last executing test programs: 6.924249973s ago: executing program 1 (id=24): r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040109710780001010203010902270001010080320904000003ff000000070581024000000705020240000007058303400001"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000180)={0x40, 0x0, 0x4, "01000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000180)={0x40, 0x0, 0x4, "01000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000180)={0x40, 0x0, 0x4, "01000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000180)={0x40, 0x0, 0x4, "01000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000180)={0x40, 0x0, 0x4, "01000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000180)={0x40, 0x0, 0x4, "01000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000180)={0x40, 0x0, 0x4, "01000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000180)={0x40, 0x0, 0x4, "01000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000180)={0x40, 0x0, 0x4, "01000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000180)={0x40, 0x0, 0x4, "01000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 6.832076485s ago: executing program 3 (id=28): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110f00100002010200010902190001010080320904000001000000000705810340000a"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_disconnect(r0) 6.070820158s ago: executing program 3 (id=33): syz_usb_connect(0x3, 0xbf, &(0x7f0000000000)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902bd000201008030080b00020e03000009040000010e0100000d2401000140000000000001010c24020101020000000000000924030201010003000b24050301010200000000000705810308000109040100000e0200000e2401014e000181000000000001010b240601010000000000000026240701014001f000000000000000000000000000000000000115160500"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 5.903758555s ago: executing program 1 (id=34): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001800050601000000000000000a800000fe0400010000000014000100200100000000000000000000000000010800040001000000080006006400000006001500070000001400160008000100010000000800030001000000"], 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001800050602000000000000000a800000fe0400010000000014000100200100000000000000000000000000010800040001000000080006006400000006001500070000000c0016000800010001000000"], 0x54}}, 0x0) 5.840169535s ago: executing program 1 (id=35): syz_usb_connect(0x2, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0621010001000000010902200001010080500904000002ff0000000705810240000007050202400000"], 0x0) nanosleep(&(0x7f0000000300)={0x5}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000400)={0x0, 0x0, 0x1002}) 5.232255503s ago: executing program 0 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/cdns3-pci-usbss/bind\x00', 0x1, 0x0) 5.232158263s ago: executing program 0 (id=39): pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)={0x2}, 0x0) 5.049033013s ago: executing program 3 (id=41): syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x2040, 0x9941, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x0, 0x0) ioctl$FE_SET_FRONTEND(r0, 0x40246f42, &(0x7f0000000200)={0x1c8cfc0, 0x0, @ofdm={0x0, 0x0, 0x1, 0x1}}) 4.614380848s ago: executing program 4 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./my_src\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./my_src/lib\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_src/lib/modules\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./my_root\x00', 0x1c0) mount$bind(&(0x7f0000000500)='./my_src\x00', &(0x7f0000000540)='./my_root\x00', &(0x7f0000000580), 0x1000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./my_root/lib/modules\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000600)=""/1024, 0x400) 4.592629645s ago: executing program 4 (id=48): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/rescan\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) 4.532163314s ago: executing program 4 (id=49): r0 = syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000409406010000010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02000200"], 0x0) syz_usb_ep_write(r0, 0x8d, 0x4, &(0x7f0000000200)='\x00\x00\x00\x00') nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xa0) lseek(r1, 0xd000, 0x0) read(r1, &(0x7f0000000100), 0x2) 4.404967805s ago: executing program 0 (id=50): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040000000000001010203010902200001010080320904000002000000000705810240000007050202400000"], 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) syz_usb_disconnect(r0) 3.927936957s ago: executing program 2 (id=53): syz_usb_connect(0x3, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02000200"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x85) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00', 0x8, 0x10000000) 3.416787095s ago: executing program 2 (id=54): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040460a019600010102030109022700010100a0fa0904000003ff000000070581024000000705020240000007058303080001"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x40, 0x0, 0x6, "001122334455"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8924, &(0x7f0000002000)={'syzkaller0\x00', @ifru_hwaddr=@random="aaaaaaaaaaaa"}) ioctl$sock_ifreq(r1, 0x8924, &(0x7f0000002100)={'syzkaller1\x00', @ifru_hwaddr=@random="aaaaaaaaaaaa"}) 3.055002302s ago: executing program 4 (id=55): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60000010200010902120001010080320904000000000000000000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='stm32g0-typec 0x35\n', 0x13) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/i2c/devices/i2c-3/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='stm32g0-typec 0x35\n', 0x13) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/power/state\x00', 0x1, 0x0) 2.976151932s ago: executing program 0 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='2-1\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/drivers/usbhid/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='2-1:1.0\x00', 