last executing test programs: 12.229258177s ago: executing program 4 (id=32): r0 = syz_usb_connect(0x3, 0x4c, &(0x7f0000000080)=ANY=[@ANYBLOB="12011002000000401111222200010000000109023a00010100800009040000040806620007050102000200032401070581020002000324020705820200020003240307050202000200032404"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x20, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x82, 0x24, &(0x7f0000000200)="000006021f00000053797a554153202053797a4469736b202020202020202020312e3030") syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000300)="0300000100"/16) syz_usb_ep_read(r0, 0x1, 0x20, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000300)="0300000100"/16) syz_usb_ep_read(r0, 0x1, 0x20, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000300)="0300000100"/16) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x1, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffd, 0xa, 0x20, @buffer={0x0, 0x200, &(0x7f0000000500)}, &(0x7f0000000600)="28000000000000000100", &(0x7f0000000700), 0x4e20, 0x0, 0x1, 0x0}) (async) syz_usb_ep_read(r0, 0x1, 0x20, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000200)="06000001") nanosleep(&(0x7f0000000300)={0x1}, 0x0) 8.364185473s ago: executing program 2 (id=51): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/cluster/mycluster/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/cluster/mycluster/node/node0/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='127.0.0.1\n\x00', 0xa) write(0xffffffffffffffff, &(0x7f0000000d00)='7777\n\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/cluster/mycluster/node/node0/num\x00', 0x1, 0x0) write(r1, &(0x7f0000000900)='0\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/cluster/mycluster/node/node0/local\x00', 0x1, 0x0) write(r2, 0x0, 0x0) 8.286246425s ago: executing program 2 (id=52): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4"}}], 0x12}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000200)={0x0, 0x1}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000200)) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000200)={0x0, 0x1}) 7.635055951s ago: executing program 4 (id=53): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0x1d6b\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='0x0104\n', 0x7) close(r1) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='fedcba9876543210\n', 0x11) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r3, &(0x7f0000000c00)='Linux Foundation\n', 0x11) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r4, &(0x7f0000000e00)='Multifunction Gadget\n', 0x15) close(r4) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x1, 0x0) write(r5, &(0x7f0000001200)='Conf 1\n', 0x7) close(r5) mkdir(&(0x7f0000001300)='./config/usb_gadget/g1/functions/ecm.syzkaller0\x00', 0x1ff) symlink(&(0x7f0000001400)='./config/usb_gadget/g1/functions/ecm.syzkaller0\x00', &(0x7f0000001500)='./config/usb_gadget/g1/configs/c.1/ecm.syzkaller0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000001700)='dummy_udc.0\n', 0xc) close(r6) nanosleep(&(0x7f0000002000)={0x0, 0xbebc200}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001800)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000001900)={'syzkaller0\x00', 0x1}) bind$packet(r7, &(0x7f0000001a00)={0x11, 0x300, r8, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) write(r7, &(0x7f0000001b00)="0102030405060708090a0b0c0d0e0f", 0xf) 7.104301854s ago: executing program 1 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r0 = syz_usbip_server_init(0x3) write$usbip_server(r0, &(0x7f0000000000)=@ret_submit={{0x3, 0x1, 0x0, 0x1}, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, "120100020000004001000100000001020301"}, 0x42) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 7.103900424s ago: executing program 2 (id=57): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0x1d6b\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='0x0104\n', 0x7) close(r1) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='fedcba9876543210\n', 0x11) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r3, &(0x7f0000000c00)='Linux Foundation\n', 0x11) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r4, &(0x7f0000000e00)='Multifunction Gadget\n', 0x15) close(r4) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x1, 0x0) write(r5, &(0x7f0000001200)='Conf 1\n', 0x7) close(r5) mkdir(&(0x7f0000001300)='./config/usb_gadget/g1/functions/ecm.syzkaller0\x00', 0x1ff) symlink(&(0x7f0000001400)='./config/usb_gadget/g1/functions/ecm.syzkaller0\x00', &(0x7f0000001500)='./config/usb_gadget/g1/configs/c.1/ecm.syzkaller0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000001700)='dummy_udc.0\n', 0xc) close(r6) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001800)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000001900)={'syzkaller0\x00', 0x1}) bind$packet(r7, &(0x7f0000001a00)={0x11, 0x300, r8, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) write(r7, &(0x7f0000001b00)="0102030405060708090a0b0c0d0e0f", 0xf) 6.663552945s ago: executing program 4 (id=59): syz_usb_connect(0x0, 0x55, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0612010001010203010902430001010080320904000007ff00000007058102400001070501024000010705020240000107058502400001070505024000010705870340000107050702400001"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x2) 6.213732056s ago: executing program 3 (id=61): mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./mysys/bus/pci/drivers/xhci_hcd/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='8086 10d3\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./mysys/bus/pci/devices/0000:00:1d.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000740)='0000:00:1d.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./mysys/bus/pci/drivers/xhci_hcd/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000e40)='0000:00:1d.0\x00', 0xd) 6.090535959s ago: executing program 1 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/cluster/mycluster/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/cluster/mycluster/node/node0/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='127.0.0.1\n\x00', 0xa) write(0xffffffffffffffff, &(0x7f0000000d00)='7777\n\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/cluster/mycluster/node/node0/num\x00', 0x1, 0x0) write(r1, &(0x7f0000000900)='0\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/cluster/mycluster/node/node0/local\x00', 0x1, 0x0) write(r2, 0x0, 0x0) 6.006114401s ago: executing program 2 (id=63): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ac0518920000000000010902200001010080320904000001030000000705810302000a"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x409}}]}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_disconnect(r0) 5.916226703s ago: executing program 3 (id=64): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_XEN_HVM(r1, 0x4068aea3, &(0x7f0000000000)={0x26, 0x0, 0x1}) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x40000200, &(0x7f0000000200)='\x00', &(0x7f0000000300)='\x00', 0x1, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x40000200, 0x0, 0x1000}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x40000200}]}) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x40000200, 0x0, 0x1000}]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.824363036s ago: executing program 1 (id=65): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./config/dlm/c1/comms/1/addr\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)="020000007f00000100"/128, 0x80) 5.605820581s ago: executing program 1 (id=66): syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405a06090000010102000109021900010100c0000904000001ff00000007058102000100"], 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000200)) 5.360361577s ago: executing program 3 (id=68): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/bdc/bind\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0), 0x0) 5.286763389s ago: executing program 3 (id=69): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0x1d6b\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='0x0104\n', 0x7) close(r1) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='fedcba9876543210\n', 0x11) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r3, &(0x7f0000000c00)='Linux Foundation\n', 0x11) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r4, &(0x7f0000000e00)='Multifunction Gadget\n', 0x15) close(r4) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x1, 0x0) write(r5, &(0x7f0000001200)='Conf 1\n', 0x7) close(r5) mkdir(&(0x7f0000001300)='./config/usb_gadget/g1/functions/ecm.syzkaller0\x00', 0x1ff) symlink(&(0x7f0000001400)='./config/usb_gadget/g1/functions/ecm.syzkaller0\x00', &(0x7f0000001500)='./config/usb_gadget/g1/configs/c.1/ecm.syzkaller0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000001700)='dummy_udc.0\n', 0xc) close(r6) nanosleep(&(0x7f0000002000)={0x0, 0xbebc200}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001800)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000001900)={'syzkaller0\x00', 0x1}) bind$packet(r7, &(0x7f0000001a00)={0x11, 0x300, r8, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) write(r7, &(0x7f0000001b00)="0102030405060708090a0b0c0d0e0f", 0xf) 4.798551291s ago: executing program 4 (id=70): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022d000100000000090400000903000000092100000001222200090581030800000000090503030800000000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_read(r1, 0x3, 0x1f, &(0x7f0000000080)=""/31) syz_usb_ep_write(r1, 0x81, 0x24, &(0x7f00000000c0)="000005021f00000053595a20202020204449534b202020202020202020202020312e3020") syz_usb_ep_write(r1, 0x81, 0xd, &(0x7f0000000100)="55534253010000000000000000") 4.791218911s ago: executing program 3 (id=71): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/devices/QEMU0001:00/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='ohci-platform\x00', 0xe) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/drivers/ohci-platform/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000700), 0x0) 4.623817785s ago: executing program 3 (id=72): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040341902120100010203010902200001010080fa0904000002ff0000000705010200020007058102000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0xb, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000410)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/drivers/f81534/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1-1:1.0\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/drivers_probe\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1-1:1.0\x00', 0x8) 3.23482425s ago: executing program 0 (id=74): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405c6929380000010203010902120001010080fa0904000000ff000000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x0) ioctl$FE_SET_VOLTAGE(r0, 0x6d03, &(0x7f0000000100)=0x1) 2.752270151s ago: executing program 2 (id=75): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/cluster/mycluster/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/cluster/mycluster/node/node0/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='127.0.0.1\n\x00', 0xa) write(0xffffffffffffffff, &(0x7f0000000d00)='7777\n\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/cluster/mycluster/node/node0/num\x00', 0x1, 0x0) write(r1, &(0x7f0000000900)='0\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/cluster/mycluster/node/node0/local\x00', 0x1, 0x0) write(r2, 0x0, 0x0) 2.699980753s ago: executing program 2 (id=76): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x242, 0x1a0) pwrite64(r0, &(0x7f0000000100)="0000000000000000020000000000000001000000533153555350454e4400533153555350454e4400", 0x28, 0xfd8) pwrite64(r0, &(0x7f0000000200)="9f86010000000000", 0x8, 0x2ff8) pwrite64(r0, &(0x7f0000000300)='\x00', 0x1, 0xffff) r1 = syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(&(0x7f0000000800)=@filename='none\x00', &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/power/resume\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='7:0', 0x3) 2.174974986s ago: executing program 1 (id=77): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0x1d6b\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='0x0104\n', 0x7) close(r1) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='fedcba9876543210\n', 0x11) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r3, &(0x7f0000000c00)='Linux Foundation\n', 0x11) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r4, &(0x7f0000000e00)='Multifunction Gadget\n', 0x15) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x1, 0x0) write(r5, &(0x7f0000001200)='Conf 1\n', 0x7) close(r5) mkdir(&(0x7f0000001300)='./config/usb_gadget/g1/functions/ecm.syzkaller0\x00', 0x1ff) symlink(&(0x7f0000001400)='./config/usb_gadget/g1/functions/ecm.syzkaller0\x00', &(0x7f0000001500)='./config/usb_gadget/g1/configs/c.1/ecm.syzkaller0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000001700)='dummy_udc.0\n', 0xc) close(r6) nanosleep(&(0x7f0000002000)={0x0, 0xbebc200}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001800)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000001900)={'syzkaller0\x00', 0x1}) bind$packet(r7, &(0x7f0000001a00)={0x11, 0x300, r8, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) write(r7, &(0x7f0000001b00)="0102030405060708090a0b0c0d0e0f", 0xf) 1.713268638s ago: executing program 1 (id=78): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffff0040950b801700010102030109022700010100a0fa0904000003ffff000007058102000200070502020002000705830340000b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x7, 0x2, 0x1e1}, &(0x7f0000000080)={0x40, 0x9, 0x1}, &(0x7f00000000c0)={0x40, 0xb, 0x2, "ffff"}, &(0x7f0000000100)={0x40, 0xf, 0x2}, &(0x7f0000000140)={0x40, 0x13, 0x6, @random="001122334455"}, 0x0, &(0x7f0000000180)={0x40, 0x19, 0x2, "0010"}, &(0x7f00000001c0)={0x40, 0x1a, 0x2}, 0x0, &(0x7f0000000200)={0x40, 0x1e, 0x1}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x40, 0x7, 0x2, 0x1e1}, &(0x7f0000000280)={0x40, 0x9, 0x1}, &(0x7f00000002c0)={0x40, 0xb, 0x2, "ffff"}, &(0x7f0000000340)={0x40, 0xf, 0x2}, &(0x7f0000000380)={0x40, 0x13, 0x6, @random="001122334455"}, 0x0, &(0x7f00000003c0)={0x40, 0x19, 0x2, "0010"}, &(0x7f0000000400)={0x40, 0x1a, 0x2}, 0x0, &(0x7f0000000440)={0x40, 0x1e, 0x1}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x1e1}, &(0x7f00000004c0)={0x40, 0x9, 0x1}, &(0x7f0000000500)={0x40, 0xb, 0x2, "ffff"}, &(0x7f0000000540)={0x40, 0xf, 0x2}, &(0x7f0000000580)={0x40, 0x13, 0x6, @random="001122334455"}, 0x0, &(0x7f00000005c0)={0x40, 0x19, 0x2, "0010"}, &(0x7f0000000600)={0x40, 0x1a, 0x2}, 0x0, &(0x7f0000000640)={0x40, 0x1e, 0x1}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x1e1}, &(0x7f00000006c0)={0x40, 0x9, 0x1}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ffff"}, &(0x7f0000000740)={0x40, 0xf, 0x2}, &(0x7f0000000780)={0x40, 0x13, 0x6, @random="001122334455"}, 0x0, &(0x7f00000007c0)={0x40, 0x19, 0x2, "0010"}, &(0x7f0000000800)={0x40, 0x1a, 0x2}, 0x0, &(0x7f0000000840)={0x40, 0x1e, 0x1}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x1e1}, &(0x7f00000008c0)={0x40, 0x9, 0x1}, &(0x7f0000000900)={0x40, 0xb, 0x2, "ffff"}, &(0x7f0000000940)={0x40, 0xf, 0x2}, &(0x7f0000000980)={0x40, 0x13, 0x6, @random="001122334455"}, 0x0, &(0x7f00000009c0)={0x40, 0x19, 0x2, "0010"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2}, 0x0, &(0x7f0000000a40)={0x40, 0x1e, 0x1}, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) ioctl(r1, 0x8914, &(0x7f0000002000)="657468320000000000000000000000000100"/40) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x40, 0x7, 0x2, 0x1e1}, &(0x7f0000000ac0)={0x40, 0x9, 0x1}, &(0x7f0000000b00)={0x40, 0xb, 0x2, "ffff"}, &(0x7f0000000b40)={0x40, 0xf, 0x2}, &(0x7f0000000b80)={0x40, 0x13, 0x6, @random="001122334455"}, 0x0, &(0x7f0000000bc0)={0x40, 0x19, 0x2, "0010"}, &(0x7f0000000c00)={0x40, 0x1a, 0x2}, 0x0, &(0x7f0000000c40)={0x40, 0x1e, 0x1}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)={0x40, 0x7, 0x2, 0x1e1}, &(0x7f0000000cc0)={0x40, 0x9, 0x1}, &(0x7f0000000d00)={0x40, 0xb, 0x2, "ffff"}, &(0x7f0000000d40)={0x40, 0xf, 0x2}, &(0x7f0000000d80)={0x40, 0x13, 0x6, @random="001122334455"}, 0x0, &(0x7f0000000dc0)={0x40, 0x19, 0x2, "0010"}, &(0x7f0000000e00)={0x40, 0x1a, 0x2}, 0x0, &(0x7f0000000e40)={0x40, 0x1e, 0x1}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0x1e1}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "ffff"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @random="001122334455"}, 0x0, &(0x7f0000000fc0)={0x40, 0x19, 0x2, "0010"}, &(0x7f00000010c0)={0x40, 0x1a, 0x2}, 0x0, &(0x7f0000001100)={0x40, 0x1e, 0x1}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)={0x40, 0x7, 0x2, 0x1e1}, &(0x7f0000001180)={0x40, 0x9, 0x1}, &(0x7f00000011c0)={0x40, 0xb, 0x2, "ffff"}, &(0x7f0000001200)={0x40, 0xf, 0x2}, &(0x7f0000001240)={0x40, 0x13, 0x6, @random="001122334455"}, 0x0, &(0x7f0000001280)={0x40, 0x19, 0x2, "0010"}, &(0x7f00000012c0)={0x40, 0x1a, 0x2}, 0x0, &(0x7f0000001300)={0x40, 0x1e, 0x1}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)={0x40, 0x7, 0x2, 0x1e1}, &(0x7f0000001380)={0x40, 0x9, 0x1}, &(0x7f00000013c0)={0x40, 0xb, 0x2, "ffff"}, &(0x7f0000001400)={0x40, 0xf, 0x2}, &(0x7f0000001440)={0x40, 0x13, 0x6, @random="001122334455"}, 0x0, &(0x7f0000001480)={0x40, 0x19, 0x2, "0010"}, &(0x7f00000014c0)={0x40, 0x1a, 0x2}, 0x0, &(0x7f0000001500)={0x40, 0x1e, 0x1}, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1.240277559s ago: executing program 0 (id=79): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/bdc/bind\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0), 0x0) 1.187910761s ago: executing program 0 (id=80): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ed) mount(&(0x7f0000000100)=@filename='devtmpfs\x00', &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc013fd03, &(0x7f0000000500)="04000000000000000000000000000000746573745f636163686500") 1.063398374s ago: executing program 0 (id=81): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x1000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./file1\x00', 0x42, 0x1b6) ftruncate(r1, 0x1000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x42, 0x1b6) ftruncate(r2, 0x1000000) r3 = syz_open_dev$loop(&(0x7f0000000060), 0x0, 0x2) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x1, 0x2) ioctl$LOOP_SET_FD(r4, 0x4c00, r1) r5 = syz_open_dev$loop(&(0x7f00000000a0), 0x2, 0x2) ioctl$LOOP_SET_FD(r5, 0x4c00, r2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000120)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000160)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r6, &(0x7f00000001a0)='md0\n', 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f00000001e0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r7, &(0x7f0000000220)='raid5\n', 0x6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r8, &(0x7f0000000280)='131072\n', 0x7) r9 = openat(0xffffffffffffff9c, &(0x7f00000002a0)='./sys/block/md0/md/layout\x00', 0x1, 0x0) write(r9, &(0x7f00000002e0)='0\n', 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r10, &(0x7f0000000340)='3\n', 0x2) r11 = openat(0xffffffffffffff9c, &(0x7f0000000360)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r11, &(0x7f00000003a0)='7:0\n', 0x4) r12 = openat(0xffffffffffffff9c, &(0x7f00000003e0)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r12, &(0x7f0000000420)='7:1\n', 0x4) r13 = openat(0xffffffffffffff9c, &(0x7f0000000460)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r13, &(0x7f00000004a0)='7:2\n', 0x4) r14 = openat(0xffffffffffffff9c, &(0x7f00000004e0)='./sys/block/md0/md/dev-loop0/slot\x00', 0x1, 0x0) write(r14, &(0x7f0000000520)='0\n', 0x2) r15 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/dev-loop1/slot\x00', 0x1, 0x0) write(r15, &(0x7f0000000580)='1\n', 0x2) r16 = openat(0xffffffffffffff9c, &(0x7f00000005a0)='./sys/block/md0/md/dev-loop2/slot\x00', 0x1, 0x0) write(r16, &(0x7f00000005e0)='2\n', 0x2) r17 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r17, &(0x7f0000000640)='active\n', 0x7) write(r8, &(0x7f0000000680)='262144\n', 0x7) write(r9, &(0x7f00000006a0)='1\n', 0x2) 728.260512ms ago: executing program 0 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/devices/QEMU0001:00/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='ohci-platform\x00', 0xe) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/drivers/ohci-platform/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='QEMU00', 0x6) 602.177605ms ago: executing program 0 (id=83): r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402505a1a400010000000109024300020100c000090400000102020100052400100105240100010424020f05240600010705810310000a09040100020a0000000705820200020007050102000200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./dev_acm\x00', 0x81ae, 0xa600) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev_acm\x00', 0x2, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) 331.891722ms ago: executing program 4 (id=84): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0x1d6b\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='0x0104\n', 0x7) close(r1) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000a00)='fedcba9876543210\n', 0x11) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r2, &(0x7f0000000c00)='Linux Foundation\n', 0x11) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000e00)='Multifunction Gadget\n', 0x15) close(r3) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x1, 0x0) write(r4, &(0x7f0000001200)='Conf 1\n', 0x7) close(r4) mkdir(&(0x7f0000001300)='./config/usb_gadget/g1/functions/ecm.syzkaller0\x00', 0x1ff) symlink(&(0x7f0000001400)='./config/usb_gadget/g1/functions/ecm.syzkaller0\x00', &(0x7f0000001500)='./config/usb_gadget/g1/configs/c.1/ecm.syzkaller0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000001700)='dummy_udc.0\n', 0xc) close(r5) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001800)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000001900)={'syzkaller0\x00', 0x1}) bind$packet(r6, &(0x7f0000001a00)={0x11, 0x300, r7, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) write(r6, &(0x7f0000001b00)="0102030405060708090a0b0c0d0e0f", 0xf) 0s ago: executing program 4 (id=85): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x777) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget\x00', 0x777) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x777) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions\x00', 0x777) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0/ifname\x00', 0x0, 0x0) read(r0, &(0x7f0000000200), 0x100) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.169' (ED25519) to the list of known hosts. [ 72.405971][ T4260] cgroup: Unknown subsys name 'net' [ 72.511191][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.050868][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 76.346301][ T4274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.354641][ T4274] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.362735][ T4274] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.370821][ T4274] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.391772][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.399893][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.407502][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.415099][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.425562][ T4285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.433291][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.466356][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.480182][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.488164][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.495468][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.502509][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.511402][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.520244][ T4274] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.544970][ T4274] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.552795][ T4274] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.560510][ T4274] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.568187][ T4274] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.576567][ T4290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.584467][ T4290] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.601260][ T4290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.625083][ T4290] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.633607][ T4290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.642759][ T4290] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.651187][ T4290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.659162][ T4290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.667986][ T4290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.084027][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 77.201212][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.209983][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.218883][ T4283] device bridge_slave_0 entered promiscuous mode [ 77.231281][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.238702][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.246731][ T4283] device bridge_slave_1 entered promiscuous mode [ 77.258422][ T4288] chnl_net:caif_netlink_parms(): no params data found [ 77.272500][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 77.290378][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 77.335796][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 77.359702][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.401322][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.476082][ T4283] team0: Port device team_slave_0 added [ 77.510147][ T4283] team0: Port device team_slave_1 added [ 77.519912][ T4288] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.527499][ T4288] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.536018][ T4288] device bridge_slave_0 entered promiscuous mode [ 77.577582][ T4288] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.584741][ T4288] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.593243][ T4288] device bridge_slave_1 entered promiscuous mode [ 77.602523][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.614553][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.622842][ T4277] device bridge_slave_0 entered promiscuous mode [ 77.644140][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.655073][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.663387][ T4279] device bridge_slave_0 entered promiscuous mode [ 77.680553][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.690617][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.699823][ T4277] device bridge_slave_1 entered promiscuous mode [ 77.716363][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.723338][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.749993][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.762106][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.771362][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.781381][ T4272] device bridge_slave_0 entered promiscuous mode [ 77.789461][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.797945][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.806715][ T4279] device bridge_slave_1 entered promiscuous mode [ 77.827881][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.835647][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.861991][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.873464][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.883539][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.892528][ T4272] device bridge_slave_1 entered promiscuous mode [ 77.915959][ T4288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.931332][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.963076][ T4288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.981589][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.007443][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.021761][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.032922][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.055110][ T4277] team0: Port device team_slave_0 added [ 78.063996][ T4288] team0: Port device team_slave_0 added [ 78.089984][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.101282][ T4288] team0: Port device team_slave_1 added [ 78.129668][ T4277] team0: Port device team_slave_1 added [ 78.174568][ T4279] team0: Port device team_slave_0 added [ 78.184483][ T4272] team0: Port device team_slave_0 added [ 78.206694][ T4283] device hsr_slave_0 entered promiscuous mode [ 78.213547][ T4283] device hsr_slave_1 entered promiscuous mode [ 78.222539][ T4279] team0: Port device team_slave_1 added [ 78.229395][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.236605][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.262848][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.275601][ T4272] team0: Port device team_slave_1 added [ 78.281868][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.292382][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.322035][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.334020][ T4288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.341119][ T4288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.367480][ T4288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.379960][ T4288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.387229][ T4288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.413280][ T4288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.477889][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.485353][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.511472][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.531851][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.538999][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.565391][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.576831][ T4290] Bluetooth: hci0: command 0x0409 tx timeout [ 78.585521][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.592530][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.618676][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.630552][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.637788][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.663961][ T4290] Bluetooth: hci3: command 0x0409 tx timeout [ 78.663981][ T4291] Bluetooth: hci1: command 0x0409 tx timeout [ 78.664330][ T4291] Bluetooth: hci2: command 0x0409 tx timeout [ 78.670443][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.735912][ T4286] Bluetooth: hci4: command 0x0409 tx timeout [ 78.747482][ T4277] device hsr_slave_0 entered promiscuous mode [ 78.754505][ T4277] device hsr_slave_1 entered promiscuous mode [ 78.762504][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.770601][ T4277] Cannot create hsr debugfs directory [ 78.837406][ T4288] device hsr_slave_0 entered promiscuous mode [ 78.844495][ T4288] device hsr_slave_1 entered promiscuous mode [ 78.851625][ T4288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.859390][ T4288] Cannot create hsr debugfs directory [ 78.868574][ T4279] device hsr_slave_0 entered promiscuous mode [ 78.875950][ T4279] device hsr_slave_1 entered promiscuous mode [ 78.882778][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.890460][ T4279] Cannot create hsr debugfs directory [ 78.956018][ T4272] device hsr_slave_0 entered promiscuous mode [ 78.963079][ T4272] device hsr_slave_1 entered promiscuous mode [ 78.970014][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.979970][ T4272] Cannot create hsr debugfs directory [ 79.244053][ T4283] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.281640][ T4283] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.290925][ T4283] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.310623][ T4283] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.381950][ T4277] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.395226][ T4277] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.405115][ T4277] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.417731][ T4277] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.483869][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.508591][ T4288] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.518200][ T4288] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.532678][ T4288] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.554475][ T4288] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.598771][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.612027][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.622221][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.653481][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.664654][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.674489][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.681927][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.694488][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.721765][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.729669][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.739330][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.749757][ T1225] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.757100][ T1225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.796341][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.809271][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.818132][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.829258][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.838416][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.855150][ T4272] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.867260][ T4272] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.881544][ T4272] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.898022][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.906838][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.923533][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.935526][ T4272] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.959283][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.968504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.977661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.985827][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.993777][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.002469][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.013416][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.062360][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.086102][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.094725][ T1225] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.101907][ T1225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.118462][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.129886][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.142645][ T1225] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.149840][ T1225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.164394][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.174226][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.202385][ T4288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.225954][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.241199][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.251194][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.306593][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.314675][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.324392][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.334380][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.343397][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.352228][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.360406][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.370928][ T4279] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.411852][ T4288] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.420412][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.440446][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.454620][ T4279] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.478002][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.503450][ T4279] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.515664][ T4279] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.537378][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.556635][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.565821][ T1225] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.572951][ T1225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.582517][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.591571][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.601597][ T1225] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.608777][ T1225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.640626][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.651153][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.659374][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 80.671818][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.703425][ T4288] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.714465][ T4288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.735334][ T4290] Bluetooth: hci2: command 0x041b tx timeout [ 80.736725][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 80.741396][ T4290] Bluetooth: hci1: command 0x041b tx timeout [ 80.766469][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.783935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.793728][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.803485][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.812435][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.820432][ T4290] Bluetooth: hci4: command 0x041b tx timeout [ 80.829380][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.839068][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.848297][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.860800][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.895051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.904042][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.953695][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.972277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.981903][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.990449][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.999581][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.013200][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.042257][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.055764][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.078223][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.085398][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.097386][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.119846][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.156030][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.167651][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.177844][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.185033][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.226298][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.234650][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.247477][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.266324][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.287257][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.305904][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.315455][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.349638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.363937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.384098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.394206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.411126][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.418347][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.432548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.440914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.458448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.476025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.490375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.499913][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.507104][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.546173][ T4283] device veth0_vlan entered promiscuous mode [ 81.570439][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.584769][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.601338][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.611140][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.625070][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.633591][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.642700][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.652247][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.680272][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.691389][ T4283] device veth1_vlan entered promiscuous mode [ 81.712739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.722277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.746353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.753873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.762224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.772426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.781872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.791423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.801010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.810198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.831061][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.856181][ T4279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.876961][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.907473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.917021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.937897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.947551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.976234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.993399][ T4288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.030814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.056224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.078105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.086497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.128876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.159936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.174155][ T4283] device veth0_macvtap entered promiscuous mode [ 82.195432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.203761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.219758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.240210][ T4283] device veth1_macvtap entered promiscuous mode [ 82.262070][ T4288] device veth0_vlan entered promiscuous mode [ 82.289398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.299833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.326874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.347385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.356078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.391223][ T4288] device veth1_vlan entered promiscuous mode [ 82.412283][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.449936][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.473038][ T4288] device veth0_macvtap entered promiscuous mode [ 82.488269][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.498943][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.511139][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.520615][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.532197][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.541541][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.557476][ T4283] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.577424][ T4283] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.593446][ T4283] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.602703][ T4283] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.617473][ T4288] device veth1_macvtap entered promiscuous mode [ 82.641039][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.652501][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.738808][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.750555][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 82.760131][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.773003][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.785511][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.796753][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.809138][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.816836][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 82.817007][ T4290] Bluetooth: hci3: command 0x040f tx timeout [ 82.822911][ T4286] Bluetooth: hci2: command 0x040f tx timeout [ 82.856524][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.895084][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 82.901669][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.931222][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.950667][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.975664][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.987658][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.007929][ T4288] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.018218][ T4288] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.027429][ T4288] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.036863][ T4288] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.053700][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.072510][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.080648][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.147994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.159101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.176916][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.188018][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.220439][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.238294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.286416][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.296246][ T4306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.306395][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.316660][ T4306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.342873][ T4277] device veth0_vlan entered promiscuous mode [ 83.373827][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.383390][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.393183][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.402411][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.411735][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.447628][ T4306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.456567][ T4306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.464080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.482791][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.493253][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.521648][ T4272] device veth0_vlan entered promiscuous mode [ 