last executing test programs:
54.353055539s ago: executing program 1 (id=2):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000380)='dummy_udc.0\x00', 0xb)
write(r0, &(0x7f00000003c0)='dummy_udc.1\x00', 0xb)
write(r0, &(0x7f0000000400)='dummy_udc.2\x00', 0xb)
write(r0, &(0x7f0000000440)='dummy_udc.3\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='config/usb_gadget/g1/UDC\x00', 0x0, 0x0)
read(r1, &(0x7f00000004c0)=""/64, 0x40)
53.818639493s ago: executing program 1 (id=10):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./img0\x00', 0x42, 0x180)
ftruncate(r0, 0x1000000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./img1\x00', 0x42, 0x180)
ftruncate(r1, 0x1000000)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x1)
r3 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x2)
ioctl$LOOP_SET_FD(r3, 0x4c00, r0)
r4 = syz_open_dev$loop(&(0x7f0000000240), 0x1, 0x2)
ioctl$LOOP_SET_FD(r4, 0x4c00, r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(&(0x7f00000002c0)=@filename='none\x00', &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r5, 0xc138fd03, &(0x7f0000000000)="0400000032000000000000003801000038010000000000000000000000000000000000000000000000000000706f6f6c3000"/259)
ioctl(r5, 0xc138fd09, &(0x7f0000000000)="0400000032000000000000007001000038010000010000000000000000000000000000000000000000000000706f6f6c3000"/259)
ioctl(r5, 0xc138fd06, &(0x7f0000000000)="0400000032000000000000003801000038010000000000000000000000000000000000000000000000000000706f6f6c3000"/259)
53.754165219s ago: executing program 4 (id=5):
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402505a0a400000102030109022000010100c0010904000002000000000705010200020007058202000200"], 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0xb, 0x2)
ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000400)=@usbdevfs_driver={0x0, 0xc0205564, &(0x7f0000000500)="01014000000000"})
52.943005708s ago: executing program 1 (id=13):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff)
symlink(&(0x7f0000000280)='./config/usb_gadget/g1/functions/gser.usb0\x00', &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0)
write(r0, &(0x7f0000000340)='Manufacturer\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0)
write(r1, &(0x7f00000003c0)='Product\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x1, 0x0)
write(r2, &(0x7f0000000440)='Conf 1\x00', 0x7)
r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000600)='dummy_udc.0\x00', 0xc)
51.143472022s ago: executing program 1 (id=16):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='0\n\x00', 0x2)
write(r0, &(0x7f00000001a0)='1\n\x00', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/machinecheck/machinecheck0/tolerant\x00', 0x2, 0x0)
write(r1, &(0x7f0000000380)='1\n\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/machinecheck/machinecheck0/bank0\x00', 0x2, 0x0)
write(r2, &(0x7f0000000480)='1\n\x00', 0x2)
49.963206734s ago: executing program 1 (id=20):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff)
mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='dummy_udc.0\n\x00\x00\x00\x00', 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='0x1d36b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x6)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r2, &(0x7f00000003c0)='0x0104\x00'/16, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000540)='dummy_udc.0\n\x00\x00\x00\x00', 0xc)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0)
write(r4, &(0x7f00000005c0)='dummy_udc.0\n\x00\x00\x00\x00', 0xc)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/power/state\x00', 0x1, 0x0)
write(r5, &(0x7f0000000640)='freeze\n\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x7)
38.409716042s ago: executing program 32 (id=5):
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402505a0a400000102030109022000010100c0010904000002000000000705010200020007058202000200"], 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0xb, 0x2)
ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000400)=@usbdevfs_driver={0x0, 0xc0205564, &(0x7f0000000500)="01014000000000"})
34.72409177s ago: executing program 33 (id=20):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff)
mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='dummy_udc.0\n\x00\x00\x00\x00', 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='0x1d36b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x6)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r2, &(0x7f00000003c0)='0x0104\x00'/16, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000540)='dummy_udc.0\n\x00\x00\x00\x00', 0xc)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0)
write(r4, &(0x7f00000005c0)='dummy_udc.0\n\x00\x00\x00\x00', 0xc)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/power/state\x00', 0x1, 0x0)
write(r5, &(0x7f0000000640)='freeze\n\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x7)
21.311944473s ago: executing program 5 (id=102):
syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000400d050301000001020301090227000101008032090400000000000000070581030800010705020240000007058302400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x3}, 0x0)
19.929581314s ago: executing program 2 (id=106):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0x0104\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0)
19.929189704s ago: executing program 3 (id=107):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0x0104\x00', 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0)
19.676574412s ago: executing program 2 (id=109):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='0\n\x00', 0x2)
write(r0, &(0x7f00000001a0)='1\n\x00', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/machinecheck/machinecheck0/tolerant\x00', 0x2, 0x0)
write(r1, &(0x7f0000000380)='1\n\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/machinecheck/machinecheck0/bank0\x00', 0x2, 0x0)
write(r2, &(0x7f0000000480)='1\n\x00', 0x2)
close(r2)
r3 = syz_open_dev$MSR(&(0x7f0000000800), 0x0, 0x0)
pread64(r3, &(0x7f0000000900)=""/8, 0x8, 0x403)
pread64(r3, &(0x7f0000000a00)=""/8, 0x8, 0x10)
19.612426473s ago: executing program 6 (id=110):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./img0\x00', 0x42, 0x180)
ftruncate(r0, 0x1000000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./img1\x00', 0x42, 0x180)
ftruncate(r1, 0x1000000)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x1)
r3 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x2)
ioctl$LOOP_SET_FD(r3, 0x4c00, r0)
r4 = syz_open_dev$loop(&(0x7f0000000240), 0x1, 0x2)
ioctl$LOOP_SET_FD(r4, 0x4c00, r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(&(0x7f00000002c0)=@filename='none\x00', &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0xc138fd06, &(0x7f0000000000)="0400000032000000000000003801000038010000000000000000000000000000000000000000000000000000706f6f6c3000"/259)
19.581928893s ago: executing program 3 (id=111):
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./config\x00', &(0x7f0000000500)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000600)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000800)='0x1d6b\n', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f0000000a00)='0x0104\n', 0x7)
close(r1)
mkdir(&(0x7f0000000b00)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0)
write(r2, &(0x7f0000000d00)='fedcba9876543210\n', 0x11)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0)
write(r3, &(0x7f0000000f00)='Linux Foundatio', 0xf)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0)
write(r4, &(0x7f0000001100)='Multifunction Gadget\n', 0x15)
mkdir(&(0x7f0000001200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000001300)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x1, 0x0)
write(r5, &(0x7f0000001500)='Conf 1\n', 0x7)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001900)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r6, &(0x7f0000001a00)='dummy_udc.0\n', 0xc)
close(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/net\x00', 0x0, 0x0)
getdents64(r7, &(0x7f0000001a40)=""/1024, 0x400)
19.314989845s ago: executing program 6 (id=112):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x1000})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x10000, 0x1000, 0x0, 0x0, r2})
close(r2) (async)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x0, 0x10000}) (async)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x1000})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x1, 0x4, 0x20000, 0x1000, 0x0, 0x0, r3})
close(r3) (async)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x1, 0x0, 0x20000}) (async)
r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x1000})
close(r4) (async)
19.188510123s ago: executing program 2 (id=113):
mkdir(&(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='0x1d6b\n', 0x7)
close(r0)
close(0xffffffffffffffff)
mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0)
write(r1, &(0x7f0000000a00)='fedcba9876543210\n', 0x11)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0)
write(r2, &(0x7f0000000c00)='Linux Foundation\n', 0x11)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000e00)='Multifunction Gadget\n', 0x15)
close(0xffffffffffffffff)
mkdir(&(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x1, 0x0)
mkdir(&(0x7f0000001300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x1, 0x0)
write(r3, &(0x7f0000001d00)='veth0\n', 0x6)
close(r3)
symlink(&(0x7f0000001400)='./config/usb_gadget/g1/functions/ecm.usb0\x00', &(0x7f0000001500)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000001700)='dummy_udc.0\n', 0xc)
close(r4)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000001900)={'veth0\x00', 0x1})
write(r5, &(0x7f0000001b00)="00112233445566778899aabb0800"/76, 0x40)
19.061690976s ago: executing program 3 (id=114):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0x0104\x00', 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0)
write(r2, &(0x7f00000002c0)='1234567890\x00', 0xb)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0)
write(r3, &(0x7f0000000340)='Linux Foundation\x00', 0x11)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0)
write(r4, &(0x7f00000003c0)='Test Gadget\x00', 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0)
18.882901486s ago: executing program 0 (id=115):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_usb_connect(0x3, 0x32, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040a61b01000000010200010902200001010080320904000002ff0000000705010240000007058202400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mknod(&(0x7f0000000400)='./dev_fe0\x00', 0x81b6, 0xd403)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_fe0\x00', 0x2, 0x0)
ioctl$FE_READ_STATUS(r0, 0x80046f45, &(0x7f0000000700))
mknod(&(0x7f0000000500)='./dev_fe1\x00', 0x81b6, 0xd443)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev_fe1\x00', 0x2, 0x0)
mknod(&(0x7f0000000600)='./dev_fe2\x00', 0x81b6, 0xd483)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev_fe2\x00', 0x2, 0x0)
18.779507518s ago: executing program 3 (id=116):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/firmware_class/parameters/force_sysfs_fallback\x00', 0x2, 0x0)
18.739043381s ago: executing program 2 (id=117):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='0x0525\x00', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='0xa4a2\x00', 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff)
symlinkat(&(0x7f00000002c0)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='config/usb_gadget/g1/configs/c.1/rndis.usb0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000000380)='dummy_udc.0\x00', 0xb)
write(r2, &(0x7f00000003c0)='dummy_udc.1\x00', 0xb)
write(r2, &(0x7f0000000440)='dummy_udc.3\x00', 0xb)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='config/usb_gadget/g1/UDC\x00', 0x0, 0x0)
read(r3, &(0x7f00000004c0)=""/64, 0x40)
18.544003798s ago: executing program 6 (id=118):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='0000:00:02.0\x00', 0xc)
close(r1)
write(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/drivers/amd5536udc-pci/bind\x00', 0x1, 0x0)
write(r2, 0x0, 0x0)
close(r2)
nanosleep(&(0x7f0000000900)={0x0, 0xbebc200}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/Loopback.usb0\x00', 0x1ff)
18.405762761s ago: executing program 3 (id=119):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0)