0x8) nanosleep(&(0x7f0000000280)={0x1}, 0x0) 2.868112682s ago: executing program 1 (id=57): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='clear_refs\x00') write(r0, &(0x7f00000000c0)='1\x00', 0x2) syz_usb_connect(0x0, 0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c032090400000102020100052400100105240600010705810340000a09040100020a0000000705020240000007058202400000"], 0x0) 2.529541733s ago: executing program 3 (id=58): mmap(&(0x7f0000800000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2.46826232s ago: executing program 3 (id=59): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) 2.468110616s ago: executing program 3 (id=60): syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401097207700010102030109023500010100a0320904000005ff0000000705810240000007050202400000070583024000000705040240000007058503400001"], 0x0) (async) nanosleep(&(0x7f0000000300)={0x3}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/ttyUSB0\x00', 0x2, 0x0) ioctl$int_out(r0, 0x5459, &(0x7f0000000600)) 2.337827162s ago: executing program 1 (id=61): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040450c01600001000000010902200001010080fa0904000002ffffff0007058101fc030107058203400001"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0x14, &(0x7f0000000100)={0xc1, 0x0, 0x1, "10"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e00)={0x14, &(0x7f0000000f00)={0x41}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x14, &(0x7f0000000200)={0x41, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x14, &(0x7f0000000280)={0xc1, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x14, &(0x7f0000000200)={0x41, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x14, &(0x7f0000000280)={0xc1, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x82, 0x1, &(0x7f0000001000)='\x00') syz_usb_ep_write(r0, 0x82, 0x1, &(0x7f0000001000)='\x00') syz_usb_ep_write(r0, 0x82, 0x1, &(0x7f0000001000)='\x00') syz_usb_ep_write(r0, 0x82, 0x1, &(0x7f0000001000)='\x00') syz_usb_ep_write(r0, 0x82, 0x1, &(0x7f0000001000)='\x00') syz_usb_ep_write(r0, 0x82, 0x1, &(0x7f0000001000)='\x00') syz_usb_ep_write(r0, 0x82, 0x1, &(0x7f0000001000)='\x00') syz_usb_ep_write(r0, 0x82, 0x1, &(0x7f0000001000)='\x00') syz_usb_ep_write(r0, 0x82, 0x1, &(0x7f0000001000)='\x00') syz_usb_ep_write(r0, 0x82, 0x1, &(0x7f0000001000)='\x00') r1 = syz_open_dev$video(&(0x7f0000000500), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000600)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000700)=@mmap={0x0, 0x1}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000780)=@mmap={0x1, 0x1}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000800)=@mmap={0x0, 0x1}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000880)=@mmap={0x1, 0x1}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000900)=0x1) (async) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000900)=0x1) (async) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 2.171351083s ago: executing program 0 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/firmware_class/parameters/path\x00', 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9022, 0xd630, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) nanosleep(&(0x7f0000000200)={0x1}, 0x0) 1.85610811s ago: executing program 2 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_udc.0\n\x00', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl(r1, 0x8914, &(0x7f0000000340)='usb0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00A\x00'/36) ioctl(r1, 0x8916, &(0x7f0000000380)="7573623000000000000000000000000002000000c0a8010100"/36) setsockopt(r1, 0x1, 0x19, &(0x7f0000000400)='usb0\x00', 0x5) sendto$inet(r1, &(0x7f0000000500)="1234567890abcdef", 0x10, 0x0, &(0x7f0000000600)={0x2, 0x1234, @rand_addr=0x64010100}, 0x10) sendto$inet(r1, &(0x7f0000000500)="1234567890abcdef", 0x10, 0x0, &(0x7f0000000680)={0x2, 0x1234, @broadcast}, 0x10) r2 = socket(0x11, 0x3, 0x300) setsockopt(r2, 0x1, 0x19, &(0x7f0000000400)='usb0\x00', 0x5) write(r2, &(0x7f0000000700)="00112233445566778899aabb08004500001c0000000040110000c0a80101c0a801020035003500080000", 0x2a) 1.771619384s ago: executing program 2 (id=64): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='0x0104\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000001200)='3\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uac1.usb0/c_srate\x00', 0x1, 0x0) write(r3, &(0x7f0000001400)='48000\x00', 0x6) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/functions/uac1.usb0/c_ssize\x00', 0x1, 0x0) write(r4, &(0x7f0000001600)='2\x00', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000001000)='dummy_udc.0\x00', 0xc) close(r5) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1.709204119s ago: executing program 1 (id=65): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/1/nodeid\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)="020000007f00000100"/129, 0x80) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write(r3, &(0x7f0000000500)="0600000000000000010000000401000000000000000000006c733100"/124, 0x78) r4 = socket$inet(0x2, 0x1, 0x6) connect(r4, &(0x7f0000000600)=@in={0x2, 0x5248, @loopback}, 0x10) 1.492218855s ago: executing program 4 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys_mnt\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys_mnt/bus/virtio/devices/virtio0/device\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys_mnt/bus/virtio/devices/virtio0/vendor\x00', 0x0, 0x0) read(r1, &(0x7f0000000700), 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys_mnt/bus/virtio/devices/virtio0/modalias\x00', 0x0, 0x0) read(r2, &(0x7f0000000900), 0x100) 1.492102697s ago: executing program 4 (id=67): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x2, 0x5, 0x57e, 0x306, 0x0, 0x0, "0501"}}, 0x11a) nanosleep(&(0x7f0000000100)={0x0, 0x2faf080}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x7, "20000002000064"}}, 0x1006) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 1.231558069s ago: executing program 2 (id=68): syz_usb_connect(0x0, 0x32, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000200000040720541000001010203010902200001010080fa0904000002ff0000000705010200020007058102000200"], 