last executing test programs:
10.759799291s ago: executing program 0 (id=1):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x242, 0x1a0)
pwrite64(r0, &(0x7f0000000100)="00000000000000009f8601000000000001000000533153555350454e4400533153555350454e4400", 0x28, 0xfd8)
pwrite64(r0, &(0x7f0000000200)='\x00', 0x1, 0x1fff)
r1 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(&(0x7f0000000800)=@filename='none\x00', &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/power/resume\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='7:0', 0x3)
10.045122692s ago: executing program 3 (id=4):
r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e00500060001010203010902190001010080320904000001ff00000007058103400001"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000200)='\ahello12')
7.812087042s ago: executing program 3 (id=8):
syz_usb_connect(0x1, 0x27, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8153, 0x300, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19, 0x1, 0x1, 0x0, 0xa0, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
4.701592892s ago: executing program 3 (id=15):
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='none\x00', &(0x7f0000000280)='./debug\x00', 0x0, 0x0, &(0x7f0000000300)='\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write(r0, &(0x7f0000000380)="020000000000000068656c6c6f000000", 0x10)
close(r0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x1}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/devcoredump/disabled\x00', 0x2, 0x0)
write(r1, &(0x7f0000000400)='1\x00', 0x2)
close(r1)
3.851467047s ago: executing program 3 (id=20):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./cfg\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cfg/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='0x1d6b\x00', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./cfg/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
write(r1, &(0x7f0000000500)='0x0104\x00', 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./cfg/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./cfg/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000700)='./cfg/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./cfg/usb_gadget/g1/configs/c.1/midi.usb0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./cfg/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r2, &(0x7f0000000a00)='dummy_udc.0\x00', 0xb)
r3 = syz_open_dev$sndmidi(&(0x7f0000000b00), 0x1, 0x2)
write(r3, &(0x7f0000000c00)='data\x00', 0x4)
3.626824945s ago: executing program 3 (id=21):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing/events/msr/read_msr/enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='1\x00', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/events/msr/enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./debug/tracing/events/msr/read_msr/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000100)='1\x00', 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/events/msr/enable\x00', 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000000200)=""/8, 0x8)
ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000500)=[0x10])
3.5677193s ago: executing program 3 (id=22):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040341902120001010203010902200001010080320904000002ff0000000705810200020007050102000200"], 0x0)
nanosleep(&(0x7f0000000100)={0x0, 0x2faf080}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000040)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f00000000c0)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000140)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000180)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f00000001c0)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000300)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000380)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000440)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000480)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f00000004c0)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000500)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000540)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f00000005c0)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000640)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000680)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f00000006c0)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000700)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000740)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f00000007c0)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000840)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000880)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f00000008c0)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
1.822121674s ago: executing program 2 (id=32):
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='none\x00', &(0x7f0000000280)='./debug\x00', 0x0, 0x0, &(0x7f0000000300)='\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write(r0, &(0x7f0000000380)="020000000000000068656c6c6f000000", 0x10)
close(r0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x1}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/devcoredump/disabled\x00', 0x2, 0x0)
write(r1, &(0x7f0000000400)='1\x00', 0x2)
close(r1)
1.056544813s ago: executing program 1 (id=40):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing/events/msr/read_msr/enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='1\x00', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/events/msr/enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./debug/tracing/events/msr/read_msr/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000100)='1\x00', 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/events/msr/enable\x00', 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000000200)=""/8, 0x8)
ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000500)=[0x10])
982.38609ms ago: executing program 1 (id=41):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/filecache\x00', 0x2, 0x0)
939.403852ms ago: executing program 2 (id=42):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x5}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000000c0)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000000e0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000120)={0x2, 0xaa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000160)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2)
close(r0)
904.96582ms ago: executing program 1 (id=43):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
dup2(r2, 0x64)
dup2(r2, 0x65)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
726.971018ms ago: executing program 1 (id=44):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./lower1/dir1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./lower1/file1\x00', 0x42, 0x1ff)
mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000380)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00')
close(0xffffffffffffffff)
renameat2(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file1\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./mnt/file2\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/dir2\x00', 0x0)
umount2(&(0x7f0000000600)='./mnt\x00', 0x0)
mount(0x0, &(0x7f0000000640)='./mnt\x00', &(0x7f0000000680)='overlay\x00', 0x0, &(0x7f00000006c0)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00')
708.610496ms ago: executing program 1 (id=45):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x2, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0xc000003, 0x1, &(0x7f0000000080)=[0x0]})
657.045532ms ago: executing program 1 (id=46):
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040040402020001010203010902270001010080fa0904000003ffffff00070581034000020705820240000007050202400000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mknod(&(0x7f0000000400)='ttyUSB0\x00', 0x81b6, 0xbc00)
openat(0xffffffffffffff9c, &(0x7f0000000500)='ttyUSB0\x00', 0x2, 0x0)
357.826461ms ago: executing program 2 (id=47):
add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="307106092a864886f70d010702a0643062020101310f300d06096086480165030402010500300b06092a864886f70d010701313f303d0201013014300f310d300b0603550403130454657374020101300d06096086480165030402010500300d06092a864886f70d01010105", 0x6c, 0xffffffffffffffff)
303.476444ms ago: executing program 2 (id=48):
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04100100"], 0x4)
nanosleep(&(0x7f00000000c0)={0x0, 0x2faf080}, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0401030c00"], 0x7)
nanosleep(&(0x7f0000000140)={0x0, 0x1312d00}, 0x0)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0c010310000000004000000000"], 0xf)
nanosleep(&(0x7f00000001c0)={0x0, 0x1312d00}, 0x0)
syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0c010110000600000600000000"], 0xf)
nanosleep(&(0x7f0000000240)={0x0, 0x1312d00}, 0x0)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e0c010320004000000000000000"], 0xf)
nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0)
50.625329ms ago: executing program 2 (id=49):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing/events/msr/read_msr/enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='1\x00', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/events/msr/enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./debug/tracing/events/msr/read_msr/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000100)='1\x00', 0x1)
write(0xffffffffffffffff, &(0x7f0000000100)='1\x00', 0x1)
read$msr(0xffffffffffffffff, &(0x7f0000000200)=""/8, 0x8)
ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000500)=[0x10])
0s ago: executing program 2 (id=50):
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='none\x00', &(0x7f0000000280)='./debug\x00', &(0x7f00000002c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write(r0, &(0x7f0000000380)="020000000000000068656c6c6f000000", 0x10)
close(r0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x1}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/devcoredump/disabled\x00', 0x2, 0x0)
write(r1, &(0x7f0000000400)='1\x00', 0x2)
close(r1)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.0.81' (ED25519) to the list of known hosts.
