1_macvtap: entered promiscuous mode [ 72.868867][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.887387][ T5614] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.925080][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.930866][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.942031][ T5617] veth0_vlan: entered promiscuous mode [ 72.957897][ T1152] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.959747][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.960021][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.979045][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.981103][ T5617] veth1_vlan: entered promiscuous mode [ 73.095494][ T5751] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.113491][ T5619] veth0_vlan: entered promiscuous mode [ 73.169248][ T5619] veth1_vlan: entered promiscuous mode [ 73.176595][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.176645][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.195472][ T5617] veth0_macvtap: entered promiscuous mode [ 73.202615][ T5617] veth1_macvtap: entered promiscuous mode [ 73.289641][ T5753] cdns-usb3 pcspkr: error -ENXIO: IRQ host not found [ 73.302904][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.311454][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.343408][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.380264][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.412280][ T5619] veth0_macvtap: entered promiscuous mode [ 73.431598][ T5619] veth1_macvtap: entered promiscuous mode [ 73.491251][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.491528][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.491563][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.491596][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.523620][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.570843][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.586759][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.586813][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.644452][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.644493][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.663373][ T1013] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.678503][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.698107][ T1160] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.698992][ T1160] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.699027][ T1160] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.770276][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.770339][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.839536][ T25] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.00 [ 73.845271][ T25] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 73.847232][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.847255][ T25] usb 4-1: Product: syz [ 73.847269][ T25] usb 4-1: Manufacturer: syz [ 73.847282][ T25] usb 4-1: SerialNumber: syz [ 73.849258][ T1227] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.902266][ T5755] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 73.912733][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.912770][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.928188][ T4932] Bluetooth: hci0: command tx timeout [ 74.048922][ T1227] usb 1-1: Using ep0 maxpacket: 8 [ 74.055717][ T1227] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 74.067962][ T1227] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 74.068002][ T1227] usb 1-1: config 0 has no interface number 0 [ 74.068055][ T1227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.087802][ T4932] Bluetooth: hci1: command tx timeout [ 74.105414][ T1227] usb 1-1: config 0 descriptor?? [ 74.168045][ T4932] Bluetooth: hci3: command tx timeout [ 74.238848][ T1227] viperboard 1-1:0.143: version 0.00 found at bus 001 address 002 [ 74.247852][ T4932] Bluetooth: hci2: command tx timeout [ 74.292121][ T1227] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 74.293358][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.315588][ T1227] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 74.373140][ T5770] NFSD: Failed to start, no listeners configured. [ 74.378485][ T5694] usb 1-1: USB disconnect, device number 2 [ 74.438324][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice= 1.00 [ 74.453267][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 74.453314][ T25] usb 2-1: Product: syz [ 74.453329][ T25] usb 2-1: Manufacturer: syz [ 74.899901][ T25] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:046D:C299.0001/input/input5 [ 74.919521][ T25] logitech 0003:046D:C299.0001: input,hidraw0: USB HID v1.10 Joystick [syz syz] on usb-dummy_hcd.1-1/input0 [ 74.920391][ T25] logitech 0003:046D:C299.0001: Force feedback support for Logitech Gaming Wheels [ 74.965316][ T5756] usb 4-1: USB disconnect, device number 2 [ 75.108779][ T2248] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.280092][ T2248] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 1.00 [ 75.282706][ T2248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.305412][ T2248] usb 3-1: USB2VGA dongle found at address 2 [ 75.309386][ T2248] usb 3-1: Allocated 8 output buffers [ 75.358320][ T30] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.518618][ T30] usb 1-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice= 0.00 [ 75.530717][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.549752][ T30] ums-freecom 1-1:1.0: USB Mass Storage device detected [ 75.569788][ T30] ums-freecom 1-1:1.0: This device (07ab,fc01,0000 S 03 P f1) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 75.569788][ T30] Please send a copy of this message to and [ 75.997655][ T1227] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 76.009504][ T4932] Bluetooth: hci0: command tx timeout [ 76.169065][ T4932] Bluetooth: hci1: command tx timeout [ 76.169447][ T1227] usb 4-1: Using ep0 maxpacket: 8 [ 76.170683][ T1227] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 76.172220][ T1227] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 76.172242][ T1227] usb 4-1: config 0 has no interface number 0 [ 76.172283][ T1227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.177226][ T1227] usb 4-1: config 0 descriptor?? [ 76.229058][ T5744] usb 2-1: USB disconnect, device number 2 [ 76.249360][ T4932] Bluetooth: hci3: command tx timeout [ 76.298945][ T1227] viperboard 4-1:0.143: version 0.00 found at bus 004 address 003 [ 76.326821][ T1227] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 76.326883][ T1227] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 76.337835][ T4932] Bluetooth: hci2: command tx timeout [ 76.394078][ T5694] usb 4-1: USB disconnect, device number 3 [ 76.715531][ T2248] usb 3-1: Failed to early initialize device [ 76.738340][ T2248] usb 3-1: USB disconnect, device number 2 [ 77.057575][ T5693] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.065941][ T5807] process 'syz.3.19' launched './file0' with NULL argv: empty string added [ 77.217995][ T5693] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 77.234338][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.244637][ T5693] usb 2-1: Product: syz [ 77.249129][ T5693] usb 2-1: Manufacturer: syz [ 77.254022][ T5693] usb 2-1: SerialNumber: syz [ 77.423549][ T5814] UDC core: g1: couldn't find an available UDC or it's busy [ 77.482172][ T5693] snd-usb-6fire 2-1:1.0: unable to receive device firmware state. [ 77.482239][ T5693] snd-usb-6fire 2-1:1.0: probe with driver snd-usb-6fire failed with error -121 [ 77.627562][ T5694] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 77.778263][ T5694] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.00 [ 77.779756][ T5694] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 77.782612][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.782633][ T5694] usb 3-1: Product: syz [ 77.782648][ T5694] usb 3-1: Manufacturer: syz [ 77.782661][ T5694] usb 3-1: SerialNumber: syz [ 77.790268][ T5816] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 78.488128][ T5693] snd-usb-6fire 2-1:1.1: unable to receive device firmware state. [ 78.490088][ T5693] snd-usb-6fire 2-1:1.1: probe with driver snd-usb-6fire failed with error -110 [ 78.686633][ T5693] usb 2-1: USB disconnect, device number 3 [ 79.467697][ T5694] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 81.373295][ T30] scsi host1: usb-storage 1-1:1.0 [ 81.389017][ T30] usb 1-1: USB disconnect, device number 3 [ 81.539251][ T5693] usb 3-1: USB disconnect, device number 3 [ 81.773442][ T5693] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 81.785360][ T5693] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 81.793803][ T5693] CPU: 0 UID: 0 PID: 5693 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 81.797488][ T30] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 81.810626][ T5693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.820688][ T5693] Workqueue: sync_wq local_pci_probe_callback [ 81.826800][ T5693] RIP: 0010:software_node_register+0x30/0x1f0 [ 81.832886][ T5693] Code: 57 41 56 41 55 41 54 53 50 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 df 0a 8d fb 4c 8d 63 08 4c 89 e0 48 c1 e8 03 48 89 04 24 <42> 80 3c 30 00 74 08 4c 89 e7 e8 11 85 fb fb 49 8b 2c 24 48 85 ed [ 81.852547][ T5693] RSP: 0018:ffffc9000408f8c0 EFLAGS: 00010202 [ 81.858628][ T5693] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff888079cc8000 [ 81.866613][ T5693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 81.874601][ T5693] RBP: ffffc9000408fa90 R08: 0000000000000200 R09: ffffffff8cc6cac0 [ 81.882588][ T5693] R10: 000000000000c09f R11: 000000000000c080 R12: 0000000000000008 [ 81.890568][ T5693] R13: ffff88802e655010 R14: dffffc0000000000 R15: 0000000000000000 [ 81.898546][ T5693] FS: 0000000000000000(0000) GS:ffff8881248ab000(0000) knlGS:0000000000000000 [ 81.907475][ T5693] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.914060][ T5693] CR2: 000000110c3e895c CR3: 000000006fc88000 CR4: 00000000003526f0 [ 81.922036][ T5693] Call Trace: [ 81.925342][ T5693] [ 81.928280][ T5693] device_add_software_node+0x1a0/0x300 [ 81.933843][ T5693] dwc3_pci_probe+0x542/0xad0 [ 81.938524][ T5693] ? __pfx_dwc3_pci_probe+0x10/0x10 [ 81.943723][ T5693] ? do_raw_spin_lock+0x12b/0x2f0 [ 81.948762][ T5693] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 81.954575][ T5693] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 81.960423][ T5693] ? __pfx_dwc3_pci_probe+0x10/0x10 [ 81.965622][ T5693] local_pci_probe_callback+0x120/0x1e0 [ 81.971166][ T5693] ? process_scheduled_works+0x97a/0x1630 [ 81.976885][ T5693] process_scheduled_works+0xc3d/0x1630 [ 81.982426][ T5693] ? trace_contention_end+0x3b/0x160 [ 81.987716][ T5693] ? __pfx_process_scheduled_works+0x10/0x10 [ 81.993695][ T5693] ? assign_work+0x3cf/0x5d0 [ 81.998280][ T5693] worker_thread+0xa47/0xfb0 [ 82.002877][ T5693] ? __kthread_parkme+0x71/0x1f0 [ 82.007823][ T5693] kthread+0x38b/0x480 [ 82.011902][ T5693] ? __pfx_worker_thread+0x10/0x10 [ 82.017012][ T5693] ? __pfx_kthread+0x10/0x10 [ 82.021610][ T5693] ret_from_fork+0x514/0xb70 [ 82.026251][ T5693] ? __pfx_ret_from_fork+0x10/0x10 [ 82.031529][ T5693] ? __switch_to+0xc89/0x1420 [ 82.036250][ T5693] ? __pfx_kthread+0x10/0x10 [ 82.040851][ T5693] ret_from_fork_asm+0x1a/0x30 [ 82.045630][ T5693] [ 82.048655][ T5693] Modules linked in: [ 82.053486][ T5693] ---[ end trace 0000000000000000 ]--- [ 82.062653][ T5693] RIP: 0010:software_node_register+0x30/0x1f0 [ 82.068839][ T5693] Code: 57 41 56 41 55 41 54 53 50 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 df 0a 8d fb 4c 8d 63 08 4c 89 e0 48 c1 e8 03 48 89 04 24 <42> 80 3c 30 00 74 08 4c 89 e7 e8 11 85 fb fb 49 8b 2c 24 48 85 ed [ 82.088618][ T5693] RSP: 0018:ffffc9000408f8c0 EFLAGS: 00010202 [ 82.088663][ T5693] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff888079cc8000 [ 82.088677][ T5693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.088691][ T5693] RBP: ffffc9000408fa90 R08: 0000000000000200 R09: ffffffff8cc6cac0 [ 82.088706][ T5693] R10: 000000000000c09f R11: 000000000000c080 R12: 0000000000000008 [ 82.088720][ T5693] R13: ffff88802e655010 R14: dffffc0000000000 R15: 0000000000000000 [ 82.088736][ T5693] FS: 0000000000000000(0000) GS:ffff8881248ab000(0000) knlGS:0000000000000000 [ 82.088755][ T5693] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.088770][ T5693] CR2: 000000110c3e895c CR3: 000000005c902000 CR4: 00000000003526f0 [ 82.088788][ T5693] Kernel panic - not syncing: Fatal exception [ 82.164476][ T5693] Kernel Offset: disabled [ 82.168832][ T5693] Rebooting in 86400 seconds..