18.012617819s ago: executing program 3 (id=120):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./ath9k_htc\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./ath9k_htc/htc_9271-1.4.0.fw\x00', 0x41, 0x1ff)
write(r0, &(0x7f0000000100)='1234567890\x00', 0xa)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./htc_9271.fw\x00', 0x41, 0x1ff)
write(r1, &(0x7f0000000200)='1234567890\x00', 0xa)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/module/firmware_class/parameters/path\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='./\x00', 0x3)
close(r2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async)
clock_nanosleep(0x0, 0x0, &(0x7f0000000600)={0x1}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
17.99955154s ago: executing program 5 (id=121):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0x0104\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0)
17.932729947s ago: executing program 6 (id=122):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./img0\x00', 0x42, 0x180)
ftruncate(r0, 0x1000000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./img1\x00', 0x42, 0x180)
ftruncate(r1, 0x1000000)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x1)
r3 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x2)
ioctl$LOOP_SET_FD(r3, 0x4c00, r0)
r4 = syz_open_dev$loop(&(0x7f0000000240), 0x1, 0x2)
ioctl$LOOP_SET_FD(r4, 0x4c00, r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(&(0x7f00000002c0)=@filename='none\x00', &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0xc138fd06, &(0x7f0000000000)="0400000032000000000000003801000038010000000000000000000000000000000000000000000000000000706f6f6c3000"/259)
17.497327621s ago: executing program 6 (id=123):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='0\n\x00', 0x2)
write(r0, &(0x7f00000001a0)='1\n\x00', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/machinecheck/machinecheck0/tolerant\x00', 0x2, 0x0)
write(r1, &(0x7f0000000380)='1\n\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/machinecheck/machinecheck0/bank0\x00', 0x2, 0x0)
write(r2, &(0x7f0000000480)='1\n\x00', 0x2)
close(r2)
r3 = syz_open_dev$MSR(&(0x7f0000000800), 0x0, 0x0)
pread64(r3, &(0x7f0000000900)=""/8, 0x8, 0x403)
close(r3)
17.494322117s ago: executing program 5 (id=124):
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./config\x00', &(0x7f0000000500)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000600)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000800)='0x1d6b\n', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f0000000a00)='0x0104\n', 0x7)
close(r1)
mkdir(&(0x7f0000000b00)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0)
write(r2, &(0x7f0000000d00)='fedcba9876543210\n', 0x11)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0)
write(r3, &(0x7f0000000f00)='Linux Foundation', 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0)
write(r4, &(0x7f0000001100)='Multifunction Gadget\n', 0x15)
mkdir(&(0x7f0000001200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000001300)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x1, 0x0)
write(r5, &(0x7f0000001500)='Conf 1\n', 0x7)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001900)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r6, &(0x7f0000001a00)='dummy_udc.0\n', 0xc)
close(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/net\x00', 0x0, 0x0)
getdents64(r7, &(0x7f0000001a40)=""/1024, 0x400)
16.949623928s ago: executing program 0 (id=125):
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x6, "019622334455"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x6, "019622334455"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x6, "019622334455"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x6, "019622334455"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x6, "019622334455"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x6, "019622334455"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
16.949045005s ago: executing program 2 (id=126):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0x0104\x00', 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0)
write(r2, &(0x7f00000002c0)='1234567890\x00', 0xb)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0)
write(r3, &(0x7f0000000340)='Linux Foundation\x00', 0x11)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0)
write(r4, &(0x7f00000003c0)='Test Gadget\x00', 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0)
16.885862512s ago: executing program 5 (id=127):
mkdir(&(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='0x1d6b\n', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
close(r1)
mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0)
write(r2, &(0x7f0000000a00)='fedcba9876543210\n', 0x11)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0)
write(r3, &(0x7f0000000c00)='Linux Foundation\n', 0x11)
close(r3)
write(0xffffffffffffffff, &(0x7f0000000e00)='Multifunction Gadget\n', 0x15)
close(0xffffffffffffffff)
mkdir(&(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x1, 0x0)
mkdir(&(0x7f0000001300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x1, 0x0)
write(r4, &(0x7f0000001d00)='veth0\n', 0x6)
close(r4)
symlink(&(0x7f0000001400)='./config/usb_gadget/g1/functions/ecm.usb0\x00', &(0x7f0000001500)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r5, &(0x7f0000001700)='dummy_udc.0\n', 0xc)
close(r5)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000001900)={'veth0\x00', 0x1})
write(r6, &(0x7f0000001b00)="00112233445566778899aabb0800"/76, 0x40)
16.873095377s ago: executing program 6 (id=128):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x1000})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x10000, 0x1000, 0x0, 0x0, r2})
close(r2) (async)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x0, 0x10000}) (async)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x1000})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x1, 0x4, 0x20000, 0x1000, 0x0, 0x0, r3})
close(r3) (async)
r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x1000})
close(r4) (async)
16.580729748s ago: executing program 2 (id=129):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x10000, 0x2000, &(0x7f0000c00000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x40000001, 0x0, 0x0, 0x40}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x4b564d04, 0x0, 0x10001}]})
ioctl$KVM_GET_LAPIC(r2, 0x8040ae8e, &(0x7f0000000400))
ioctl$KVM_SET_LAPIC(r2, 0x4040ae8f, &(0x7f0000000400))
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000500)=0x10000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
16.165594898s ago: executing program 0 (id=130):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0)
16.123113731s ago: executing program 5 (id=131):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)
sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0)
sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x1c, r1, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0)
15.942998982s ago: executing program 0 (id=132):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='0000:00:02.0\x00', 0xc)
close(r1)
write(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/drivers/amd5536udc-pci/bind\x00', 0x1, 0x0)
write(r2, 0x0, 0x0)
close(r2)
nanosleep(&(0x7f0000000900)={0x0, 0xbebc200}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/Loopback.usb0\x00', 0x1ff)
15.849728752s ago: executing program 5 (id=133):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./img0\x00', 0x42, 0x180)
ftruncate(r0, 0x1000000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./img1\x00', 0x42, 0x180)
ftruncate(r1, 0x1000000)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x1)
r3 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x2)
ioctl$LOOP_SET_FD(r3, 0x4c00, r0)
r4 = syz_open_dev$loop(&(0x7f0000000240), 0x1, 0x2)
ioctl$LOOP_SET_FD(r4, 0x4c00, r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r5, 0xc138fd06, &(0x7f0000000000)="0400000032000000000000003801000038010000000000000000000000000000000000000000000000000000706f6f6c3000"/259)
15.493838189s ago: executing program 0 (id=134):
unshare(0x20000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140))
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod\x00', 0x0, 0x0)
15.231828603s ago: executing program 0 (id=135):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_usb_connect(0x3, 0x32, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040a61b01000000010200010902200001010080320904000002ff0000000705010240000007058202400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mknod(&(0x7f0000000400)='./dev_fe0\x00', 0x81b6, 0xd403)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_fe0\x00', 0x2, 0x0)
ioctl$FE_READ_STATUS(r0, 0x80046f45, &(0x7f0000000700))
mknod(&(0x7f0000000500)='./dev_fe1\x00', 0x81b6, 0xd443)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev_fe1\x00', 0x2, 0x0)
mknod(&(0x7f0000000600)='./dev_fe2\x00', 0x81b6, 0xd483)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev_fe2\x00', 0x2, 0x0)
2.177588495s ago: executing program 34 (id=120):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./ath9k_htc\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./ath9k_htc/htc_9271-1.4.0.fw\x00', 0x41, 0x1ff)
write(r0, &(0x7f0000000100)='1234567890\x00', 0xa)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./htc_9271.fw\x00', 0x41, 0x1ff)
write(r1, &(0x7f0000000200)='1234567890\x00', 0xa)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/module/firmware_class/parameters/path\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='./\x00', 0x3)
close(r2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async)
clock_nanosleep(0x0, 0x0, &(0x7f0000000600)={0x1}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
1.142143579s ago: executing program 35 (id=128):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x1000})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x10000, 0x1000, 0x0, 0x0, r2})
close(r2) (async)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x0, 0x10000}) (async)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x1000})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x1, 0x4, 0x20000, 0x1000, 0x0, 0x0, r3})
close(r3) (async)
r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x1000})
close(r4) (async)
1.090783504s ago: executing program 36 (id=129):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x10000, 0x2000, &(0x7f0000c00000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x40000001, 0x0, 0x0, 0x40}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x4b564d04, 0x0, 0x10001}]})
ioctl$KVM_GET_LAPIC(r2, 0x8040ae8e, &(0x7f0000000400))
ioctl$KVM_SET_LAPIC(r2, 0x4040ae8f, &(0x7f0000000400))
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000500)=0x10000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
37.911486ms ago: executing program 37 (id=135):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_usb_connect(0x3, 0x32, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040a61b01000000010200010902200001010080320904000002ff0000000705010240000007058202400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mknod(&(0x7f0000000400)='./dev_fe0\x00', 0x81b6, 0xd403)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_fe0\x00', 0x2, 0x0)
ioctl$FE_READ_STATUS(r0, 0x80046f45, &(0x7f0000000700))
mknod(&(0x7f0000000500)='./dev_fe1\x00', 0x81b6, 0xd443)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev_fe1\x00', 0x2, 0x0)
mknod(&(0x7f0000000600)='./dev_fe2\x00', 0x81b6, 0xd483)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev_fe2\x00', 0x2, 0x0)
0s ago: executing program 38 (id=133):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./img0\x00', 0x42, 0x180)
ftruncate(r0, 0x1000000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./img1\x00', 0x42, 0x180)
ftruncate(r1, 0x1000000)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x1)
r3 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x2)
ioctl$LOOP_SET_FD(r3, 0x4c00, r0)
r4 = syz_open_dev$loop(&(0x7f0000000240), 0x1, 0x2)
ioctl$LOOP_SET_FD(r4, 0x4c00, r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r5, 0xc138fd06, &(0x7f0000000000)="0400000032000000000000003801000038010000000000000000000000000000000000000000000000000000706f6f6c3000"/259)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts.