[ 65.141318][ T5602] cgroup: Unknown subsys name 'net'
[ 65.230629][ T5602] cgroup: Unknown subsys name 'cpuset'
[ 65.238945][ T5602] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 66.647347][ T5602] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 69.843373][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 69.844983][ T5614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 69.845596][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 69.846717][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 69.847283][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 69.888378][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 69.889476][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 69.890096][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 69.890925][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 69.891579][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 69.986729][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 69.995466][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 69.997001][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 69.997248][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 70.020204][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 70.021431][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 70.041419][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 70.041621][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 70.056899][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 70.066150][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 71.099010][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state
[ 71.099498][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state
[ 71.100004][ T5612] bridge_slave_0: entered allmulticast mode
[ 71.101712][ T5612] bridge_slave_0: entered promiscuous mode
[ 71.135712][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.135828][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state
[ 71.135944][ T5612] bridge_slave_1: entered allmulticast mode
[ 71.137662][ T5612] bridge_slave_1: entered promiscuous mode
[ 71.231303][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 71.257260][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 71.273127][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.273227][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[ 71.369206][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state
[ 71.369325][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state
[ 71.369464][ T5617] bridge_slave_0: entered allmulticast mode
[ 71.384205][ T5617] bridge_slave_0: entered promiscuous mode
[ 71.406310][ T5612] team0: Port device team_slave_0 added
[ 71.409948][ T5612] team0: Port device team_slave_1 added
[ 71.422504][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.422646][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state
[ 71.422774][ T5617] bridge_slave_1: entered allmulticast mode
[ 71.424361][ T5617] bridge_slave_1: entered promiscuous mode
[ 71.497473][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 71.497513][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 71.497536][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 71.500170][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 71.500184][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 71.500214][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 71.515043][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 71.574736][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 71.655372][ T5612] hsr_slave_0: entered promiscuous mode
[ 71.656453][ T5612] hsr_slave_1: entered promiscuous mode
[ 71.660912][ T5617] team0: Port device team_slave_0 added
[ 71.684461][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state
[ 71.685111][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state
[ 71.685228][ T5621] bridge_slave_0: entered allmulticast mode
[ 71.686854][ T5621] bridge_slave_0: entered promiscuous mode
[ 71.692540][ T5617] team0: Port device team_slave_1 added
[ 71.706423][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state
[ 71.706564][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state
[ 71.706922][ T5622] bridge_slave_0: entered allmulticast mode
[ 71.710045][ T5622] bridge_slave_0: entered promiscuous mode
[ 71.713111][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.713203][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state
[ 71.713608][ T5622] bridge_slave_1: entered allmulticast mode
[ 71.715185][ T5622] bridge_slave_1: entered promiscuous mode
[ 71.756982][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.757079][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state
[ 71.759489][ T5621] bridge_slave_1: entered allmulticast mode
[ 71.761963][ T5621] bridge_slave_1: entered promiscuous mode
[ 71.816264][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 71.816341][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 71.816362][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 71.822103][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 71.849971][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 71.849988][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 71.850009][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 71.856265][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 71.868793][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 71.919229][ T4934] Bluetooth: hci1: command tx timeout
[ 71.919419][ T4934] Bluetooth: hci0: command tx timeout
[ 71.962323][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 71.986645][ T5621] team0: Port device team_slave_0 added
[ 72.012353][ T5621] team0: Port device team_slave_1 added
[ 72.024830][ T5622] team0: Port device team_slave_0 added
[ 72.053480][ T5622] team0: Port device team_slave_1 added
[ 72.082078][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 72.082117][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 72.082154][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 72.104878][ T5617] hsr_slave_0: entered promiscuous mode
[ 72.105863][ T5617] hsr_slave_1: entered promiscuous mode
[ 72.106541][ T5617] debugfs: 'hsr0' already exists in 'hsr'
[ 72.106631][ T5617] Cannot create hsr debugfs directory
[ 72.109014][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 72.109027][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 72.109051][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 72.125236][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 72.125250][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 72.125273][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 72.128438][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 72.128450][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 72.128473][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 72.148067][ T5614] Bluetooth: hci3: command tx timeout
[ 72.149575][ T5614] Bluetooth: hci2: command tx timeout
[ 72.294174][ T5621] hsr_slave_0: entered promiscuous mode
[ 72.295146][ T5621] hsr_slave_1: entered promiscuous mode
[ 72.295760][ T5621] debugfs: 'hsr0' already exists in 'hsr'
[ 72.295778][ T5621] Cannot create hsr debugfs directory
[ 72.338250][ T5622] hsr_slave_0: entered promiscuous mode
[ 72.339162][ T5622] hsr_slave_1: entered promiscuous mode
[ 72.339882][ T5622] debugfs: 'hsr0' already exists in 'hsr'
[ 72.339898][ T5622] Cannot create hsr debugfs directory
[ 72.541547][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 72.550935][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 72.559372][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 72.568517][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 72.594089][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 72.604016][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 72.605931][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 72.619053][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 72.738939][ T5617] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 72.749512][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 72.750232][ T5617] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 72.760992][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 72.762365][ T5617] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 72.768108][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 72.778778][ T5617] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 72.791536][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 72.860584][ T5621] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 72.872829][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 72.881937][ T5621] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 72.890708][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 72.891428][ T5621] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 72.901484][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 72.902979][ T5621] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 72.909039][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 73.026819][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0
