last executing test programs: 6.752630334s ago: executing program 4 (id=84): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0x1234\n', 0x7) write(0xffffffffffffffff, &(0x7f0000000400)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='0\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='1\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000001600)='usbip-vudc.0\n', 0xd) 5.465470687s ago: executing program 4 (id=93): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./config\x00', &(0x7f0000000500)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='0x1d6b\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='0x0104\n', 0x7) close(r1) mkdir(&(0x7f0000000b00)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r2, &(0x7f0000000d00)='fedcba9876543210\n', 0x11) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r3, &(0x7f0000000f00)='Linux Foundation\n', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r4, 0x0, 0x0) mkdir(&(0x7f0000001200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000001300)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, &(0x7f0000001500)='Conf', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001900)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000001a00)='dummy_udc.0\n', 0xc) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/net\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000001a40)=""/1024, 0x400) 4.871480701s ago: executing program 4 (id=97): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0\n\x00', 0x2) write(r0, &(0x7f00000001a0)='1\n\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/machinecheck/machinecheck0/tolerant\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='1\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/machinecheck/machinecheck0/bank0\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='1\n\x00', 0x2) r3 = syz_open_dev$MSR(&(0x7f0000000800), 0x0, 0x0) pread64(r3, &(0x7f0000000900)=""/8, 0x8, 0x403) pread64(r3, &(0x7f0000000a00)=""/8, 0x8, 0x10) close(r3) 4.104272604s ago: executing program 4 (id=105): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0x1d6b\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) close(r1) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='fedcba9876543210\n', 0x11) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r3, &(0x7f0000000c00)='Linux Foundation\n', 0x11) close(r3) write(0xffffffffffffffff, &(0x7f0000000e00)='Multifunction Gadget\n', 0x15) close(0xffffffffffffffff) mkdir(&(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x1, 0x0) mkdir(&(0x7f0000001300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x1, 0x0) write(r4, &(0x7f0000001d00)='veth0\n', 0x6) close(r4) symlink(&(0x7f0000001400)='./config/usb_gadget/g1/functions/ecm.usb0\x00', &(0x7f0000001500)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000001700)='dummy_udc.0\n', 0xc) close(r5) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000001900)={'veth0\x00', 0x1}) write(r6, &(0x7f0000001b00)="00112233445566778899aabb0800"/76, 0x40) 4.044745468s ago: executing program 0 (id=106): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./cfg\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cfg/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='0x1d6b\x00', 0x6) write(0xffffffffffffffff, &(0x7f0000000500)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./cfg/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./cfg/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000700)='./cfg/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./cfg/usb_gadget/g1/configs/c.1/midi.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./cfg/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r1, &(0x7f0000000a00)='dummy_udc.0\x00', 0xb) r2 = epoll_create1(0x0) epoll_pwait2(r2, &(0x7f0000001000)=[{}], 0x1, &(0x7f0000001040)={0x1}, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000b00), 0x0, 0x2) write(r3, &(0x7f0000000c00)='data\x00', 0x4) r4 = syz_open_dev$sndmidi(&(0x7f0000000b00), 0x1, 0x2) write(r4, &(0x7f0000000c00)='data\x00', 0x4) r5 = syz_open_dev$sndmidi(&(0x7f0000000b00), 0x2, 0x2) write(r5, &(0x7f0000000c00)='data\x00', 0x4) r6 = syz_open_dev$sndmidi(&(0x7f0000000b00), 0x3, 0x2) write(r6, &(0x7f0000000c00)='data\x00', 0x4) 3.84182092s ago: executing program 3 (id=108): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/gspca_m5602/parameters/force_sensor\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)='6', 0x1) syz_usb_connect(0x3, 0x2b, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040020402560001000000010902190001010080320904000001ffffff0007058101000201"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000400), 0x1, 0x2) ioctl$VIDIOC_QBUF(r1, 0xc050560f, &(0x7f0000000700)=@mmap={0x1, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0xffffffff}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000800)=0x1) r2 = syz_open_dev$video(&(0x7f0000000400), 0x2, 0x2) ioctl$VIDIOC_QBUF(r2, 0xc050560f, &(0x7f0000000600)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0xffffffff}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000800)=0x1) 3.5689526s ago: executing program 2 (id=109): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, &(0x7f0000000280)={0x20, 0x0, &(0x7f00000002c0)}) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f0000000340)={0x8}) ioctl$IOMMU_DESTROY$stdev(0xffffffffffffffff, 0x3b80, &(0x7f0000000400)={0x8}) close(0xffffffffffffffff) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000002000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000004c0)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl(r0, 0x3b8e, &(0x7f0000000000)="10000000") ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000540)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}) ioctl(r0, 0x3b89, &(0x7f0000001000)="300000000400000004000000070000000000000000000000adde00000800000000200000007f00000600000000000000") ioctl(r0, 0x3ba0, &(0x7f0000004000)="480000000200000000000000000000000400000000000000000000000100"/72) read(0x4, &(0x7f0000003000)=""/40, 0x28) 3.485613096s ago: executing program 4 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1234567890\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Linux Foundation\x00', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='Conf 1\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r6, &(0x7f00000005c0)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0) write(r7, &(0x7f00000006c0)='Conf 2\x00', 0x7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r8, &(0x7f0000000740)='midi.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r9, &(0x7f00000007c0)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000800)={0x0, 0x2faf0800}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/bus/usb/devices/5-1/bConfigurationValue\x00', 0x2, 0x0) write(r10, &(0x7f00000008e0)='1\x00', 0x2) write(r10, &(0x7f0000000900)='0\x00', 0x2) r11 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x0) write(r11, &(0x7f0000000960)='1\x00', 0x2) write(r11, &(0x7f0000000980)='0\x00', 0x2) 3.294096467s ago: executing program 2 (id=112): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040460a019600010000000109022700010100a0320904000003ff00000007058102000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x6, "019622334455"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x6, "019622334455"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x6, "019622334455"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x6, "019622334455"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x6, "019622334455"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x6, "019622334455"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.90511086s ago: executing program 1 (id=113): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0x0525\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0xa4a2\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='dummy_udc.0\x00', 0xb) write(r2, &(0x7f00000003c0)='dummy_udc.1\x00', 0xb) write(r2, &(0x7f0000000400)='dummy_udc.2\x00', 0xb) write(r2, &(0x7f0000000440)='dummy_udc.3\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='config/usb_gadget/g1/UDC\x00', 0x0, 0x0) read(r3, &(0x7f00000004c0)=""/64, 0x40) 2.81208046s ago: executing program 0 (id=114): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlink(&(0x7f0000000800)='./config/usb_gadget/g1/functions/geth.usb0\x00', &(0x7f0000000900)='./config/usb_gadget/g1/configs/c.1/geth.