83.533523][ T4277] device veth1_vlan entered promiscuous mode [ 83.547640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.562190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.571264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.581862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.592482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.653150][ T4279] device veth0_vlan entered promiscuous mode [ 83.668628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.678788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.688822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.704598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.713099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.729840][ T4272] device veth1_vlan entered promiscuous mode [ 83.745498][ T4357] ucsi_ccg 0-0008: failed to get FW build information [ 83.757345][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.765738][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.788271][ T4279] device veth1_vlan entered promiscuous mode [ 83.810054][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.823674][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.834370][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.846567][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.880912][ T4277] device veth0_macvtap entered promiscuous mode [ 83.887425][ T4357] ucsi_ccg 0-0008: ucsi_ccg_init failed - -110 [ 83.893855][ T4357] ucsi_ccg: probe of 0-0008 failed with error -110 [ 83.904594][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.914471][ T4357] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 83.935277][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.954567][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.988960][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.017334][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.039011][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.055860][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.072907][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.105433][ T4277] device veth1_macvtap entered promiscuous mode [ 84.120528][ T4272] device veth0_macvtap entered promiscuous mode [ 84.137176][ T4362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.151118][ T4279] device veth0_macvtap entered promiscuous mode [ 84.169735][ T4362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.170723][ T4279] device veth1_macvtap entered promiscuous mode [ 84.193042][ T4272] device veth1_macvtap entered promiscuous mode [ 84.204445][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.221454][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.231812][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.243459][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.262545][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.276235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.284401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.293965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.302483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.311518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.320241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.331777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.351007][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.362135][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.366313][ T2124] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.373433][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.391864][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.405072][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.415229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.426077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.442155][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.456515][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.468562][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.480292][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.493203][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.513094][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.525289][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.537979][ T4277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.548666][ T4277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.558856][ T4277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.568500][ T4277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.579886][ T2124] usb 2-1: Using ep0 maxpacket: 8 [ 84.589530][ T2124] usb 2-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice= 1.00 [ 84.599139][ T2124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.600684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.623201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.640563][ T2124] usbsevseg 2-1:1.0: USB 7 Segment device now attached [ 84.652511][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.668160][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.684003][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.694971][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.708748][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.719257][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.734569][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.755042][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.776354][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.791414][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.802199][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.825880][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 84.835001][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.845904][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.856578][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.867359][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.879249][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.887384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.896359][ T4290] Bluetooth: hci3: command 0x0419 tx timeout [ 84.896376][ T4286] Bluetooth: hci1: command 0x0419 tx timeout [ 84.902416][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 84.911462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.924317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.933381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.949810][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.975804][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 84.986011][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.001833][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.012464][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.022348][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.034184][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.044145][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.054646][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.068862][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.085922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.096152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.113124][ T4272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.122345][ T4272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.131468][ T4272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.143206][ T4272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.161188][ T4279] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.170731][ T4279] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.181283][ T4279] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.191482][ T4279] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.255159][ T4321] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.297401][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.322188][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.330467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.365679][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.374094][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.415838][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.443191][ T4306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.457906][ T4321] usb 3-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 85.471213][ T4306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.485895][ T4321] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 85.500737][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.505771][ T4321] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 85.548212][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.550937][ T4321] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice= 0.00 [ 85.567242][ T4306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.587125][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 85.596799][ T4321] usb 3-1: Product: syz [ 85.601014][ T4321] usb 3-1: Manufacturer: syz [ 85.606516][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.607236][ T4306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.642334][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.652254][ T4366] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 85.657793][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.684676][ T4306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.692414][ T4321] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 85.725383][ T4306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.736582][ T4321] dvb-usb: bulk message failed: -71 (2/0) [ 85.760754][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.768369][ T4321] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 85.811366][ T4321] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 85.830442][ T4321] usb 3-1: media controller created [ 85.859678][ T27] audit: type=1800 audit(1786990748.332:2): pid=4370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5" name="idVendor" dev="configfs" ino=33733 res=0 errno=0 [ 85.899522][ T4321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 85.912684][ T27] audit: type=1800 audit(1786990748.362:3): pid=4370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5" name="idProduct" dev="configfs" ino=33734 res=0 errno=0 [ 85.940490][ T4370] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 85.969221][ T4370] udc dummy_udc.0: failed to start g1: -19 [ 85.988560][ T4319] usb 2-1: USB disconnect, device number 2 [ 85.992927][ T4321] dvb-usb: bulk message failed: -71 (1/0) [ 86.004928][ T27] audit: type=1800 audit(1786990748.362:4): pid=4370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5" name="serialnumber" dev="configfs" ino=33736 res=0 errno=0 [ 86.012885][ T4319] usbsevseg 2-1:1.0: USB 7 Segment now disconnected [ 86.037620][ T4370] UDC core: g1: couldn't find an available UDC or it's busy [ 86.054578][ T4321] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 86.107842][ T4321] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 86.121003][ T27] audit: type=1800 audit(1786990748.362:5): pid=4370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5" name="manufacturer" dev="configfs" ino=33737 res=0 errno=0 [ 86.167090][ T27] audit: type=1800 audit(1786990748.362:6): pid=4370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5" name="product" dev="configfs" ino=33738 res=0 errno=0 [ 86.190278][ T4321] dvb-usb: schedule remote query interval to 50 msecs. [ 86.201507][ T4321] dvb-usb: bulk message failed: -71 (2/0) [ 86.209231][ T4321] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 86.259125][ T4321] dvb-usb: bulk message failed: -71 (1/0) [ 86.266269][ T27] audit: type=1800 audit(1786990748.392:7): pid=4370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5" name="configuration" dev="configfs" ino=33743 res=0 errno=0 [ 86.296148][ T4321] dvb-usb: error while querying for an remote control event. [ 86.321870][ T27] audit: type=1800 