[ 73.031205][ T5622] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 73.036630][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 73.037371][ T5622] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 73.044017][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 73.066150][ T5622] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 73.076022][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 73.085682][ T5622] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 73.095006][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 73.136036][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0
[ 73.140609][ T5612] 8021q: adding VLAN 0 to HW filter on device team0
[ 73.169460][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state
[ 73.169711][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 73.190021][ T1473] bridge0: port 2(bridge_slave_1) entered blocking state
[ 73.190193][ T1473] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 73.227269][ T5617] 8021q: adding VLAN 0 to HW filter on device team0
[ 73.246134][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state
[ 73.246226][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 73.282920][ T50] bridge0: port 2(bridge_slave_1) entered blocking state
[ 73.283015][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 73.329621][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0
[ 73.397201][ T5621] 8021q: adding VLAN 0 to HW filter on device team0
[ 73.420444][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0
[ 73.436761][ T1473] bridge0: port 1(bridge_slave_0) entered blocking state
[ 73.437179][ T1473] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 73.449135][ T1473] bridge0: port 2(bridge_slave_1) entered blocking state
[ 73.449232][ T1473] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 73.503595][ T5622] 8021q: adding VLAN 0 to HW filter on device team0
[ 73.550561][ T1473] bridge0: port 1(bridge_slave_0) entered blocking state
[ 73.550682][ T1473] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 73.562184][ T1473] bridge0: port 2(bridge_slave_1) entered blocking state
[ 73.562280][ T1473] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 73.992018][ T5614] Bluetooth: hci0: command tx timeout
[ 73.992042][ T4934] Bluetooth: hci1: command tx timeout
[ 74.150595][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 74.228906][ T4934] Bluetooth: hci2: command tx timeout
[ 74.228965][ T4934] Bluetooth: hci3: command tx timeout
[ 74.311644][ T5612] veth0_vlan: entered promiscuous mode
[ 74.340099][ T5612] veth1_vlan: entered promiscuous mode
[ 74.386843][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 74.446567][ T5612] veth0_macvtap: entered promiscuous mode
[ 74.464578][ T5612] veth1_macvtap: entered promiscuous mode
[ 74.532816][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 74.544910][ T5617] veth0_vlan: entered promiscuous mode
[ 74.561430][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 74.595982][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 74.600915][ T5617] veth1_vlan: entered promiscuous mode
[ 74.608660][ T163] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.608778][ T163] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.608813][ T163] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.608846][ T163] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.663557][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 74.763037][ T5621] veth0_vlan: entered promiscuous mode
[ 74.773864][ T5617] veth0_macvtap: entered promiscuous mode
[ 74.786466][ T5617] veth1_macvtap: entered promiscuous mode
[ 74.798047][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 74.798084][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 74.844762][ T5621] veth1_vlan: entered promiscuous mode
[ 74.865508][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 74.865543][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 74.874357][ T5622] veth0_vlan: entered promiscuous mode
[ 74.882201][ T5622] veth1_vlan: entered promiscuous mode
[ 74.902871][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 74.919184][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 74.984493][ T5612] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 75.006172][ T5622] veth0_macvtap: entered promiscuous mode
[ 75.014602][ T5621] veth0_macvtap: entered promiscuous mode
[ 75.029688][ T5622] veth1_macvtap: entered promiscuous mode
[ 75.044787][ T5621] veth1_macvtap: entered promiscuous mode
[ 75.081679][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 75.125135][ T1473] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.125947][ T1473] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.126016][ T1473] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.126050][ T1473] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.130914][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 75.134009][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 75.150830][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 75.231455][ T5762] loop0: detected capacity change from 0 to 16
[ 75.238169][ T1473] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.239813][ T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.239853][ T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.243677][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 75.243694][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 75.318851][ T5762] PM: hibernation: resume from hibernation
[ 75.361488][ T1473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 75.361529][ T1473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 75.381534][ T5762] random: crng reseeded on system resumption
[ 75.435892][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 75.435933][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 75.492136][ T1473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 75.492175][ T1473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 75.567678][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.596513][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 75.596552][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 75.604688][ T1473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 75.604707][ T1473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 75.619944][ T163] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.620822][ T163] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.647686][ T163] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.651816][ T163] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.047909][ T5764] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 76.067760][ T5614] Bluetooth: hci0: command tx timeout
[ 76.069436][ T5614] Bluetooth: hci1: command tx timeout
[ 76.119714][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 76.157529][ T5351] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 76.199272][ T5764] usb 2-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 1.00
[ 76.202022][ T5764] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 76.202051][ T5764] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[ 76.202073][ T5764] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64
[ 76.202094][ T5764] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64
[ 76.202131][ T5764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 76.214262][ T5770] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 76.214402][ T5770] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 76.214520][ T5770] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 76.214634][ T5770] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 76.242624][ T5764] mos7720 2-1:1.0: Moschip 2 port adapter converter detected
[ 76.269313][ T25] usb 4-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00
[ 76.273028][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 76.273052][ T25] usb 4-1: Product: syz
[ 76.273065][ T25] usb 4-1: Manufacturer: syz
[ 76.273080][ T25] usb 4-1: SerialNumber: syz
[ 76.293059][ T25] symbolserial 4-1:1.0: symbol converter detected
[ 76.306212][ T25] usb 4-1: symbol converter now attached to ttyUSB0
[ 76.307910][ T5614] Bluetooth: hci3: command tx timeout
[ 76.307939][ T5614] Bluetooth: hci2: command tx timeout
[ 76.321084][ T5351] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice= 1.00
[ 76.323022][ T5351] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[ 76.323068][ T5351] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 76.323091][ T5351] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 76.323152][ T5351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 76.346559][ T5775] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 76.346688][ T5775] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 76.367413][ T5351] cxacru 3-1:1.0: cxacru_bind: interface has incorrect endpoints
[ 76.368033][ T5351] cxacru 3-1:1.0: usbatm_usb_probe: bind failed: -19!
