last executing test programs: 9.730671218s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\x00', 0x2) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='tcp\x00', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='127.0.0.1\x00', 0xa) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r3, &(0x7f0000000580)='4420\x00', 0x5) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='ipv4\x00', 0x5) close(r4) symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) write(r5, &(0x7f0000000880)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testsubsys\x00', 0x3d) nanosleep(&(0x7f0000000900)={0x0, 0x2faf080}, 0x0) 9.16696448s ago: executing program 0 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlink(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='usbip-vudc.0', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) write(r1, &(0x7f00000003c0)="000000010000000100000000000000000000000000000000000000000000000000000000000000000009010000000000", 0x30) write(r1, &(0x7f0000000400)="00000001000000020000000000000000000000000000000000000000000000000000000000000000010b010001000000", 0x30) write(r1, &(0x7f0000000440)="00000001000000030000000000000000000000000000000000000000000000000000000000000000010b000001000000", 0x30) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/platform/devices/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='3', 0x1) write(r2, &(0x7f0000000500)='4', 0x1) write(r2, &(0x7f0000000540)='5', 0x1) write(r2, &(0x7f0000000580)='6', 0x1) write(r2, &(0x7f00000005c0)='7', 0x1) write(r2, &(0x7f0000000600)='8', 0x1) write(r2, &(0x7f0000000640)='9', 0x1) write(r2, &(0x7f0000000680)='10', 0x2) write(r2, &(0x7f00000006c0)='11', 0x2) write(r2, &(0x7f0000000700)='12', 0x2) write(r2, &(0x7f0000000740)='13', 0x2) write(r2, &(0x7f0000000780)='14', 0x2) write(r2, &(0x7f00000007c0)='15', 0x2) write(r2, &(0x7f0000000800)='16', 0x2) write(r2, &(0x7f0000000840)='17', 0x2) write(r2, &(0x7f0000000880)='18', 0x2) write(r2, &(0x7f00000008c0)='19', 0x2) write(r2, &(0x7f0000000900)='20', 0x2) 8.766257992s ago: executing program 0 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./sys\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='isp1301 0x29\n', 0xd) 8.624179071s ago: executing program 0 (id=11): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da0b31280001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000300), 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) 4.236814173s ago: executing program 0 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r3, &(0x7f0000000180)='1\x00', 0x1) 4.120074109s ago: executing program 0 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='core\n', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='mem\n', 0x4) close(r1) 3.689009196s ago: executing program 3 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='3', 0x1) 3.59667857s ago: executing program 3 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000000e0)='./config/dlm/cluster/cluster_name\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000110)='./config/dlm/cluster/protocol\x00', 0x1, 0x0) write(r0, &(0x7f0000000120)='1\n\x00', 0x2) 3.472190515s ago: executing program 3 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/nullb0/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nullb/nullb0/power\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\n', 0x2) close(r1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) pwrite64(r2, &(0x7f0000001000)='SOFZlK&\v\x00'/72, 0x1000, 0x0) close(r2) r3 = fsopen(&(0x7f0000000300)='zonefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000340)='source\x00', &(0x7f0000000380)='/dev/nullb0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000003c0)='explicit-open\x00', &(0x7f00000003d0)='\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 3.448270181s ago: executing program 3 (id=37): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.048719838s ago: executing program 3 (id=39): syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040450580800a030102030109021900010100c0000904000001ffffff0007058101000201"], 0x0) nanosleep(&(0x7f0000000100)={0x2}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x2) r1 = syz_open_dev$video(&(0x7f0000000200), 0x1, 0x2) r2 = syz_open_dev$video(&(0x7f0000000200), 0x2, 0x2) r3 = syz_open_dev$video(&(0x7f0000000200), 0x3, 0x2) syz_open_dev$video(&(0x7f0000000200), 0x4, 0x2) syz_open_dev$video(&(0x7f0000000200), 0x5, 0x2) syz_open_dev$video(&(0x7f0000000200), 0x6, 0x2) syz_open_dev$video(&(0x7f0000000200), 0x7, 0x2) syz_open_dev$video(&(0x7f0000000200), 0x8, 0x2) syz_open_dev$video(&(0x7f0000000200), 0x9, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x160, 0x120, 0x32315559}}) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x160, 0x120, 0x32315559}}) ioctl$VIDIOC_S_FMT(r2, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x160, 0x120, 0x32315559}}) ioctl$VIDIOC_S_FMT(r3, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x160, 0x120, 0x32315559}}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000500)=0x1) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000500)=0x1) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000500)=0x1) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000500)=0x1) 