[ 92.016319][ T9] cfg80211: failed to load regulatory.db
[ 92.931518][ T5569] cgroup: Unknown subsys name 'net'
[ 93.152383][ T5569] cgroup: Unknown subsys name 'cpuset'
[ 93.226048][ T5569] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 95.157753][ T5569] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 99.317401][ T4896] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 99.324361][ T5595] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 99.352615][ T5599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 99.389745][ T5602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 99.390313][ T5602] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 99.392113][ T5602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 99.394046][ T5602] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 99.394700][ T5602] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 99.410420][ T5602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 99.443565][ T5602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 99.458067][ T5602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 99.490644][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 99.491260][ T5608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 99.493240][ T5607] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 99.505096][ T5604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 99.521979][ T5608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 99.522148][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 99.522288][ T5604] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 99.527055][ T5604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 99.532045][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 99.532395][ T5608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 99.535873][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 99.582309][ T5604] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 99.591668][ T5604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 99.597869][ T5595] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 101.667002][ T5594] Bluetooth: hci4: command tx timeout
[ 101.667345][ T5599] Bluetooth: hci2: command tx timeout
[ 101.746447][ T5594] Bluetooth: hci1: command tx timeout
[ 101.746456][ T5599] Bluetooth: hci0: command tx timeout
[ 101.825445][ T5599] Bluetooth: hci3: command tx timeout
[ 102.313431][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.314651][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state
[ 102.314803][ T5587] bridge_slave_0: entered allmulticast mode
[ 102.322810][ T5587] bridge_slave_0: entered promiscuous mode
[ 102.411363][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.411450][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state
[ 102.411585][ T5587] bridge_slave_1: entered allmulticast mode
[ 102.413589][ T5587] bridge_slave_1: entered promiscuous mode
[ 102.452923][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.453110][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state
[ 102.453238][ T5589] bridge_slave_0: entered allmulticast mode
[ 102.455539][ T5589] bridge_slave_0: entered promiscuous mode
[ 102.464500][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.464813][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state
[ 102.478840][ T5591] bridge_slave_0: entered allmulticast mode
[ 102.485252][ T5591] bridge_slave_0: entered promiscuous mode
[ 102.548842][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.548937][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state
[ 102.549059][ T5589] bridge_slave_1: entered allmulticast mode
[ 102.550974][ T5589] bridge_slave_1: entered promiscuous mode
[ 102.553549][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.553663][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state
[ 102.554053][ T5591] bridge_slave_1: entered allmulticast mode
[ 102.562286][ T5591] bridge_slave_1: entered promiscuous mode
[ 102.572771][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.573145][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state
[ 102.573892][ T5590] bridge_slave_0: entered allmulticast mode
[ 102.583749][ T5590] bridge_slave_0: entered promiscuous mode
[ 102.687345][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.687470][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state
[ 102.687588][ T5590] bridge_slave_1: entered allmulticast mode
[ 102.689545][ T5590] bridge_slave_1: entered promiscuous mode
[ 102.700732][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 102.798173][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 102.823417][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 102.838870][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 102.880437][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.880550][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state
[ 102.880669][ T5588] bridge_slave_0: entered allmulticast mode
[ 102.882647][ T5588] bridge_slave_0: entered promiscuous mode
[ 102.893619][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 102.908465][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 102.932783][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 102.955384][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.955615][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state
[ 102.956212][ T5588] bridge_slave_1: entered allmulticast mode
[ 102.958594][ T5588] bridge_slave_1: entered promiscuous mode
[ 103.018158][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 103.020554][ T5587] team0: Port device team_slave_0 added
[ 103.093040][ T5587] team0: Port device team_slave_1 added
[ 103.124941][ T5589] team0: Port device team_slave_0 added
[ 103.133338][ T5591] team0: Port device team_slave_0 added
[ 103.177536][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 103.179981][ T5589] team0: Port device team_slave_1 added
[ 103.182070][ T5591] team0: Port device team_slave_1 added
[ 103.184163][ T5590] team0: Port device team_slave_0 added
[ 103.223593][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 103.265224][ T5590] team0: Port device team_slave_1 added
[ 103.274381][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 103.274395][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 103.274414][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 103.372204][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 103.372219][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 103.372241][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 103.429170][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 103.429189][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 103.429219][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 103.433221][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 103.433235][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 103.433257][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 103.533103][ T5588] team0: Port device team_slave_0 added
[ 103.534075][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 103.534092][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 103.534125][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 103.547360][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 103.547467][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 103.547551][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 103.552259][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 103.552309][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 103.552404][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 103.602735][ T5588] team0: Port device team_slave_1 added
[ 103.687881][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 103.687893][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 103.687912][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 103.745496][ T5599] Bluetooth: hci2: command tx timeout
[ 103.745527][ T5599] Bluetooth: hci4: command tx timeout
[ 103.825499][ T5594] Bluetooth: hci0: command tx timeout
[ 103.825523][ T5599] Bluetooth: hci1: command tx timeout
[ 103.905515][ T5594] Bluetooth: hci3: command tx timeout
[ 104.188578][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 104.188591][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 104.188609][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 104.274690][ T5587] hsr_slave_0: entered promiscuous mode
[ 104.282968][ T5587] hsr_slave_1: entered promiscuous mode
[ 104.284980][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 104.284991][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 104.285010][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 104.392686][ T5589] hsr_slave_0: entered promiscuous mode
[ 104.393787][ T5589] hsr_slave_1: entered promiscuous mode
[ 104.394696][ T5589] debugfs: 'hsr0' already exists in 'hsr'
[ 104.394786][ T5589] Cannot create hsr debugfs directory
[ 104.433576][ T5591] hsr_slave_0: entered promiscuous mode
[ 104.434759][ T5591] hsr_slave_1: entered promiscuous mode
[ 104.436669][ T5591] debugfs: 'hsr0' already exists in 'hsr'
[ 104.436719][ T5591] Cannot create hsr debugfs directory
[ 104.469042][ T5590] hsr_slave_0: entered promiscuous mode
[ 104.469999][ T5590] hsr_slave_1: entered promiscuous mode
[ 104.470745][ T5590] debugfs: 'hsr0' already exists in 'hsr'
[ 104.470761][ T5590] Cannot create hsr debugfs directory
[ 104.638294][ T5588] hsr_slave_0: entered promiscuous mode
[ 104.639289][ T5588] hsr_slave_1: entered promiscuous mode
[ 104.639963][ T5588] debugfs: 'hsr0' already exists in 'hsr'
[ 104.639981][ T5588] Cannot create hsr debugfs directory
[ 105.690039][ T5587] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 105.739731][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 105.744864][ T5587] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 105.780072][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 105.795000][ T5587] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 105.825574][ T5594] Bluetooth: hci4: command tx timeout
[ 105.825615][ T5594] Bluetooth: hci2: command tx timeout
[ 105.852152][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 105.882747][ T5587] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 105.905572][ T5599] Bluetooth: hci1: command tx timeout
[ 105.905761][ T5594] Bluetooth: hci0: command tx timeout
[ 105.910717][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 105.997151][ T5594] Bluetooth: hci3: command tx timeout
[ 106.058303][ T5591] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 106.092461][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 106.105463][ T5591] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 106.131350][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 106.134505][ T5591] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 106.171618][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 106.195742][ T5591] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 106.231053][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 106.360323][ T5588] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 106.401404][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 106.418154][ T5588] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 106.443779][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 106.461462][ T5588] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 106.492980][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 106.531286][ T5588] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 106.569889][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 106.729011][ T5590] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 106.760922][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 106.779319][ T5590] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 106.799773][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 106.825909][ T5590] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 106.878517][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 106.920285][ T5590] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 106.952594][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 107.014880][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0
[ 107.144424][ T5589] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 107.174436][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 107.193753][ T5589] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 107.229193][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 107.233860][ T5589] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 107.273434][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 107.281059][ T5587] 8021q: adding VLAN 0 to HW filter on device team0