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r0, &(0x7f0000000f00)='0x0104\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='dummy_udc.0\n\x00', 0xc) 2.32829374s ago: executing program 1 (id=115): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0\n\x00', 0x2) write(r0, &(0x7f00000001a0)='1\n\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/machinecheck/machinecheck0/tolerant\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='1\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/machinecheck/machinecheck0/bank0\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='1\n\x00', 0x2) r3 = syz_open_dev$MSR(&(0x7f0000000800), 0x0, 0x0) pread64(r3, &(0x7f0000000900)=""/8, 0x8, 0x403) pread64(r3, &(0x7f0000000a00)=""/8, 0x8, 0x10) close(r3) 2.108087789s ago: executing program 0 (id=116): mount(0x0, &(0x7f0000000080)='config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000440)='dummy_udc.3\x00', 0xb) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='config/usb_gadget/g1/UDC\x00', 0x0, 0x0) read(r0, &(0x7f00000004c0)=""/64, 0x40) 1.665651316s ago: executing program 0 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) 1.641735642s ago: executing program 2 (id=118): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0x1234\n', 0x7) write(0xffffffffffffffff, &(0x7f0000000400)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='0\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='1\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000001600)='usbip-vudc.0\n', 0xd) 1.379368616s ago: executing program 0 (id=119): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./config\x00', &(0x7f0000000500)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='0x1d6b\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='0x0104\n', 0x7) close(r1) mkdir(&(0x7f0000000b00)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r2, &(0x7f0000000d00)='fedcba9876543210\n', 0x11) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r3, &(0x7f0000000f00)='Linux Foundation\n', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r4, 0x0, 0x0) mkdir(&(0x7f0000001200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000001300)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, &(0x7f0000001500)='Conf', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001900)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000001a00)='dummy_udc.0\n', 0xc) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/net\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000001a40)=""/1024, 0x400) 1.261090839s ago: executing program 2 (id=120): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0x1d6b\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) close(r1) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='fedcba9876543210\n', 0x11) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r3, &(0x7f0000000c00)='Linux Foundation\n', 0x11) close(r3) write(0xffffffffffffffff, &(0x7f0000000e00)='Multifunction Gadget\n', 0x15) close(0xffffffffffffffff) mkdir(&(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x1, 0x0) mkdir(&(0x7f0000001300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x1, 0x0) write(r4, &(0x7f0000001d00)='veth0\n', 0x6) close(r4) symlink(&(0x7f0000001400)='./config/usb_gadget/g1/functions/ecm.usb0\x00', &(0x7f0000001500)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000001700)='dummy_udc.0\n', 0xc) close(r5) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000001900)={'veth0\x00', 0x1}) write(r6, &(0x7f0000001b00)="00112233445566778899aabb0800"/76, 0x40) 1.182836178s ago: executing program 1 (id=121): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) 1.137788364s ago: executing program 3 (id=122): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, &(0x7f0000000280)={0x20, 0x0, &(0x7f00000002c0)}) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f0000000340)={0x8}) ioctl$IOMMU_DESTROY$stdev(0xffffffffffffffff, 0x3b80, &(0x7f0000000400)={0x8}) close(0xffffffffffffffff) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000002000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000004c0)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl(r0, 0x3b8e, &(0x7f0000000000)="10000000") ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000540)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}) ioctl(r0, 0x3b89, &(0x7f0000001000)="300000000400000004000000070000000000000000000000adde00000800000000200000007f00000600000000000000") ioctl(r0, 0x3ba0, &(0x7f0000004000)="480000000200000000000000000000000400000000000000000000000100"/72) read(0x4, &(0x7f0000003000)=""/40, 0x28) 988.296698ms ago: executing program 4 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1234567890\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Linux Foundation\x00', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='Conf 1\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r6, &(0x7f00000005c0)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0) write(r7, &(0x7f00000006c0)='Conf 2\x00', 0x7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r8, &(0x7f0000000740)='midi.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r9, &(0x7f00000007c0)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000800)={0x0, 0x2faf0800}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/bus/usb/devices/5-1/bConfigurationValue\x00', 0x2, 0x0) write(r10, &(0x7f00000008e0)='1\x00', 0x2) write(r10, &(0x7f0000000900)='0\x00', 0x2) r11 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x0) write(r11, &(0x7f0000000960)='1\x00', 0x2) write(r11, &(0x7f0000000980)='0\x00', 0x2) 987.129095ms ago: executing program 0 (id=124): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./cfg\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cfg/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='0x1d6b\x00', 0x6) write(0xffffffffffffffff, &(0x7f0000000500)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./cfg/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./cfg/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000700)='./cfg/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./cfg/usb_gadget/g1/configs/c.1/midi.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./cfg/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r1, &(0x7f0000000a00)='dummy_udc.0\x00', 0xb) r2 = epoll_create1(0x0) epoll_pwait2(r2, &(0x7f0000001000)=[{}], 0x1, &(0x7f0000001040)={0x1}, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000b00), 0x0, 0x2) write(r3, &(0x7f0000000c00)='data\x00', 0x4) r4 = syz_open_dev$sndmidi(&(0x7f0000000b00), 0x1, 0x2) write(r4, &(0x7f0000000c00)='data\x00', 0x4) r5 = syz_open_dev$sndmidi(&(0x7f0000000b00), 0x2, 0x2) write(r5, &(0x7f0000000c00)='data\x00', 0x4) r6 = syz_open_dev$sndmidi(&(0x7f0000000b00), 0x3, 0x2) write(r6, &(0x7f0000000c00)='data\x00', 0x4) 853.166779ms ago: executing program 3 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0x0525\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0xa4a2\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='dummy_udc.0\x00', 0xb) write(r2, &(0x7f00000003c0)='dummy_udc.1\x00', 0xb) write(r2, &(0x7f0000000400)='dummy_udc.2\x00', 0xb) write(r2, &(0x7f0000000440)='dummy_udc.3\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='config/usb_gadget/g1/UDC\x00', 0x0, 0x0) read(r3, &(0x7f00000004c0)=""/64, 0x40) 814.249815ms ago: executing program 2 (id=126): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlink(&(0x7f0000000800)='./config/usb_gadget/g1/functions/geth.usb0\x00', &(0x7f0000000900)='./config/usb_gadget/g1/configs/c.1/geth.usb0\x00') write(0xffffffffffffffff, &(0x7f0000000d00)='0x1d6b\n\x00', 0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r0, &(0x7f0000000f00)='0x0104\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='dummy_udc.0\n\x00', 0xc) 757.165653ms ago: executing program 1 (id=127): mount(0x0, &(0x7f0000000080)='config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000440)='dummy_udc.3\x00', 0xb) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='config/usb_gadget/g1/UDC\x00', 0x0, 0x0) read(r0, &(0x7f00000004c0)=""/64, 0x40) 634.256774ms ago: executing program 2 (id=128): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040460a019600010000000109022700010100a0320904000003ff00000007058102000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x6, "019622334455"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x6, "019622334455"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x6, "019622334455"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x6, "019622334455"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x6, "019622334455"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x6, "019622334455"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 