audit(1786990748.412:8): pid=4370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5" name="UDC" dev="configfs" ino=33746 res=0 errno=0 [ 86.366077][ T4321] dvb-usb: bulk message failed: -71 (1/0) [ 86.371931][ T4321] dvb-usb: error while querying for an remote control event. [ 86.416548][ T4379] svc: failed to register nfsdv3 RPC service (errno 111). [ 86.429492][ T4379] svc: failed to register nfsaclv3 RPC service (errno 111). [ 86.456468][ T4321] dvb-usb: bulk message failed: -71 (1/0) [ 86.464612][ T4321] dvb-usb: error while querying for an remote control event. [ 86.536465][ T4321] dvb-usb: bulk message failed: -71 (1/0) [ 86.544635][ T4321] dvb-usb: error while querying for an remote control event. [ 86.555260][ T4273] usb 3-1: USB disconnect, device number 2 [ 86.715631][ T4273] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 86.763187][ T4372] null_blk: disk nullb1 created [ 86.850068][ T4387] using random self ethernet address [ 86.864872][ T4387] using random host ethernet address [ 86.883543][ T4387] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 86.918918][ T4387] udc dummy_udc.0: failed to start g1: -19 [ 86.932823][ T4387] UDC core: g1: couldn't find an available UDC or it's busy [ 87.204328][ T4397] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.767015][ T4393] infiniband syz1: set active [ 87.793800][ T4393] infiniband syz1: added syz_tun [ 87.997210][ T4393] RDS/IB: syz1: added [ 88.001947][ T4393] smc: adding ib device syz1 with port count 1 [ 88.151957][ T4383] loop1: detected capacity change from 0 to 32768 [ 88.162111][ T4393] smc: ib device syz1 port 1 has pnetid [ 88.177500][ T4383] gfs2: Unexpected value for 'spectator' [ 88.669698][ T4404] loop2: detected capacity change from 0 to 32768 [ 88.789338][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.827115][ T4404] XFS (loop2): Mounting V5 Filesystem [ 88.944747][ T4404] XFS (loop2): Starting recovery (logdev: internal) [ 88.987326][ T26] usb 1-1: config 0 has no interfaces? [ 88.993057][ T26] usb 1-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice= 0.00 [ 89.024873][ T4334] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.032499][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.069722][ T4404] XFS (loop2): Ending recovery (logdev: internal) [ 89.078363][ T26] usb 1-1: config 0 descriptor?? [ 89.236241][ T4288] XFS (loop2): Unmounting Filesystem [ 89.242815][ T4334] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 1.00 [ 89.274585][ T4334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.330738][ T4334] usb 4-1: Product: syz [ 89.337060][ T4334] usb 4-1: Manufacturer: syz [ 89.341727][ T4334] usb 4-1: SerialNumber: syz [ 89.424360][ T4334] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 89.430906][ T4334] cdc_wdm 4-1:1.0: Unknown control protocol [ 89.480450][ T4433] UDC core: g1: couldn't find an available UDC or it's busy [ 90.112381][ T4445] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 90.172238][ T4449] UDC core: g1: couldn't find an available UDC or it's busy [ 90.313549][ T4319] usb 1-1: USB disconnect, device number 2 [ 90.621000][ T4322] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.836896][ T4322] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 90.850284][ T4322] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 90.869175][ T4322] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 90.891764][ T4322] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 90.920846][ T4322] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 90.933320][ T4322] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 90.949061][ T4322] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= 1.00 [ 90.955427][ T26] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.960077][ T4322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.996139][ T4322] usb 3-1: Product: syz [ 91.000957][ T4322] usb 3-1: Manufacturer: syz [ 91.010265][ T4322] usb 3-1: SerialNumber: syz [ 91.037812][ T4459] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 91.066520][ T4459] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 91.074018][ T4459] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 91.082789][ T4459] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 91.090448][ T4459] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 91.098394][ T4459] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 91.109668][ T4322] keyspan 3-1:1.0: Keyspan 1 port adapter converter detected [ 91.139887][ T4322] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 91.165085][ T26] usb 2-1: Invalid ep0 maxpacket: 9 [ 91.330486][ T26] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 91.445559][ T4322] usb 3-1: USB disconnect, device number 3 [ 91.476343][ T4322] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 91.492586][ T4322] keyspan 3-1:1.0: device disconnected [ 91.502999][ T4479] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 91.512763][ T4334] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.525014][ T26] usb 2-1: Invalid ep0 maxpacket: 9 [ 91.525471][ T4479] udc dummy_udc.0: failed to start g1: -19 [ 91.536409][ T26] usb usb2-port1: attempt power cycle [ 91.543555][ T4479] UDC core: g1: couldn't find an available UDC or it's busy [ 91.715936][ T14] cfg80211: failed to load regulatory.db [ 91.727432][ T4334] usb 5-1: unable to get BOS descriptor or descriptor too short [ 91.743871][ T4334] usb 5-1: New USB device found, idVendor=1111, idProduct=2222, bcdDevice= 1.00 [ 91.782406][ T4334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.807789][ T4322] usb 4-1: USB disconnect, device number 2 [ 91.964915][ T26] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 92.017800][ T26] usb 2-1: Invalid ep0 maxpacket: 9 [ 92.035379][ T4487] syz.3.35 (4487) used greatest stack depth: 20208 bytes left [ 92.044255][ T4334] scsi host1: uas [ 92.215032][ T26] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 92.255748][ T26] usb 2-1: Invalid ep0 maxpacket: 9 [ 92.261431][ T26] usb usb2-port1: unable to enumerate USB device [ 92.275789][ T4322] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 92.315737][ T4501] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 92.322791][ T4501] udc dummy_udc.0: failed to start g1: -19 [ 92.342510][ T4501] UDC core: g1: couldn't find an available UDC or it's busy [ 92.569916][ T4322] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 92.634189][ T9] scsi host1: scsi scan: INQUIRY result too short (5), using 36 [ 92.646647][ T9] scsi 1:0:0:0: Direct-Access PQ: 0 ANSI: 0 [ 92.656350][ T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.861546][ T26] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 92.872722][ T26] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 92.887986][ T26] usb 1-1: New USB device found, idVendor=1608, idProduct=0001, bcdDevice= 0.00 [ 92.899289][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.928323][ T4504] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 92.938249][ T4504] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 92.951751][ T26] io_edgeport 1-1:1.0: Edgeport 4 port adapter converter detected [ 92.963245][ T26] usb 1-1: detected [ 92.964265][ T4495] ceph: No mds server is up or the cluster is laggy [ 93.035045][ T9] scsi 1:0:0:1: Direct-Access PQ: 0 ANSI: 0 [ 93.055166][ T4322] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 93.171469][ T26] usb 1-1: Edgeport 4 port adapter converter now attached to ttyUSB0 [ 93.183195][ T26] usb 1-1: Edgeport 4 port adapter converter now attached to ttyUSB1 [ 93.202611][ T26] usb 1-1: Edgeport 4 port adapter converter now attached to ttyUSB2 [ 93.224698][ T26] usb 1-1: Edgeport 4 port adapter converter now attached to ttyUSB3 [ 93.276067][ T4322] usb 3-1: not running at top speed; connect to a high speed hub [ 93.302129][ T4322] usb 3-1: New USB device found, idVendor=1608, idProduct=0005, bcdDevice= 1.00 [ 93.317924][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.380314][ T4322] io_edgeport 3-1:1.0: Edgeport 2 port adapter converter detected [ 93.389011][ T26] usb 1-1: USB disconnect, device number 3 [ 93.390232][ T4322] usb 3-1: detected [ 93.395249][ C1] usb 1-1: edge_interrupt_callback - Error -19 submitting control urb [ 93.422683][ T26] edgeport_4 ttyUSB0: Edgeport 4 port adapter converter now disconnected from ttyUSB0 [ 93.447099][ T9] scsi 1:0:0:2: Direct-Access PQ: 0 ANSI: 0 [ 93.468623][ T26] edgeport_4 ttyUSB1: Edgeport 4 port adapter converter now disconnected from ttyUSB1 [ 93.498610][ T26] edgeport_4 ttyUSB2: Edgeport 4 port adapter converter now disconnected from ttyUSB2 [ 93.523490][ T26] edgeport_4 ttyUSB3: Edgeport 4 port adapter converter now disconnected from ttyUSB3 [ 93.543821][ T26] io_edgeport 1-1:1.0: device disconnected [ 93.581510][ T4322] usb 3-1: error in getting manufacturer descriptor: -71 [ 93.593085][ T4322] usb 3-1: error in getting boot descriptor: -71 [ 93.600903][ T4322] usb 3-1: Device Reported 0 serial ports vs. core thinking we have 2 ports, email greg@kroah.com this information. [ 93.616061][ T4504] dyndbg: unknown flag 'd' [ 93.620830][ T4504] dyndbg: flags parse failed [ 93.696526][ T4322] usb 3-1: Direct firmware load for edgeport/down.fw failed with error -2 [ 93.707752][ T4322] usb 3-1: Falling back to sysfs fallback for: edgeport/down.fw [ 93.797587][ T4524] UDC core: g1: couldn't find an available UDC or it's busy [ 93.960232][ T4334] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.035078][ T26] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.158453][ T4334] usb 4-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00 [ 94.171296][ T4334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.228638][ T26] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 94.248233][ T26] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 94.260715][ T26] usb 1-1: New USB device found, idVendor=1608, idProduct=0001, bcdDevice= 0.00 [ 94.271722][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.293690][ T4504] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 94.302504][ T4504] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 94.312388][ T26] io_edgeport 1-1:1.0: Edgeport 4 port adapter converter detected [ 94.321416][ T26] usb 1-1: detected [ 94.455105][ T4321] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 94.532607][ T26] usb 1-1: Edgeport 4 port adapter converter now attached to ttyUSB0 [ 94.553385][ T26] usb 1-1: Edgeport 4 port adapter converter now attached to ttyUSB1 [ 94.574127][ T26] usb 1-1: Edgeport 4 port adapter converter now attached to ttyUSB2 [ 94.597648][ T26] usb 1-1: Edgeport 4 port adapter converter now attached to ttyUSB3 [ 94.667052][ T4321] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 94.698920][ T4321] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.00 [ 94.745039][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.753171][ T4321] usb 2-1: Product: syz [ 94.763274][ T4321] usb 2-1: Manufacturer: syz [ 94.782940][ T4321] usb 2-1: SerialNumber: syz [ 94.814586][ T4532] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 95.125399][ C0] usb 5-1: stat urb: status -71 [ 95.131843][ T4319] usb 5-1: USB disconnect, device number 2 [ 95.149026][ T4319] scsi 1:0:0:3: tag#28 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 95.157274][ T4319] scsi 1:0:0:3: tag#28 CDB: Inquiry 12 00 00 00 24 00 [ 95.170601][ T9] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 95.182619][ T9] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 95.226120][ T9] sd 1:0:0:2: Attached scsi generic sg3 type 0 [ 95.233654][ T4321] usb 1-1: USB disconnect, device number 4 [ 95.239642][ C1] usb 1-1: edge_interrupt_callback - Error -19 submitting control urb [ 95.249812][ T1225] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 95.296103][ T4321] edgeport_4 ttyUSB0: Edgeport 4 port adapter converter now disconnected from ttyUSB0 [ 