[ 107.307801][ T5589] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 107.353985][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 107.423748][ T1033] bridge0: port 1(bridge_slave_0) entered blocking state
[ 107.423911][ T1033] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 107.484878][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0
[ 107.522578][ T1033] bridge0: port 2(bridge_slave_1) entered blocking state
[ 107.522693][ T1033] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 107.652012][ T5591] 8021q: adding VLAN 0 to HW filter on device team0
[ 107.682881][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0
[ 107.710967][ T1033] bridge0: port 1(bridge_slave_0) entered blocking state
[ 107.711076][ T1033] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 107.774109][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 107.774218][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 107.841529][ T5588] 8021q: adding VLAN 0 to HW filter on device team0
[ 107.906019][ T5594] Bluetooth: hci4: command tx timeout
[ 107.913162][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 107.913372][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 107.915899][ T5594] Bluetooth: hci2: command tx timeout
[ 107.981137][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0
[ 107.987364][ T5599] Bluetooth: hci1: command tx timeout
[ 107.987496][ T5594] Bluetooth: hci0: command tx timeout
[ 108.030404][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state
[ 108.030694][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 108.075467][ T5594] Bluetooth: hci3: command tx timeout
[ 108.200442][ T5590] 8021q: adding VLAN 0 to HW filter on device team0
[ 108.234720][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0
[ 108.256580][ T1033] bridge0: port 1(bridge_slave_0) entered blocking state
[ 108.257323][ T1033] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 108.358818][ T1033] bridge0: port 2(bridge_slave_1) entered blocking state
[ 108.363293][ T1033] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 108.512500][ T5589] 8021q: adding VLAN 0 to HW filter on device team0
[ 108.576790][ T1033] bridge0: port 1(bridge_slave_0) entered blocking state
[ 108.577042][ T1033] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 108.676598][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state
[ 108.679475][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 109.138107][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 109.594340][ T5587] veth0_vlan: entered promiscuous mode
[ 109.699720][ T5587] veth1_vlan: entered promiscuous mode
[ 109.768309][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 110.028019][ T5587] veth0_macvtap: entered promiscuous mode
[ 110.125572][ T5587] veth1_macvtap: entered promiscuous mode
[ 110.188464][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 110.218147][ T5591] veth0_vlan: entered promiscuous mode
[ 110.248338][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 110.290492][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 110.312255][ T5591] veth1_vlan: entered promiscuous mode
[ 110.381112][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 110.471442][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 110.801125][ T5588] veth0_vlan: entered promiscuous mode
[ 110.840099][ T5591] veth0_macvtap: entered promiscuous mode
[ 110.909536][ T5591] veth1_macvtap: entered promiscuous mode
[ 110.975597][ T5588] veth1_vlan: entered promiscuous mode
[ 111.088703][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 111.140804][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 111.140831][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 111.152903][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 111.203364][ T5589] veth0_vlan: entered promiscuous mode
[ 111.276712][ T5590] veth0_vlan: entered promiscuous mode
[ 111.308424][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 111.308444][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 111.308980][ T5589] veth1_vlan: entered promiscuous mode
[ 111.312830][ T5588] veth0_macvtap: entered promiscuous mode
[ 111.434990][ T5588] veth1_macvtap: entered promiscuous mode
[ 111.445088][ T5590] veth1_vlan: entered promiscuous mode
[ 111.808789][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 112.101795][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 112.108316][ T5589] veth0_macvtap: entered promiscuous mode
[ 112.194138][ T5589] veth1_macvtap: entered promiscuous mode
[ 112.203646][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.203666][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.314434][ T5590] veth0_macvtap: entered promiscuous mode
[ 112.340001][ T5778] loop0: detected capacity change from 0 to 2048
[ 112.676160][ T5590] veth1_macvtap: entered promiscuous mode
[ 112.732760][ T1033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.732775][ T1033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.802833][ T5782] unchecked MSR access error: WRMSR to 0x400 (tried to write 0x0000000000000001) at rIP: 0xffffffff81707b72 (__mcheck_cpu_init_prepare_banks+0x1f2/0x3d0)
[ 112.802920][ T5782] Call Trace:
[ 112.802930][ T5782]
[ 112.802946][ T5782] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10
[ 112.802988][ T5782] ? __lock_acquire+0x683/0x2ce0
[ 112.803015][ T5782] ? __pfx_call_function_single_prep_ipi+0x10/0x10
[ 112.803058][ T5782] mce_cpu_restart+0x11a/0x2c0
[ 112.803096][ T5782] ? __pfx_mce_cpu_restart+0x10/0x10
[ 112.803121][ T5782] smp_call_function_many_cond+0x10bd/0x1650
[ 112.803154][ T5782] ? __pfx_mce_cpu_restart+0x10/0x10
[ 112.803185][ T5782] ? __pfx_smp_call_function_many_cond+0x10/0x10
[ 112.803218][ T5782] ? lockdep_hardirqs_on+0x7a/0x110
[ 112.803238][ T5782] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 112.803259][ T5782] ? __pfx_mce_cpu_restart+0x10/0x10
[ 112.803284][ T5782] on_each_cpu_cond_mask+0x3f/0x80
[ 112.803301][ T5782] set_bank+0x3a8/0x4e0
[ 112.803327][ T5782] ? __pfx_set_bank+0x10/0x10
[ 112.803352][ T5782] ? sysfs_file_kobj+0x1e4/0x230
[ 112.803378][ T5782] ? sysfs_kf_write+0x166/0x260
[ 112.803406][ T5782] ? __pfx_sysfs_kf_write+0x10/0x10
[ 112.803430][ T5782] kernfs_fop_write_iter+0x3a5/0x540
[ 112.803456][ T5782] vfs_write+0x61e/0xbb0
[ 112.803482][ T5782] ? __pfx_vfs_write+0x10/0x10
[ 112.803504][ T5782] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 112.803524][ T5782] ? lockdep_hardirqs_on+0x7a/0x110
[ 112.803545][ T5782] ? mutex_lock_nested+0x152/0x1d0
[ 112.803574][ T5782] ? fdget_pos+0x252/0x320
[ 112.803597][ T5782] ksys_write+0x156/0x270
[ 112.803618][ T5782] ? __pfx_ksys_write+0x10/0x10
[ 112.803644][ T5782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.803662][ T5782] do_syscall_64+0x174/0x580
[ 112.803681][ T5782] ? trace_irq_disable+0x3b/0x140
[ 112.803706][ T5782] ? clear_bhb_loop+0x70/0xc0
[ 112.803726][ T5782] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.803742][ T5782] RIP: 0033:0x7f40af69e0d9
[ 112.803763][ T5782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 112.803776][ T5782] RSP: 002b:00007f40ad8b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 112.803799][ T5782] RAX: ffffffffffffffda RBX: 00007f40af926180 RCX: 00007f40af69e0d9
[ 112.803810][ T5782] RDX: 0000000000000002 RSI: 0000200000000480 RDI: 0000000000000003
[ 112.803820][ T5782] RBP: 00007f40af735024 R08: 0000000000000000 R09: 0000000000000000
[ 112.803830][ T5782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 112.803839][ T5782] R13: 00007f40af926218 R14: 00007f40af926180 R15: 00007ffcc376a778
[ 112.803864][ T5782]
[ 113.137644][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 113.267096][ T5780] smpboot: CPU 1 is now offline
[ 113.448460][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 113.512499][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 113.562385][ T5781] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 113.742842][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 113.911165][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.911186][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 114.331913][ T5787] UDC core: g1: couldn't find an available UDC or it's busy
[ 114.481726][ T766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 114.481747][ T766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 114.819107][ T1621] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 115.304300][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 115.304320][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 115.305074][ T1621] usb 1-1: Using ep0 maxpacket: 8
[ 115.309693][ T1621] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[ 115.374870][ T1621] usb 1-1: config 0 has an invalid interface number: 143 but max is 0
[ 115.374899][ T1621] usb 1-1: config 0 has no interface number 0
[ 115.374943][ T1621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 115.438272][ T5603] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 115.492674][ T1621] usb 1-1: config 0 descriptor??
[ 115.606467][ T5603] usb 3-1: New USB device found, idVendor=13d3, idProduct=3207, bcdDevice= 0.00
[ 115.609293][ T5603] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 115.609557][ T5603] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[ 115.609601][ T5603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 115.683665][ T1621] viperboard 1-1:0.143: version 0.00 found at bus 001 address 002
[ 115.722118][ T5789] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 115.738989][ T5789] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 115.799117][ T5603] dvb-usb: found a 'TwinhanDTV StarBox DVB-S USB2.0 (VP7021)' in cold state, will try to load a firmware
[ 115.871478][ T5603] usb 3-1: Direct firmware load for dvb-usb-vp702x-02.fw failed with error -2
[ 115.871508][ T5603] usb 3-1: Falling back to sysfs fallback for: dvb-usb-vp702x-02.fw
[ 115.925190][ T1621] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[ 115.925227][ T1621] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[ 115.984644][ T766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 115.984662][ T766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 116.047529][ T1621] usb 1-1: USB disconnect, device number 2
[ 116.188903][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 116.188928][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 116.383828][ T1232] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.437992][ T1232] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.537195][ T1232] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.567324][ T5796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 116.721334][ T1232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 116.721377][ T1232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 116.922816][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.922862][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.922894][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.922924][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.922958][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.922988][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.923017][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.923046][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.923076][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.923107][ T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.923139][ T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.923178][ T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.923207][ T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.923238][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.923268][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.959764][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.250375][ T1015] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.760861][ T5803] loop0: detected capacity change from 0 to 32768
[ 117.798745][ T5803] loop1: detected capacity change from 0 to 32768
[ 117.890607][ T5809] device-mapper: ioctl: Invalid ioctl structure: name 0, dev 6c6f6f7000000000
[ 117.892469][ T5809] device-mapper: ioctl: Invalid ioctl structure: name 0, dev 6c6f6f7000000000
[ 118.069426][ T5593] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 118.115935][ T1621] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[ 118.297106][ T1621] usb 1-1: not running at top speed; connect to a high speed hub
[ 118.297149][ T1621] usb 1-1: New USB device found, idVendor=2040, idProduct=9300, bcdDevice= 0.00
[ 118.354142][ T5593] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00
[ 118.393239][ T1621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 118.393270][ T1621] usb 1-1: Product: syz
[ 118.393288][ T1621] usb 1-1: Manufacturer: syz
[ 118.393305][ T1621] usb 1-1: SerialNumber: syz