2.868919405s ago: executing program 1 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000110)='./config/dlm/cluster/protocol\x00', 0x1, 0x0) write(r0, &(0x7f0000000120)='1\n\x00', 0x2) 2.75678121s ago: executing program 1 (id=46): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_USE_MFP={0x8}]}, 0x4c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, &(0x7f0000000540)) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000140)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000700)={0x0, 0x2faf080}, &(0x7f0000000740)) nanosleep(&(0x7f0000000900)={0x0, 0x2faf080}, &(0x7f0000000940)) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@action={{{}, {}, @device_b, @device_a, @from_mac}, @sa_query_req={0x8, 0x0, 0x1234}}, 0x1c) 2.324209633s ago: executing program 2 (id=49): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r2, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1) 2.319527447s ago: executing program 2 (id=50): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x800000) pwrite64(r0, &(0x7f0000000100)="00000042000000000100000000080000", 0x10, 0x1be) pwrite64(r0, &(0x7f0000000110)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000200)="5052495648454144000000000002000b00000000000000000000000000000000000000000000000031323334353637382d313233342d313233342d313233342d313233343536373839616263", 0x50, 0xc00) pwrite64(r0, &(0x7f0000000200)="5052495648454144000000000002000b00000000000000000000000000000000000000000000000031323334353637382d313233342d313233342d313233342d313233343536373839616263", 0x50, 0x1e8000) pwrite64(r0, &(0x7f0000000200)="5052495648454144000000000002000b00000000000000000000000000000000000000000000000031323334353637382d313233342d313233342d313233342d313233343536373839616263", 0x50, 0x1ffe00) pwrite64(r0, &(0x7f0000000300)="544f43424c4f434b00000000000000000000000000000000000000000000000000000000636f6e666967000000000000000000000000000000001000000000000000006c6f6700000000000000000000000000001000000000000000001000000000000000", 0x60, 0x100200) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 2.268626959s ago: executing program 2 (id=51): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv6/fib_multipath_hash_policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='3', 0x1) write(0xffffffffffffffff, &(0x7f0000000280)='4095', 0x4) 2.185069692s ago: executing program 2 (id=52): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv6/fib_multipath_hash_policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='3', 0x1) 2.181221956s ago: executing program 2 (id=53): syz_usb_connect(0x3, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f5000010102030209022e0001010080320904000004ff0000000705810240000007050202400000070583024000000705040240000009022e0001020080320904000004ff00000007058102400000070502024000000705830240000007050402400000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 2.053235131s ago: executing program 1 (id=54): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000110)='./config/dlm/cluster/protocol\x00', 0x1, 0x0) write(r0, &(0x7f0000000120)='1\n\x00', 0x2) 1.972855002s ago: executing program 1 (id=55): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', '::\x00'}, 0x8) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x40, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x1f00000000000000) 1.961531195s ago: executing program 1 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='dummy_udc.0\n', 0xc) 1.889308104s ago: executing program 1 (id=57): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000500)={0x40, 0xa1, 0x4, "12345678"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000500)={0x40, 0xa1, 0x4, "12345678"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000500)={0x40, 0xa1, 0x4, "12345678"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000500)={0x40, 0xa1, 0x4, "12345678"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000500)={0x40, 0xa1, 0x4, "12345678"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000500)={0x40, 0xa1, 0x4, "12345678"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000500)={0x40, 0xa1, 0x4, "12345678"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000500)={0x40, 0xa1, 0x4, "12345678"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000500)={0x40, 0xa1, 0x4, "12345678"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000500)={0x40, 0xa1, 0x4, "12345678"}, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 280.511µs ago: executing program 3 (id=58): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='bxt_wcove_usbc\x00', 0xf) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/bxt_wcove_usbc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='pcspkr\x00', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/typec/port0/port0.0/supported_roles\x00', 0x0, 0x0) read(r2, &(0x7f0000000600)=""/100, 0x64) 0s ago: executing program 2 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r2, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.174' (ED25519) to the list of known hosts. [ 72.709720][ T5604] cgroup: Unknown subsys name 'net' [ 72.816909][ T5604] cgroup: Unknown