last executing test programs: 601.234634ms ago: executing program 2 (id=3): mkdir(&(0x7f0000000040)='./sys_mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys_mnt/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='invalid', 0x7) 492.170987ms ago: executing program 2 (id=5): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102400000"], 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='dev/idmouse0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 310.846899ms ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='2\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='2\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/direction\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='2\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/first_group\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='2\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/num_groups\x00', 0x1, 0x0) write(r5, &(0x7f00000006c0)='3\x00', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_first_group\x00', 0x1, 0x0) write(r6, &(0x7f0000000780)='2\x00', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_num_groups\x00', 0x1, 0x0) write(r7, &(0x7f0000000840)='3\x00', 0x1) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r8, &(0x7f0000000940)='dummy_udc.0\x00', 0xb) write(r8, &(0x7f0000000980)='\n\x00', 0x1) write(r8, &(0x7f00000009c0)='dummy_udc.0\x00', 0xb) write(r8, &(0x7f0000000a00)='\n\x00', 0x1) write(r8, &(0x7f0000000a40)='dummy_udc.0\x00', 0xb) write(r8, &(0x7f0000000a80)='\n\x00', 0x1) write(r8, &(0x7f0000000ac0)='dummy_udc.0\x00', 0xb) write(r8, &(0x7f0000000b00)='\n\x00', 0x1) write(r8, &(0x7f0000000b40)='dummy_udc.0\x00', 0xb) write(r8, &(0x7f0000000b80)='\n\x00', 0x1) write(r8, &(0x7f0000000bc0)='dummy_udc.0\x00', 0xb) write(r8, &(0x7f0000000c00)='\n\x00', 0x1) write(r8, &(0x7f0000000c40)='dummy_udc.0\x00', 0xb) write(r8, &(0x7f0000000c80)='\n\x00', 0x1) 21.684354ms ago: executing program 1 (id=2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000100)={0x8a}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000400)="0f324801c00f300f324805001000004889c248c1e820b9000100000f30b932080000b800000400ba000000000f30b9400800000f324805000001004889c248c1e820b93a0800000f30f4", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=4): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000600)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000900)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000f00)={0x34, &(0x7f0000000cc0)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001240)={0x34, &(0x7f0000001080)={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001700)={0x34, &(0x7f0000001500)={0x20, 0x18, 0x1, ')'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001900)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001b00)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) syz_usb_disconnect(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.67' (ED25519) to the list of known hosts. [ 80.195289][ T5605] cgroup: Unknown subsys name 'net' [ 80.352486][ T5605] cgroup: Unknown subsys name 'cpuset' [ 80.361774][ T5605] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.053659][ T5605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.680674][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.693020][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.701348][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.702682][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.707668][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.713984][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.728552][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.731042][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.731411][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.731503][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.733783][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.742088][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.743117][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.749536][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.752415][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.754460][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.754847][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.762822][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.799627][ T4933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.823116][ T4933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.414439][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.414581][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.415369][ T5615] bridge_slave_0: entered allmulticast mode [ 87.418716][ T5615] bridge_slave_0: entered promiscuous mode [ 87.470713][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.471089][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.472920][ T5615] bridge_slave_1: entered allmulticast mode [ 87.477834][ T5615] bridge_slave_1: entered promiscuous mode [ 87.580551][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.618736][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.639122][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.639626][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.640015][ T5618] bridge_slave_0: entered allmulticast mode [ 87.645021][ T5618] bridge_slave_0: entered promiscuous mode [ 87.689352][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.689808][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.690269][ T5618] bridge_slave_1: entered allmulticast mode [ 87.695981][ T5618] bridge_slave_1: entered promiscuous mode [ 87.766624][ T5615] team0: Port device team_slave_0 added [ 87.806951][ T5615] team0: Port device team_slave_1 added [ 87.836400][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.837277][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.839384][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.845001][ T5616] bridge_slave_0: entered allmulticast mode [ 87.850824][ T5616] bridge_slave_0: entered promiscuous mode [ 87.854175][ T5622] Bluetooth: hci2: command tx timeout [ 87.854354][ T5622] Bluetooth: hci3: command tx timeout [ 87.887988][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.890795][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.891213][ T5617] bridge_slave_0: entered allmulticast mode [ 87.895829][ T5617] bridge_slave_0: entered promiscuous mode [ 87.915583][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.916104][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.916975][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.917382][ T5616] bridge_slave_1: entered allmulticast mode [ 87.924342][ T5616] bridge_slave_1: entered promiscuous mode [ 87.932523][ T52] Bluetooth: hci0: command tx timeout [ 87.941263][ T52] Bluetooth: hci1: command tx timeout [ 87.965940][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.965991][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.966019][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.971620][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.971977][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.972403][ T5617] bridge_slave_1: entered allmulticast mode [ 87.979964][ T5617] bridge_slave_1: entered promiscuous mode [ 88.062792][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.062834][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.062878][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.143519][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.155443][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.166218][ T5618] team0: Port device team_slave_0 added [ 88.175046][ T5618] team0: Port device team_slave_1 added [ 88.183465][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.192160][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.254400][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.254446][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.254473][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.322588][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.323072][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.323154][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.335231][ T5616] team0: Port device team_slave_0 added [ 88.355959][ T5617] team0: Port device team_slave_0 added [ 88.383092][ T5615] hsr_slave_0: entered promiscuous mode [ 88.386117][ T5615] hsr_slave_1: entered promiscuous mode [ 88.403029][ T5616] team0: Port device team_slave_1 added [ 88.409972][ T5617] team0: Port device team_slave_1 added [ 88.458730][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.458761][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.458798][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.461264][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.461304][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.461382][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.506902][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.506951][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.507054][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.604953][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.605000][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.605028][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.699263][ T5618] hsr_slave_0: entered promiscuous mode [ 88.702679][ T5618] hsr_slave_1: entered promiscuous mode [ 88.704561][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 88.704816][ T5618] Cannot create hsr debugfs directory [ 88.726633][ T5616] hsr_slave_0: entered promiscuous mode [ 88.730349][ T5616] hsr_slave_1: entered promiscuous mode [ 88.732541][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 88.732562][ T5616] Cannot create hsr debugfs directory [ 88.837952][ T5617] hsr_slave_0: entered promiscuous mode [ 88.843602][ T5617] hsr_slave_1: entered promiscuous mode [ 88.845409][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 88.845469][ T5617] Cannot create hsr debugfs directory [ 89.252992][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.265116][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.266949][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.281898][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.299400][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.309462][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.325862][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.336900][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.398829][ T5616] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.411343][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.424295][ T5616] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.434286][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.437875][ T5616] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.457238][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.473164][ T5616] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.485448][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.581846][ T5618] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.593672][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.605274][ T5618] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.616620][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.621214][ T5618] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.634781][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.655080][ T5618] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.665251][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.755739][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.768946][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.775530][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.786736][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.800505][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.811744][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.817334][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.829038][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.867944][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.929306][ T5622] Bluetooth: hci2: command tx timeout [ 89.936383][ T52] Bluetooth: hci3: command tx timeout [ 89.967825][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.986622][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.008706][ T5622] Bluetooth: hci0: command tx timeout [ 90.008917][ T52] Bluetooth: hci1: command tx timeout [ 90.032086][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.032451][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.071597][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.071856][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.097685][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.132713][ T2155] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.132961][ T2155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.180375][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.192184][ T2155] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.192422][ T2155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.264208][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.300728][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.317834][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.317970][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.364776][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.365017][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.451383][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.493401][ T2155] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.493531][ T2155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.544668][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.544941][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.403510][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.453015][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.575304][ T5615] veth0_vlan: entered promiscuous mode [ 91.622744][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.632838][ T5615] veth1_vlan: entered promiscuous mode [ 91.661371][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.678024][ T5616] veth0_vlan: entered promiscuous mode [ 91.723894][ T5616] veth1_vlan: entered promiscuous mode [ 91.766901][ T5615] veth0_macvtap: entered promiscuous mode [ 91.784719][ T5618] veth0_vlan: entered promiscuous mode [ 91.797584][ T5615] veth1_macvtap: entered promiscuous mode [ 91.815156][ T5617] veth0_vlan: entered promiscuous mode [ 91.834995][ T5618] veth1_vlan: entered promiscuous mode [ 91.862774][ T5617] veth1_vlan: entered promiscuous mode [ 91.872332][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.902616][ T5616] veth0_macvtap: entered promiscuous mode [ 91.911532][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.943767][ T5616] veth1_macvtap: entered promiscuous mode [ 91.944746][ T25] cfg80211: failed to load regulatory.db [ 92.002664][ T5618] veth0_macvtap: entered promiscuous mode [ 92.009075][ T5622] Bluetooth: hci2: command tx timeout [ 92.009164][ T52] Bluetooth: hci3: command tx timeout [ 92.028668][ T5617] veth0_macvtap: entered promiscuous mode [ 92.044646][ T5617] veth1_macvtap: entered promiscuous mode [ 92.052262][ T27] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.063646][ T5618] veth1_macvtap: entered promiscuous mode [ 92.081515][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.089185][ T5622] Bluetooth: hci0: command tx timeout [ 92.089371][ T52] Bluetooth: hci1: command tx timeout [ 92.130253][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.169638][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.180796][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.180872][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.180999][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.230738][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.230790][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.254920][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.283009][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.330100][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.353760][ T2155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.353806][ T2155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.370478][ T27] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.379069][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.379661][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.383014][ T3285] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.383717][ T3285] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.384137][ T3285] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.384559][ T3285] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.384964][ T3285] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.385385][ T3285] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.385784][ T3285] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.386791][ T3285] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.387204][ T3285] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.601394][ T5615] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.635107][ T3285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.635155][ T3285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.766906][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.766947][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.870756][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.880330][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.934384][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.934424][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.035149][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.035190][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.095269][ T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.095312][ T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.130756][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.312389][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 93.320089][ T25] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 93.342359][ T25] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 93.342403][ T25] usb 3-1: config 0 has no interface number 0 [ 93.342468][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.380718][ T25] usb 3-1: config 0 descriptor?? [ 93.479976][ T5783] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.520472][ T25] viperboard 3-1:0.143: version 0.00 found at bus 003 address 002 [ 93.543598][ T25] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 93.553814][ T25] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 93.635955][ T5776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.646074][ T5776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.772599][ T5779] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN PTI [ 93.784615][ T5779] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 93.793089][ T5779] CPU: 1 UID: 0 PID: 5779 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 93.802153][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.812249][ T5779] RIP: 0010:f_midi2_free_ep+0x52/0x2f0 [ 93.817825][ T5779] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 e3 51 53 fa 41 bc 30 07 00 00 4d 03 26 4c 89 e0 48 c1 e8 03 48 89 44 24 30 <0f> b6 04 28 84 c0 0f 85 5d 02 00 00 41 8b 1c 24 31 ff 89 de e8 65 [ 93.837652][ T5779] RSP: 0018:ffffc9000491f970 EFLAGS: 00010202 [ 93.843777][ T5779] RAX: 00000000000000e6 RBX: ffff8880664b8000 RCX: 0000000000080000 [ 93.851789][ T5779] RDX: ffffc9000f33a000 RSI: 000000000000e5e7 RDI: 000000000000e5e8 [ 93.859805][ T5779] RBP: dffffc0000000000 R08: ffffffff909ac37f R09: 1ffffffff213586f [ 93.867828][ T5779] R10: dffffc0000000000 R11: fffffbfff2135870 R12: 0000000000000730 [ 93.875838][ T5779] R13: dffffc0000000000 R14: ffff8880664b8128 R15: dffffc0000000000 [ 93.883845][ T5779] FS: 00007f477cbf66c0(0000) GS:ffff8881249ab000(0000) knlGS:0000000000000000 [ 93.892894][ T5779] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.899542][ T5779] CR2: 000000110c3e073c CR3: 000000007af12000 CR4: 00000000003526f0 [ 93.907549][ T5779] Call Trace: [ 93.910883][ T5779] [ 93.913855][ T5779] f_midi2_unbind+0x9b/0x340 [ 93.918497][ T5779] purge_configs_funcs+0x248/0x3d0 [ 93.923669][ T5779] configfs_composite_unbind+0xa4/0x1c0 [ 93.929270][ T5779] gadget_unbind_driver+0x1cb/0x410 [ 93.934636][ T5779] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 93.940597][ T5779] device_release_driver_internal+0x48b/0x880 [ 93.946738][ T5779] driver_detach+0x1f3/0x2d0 [ 93.951392][ T5779] bus_remove_driver+0x226/0x320 [ 93.956384][ T5779] usb_gadget_unregister_driver+0x4e/0x70 [ 93.962195][ T5779] gadget_dev_desc_UDC_store+0x17a/0x2f0 [ 93.967889][ T5779] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 93.974097][ T5779] configfs_write_iter+0x337/0x430 [ 93.979299][ T5779] vfs_write+0x612/0xba0 [ 93.983598][ T5779] ? __pfx_vfs_write+0x10/0x10 [ 93.988408][ T5779] ? __fget_files+0x2a/0x420 [ 93.993088][ T5779] ksys_write+0x150/0x270 [ 93.997454][ T5779] ? __pfx_ksys_write+0x10/0x10 [ 94.002337][ T5779] ? __pfx_kcov_ioctl+0x10/0x10 [ 94.007325][ T5779] do_syscall_64+0x166/0x520 [ 94.011953][ T5779] ? trace_irq_disable+0x3b/0x140 [ 94.017040][ T5779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.023154][ T5779] ? clear_bhb_loop+0x70/0xc0 [ 94.027868][ T5779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.033789][ T5779] RIP: 0033:0x7f477e99e0d9 [ 94.038261][ T5779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.057993][ T5779] RSP: 002b:00007f477cbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.066442][ T5779] RAX: ffffffffffffffda RBX: 00007f477ec26090 RCX: 00007f477e99e0d9 [ 94.074439][ T5779] RDX: 0000000000000001 RSI: 0000200000000980 RDI: 000000000000000b [ 94.082432][ T5779] RBP: 00007f477ea35024 R08: 0000000000000000 R09: 0000000000000000 [ 94.090430][ T5779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.092760][ T5622] Bluetooth: hci2: command tx timeout [ 94.092908][ T52] Bluetooth: hci3: command tx timeout [ 94.109289][ T5779] R13: 00007f477ec26128 R14: 00007f477ec26090 R15: 00007fff364504f8 [ 94.117320][ T5779] [ 94.120370][ T5779] Modules linked in: [ 94.126130][ T5779] ---[ end trace 0000000000000000 ]--- [ 94.135840][ T5779] RIP: 0010:f_midi2_free_ep+0x52/0x2f0 [ 94.142928][ T5779] Code: 4c ** replaying previous printk message ** [ 94.142928][ T5779] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 e3 51 53 fa 41 bc 30 07 00 00 4d 03 26 4c 89 e0 48 c1 e8 03 48 89 44 24 30 <0f> b6 04 28 84 c0 0f 85 5d 02 00 00 41 8b 1c 24 31 ff 89 de e8 65 [ 94.144260][ T5779] RSP: 0018:ffffc9000491f970 EFLAGS: 00010202 [ 94.144332][ T5779] RAX: 00000000000000e6 RBX: ffff8880664b8000 RCX: 0000000000080000 [ 94.144383][ T5779] RDX: ffffc9000f33a000 RSI: 000000000000e5e7 RDI: 000000000000e5e8 [ 94.144423][ T5779] RBP: dffffc0000000000 R08: ffffffff909ac37f R09: 1ffffffff213586f [ 94.144467][ T5779] R10: dffffc0000000000 R11: fffffbfff2135870 R12: 0000000000000730 [ 94.144509][ T5779] R13: dffffc0000000000 R14: ffff8880664b8128 R15: dffffc0000000000 [ 94.144560][ T5779] FS: 00007f477cbf66c0(0000) GS:ffff8881248ab000(0000) knlGS:0000000000000000 [ 94.144619][ T5779] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.144671][ T5779] CR2: 00007f477b725ff8 CR3: 000000007af12000 CR4: 00000000003526f0 [ 94.144766][ T5779] Kernel panic - not syncing: Fatal exception [ 94.245724][ T5779] Kernel Offset: disabled [ 94.250067][ T5779] Rebooting in 86400 seconds..