[ 118.393716][ T5593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 118.393742][ T5593] usb 5-1: Product: syz
[ 118.393758][ T5593] usb 5-1: Manufacturer: syz
[ 118.393775][ T5593] usb 5-1: SerialNumber: syz
[ 118.898335][ T1621] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in cold state, will try to load a firmware
[ 118.977076][ T1621] usb 1-1: Direct firmware load for dvb-usb-nova-t-usb2-02.fw failed with error -2
[ 118.977107][ T1621] usb 1-1: Falling back to sysfs fallback for: dvb-usb-nova-t-usb2-02.fw
[ 119.099310][ T5593] usbtest 5-1:1.0: Linux gadget zero
[ 119.099340][ T5593] usbtest 5-1:1.0: high-speed {control in/out bulk-in bulk-out} tests (+alt)
[ 119.282064][ T37] audit: type=1800 audit(1786953962.151:2): pid=5830 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.15" name="idVendor" dev="configfs" ino=8742 res=0 errno=0
[ 119.353701][ T37] audit: type=1800 audit(1786953962.181:3): pid=5830 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.15" name="idProduct" dev="configfs" ino=8743 res=0 errno=0
[ 119.514619][ T37] audit: type=1800 audit(1786953962.381:4): pid=5837 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.15" name="UDC" dev="configfs" ino=8746 res=0 errno=0
[ 119.803337][ T5837] UDC core: g1: couldn't find an available UDC or it's busy
[ 120.554379][ T27] IRQ fixup: irq 33 move in progress, old vector 47
[ 120.558191][ T5844] smpboot: CPU 1 is now offline
[ 120.743128][ T37] audit: type=1800 audit(1786953963.601:5): pid=5850 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.17" name="idVendor" dev="configfs" ino=8759 res=0 errno=0
[ 120.775817][ T37] audit: type=1800 audit(1786953963.621:6): pid=5850 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.17" name="idProduct" dev="configfs" ino=8760 res=0 errno=0
[ 120.783681][ T37] audit: type=1800 audit(1786953963.651:7): pid=5850 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.17" name="serialnumber" dev="configfs" ino=8761 res=0 errno=0
[ 120.847334][ T37] audit: type=1800 audit(1786953963.721:8): pid=5851 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.17" name="manufacturer" dev="configfs" ino=8762 res=0 errno=0
[ 120.910189][ T37] audit: type=1800 audit(1786953963.781:9): pid=5851 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.17" name="product" dev="configfs" ino=8763 res=0 errno=0
[ 121.051628][ T5846] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 121.108739][ T37] audit: type=1800 audit(1786953963.971:10): pid=5854 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.18" name="idVendor" dev="configfs" ino=8766 res=0 errno=0
[ 121.113535][ T37] audit: type=1800 audit(1786953963.981:11): pid=5854 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.18" name="idProduct" dev="configfs" ino=8767 res=0 errno=0
[ 121.567363][ T5861] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 121.754640][ T5859] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[ 122.010145][ T5872] PM: suspend entry (s2idle)
[ 122.206695][ T5870] configfs-gadget.g1 gadget.0: HOST MAC fe:12:c0:e7:be:7b
[ 122.206719][ T5870] configfs-gadget.g1 gadget.0: MAC b2:da:3f:e7:61:25
[ 123.026075][ T5593] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 123.055716][ T766] Filesystems sync: 1.043 seconds
[ 123.178945][ T5593] usb 4-1: New USB device found, idVendor=05ac, idProduct=9218, bcdDevice= 0.00
[ 123.180455][ T5593] usb 4-1: config index 0 descriptor too short (expected 52, got 34)
[ 123.180526][ T5593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 123.201895][ T5594] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[ 123.694877][ T5593] appledisplay: Apple Cinema Display connected
[ 123.989068][ T5593] usb 4-1: USB disconnect, device number 2
[ 123.990286][ C0] usb 4-1: appledisplay_complete - usb_submit_urb failed with result -19
[ 124.113649][ T5593] appledisplay: Apple Cinema Display disconnected
[ 124.252401][ T5870] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[ 124.381426][ T5872] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 124.381569][ T5872] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 124.585035][ T5872] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 124.810095][ T5872] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 124.811565][ T5872] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 124.893703][ T5872] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 125.081332][ T5870] udc dummy_udc.0: failed to start g1: -19
[ 125.087881][ T5875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 125.113886][ T5872] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 125.114010][ T5872] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 125.135471][ T5593] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 125.163628][ T5875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 125.197482][ T5870] UDC core: g1: couldn't find an available UDC or it's busy
[ 125.258729][ T5872] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 125.298015][ T5593] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[ 125.299549][ T5593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 125.391131][ T5899] UDC core: g1: couldn't find an available UDC or it's busy
[ 125.415449][ T5872] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 125.415585][ T5872] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 125.477179][ T5593] usb 4-1: USB2VGA dongle found at address 3
[ 125.546227][ T5872] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 125.614309][ T5593] usb 4-1: Allocated 8 output buffers
[ 125.703387][ T5872] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 125.703599][ T5872] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 125.953392][ T5872] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 126.385463][ T5599] Bluetooth: hci1: command 0x0c1a tx timeout
[ 126.670695][ T5593] usb 4-1: Failed to early initialize device
[ 126.703923][ T5593] usb 4-1: USB disconnect, device number 3
[ 126.865628][ T5599] Bluetooth: hci0: command 0x0c1a tx timeout
[ 127.186018][ T5599] Bluetooth: hci2: command 0x0c1a tx timeout
[ 127.425541][ T5599] Bluetooth: hci3: command 0x0c1a tx timeout
[ 127.593590][ T5935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 127.616936][ T5935] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 127.745560][ T5599] Bluetooth: hci4: command 0x0c1a tx timeout
[ 127.785435][ T31] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[ 127.936632][ T31] usb 4-1: not running at top speed; connect to a high speed hub
[ 127.936675][ T31] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a
[ 127.970106][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 127.970133][ T31] usb 4-1: Product: syz
[ 127.970144][ T31] usb 4-1: Manufacturer: syz
[ 128.001419][ T31] gspca_main: xirlink-cit-2.14.0 probing 0545:8080
[ 128.011465][ T31] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5
[ 128.465898][ T5599] Bluetooth: hci1: command 0x0c1a tx timeout
[ 128.945518][ T5599] Bluetooth: hci0: command 0x0c1a tx timeout
[ 129.196602][ T5945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 129.197358][ T5945] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 129.265583][ T5599] Bluetooth: hci2: command 0x0c1a tx timeout
[ 129.506838][ T5599] Bluetooth: hci3: command 0x0c1a tx timeout
[ 129.825487][ T5599] Bluetooth: hci4: command 0x0c1a tx timeout
[ 130.545495][ T5599] Bluetooth: hci1: command 0x0c1a tx timeout
[ 130.611442][ T5593] usb 4-1: USB disconnect, device number 4
[ 130.986375][ T5962] loop0: detected capacity change from 0 to 32768
[ 131.031026][ T5599] Bluetooth: hci0: command 0x0c1a tx timeout
[ 131.241869][ T5968] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 131.255412][ T5593] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 131.345577][ T5599] Bluetooth: hci2: command 0x0c1a tx timeout
[ 131.411227][ T5593] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.00
[ 131.412243][ T5593] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[ 131.412264][ T5593] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 131.413896][ T5593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 131.413914][ T5593] usb 4-1: Product: syz
[ 131.413924][ T5593] usb 4-1: Manufacturer: syz
[ 131.476607][ T5955] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 131.476785][ T5955] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 131.512350][ T5593] as10x_usb: device has been detected
[ 131.513504][ T5593] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[ 131.560374][ T5593] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[ 131.586960][ T5599] Bluetooth: hci3: command 0x0c1a tx timeout
[ 131.663698][ T5593] as10x_usb: error during firmware upload part1
[ 131.663755][ T5593] Registered device Abilis Systems DVB-Titan
[ 131.680732][ T1327] ieee802154 phy0 wpan0: encryption failed: -22
[ 131.680824][ T1327] ieee802154 phy1 wpan1: encryption failed: -22
[ 131.905517][ T5599] Bluetooth: hci4: command 0x0c1a tx timeout
[ 132.713955][ T31] usb 4-1: USB disconnect, device number 5
[ 132.863078][ T5981] loop0: detected capacity change from 0 to 32768
[ 132.919729][ T5981] loop1: detected capacity change from 0 to 32768
[ 133.025825][ T5983] device-mapper: ioctl: Invalid ioctl structure: name 0, dev 6c6f6f7000000000
[ 133.080148][ T31] Unregistered device Abilis Systems DVB-Titan
[ 133.094567][ T31] as10x_usb: device has been disconnected
[ 133.258438][ T5594] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 133.263065][ T5594] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 133.298107][ T5594] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 133.320408][ T5594] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 133.321311][ T5594] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 133.946821][ T5999] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 134.065521][ T5699] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 134.224274][ T5699] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 1.00
[ 134.244065][ T5699] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[ 134.244127][ T5699] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 134.244154][ T5699] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 134.291870][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 134.291899][ T5699] usb 4-1: Product: syz
[ 134.291915][ T5699] usb 4-1: Manufacturer: syz
[ 134.331511][ T5997] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 134.331633][ T5997] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 134.368419][ T5699] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected
[ 134.374689][ T5699] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[ 134.414633][ T5699] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[ 134.756946][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state
[ 134.759140][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state
[ 134.759288][ T5984] bridge_slave_0: entered allmulticast mode
[ 134.761383][ T5984] bridge_slave_0: entered promiscuous mode
[ 134.763800][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state
[ 134.763952][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state
[ 134.764076][ T5984] bridge_slave_1: entered allmulticast mode
[ 134.816486][ T5984] bridge_slave_1: entered promiscuous mode
[ 134.882337][ T5984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 134.904304][ T5984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 134.978815][ T6014] UDC core: g1: couldn't find an available UDC or it's busy
[ 135.019134][ T5984] team0: Port device team_slave_0 added
[ 135.023352][ T5984] team0: Port device team_slave_1 added
[ 135.048415][ T5313] usb 4-1: USB disconnect, device number 6
[ 135.111218][ T5313] garmin_gps 4-1:1.0: device disconnected
[ 135.218809][ T37] kauditd_printk_skb: 2 callbacks suppressed
[ 135.218826][ T37] audit: type=1804 audit(1786953978.001:14): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.53" name="/newroot/21/config/usb_gadget/g1/UDC" dev="configfs" ino=9371 res=1 errno=0
[ 135.276313][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 135.276328][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 135.276351][ T5984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 135.282045][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 135.282063][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 135.282090][ T5984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 135.426719][ T5594] Bluetooth: hci5: command tx timeout
[ 135.532500][ T5984] hsr_slave_0: entered promiscuous mode
[ 135.534031][ T5984] hsr_slave_1: entered promiscuous mode
[ 135.535202][ T5984] debugfs: 'hsr0' already exists in 'hsr'
[ 135.535239][ T5984] Cannot create hsr debugfs directory
[ 135.624865][ T6014] configfs-gadget.g1 gadget.1: afunc_bind:1251 Error!