463.355586ms ago: executing program 3 (id=129): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) 463.098035ms ago: executing program 1 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0x1234\n', 0x7) write(0xffffffffffffffff, &(0x7f0000000400)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='0\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='1\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000001600)='usbip-vudc.0\n', 0xd) 303.433462ms ago: executing program 1 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0\n\x00', 0x2) write(r0, &(0x7f00000001a0)='1\n\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/machinecheck/machinecheck0/tolerant\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='1\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/machinecheck/machinecheck0/bank0\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='1\n\x00', 0x2) r3 = syz_open_dev$MSR(&(0x7f0000000800), 0x0, 0x0) pread64(r3, &(0x7f0000000900)=""/8, 0x8, 0x403) pread64(r3, &(0x7f0000000a00)=""/8, 0x8, 0x10) close(r3) 168.403873ms ago: executing program 3 (id=132): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff) r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000250)='webusb/use\x00', 0x2, 0x0) write(r2, &(0x7f0000000290)='1\x00', 0x1) 0s ago: executing program 3 (id=133): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/gspca_m5602/parameters/force_sensor\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)='6', 0x1) syz_usb_connect(0x3, 0x2b, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040020402560001000000010902190001010080320904000001ffffff0007058101000201"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000400), 0x1, 0x2) ioctl$VIDIOC_QBUF(r1, 0xc050560f, &(0x7f0000000700)=@mmap={0x1, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0xffffffff}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000800)=0x1) r2 = syz_open_dev$video(&(0x7f0000000400), 0x2, 0x2) ioctl$VIDIOC_QBUF(r2, 0xc050560f, &(0x7f0000000600)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0xffffffff}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000800)=0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts. [ 79.157448][ T5573] cgroup: Unknown subsys name 'net' [ 79.428073][ T5573] cgroup: Unknown subsys name 'cpuset' [ 79.493513][ T5573] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.136904][ T5573] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.137377][ T5602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.148920][ T5602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.169124][ T5604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.200466][ T5604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.201884][ T5604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.223143][ T5604] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.226828][ T5604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.235998][ T5602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.246683][ T5604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.254016][ T5603] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.265199][ T5602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.267226][ T5603] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.269213][ T5602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.269460][ T5602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.271319][ T5602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.277401][ T5603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.279110][ T5603] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.280355][ T5603] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.284051][ T5606] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.285938][ T5596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.287036][ T5603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.297402][ T5606] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.300320][ T5606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.300802][ T5603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.302310][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.325537][ T5591] Bluetooth: hci1: command tx timeout [ 86.403060][ T5591] Bluetooth: hci2: command tx timeout [ 86.403089][ T5599] Bluetooth: hci3: command tx timeout [ 86.483100][ T5591] Bluetooth: hci0: command tx timeout [ 86.563061][ T5591] Bluetooth: hci4: command tx timeout [ 86.910959][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.912083][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.912278][ T5585] bridge_slave_0: entered allmulticast mode [ 86.924904][ T5585] bridge_slave_0: entered promiscuous mode [ 86.977808][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.977924][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.978079][ T5585] bridge_slave_1: entered allmulticast mode [ 86.979470][ T5585] bridge_slave_1: entered promiscuous mode [ 86.981187][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.981295][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.981406][ T5583] bridge_slave_0: entered allmulticast mode [ 86.983362][ T5583] bridge_slave_0: entered promiscuous mode [ 87.065334][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.065441][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.065628][ T5583] bridge_slave_1: entered allmulticast mode [ 87.067132][ T5583] bridge_slave_1: entered promiscuous mode [ 87.068653][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.068764][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.068885][ T5587] bridge_slave_0: entered allmulticast mode [ 87.070822][ T5587] bridge_slave_0: entered promiscuous mode [ 87.168598][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.168742][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.168856][ T5587] bridge_slave_1: entered allmulticast mode [ 87.170258][ T5587] bridge_slave_1: entered promiscuous mode [ 87.171538][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.171635][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.171736][ T5584] bridge_slave_0: entered allmulticast mode [ 87.174610][ T5584] bridge_slave_0: entered promiscuous mode [ 87.229025][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.229115][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.229451][ T5586] bridge_slave_0: entered allmulticast mode [ 87.230982][ T5586] bridge_slave_0: entered promiscuous mode [ 87.239970][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.282749][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.282841][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.302451][ T5584] bridge_slave_1: entered allmulticast mode [ 87.311536][ T5584] bridge_slave_1: entered promiscuous mode [ 87.337200][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.337312][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.337495][ T5586] bridge_slave_1: entered allmulticast mode [ 87.353096][ T5586] bridge_slave_1: entered promiscuous mode [ 87.368729][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.384389][ T10] cfg80211: failed to load regulatory.db [ 87.387838][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.558655][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.561912][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.635325][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.638784][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.645796][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.653390][ T5585] team0: Port device team_slave_0 added [ 87.698125][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.700212][ T5585] team0: Port device team_slave_1 added [ 87.702590][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.707730][ T5583] team0: Port device team_slave_0 added [ 87.777310][ T5583] team0: Port device team_slave_1 added [ 87.780373][ T5587] team0: Port device team_slave_0 added [ 87.845832][ T5587] team0: Port device team_slave_1 added [ 87.847539][ T5584] team0: Port device team_slave_0 added [ 87.848826][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.848836][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.848848][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.858016][ T5586] team0: Port device team_slave_0 added [ 87.900741][ T5584] team0: Port device team_slave_1 added [ 87.901643][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.901654][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.901685][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.911793][ T5586] team0: Port device