[ 76.446379][ T5764] usb 2-1: mos7720: usb_control_msg() failed: 0
[ 76.457361][ T5764] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB1
[ 76.464162][ T5764] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB2
[ 76.715832][ C1] usb 2-1: mos7720_interrupt_callback - Error -19 submitting control urb
[ 76.716270][ T5764] usb 2-1: USB disconnect, device number 2
[ 76.749873][ T5764] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1
[ 76.770522][ T5764] moschip7720 ttyUSB2: Moschip 2 port adapter converter now disconnected from ttyUSB2
[ 76.779429][ T5764] mos7720 2-1:1.0: device disconnected
[ 77.524687][ T5758] usb 4-1: USB disconnect, device number 2
[ 77.529584][ T5764] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 77.544428][ T5758] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0
[ 77.545001][ T5758] symbolserial 4-1:1.0: device disconnected
[ 77.563484][ T25] usb 3-1: USB disconnect, device number 2
[ 77.680211][ T5764] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 77.693981][ T5764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 77.702105][ T5764] usb 2-1: Product: syz
[ 77.702160][ T5764] usb 2-1: Manufacturer: syz
[ 77.702175][ T5764] usb 2-1: SerialNumber: syz
[ 78.149513][ T4934] Bluetooth: hci1: command tx timeout
[ 78.149558][ T4934] Bluetooth: hci0: command tx timeout
[ 78.222383][ T5791] Rounding down aligned max_sectors from 4294967295 to 4294967288
[ 78.233969][ T5791] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed
[ 78.337507][ T5694] usb 4-1: new low-speed USB device number 3 using dummy_hcd
[ 78.389064][ T5614] Bluetooth: hci2: command tx timeout
[ 78.389917][ T5614] Bluetooth: hci3: command tx timeout
[ 78.411617][ T5795] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 78.497566][ T5694] usb 4-1: Invalid ep0 maxpacket: 64
[ 78.628078][ T5694] usb 4-1: new low-speed USB device number 4 using dummy_hcd
[ 78.708049][ T193] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 78.779460][ T5694] usb 4-1: Invalid ep0 maxpacket: 64
[ 78.782725][ T5694] usb usb4-port1: attempt power cycle
[ 78.858402][ T193] usb 3-1: New USB device found, idVendor=0572, idProduct=58a2, bcdDevice= 1.00
[ 78.859916][ T193] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 78.861563][ T193] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 78.861584][ T193] usb 3-1: Product: syz
[ 78.861605][ T193] usb 3-1: Manufacturer: syz
[ 78.897354][ T193] cx231xx 3-1:1.1: New device syz syz @ 480 Mbps (0572:58a2) with 2 interfaces
[ 79.008753][ T193] cx231xx 3-1:1.1: Failed to read PCB config
[ 79.008929][ T193] cx231xx 3-1:1.1: probe with driver cx231xx failed with error -110
[ 79.117658][ T5694] usb 4-1: new low-speed USB device number 5 using dummy_hcd
[ 79.138334][ T5694] usb 4-1: Invalid ep0 maxpacket: 64
[ 79.277623][ T5694] usb 4-1: new low-speed USB device number 6 using dummy_hcd
[ 79.298361][ T5694] usb 4-1: Invalid ep0 maxpacket: 64
[ 79.298792][ T5694] usb usb4-port1: unable to enumerate USB device
[ 79.973751][ T5764] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[ 79.973862][ T5764] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[ 79.973880][ T5764] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 79.994774][ T5764] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[ 80.002263][ T5764] usb 2-1: USB disconnect, device number 3
[ 80.777537][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 80.929331][ T25] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00
[ 80.930817][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 81.150036][ T25] ljca 2-1:1.0: probe with driver ljca failed with error -110
[ 81.505712][ T25] usb 3-1: USB disconnect, device number 3
[ 81.619064][ T5807] overlayfs: failed to resolve 'lower1': -2
[ 81.626627][ T5807] overlayfs: failed to resolve 'lower1': -2
[ 81.726599][ T5614] Bluetooth: hci1: hardware error 0x00
[ 81.867628][ T4934] Bluetooth: hci1: unexpected event for opcode 0x2003
[ 82.039247][ T4934] Bluetooth: hci1: unexpected event for opcode 0x041b
[ 82.084424][ T30] audit: type=1800 audit(1787016160.824:2): pid=5823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.20" name="idVendor" dev="configfs" ino=7755 res=0 errno=0
[ 82.105358][ T30] audit: type=1800 audit(1787016160.844:3): pid=5823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.20" name="idProduct" dev="configfs" ino=8385 res=0 errno=0
[ 82.114638][ T30] audit: type=1800 audit(1787016160.854:4): pid=5823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.20" name="UDC" dev="configfs" ino=8390 res=0 errno=0