0x0) (async) nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0) 213.288693ms ago: executing program 2 (id=69): r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040109715770001010203010902350001010080320904000005ff0000000705810240000007050102400000070582024000000705020240000007058303400001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$int_in(r1, 0x708b, &(0x7f0000000200)) write$char_usb(r1, &(0x7f0000000300)="001122334455", 0x6) read$char_usb(r1, &(0x7f0000000400), 0x6) ioctl$int_in(r1, 0x40047091, &(0x7f0000000500)) ioctl$int_in(r1, 0x708c, &(0x7f0000000600)) 0s ago: executing program 0 (id=70): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000800000/0x10000)=nil, 0x10000, 0x3, 0x11, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f000080c120)='\n03U', 0x4) write(r2, &(0x7f0000000240)='dwc3-pci\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/dwc3-pci/bind\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='0000:00:03.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='0000:00:02.0\x00', 0xd) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000810000/0x10000)=nil, 0x10000, 0x3, 0x11, r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r6, &(0x7f000081c120)='\n03U', 0x4) write(r6, &(0x7f0000000440)='dwc3-pci\x00', 0x9) write(r3, &(0x7f0000000480)='0000:00:02.0\x00', 0xd) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/bus/platform/devices/dwc3.0.auto/power/control\x00', 0x1, 0x0) write(r7, &(0x7f0000000580)='auto\x00', 0x5) r8 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/bus/platform/devices/dwc3.1.auto/power/control\x00', 0x1, 0x0) write(r8, &(0x7f0000000600)='auto\x00', 0x5) r9 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/pci/devices/0000:00:03.0/power/control\x00', 0x1, 0x0) write(r9, &(0x7f0000000680)='auto\x00', 0x5) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) write(r7, &(0x7f0000000740)='on\x00', 0x3) write(r8, &(0x7f0000000780)='on\x00', 0x3) write(r9, &(0x7f00000007c0)='on\x00', 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.85' (ED25519) to the list of known hosts. [ 27.889584][ T4698] cgroup: Unknown subsys name 'net' [ 27.980611][ T4698] cgroup: Unknown subsys name 'cpuset' [ 27.982748][ T4698] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.169615][ T4698] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 28.985553][ T4712] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 28.988410][ T4712] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 28.989723][ T4712] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 28.998488][ T4715] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.000104][ T4715] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.006687][ T4715] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.010215][ T4715] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.011859][ T4715] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.014293][ T4715] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.014435][ T4715] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.017309][ T4715] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.018988][ T4715] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.020780][ T4718] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.022221][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.022634][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.035182][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.036351][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.036863][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.049592][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.049858][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.053096][ T4718] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.061818][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.068473][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.077388][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.077664][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.423747][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.424018][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.424126][ T4717] bridge_slave_0: entered allmulticast mode [ 29.424606][ T4717] bridge_slave_0: entered promiscuous mode [ 29.439542][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.439604][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.439670][ T4717] bridge_slave_1: entered allmulticast mode [ 29.440110][ T4717] bridge_slave_1: entered promiscuous mode [ 29.455342][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.455545][ T4722] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.455596][ T4722] bridge_slave_0: entered allmulticast mode [ 29.456007][ T4722] bridge_slave_0: entered promiscuous mode [ 29.456948][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.456966][ T4722] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.457011][ T4722] bridge_slave_1: entered allmulticast mode [ 29.457431][ T4722] bridge_slave_1: entered promiscuous mode [ 29.464959][ T4722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.466854][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.468233][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.469601][ T4714] bridge_slave_0: entered allmulticast mode [ 29.471041][ T4714] bridge_slave_0: entered promiscuous mode [ 29.473536][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.474796][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.477441][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.478384][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.478455][ T4710] bridge_slave_0: entered allmulticast mode [ 29.478880][ T4710] bridge_slave_0: entered promiscuous mode [ 29.479940][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.479961][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.480012][ T4710] bridge_slave_1: entered allmulticast mode [ 29.480444][ T4710] bridge_slave_1: entered promiscuous mode [ 29.484750][ T4722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.490864][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.492221][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.493702][ T4714] bridge_slave_1: entered allmulticast mode [ 29.495267][ T4714] bridge_slave_1: entered promiscuous mode [ 29.503307][ T4717] team0: Port device team_slave_0 added [ 29.513901][ T4717] team0: Port device team_slave_1 added [ 29.517807][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.518673][ T4722] team0: Port device team_slave_0 added [ 29.519392][ T4722] team0: Port device team_slave_1 added [ 29.535596][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.539540][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.541324][ T4723] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.541410][ T4723] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.541471][ T4723] bridge_slave_0: entered allmulticast mode [ 29.541918][ T4723] bridge_slave_0: entered promiscuous mode [ 29.542696][ T4723] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.542719][ T4723] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.542800][ T4723] bridge_slave_1: entered allmulticast mode [ 29.543204][ T4723] bridge_slave_1: entered promiscuous mode [ 29.543811][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.543818][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.543832][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.544576][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.544584][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.544600][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.556408][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.556417][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.556430][ T4722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.564354][ T4723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.565325][ T4723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.577440][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.585360][ T4717] hsr_slave_0: entered promiscuous mode [ 29.585731][ T4717] hsr_slave_1: entered promiscuous mode [ 29.586278][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.586285][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.586297][ T4722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.589609][ T4710] team0: Port device team_slave_0 added [ 29.590701][ T4710] team0: Port device team_slave_1 added [ 29.591314][ T4723] team0: Port device team_slave_0 added [ 29.597460][ T4723] team0: Port device team_slave_1 added [ 29.604040][ T4714] team0: Port device team_slave_0 added [ 29.605185][ T4714] team0: Port device team_slave_1 added [ 29.616772][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.616799][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.616818][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.617387][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.617396][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.617412][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.634323][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.634347][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.634358][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.635206][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.635217][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.635232][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.641619][ T4722] hsr_slave_0: entered promiscuous mode [ 29.641923][ T4722] hsr_slave_1: entered promiscuous mode [ 29.642146][ T4722] debugfs: 'hsr0' already exists in 'hsr' [ 29.642180][ T4722] Cannot create hsr debugfs directory [ 29.642694][ T4723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.642701][ T4723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.642713][ T4723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.643284][ T4723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.643290][ T4723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.643301][ T4723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.675818][ T4723] hsr_slave_0: entered promiscuous mode [ 29.676179][ T4723] hsr_slave_1: entered promiscuous mode [ 29.676684][ T4723] debugfs: 'hsr0' already exists in 'hsr' [ 29.676693][ T4723] Cannot create hsr debugfs directory [ 29.678896][ T4710] hsr_slave_0: entered promiscuous mode [ 29.679278][ T4710] hsr_slave_1: entered promiscuous mode [ 29.679488][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 29.679496][ T4710] Cannot create hsr debugfs directory [ 29.705464][ T4714] hsr_slave_0: entered promiscuous mode [ 29.705758][ T4714] hsr_slave_1: entered promiscuous mode [ 29.705943][ T4714] debugfs: 'hsr0' already exists in 'hsr' [ 29.705952][ T4714] Cannot create hsr debugfs directory [ 29.805368][ T4717] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.808510][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.808840][ T4717] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.810661][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.815706][ T4717] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.818488][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.818805][ T4717] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.820783][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.839989][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.840038][ T4717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.840194][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.840230][ T4717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.843124][ T4722] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.845656][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.846001][ T4722] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.847277][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.848580][ T4722] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.849981][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.853842][ T4722] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.856147][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.876742][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.876828][ T4722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.876911][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.876944][ T4722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.883144][ T4714] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.885281][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.887010][ T4714] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.889467][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.898277][ T4714] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.900518][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.902502][ T4714] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.904589][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.922248][ T4723] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.924379][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.926591][ T4722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.927811][ T4723] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.930685][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.937911][ T4723] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.940313][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.941963][ T4723] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.944048][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.951946][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.953423][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.955239][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.957236][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.976135][ T4722] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.977602][ T4710] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.980171][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.985053][ T4710] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.987204][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.989064][ T4710] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.991070][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.992751][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.992801][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.995872][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.997202][ T4710] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.999810][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.005681][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.012569][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.012607][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.022956][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.022991][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.037213][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.037250][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.043907][ T4717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.043936][ T4717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.057039][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.072575][ T4723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.075703][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.081705][ T4723] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.086598][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.086641][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.086999][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.087019][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.096135][ T4722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.111381][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.111432][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.114541][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.114575][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.152892][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.178881][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.192080][ T2680] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.192124][ T2680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.195281][ T2680] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.195317][ T2680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.203062][ T4710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.247652][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.268283][ T4717] veth0_vlan: entered promiscuous mode [ 30.272156][ T4717] veth1_vlan: entered promiscuous mode [ 30.275848][ T4722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.293221][ T4717] veth0_macvtap: entered promiscuous mode [ 30.295586][ T4717] veth1_macvtap: entered promiscuous mode [ 30.307533][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.315109][ T4722] veth0_vlan: entered promiscuous mode [ 30.321724][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.333446][ T4722] veth1_vlan: entered promiscuous mode [ 30.372406][ T4722] veth0_macvtap: entered promiscuous mode [ 30.382420][ T4722] veth1_macvtap: entered promiscuous mode [ 30.389255][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.391670][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.396894][ T15] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.397043][ T15] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.397106][ T15] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.397156][ T15] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.439881][ T15] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.439956][ T15] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.439976][ T15] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.442008][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.446439][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.450441][ T1184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.450472][ T1184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.461195][ T1184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.476149][ T1184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.476187][ T1184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.488064][ T4723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.490267][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.490280][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.502727][ T2680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.502758][ T2680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.506493][ T4714] veth0_vlan: entered promiscuous mode [ 30.522647][ T4714] veth1_vlan: entered promiscuous mode [ 30.532334][ T4710] veth0_vlan: entered promiscuous mode [ 30.537839][ T4710] veth1_vlan: entered promiscuous mode [ 30.545950][ T4714] veth0_macvtap: entered promiscuous mode [ 30.550547][ T4722] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.555878][ T4714] veth1_macvtap: entered promiscuous mode [ 30.562138][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.564780][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.576335][ T4710] veth0_macvtap: entered promiscuous mode [ 30.588998][ T15] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.589149][ T15] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.589205][ T15] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.589264][ T15] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.596466][ T4710] veth1_macvtap: entered promiscuous mode [ 30.608062][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.612321][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.613459][ T4887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.613648][ T4887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.639858][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.639952][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.640014][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.640030][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.644987][ T4723] veth0_vlan: entered promiscuous mode [ 30.647317][ T4723] veth1_vlan: entered promiscuous mode [ 30.668881][ T2701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.668909][ T2701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.699348][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.699377][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.700698][ T4893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.701544][ T4893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.721002][ T4723] veth0_macvtap: entered promiscuous mode [ 30.722452][ T4723] veth1_macvtap: entered promiscuous mode [ 30.730499][ T1184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.730529][ T1184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.732381][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.734107][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.756956][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.756985][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.759125][ T2701] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.759539][ T2701] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.759640][ T2701] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.759654][ T2701] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.790148][ T2680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.790175][ T2680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.799462][ T4897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.799693][ T4897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.813596][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.813620][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.850000][ T4901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.850190][ T4901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.938949][ T4905] lo speed is unknown, defaulting to 1000 [ 30.940556][ T4905] lo speed is unknown, defaulting to 1000 [ 30.941465][ T4905] lo speed is unknown, defaulting to 1000 [ 30.977140][ T4905] infiniband syz0: set active [ 30.977372][ T4829] lo speed is unknown, defaulting to 1000 [ 30.977442][ T4905] infiniband syz0: added lo [ 30.985939][ T4905] RDS/IB: syz0: added [ 30.986028][ T4905] smc: adding ib device syz0 with port count 1 [ 30.986297][ T4905] smc: ib device syz0 port 1 has no pnetid [ 30.986604][ T4829] lo speed is unknown, defaulting to 1000 [ 30.987534][ T4905] lo speed is unknown, defaulting to 1000 [ 31.024052][ T4905] lo speed is unknown, defaulting to 1000 [ 31.048564][ T50] Bluetooth: hci0: command tx timeout [ 31.048573][ T4711] Bluetooth: hci1: command tx timeout [ 31.048646][ T4718] Bluetooth: hci2: command tx timeout [ 31.061007][ T4905] lo speed is unknown, defaulting to 1000 [ 31.094985][ T4905] lo speed is unknown, defaulting to 1000 [ 31.128991][ T4905] lo speed is unknown, defaulting to 1000 [ 31.138322][ T50] Bluetooth: hci4: command tx timeout [ 31.138647][ T50] Bluetooth: hci3: command tx timeout [ 31.166663][ T4910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.166983][ T4910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.498467][ T4700] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.623246][ T4915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.624705][ T4915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.648486][ T4700] usb 1-1: Using ep0 maxpacket: 8 [ 31.650157][ T4700] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 31.650983][ T4700] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 31.650995][ T4700] usb 1-1: config 0 has no interface number 0 [ 31.651013][ T4700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.653259][ T4700] usb 1-1: config 0 descriptor?? [ 31.758704][ T4700] viperboard 1-1:0.143: version 0.00 found at bus 001 address 002 [ 31.766401][ T4700] viperboard-i2c viperboard-i2c.1.