subsys name 'cpuset' [ 72.824628][ T5604] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.141752][ T5604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.765569][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.775060][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.777784][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.792800][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.793111][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.803351][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.809085][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.816391][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.819852][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.822033][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.825579][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.826940][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.830991][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.831554][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.838139][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.841508][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.863145][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.865678][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.866271][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.880824][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.099785][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.100149][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.101705][ T5619] bridge_slave_0: entered allmulticast mode [ 79.104092][ T5619] bridge_slave_0: entered promiscuous mode [ 79.109558][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.109718][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.109849][ T5619] bridge_slave_1: entered allmulticast mode [ 79.111519][ T5619] bridge_slave_1: entered promiscuous mode [ 79.211126][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.228765][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.362793][ T5619] team0: Port device team_slave_0 added [ 79.378890][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.379119][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.379247][ T5617] bridge_slave_0: entered allmulticast mode [ 79.380888][ T5617] bridge_slave_0: entered promiscuous mode [ 79.384303][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.384400][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.384526][ T5617] bridge_slave_1: entered allmulticast mode [ 79.386304][ T5617] bridge_slave_1: entered promiscuous mode [ 79.390609][ T5619] team0: Port device team_slave_1 added [ 79.477718][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.477763][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.478698][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.499045][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.499072][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.499096][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.554104][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.564092][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.564252][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.564682][ T5618] bridge_slave_0: entered allmulticast mode [ 79.566386][ T5618] bridge_slave_0: entered promiscuous mode [ 79.574954][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.620257][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.620440][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.620931][ T5618] bridge_slave_1: entered allmulticast mode [ 79.623130][ T5618] bridge_slave_1: entered promiscuous mode [ 79.682815][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.683821][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.685100][ T5620] bridge_slave_0: entered allmulticast mode [ 79.686925][ T5620] bridge_slave_0: entered promiscuous mode [ 79.711725][ T5619] hsr_slave_0: entered promiscuous mode [ 79.712966][ T5619] hsr_slave_1: entered promiscuous mode [ 79.719040][ T5617] team0: Port device team_slave_0 added [ 79.719361][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.719471][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.719595][ T5620] bridge_slave_1: entered allmulticast mode [ 79.722502][ T5620] bridge_slave_1: entered promiscuous mode [ 79.757417][ T5617] team0: Port device team_slave_1 added [ 79.770851][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.799724][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.822850][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.843031][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.843114][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.843135][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.848908][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.904094][ T5621] Bluetooth: hci2: command tx timeout [ 79.904145][ T5625] Bluetooth: hci0: command tx timeout [ 79.904432][ T5624] Bluetooth: hci3: command tx timeout [ 79.927515][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.927543][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.927927][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.945258][ T5618] team0: Port device team_slave_0 added [ 79.967602][ T5620] team0: Port device team_slave_0 added [ 79.970600][ T5618] team0: Port device team_slave_1 added [ 79.988746][ T5624] Bluetooth: hci1: command tx timeout [ 79.991044][ T5620] team0: Port device team_slave_1 added [ 80.066843][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.066902][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.066939][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.102482][ T5617] hsr_slave_0: entered promiscuous mode [ 80.103884][ T5617] hsr_slave_1: entered promiscuous mode [ 80.105095][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 80.105188][ T5617] Cannot create hsr debugfs directory [ 80.106008][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.106020][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.106043][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.197459][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.197504][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.197543][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.201012][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.201030][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.201053][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.284148][ T5618] hsr_slave_0: entered promiscuous mode [ 80.285250][ T5618] hsr_slave_1: entered promiscuous mode [ 80.286132][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 80.286152][ T5618] Cannot create hsr debugfs directory [ 80.374529][ T5620] hsr_slave_0: entered promiscuous mode [ 80.375544][ T5620] hsr_slave_1: entered promiscuous mode [ 80.376202][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 80.376220][ T5620] Cannot create hsr debugfs directory [ 80.526290][ T5619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.540100][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.566700][ T5619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.579950][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.580795][ T5619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.595380][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.597553][ T5619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.610193][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.815114][ T5617] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.825922][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.826769][ T5617] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.838681][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.842067][ T5617] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.856149][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.864850][ T5617] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.874427][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.984204][ T5618] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.994695][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.005197][ T5618] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.015872][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.018138][ T5618] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.027837][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.036770][ T5618] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.049493][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.057414][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.116063][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.162988][ T812] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.163107][ T812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.169404][ T5620] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.177623][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.194027][ T812] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.194128][ T812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.196010][ T5620] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.213321][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.215770][ T5620] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.219462][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.224805][ T5620] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.236392][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.337996][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.422757][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.447274][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.462959][ T767] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.463075][ T767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.481710][ T767] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.481818][ T767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.527992][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.570326][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.571099][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.599831][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.606284][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.606383][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.669309][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.707150][ T3379] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.707260][ T3379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.774715][ T3379] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.774848][ T3379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.986266][ T5624] Bluetooth: hci2: command tx timeout [ 81.986894][ T5625] Bluetooth: hci3: command tx timeout [ 81.986922][ T5625] Bluetooth: hci0: command tx timeout [ 82.084075][ T5621] Bluetooth: hci1: command tx timeout [ 82.360347][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.553167][ T5619] veth0_vlan: entered promiscuous mode [ 82.580588][ T5619] veth1_vlan: entered promiscuous mode [ 82.658380][ T5619] veth0_macvtap: entered promiscuous mode [ 82.676282][ T5619] veth1_macvtap: entered promiscuous mode [ 82.727939][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.749015][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.862416][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.906042][ T1284] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.906221][ T1284] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.906258][ T1284] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.906291][ T1284] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.911224][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.013182][ T767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.024707][ T767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.051137][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.105533][ T5618] veth0_vlan: entered promiscuous mode [ 83.111729][ T767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.111750][ T767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.133267][ T5617] veth0_vlan: entered promiscuous mode [ 83.158556][ T5618] veth1_vlan: entered promiscuous mode [ 83.178926][ T5617] veth1_vlan: entered promiscuous mode [ 83.223407][ T5619] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.289232][ T5620] veth0_vlan: entered promiscuous mode [ 83.327712][ T5618] veth0_macvtap: entered promiscuous mode [ 83.341258][ T5620] veth1_vlan: entered promiscuous mode [ 83.362254][ T5618] veth1_macvtap: entered promiscuous mode [ 83.367266][ T5617] veth0_macvtap: entered promiscuous mode [ 83.395173][ T5617] veth1_macvtap: entered promiscuous mode [ 83.401990][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.434162][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.451981][ T5620] veth0_macvtap: entered promiscuous mode [ 83.458120][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.458433][ T767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.458475][ T767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.458506][ T767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.458536][ T767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.485022][ T5620] veth1_macvtap: entered promiscuous mode [ 83.500891][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.569671][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.574111][ T5764] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.602963][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.668277][ T1284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.668316][ T1284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.725938][ T1284] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.726634][ T3379] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.726913][ T3379] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.727182][ T3379] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.727484][ T3379] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.727739][ T3379] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.738921][ T5764] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 83.752495][ T5764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.752521][ T5764] usb 3-1: Product: syz [ 83.752535][ T5764] usb 3-1: Manufacturer: syz [ 83.752548][ T5764] usb 3-1: SerialNumber: syz [ 83.764940][ T767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.765084][ T767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.812921][ T5764] usb 3-1: USB2VGA dongle found at address 2 [ 83.816932][ T3379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.816952][ T3379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.841197][ T5764] usb 3-1: Allocated 8 output buffers [ 83.880699][ T3379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.880735][ T3379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.932054][ T3379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.932094][ T3379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.976780][ T3379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.976822][ T3379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.064161][ T5621] Bluetooth: hci2: command tx timeout [ 84.064541][ T5624] Bluetooth: hci0: command tx timeout [ 84.064572][ T5624] Bluetooth: hci3: command tx timeout [ 84.140149][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.140192][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.154303][ T5625] Bluetooth: hci1: command tx timeout [ 84.391712][ T5775] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 84.393126][ T5775] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 84.394803][ T5775] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 84.395750][ T5775] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 84.423616][ T1284] nvmet: Created nvm controller 1 for subsystem testsub for NQN nqn.2014-08.org.nvmexpress:uuid:b7aa27c9-de9f-4209-a997-586e0efa367d. [ 84.439745][ T5772] nvme nvme0: creating 2 I/O queues. [ 84.457441][ T5772] nvme nvme0: new ctrl: "testsub" [ 84.569524][ T5775] nvme nvme1: failed to connect socket: -111 [ 84.599874][ T5764] usb 3-1: Failed to early initialize device [ 84.624220][ T5717] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.667324][ T5764] usb 3-1: USB disconnect, device number 2 [ 84.702435][ T5784] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.774991][ T5717] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 84.782392][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.782419][ T5717] usb 2-1: Product: syz [ 84.782433][ T5717] usb 2-1: Manufacturer: syz [ 84.782446][ T5717] usb 2-1: SerialNumber: syz [ 84.944673][ T5788] usbip-vudc usbip-vudc.0: gadget not bound [ 84.955957][ T5788] usbip-vudc usbip-vudc.0: gadget not bound [ 84.962544][ T5788] usbip-vudc usbip-vudc.0: gadget not bound [ 84.973052][ T5788] usbip-vudc usbip-vudc.0: gadget not bound [ 84.980451][ T5788] usbip-vudc usbip-vudc.0: gadget not bound [ 84.989829][ T5788] usbip-vudc usbip-vudc.0: gadget not bound [ 84.996466][ T5788] usbip-vudc usbip-vudc.0: gadget not bound [ 85.002708][ T5788] usbip-vudc usbip-vudc.0: gadget not bound [ 85.009549][ T5788] usbip-vudc usbip-vudc.0: gadget not bound [ 85.016010][ T5788] usbip-vudc usbip-vudc.0: gadget not bound [ 85.023335][ T5788] usbip-vudc usbip-vudc.0: gadget not bound [ 85.031467][ T5788] usbip-vudc usbip-vudc.0: gadget not bound [ 85.042537][ T5788] usbip-vudc usbip-vudc.0: gadget not bound [ 85.067938][ T5788] usbip-vudc usbip-vudc.0: gadget not bound [ 85.072043][ T5788] usbip-vudc usbip-vudc.0: gadget not bound [ 85.072436][ T5788] usbip-vudc usbip-vudc.0: gadget not bound [ 85.074233][ T5788] usbip-vudc usbip-vudc.0: gadget not bound [ 85.081419][ T5788] usbip-vudc usbip-vudc.0: gadget not bound [ 85.228007][ T5793] i2c i2c-0: new_device: Instantiated device isp1301 at 0x29 [ 85.265944][ T5795] loop0: detected capacity change from 0 to 16384 [ 85.336102][ T5795] loop0: p1 [ 85.363620][ T25] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 85.381070][ T5796] loop0: p1 [ 85.468728][ T5630] udevd[5630]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 85.521814][ T5630] udevd[5630]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 85.538160][ T25] usb 4-1: New USB device found, idVendor=0710, idProduct=0001, bcdDevice= 0.01 [ 85.552426][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.552468][ T25] usb 4-1: Product: syz [ 85.552497][ T25] usb 4-1: Manufacturer: syz [ 85.552514][ T25] usb 4-1: SerialNumber: syz [ 85.646689][ T5803] oxu210hp-hcd pcspkr: error -ENXIO: IRQ index 0 not found [ 85.714555][ T943] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.728295][ T25] usb 4-1: Direct firmware load for whiteheat_loader.fw failed with error -2 [ 85.739277][ T25] usb 4-1: Falling back to sysfs fallback for: whiteheat_loader.fw [ 85.894620][ T943] usb 1-1: New USB device found, idVendor=0bda, idProduct=2831, bcdDevice= 1.00 [ 85.901033][ T943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.901061][ T943] usb 1-1: Product: syz [ 85.901075][ T943] usb 1-1: Manufacturer: syz [ 85.901089][ T943] usb 1-1: SerialNumber: syz [ 86.093736][ T5701] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.115919][ T943] usb 1-1: dvb_usb_v2: found a 'Realtek RTL2831U reference design' in warm state [ 86.143741][ T5625] Bluetooth: hci2: command tx timeout [ 86.143756][ T5621] Bluetooth: hci3: command tx timeout [ 86.143801][ T5625] Bluetooth: hci0: command tx timeout [ 86.224133][ T5624] Bluetooth: hci1: command tx timeout [ 86.244340][ T5701] usb 3-1: New USB device found, idVendor=1ceb, idProduct=3000, bcdDevice= 0.00 [ 86.247902][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.247931][ T5701] usb 3-1: Product: syz [ 86.247945][ T5701] usb 3-1: Manufacturer: syz [ 86.247981][ T5701] usb 3-1: SerialNumber: syz [ 86.755857][ T5814] kvm: user requested TSC rate below hardware speed [ 86.879610][ T9] cfg80211: failed to load regulatory.db [ 87.291389][ T5717] snd-usb-6fire 2-1:1.0: can't set first interface. [ 87.302943][ T5717] snd-usb-6fire 2-1:1.0: probe with driver snd-usb-6fire failed with error -5 [ 87.319580][ T5717] usb 2-1: USB disconnect, device number 2 [ 87.858027][ T5824] loop0: detected capacity change from 0 to 16384 [ 87.898329][ T5824] loop0: p1 [ 88.232034][ T5832] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 88.279207][ T767] nvmet: Created nvm controller 2 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:b7aa27c9-de9f-4209-a997-586e0efa367d. [ 88.300370][ T5832] nvme nvme1: creating 2 I/O queues. [ 88.311013][ T5832] nvme nvme1: new ctrl: "testsubsys" [ 88.603628][ T5716] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.754929][ T5716] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.756017][ T5716] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.756046][ T5716] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.756067][ T5716] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 88.756106][ T5716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.759111][ T5716] usb 2-1: config 0 descriptor?? [ 88.871076][ T5717] usb 3-1: USB disconnect, device number 3 [ 88.946303][ T943] dvb_usb_rtl28xxu 1-1:1.