[ 82.276032][ T5827] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 82.447585][ T193] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 82.587541][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 82.597867][ T193] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 7.02
[ 82.599235][ T193] usb 1-1: Dual-Role OTG device on HNP port
[ 82.599566][ T193] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 82.624404][ T193] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[ 82.749409][ T25] usb 4-1: New USB device found, idVendor=1934, idProduct=1202, bcdDevice= 1.00
[ 82.754100][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 82.754125][ T25] usb 4-1: Product: syz
[ 82.754138][ T25] usb 4-1: Manufacturer: syz
[ 82.754151][ T25] usb 4-1: SerialNumber: syz
[ 83.512338][ T5835] overlayfs: failed to resolve 'lower1': -2
[ 83.522585][ T5835] overlayfs: failed to resolve 'lower1': -2
[ 83.602731][ T193] usb 2-1: USB disconnect, device number 4
[ 83.622918][ T4934] Bluetooth: hci1: unexpected event for opcode 0x041b
[ 83.713997][ T4934] Bluetooth: hci1: unexpected event for opcode 0x0c03
[ 83.747117][ T4934] Bluetooth: hci1: unexpected event for opcode 0x1003
[ 83.779738][ T4934] Bluetooth: hci1: unexpected event for opcode 0x1001
[ 83.804356][ T5844] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[ 83.823407][ T4934] Bluetooth: hci1: unexpected event for opcode 0x1009
[ 83.830797][ T4934] Bluetooth: hci1: unexpected event for opcode 0x2003
[ 83.907760][ T5614] Bluetooth: hci1: Opcode 0x0c45 failed: -110
[ 83.907987][ T5614] Bluetooth: hci1: hardware error 0x00
[ 83.963505][ T5848] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 84.072590][ T4934] Bluetooth: hci1: unexpected event for opcode 0x041b
[ 84.423206][ T5858] overlayfs: failed to resolve 'lower1': -2
[ 84.431927][ T5858] overlayfs: failed to resolve 'lower1': -2
[ 84.660989][ T5629] Bluetooth: hci3: hardware error 0x00
[ 84.772910][ T4934] Bluetooth: hci3: unexpected event for opcode 0x2003
[ 84.857289][ T5868] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 85.122638][ T5877] overlayfs: failed to resolve 'lower1': -2
[ 85.130239][ T5877] overlayfs: failed to resolve 'lower1': -2
[ 85.467577][ T5694] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 85.592469][ T4934] Bluetooth: hci1: unexpected event for opcode 0x041b
[ 85.618308][ T5694] usb 2-1: New USB device found, idVendor=0404, idProduct=0202, bcdDevice= 1.00
[ 85.628677][ T5694] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 85.628772][ T5694] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[ 85.632777][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 85.632801][ T5694] usb 2-1: Product: syz
[ 85.632814][ T5694] usb 2-1: Manufacturer: syz
[ 85.632827][ T5694] usb 2-1: SerialNumber: syz
[ 85.639197][ T5881] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 85.639417][ T5881] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 85.641573][ T5694] io_edgeport 2-1:1.0: EPiC device converter detected
[ 85.723231][ T4934] Bluetooth: hci1: unexpected event for opcode 0x2003
[ 85.824702][ T5887] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 85.914696][ T4934] Bluetooth: hci1: unexpected event for opcode 0x041b
[ 86.636713][ T1973] cfg80211: failed to load regulatory.db
[ 86.645415][ T5762] Freezing user space processes
[ 86.654415][ T5762] Freezing user space processes completed (elapsed 0.008 seconds)
[ 86.654861][ T5762] OOM killer disabled.
[ 86.654871][ T5762] Freezing remaining freezable tasks
[ 86.787765][ T5629] Bluetooth: hci3: Opcode 0x1009 failed: -110
[ 87.748545][ T5614] Bluetooth: hci1: Opcode 0x1009 failed: -110
[ 87.749514][ T5614] Bluetooth: hci1: hardware error 0x00
[ 88.481759][ T25] f81534 4-1:1.0: f81534_get_register: reg: 1003 failed: -32
[ 88.481861][ T25] f81534 4-1:1.0: f81534_find_config_idx: read failed: -32
[ 88.481877][ T25] f81534 4-1:1.0: f81534_calc_num_ports: find idx failed: -32
[ 88.481954][ T25] f81534 4-1:1.0: probe with driver f81534 failed with error -32
[ 89.830096][ T5614] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 90.877152][ T5694] usb 2-1: detected
[ 90.878989][ T5694] usb 2-1: error in getting manufacturer descriptor: -32
[ 90.879406][ T5694] usb 2-1: error in getting boot descriptor: -32
[ 90.879424][ T5694] usb 2-1: Device Reported 0 serial ports vs. core thinking we have 1 ports, email greg@kroah.com this information.