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 31.766452][ T4700] viperboard-i2c viperboard-i2c.1.auto: probe with driver viperboard-i2c failed with error -5 [ 31.860936][ T4829] usb 1-1: USB disconnect, device number 2 [ 32.221008][ T4921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.221199][ T4921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.356993][ T4929] lo speed is unknown, defaulting to 1000 [ 32.410318][ T4829] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.490322][ T4932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.492892][ T4932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.571661][ T4829] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 1.00 [ 32.574206][ T4829] usb 1-1: config index 0 descriptor too short (expected 45, got 18) [ 32.574241][ T4829] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 32.583158][ T4829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.583184][ T4829] usb 1-1: Product: syz [ 32.583214][ T4829] usb 1-1: Manufacturer: syz [ 32.583228][ T4829] usb 1-1: SerialNumber: syz [ 32.593484][ T4829] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 32.593965][ T4829] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 32.596989][ T4829] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 32.649344][ T4934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.649570][ T4934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.128443][ T4718] Bluetooth: hci0: command tx timeout [ 33.128477][ T4711] Bluetooth: hci1: command tx timeout [ 33.128533][ T50] Bluetooth: hci2: command tx timeout [ 33.208210][ T4711] Bluetooth: hci4: command tx timeout [ 33.208268][ T50] Bluetooth: hci3: command tx timeout [ 33.321236][ T4937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.321418][ T4937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.795939][ T4895] usb 1-1: USB disconnect, device number 3 [ 33.797413][ T4895] garmin_gps 1-1:1.0: device disconnected [ 33.803535][ T4946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.805609][ T4946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.011528][ T4951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.013779][ T4951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.040536][ T4953] Zero length message leads to an empty skb [ 34.090607][ T4959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.093672][ T4959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.183664][ T4964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.185123][ T4964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.569219][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.718513][ T9] usb 1-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice= 0.00 [ 34.720826][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.720855][ T9] usb 1-1: Product: syz [ 34.720872][ T9] usb 1-1: Manufacturer: syz [ 34.720880][ T9] usb 1-1: SerialNumber: syz [ 34.723176][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 34.864761][ T4972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.866718][ T4972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.049861][ T9] r8152-cfgselector 1-1: reset high-speed USB device number 4 using dummy_hcd [ 35.051855][ T4976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.052299][ T4976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.208670][ T50] Bluetooth: hci0: command tx timeout [ 35.208711][ T50] Bluetooth: hci2: command tx timeout [ 35.208740][ T50] Bluetooth: hci1: command tx timeout [ 35.288637][ T4711] Bluetooth: hci3: command tx timeout [ 35.288675][ T4711] Bluetooth: hci4: command tx timeout [ 35.390767][ T4979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.390949][ T4979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.706662][ T4987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.706858][ T4987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.885573][ T4989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.886960][ T4989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.899354][ T9] r8152 1-1:1.0: USB reset failed, errno=-19 [ 35.902504][ T9] r8152-cfgselector 1-1: USB disconnect, device number 4 [ 35.916019][ T4991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.916206][ T4991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.266683][ T5001] loop0: detected capacity change from 0 to 32768 [ 36.270271][ T5001] loop1: detected capacity change from 0 to 32768 [ 36.361279][ T5010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.361552][ T5010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.768178][ T4700] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 36.928582][ T4700] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 36.932430][ T4700] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 36.932487][ T4700] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 36.937903][ T4700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.937931][ T4700] usb 1-1: Product: syz [ 36.937954][ T4700] usb 1-1: Manufacturer: syz [ 36.937967][ T4700] usb 1-1: SerialNumber: syz [ 36.941262][ T5014] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 36.941308][ T5014] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 36.947877][ T4700] gspca_main: spca501-2.14.0 probing 0000:0000 [ 36.969772][ T5019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 36.972370][ T5019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.52'. [ 36.972646][ T5019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 36.976233][ T5019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 36.981192][ T5019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 37.000636][ T5021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.000845][ T5021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.194956][ T4700] gspca_spca501: reg write: error -71 [ 37.194979][ T4700] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 37.195028][ T4700] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 37.199364][ T4700] usb 1-1: USB disconnect, device number 5 [ 37.288174][ T50] Bluetooth: hci1: command tx timeout [ 37.288207][ T50] Bluetooth: hci2: command tx timeout [ 37.288223][ T50] Bluetooth: hci0: command tx timeout [ 37.368232][ T4711] Bluetooth: hci4: command tx timeout [ 37.368271][ T4711] Bluetooth: hci3: command tx timeout [ 37.517045][ T5024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.518860][ T5024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.880630][ T5031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.881835][ T5031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.072573][ T5036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.072886][ T5036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.076010][ T5036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.078055][ T5036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.453786][ T5043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.455247][ T5043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.598768][ T5046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.598971][ T5046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.008190][ T4700] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 39.040333][ T5052] UDC core: g1: couldn't find an available UDC or it's busy [ 39.161678][ T4700] usb 1-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice= 0.00 [ 39.166368][ T4700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.167764][ T4700] usb 1-1: Product: syz [ 39.167774][ T4700] usb 1-1: Manufacturer: syz [ 39.167781][ T4700] usb 1-1: SerialNumber: syz [ 39.170149][ T4700] usb 1-1: config 0 descriptor?? [ 39.173865][ T4700] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 39.175872][ T4700] usb 1-1: Direct firmware load for dvb-usb-s630.fw failed with error -2 [ 39.176083][ T4700] usb 1-1: Falling back to sysfs fallback for: dvb-usb-s630.fw [ 39.227092][ T5061] dlm: Using TCP for communications [ 39.228729][ T5061] dlm: ls1: joining the lockspace group... [ 39.420753][ T4795] wiimote 0005:057E:0306.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 39.421622][ T4795] wiimote 0005:057E:0306.0001: New device registered [ 39.518580][ T5067] wiimote 0005:057E:0306.0001: Device removed [ 39.703271][ T5071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.703466][ T5071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.488207][ T4795] wiimote 0005:057E:0306.0001: detected device: Nintendo Wii Remote (Gen 1) [ 40.495159][ T4795] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input3 [ 40.499207][ T4795] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input4 [ 40.502186][ T4795] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input2 [ 40.720994][ T5074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.722240][ T5074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.979335][ T5077] EXT4-fs (nvme0n1p2): shut down requested (2) [ 40.979438][ T5077] Aborting journal on device nvme0n1p2-8. Jan 1 00:00:40 syzkaller kern.alert kernel: [ 40.979335][ T5077] EXT4-fs (nvme0n1p2): shut down requested (2) [ ** replaying previous printk message ** [ 41.135208][ T5078] Unable to handle kernel paging request at virtual address dfff800000000001 [ 41.135248][ T5078] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 41.135258][ T5078] Mem abort info: [ 41.135263][ T5078] ESR = 0x0000000096000005 [ 41.135269][ T5078] EC = 0x25: DABT (current EL), IL = 32 bits [ 41.135275][ T5078] SET = 0, FnV = 0 [ 41.135280][ T5078] EA = 0, S1PTW = 0 [ 41.135284][ T5078] FSC = 0x05: level 1 translation fault [ 41.135289][ T5078] Data abort info: [ 41.135292][ T5078] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 41.135297][ T5078] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 41.135302][ T5078] GCS = 0, Overlay = 0, DirtyBit = 0 [ 41.135307][ T5078] [dfff800000000001] address between user and kernel address ranges [ 41.135350][ T5078] Internal error: Oops: 0000000096000005 [#1] SMP [ 41.149727][ T5078] Modules linked in: [ 41.150413][ T5078] CPU: 0 UID: 0 PID: 5078 Comm: syz.0.70 Not tainted syzkaller #0 PREEMPT [ 41.152055][ T5078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 41.153892][ T5078] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 41.155216][ T5078] pc : software_node_register+0x30/0xd4 [ 41.156195][ T5078] lr : software_node_register+0x28/0xd4 [ 41.157176][ T5078] sp : ffff800098317500 [ 41.157874][ T5078] x29: ffff800098317500 x28: 0000000000000000 x27: ffff0000c2b100d0 [ 41.159204][ T5078] x26: dfff800000000000 x25: ffff700013062eb4 x24: 0000000000001ae0 [ 41.160680][ T5078] x23: 0000000000000001 x22: dfff800000000000 x21: 0000000000000008 [ 41.162042][ T5078] x20: 0000000000000000 x19: 0000000000000000 x18: 00000000ffffffff [ 41.163468][ T5078] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 41.164803][ T5078] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 [ 41.166111][ T5078] x11: 0000000000000000 x10: 0000000000080000 x9 : 00000000000036ca [ 41.167508][ T5078] x8 : ffff80009c2d7000 x7 : 0000010000003fff x6 : 0000010000000000 [ 41.168860][ T5078] x5 : ffff0000f2ec0780 x4 : 0000000000000400 x3 : ffff8000831b4440 [ 41.170220][ T5078] x2 : 0000000000001ae0 x1 : ffff0000d9230000 x0 : 0000000000000001 [ 41.171554][ T5078] Call trace: [ 41.172087][ T5078] software_node_register+0x30/0xd4 (P) [ 41.173065][ T5078] device_add_software_node+0x16c/0x1cc [ 41.174032][ T5078] dwc3_pci_probe+0x460/0x8e4 [ 41.174868][ T5078] local_pci_probe+0xc8/0x158 [ 41.175694][ T5078] pci_device_probe+0x460/0x8d4 [ 41.176526][ T5078] really_probe+0x29c/0x800 [ 41.177275][ T5078] __driver_probe_device+0x1e0/0x350 [ 41.178173][ T5078] device_driver_attach+0x58/0xac [ 41.179041][ T5078] bind_store+0xf4/0x14c [ 41.179813][ T5078] drv_attr_store+0x80/0xa4 [ 41.180593][ T5078] sysfs_kf_write+0xe0/0x108 [ 41.181388][ T5078] kernfs_fop_write_iter+0x260/0x3b8 [ 41.182299][ T5078] vfs_write+0x51c/0xa0c [ 41.183030][ T5078] ksys_write+0x12c/0x228 [ 41.183791][ T5078] __arm64_sys_write+0x84/0x98 [ 41.184614][ T5078] invoke_syscall+0x98/0x244 [ 41.185373][ T5078] el0_svc_common+0xec/0x23c [ 41.186172][ T5078] do_el0_svc+0x4c/0x5c [ 41.186859][ T5078] el0_svc+0x64/0x260 [ 41.187547][ T5078] el0t_64_sync_handler+0x44/0x104 [ 41.188395][ T5078] el0t_64_sync+0x198/0x19c [ 41.189224][ T5078] Code: f2fbfff6 9784ff86 91002275 d343feb7 (38766ae8) [ 41.190389][ T5078] ---[ end trace 0000000000000000 ]--- [ 41.422316][ T5078] Kernel panic - not syncing: Oops: Fatal exception [ 41.423481][ T5078] SMP: stopping secondary CPUs [ 41.424315][ T5078] Kernel Offset: disabled [ 41.425060][ T5078] CPU features: 0x14000000,003c0008,27020a02,a84ff6a7 [ 41.426218][ T5078] Memory Limit: none [ 41.661463][ T5078] Rebooting in 86400 seconds..