95.298627][ T1225] sd 1:0:0:0: [sdb] Sense not available. [ 95.315612][ T4321] edgeport_4 ttyUSB1: Edgeport 4 port adapter converter now disconnected from ttyUSB1 [ 95.342739][ T1225] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 95.350413][ T4321] edgeport_4 ttyUSB2: Edgeport 4 port adapter converter now disconnected from ttyUSB2 [ 95.364236][ T4321] edgeport_4 ttyUSB3: Edgeport 4 port adapter converter now disconnected from ttyUSB3 [ 95.376400][ T4321] io_edgeport 1-1:1.0: device disconnected [ 95.390606][ T1225] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 95.410769][ T1225] sd 1:0:0:0: [sdb] Write Protect is off [ 95.417584][ T1225] sd 1:0:0:0: [sdb] Asking for cache data failed [ 95.424168][ T1225] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 95.451894][ T1225] sd 1:0:0:0: [sdb] Attached SCSI disk [ 95.581875][ T33] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 95.592452][ T33] sd 1:0:0:1: [sdc] Sense not available. [ 95.604942][ T33] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 95.613854][ T33] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 95.627510][ T33] sd 1:0:0:1: [sdc] Write Protect is off [ 95.633373][ T33] sd 1:0:0:1: [sdc] Asking for cache data failed [ 95.643684][ T33] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 95.681525][ T33] sd 1:0:0:1: [sdc] Attached SCSI disk [ 95.686858][ T4324] usb 2-1: USB disconnect, device number 7 [ 95.807274][ T4558] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 95.815482][ T4558] udc dummy_udc.0: failed to start g1: -19 [ 95.822212][ T4558] UDC core: g1: couldn't find an available UDC or it's busy [ 95.875168][ T57] sd 1:0:0:2: [sdd] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 95.898050][ T57] sd 1:0:0:2: [sdd] Sense not available. [ 95.903893][ T57] sd 1:0:0:2: [sdd] 0 512-byte logical blocks: (0 B/0 B) [ 95.916133][ T57] sd 1:0:0:2: [sdd] 0-byte physical blocks [ 95.922142][ T57] sd 1:0:0:2: [sdd] Write Protect is off [ 95.933360][ T57] sd 1:0:0:2: [sdd] Asking for cache data failed [ 95.940309][ T57] sd 1:0:0:2: [sdd] Assuming drive cache: write through [ 96.037253][ T57] sd 1:0:0:2: [sdd] Attached SCSI disk [ 96.463334][ T4573] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 96.470226][ T4573] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 96.495149][ T4334] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-110 [ 96.502308][ T4334] dvb_usb_af9035: probe of 4-1:1.0 failed with error -110 [ 96.516852][ T4577] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 96.542446][ T4577] udc dummy_udc.0: failed to start g1: -19 [ 96.563285][ T4573] vhci_hcd vhci_hcd.0: Device attached [ 96.591524][ T4577] UDC core: g1: couldn't find an available UDC or it's busy [ 96.661027][ T4578] vhci_hcd: connection closed [ 96.663289][ T33] vhci_hcd: stop threads [ 96.730180][ T33] vhci_hcd: release socket [ 96.756244][ T33] vhci_hcd: disconnect device [ 96.774996][ T4334] vhci_hcd: vhci_device speed not set [ 96.861461][ T4544] udevd[4544]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 96.871490][ T4375] udevd[4375]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 96.889459][ T4319] usb 4-1: USB disconnect, device number 3 [ 96.913485][ T4282] udevd[4282]: inotify_add_watch(7, /dev/sdd, 10) failed: No such file or directory [ 96.957892][ T4588] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 96.971338][ T4588] udc dummy_udc.0: failed to start g1: -19 [ 96.984149][ T4588] UDC core: g1: couldn't find an available UDC or it's busy [ 97.155007][ T4324] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 97.367109][ T4324] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 97.425489][ T4324] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 97.456768][ T4324] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 97.478223][ T4324] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 97.499834][ T4324] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 97.516949][ T4324] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 97.534535][ T4324] usb 5-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= 1.00 [ 97.544696][ T4324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.553797][ T4324] usb 5-1: Product: syz [ 97.558642][ T4324] usb 5-1: Manufacturer: syz [ 97.571855][ T4324] usb 5-1: SerialNumber: syz [ 97.591030][ T4586] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 97.608525][ T4586] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 97.621706][ T4586] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 97.630360][ T4586] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 97.639396][ T4586] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 97.661724][ T4586] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 97.681585][ T4324] keyspan 5-1:1.0: Keyspan 1 port adapter converter detected [ 97.701103][ T4324] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 97.999756][ T4324] usb 5-1: USB disconnect, device number 3 [ 98.017072][ T4324] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 98.031990][ T4324] keyspan 5-1:1.0: device disconnected [ 98.115072][ T14] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 98.132957][ T4621] UDC core: g1: couldn't find an available UDC or it's busy [ 98.145003][ T4321] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 98.323553][ T14] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 98.325480][ T4321] usb 1-1: Using ep0 maxpacket: 8 [ 98.348172][ T14] usb 2-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 98.363167][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 98.373658][ T14] usb 2-1: Product: syz [ 98.373922][ T4321] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 98.378298][ T14] usb 2-1: Manufacturer: syz [ 98.401251][ T4614] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 98.412863][ T4321] usb 1-1: config 0 has no interface number 0 [ 98.417510][ T14] opticon 2-1:1.0: opticon converter detected [ 98.439063][ T14] usb 2-1: opticon converter now attached to ttyUSB0 [ 98.450565][ T4321] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 98.470581][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.491948][ T4321] usb 1-1: config 0 descriptor?? [ 98.605320][ T4321] viperboard 1-1:0.143: version 0.00 found at bus 001 address 005 [ 98.638068][ T4321] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 98.649313][ T4321] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 98.718802][ T4616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.749935][ T4616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.976841][ T4321] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.028620][ T14] usb 1-1: USB disconnect, device number 5 [ 99.065256][ T4334] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.174955][ T4321] usb 5-1: Using ep0 maxpacket: 16 [ 99.182062][ T4321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.194181][ T4321] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 99.207361][ T4321] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 99.216663][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.227584][ T4321] usb 5-1: config 0 descriptor?? [ 99.260094][ T4334] usb 4-1: New USB device found, idVendor=1934, idProduct=1202, bcdDevice= 0.01 [ 99.269550][ T4334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.277966][ T4334] usb 4-1: Product: syz [ 99.282320][ T4334] usb 4-1: Manufacturer: syz [ 99.287089][ T4334] usb 4-1: SerialNumber: syz [ 99.622136][ T4639] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 99.630571][ T4639] udc dummy_udc.0: failed to start g1: -19 [ 99.639466][ T4639] UDC core: g1: couldn't find an available UDC or it's busy [ 99.657310][ T4321] HID 045e:07da: Invalid code 65791 type 1 [ 99.671413][ T4321] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0001/input/input6 [ 99.699804][ T4321] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 100.486424][ T26] usb 5-1: USB disconnect, device number 4 [ 100.525018][ T4321] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 100.694193][ T14] usb 2-1: USB disconnect, device number 8 [ 100.703355][ T14] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 100.712625][ T14] opticon 2-1:1.0: device disconnected [ 100.733756][ T4321] usb 1-1: New USB device found, idVendor=695c, idProduct=3829, bcdDevice= 0.00 [ 100.760728][ T4652] loop0: detected capacity change from 0 to 128 [ 100.768886][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.785339][ T4321] usb 1-1: Product: syz [ 100.789914][ T4321] usb 1-1: Manufacturer: syz [ 100.804487][ T4321] usb 1-1: SerialNumber: syz [ 100.809480][ T4652] PM: hibernation: resume from hibernation [ 100.816167][ T4652] random: crng reseeded on system resumption [ 100.844185][ T4321] opera: start downloading fpga firmware dvb-usb-opera1-fpga-01.fw [ 100.855409][ T4321] usb 1-1: Direct firmware load for dvb-usb-opera1-fpga-01.fw failed with error -2 [ 100.865778][ T4321] usb 1-1: Falling back to sysfs fallback for: dvb-usb-opera1-fpga-01.fw [ 101.075040][ T26] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 101.236640][ T4655] UDC core: g1: couldn't find an available UDC or it's busy [ 101.275006][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 101.281805][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.293236][ T26] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 101.310167][ T26] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 101.319737][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.347865][ T26] usb 5-1: config 0 descriptor?? [ 101.378049][ T4334] f81534 4-1:1.0: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 101.394917][ T4334] f81534 4-1:1.0: f81534_find_config_idx: read failed: -32 [ 101.405356][ T4334] f81534 4-1:1.0: f81534_calc_num_ports: find idx failed: -32 [ 101.412964][ T4334] f81534: probe of 4-1:1.0 failed with error -32 [ 101.944941][ T4319] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 102.138479][ T4319] usb 2-1: New USB device found, idVendor=0b95, idProduct=1780, bcdDevice= 1.00 [ 102.154841][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.169299][ T4319] usb 2-1: Product: syz [ 102.173526][ T4319] usb 2-1: Manufacturer: syz [ 102.179012][ T4319] usb 2-1: SerialNumber: syz [ 102.251732][ T4668] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 102.352249][ T4670] loop1: detected capacity change from 0 to 32768 [ 102.375122][ T4670] loop2: detected capacity change from 0 to 32768 [ 103.013633][ T26] usbhid 5-1:0.0: can't add hid device: -71 [ 103.021141][ T26] usbhid: probe of 5-1:0.0 failed with error -71 [ 103.043133][ T26] usb 5-1: USB disconnect, device number 5 [ 103.093934][ T4677] UDC core: g1: couldn't find an available UDC or it's busy [ 103.357645][ T4685] ================================================================== [ 103.365756][ T4685] BUG: KASAN: slab-out-of-bounds in gether_get_ifname+0xde/0x100 [ 103.373536][ T4685] Read of size 1 at addr ffff88807a222e02 by task syz.4.85/4685 [ 103.381191][ T4685] [ 103.383554][ T4685] CPU: 0 PID: 4685 Comm: syz.4.85 Not tainted syzkaller #0 [ 103.390767][ T4685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.400865][ T4685] Call Trace: [ 103.404179][ T4685] [ 103.407132][ T4685] dump_stack_lvl+0x188/0x24e [ 103.411874][ T4685] ? __lock_acquire+0x7c40/0x7c40 [ 103.416966][ T4685] ? show_regs_print_info+0x12/0x12 [ 103.422214][ T4685] ? load_image+0x410/0x410 [ 103.426766][ T4685] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 103.432306][ T4685] ? __virt_addr_valid+0x188/0x540 [ 103.437473][ T4685] ? __virt_addr_valid+0x467/0x540 [ 103.442632][ T4685] ? gether_get_ifname+0xde/0x100 [ 103.447701][ T4685] print_report+0xa8/0x210 [ 103.452166][ T4685] kasan_report+0x10b/0x140 [ 103.456709][ T4685] ? gether_get_ifname+0xde/0x100 [ 103.461787][ T4685] gether_get_ifname+0xde/0x100 [ 103.466698][ T4685] f_phonet_ifname_show+0x44/0x50 [ 