[ 90.935443][
** replaying previous printk message **
[ 90.935443][ T5694] usb 2-1: Direct firmware load for edgeport/down.fw failed with error -2
[ 90.935495][ T5694] usb 2-1: Falling back to sysfs fallback for: edgeport/down.fw
[ 90.936370][ T5694] ------------[ cut here ]------------
[ 90.936381][ T5694] ret
[ 90.936396][ T5694] WARNING: drivers/base/firmware_loader/fallback.c:158 at firmware_fallback_sysfs+0x76d/0xa50, CPU#0: kworker/0:4/5694
[ 90.979521][ T5694] Modules linked in:
[ 90.984725][ T5694] CPU: 0 UID: 0 PID: 5694 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full)
[ 90.994300][ T5694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 91.005625][ T5694] Workqueue: usb_hub_wq hub_event
[ 91.010710][ T5694] RIP: 0010:firmware_fallback_sysfs+0x76d/0xa50
[ 91.016951][ T5694] Code: 89 fb e9 48 fc ff ff e8 01 be 89 fb c6 05 94 14 46 0a 01 48 c7 c7 60 67 98 8c e8 ae a2 e9 fa e9 70 fc ff ff e8 e4 bd 89 fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 60 68 98 8c 4c 89 e2 e8 4e 41 ee fa e9
[ 91.036713][ T5694] RSP: 0018:ffffc90004156860 EFLAGS: 00010287
[ 91.042936][ T5694] RAX: ffffffff863e1f4c RBX: dffffc0000000000 RCX: 0000000000100000
[ 91.051234][ T5694] RDX: ffffc90017952000 RSI: 0000000000014cc8 RDI: 0000000000014cc9
[ 91.059294][ T5694] RBP: 0000000000000001 R08: ffffffff909ac37f R09: 1ffffffff213586f
[ 91.067252][ T5694] R10: dffffc0000000000 R11: fffffbfff2135870 R12: ffffffff8ccdcec0
[ 91.076183][ T5694] R13: 0000000000001770 R14: ffff888032e180b0 R15: 00000000fffffff5
[ 91.085409][ T5694] FS: 0000000000000000(0000) GS:ffff8881248ab000(0000) knlGS:0000000000000000
[ 91.094433][ T5694] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 91.101091][ T5694] CR2: 0000001b33b22ff6 CR3: 000000000ed48000 CR4: 00000000003526f0
[ 91.109204][ T5694] Call Trace:
[ 91.112503][ T5694]
[ 91.115440][ T5694] ? kfree+0x1c5/0x650
[ 91.119554][ T5694] _request_firmware+0x1049/0x1780
[ 91.124665][ T5694] ? __pfx__request_firmware+0x10/0x10
[ 91.130134][ T5694] ? kfree+0x1c5/0x650
[ 91.134198][ T5694] ? rom_read+0x19e/0x1c0
[ 91.138561][ T5694] request_firmware+0x36/0x50
[ 91.143232][ T5694] edge_startup+0x1ac7/0x6730
[ 91.147991][ T5694] ? trace_kmalloc+0x2a/0xf0
[ 91.152614][ T5694] ? __pfx_edge_startup+0x10/0x10
[ 91.157677][ T5694] ? __kmalloc_noprof+0x38c/0x720
[ 91.162735][ T5694] ? __kmalloc_noprof+0x1ab/0x720
[ 91.167793][ T5694] ? setup_port_interrupt_in+0x143/0x560
[ 91.174659][ T5694] ? __pfx_edge_interrupt_callback+0x10/0x10
[ 91.181951][ T5694] usb_serial_probe+0x2523/0x2e50
[ 91.186998][ T5694] ? __pfx_edge_bulk_out_data_callback+0x10/0x10
[ 91.193494][ T5694] ? __pfx_edge_bulk_out_data_callback+0x10/0x10
[ 91.199882][ T5694] usb_probe_interface+0x788/0xe50
[ 91.204987][ T5694] ? __pfx_usb_probe_interface+0x10/0x10
[ 91.210644][ T5694] ? sysfs_do_create_link_sd+0xe0/0x110
[ 91.216177][ T5694] ? driver_sysfs_add+0x1fe/0x210
[ 91.221261][ T5694] ? __pfx_usb_probe_interface+0x10/0x10
[ 91.226910][ T5694] really_probe+0x254/0xae0
[ 91.231517][ T5694] __driver_probe_device+0x1e8/0x360
[ 91.236812][ T5694] driver_probe_device+0x4f/0x240
[ 91.241860][ T5694] __device_attach_driver+0x270/0x410
[ 91.247248][ T5694] bus_for_each_drv+0x258/0x2f0
[ 91.252118][ T5694] ? __pfx___device_attach_driver+0x10/0x10
[ 91.258064][ T5694] ? __pfx_bus_for_each_drv+0x10/0x10
[ 91.263447][ T5694] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 91.269972][ T5694] __device_attach+0x2c4/0x450
[ 91.274774][ T5694] ? __pfx___device_attach+0x10/0x10
[ 91.281024][ T5694] ? do_raw_spin_unlock+0xf5/0x200
[ 91.286128][ T5694] ? _raw_spin_unlock+0x28/0x50
[ 91.292339][ T5694] device_initial_probe+0xa1/0xd0
[ 91.297390][ T5694] bus_probe_device+0x12a/0x220
[ 91.302273][ T5694] device_add+0x7d7/0xb80
[ 91.306621][ T5694] usb_set_configuration+0x1ad8/0x2180
[ 91.312118][ T5694] usb_generic_driver_probe+0x8d/0x150
[ 91.317628][ T5694] usb_probe_device+0x1c3/0x3b0
[ 91.322495][ T5694] ? __pfx_usb_probe_device+0x10/0x10
[ 91.327926][ T5694] really_probe+0x254/0xae0
[ 91.332449][ T5694] __driver_probe_device+0x1e8/0x360
[ 91.337816][ T5694] driver_probe_device+0x4f/0x240