[ 135.886252][ T6014] udc dummy_udc.1: failed to start g1: -19
[ 135.889986][ T6014] UDC core: g1: couldn't find an available UDC or it's busy
[ 135.959162][ T37] audit: type=1800 audit(1786953978.811:15): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.53" name="UDC" dev="configfs" ino=9371 res=0 errno=0
[ 135.962359][ T6015] UDC core: g1: couldn't find an available UDC or it's busy
[ 136.207822][ T6031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 136.233339][ T6031] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 136.719654][ T6044] loop0: detected capacity change from 0 to 32768
[ 136.827104][ T6044] device-mapper: ioctl: Invalid ioctl structure: name 0, dev 6c6f6f7000000000
[ 136.927461][ T5599] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 136.935632][ T5599] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 136.960436][ T5599] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 136.989974][ T5599] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 136.999615][ T5599] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 137.025424][ T5699] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[ 137.201153][ T5699] usb 4-1: not running at top speed; connect to a high speed hub
[ 137.201195][ T5699] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a
[ 137.278625][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 137.278653][ T5699] usb 4-1: Product: syz
[ 137.278671][ T5699] usb 4-1: Manufacturer: syz
[ 137.350641][ T5699] gspca_main: xirlink-cit-2.14.0 probing 0545:8080
[ 137.416506][ T5699] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6
[ 137.509389][ T5599] Bluetooth: hci5: command tx timeout
[ 138.185523][ T5984] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 138.227380][ T5984] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 138.228765][ T5984] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 138.330492][ T5984] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 138.348016][ T5984] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 138.382333][ T5984] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 138.416518][ T5984] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 138.459176][ T5984] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 138.932528][ T5984] 8021q: adding VLAN 0 to HW filter on device bond0
[ 139.030630][ T5984] 8021q: adding VLAN 0 to HW filter on device team0
[ 139.090644][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state
[ 139.090881][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 139.115758][ T5599] Bluetooth: hci6: command tx timeout
[ 139.224764][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state
[ 139.224890][ T6047] bridge0: port 1(bridge_slave_0) entered disabled state
[ 139.225067][ T6047] bridge_slave_0: entered allmulticast mode
[ 139.249075][ T6047] bridge_slave_0: entered promiscuous mode
[ 139.267631][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state
[ 139.267804][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 139.272194][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state
[ 139.272317][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state
[ 139.272516][ T6047] bridge_slave_1: entered allmulticast mode
[ 139.275085][ T6047] bridge_slave_1: entered promiscuous mode
[ 139.410433][ T37] audit: type=1800 audit(1786953982.281:16): pid=6085 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.62" name="idVendor" dev="configfs" ino=9729 res=0 errno=0
[ 139.412201][ T37] audit: type=1800 audit(1786953982.281:17): pid=6085 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.62" name="idProduct" dev="configfs" ino=9730 res=0 errno=0
[ 139.421274][ T37] audit: type=1800 audit(1786953982.291:18): pid=6085 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.62" name="serialnumber" dev="configfs" ino=10320 res=0 errno=0
[ 139.424578][ T37] audit: type=1800 audit(1786953982.291:19): pid=6085 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.62" name="manufacturer" dev="configfs" ino=10321 res=0 errno=0
[ 139.504406][ T37] audit: type=1800 audit(1786953982.371:20): pid=6086 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.62" name="product" dev="configfs" ino=10322 res=0 errno=0
[ 139.540906][ T6047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 139.568529][ T6047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 139.585438][ T5599] Bluetooth: hci5: command tx timeout
[ 139.745247][ T6088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 139.765911][ T6088] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 139.799408][ T6047] team0: Port device team_slave_0 added
[ 139.834524][ T6047] team0: Port device team_slave_1 added
[ 139.922782][ T6047] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 139.922795][ T6047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 139.922814][ T6047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 139.973425][ T6047] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 139.973600][ T6047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 139.973622][ T6047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 140.126672][ T5713] usb 4-1: USB disconnect, device number 7
[ 140.234103][ T6047] hsr_slave_0: entered promiscuous mode
[ 140.235090][ T6047] hsr_slave_1: entered promiscuous mode
[ 140.248287][ T6047] debugfs: 'hsr0' already exists in 'hsr'
[ 140.248314][ T6047] Cannot create hsr debugfs directory
[ 140.651008][ T37] audit: type=1800 audit(1786953983.521:21): pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.65" name="idProduct" dev="configfs" ino=10362 res=0 errno=0
[ 140.695039][ T37] audit: type=1800 audit(1786953983.561:22): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.65" name="idVendor" dev="configfs" ino=9775 res=0 errno=0
[ 140.695094][ T37] audit: type=1800 audit(1786953983.561:23): pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.65" name="serialnumber" dev="configfs" ino=10363 res=0 errno=0
[ 140.766990][ T37] audit: type=1800 audit(1786953983.641:24): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.65" name="manufacturer" dev="configfs" ino=9784 res=0 errno=0
[ 140.772963][ T6096] UDC core: g1: couldn't find an available UDC or it's busy
[ 140.911427][ T37] audit: type=1804 audit(1786953983.781:25): pid=6102 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.66" name="/newroot/25/config/usb_gadget/g1/UDC" dev="configfs" ino=9783 res=1 errno=0
[ 141.187095][ T5599] Bluetooth: hci6: command tx timeout
[ 141.388517][ T6099] configfs-gadget.g1 gadget.1: afunc_bind:1251 Error!
[ 141.444833][ T37] audit: type=1804 audit(1786953984.311:26): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.69" name="/newroot/16/config/usb_gadget/g1/UDC" dev="configfs" ino=9783 res=1 errno=0
[ 141.671411][ T5599] Bluetooth: hci5: command tx timeout
[ 141.773962][ T6099] udc dummy_udc.1: failed to start g1: -19
[ 141.791022][ T6099] UDC core: g1: couldn't find an available UDC or it's busy
[ 141.813138][ T37] audit: type=1800 audit(1786953984.681:27): pid=6102 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.66" name="UDC" dev="configfs" ino=9783 res=0 errno=0
[ 141.849044][ T6112] UDC core: g1: couldn't find an available UDC or it's busy
[ 142.203943][ T6096] configfs-gadget.g1 gadget.2: afunc_bind:1251 Error!
[ 142.409103][ T6125] loop0: detected capacity change from 0 to 2048
[ 142.458672][ T6096] udc dummy_udc.2: failed to start g1: -19
[ 142.463338][ T6096] UDC core: g1: couldn't find an available UDC or it's busy
[ 142.693144][ T5984] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 142.925900][ T6047] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 143.033309][ T6134] UDC core: g1: couldn't find an available UDC or it's busy
[ 143.049666][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 143.055222][ T6047] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 143.159684][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 143.177434][ T6047] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 143.234117][ T6138] UDC core: g1: couldn't find an available UDC or it's busy
[ 143.256232][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 143.257722][ T6047] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 143.265615][ T5599] Bluetooth: hci6: command tx timeout
[ 143.377417][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 143.727239][ T5984] veth0_vlan: entered promiscuous mode
[ 143.768819][ T5984] veth1_vlan: entered promiscuous mode
[ 143.797535][ T197] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 143.854317][ T6047] 8021q: adding VLAN 0 to HW filter on device bond0
[ 143.943320][ T5984] veth0_macvtap: entered promiscuous mode
[ 143.948172][ T197] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.00
[ 143.961287][ T197] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[ 143.961318][ T197] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 143.963443][ T197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 143.963465][ T197] usb 4-1: Product: syz
[ 143.963479][ T197] usb 4-1: Manufacturer: syz
[ 144.038883][ T6047] 8021q: adding VLAN 0 to HW filter on device team0
[ 144.042667][ T5984] veth1_macvtap: entered promiscuous mode
[ 144.044033][ T6149] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 144.044235][ T6149] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 144.142141][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state
[ 144.142387][ T3307] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 144.195123][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state
[ 144.204926][ T3307] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 144.226469][ T197] as10x_usb: device has been detected
[ 144.226861][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 144.227464][ T197] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[ 144.343747][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 144.387483][ T197] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[ 144.432212][ T197] as10x_usb: error during firmware upload part1
[ 144.432286][ T197] Registered device Abilis Systems DVB-Titan
[ 144.585600][ T37] audit: type=1800 audit(1786953987.461:28): pid=6163 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.80" name="idVendor" dev="configfs" ino=10175 res=0 errno=0
[ 144.589508][ T37] audit: type=1800 audit(1786953987.461:29): pid=6163 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.80" name="idProduct" dev="configfs" ino=10176 res=0 errno=0
[ 144.593279][ T37] audit: type=1800 audit(1786953987.461:30): pid=6163 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.80" name="manufacturer" dev="configfs" ino=10177 res=0 errno=0
[ 144.871383][ T6165] loop0: detected capacity change from 0 to 2048
[ 145.134214][ T1232] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 145.148780][ T1015] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 145.151485][ T1015] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 145.151948][ T1015] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 145.253642][ T6168] UDC core: g1: couldn't find an available UDC or it's busy
[ 145.344225][ T48] usb 4-1: USB disconnect, device number 8
[ 145.349708][ T5599] Bluetooth: hci6: command tx timeout
[ 145.602440][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 145.602462][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 145.644727][ T48] Unregistered device Abilis Systems DVB-Titan
[ 145.694374][ T48] as10x_usb: device has been disconnected
[ 146.167125][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 146.167147][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 146.214734][ T6169] configfs-gadget.g1 gadget.1: afunc_bind:1251 Error!
