last executing test programs: 6.706889054s ago: executing program 0 (id=1): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x100000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='md0\n\x00', 0x4) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)='raid0\n\x00', 0x6) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000900)='524288\n\x00', 0x7) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r5, &(0x7f0000000b00)='1\n\x00', 0x2) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r6, &(0x7f0000000d00)='7:0\n\x00', 0x4) close(r6) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/md0/md/dev-loop0/slot\x00', 0x1, 0x0) write(r7, &(0x7f0000000f00)='0\n\x00', 0x2) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r8, &(0x7f0000001100)='active\n\x00', 0x7) close(r8) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r9, &(0x7f0000001300)='level-raid0\n\x00', 0xc) close(r9) 6.537852365s ago: executing program 2 (id=6): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x801, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x280, 0x280, 0x0, 0x1, 0x0, 0x1, 0x3f}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x1001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c8000e000a000100030108004000400000000000"], 0x13) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c8000e00080001000502040040000000"], 0x11) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="02c8000e00080001000403040040000000"], 0x11) write(r0, &(0x7f0000000300)="00112233445566778899", 0xa) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="02c8000600020040000d00"], 0xb) 6.51632363s ago: executing program 2 (id=7): r0 = syz_usb_connect(0x0, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040257d15a400010102030109022300010100c001090400000102090000052400100105241400020705810310000a"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="a101000000000000") syz_open_dev$char_usb(0xc, 0xb4, 0x0) 6.336883236s ago: executing program 0 (id=8): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x0, 0xce, [], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x0, 'lo\x00', 'lo\x00', 'lo\x00', 'lo\x00', @empty, [], @empty, [], 0x6e, 0x6e, 0x9e, [], [], @common=@STANDARD={'\x00', 0x8}}]}]}, 0x146) 6.269309443s ago: executing program 0 (id=9): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x10000001d, 0x8041) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/usb0/cdc_ncm/min_tx_pkt\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='10\n\x00', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/wwan0/cdc_ncm/min_tx_pkt\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='10\n\x00', 0x3) 5.701300338s ago: executing program 1 (id=13): syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1163, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1}}, {{0x9, 0x5, 0x2, 0x3, 0x8, 0x1}}]}}]}}]}}, 0x0) 5.201664851s ago: executing program 1 (id=15): syz_usb_connect(0x0, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201402505a1a400010102030109028a0002010080fa080b00020e03000209040000000e0100000d240100012800808d5b000101122402010102000000000000000002000009240302010100010009040100000e0200000e240101370081000200000001010b240601010101000000001e240701008002e0010000ca080000ca080060090015160500011516050009040101010e02000007058105000201"], 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000200)={0x1, @pix={0x280, 0x1e0, 0x474a504d}}) 4.993303084s ago: executing program 2 (id=19): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2000000014000105000000000000000023000000010000000500020008000000", 0x20}], 0x1}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000100)={0x23, 0x10, 0x8}, 0x10) listen(r1, 0x5) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x10, 0x8}, 0x10) 4.179385251s ago: executing program 1 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm_intel/parameters/unrestricted_guest\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='N\x00', 0x2) 4.163358629s ago: executing program 1 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1234567890\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Linux Foundation\x00', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='Conf 1\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r6, &(0x7f00000005c0)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0) write(r7, &(0x7f00000006c0)='Conf 2\x00', 0x7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r8, &(0x7f0000000740)='midi.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r9, &(0x7f00000007c0)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/bus/usb/devices/5-1/bConfigurationValue\x00', 0x2, 0x0) write(r10, &(0x7f00000008c0)='2\x00', 0x2) write(r10, &(0x7f00000008e0)='1\x00', 0x2) write(r10, &(0x7f0000000900)='0\x00', 0x2) r11 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x0) write(r11, &(0x7f0000000960)='1\x00', 0x2) write(r11, &(0x7f0000000980)='0\x00', 0x2) 4.109011s ago: executing program 2 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/drivers/STV06xx/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='5-1:1.0', 0x7) 4.049562769s ago: executing program 2 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/self/fail-nth\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x8000)=nil, 0x8000, 0xa) write(r0, &(0x7f0000000100)='15\x00', 0x3) syz_clone(0x12, 0x0, 0x0, 0x0, 0x0, 0x0) 4.049368173s ago: executing program 2 (id=26): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200), 0x100) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x0}, 0x10) read$nci(r0, &(0x7f0000000200), 0x100) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x0, 0x0}, 0x20) read$nci(r0, &(0x7f0000000200), 0x100) write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x0, 0x0, 0x0}, 0x10) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000200), 0x100) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x0, 0x0}, 0x10) read$nci(r0, &(0x7f0000000200), 0x100) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x0, 0x0}, 0x10) read$nci(r0, &(0x7f0000000200), 0x100) write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_RSP={0x0, 