[ 91.342862][ T5694] __device_attach_driver+0x270/0x410
[ 91.348413][ T5694] bus_for_each_drv+0x258/0x2f0
[ 91.353278][ T5694] ? __pfx___device_attach_driver+0x10/0x10
[ 91.359198][ T5694] ? __pfx_bus_for_each_drv+0x10/0x10
[ 91.364559][ T5694] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 91.370400][ T5694] __device_attach+0x2c4/0x450
[ 91.375166][ T5694] ? __pfx___device_attach+0x10/0x10
[ 91.381428][ T5694] ? do_raw_spin_unlock+0xf5/0x200
[ 91.386542][ T5694] ? _raw_spin_unlock+0x28/0x50
[ 91.392801][ T5694] device_initial_probe+0xa1/0xd0
[ 91.397906][ T5694] bus_probe_device+0x12a/0x220
[ 91.402753][ T5694] device_add+0x7d7/0xb80
[ 91.407072][ T5694] usb_new_device+0x9aa/0x1690
[ 91.411864][ T5694] ? __pfx_usb_new_device+0x10/0x10
[ 91.417060][ T5694] ? _raw_spin_unlock_irq+0x23/0x50
[ 91.422284][ T5694] hub_event+0x28e8/0x4d30
[ 91.426692][ T5694] ? do_raw_spin_unlock+0xf5/0x200
[ 91.431973][ T5694] ? __pfx_hub_event+0x10/0x10
[ 91.436731][ T5694] ? rcu_is_watching+0x16/0xb0
[ 91.441507][ T5694] ? process_scheduled_works+0x97a/0x1630
[ 91.447216][ T5694] process_scheduled_works+0xc3d/0x1630
[ 91.452798][ T5694] ? __pfx_process_scheduled_works+0x10/0x10
[ 91.458818][ T5694] ? assign_work+0x3cf/0x5d0
[ 91.463463][ T5694] worker_thread+0xa47/0xfb0
[ 91.468119][ T5694] ? __kthread_parkme+0x71/0x1f0
[ 91.473051][ T5694] kthread+0x38b/0x480
[ 91.477111][ T5694] ? __pfx_worker_thread+0x10/0x10
[ 91.483559][ T5694] ? __pfx_kthread+0x10/0x10
[ 91.489307][ T5694] ret_from_fork+0x514/0xb70
[ 91.493928][ T5694] ? __pfx_ret_from_fork+0x10/0x10
[ 91.499079][ T5694] ? __switch_to+0xc89/0x1420
[ 91.503747][ T5694] ? __pfx_kthread+0x10/0x10
[ 91.508389][ T5694] ret_from_fork_asm+0x1a/0x30
[ 91.513185][ T5694]
[ 91.516200][ T5694] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 91.523462][ T5694] CPU: 0 UID: 0 PID: 5694 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full)
[ 91.532809][ T5694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 91.542847][ T5694] Workqueue: usb_hub_wq hub_event
[ 91.547870][ T5694] Call Trace:
[ 91.551161][ T5694]
[ 91.554078][ T5694] vpanic+0x56d/0xa60
[ 91.558051][ T5694] ? __pfx__printk+0x10/0x10
[ 91.562623][ T5694] ? __pfx_vpanic+0x10/0x10
[ 91.567110][ T5694] ? is_bpf_text_address+0x292/0x2b0
[ 91.572398][ T5694] ? is_bpf_text_address+0x26/0x2b0
[ 91.577584][ T5694] panic+0xc5/0xd0
[ 91.581296][ T5694] ? __pfx_panic+0x10/0x10
[ 91.585707][ T5694] ? ret_from_fork_asm+0x1a/0x30
[ 91.590645][ T5694] __warn+0x315/0x4c0
[ 91.594643][ T5694] ? firmware_fallback_sysfs+0x76d/0xa50
[ 91.600288][ T5694] ? firmware_fallback_sysfs+0x76d/0xa50
[ 91.605922][ T5694] __report_bug+0x276/0x570
[ 91.610438][ T5694] ? firmware_fallback_sysfs+0x76d/0xa50
[ 91.616072][ T5694] ? __pfx___report_bug+0x10/0x10
[ 91.621094][ T5694] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 91.626476][ T5694] ? firmware_fallback_sysfs+0x76d/0xa50
[ 91.632104][ T5694] report_bug+0x16b/0x220
[ 91.636435][ T5694] ? firmware_fallback_sysfs+0x76d/0xa50
[ 91.642063][ T5694] ? firmware_fallback_sysfs+0x76f/0xa50
[ 91.647693][ T5694] handle_bug+0x9c/0x200
[ 91.651940][ T5694] exc_invalid_op+0x1a/0x50
[ 91.656452][ T5694] asm_exc_invalid_op+0x1a/0x20
[ 91.661293][ T5694] RIP: 0010:firmware_fallback_sysfs+0x76d/0xa50
[ 91.667541][ T5694] Code: 89 fb e9 48 fc ff ff e8 01 be 89 fb c6 05 94 14 46 0a 01 48 c7 c7 60 67 98 8c e8 ae a2 e9 fa e9 70 fc ff ff e8 e4 bd 89 fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 60 68 98 8c 4c 89 e2 e8 4e 41 ee fa e9
[ 91.687145][ T5694] RSP: 0018:ffffc90004156860 EFLAGS: 00010287
[ 91.693213][ T5694] RAX: ffffffff863e1f4c RBX: dffffc0000000000 RCX: 0000000000100000
[ 91.701184][ T5694] RDX: ffffc90017952000 RSI: 0000000000014cc8 RDI: 0000000000014cc9
[ 91.709158][ T5694] RBP: 0000000000000001 R08: ffffffff909ac37f R09: 1ffffffff213586f
[ 91.717123][ T5694] R10: dffffc0000000000 R11: fffffbfff2135870 R12: ffffffff8ccdcec0
[ 91.725088][ T5694] R13: 0000000000001770 R14: ffff888032e180b0 R15: 00000000fffffff5
[ 91.733060][ T5694] ? firmware_fallback_sysfs+0x76c/0xa50