[ 146.305645][ T37] kauditd_printk_skb: 1 callbacks suppressed
[ 146.305664][ T37] audit: type=1800 audit(1786953989.171:32): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.84" name="idVendor" dev="configfs" ino=10656 res=0 errno=0
[ 146.418401][ T37] audit: type=1800 audit(1786953989.291:33): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.84" name="idProduct" dev="configfs" ino=10657 res=0 errno=0
[ 146.424347][ T37] audit: type=1800 audit(1786953989.291:34): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.84" name="serialnumber" dev="configfs" ino=10658 res=0 errno=0
[ 146.479015][ T37] audit: type=1800 audit(1786953989.341:35): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.84" name="product" dev="configfs" ino=10659 res=0 errno=0
[ 146.664789][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.48'.
[ 146.697774][ T37] audit: type=1804 audit(1786953989.561:36): pid=6184 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.85" name="/newroot/20/config/usb_gadget/g1/UDC" dev="configfs" ino=10219 res=1 errno=0
[ 146.702672][ T6169] udc dummy_udc.1: failed to start g1: -19
[ 146.785914][ T6169] UDC core: g1: couldn't find an available UDC or it's busy
[ 146.793679][ T6184] UDC core: g1: couldn't find an available UDC or it's busy
[ 146.820457][ T37] audit: type=1800 audit(1786953989.691:37): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.82" name="UDC" dev="configfs" ino=10219 res=0 errno=0
[ 147.214578][ T6047] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 147.230479][ T6168] configfs-gadget.g1 gadget.2: afunc_bind:1251 Error!
[ 147.401520][ T5685] udevd[5685]: error opening ATTR{/sys/devices/platform/dummy_udc.2/gadget.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 147.698851][ T6168] udc dummy_udc.2: failed to start g1: -19
[ 147.731458][ T6168] UDC core: g1: couldn't find an available UDC or it's busy
[ 147.744816][ T6196] UDC core: g1: couldn't find an available UDC or it's busy
[ 147.785433][ T6208] loop0: detected capacity change from 0 to 2048
[ 148.133982][ T6217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 148.184642][ T37] audit: type=1800 audit(1786953991.051:38): pid=6219 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.92" name="idVendor" dev="configfs" ino=10693 res=0 errno=0
[ 148.209201][ T37] audit: type=1800 audit(1786953991.081:39): pid=6219 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.92" name="idProduct" dev="configfs" ino=10694 res=0 errno=0
[ 148.209962][ T6217] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 148.247360][ T37] audit: type=1800 audit(1786953991.121:40): pid=6219 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.92" name="manufacturer" dev="configfs" ino=10695 res=0 errno=0
[ 148.470800][ T6047] veth0_vlan: entered promiscuous mode
[ 148.494248][ T6047] veth1_vlan: entered promiscuous mode
[ 148.583274][ T6047] veth0_macvtap: entered promiscuous mode
[ 148.619674][ T37] audit: type=1800 audit(1786953991.491:41): pid=6225 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.95" name="idVendor" dev="configfs" ino=10703 res=0 errno=0
[ 148.655245][ T6047] veth1_macvtap: entered promiscuous mode
[ 148.750585][ T6227] loop0: detected capacity change from 0 to 32768
[ 148.772886][ T6047] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 148.957231][ T6047] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 149.055466][ T3307] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 149.107573][ T1232] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 149.107622][ T1232] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 149.107661][ T1232] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 149.267750][ T6230] UDC core: g1: couldn't find an available UDC or it's busy
[ 149.786376][ T6244] UDC core: g1: couldn't find an available UDC or it's busy
[ 150.118050][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 150.118070][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 150.185095][ T6242] configfs-gadget.g1 gadget.1: afunc_bind:1251 Error!
[ 150.444259][ T6242] udc dummy_udc.1: failed to start g1: -19
[ 150.459682][ T6242] UDC core: g1: couldn't find an available UDC or it's busy
[ 150.461659][ T6250] UDC core: g1: couldn't find an available UDC or it's busy
[ 150.542224][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 150.542248][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 150.561655][ T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 150.729766][ T31] usb 6-1: New USB device found, idVendor=050d, idProduct=0103, bcdDevice= 0.00
[ 150.747053][ T31] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0
[ 150.769051][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 150.769078][ T31] usb 6-1: Product: syz
[ 150.769094][ T31] usb 6-1: Manufacturer: syz
[ 150.769109][ T31] usb 6-1: SerialNumber: syz
[ 150.810251][ T6248] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 150.810609][ T6248] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 150.832218][ T31] belkin_sa 6-1:1.0: Belkin / Peracom / GoHubs USB Serial Adapter converter detected
[ 150.834161][ T31] usb 6-1: bcdDevice: 0000, bfc: 1
[ 150.867382][ T31] usb 6-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0
[ 150.905583][ T6244] configfs-gadget.g1 gadget.3: afunc_bind:1251 Error!
[ 151.084933][ T6244] udc dummy_udc.3: failed to start g1: -19
[ 151.108353][ T6244] UDC core: g1: couldn't find an available UDC or it's busy
[ 151.329204][ T37] kauditd_printk_skb: 6 callbacks suppressed
[ 151.329223][ T37] audit: type=1800 audit(1786953994.201:48): pid=6258 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.106" name="idVendor" dev="configfs" ino=10960 res=0 errno=0
[ 151.331419][ T37] audit: type=1800 audit(1786953994.201:49): pid=6258 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.106" name="idProduct" dev="configfs" ino=10961 res=0 errno=0
[ 151.333040][ T37] audit: type=1800 audit(1786953994.201:50): pid=6258 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.106" name="manufacturer" dev="configfs" ino=10962 res=0 errno=0
[ 151.514315][ T37] audit: type=1800 audit(1786953994.381:51): pid=6262 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.107" name="idVendor" dev="configfs" ino=11793 res=0 errno=0
[ 151.549779][ T37] audit: type=1800 audit(1786953994.421:52): pid=6262 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.107" name="idProduct" dev="configfs" ino=11794 res=0 errno=0
[ 151.551154][ T37] audit: type=1800 audit(1786953994.421:53): pid=6262 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.107" name="product" dev="configfs" ino=11795 res=0 errno=0
[ 151.645019][ T6264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 151.655961][ T6264] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 151.725713][ T6266] loop0: detected capacity change from 0 to 32768
[ 151.981677][ T6270] UDC core: g1: couldn't find an available UDC or it's busy
[ 152.232300][ T6277] UDC core: g1: couldn't find an available UDC or it's busy
[ 152.277412][ T37] audit: type=1800 audit(1786953995.151:54): pid=6279 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.114" name="idVendor" dev="configfs" ino=11883 res=0 errno=0
[ 152.278599][ T37] audit: type=1800 audit(1786953995.151:55): pid=6279 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.114" name="idProduct" dev="configfs" ino=11884 res=0 errno=0
[ 152.279864][ T37] audit: type=1800 audit(1786953995.151:56): pid=6279 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.114" name="serialnumber" dev="configfs" ino=11885 res=0 errno=0
[ 152.281010][ T37] audit: type=1800 audit(1786953995.151:57): pid=6279 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.114" name="manufacturer" dev="configfs" ino=11886 res=0 errno=0
[ 152.478984][ T6281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 152.479957][ T6281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 152.662174][ T6284] UDC core: g1: couldn't find an available UDC or it's busy
[ 152.982330][ T6284] configfs-gadget.g1 gadget.1: afunc_bind:1251 Error!
[ 153.124640][ T5313] usb 6-1: USB disconnect, device number 2
[ 153.256761][ T6284] udc dummy_udc.1: failed to start g1: -19
[ 153.287180][ T6284] UDC core: g1: couldn't find an available UDC or it's busy
[ 153.352438][ T5313] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0
[ 153.357561][ T5313] belkin_sa 6-1:1.0: device disconnected
[ 153.600459][ T6301] loop0: detected capacity change from 0 to 32768
[ 153.854257][ T6287] configfs-gadget.g1 gadget.3: afunc_bind:1251 Error!