0x0, 0x0, 0x0}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x1c, 0x18, 0x1, 0x123, 0x234, {0x7}, [@typed={0x8, 0x1, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 3.586722133s ago: executing program 1 (id=27): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004045058080010301020001090212000101008032090400000000000000"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x2}, 0x0) 3.498734776s ago: executing program 4 (id=28): syz_usb_connect(0x2, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040710411030001000000010902190001010080fa0904000001ff00000007058405000401"], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 3.257214947s ago: executing program 3 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/module/usbcore/parameters/quirks\x00', 0x1, 0x0) write(r0, &(0x7f0000000c00)='9710:7830:b', 0xb) close(r0) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040109730780001000000010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000010000)={0x84, &(0x7f0000010100)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, &(0x7f0000010200)={0x0, 0xa, 0x1}, &(0x7f0000010300)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000020000)={0x84, &(0x7f0000020100)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, &(0x7f0000020200)={0x0, 0xa, 0x1}, &(0x7f0000020300)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000030000)={0x84, &(0x7f0000030100)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, &(0x7f0000030200)={0x0, 0xa, 0x1}, &(0x7f0000030300)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000040000)={0x84, &(0x7f0000040100)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, &(0x7f0000040200)={0x0, 0xa, 0x1}, &(0x7f0000040300)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000050000)={0x84, &(0x7f0000050100)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, &(0x7f0000050200)={0x0, 0xa, 0x1}, &(0x7f0000050300)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000060000)={0x84, &(0x7f0000060100)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, &(0x7f0000060200)={0x0, 0xa, 0x1}, &(0x7f0000060300)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000070000)={0x84, &(0x7f0000070100)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, &(0x7f0000070200)={0x0, 0xa, 0x1}, &(0x7f0000070300)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000080000)={0x84, &(0x7f0000080100)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, &(0x7f0000080200)={0x0, 0xa, 0x1}, &(0x7f0000080300)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000090000)={0x84, &(0x7f0000090100)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, &(0x7f0000090200)={0x0, 0xa, 0x1}, &(0x7f0000090300)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000a0000)={0x84, &(0x7f00000a0100)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, &(0x7f00000a0200)={0x0, 0xa, 0x1}, &(0x7f00000a0300)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000b0000)={0x84, &(0x7f00000b0100)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, &(0x7f00000b0200)={0x0, 0xa, 0x1}, &(0x7f00000b0300)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000c0000)={0x84, &(0x7f00000c0100)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, &(0x7f00000c0200)={0x0, 0xa, 0x1}, &(0x7f00000c0300)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000d0000)={0x84, &(0x7f00000d0100)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, &(0x7f00000d0200)={0x0, 0xa, 0x1}, &(0x7f00000d0300)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000e0000)={0x84, &(0x7f00000e0100)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, &(0x7f00000e0200)={0x0, 0xa, 0x1}, &(0x7f00000e0300)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000f0000)={0x84, &(0x7f00000f0100)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, &(0x7f00000f0200)={0x0, 0xa, 0x1}, &(0x7f00000f0300)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000100000)={0x84, &(0x7f0000100100)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, &(0x7f0000100200)={0x0, 0xa, 0x1}, &(0x7f0000100300)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000110000)={0x84, &(0x7f0000110100)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, &(0x7f0000110200)={0x0, 0xa, 0x1}, &(0x7f0000110300)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000120000)={0x84, &(0x7f0000120100)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, &(0x7f0000120200)={0x0, 0xa, 0x1}, &(0x7f0000120300)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x19, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/5-1/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)='0', 0x1) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/usb/devices/5-1/power/control\x00', 0x1, 0x0) write(r4, &(0x7f0000000900)='auto', 0x4) close(r4) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000130000)={0x84, &(0x7f0000130100)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, &(0x7f0000130200)={0x0, 0xa, 0x1}, &(0x7f0000130300)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000500)={0x1}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/usb/devices/5-1/power/control\x00', 0x1, 0x0) write(r5, &(0x7f0000000a00)='on', 0x2) close(r5) ioctl$USBDEVFS_FORBID_SUSPEND(r2, 0x5521) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000140000)={0x84, &(0x7f0000140100)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, &(0x7f0000140200)={0x0, 0xa, 0x1}, &(0x7f0000140300)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.188697847s ago: executing program 0 (id=31): r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='raid0\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f0000001300)='level-raid0\n\x00', 0xc) close(r1) 3.155856314s ago: executing program 0 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys_mnt/bus/usb/drivers_autoprobe\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0', 0x1) close(r0) syz_usb_connect(0x3, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000403a090f010000000000010902200001010080fa0904000002ffffff000705830200020007050402000200"], 