103.471762][ T4685] configfs_read_iter+0x296/0x560 [ 103.476821][ T4685] ? phonet_attr_release+0x20/0x20 [ 103.481963][ T4685] __kernel_read+0x2dd/0x6e0 [ 103.486591][ T4685] ? do_sys_openat2+0x14b/0x4f0 [ 103.491474][ T4685] ? __x64_sys_openat+0x135/0x160 [ 103.496535][ T4685] ? rw_verify_area+0x1a0/0x1a0 [ 103.501431][ T4685] integrity_kernel_read+0x86/0xd0 [ 103.506578][ T4685] ? integrity_inode_free+0x170/0x170 [ 103.511982][ T4685] ima_calc_file_hash+0xb12/0x1950 [ 103.517152][ T4685] ? __lock_acquire+0x7c40/0x7c40 [ 103.522209][ T4685] ? register_lock_class+0xc0/0x870 [ 103.527433][ T4685] ? unwind_next_frame+0x1719/0x1fd0 [ 103.532749][ T4685] ? is_dynamic_key+0x260/0x260 [ 103.537625][ T4685] ? is_bpf_text_address+0x28b/0x2a0 [ 103.542930][ T4685] ? ima_alloc_tfm+0x2f0/0x2f0 [ 103.547725][ T4685] ? mark_lock+0x94/0x320 [ 103.552099][ T4685] ? __kasan_slab_alloc+0x6b/0x80 [ 103.557156][ T4685] ? integrity_inode_get+0x111/0x560 [ 103.562469][ T4685] ? do_filp_open+0x1ee/0x420 [ 103.567165][ T4685] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.573265][ T4685] ima_collect_measurement+0x503/0xb50 [ 103.578756][ T4685] ? trace_raw_output_contention_end+0xd0/0xd0 [ 103.584935][ T4685] ? trace_contention_end+0x5f/0x170 [ 103.590246][ T4685] ? ima_get_action+0xa0/0xa0 [ 103.594951][ T4685] ? __mutex_lock+0x1ab/0xae0 [ 103.599665][ T4685] ? is_bad_inode+0x9/0x40 [ 103.604119][ T4685] ? vfs_getxattr_alloc+0xf0/0x5a0 [ 103.609256][ T4685] ? ima_get_cache_status+0xb0/0xb0 [ 103.614479][ T4685] process_measurement+0x119b/0x1c40 [ 103.619802][ T4685] ? ima_file_mmap+0x140/0x140 [ 103.624604][ T4685] ? __raw_spin_lock_init+0x41/0x100 [ 103.629916][ T4685] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 103.636108][ T4685] ima_file_check+0xc8/0x110 [ 103.640723][ T4685] ? ima_bprm_check+0x200/0x200 [ 103.645604][ T4685] path_openat+0x272b/0x2f10 [ 103.650226][ T4685] ? do_filp_open+0x420/0x420 [ 103.654950][ T4685] do_filp_open+0x1ee/0x420 [ 103.659517][ T4685] ? vfs_tmpfile+0x470/0x470 [ 103.664157][ T4685] ? _raw_spin_unlock+0x24/0x40 [ 103.669044][ T4685] ? alloc_fd+0x590/0x640 [ 103.673416][ T4685] do_sys_openat2+0x14b/0x4f0 [ 103.678172][ T4685] ? do_sys_open+0xe0/0xe0 [ 103.682624][ T4685] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 103.688637][ T4685] ? lock_chain_count+0x20/0x20 [ 103.693519][ T4685] __x64_sys_openat+0x135/0x160 [ 103.698399][ T4685] do_syscall_64+0x4c/0xa0 [ 103.702843][ T4685] ? clear_bhb_loop+0x60/0xb0 [ 103.707547][ T4685] ? clear_bhb_loop+0x60/0xb0 [ 103.712261][ T4685] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.718202][ T4685] RIP: 0033:0x7ff3e819e0d9 [ 103.722669][ T4685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.742294][ T4685] RSP: 002b:00007ff3e9064028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 103.750769][ T4685] RAX: ffffffffffffffda RBX: 00007ff3e8425fa0 RCX: 00007ff3e819e0d9 [ 103.758783][ T4685] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 103.766784][ T4685] RBP: 00007ff3e8235024 R08: 0000000000000000 R09: 0000000000000000 [ 103.774801][ T4685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.782833][ T4685] R13: 00007ff3e8426038 R14: 00007ff3e8425fa0 R15: 00007ffea434e5a8 [ 103.790852][ T4685] [ 103.793898][ T4685] [ 103.796239][ T4685] Allocated by task 4685: [ 103.800582][ T4685] kasan_set_track+0x4b/0x70 [ 103.805215][ T4685] __kasan_kmalloc+0x8e/0xa0 [ 103.809836][ T4685] __kmalloc_node+0xb2/0x240 [ 103.814469][ T4685] kvmalloc_node+0x6c/0x180 [ 103.819004][ T4685] alloc_netdev_mqs+0x84/0xf10 [ 103.823816][ T4685] phonet_alloc_inst+0xa0/0x180 [ 103.828706][ T4685] usb_get_function_instance+0xd9/0x2e0 [ 103.834269][ T4685] function_make+0x118/0x350 [ 103.838882][ T4685] configfs_mkdir+0x511/0x9e0 [ 103.843585][ T4685] vfs_mkdir+0x386/0x570 [ 103.847848][ T4685] do_mkdirat+0x1d8/0x440 [ 103.852196][ T4685] __x64_sys_mkdirat+0x85/0x90 [ 103.856981][ T4685] do_syscall_64+0x4c/0xa0 [ 103.861427][ T4685] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.867358][ T4685] [ 103.869696][ T4685] The buggy address belongs to the object at ffff88807a222000 [ 103.869696][ T4685] which belongs to the cache kmalloc-cg-4k of size 4096 [ 103.884116][ T4685] The buggy address is located 3586 bytes inside of [ 103.884116][ T4685] 4096-byte region [ffff88807a222000, ffff88807a223000) [ 103.897591][ T4685] [ 103.899931][ T4685] The buggy address belongs to the physical page: [ 103.906370][ T4685] page:ffffea0001e88800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a220 [ 103.916546][ T4685] head:ffffea0001e88800 order:3 compound_mapcount:0 compound_pincount:0 [ 103.924979][ T4685] memcg:ffff88807c564c01 [ 103.929257][ T4685] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 103.937263][ T4685] raw: 00fff00000010200 ffffea0001516a00 dead000000000002 ffff88801744c280 [ 103.945864][ T4685] raw: 0000000000000000 0000000080040004 00000001ffffffff ffff88807c564c01 [ 103.954458][ T4685] page dumped because: kasan: bad access detected [ 103.960894][ T4685] page_owner tracks the page as allocated [ 103.966620][ T4685] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4375, tgid 4375 (udevd), ts 94681179200, free_ts 94403876037 [ 103.988784][ T4685] post_alloc_hook+0x173/0x1a0 [ 103.993581][ T4685] get_page_from_freelist+0x206b/0x2180 [ 103.999177][ T4685] __alloc_pages+0x1ec/0x4f0 [ 104.003794][ T4685] alloc_slab_page+0x5d/0x180 [ 104.008496][ T4685] new_slab+0x87/0x2d0 [ 104.012587][ T4685] ___slab_alloc+0xbc5/0x1240 [ 104.017288][ T4685] __kmem_cache_alloc_node+0x126/0x270 [ 104.022772][ T4685] __kmalloc_node+0xa2/0x240 [ 104.027386][ T4685] kvmalloc_node+0x6c/0x180 [ 104.031917][ T4685] seq_read_iter+0x1de/0xc50 [ 104.036557][ T4685] vfs_read+0x471/0x960 [ 104.040743][ T4685] ksys_read+0x14d/0x260 [ 104.045023][ T4685] do_syscall_64+0x4c/0xa0 [ 104.049461][ T4685] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.055378][ T4685] page last free stack trace: [ 104.060058][ T4685] free_unref_page_prepare+0x8e5/0x9e0 [ 104.065544][ T4685] free_unref_page+0x2e/0x3f0 [ 104.070244][ T4685] __unfreeze_partials+0x188/0x1e0 [ 104.075374][ T4685] put_cpu_partial+0x17c/0x250 [ 104.080162][ T4685] qlist_free_all+0x76/0xe0 [ 104.084686][ T4685] kasan_quarantine_reduce+0x144/0x160 [ 104.090250][ T4685] __kasan_slab_alloc+0x1e/0x80 [ 104.095133][ T4685] slab_post_alloc_hook+0x4b/0x490 [ 104.100263][ T4685] __kmem_cache_alloc_node+0x19d/0x270 [ 104.105766][ T4685] __kmalloc+0xa3/0x240 [ 104.109950][ T4685] tomoyo_encode+0x28a/0x550 [ 104.114570][ T4685] tomoyo_realpath_from_path+0x578/0x5c0 [ 104.120225][ T4685] tomoyo_path_number_perm+0x22f/0x650 [ 104.125703][ T4685] security_file_ioctl+0x6c/0xa0 [ 104.130661][ T4685] __se_sys_ioctl+0x48/0x170 [ 104.135278][ T4685] do_syscall_64+0x4c/0xa0 [ 104.139729][ T4685] [ 104.142070][ T4685] Memory state around the buggy address: [ 104.147717][ T4685] ffff88807a222d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 104.155794][ T4685] ffff88807a222d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 104.163871][ T4685] >ffff88807a222e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 104.171952][ T4685] ^ [ 104.176040][ T4685] ffff88807a222e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 104.184123][ T4685] ffff88807a222f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 104.192197][ T4685] ================================================================== [ 104.209581][ T4685] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 104.216848][ T4685] CPU: 1 PID: 4685 Comm: syz.4.85 Not tainted syzkaller #0 [ 104.224070][ T4685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.234157][ T4685] Call Trace: [ 104.237475][ T4685] [ 104.240447][ T4685] dump_stack_lvl+0x188/0x24e [ 104.245179][ T4685] ? memcpy+0x3c/0x60 [ 104.249206][ T4685] ? show_regs_print_info+0x12/0x12 [ 104.254451][ T4685] ? load_image+0x410/0x410 [ 104.259006][ T4685] panic+0x2d3/0x710 [ 104.262938][ T4685] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 104.269148][ T4685] ? bpf_jit_dump+0xd0/0xd0 [ 104.273700][ T4685] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 104.279720][ T4685] ? _raw_spin_unlock+0x40/0x40 [ 104.284622][ T4685] check_panic_on_warn+0x80/0xa0 [ 104.289623][ T4685] ? gether_get_ifname+0xde/0x100 [ 104.294697][ T4685] end_report+0x66/0x110 [ 104.298990][ T4685] kasan_report+0x118/0x140 [ 104.303547][ T4685] ? gether_get_ifname+0xde/0x100 [ 104.308636][ T4685] gether_get_ifname+0xde/0x100 [ 104.313537][ T4685] f_phonet_ifname_show+0x44/0x50 [ 104.318623][ T4685] configfs_read_iter+0x296/0x560 [ 104.323696][ T4685] ? phonet_attr_release+0x20/0x20 [ 104.328858][ T4685] __kernel_read+0x2dd/0x6e0 [ 104.333548][ T4685] ? do_sys_openat2+0x14b/0x4f0 [ 104.338448][ T4685] ? __x64_sys_openat+0x135/0x160 [ 104.343531][ T4685] ? rw_verify_area+0x1a0/0x1a0 [ 104.348441][ T4685] integrity_kernel_read+0x86/0xd0 [ 104.353605][ T4685] ? integrity_inode_free+0x170/0x170 [ 104.359027][ T4685] ima_calc_file_hash+0xb12/0x1950 [ 104.364189][ T4685] ? __lock_acquire+0x7c40/0x7c40 [ 104.369262][ T4685] ? register_lock_class+0xc0/0x870 [ 104.374506][ T4685] ? unwind_next_frame+0x1719/0x1fd0 [ 104.379847][ T4685] ? is_dynamic_key+0x260/0x260 [ 104.384735][ T4685] ? is_bpf_text_address+0x28b/0x2a0 [ 104.390047][ T4685] ? ima_alloc_tfm+0x2f0/0x2f0 [ 104.394841][ T4685] ? mark_lock+0x94/0x320 [ 104.399217][ T4685] ? __kasan_slab_alloc+0x6b/0x80 [ 104.404278][ T4685] ? integrity_inode_get+0x111/0x560 [ 104.409599][ T4685] ? do_filp_open+0x1ee/0x420 [ 104.414303][ T4685] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.420419][ T4685] ima_collect_measurement+0x503/0xb50 [ 104.425915][ T4685] ? trace_raw_output_contention_end+0xd0/0xd0 [ 104.432096][ T4685] ? trace_contention_end+0x5f/0x170 [ 104.437400][ T4685] ? ima_get_action+0xa0/0xa0 [ 104.442098][ T4685] ? __mutex_lock+0x1ab/0xae0 [ 104.446804][ T4685] ? is_bad_inode+0x9/0x40 [ 104.451259][ T4685] ? vfs_getxattr_alloc+0xf0/0x5a0 [ 104.456399][ T4685] ? ima_get_cache_status+0xb0/0xb0 [ 104.461623][ T4685] process_measurement+0x119b/0x1c40 [ 104.466940][ T4685] ? ima_file_mmap+0x140/0x140 [ 104.471751][ T4685] ? __raw_spin_lock_init+0x41/0x100 [ 104.477063][ T4685] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 104.483246][ T4685] ima_file_check+0xc8/0x110 [ 104.487881][ T4685] ? ima_bprm_check+0x200/0x200 [ 104.492766][ T4685] path_openat+0x272b/0x2f10 [ 104.497386][ T4685] ? do_filp_open+0x420/0x420 [ 104.502116][ T4685] do_filp_open+0x1ee/0x420 [ 104.506659][ T4685] ? vfs_tmpfile+0x470/0x470 [ 104.511281][ T4685] ? _raw_spin_unlock+0x24/0x40 [ 104.516240][ T4685] ? alloc_fd+0x590/0x640 [ 104.520604][ T4685] do_sys_openat2+0x14b/0x4f0 [ 104.525309][ T4685] ? do_sys_open+0xe0/0xe0 [ 104.529748][ T4685] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 104.535756][ T4685] ? lock_chain_count+0x20/0x20 [ 104.540631][ T4685] __x64_sys_openat+0x135/0x160 [ 104.545520][ T4685] do_syscall_64+0x4c/0xa0 [ 104.549968][ T4685] ? clear_bhb_loop+0x60/0xb0 [ 104.554667][ T4685] ? clear_bhb_loop+0x60/0xb0 [ 104.559367][ T4685] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.565285][ T4685] RIP: 0033:0x7ff3e819e0d9 [ 104.569721][ T4685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.589363][ T4685] RSP: 002b:00007ff3e9064028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 104.597809][ T4685] RAX: ffffffffffffffda RBX: 00007ff3e8425fa0 RCX: 00007ff3e819e0d9 [ 104.605799][ T4685] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 104.613794][ T4685] RBP: 00007ff3e8235024 R08: 0000000000000000 R09: 0000000000000000 [ 104.621809][ T4685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.629796][ T4685] R13: 00007ff3e8426038 R14: 00007ff3e8425fa0 R15: 00007ffea434e5a8 [ 104.637792][ T4685] [ 104.641405][ T4685] Kernel Offset: disabled [ 104.645745][ T4685] Rebooting in 86400 seconds..