[ 154.028853][ T6287] udc dummy_udc.3: failed to start g1: -19
[ 154.059718][ T6287] UDC core: g1: couldn't find an available UDC or it's busy
[ 154.113968][ T6305] UDC core: g1: couldn't find an available UDC or it's busy
[ 154.268894][ T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 154.437681][ T31] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 154.443578][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 154.443610][ T31] usb 4-1: Product: syz
[ 154.443628][ T31] usb 4-1: Manufacturer: syz
[ 154.443645][ T31] usb 4-1: SerialNumber: syz
[ 154.702892][ T5700] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 154.846596][ T6319] UDC core: g1: couldn't find an available UDC or it's busy
[ 155.442878][ T6332] loop0: detected capacity change from 0 to 32768
[ 155.915534][ T5700] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 156.000352][ T5700] ath9k_htc: Failed to initialize the device
[ 156.089474][ T5700] usb 4-1: ath9k_htc: USB layer deinitialized
[ 179.051342][ T5603] dvb-usb: did not find the firmware file 'dvb-usb-vp702x-02.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware
[ 179.051435][ T5603] dvb_usb_vp702x 3-1:1.0: probe with driver dvb_usb_vp702x failed with error -110
[ 179.094234][ T5603] usb 3-1: USB disconnect, device number 2
[ 182.126064][ T4947] udevd[4947]: worker [5692] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time
[ 194.387796][ T1327] ieee802154 phy0 wpan0: encryption failed: -22
[ 194.387875][ T1327] ieee802154 phy1 wpan1: encryption failed: -22
[ 255.857305][ T1327] ieee802154 phy0 wpan0: encryption failed: -22
[ 255.858758][ T1327] ieee802154 phy1 wpan1: encryption failed: -22
[ 257.905602][ T5594] Bluetooth: hci5: command 0x0406 tx timeout
[ 263.025538][ T5599] Bluetooth: hci6: command 0x0406 tx timeout
[ 299.354731][ T4947] udevd[4947]: worker [5692] /devices/platform/dummy_hcd.0/usb1/1-1 timeout; kill it
[ 299.371375][ T4947] udevd[4947]: seq 10596 '/devices/platform/dummy_hcd.0/usb1/1-1' killed
[ 299.392950][ T4947] udevd[4947]: worker [5692] terminated by signal 9 (Killed)
[ 299.392985][ T4947] udevd[4947]: worker [5692] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1'
[ 317.274568][ T1327] ieee802154 phy0 wpan0: encryption failed: -22
[ 317.274650][ T1327] ieee802154 phy1 wpan1: encryption failed: -22
[ 378.742195][ T1327] ieee802154 phy0 wpan0: encryption failed: -22
[ 378.742262][ T1327] ieee802154 phy1 wpan1: encryption failed: -22
[ 424.785406][ C0] ------------[ cut here ]------------
[ 424.785424][ C0] cpu_t != t
[ 424.785441][ C0] WARNING: arch/x86/kernel/cpu/mce/core.c:1770 at mce_timer_fn+0x23f/0x280, CPU#0: ktimers/0/16
[ 424.785661][ C0] Modules linked in:
[ 424.785707][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 424.785770][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 424.785787][ C0] RIP: 0010:mce_timer_fn+0x23f/0x280
[ 424.785851][ C0] Code: 00 75 0a e8 63 35 55 00 e9 16 ff ff ff e8 59 35 55 00 4c 8b 1d c2 86 8f 0c 2e e8 24 a0 8f 1e e9 ff fe ff ff e8 42 35 55 00 90 <0f> 0b 90 e9 33 fe ff ff e8 34 35 55 00 48 c7 c7 40 20 00 8e 4c 89
[ 424.785870][ C0] RSP: 0018:ffffc90000157a08 EFLAGS: 00010246
[ 424.785918][ C0] RAX: ffffffff8170934e RBX: ffff8880b87234a0 RCX: ffff88801caa8000
[ 424.785935][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100
[ 424.785949][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100
[ 424.785963][ C0] R10: dffffc0000000000 R11: ffffffff81709110 R12: 0000000000000000
[ 424.785978][ C0] R13: dffffc0000000000 R14: ffffffff8db3c7d0 R15: ffff8880b87234a0
[ 424.785996][ C0] FS: 0000000000000000(0000) GS:ffff888125c3a000(0000) knlGS:0000000000000000
[ 424.786014][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 424.786029][ C0] CR2: 00007fd6bc0e5ec8 CR3: 0000000041da4000 CR4: 00000000003526f0
[ 424.786053][ C0] Call Trace:
[ 424.786085][ C0]
[ 424.786179][ C0] call_timer_fn+0x192/0x5e0
[ 424.786287][ C0] ? __pfx_mce_timer_fn+0x10/0x10
[ 424.786347][ C0] ? call_timer_fn+0xd4/0x5e0
[ 424.786372][ C0] ? __pfx_call_timer_fn+0x10/0x10
[ 424.786411][ C0] ? _raw_spin_unlock_irq+0x23/0x50
[ 424.786517][ C0] ? __pfx_mce_timer_fn+0x10/0x10
[ 424.786551][ C0] __run_timer_base+0x67b/0x9b0
[ 424.786592][ C0] ? __pfx___run_timer_base+0x10/0x10
[ 424.786621][ C0] ? __local_bh_disable_ip+0x3c/0x420
[ 424.786688][ C0] ? __local_bh_disable_ip+0x3c/0x420
[ 424.786720][ C0] run_timer_softirq+0x67/0x170
[ 424.786743][ C0] handle_softirqs+0x1d9/0x6c0
[ 424.786781][ C0] run_ktimerd+0x69/0x100
[ 424.786811][ C0] smpboot_thread_fn+0x57c/0xa80
[ 424.786865][ C0] ? smpboot_thread_fn+0x4e/0xa80
[ 424.786900][ C0] kthread+0x388/0x470
[ 424.786974][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 424.787003][ C0] ? __pfx_kthread+0x10/0x10
[ 424.787037][ C0] ret_from_fork+0x514/0xb70
[ 424.787113][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 424.787154][ C0] ? __switch_to+0xc89/0x1420
[ 424.787210][ C0] ? __pfx_kthread+0x10/0x10
[ 424.787244][ C0] ret_from_fork_asm+0x1a/0x30
[ 424.787315][ C0]
[ 424.787337][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 424.787354][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 424.787379][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 424.787392][ C0] Call Trace:
[ 424.787400][ C0]
[ 424.787408][ C0] vpanic+0x56c/0xa60
[ 424.787449][ C0] ? __pfx__printk+0x10/0x10
[ 424.787481][ C0] ? __pfx_vpanic+0x10/0x10
[ 424.787513][ C0] ? is_bpf_text_address+0x292/0x2b0
[ 424.787585][ C0] ? is_bpf_text_address+0x26/0x2b0
[ 424.787619][ C0] panic+0xc5/0xd0
[ 424.787654][ C0] ? __pfx_panic+0x10/0x10
[ 424.787699][ C0] ? ret_from_fork_asm+0x1a/0x30
[ 424.787741][ C0] __warn+0x315/0x4c0
[ 424.787773][ C0] ? mce_timer_fn+0x23f/0x280
[ 424.787810][ C0] ? mce_timer_fn+0x23f/0x280
[ 424.787848][ C0] __report_bug+0x276/0x570
[ 424.787912][ C0] ? __pfx_stack_trace_save+0x10/0x10
[ 424.787971][ C0] ? mce_timer_fn+0x23f/0x280
[ 424.788008][ C0] ? __pfx___report_bug+0x10/0x10
[ 424.788038][ C0] ? add_lock_to_list+0xc7/0x100
[ 424.788097][ C0] ? lockdep_unlock+0x5d/0xd0
[ 424.788169][ C0] ? __lock_acquire+0x13e8/0x2ce0
[ 424.788203][ C0] ? mce_timer_fn+0x23f/0x280
[ 424.788236][ C0] report_bug+0x16a/0x220
[ 424.788266][ C0] ? mce_timer_fn+0x23f/0x280
[ 424.788297][ C0] ? mce_timer_fn+0x241/0x280
[ 424.788329][ C0] handle_bug+0x9c/0x200
[ 424.788407][ C0] exc_invalid_op+0x1a/0x50
[ 424.788439][ C0] asm_exc_invalid_op+0x1a/0x20
[ 424.788482][ C0] RIP: 0010:mce_timer_fn+0x23f/0x280
[ 424.788516][ C0] Code: 00 75 0a e8 63 35 55 00 e9 16 ff ff ff e8 59 35 55 00 4c 8b 1d c2 86 8f 0c 2e e8 24 a0 8f 1e e9 ff fe ff ff e8 42 35 55 00 90 <0f> 0b 90 e9 33 fe ff ff e8 34 35 55 00 48 c7 c7 40 20 00 8e 4c 89
[ 424.788535][ C0] RSP: 0018:ffffc90000157a08 EFLAGS: 00010246
[ 424.788553][ C0] RAX: ffffffff8170934e RBX: ffff8880b87234a0 RCX: ffff88801caa8000
[ 424.788571][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100
[ 424.788586][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100
[ 424.788600][ C0] R10: dffffc0000000000 R11: ffffffff81709110 R12: 0000000000000000
[ 424.788616][ C0] R13: dffffc0000000000 R14: ffffffff8db3c7d0 R15: ffff8880b87234a0
[ 424.788639][ C0] ? __pfx_mce_timer_fn+0x10/0x10
[ 424.788673][ C0] ? mce_timer_fn+0x23e/0x280
[ 424.788714][ C0] ? mce_timer_fn+0x23e/0x280
[ 424.788739][ C0] call_timer_fn+0x192/0x5e0
[ 424.788758][ C0] ? __pfx_mce_timer_fn+0x10/0x10
[ 424.788780][ C0] ? call_timer_fn+0xd4/0x5e0
[ 424.788797][ C0] ? __pfx_call_timer_fn+0x10/0x10
[ 424.788823][ C0] ? _raw_spin_unlock_irq+0x23/0x50
[ 424.788843][ C0] ? __pfx_mce_timer_fn+0x10/0x10
[ 424.788867][ C0] __run_timer_base+0x67b/0x9b0
[ 424.788894][ C0] ? __pfx___run_timer_base+0x10/0x10
[ 424.788914][ C0] ? __local_bh_disable_ip+0x3c/0x420
[ 424.788934][ C0] ? __local_bh_disable_ip+0x3c/0x420
[ 424.788957][ C0] run_timer_softirq+0x67/0x170
[ 424.788974][ C0] handle_softirqs+0x1d9/0x6c0
[ 424.789001][ C0] run_ktimerd+0x69/0x100
[ 424.789021][ C0] smpboot_thread_fn+0x57c/0xa80
[ 424.789044][ C0] ? smpboot_thread_fn+0x4e/0xa80
[ 424.789070][ C0] kthread+0x388/0x470
[ 424.789093][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 424.789112][ C0] ? __pfx_kthread+0x10/0x10
[ 424.789142][ C0] ret_from_fork+0x514/0xb70
[ 424.789168][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 424.789191][ C0] ? __switch_to+0xc89/0x1420
[ 424.789213][ C0] ? __pfx_kthread+0x10/0x10
[ 424.789237][ C0] ret_from_fork_asm+0x1a/0x30
[ 424.789275][ C0]
[ 424.789470][ C0] Kernel Offset: disabled