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 89.142739][ T943] usb 1-1: USB disconnect, device number 2 [ 89.174970][ T5716] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 89.175023][ T5716] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 89.176606][ T5716] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 89.176638][ T5716] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 89.176665][ T5716] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 89.176689][ T5716] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 89.176714][ T5716] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 89.176739][ T5716] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 89.176764][ T5716] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 89.176788][ T5716] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 89.219201][ T5716] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 89.346412][ T5717] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 89.433639][ T943] usb 2-1: USB disconnect, device number 3 [ 89.793939][ T5844] PM: suspend entry (deep) [ 90.245226][ T60] Filesystems sync: 0.446 seconds [ 90.440738][ T5858] zonefs (nullb0) ERROR: Not a zoned block device [ 90.521563][ T5717] usb 3-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 1.00 [ 90.522459][ T5717] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 90.522493][ T5717] usb 3-1: can't read configurations, error -71 [ 90.612262][ T5844] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 90.613752][ T5844] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 90.629495][ T5844] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 90.639006][ T5844] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 90.639367][ T5844] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 90.655906][ T5844] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 90.665189][ T5844] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 90.671327][ T5844] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 90.678941][ T5844] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 90.689645][ T5844] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 90.690045][ T5844] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 90.706183][ T5844] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 91.177111][ T5879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.240642][ T5879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.256306][ T943] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 91.266439][ T943] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 91.330527][ T5880] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 91.330707][ T5880] udc dummy_udc.0: failed to start g1: -19 [ 91.337270][ T5880] UDC core: g1: couldn't find an available UDC or it's busy [ 91.348422][ T5879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.384957][ T59] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 91.493962][ T38] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 91.604397][ T1284] wlan1: authentication with 08:02:11:00:00:00 timed out [ 91.932090][ T5900] process 'syz.1.55' launched './file0' with NULL argv: empty string added [ 91.987620][ T5902] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 91.988284][ T5902] udc dummy_udc.0: failed to start g1: -19 [ 91.993418][ T5902] UDC core: g1: couldn't find an available UDC or it's busy [ 92.005436][ T5717] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 92.155370][ T5717] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 92.156525][ T5717] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 92.156552][ T5717] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 92.156574][ T5717] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 92.156596][ T5717] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 92.157504][ T5717] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 92.157529][ T5717] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 92.157551][ T5717] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 92.157573][ T5717] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 92.159651][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.159674][ T5717] usb 3-1: Product: syz [ 92.159688][ T5717] usb 3-1: Manufacturer: syz [ 92.159701][ T5717] usb 3-1: SerialNumber: syz [ 92.163357][ T5896] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 92.163593][ T5896] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 92.163692][ T5896] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 92.163809][ T5896] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 92.173622][ T5717] ti_usb_3410_5052 3-1:1.0: TI USB 5052 2 port adapter converter detected [ 92.353643][ T5701] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 