[ 91.738708][ T5694] ? kfree+0x1c5/0x650
[ 91.742785][ T5694] _request_firmware+0x1049/0x1780
[ 91.747908][ T5694] ? __pfx__request_firmware+0x10/0x10
[ 91.753366][ T5694] ? kfree+0x1c5/0x650
[ 91.757458][ T5694] ? rom_read+0x19e/0x1c0
[ 91.761804][ T5694] request_firmware+0x36/0x50
[ 91.766483][ T5694] edge_startup+0x1ac7/0x6730
[ 91.771176][ T5694] ? trace_kmalloc+0x2a/0xf0
[ 91.775764][ T5694] ? __pfx_edge_startup+0x10/0x10
[ 91.780794][ T5694] ? __kmalloc_noprof+0x38c/0x720
[ 91.785811][ T5694] ? __kmalloc_noprof+0x1ab/0x720
[ 91.790828][ T5694] ? setup_port_interrupt_in+0x143/0x560
[ 91.796474][ T5694] ? __pfx_edge_interrupt_callback+0x10/0x10
[ 91.802497][ T5694] usb_serial_probe+0x2523/0x2e50
[ 91.807523][ T5694] ? __pfx_edge_bulk_out_data_callback+0x10/0x10
[ 91.813887][ T5694] ? __pfx_edge_bulk_out_data_callback+0x10/0x10
[ 91.820229][ T5694] usb_probe_interface+0x788/0xe50
[ 91.825351][ T5694] ? __pfx_usb_probe_interface+0x10/0x10
[ 91.830986][ T5694] ? sysfs_do_create_link_sd+0xe0/0x110
[ 91.836534][ T5694] ? driver_sysfs_add+0x1fe/0x210
[ 91.841565][ T5694] ? __pfx_usb_probe_interface+0x10/0x10
[ 91.847194][ T5694] really_probe+0x254/0xae0
[ 91.851705][ T5694] __driver_probe_device+0x1e8/0x360
[ 91.857002][ T5694] driver_probe_device+0x4f/0x240
[ 91.862031][ T5694] __device_attach_driver+0x270/0x410
[ 91.867409][ T5694] bus_for_each_drv+0x258/0x2f0
[ 91.872265][ T5694] ? __pfx___device_attach_driver+0x10/0x10
[ 91.878168][ T5694] ? __pfx_bus_for_each_drv+0x10/0x10
[ 91.883547][ T5694] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 91.889357][ T5694] __device_attach+0x2c4/0x450
[ 91.894135][ T5694] ? __pfx___device_attach+0x10/0x10
[ 91.899423][ T5694] ? do_raw_spin_unlock+0xf5/0x200
[ 91.904536][ T5694] ? _raw_spin_unlock+0x28/0x50
[ 91.909390][ T5694] device_initial_probe+0xa1/0xd0
[ 91.914430][ T5694] bus_probe_device+0x12a/0x220
[ 91.919301][ T5694] device_add+0x7d7/0xb80
[ 91.923652][ T5694] usb_set_configuration+0x1ad8/0x2180
[ 91.929139][ T5694] usb_generic_driver_probe+0x8d/0x150
[ 91.934607][ T5694] usb_probe_device+0x1c3/0x3b0
[ 91.939468][ T5694] ? __pfx_usb_probe_device+0x10/0x10
[ 91.944837][ T5694] really_probe+0x254/0xae0
[ 91.949356][ T5694] __driver_probe_device+0x1e8/0x360
[ 91.954653][ T5694] driver_probe_device+0x4f/0x240
[ 91.959687][ T5694] __device_attach_driver+0x270/0x410
[ 91.965065][ T5694] bus_for_each_drv+0x258/0x2f0
[ 91.969914][ T5694] ? __pfx___device_attach_driver+0x10/0x10
[ 91.975815][ T5694] ? __pfx_bus_for_each_drv+0x10/0x10
[ 91.981192][ T5694] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 91.987005][ T5694] __device_attach+0x2c4/0x450
[ 91.991782][ T5694] ? __pfx___device_attach+0x10/0x10
[ 91.997077][ T5694] ? do_raw_spin_unlock+0xf5/0x200
[ 92.002193][ T5694] ? _raw_spin_unlock+0x28/0x50
[ 92.007043][ T5694] device_initial_probe+0xa1/0xd0
[ 92.012076][ T5694] bus_probe_device+0x12a/0x220
[ 92.016931][ T5694] device_add+0x7d7/0xb80
[ 92.021265][ T5694] usb_new_device+0x9aa/0x1690
[ 92.026040][ T5694] ? __pfx_usb_new_device+0x10/0x10
[ 92.031250][ T5694] ? _raw_spin_unlock_irq+0x23/0x50
[ 92.036456][ T5694] hub_event+0x28e8/0x4d30
[ 92.040868][ T5694] ? do_raw_spin_unlock+0xf5/0x200
[ 92.046026][ T5694] ? __pfx_hub_event+0x10/0x10
[ 92.050812][ T5694] ? rcu_is_watching+0x16/0xb0
[ 92.055575][ T5694] ? process_scheduled_works+0x97a/0x1630
[ 92.061378][ T5694] process_scheduled_works+0xc3d/0x1630
[ 92.066944][ T5694] ? __pfx_process_scheduled_works+0x10/0x10
[ 92.072931][ T5694] ? assign_work+0x3cf/0x5d0
[ 92.077529][ T5694] worker_thread+0xa47/0xfb0
[ 92.082135][ T5694] ? __kthread_parkme+0x71/0x1f0
[ 92.087085][ T5694] kthread+0x38b/0x480
[ 92.091156][ T5694] ? __pfx_worker_thread+0x10/0x10
[ 92.096270][ T5694] ? __pfx_kthread+0x10/0x10
[ 92.100872][ T5694] ret_from_fork+0x514/0xb70
[ 92.105471][ T5694] ? __pfx_ret_from_fork+0x10/0x10
[ 92.110578][ T5694] ? __switch_to+0xc89/0x1420
[ 92.115266][ T5694] ? __pfx_kthread+0x10/0x10
[ 92.119873][ T5694] ret_from_fork_asm+0x1a/0x30
[ 92.124665][ T5694]
[ 92.127979][ T5694] Kernel Offset: disabled
[ 92.132295][ T5694] Rebooting in 86400 seconds..