0x0) (async) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mnt/bus/usb/devices/5-1/bConfigurationValue\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) close(r1) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mnt/bus/usb/drivers/mr97310a/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='5-1:1.0', 0x7) close(r2) 1.92940003s ago: executing program 4 (id=33): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x38, 0x24, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "000102030405060708090a0b0c0d0e0f"}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x38, 0x24, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x1, 0x1}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x64}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 1.929246602s ago: executing program 4 (id=34): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2000000014000105000000000000000023000000010000000500020008000000", 0x20}], 0x1}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000100)={0x23, 0x10, 0x8}, 0x10) listen(r1, 0x5) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x10, 0x8}, 0x10) 1.710874939s ago: executing program 3 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='high-speed\n\x00', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='dummy_udc.0\n\x00', 0xc) nanosleep(&(0x7f0000000600)={0x1}, 0x0) 1.056338641s ago: executing program 1 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='core\n\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/power/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='mem\n', 0x4) 1.003748049s ago: executing program 4 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='0\x00', 0x1) write(r0, &(0x7f00000000c0)='1\x00', 0x1) 797.418829ms ago: executing program 3 (id=38): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x101, 0x3, 0x22d4, 0x1503, 0x1, 0x0, '\x00'/257}}, 0x219) read(r1, &(0x7f0000000200)=""/256, 0x100) 212.69722ms ago: executing program 4 (id=39): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x81ff, 0x900) openat(0xffffffffffffff9c, &(0x7f0000000040)='./md0\x00', 0x2, 0x0) 198.403236ms ago: executing program 3 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='0000:00:02.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='1\x00', 0x2) 61.457044ms ago: executing program 4 (id=41): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) syz_usb_disconnect(0x3) syz_usb_connect(0x2, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000080304016000060102030109022000010100a0320904000002ffffff00070581020002000705020200010000"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1f, 0x0) 61.251932ms ago: executing program 3 (id=42): r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='raid0\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f0000001300)='level-raid0\n\x00', 0xc) close(r1) 61.160567ms ago: executing program 0 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='0000:00:02.0\x00', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='dwc3-pci\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/drivers/dwc3-pci/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='0000:00:02.0\x00', 0xc) close(r2) 0s ago: executing program 3 (id=44): syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040341278560001010203010902190001010080320904000001ff00000007058101000101"], 0x0) nanosleep(&(0x7f0000000100)={0x0, 0xbebc200}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x11, 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000200), 0x21, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x31, 0x2) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x800b, &(0x7f0000000300)) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x800b, &(0x7f0000000300)) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x800b, &(0x7f0000000300)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000400)=@urb_type_iso={0x0, {0x1, 0x1}, 0x0, 0x2, &(0x7f0000000500)='\x00'/16, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, [{0x10}]}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000400)=@urb_type_iso={0x0, {0x1, 0x1}, 0x0, 0x2, &(0x7f0000000500)='\x00'/16, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, [{0x10}]}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000400)=@urb_type_iso={0x0, {0x1, 0x1}, 0x0, 0x2, &(0x7f0000000500)='\x00'/16, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, [{0x10}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.64' (ED25519) to the list of known hosts. [ 29.202760][ T4702] cgroup: Unknown subsys name 'net' [ 29.312708][ T4702] cgroup: Unknown subsys name 'cpuset' [ 29.314764][ T4702] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.471679][ T4702] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.271127][ T4723] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.274034][ T4729] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.274241][ T4729] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.274399][ T4729] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.274544][ T4729] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.274982][ T4727] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.275173][ T4723] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.276410][ T4723] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.277772][ T4727] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.277918][ T4727] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.278364][ T4727] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.278547][ T4727] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.278951][ T4727] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.279217][ T4723] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.279867][ T4727] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.280190][ T4727] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.280848][ T4727] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.281509][ T4727] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.281682][ T4727] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.282159][ T4727] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.282598][ T4727] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.283334][ T4727] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.283817][ T4727] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.283973][ T4727] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.287835][ T4727] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.624773][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.625029][ T4722] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.625107][ T4722] bridge_slave_0: entered allmulticast mode [ 30.625593][ T4722] bridge_slave_0: entered promiscuous mode [ 30.640098][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.640145][ T4722] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.640287][ T4722] bridge_slave_1: entered allmulticast mode [ 30.641061][ T4722] bridge_slave_1: entered promiscuous mode [ 30.655190][ T4722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.656253][ T4722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.685881][ T4722] team0: Port device team_slave_0 added [ 30.686717][ T4722] team0: Port device team_slave_1 added [ 30.699377][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.700939][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.702464][ T4713] bridge_slave_0: entered allmulticast mode [ 30.704088][ T4713] bridge_slave_0: entered promiscuous mode [ 30.715990][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.717414][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.718817][ T4713] bridge_slave_1: entered allmulticast mode [ 30.720342][ T4713] bridge_slave_1: entered promiscuous mode [ 30.725303][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.725330][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.725346][ T4722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.726213][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.726221][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.726237][ T4722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.760412][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.762035][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.763419][ T4714] bridge_slave_0: entered allmulticast mode [ 30.764983][ T4714] bridge_slave_0: entered promiscuous mode [ 30.766768][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.766834][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.766967][ T4717] bridge_slave_0: entered allmulticast mode [ 30.767430][ T4717] bridge_slave_0: entered promiscuous mode [ 30.768552][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.768574][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.768627][ T4717] bridge_slave_1: entered allmulticast mode [ 30.769078][ T4717] bridge_slave_1: entered promiscuous mode [ 30.771111][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.785326][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.788438][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.788492][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.788573][ T4714] bridge_slave_1: entered allmulticast mode [ 30.789009][ T4714] bridge_slave_1: entered promiscuous mode [ 30.796615][ T4722] hsr_slave_0: entered promiscuous mode [ 30.796998][ T4722] hsr_slave_1: entered promiscuous mode [ 30.807877][ T4713] team0: Port device team_slave_0 added [ 30.808788][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.812858][ T4713] team0: Port device team_slave_1 added [ 30.828953][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.832907][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.833904][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.850896][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.852493][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.857271][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.858569][ T4714] team0: Port device team_slave_0 added [ 30.859339][ T4714] team0: Port device team_slave_1 added [ 30.867496][ T4717] team0: Port device team_slave_0 added [ 30.868352][ T4717] team0: Port device team_slave_1 added [ 30.874066][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.874101][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.880939][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.881550][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.881560][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.881574][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.882170][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.882177][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.882192][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.892765][ T4714] hsr_slave_0: entered promiscuous mode [ 30.893061][ T4714] hsr_slave_1: entered promiscuous mode [ 30.893254][ T4714] debugfs: 'hsr0' already exists in 'hsr' [ 30.893298][ T4714] Cannot create hsr debugfs directory [ 30.910013][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.910043][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.910059][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.926223][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.926254][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.926273][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.952173][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.953617][ T4721] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.955065][ T4721] bridge_slave_0: entered allmulticast mode [ 30.956812][ T4721] bridge_slave_0: entered promiscuous mode [ 30.962434][ T4713] hsr_slave_0: entered promiscuous mode [ 30.962763][ T4713] hsr_slave_1: entered promiscuous mode [ 30.962957][ T4713] debugfs: 'hsr0' already exists in 'hsr' [ 30.962967][ T4713] Cannot create hsr debugfs directory [ 30.973791][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.975194][ T4721] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.976586][ T4721] bridge_slave_1: entered allmulticast mode [ 30.978229][ T4721] bridge_slave_1: entered promiscuous mode [ 30.998860][ T4721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.005415][ T4717] hsr_slave_0: entered