92.463673][ T5624] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.504073][ T5701] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 92.513878][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.513907][ T5701] usb 2-1: Product: syz [ 92.513932][ T5701] usb 2-1: Manufacturer: syz [ 92.513951][ T5701] usb 2-1: SerialNumber: syz [ 92.703780][ T5621] Bluetooth: hci1: command 0x0c1a tx timeout [ 92.704923][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 92.706699][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 93.372429][ T5717] usb 3-1: USB disconnect, device number 6 [ 93.937908][ T5906] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 93.949857][ T5906] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 93.958389][ T5906] CPU: 0 UID: 0 PID: 5906 Comm: syz.3.58 Tainted: G S syzkaller #0 PREEMPT(full) [ 93.969162][ T5906] Tainted: [S]=CPU_OUT_OF_SPEC [ 93.973922][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.983982][ T5906] RIP: 0010:wcove_typec_probe+0xd5/0x570 [ 93.989664][ T5906] Code: 27 00 74 13 49 8d be 88 00 00 00 e8 a5 24 48 fa 49 8d 86 88 00 00 00 48 89 6c 24 18 48 89 28 49 83 c5 08 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 8c 23 48 fa 49 8b 6d 00 4d 8d ae [ 94.009286][ T5906] RSP: 0018:ffffc90005187aa8 EFLAGS: 00010202 [ 94.015402][ T5906] RAX: 0000000000000001 RBX: ffff88801db37000 RCX: 0000000000000001 [ 94.023382][ T5906] RDX: ffffffff9af9c840 RSI: ffffffff8cd82280 RDI: ffff88803272dc98 [ 94.031364][ T5906] RBP: ffff88801db37010 R08: 0000000000000004 R09: 0000000000000000 [ 94.039348][ T5906] R10: dffffc0000000000 R11: ffffed10064e5b91 R12: dffffc0000000000 [ 94.047328][ T5906] R13: 0000000000000008 R14: ffff88803272dc38 R15: 1ffff110064e5b98 [ 94.055313][ T5906] FS: 00007f428c68d6c0(0000) GS:ffff8881248ab000(0000) knlGS:0000000000000000 [ 94.064287][ T5906] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.071318][ T5906] CR2: 00007f428c68cff8 CR3: 0000000078f46000 CR4: 00000000003526f0 [ 94.079303][ T5906] Call Trace: [ 94.082618][ T5906] [ 94.085561][ T5906] ? __pfx_wcove_typec_probe+0x10/0x10 [ 94.091030][ T5906] platform_probe+0xf9/0x190 [ 94.095636][ T5906] ? __pfx_platform_probe+0x10/0x10 [ 94.100845][ T5906] really_probe+0x254/0xae0 [ 94.105366][ T5906] __driver_probe_device+0x1e8/0x360 [ 94.110667][ T5906] device_driver_attach+0xe0/0x1d0 [ 94.115800][ T5906] bind_store+0x1d0/0x220 [ 94.120181][ T5906] ? __pfx_sysfs_kf_write+0x10/0x10 [ 94.125388][ T5906] kernfs_fop_write_iter+0x3a4/0x540 [ 94.130687][ T5906] vfs_write+0x612/0xba0 [ 94.134946][ T5906] ? __pfx_vfs_write+0x10/0x10 [ 94.139729][ T5906] ? __fget_files+0x2a/0x420 [ 94.144337][ T5906] ksys_write+0x150/0x270 [ 94.148673][ T5906] ? __pfx_ksys_write+0x10/0x10 [ 94.153528][ T5906] do_syscall_64+0x166/0x520 [ 94.158138][ T5906] ? trace_irq_disable+0x3b/0x140 [ 94.163176][ T5906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.169258][ T5906] ? clear_bhb_loop+0x70/0xc0 [ 94.173943][ T5906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.179939][ T5906] RIP: 0033:0x7f428b79e0d9 [ 94.184411][ T5906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.204036][ T5906] RSP: 002b:00007f428c68d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.212548][ T5906] RAX: ffffffffffffffda RBX: 00007f428ba25fa0 RCX: 00007f428b79e0d9 [ 94.220556][ T5906] RDX: 0000000000000007 RSI: 0000200000000400 RDI: 0000000000000003 [ 94.228633][ T5906] RBP: 00007f428b835024 R08: 0000000000000000 R09: 0000000000000000 [ 94.236626][ T5906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.244603][ T5906] R13: 00007f428ba26038 R14: 00007f428ba25fa0 R15: 00007ffd16c3c268 [ 94.252707][ T5906] [ 94.255765][ T5906] Modules linked in: [ 94.260823][ T5906] ---[ end trace 0000000000000000 ]--- [ 94.270829][ T5906] RIP: 0010:wcove_typec_probe+0xd5/0x570 [ 94.277835][ T5906] Code: 27 00 74 13 49 8d be 88 00 00 00 e8 a5 24 48 fa 49 8d 86 88 00 00 00 48 89 6c 24 18 48 89 28 49 83 c5 08 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 8c ** replaying previous printk message ** [ 94.277835][ T5906] Code: 27 00 74 13 49 8d be 88 00 00 00 e8 a5 24 48 fa 49 8d 86 88 00 00 00 48 89 6c 24 18 48 89 28 49 83 c5 08 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 8c 23 48 fa 49 8b 6d 00 4d 8d ae [ 94.293665][ T5906] RSP: 0018:ffffc90005187aa8 EFLAGS: 00010202 [ 94.293693][ T5906] RAX: 0000000000000001 RBX: ffff88801db37000 RCX: 0000000000000001 [ 94.293708][ T5906] RDX: ffffffff9af9c840 RSI: ffffffff8cd82280 RDI: ffff88803272dc98 [ 94.293723][ T5906] RBP: ffff88801db37010 R08: 0000000000000004 R09: 0000000000000000 [ 94.293735][ T5906] R10: dffffc0000000000 R11: ffffed10064e5b91 R12: dffffc0000000000 [ 94.293751][ T5906] R13: 0000000000000008 R14: ffff88803272dc38 R15: 1ffff110064e5b98 [ 94.293765][ T5906] FS: 00007f428c68d6c0(0000) GS:ffff8881248ab000(0000) knlGS:0000000000000000 [ 94.293781][ T5906] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.293795][ T5906] CR2: 00007ffefdc41bc0 CR3: 0000000078f46000 CR4: 00000000003526f0 [ 94.293815][ T5906] Kernel panic - not syncing: Fatal exception [ 94.393877][ T5906] Kernel Offset: disabled [ 94.398211][ T5906] Rebooting in 86400 seconds..