team_slave_1 added [ 87.912640][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.912652][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.912683][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.023323][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.023334][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.023347][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.024516][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.024528][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.024540][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.090873][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.090889][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.090909][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.093673][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.093687][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.093708][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.101250][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.101265][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.101286][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.146335][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.146351][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.146372][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.147874][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.147885][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.147905][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.264442][ T5585] hsr_slave_0: entered promiscuous mode [ 88.266103][ T5585] hsr_slave_1: entered promiscuous mode [ 88.358662][ T5583] hsr_slave_0: entered promiscuous mode [ 88.359488][ T5583] hsr_slave_1: entered promiscuous mode [ 88.360199][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 88.360275][ T5583] Cannot create hsr debugfs directory [ 88.411859][ T5587] hsr_slave_0: entered promiscuous mode [ 88.412720][ T5587] hsr_slave_1: entered promiscuous mode [ 88.414594][ T5591] Bluetooth: hci1: command tx timeout [ 88.416485][ T5587] debugfs: 'hsr0' already exists in 'hsr' [ 88.416508][ T5587] Cannot create hsr debugfs directory [ 88.480059][ T5584] hsr_slave_0: entered promiscuous mode [ 88.480867][ T5584] hsr_slave_1: entered promiscuous mode [ 88.481460][ T5584] debugfs: 'hsr0' already exists in 'hsr' [ 88.481479][ T5584] Cannot create hsr debugfs directory [ 88.483250][ T5591] Bluetooth: hci3: command tx timeout [ 88.483275][ T5591] Bluetooth: hci2: command tx timeout [ 88.504676][ T5586] hsr_slave_0: entered promiscuous mode [ 88.505950][ T5586] hsr_slave_1: entered promiscuous mode [ 88.507062][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 88.507112][ T5586] Cannot create hsr debugfs directory [ 88.563123][ T5599] Bluetooth: hci0: command tx timeout [ 88.643064][ T5599] Bluetooth: hci4: command tx timeout [ 89.785821][ T5585] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.835444][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.841231][ T5585] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.868183][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.870980][ T5585] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.892300][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.921528][ T5585] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.949931][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.076444][ T5587] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.135958][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.138810][ T5587] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.170912][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.177388][ T5587] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.207383][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.228923][ T5587] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.267867][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.380408][ T5584] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.408903][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.427882][ T5584] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.459170][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.465975][ T5584] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.483263][ T5599] Bluetooth: hci1: command tx timeout [ 90.508351][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.533548][ T5584] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.564117][ T5599] Bluetooth: hci2: command tx timeout [ 90.564149][ T5599] Bluetooth: hci3: command tx timeout [ 90.568926][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.643917][ T5591] Bluetooth: hci0: command tx timeout [ 90.724980][ T5591] Bluetooth: hci4: command tx timeout [ 90.738763][ T5586] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.768234][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.789385][ T5586] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.832543][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.850784][ T5586] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.866368][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.910660][ T5586] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.949167][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.071238][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.131723][ T5583] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.168559][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.180454][ T5583] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.210621][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.215204][ T5583] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.256096][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.275452][ T5583] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.306587][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.347046][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.420151][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.420415][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.456475][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.487413][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.487512][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.595468][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.671375][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.712714][ T1611] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.712808][ T1611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.827334][ T1864] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.827428][ T1864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.885564][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.962648][ T1864] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.962779][ T1864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.038311][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.075299][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.075455][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.209801][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.238904][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.270500][ T1912] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.274096][ T1912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.342606][ T1912] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.342767][ T1912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.475236][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.528475][ T1864] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.528666][ T1864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.565413][ T5591] Bluetooth: hci1: command tx timeout [ 92.614632][ T1864] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.616247][ T1864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.645118][ T5591] Bluetooth: hci3: command tx timeout [ 92.645154][ T5591] Bluetooth: hci2: command tx timeout [ 92.723291][ T5599] Bluetooth: hci0: command tx timeout [ 92.803047][ T5599] Bluetooth: hci4: command tx timeout [ 93.157965][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.441045][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.789574][ T5587] veth0_vlan: entered promiscuous mode [ 94.005696][ T5587] veth1_vlan: entered promiscuous mode [ 94.241819][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.288087][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.321849][ T5585] veth0_vlan: entered promiscuous mode [ 94.398149][ T5587] veth0_macvtap: entered promiscuous mode [ 94.429931][ T5585] veth1_vlan: entered promiscuous mode [ 94.454887][ T5587] veth1_macvtap: entered promiscuous mode [ 94.512047][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.554988][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.591641][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.600411][ T5584] veth0_vlan: entered promiscuous mode [ 94.640968][ T5586] veth0_vlan: entered promiscuous mode [ 94.659378][ T5585] veth0_macvtap: entered promiscuous mode [ 94.679008][ T5584] veth1_vlan: entered promiscuous mode [ 94.693906][ T5585] veth1_macvtap: entered promiscuous mode [ 94.748425][ T5586] veth1_vlan: entered promiscuous mode [ 94.938623][ T5583] veth0_vlan: entered promiscuous mode [ 94.990497][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.036933][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.072103][ T5583] veth1_vlan: entered promiscuous mode [ 95.076197][ T5584] veth0_macvtap: entered promiscuous mode [ 95.112078][ T5584] veth1_macvtap: entered promiscuous mode [ 95.197272][ T5586] veth0_macvtap: entered promiscuous mode [ 95.257323][ T5586] veth1_macvtap: entered promiscuous mode [ 95.281190][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.281216][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.411364][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.627694][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.642280][ T1864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.642299][ T1864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.682359][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.721066][ T5583] veth0_macvtap: entered promiscuous mode [ 95.755837][ T251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.755854][ T251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.766716][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.830046][ T5583] veth1_macvtap: entered promiscuous mode [ 96.120197][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.120213][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.541263][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.801133][ T5781] configfs-gadget.g1 gadget.0: HOST MAC 4e:78:08:b3:65:24 [ 96.801156][ T5781] configfs-gadget.g1 gadget.0: MAC 26:74:aa:86:8a:21 [ 96.829621][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.006404][ T1864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.006424][ T1864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.219566][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.327739][ T37] audit: type=1800 audit(1786955193.958:2): pid=5787 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.6" name="idVendor" dev="configfs" ino=7890 res=0 errno=0 [ 97.412285][ T37] audit: type=1800 audit(1786955194.058:3): pid=5789 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.6" name="UDC" dev="configfs" ino=7953 res=0 errno=0 [ 97.511696][ T1864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.511714][ T1864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.872223][ T5753] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.074376][ T1612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.074394][ T1612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.270593][ T5753] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 98.343481][ T73] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.345040][ T1612] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.407271][ T1612] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.407767][ T1612] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.422233][ T5753] usb 1-1: Dual-Role OTG device on HNP port [ 98.427073][ T5753] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.658320][ T1912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.658339][ T1912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.727325][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.267704][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.267725][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.304961][ T73] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.748939][ T5813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 99.754659][ T5811] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 99.864751][ T5820] unchecked MSR access error: WRMSR to 0x400 (tried to write 0x0000000000000001) at rIP: 0xffffffff81707b72 (__mcheck_cpu_init_prepare_banks+0x1f2/0x3d0) [ 99.864824][ T5820] Call Trace: [ 99.864832][ T5820] [ 99.864846][ T5820] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 99.864875][ T5820] ? __lock_acquire+0x683/0x2ce0 [ 99.864897][ T5820] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 99.864932][ T5820] mce_cpu_restart+0x11a/0x2c0 [ 99.864955][ T5820] ? __pfx_mce_cpu_restart+0x10/0x10 [ 99.864969][ T5820] smp_call_function_many_cond+0x10bd/0x1650 [ 99.864992][ T5820] ? __pfx_mce_cpu_restart+0x10/0x10 [ 99.865009][ T5820] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 99.865027][ T5820] ? lockdep_hardirqs_on+0x7a/0x110 [ 99.865040][ T5820] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 99.865052][ T5820] ? __pfx_mce_cpu_restart+0x10/0x10 [ 99.865065][ T5820] on_each_cpu_cond_mask+0x3f/0x80 [ 99.865076][ T5820] set_bank+0x3a8/0x4e0 [ 99.865090][ T5820] ? __pfx_set_bank+0x10/0x10 [ 99.865104][ T5820] ? sysfs_file_kobj+0x1e4/0x230 [ 99.865119][ T5820] ? sysfs_kf_write+0x166/0x260 [ 99.865138][ T5820] ? __pfx_sysfs_kf_write+0x10/0x10 [ 99.865152][ T5820] kernfs_fop_write_iter+0x3a5/0x540 [ 99.865167][ T5820] vfs_write+0x61e/0xbb0 [ 99.865185][ T5820] ? __pfx_vfs_write+0x10/0x10 [ 99.865197][ T5820] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 99.865208][ T5820] ? lockdep_hardirqs_on+0x7a/0x110 [ 99.865220][ T5820] ? mutex_lock_nested+0x152/0x1d0 [ 99.865233][ T5820] ? fdget_pos+0x252/0x320 [ 99.865248][ T5820] ksys_write+0x156/0x270 [ 99.865260][ T5820] ? __pfx_ksys_write+0x10/0x10 [ 99.865275][ T5820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.865286][ T5820] do_syscall_64+0x174/0x580 [ 99.865297][ T5820] ? trace_irq_disable+0x3b/0x140 [ 99.865311][ T5820] ? clear_bhb_loop+0x70/0xc0 [ 99.865322][ T5820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.865332][ T5820] RIP: 0033:0x7ff08290e0d9 [ 99.865350][ T5820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.865358][ T5820] RSP: 002b:00007ff080b24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 99.865373][ T5820] RAX: ffffffffffffffda RBX: 00007ff082b96180 RCX: 00007ff08290e0d9 [ 99.865380][ T5820] RDX: 0000000000000002 RSI: 0000200000000480 RDI: 0000000000000003 [ 99.865386][ T5820] RBP: 00007ff0829a5024 R08: 0000000000000000 R09: 0000000000000000 [ 99.865392][ T5820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.865397][ T5820] R13: 00007ff082b96218 R14: 00007ff082b96180 R15: 00007ffd2b7fa478 [ 99.865413][ T5820] [ 100.244905][ T5753] rndis_host 1-1:1.0 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, 4e:78:08:b3:65:24 [ 100.531531][ T5818] smpboot: CPU 1 is now offline [ 100.568895][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.569095][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.569354][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.660982][ T1912] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.680772][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.680785][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.713218][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.713331][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.713460][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.713741][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.713862][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.714068][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.850606][ T37] audit: type=1800 audit(1786955197.488:4): pid=5823 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.12" name="UDC" dev="configfs" ino=8379 res=0 errno=0 [ 101.415769][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.784432][ T5593] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.037018][ T5836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.037353][ T5836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.110733][ T5593] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice= 1.00 [ 102.114119][ T5593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.409373][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.483228][ T1613] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.513513][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.514378][ T5840] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.581930][ T5593] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 102.671135][ T5840] usb 5-1: device descriptor read/64, error -71 [ 102.686250][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 102.690213][ T9] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 102.721201][ T9] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 102.721218][ T9] usb 2-1: config 0 has no interface number 0 [ 102.721245][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.053107][ T5840] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 103.080207][ T9] usb 2-1: config 0 descriptor?? [ 103.294320][ T5840] usb 5-1: device descriptor read/64, error -71 [ 103.403565][ T9] viperboard 2-1:0.143: version 0.00 found at bus 002 address 002 [ 103.403979][ T5840] usb usb5-port1: attempt power cycle [ 104.034199][ T5593] gspca_m5602: Failed to find a sensor [ 104.034209][ T5593] ALi m5602 3-1:1.0: ALi m5602 webcam failed [ 104.174037][ T5840] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.185711][ T37] audit: type=1800 audit(1786955200.798:5): pid=5850 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.15" name="idVendor" dev="configfs" ino=8468 res=0 errno=0 [ 104.258682][ T5840] usb 5-1: device descriptor read/8, error -71 [ 104.309579][ T37] audit: type=1800 audit(1786955200.958:6): pid=5850 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.15" name="UDC" dev="configfs" ino=8470 res=0 errno=0 [ 104.386418][ T5593] usb 3-1: USB disconnect, device number 2 [ 104.575971][ T5840] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 104.595843][ T5840] usb 5-1: device descriptor read/8, error -71 [ 104.714334][ T5840] usb usb5-port1: unable to enumerate USB device [ 104.742269][ T5845] configfs-gadget.g_uac2 gadget.32: Error: no playback and capture channels [ 104.742520][ T5845] udc usbip-vudc.0: failed to start g_uac2: -22 [ 104.742545][ T5845] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 105.023974][ T5845] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 105.423418][ T9] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 105.423437][ T9] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 105.861203][ T37] audit: type=1804 audit(1786955202.358:7): pid=5868 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.17" name="/newroot/6/config/usb_gadget/g1/UDC" dev="configfs" ino=8520 res=1 errno=0 [ 105.953264][ T37] audit: type=1800 audit(1786955202.588:8): pid=5868 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.17" name="UDC" dev="configfs" ino=8520 res=0 errno=0 [ 106.011608][ T5873] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 106.102753][ T37] audit: type=1800 audit(1786955202.748:9): pid=5876 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.21" name="UDC" dev="configfs" ino=8533 res=0 errno=0 [ 106.146398][ T10] usb 2-1: USB disconnect, device number 2 [ 106.296238][ T5877] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 108.270892][ T37] audit: type=1800 audit(1786955204.918:10): pid=5894 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.26" name="idVendor" dev="configfs" ino=8588 res=0 errno=0 [ 108.297779][ T5724] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.506819][ T37] audit: type=1800 audit(1786955205.098:11): pid=5900 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.26" name="UDC" dev="configfs" ino=8591 res=0 errno=0 [ 108.558300][ T5724] usb 4-1: device descriptor read/64, error -71 [ 108.923680][ T5724] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.147031][ T5724] usb 4-1: device descriptor read/64, error -71 [ 109.250645][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 109.298959][ T5724] usb usb4-port1: attempt power cycle [ 109.744040][ T5724] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 109.773796][ T5724] usb 4-1: device descriptor read/8, error -71 [ 109.874649][ T9] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice= 1.00 [ 109.879182][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.064079][ T5724] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 110.091857][ T5724] usb 4-1: device descriptor read/8, error -71 [ 110.194652][ T5724] usb usb4-port1: unable to enumerate USB device [ 110.526275][ T37] audit: type=1800 audit(1786955207.178:12): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.34" name="idVendor" dev="configfs" ino=8630 res=0 errno=0 [ 110.627062][ T9] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 110.729051][ T37] audit: type=1800 audit(1786955207.378:13): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.34" name="idProduct" dev="configfs" ino=8633 res=0 errno=0 [ 110.973956][ T37] audit: type=1800 audit(1786955207.608:14): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.34" name="product" dev="configfs" ino=8636 res=0 errno=0 [ 111.016397][ T37] audit: type=1800 audit(1786955207.668:15): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.34" name="manufacturer" dev="configfs" ino=8635 res=0 errno=0 [ 111.017147][ T37] audit: type=1800 audit(1786955207.668:16): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.34" name="configuration" dev="configfs" ino=8637 res=0 errno=0 [ 111.172992][ T37] audit: type=1800 audit(1786955207.818:17): pid=5920 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.34" name="serialnumber" dev="configfs" ino=8634 res=0 errno=0 [ 111.391065][ T37] audit: type=1800 audit(1786955208.038:18): pid=5920 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.34" name="UDC" dev="configfs" ino=8639 res=0 errno=0 [ 112.429331][ T9] gspca_m5602: Failed to find a sensor [ 112.429342][ T9] ALi m5602 5-1:1.0: ALi m5602 webcam failed [ 112.794420][ T9] usb 5-1: USB disconnect, device number 6 [ 113.380138][ T5921] usb 1-1: USB disconnect, device number 2 [ 113.625290][ T37] audit: type=1800 audit(1786955210.278:19): pid=5939 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.36" name="UDC" dev="configfs" ino=8653 res=0 errno=0 [ 114.389261][ T37] audit: type=1804 audit(1786955211.038:20): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.35" name="/newroot/11/config/usb_gadget/g1/UDC" dev="configfs" ino=8672 res=1 errno=0 [ 114.390335][ T37] audit: type=1800 audit(1786955211.038:21): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.35" name="UDC" dev="configfs" ino=8672 res=0 errno=0 [ 114.743981][ T5950] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 115.077640][ T5921] rndis_host 1-1:1.0 usb1: unregister 'rndis_host' usb-dummy_hcd.0-1, RNDIS device [ 115.658015][ T5951] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 115.977607][ T37] audit: type=1800 audit(1786955212.628:22): pid=5965 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.41" name="idVendor" dev="configfs" ino=8704 res=0 errno=0 [ 116.010163][ T37] audit: type=1800 audit(1786955212.628:23): pid=5965 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.41" name="idProduct" dev="configfs" ino=8705 res=0 errno=0 [ 116.042101][ T37] audit: type=1800 audit(1786955212.678:24): pid=5965 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.41" name="configuration" dev="configfs" ino=8706 res=0 errno=0 [ 116.276132][ T37] audit: type=1800 audit(1786955212.928:25): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.43" name="UDC" dev="configfs" ino=8721 res=0 errno=0 [ 116.322580][ T37] audit: type=1800 audit(1786955212.968:26): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.44" name="product" dev="configfs" ino=8722 res=0 errno=0 [ 116.825761][ T5851] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 116.976038][ T5851] usb 4-1: New USB device found, idVendor=0a46, idProduct=9601, bcdDevice= 1.00 [ 116.976922][ T5851] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.004854][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.175648][ T5851] dm9601 4-1:1.0: probe with driver dm9601 failed with error -22 [ 117.201307][ T37] audit: type=1804 audit(1786955213.848:27): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.50" name="/newroot/14/config/usb_gadget/g1/UDC" dev="configfs" ino=8762 res=1 errno=0 [ 117.201337][ T37] audit: type=1800 audit(1786955213.848:28): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.50" name="UDC" dev="configfs" ino=8762 res=0 errno=0 [ 117.330739][ T37] audit: type=1800 audit(1786955213.978:29): pid=5989 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.49" name="UDC" dev="configfs" ino=8766 res=0 errno=0 [ 118.173024][ T5840] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.316102][ T6003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 118.317018][ T6008] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 118.318347][ T6004] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 