promiscuous mode [ 31.005752][ T4717] hsr_slave_1: entered promiscuous mode [ 31.005961][ T4717] debugfs: 'hsr0' already exists in 'hsr' [ 31.005970][ T4717] Cannot create hsr debugfs directory [ 31.012977][ T4721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.025056][ T4721] team0: Port device team_slave_0 added [ 31.025889][ T4721] team0: Port device team_slave_1 added [ 31.050922][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.050953][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.050968][ T4721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.056905][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.056914][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.056929][ T4721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.069678][ T4714] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.073364][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.073751][ T4714] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.075816][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.084938][ T4721] hsr_slave_0: entered promiscuous mode [ 31.085274][ T4721] hsr_slave_1: entered promiscuous mode [ 31.085498][ T4721] debugfs: 'hsr0' already exists in 'hsr' [ 31.085508][ T4721] Cannot create hsr debugfs directory [ 31.088010][ T4714] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.090032][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.102507][ T4714] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.104942][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.142529][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.142580][ T4714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.142727][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.142761][ T4714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.148025][ T4722] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.149331][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.149650][ T4722] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.152071][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.168039][ T4722] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.170225][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.170641][ T4722] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.174641][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.202282][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.202325][ T4722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.202420][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.202464][ T4722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.206132][ T4713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.207738][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.208025][ T4713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.210009][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.211130][ T4713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.213524][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.220065][ T4713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.222625][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.242069][ T4717] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.244344][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.247487][ T4717] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.249707][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.254967][ T4717] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.257125][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.257434][ T4717] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.259424][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.268375][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.268425][ T4713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.268509][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.268538][ T4713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.277386][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.287238][ T3107] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.288740][ T3107] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.290591][ T3107] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.292590][ T3107] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.294642][ T3107] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.296007][ T3107] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.306392][ T4721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.308640][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.310318][ T4721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.312587][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.314271][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.319249][ T4721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.322238][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.324541][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.324596][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.332668][ T4722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.333165][ T4721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.334846][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.345263][ T3107] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.345307][ T3107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.356494][ T4722] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.376365][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.376411][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.377072][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.377101][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.386742][ T4722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.392886][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.405857][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.418146][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.434458][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.437014][ T4721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.444173][ T3107] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.444218][ T3107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.444651][ T3107] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.444673][ T3107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.445013][ T3107] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.445036][ T3107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.457277][ T4721] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.465302][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.465350][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.481710][ T4713] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.483856][ T4713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.506277][ T1291] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.506330][ T1291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.507193][ T1291] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.507218][ T1291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.537325][ T4721] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.539326][ T4721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.639851][ T4722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.665998][ T4722] veth0_vlan: entered promiscuous mode [ 31.674481][ T4722] veth1_vlan: entered promiscuous mode [ 31.685557][ T4722] veth0_macvtap: entered promiscuous mode [ 31.688015][ T4722] veth1_macvtap: entered promiscuous mode [ 31.698758][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.699882][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.726216][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.744747][ T3107] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.746082][ T3107] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.746207][ T3107] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.746338][ T3107] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.758235][ T1291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.758268][ T1291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.769928][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.772350][ T4717] veth0_vlan: entered promiscuous mode [ 31.778120][ T4717] veth1_vlan: entered promiscuous mode [ 31.784041][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.787204][ T3087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.787241][ T3087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.806147][ T4713] veth0_vlan: entered promiscuous mode [ 31.808189][ T4713] veth1_vlan: entered promiscuous mode [ 31.828185][ T4717] veth0_macvtap: entered promiscuous mode [ 31.831155][ T4721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.839655][ T4722] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.844436][ T4717] veth1_macvtap: entered promiscuous mode [ 31.855573][ T4713] veth0_macvtap: entered promiscuous mode [ 31.858516][ T4713] veth1_macvtap: entered promiscuous mode [ 31.866593][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.867626][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.904598][ T4895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.909150][ T4895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.915293][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.918896][ T1291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.918934][ T1291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.928911][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.934375][ T4721] veth0_vlan: entered promiscuous mode [ 31.941525][ T1291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.941550][ T1291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.946908][ T4721] veth1_vlan: entered promiscuous mode [ 31.979361][ T3087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.979392][ T3087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.989272][ T4714] veth0_vlan: entered promiscuous mode [ 31.992721][ T4721] veth0_macvtap: entered promiscuous mode [ 32.009753][ T4714] veth1_vlan: entered promiscuous mode [ 32.013704][ T4898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.013899][ T4898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.017426][ T3107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.018159][ T4721] veth1_macvtap: entered promiscuous mode [ 32.020227][ T3107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.022064][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.022518][ T3087] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.035331][ T4714] veth0_macvtap: entered promiscuous mode [ 32.038386][ T4714] veth1_macvtap: entered promiscuous mode [ 32.042235][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.047869][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.055263][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.058278][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.081999][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.085091][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.087163][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.087201][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.087228][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.087250][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.087270][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.087289][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.087309][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.087328][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.087347][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.087366][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.104225][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.105620][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.109463][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.109492][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.129493][ T1291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.129531][ T1291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.134280][ T4901] loop0: detected capacity change from 0 to 2048 [ 32.144100][ T1291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.144133][ T1291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.155293][ T4901] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 32.177368][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.177398][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.229983][ T4905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.230725][ T4905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.322796][ T4910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.322984][ T4910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.331667][ T4720] Bluetooth: hci1: command tx timeout [ 32.331672][ T4730] Bluetooth: hci0: command tx timeout [ 32.341390][ T4730] Bluetooth: hci4: command tx timeout [ 32.341555][ T4730] Bluetooth: hci3: command tx timeout [ 32.341562][ T4720] Bluetooth: hci2: command tx timeout [ 32.479664][ T4901] md: personality for level level-raid0 is not loaded! [ 32.761420][ T4817] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.912095][ T4817] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.913006][ T4817] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.914570][ T4817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.914582][ T4817] usb 1-1: Product: syz [ 32.914589][ T4817] usb 1-1: Manufacturer: syz [ 32.914596][ T4817] usb 1-1: SerialNumber: syz [ 33.045016][ T4921] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 33.113506][ T4927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.115359][ T4927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.440959][ T4929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.442765][ T4929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.637187][ T4932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.637434][ T4932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.814704][ T4940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.816470][ T4940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.923510][ T4817] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 33.923541][ T4817] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 33.923553][ T4817] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 34.411526][ T4720] Bluetooth: hci0: command tx timeout [ 34.412660][ T4729] Bluetooth: hci2: command tx timeout [ 34.421716][ T4729] Bluetooth: hci3: command tx timeout [ 34.421753][ T4729] Bluetooth: hci4: command tx timeout [ 34.421788][ T4720] Bluetooth: hci1: command tx timeout [ 34.483387][ T4948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.485560][ T4948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.690721][ T4953] UDC core: g1: couldn't find an available UDC or it's busy [ 34.757689][ T4958] FAULT_INJECTION: forcing a failure. [ 34.757689][ T4958] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 34.757724][ T4958] CPU: 0 UID: 0 PID: 4958 Comm: syz.2.25 Not tainted syzkaller #0 PREEMPT [ 34.757737][ T4958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 34.757744][ T4958] Call trace: [ 34.757748][ T4958] show_stack+0x2c/0x3c (C) [ 34.757769][ T4958] __dump_stack+0x30/0x40 [ 34.757781][ T4958] dump_stack_lvl+0xd8/0x12c [ 34.757791][ T4958] dump_stack+0x1c/0x28 [ 34.757801][ T4958] should_fail_ex+0x41c/0x590 [ 34.757809][ T4958] should_fail_alloc_page+0xec/0x10c [ 34.757818][ T4958] prepare_alloc_pages+0x194/0x4a4 [ 34.757827][ T4958] __alloc_frozen_pages_noprof+0x134/0x320 [ 34.757836][ T4958] alloc_pages_mpol+0x1ec/0x3c0 [ 34.757845][ T4958] folio_alloc_mpol_noprof+0x4c/0x248 [ 34.757854][ T4958] vma_alloc_folio_noprof+0x100/0x1dc [ 34.757863][ T4958] folio_prealloc+0x5c/0x1b0 [ 34.757870][ T4958] do_wp_page+0x16e8/0x4074 [ 34.757877][ T4958] handle_mm_fault+0x1190/0x2514 [ 34.757885][ T4958] do_page_fault+0x77c/0xb88 [ 34.757894][ T4958] do_mem_abort+0x70/0x194 [ 34.757903][ T4958] el0_da+0x78/0x254 [ 34.757912][ T4958] el0t_64_sync_handler+0xd8/0x104 [ 34.757921][ T4958] el0t_64_sync+0x198/0x19c [ 34.757984][ T4958] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 35.125176][ T4817] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 35.132145][ T4817] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 35.137974][ T4957] usb 1-1: USB disconnect, device number 2 [ 35.140065][ T4957] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 35.206369][ T4957] hub 1-0:1.0: USB hub found [ 35.206715][ T4957] hub 1-0:1.0: 1 port detected [ 35.258240][ T4963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.258463][ T4963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.345313][ T4965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.345929][ T4965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.553766][ T4969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.553968][ T4969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.491251][ T4730] Bluetooth: hci1: command tx timeout [ 36.491293][ T4730] Bluetooth: hci3: command tx timeout [ 36.502196][ T4729] Bluetooth: hci4: command tx timeout [ 36.503587][ T4730] Bluetooth: hci2: command tx timeout [ 36.503624][ T4730] Bluetooth: hci0: command tx timeout [ 36.876972][ T4979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33'. [ 37.150826][ T4983] UDC core: g1: couldn't find an available UDC or it's busy [ 37.805018][ T4986] PM: suspend entry (deep) [ 37.876970][ T40] Filesystems sync: 0.071 seconds [ 37.907034][ T4988] psci: CPU1 killed (polled 0 ms) [ 38.038678][ T4992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.044338][ T4992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.066187][ T11] glorious 0003:22D4:1503.0001: unknown main item tag 0x0 [ 38.067895][ T11] glorious 0003:22D4:1503.0001: unknown main item tag 0x0 [ 38.067930][ T11] glorious 0003:22D4:1503.0001: unknown main item tag 0x0 [ 38.067947][ T11] glorious 0003:22D4:1503.0001: unknown main item tag 0x0 [ 38.067963][ T11] glorious 0003:22D4:1503.0001: unknown main item tag 0x0 [ 38.067977][ T11] glorious 0003:22D4:1503.0001: unknown main item tag 0x0 [ 38.067990][ T11] glorious 0003:22D4:1503.0001: unknown main item tag 0x0 [ 38.068002][ T11] glorious 0003:22D4:1503.0001: unknown main item tag 0x0 [ 38.068014][ T11] glorious 0003:22D4:1503.0001: unknown main item tag 0x0 [ 38.068026][ T11] glorious 0003:22D4:1503.0001: unknown main item tag 0x0 [ 38.089165][ T11] glorious 0003:22D4:1503.0001: hidraw0: USB HID v0.01 Device [Glorious Model I] on syz0 [ 38.140519][ T4993] fido_id[4993]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 38.501400][ T4720] Bluetooth: hci3: command tx timeout [ 38.503163][ T4729] Bluetooth: hci1: command tx timeout [ 38.511801][ T4720] Bluetooth: hci4: command tx timeout [ 38.512936][ T4729] Bluetooth: hci2: command tx timeout [ 38.635601][ T4986] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 38.635684][ T4986] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 38.663918][ T4986] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 38.668909][ T4986] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 38.669082][ T4986] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 38.680530][ T4986] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 38.693663][ T4986] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 38.693707][ T4986] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 38.713403][ T4986] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 38.763944][ T5002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.764189][ T5002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.770384][ T4986] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 38.770427][ T4986] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 38.798768][ T4986] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 38.803894][ T4986] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 38.803931][ T4986] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 38.807367][ T4986] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 38.863041][ T5006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.863246][ T5006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.909964][ T5004] EXT4-fs (nvme0n1p2): shut down requested (2) [ 38.929483][ T5004] Aborting journal on device nvme0n1p2-8. Jan 1 00:00:38 syzkaller kern.alert kernel: [ 38.909964][ T5004] EXT4-fs (nvme0n1p2): shut down requested (2) [ 38.953162][ T5009] usb usb7: usbfs: process 5009 (syz.3.44) did not claim interface 0 before use [ 38.978116][ T5002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.978335][ T5002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.079737][ T5008] Unable to handle kernel paging request at virtual address dfff800000000001 Jan 1 00:00:39 syzkaller kern.alert kernel: [ 39.079737][ T5008] Unable to handle kernel paging request at virtual address dfff800000000001[ 39.086488][ T5008] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 39.090933][ T5008] Mem abort info: [ 39.092025][ T5008] ESR = 0x0000000096000005 [ 39.092966][ T5008] EC = 0x25: DABT (current EL), IL = 32 bits [ 39.094306][ T5008] SET = 0, FnV = 0 [ 39.095125][ T5008] EA = 0, S1PTW = 0 [ 39.096124][ T5008] FSC = 0x05: level 1 translation fault [ 39.097413][ T5008] Data abort info: [ 39.098223][ T5008] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 39.099673][ T5008] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 39.101044][ T5008] GCS = 0, Overlay = 0, DirtyBit = 0 [ 39.103678][ T5008] [dfff800000000001] address between user and kernel address ranges [ 39.103782][ T5008] Internal error: Oops: 0000000096000005 [#1] SMP [ 39.106419][ T5008] Modules linked in: [ 39.107061][ T5008] CPU: 0 UID: 0 PID: 5008 Comm: syz.0.43 Not tainted syzkaller #0 PREEMPT [ 39.108450][ T5008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 39.110115][ T5008] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 39.111402][ T5008] pc : software_node_register+0x30/0xd4 [ 39.112354][ T5008] lr : software_node_register+0x28/0xd4 [ 39.113264][ T5008] sp : ffff800095da7500 [ 39.113989][ T5008] x29: ffff800095da7500 x28: 0000000000000000 x27: ffff0000c2f1e0d0 [ 39.115347][ T5008] x26: dfff800000000000 x25: ffff700012bb4eb4 x24: 0000000000001ae0 [ 39.116889][ T5008] x23: 0000000000000001 x22: dfff800000000000 x21: 0000000000000008 [ 39.118252][ T5008] x20: 0000000000000000 x19: 0000000000000000 x18: 1fffe00034bb7428 [ 39.119668][ T5008] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 39.121167][ T5008] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 [ 39.122543][ T5008] x11: 0000000000000000 x10: 0000000000080000 x9 : 00000000000035ff [ 39.123958][ T5008] x8 : ffff80009e62c000 x7 : 0000010000003fff x6 : 0000010000000000 [ 39.125361][ T5008] x5 : ffff0000dcd77680 x4 : 0000000000000400 x3 : ffff8000831b4440 [ 39.126697][ T5008] x2 : 0000000000001ae0 x1 : ffff0000ca0a8000 x0 : 0000000000000001 [ 39.128087][ T5008] Call trace: [ 39.128669][ T5008] software_node_register+0x30/0xd4 (P) [ 39.129685][ T5008] device_add_software_node+0x16c/0x1cc [ 39.130620][ T5008] dwc3_pci_probe+0x460/0x8e4 [ 39.131390][ T5008] local_pci_probe+0xc8/0x158 [ 39.132227][ T5008] pci_device_probe+0x460/0x8d4 [ 39.133059][ T5008] really_probe+0x29c/0x800 [ 39.133861][ T5008] __driver_probe_device+0x1e0/0x350 [ 39.134743][ T5008] device_driver_attach+0x58/0xac [ 39.135614][ T5008] bind_store+0xf4/0x14c [ 39.136346][ T5008] drv_attr_store+0x80/0xa4 [ 39.137206][ T5008] sysfs_kf_write+0xe0/0x108 [ 39.138004][ T5008] kernfs_fop_write_iter+0x260/0x3b8 [ 39.138892][ T5008] vfs_write+0x51c/0xa0c [ 39.139609][ T5008] ksys_write+0x12c/0x228 [ 39.140370][ T5008] __arm64_sys_write+0x84/0x98 [ 39.141210][ T5008] invoke_syscall+0x98/0x244 [ 39.141987][ T5008] el0_svc_common+0xec/0x23c [ 39.142772][ T5008] do_el0_svc+0x4c/0x5c [ 39.143590][ T5008] el0_svc+0x64/0x260 [ 39.144374][ T5008] el0t_64_sync_handler+0x44/0x104 [ 39.145410][ T5008] el0t_64_sync+0x198/0x19c [ 39.146372][ T5008] Code: f2fbfff6 9784ff86 91002275 d343feb7 (38766ae8) [ 39.147796][ T5008] ---[ end trace 0000000000000000 ]--- [ 39.413097][ T5008] Kernel panic - not syncing: Oops: Fatal exception [ 39.414241][ T5008] Kernel Offset: disabled [ 39.414950][ T5008] CPU features: 0x14000000,003c0008,27020a02,a84ff6a7 [ 39.415990][ T5008] Memory Limit: none [ 39.673298][ T5008] Rebooting in 86400 seconds..