118.348233][ T5840] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice= 1.00 [ 118.375187][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.862667][ T5840] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 118.862761][ T5840] gspca_m5602: Forcing an ov7660 sensor [ 119.241649][ T37] audit: type=1800 audit(1786955215.888:30): pid=6023 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.56" name="idVendor" dev="configfs" ino=9297 res=0 errno=0 [ 119.258009][ T37] audit: type=1800 audit(1786955215.908:31): pid=6022 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.56" name="idProduct" dev="configfs" ino=9298 res=0 errno=0 [ 119.876973][ T9] usb 4-1: USB disconnect, device number 6 [ 120.001935][ T5840] ALi m5602 2-1:1.0: probe with driver ALi m5602 failed with error -71 [ 120.135006][ T5840] usb 2-1: USB disconnect, device number 3 [ 120.173925][ T6023] hub 1-0:1.0: USB hub found [ 120.212086][ T6023] hub 1-0:1.0: 1 port detected [ 120.684290][ T5859] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 120.845081][ T5859] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 7.02 [ 120.847365][ T5859] usb 1-1: Dual-Role OTG device on HNP port [ 120.847688][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.047524][ T6056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.097393][ T6056] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 121.347270][ T6057] smpboot: CPU 1 is now offline [ 121.352747][ T5859] rndis_host 1-1:1.0 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, 4e:78:08:b3:65:24 [ 121.540565][ T6064] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 121.563689][ T6070] configfs-gadget.g_uac2 gadget.32: Error: no playback and capture channels [ 121.563786][ T6070] udc usbip-vudc.0: failed to start g_uac2: -22 [ 121.563808][ T6070] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 121.664791][ T5840] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.764940][ T6070] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 121.798526][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 121.798543][ T37] audit: type=1800 audit(1786955218.448:44): pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.72" name="idVendor" dev="configfs" ino=8869 res=0 errno=0 [ 121.813728][ T37] audit: type=1800 audit(1786955218.468:45): pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.72" name="idProduct" dev="configfs" ino=8870 res=0 errno=0 [ 121.872389][ T37] audit: type=1800 audit(1786955218.518:46): pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.72" name="serialnumber" dev="configfs" ino=8871 res=0 errno=0 [ 121.917381][ T37] audit: type=1800 audit(1786955218.568:47): pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.72" name="manufacturer" dev="configfs" ino=8872 res=0 errno=0 [ 121.921274][ T37] audit: type=1800 audit(1786955218.568:48): pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.72" name="product" dev="configfs" ino=8873 res=0 errno=0 [ 122.005393][ T5840] usb 3-1: New USB device found, idVendor=0a46, idProduct=9601, bcdDevice= 1.00 [ 122.011929][ T5840] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.011996][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.041060][ T37] audit: type=1800 audit(1786955218.608:49): pid=6075 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.73" name="configuration" dev="configfs" ino=9373 res=0 errno=0 [ 122.098106][ T37] audit: type=1800 audit(1786955218.718:50): pid=6076 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.72" name="configuration" dev="configfs" ino=9375 res=0 errno=0 [ 122.112446][ T37] audit: type=1800 audit(1786955218.758:51): pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.72" name="UDC" dev="configfs" ino=9378 res=0 errno=0 [ 122.167671][ T5840] dm9601 3-1:1.0: probe with driver dm9601 failed with error -22 [ 122.342534][ T37] audit: type=1804 audit(1786955218.968:52): pid=6086 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.74" name="/newroot/12/config/usb_gadget/g1/UDC" dev="configfs" ino=9378 res=1 errno=0 [ 122.348158][ T6076] usb 1-1: USB disconnect, device number 3 [ 122.421856][ T6076] rndis_host 1-1:1.0 usb1: unregister 'rndis_host' usb-dummy_hcd.0-1, RNDIS device [ 122.691113][ T37] audit: type=1800 audit(1786955219.338:53): pid=6092 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.76" name="idVendor" dev="configfs" ino=8881 res=0 errno=0 [ 122.893588][ T5701] usb 3-1: USB disconnect, device number 3 [ 122.972981][ T36] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 123.133734][ T36] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice= 1.00 [ 123.158454][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.159376][ T6076] hub 1-0:1.0: USB hub found [ 123.162343][ T6076] hub 1-0:1.0: 1 port detected [ 123.299841][ T6111] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 123.411186][ T36] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 123.411270][ T36] gspca_m5602: Forcing an ov7660 sensor [ 123.472446][ T6100] hub 1-0:1.0: USB hub found [ 123.588039][ T6100] hub 1-0:1.0: 1 port detected [ 124.083444][ T5753] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 124.144812][ T6123] configfs-gadget.g_uac2 gadget.32: Error: no playback and capture channels [ 124.215663][ T6123] udc usbip-vudc.0: failed to start g_uac2: -22 [ 124.215691][ T6123] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 124.249469][ T5753] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 7.02 [ 124.250357][ T5753] usb 1-1: Dual-Role OTG device on HNP port [ 124.250689][ T5753] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.431911][ T6123] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 124.553538][ T36] ALi m5602 4-1:1.0: probe with driver ALi m5602 failed with error -71 [ 124.703350][ T36] usb 4-1: USB disconnect, device number 7 [ 124.885168][ T5753] rndis_host 1-1:1.0 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, 4e:78:08:b3:65:24 [ 125.010224][ T6151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.010732][ T6151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.108005][ T6154] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.175879][ T6154] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 125.745008][ T6167] smpboot: CPU 1 is now offline [ 125.905162][ T6171] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 125.950387][ T6172] usb 1-1: USB disconnect, device number 4 [ 125.999119][ T6172] rndis_host 1-1:1.0 usb1: unregister 'rndis_host' usb-dummy_hcd.0-1, RNDIS device [ 126.172109][ T6186] configfs-gadget.g_uac2 gadget.32: Error: no playback and capture channels [ 126.172251][ T6186] udc usbip-vudc.0: failed to start g_uac2: -22 [ 126.172270][ T6186] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 126.236353][ T6186] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 126.637884][ T6172] hub 1-0:1.0: USB hub found [ 126.641710][ T6172] hub 1-0:1.0: 1 port detected [ 126.743023][ T36] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 126.849520][ T37] kauditd_printk_skb: 29 callbacks suppressed [ 126.849538][ T37] audit: type=1800 audit(1786955223.498:83): pid=6211 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.110" name="idProduct" dev="configfs" ino=9543 res=0 errno=0 [ 126.852412][ T37] audit: type=1800 audit(1786955223.498:84): pid=6211 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.110" name="serialnumber" dev="configfs" ino=9544 res=0 errno=0 [ 126.853034][ T5753] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.867806][ T37] audit: type=1800 audit(1786955223.518:85): pid=6211 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.110" name="manufacturer" dev="configfs" ino=9545 res=0 errno=0 [ 126.871393][ T37] audit: type=1800 audit(1786955223.518:86): pid=6211 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.110" name="product" dev="configfs" ino=9546 res=0 errno=0 [ 126.876670][ T37] audit: type=1800 audit(1786955223.528:87): pid=6211 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.110" name="configuration" dev="configfs" ino=9547 res=0 errno=0 [ 126.888922][ T37] audit: type=1800 audit(1786955223.538:88): pid=6211 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.110" name="configuration" dev="configfs" ino=9552 res=0 errno=0 [ 126.903933][ T36] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice= 1.00 [ 126.914151][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.074702][ T5753] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 7.02 [ 127.077629][ T5753] usb 1-1: Dual-Role OTG device on HNP port [ 127.077937][ T5753] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.157785][ T5753] rndis_host 1-1:1.0 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, 4e:78:08:b3:65:24 [ 127.225804][ T36] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 127.225893][ T36] gspca_m5602: Forcing an ov7660 sensor [ 127.353359][ T5701] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 127.461238][ T6214] usb 1-1: USB disconnect, device number 5 [ 127.477896][ T6214] rndis_host 1-1:1.0 usb1: unregister 'rndis_host' usb-dummy_hcd.0-1, RNDIS device [ 127.527304][ T5701] usb 3-1: New USB device found, idVendor=0a46, idProduct=9601, bcdDevice= 1.00 [ 127.529626][ T5701] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.529679][ T5701] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 127.529824][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.755683][ T37] audit: type=1804 audit(1786955224.408:89): pid=6224 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.113" name="/newroot/19/config/usb_gadget/g1/UDC" dev="configfs" ino=9048 res=1 errno=0 [ 127.756763][ T37] audit: type=1800 audit(1786955224.408:90): pid=6224 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.113" name="UDC" dev="configfs" ino=9048 res=0 errno=0 [ 128.032237][ T5701] dm9601 3-1:1.0: probe with driver dm9601 failed with error -22 [ 128.363430][ T6232] smpboot: CPU 1 is now offline [ 128.408166][ T36] ALi m5602 4-1:1.0: probe with driver ALi m5602 failed with error -71 [ 128.472661][ T36] usb 4-1: USB disconnect, device number 8 [ 128.532641][ T5840] usb 3-1: USB disconnect, device number 4 [ 128.726346][ T6233] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 128.862097][ T6214] hub 1-0:1.0: USB hub found [ 128.872102][ T6214] hub 1-0:1.0: 1 port detected [ 129.193887][ T36] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.196665][ T37] audit: type=1800 audit(1786955225.848:91): pid=6257 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.121" name="idVendor" dev="configfs" ino=9091 res=0 errno=0 [ 129.201921][ T37] audit: type=1800 audit(1786955225.848:92): pid=6257 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.121" name="configuration" dev="configfs" ino=9092 res=0 errno=0 [ 129.346708][ T36] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 7.02 [ 129.347534][ T36] usb 1-1: Dual-Role OTG device on HNP port [ 129.351974][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.682214][ T36] rndis_host 1-1:1.0 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, 4e:78:08:b3:65:24 [ 129.759241][ T6279] configfs-gadget.g_uac2 gadget.32: Error: no playback and capture channels [ 129.759380][ T6279] udc usbip-vudc.0: failed to start g_uac2: -22 [ 129.759401][ T6279] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 129.760523][ T6279] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 129.799180][ T6269] usb 1-1: USB disconnect, device number 6 [ 129.835169][ T6269] rndis_host 1-1:1.0 usb1: unregister 'rndis_host' usb-dummy_hcd.0-1, RNDIS device [ 129.913066][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 130.063918][ T9] usb 3-1: New USB device found, idVendor=0a46, idProduct=9601, bcdDevice= 1.00 [ 130.066833][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.066898][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 130.066958][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.274094][ T9] dm9601 3-1:1.0: probe with driver dm9601 failed with error -22 [ 130.397717][ T27] numa_remove_cpu cpu 1 node 0: mask now 0 [ 130.397737][ T27] numa_remove_cpu cpu 1 node 1: mask now 0 [ 130.400053][ T6285] smpboot: CPU 1 is now offline [ 130.400389][ T6285] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 130.400401][ T6285] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 130.400419][ T6285] CPU: 0 UID: 0 PID: 6285 Comm: syz.1.131 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 130.400431][ T6285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.400437][ T6285] RIP: 0010:detach_timer+0xf9/0x2d0 [ 130.400462][ T6285] Code: 24 08 49 83 c5 08 4d 89 ee 49 c1 ee 03 4c 89 e5 43 80 3c 26 00 74 08 4c 89 ef e8 12 48 7d 00 4d 8b 65 00 4c 89 e0 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 e7 e8 e9 48 7d 00 4d 89 3c 24 4d 85 ff 74 [ 130.400471][ T6285] RSP: 0018:ffffc900069bf8b0 EFLAGS: 00010046 [ 130.400485][ T6285] RAX: 0000000000000000 RBX: 1ffff110170e4694 RCX: 0000000000080000 [ 130.400492][ T6285] RDX: ffffc900050a9000 RSI: 00000000000008e4 RDI: 00000000000008e5 [ 130.400498][ T6285] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.400504][ T6285] R10: dffffc0000000000 R11: fffffbfff1f5f267 R12: 0000000000000000 [ 130.400511][ T6285] R13: ffff8880b87234a8 R14: 1ffff110170e4695 R15: dead000000000122 [ 130.400518][ T6285] FS: 00007f3931bd66c0(0000) GS:ffff888125c3a000(0000) knlGS:0000000000000000 [ 130.400527][ T6285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.400536][ T6285] CR2: 00007faa31875ff8 CR3: 0000000037942000 CR4: 00000000003526f0 [ 130.400545][ T6285] Call Trace: [ 130.400549][ T6285] [ 130.400554][ T6285] timers_dead_cpu+0x32e/0x560 [ 130.400566][ T6285] ? __pfx_timers_dead_cpu+0x10/0x10 [ 130.400574][ T6285] cpuhp_invoke_callback+0x434/0x810 [ 130.400587][ T6285] ? trace_cpuhp_exit+0x85/0x1f0 [ 130.400598][ T6285] ? cpuhp_kick_ap_work+0x151/0x210 [ 130.400610][ T6285] _cpu_down+0x343/0x840 [ 130.400623][ T6285] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 130.400634][ T6285] ? cpu_device_down+0x3e/0xc0 [ 130.400645][ T6285] cpu_device_down+0x82/0xc0 [ 130.400654][ T6285] device_offline+0x2d2/0x3c0 [ 130.400668][ T6285] ? __pfx_device_offline+0x10/0x10 [ 130.400679][ T6285] ? _mutex_trylock_nest_lock+0x128/0x180 [ 130.400692][ T6285] ? online_store+0xb0/0x1a0 [ 130.400706][ T6285] online_store+0x123/0x1a0 [ 130.400718][ T6285] ? sysfs_file_kobj+0x1a/0x230 [ 130.400731][ T6285] ? __pfx_online_store+0x10/0x10 [ 130.400744][ T6285] ? sysfs_file_kobj+0x1e4/0x230 [ 130.400756][ T6285] ? sysfs_kf_write+0x166/0x260 [ 130.400769][ T6285] ? __pfx_sysfs_kf_write+0x10/0x10 [ 130.400781][ T6285] kernfs_fop_write_iter+0x3a5/0x540 [ 130.400794][ T6285] vfs_write+0x61e/0xbb0 [ 130.400806][ T6285] ? __pfx_vfs_write+0x10/0x10 [ 130.400817][ T6285] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 130.400831][ T6285] ? lockdep_hardirqs_on+0x7a/0x110 [ 130.400845][ T6285] ? mutex_lock_nested+0x152/0x1d0 [ 130.400857][ T6285] ? fdget_pos+0x252/0x320 [ 130.400867][ T6285] ksys_write+0x156/0x270 [ 130.400877][ T6285] ? __pfx_ksys_write+0x10/0x10 [ 130.400888][ T6285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.400897][ T6285] do_syscall_64+0x174/0x580 [ 130.400908][ T6285] ? clear_bhb_loop+0x70/0xc0 [ 130.400917][ T6285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.400926][ T6285] RIP: 0033:0x7f393397e0d9 [ 130.400939][ T6285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.400946][ T6285] RSP: 002b:00007f3931bd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.400955][ T6285] RAX: ffffffffffffffda RBX: 00007f3933c05fa0 RCX: 00007f393397e0d9 [ 130.400962][ T6285] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000003 [ 130.400967][ T6285] RBP: 00007f3933a15024 R08: 0000000000000000 R09: 0000000000000000 [ 130.400973][ T6285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.400978][ T6285] R13: 00007f3933c06038 R14: 00007f3933c05fa0 R15: 00007ffe9806b6f8 [ 130.400988][ T6285] [ 130.400992][ T6285] Modules linked in: [ 130.401002][ T6285] ---[ end trace 0000000000000000 ]--- [ 130.401007][ T6285] RIP: 0010:detach_timer+0xf9/0x2d0 [ 130.401018][ T6285] Code: 24 08 49 83 c5 08 4d 89 ee 49 c1 ee 03 4c 89 e5 43 80 3c 26 00 74 08 4c 89 ef e8 12 48 7d 00 4d 8b 65 00 4c 89 e0 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 e7 e8 e9 48 7d 00 4d 89 3c 24 4d 85 ff 74 [ 130.401032][ T6285] RSP: 0018:ffffc900069bf8b0 EFLAGS: 00010046 [ 130.401040][ T6285] RAX: 0000000000000000 RBX: 1ffff110170e4694 RCX: 0000000000080000 [ 130.401046][ T6285] RDX: ffffc900050a9000 RSI: 00000000000008e4 RDI: 00000000000008e5 [ 130.401053][ T6285] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.401059][ T6285] R10: dffffc0000000000 R11: fffffbfff1f5f267 R12: 0000000000000000 [ 130.401065][ T6285] R13: ffff8880b87234a8 R14: 1ffff110170e4695 R15: dead000000000122 [ 130.401072][ T6285] FS: 00007f3931bd66c0(0000) GS:ffff888125c3a000(0000) knlGS:0000000000000000 [ 130.401081][ T6285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.401087][ T6285] CR2: 00007faa31875ff8 CR3: 0000000037942000 CR4: 00000000003526f0 [ 130.401098][ T6285] Kernel panic - not syncing: Fatal exception [ 130.401149][ T6285] Kernel Offset: disabled